The invention discloses a
data security management method and
system. The method comprises the following steps: receiving a target request for first data; if the request is a write request, analyzing the first data based on a preset sensitive
data identification rule, determining whether to encrypt the first data according to an analysis result, if the first
data needs to be encrypted, encrypting the first data based on a preset
encryption strategy and a newly updated data
encryption key to obtain second data, and writing the second data into a
storage area, feeding back a writing result; if the request is a read request, detecting whether the first data is encrypted, if the first data is encrypted, reading encrypted second data corresponding to the first data from the
storage area, and decrypting the read second data based on a preset
encryption strategy and a data encryption key in use to obtain the first data, and feeding back a reading result to the target
object based on the access permission of the target object. The technical problems that a traditional
data management scheme is low in
automation degree and response efficiency and not high in safety are solved.