Server-Side Sensitive Information Masking for Web Page Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional methods for protecting sensitive information in web pages are inadequate, as they do not effectively prevent unauthorized access to sensitive data, even when JavaScript processing is employed, allowing illegal users to extract sensitive information by capturing data packets or deleting scripts.
Innovation Solution
A method and device for sensitive information processing that acquires and processes variable information in a page using an MVC framework, determining sensitivity based on a library and applying specific strategies according to user privileges, ensuring that sensitive information is masked or transformed before being returned to the client, thus enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If JavaScript scripting is used to mask or encrypt sensitive information in the page, then the sensitivity protection is improved, but the security is worsened because illegal users can still delete or stop the script to acquire the information
Solution Approach 1:
The patent introduces a server-side intermediary component that acts as a mediator between the data source and the client. The server processes and masks sensitive information before returning it to the client, eliminating the need for client-side JavaScript protection. This intermediary architecture ensures that sensitive data is never exposed in plaintext on the client side, making it impossible for users to extract by simply deleting or stopping scripts.
2Ease of operation
If sensitive information is returned in original form to the client, then the ease of operation is improved, but the security is worsened due to easy extraction by illegal users
Solution Approach 1:
The patent applies local quality by treating different types of information differently. Sensitive information is masked or encrypted on the server side before being returned to the client, while non-sensitive information remains in its original form. This selective processing maintains ease of operation for legitimate users who need the data, while simultaneously improving security by ensuring sensitive data is never exposed in plaintext on the client side.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present application provides a sensitive information processing method, device and server, and a security determination system. The method includes: acquiring to-be-processed information in a page; determining whether the to-be-processed information is sensitive information according to a preset sensitive information identification strategy; performing processing according to a preset sensitive information processing strategy when the to-be-processed information is sensitive information, to form processed sensitive information; and substituting the corresponding to-be-processed information in the page with the processed sensitive information, to form a page with the processed sensitive information. By using the embodiments of the present application, identification and processing for sensitive information in a page returned to a user may be completed on a server terminal, which improves the security of the sensitive information in the page.