The invention provides a multi-stage desensitization
electricity charge sensitive data
protection system, belongs to the technical field of
information security in the power industry, and relates to a full-life-cycle protection scheme of sensitive data such as an identity
label, account information and contact information in an
electricity charge
service system. The problems that in the prior art, only simple masking or full-table
encryption is carried out on a
database layer, the desensitization dimension is single, multiple links are prone to leakage, no role fine-grained desensitization strategy exists, and exported files are difficult to trace are solved. The
system comprises a
data acquisition source and acquisition layer desensitization, a transmission layer
encryption, a storage layer transparent
encryption, an API gateway, a desensitization strategy center, a front-end dynamic
mask, a
watermark export, a log desensitization plug-in and an auditing log module, covers the whole process from
data acquisition to log auditing, dynamically regulates and controls
data display according to roles, and exports a file embedded identity
watermark. And desensitizing the log and reserving operation marks. Full-link leakage prevention, fine-grained permission control and leakage
traceability can be realized, and the transformation cost is low.