CN108664812A - Information desensitization method, device and system - Google Patents

Abstract

The embodiment of the application provides an information desensitization method, an information desensitization device and a system, wherein the information desensitization device corresponds to a service system, and the method comprises the following steps: receiving a desensitization request sent by a service system; the desensitization request carries a field to be desensitized and a target service type to which the field to be desensitized belongs; searching a desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized; and performing desensitization processing on the field to be desensitized by using the desensitization rule.

Description

Information desensitization method, device and system

technical field

The present application relates to the field of information processing, and in particular to an information desensitization method, device and system.

Background technique

With the rapid development of information technology, terminal devices such as mobile phones, tablet computers, and computers have been widely used in people's lives and work, and more and more users have begun to use terminal devices to handle business online.

When a user handles business online using a terminal device, most of the business is handled through the business system installed on the terminal device. When a user uses the business system to conduct business, it generally needs to register, log in, and handle business in the business system, and in each link, the user's personal information is generally filled in, such as mobile phone number, password, identity ID number, email address, etc. Among these personal information, there will be some sensitive data such as user privacy information. When designing or maintaining the system, it is often necessary to print some user information logs for reference. When printing the log, the user privacy data designed in the log must be It can be printed after desensitization treatment.

Therefore, it is urgent to propose an information desensitization method to desensitize the sensitive information involved in the business system.

Contents of the invention

The purpose of the embodiment of the present application is to provide an information desensitization method, device and system, the method is applied to the information desensitization device corresponding to the business system, and can desensitize the sensitive fields involved in each business type under the business system and, the desensitization request sent by the received business system carries the field to be desensitized and the target business type to which the field to be desensitized belongs, so that the field to be desensitized and the target business type to which it belongs can be uniquely determined. The desensitization rules corresponding to the desensitization fields make desensitization more accurate.

In order to solve the above technical problems, the embodiment of the present application is implemented as follows:

An embodiment of the present application provides an information desensitization method, which is applied to an information desensitization device corresponding to a business system, and the method includes:

receiving the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs;

Searching for a desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized;

The desensitization process is performed on the field to be desensitized by using the desensitization rule.

The embodiment of the present application also provides an information desensitization device, which includes:

The receiving module receives the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target business type to which the field to be desensitized belongs; the information desensitization device corresponds to the business system ;

A search module, searching for a desensitization rule corresponding to the field to be desensitized according to the target business type and the field to be desensitized;

A desensitization module, which uses the desensitization rule to desensitize the field to be desensitized.

The embodiment of the present application also provides an information desensitization system, including: a business system and an information desensitization device;

The business system is configured to send a desensitization request to the information desensitization device; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs;

An information desensitization device, configured to receive the desensitization request, and according to the target service type and the field to be desensitized, find a desensitization rule corresponding to the field to be desensitized; and use the desensitization rule to The field to be desensitized is desensitized.

The embodiment of the present application also provides an information desensitization device, including:

processor; and

A memory arranged to store computer-executable instructions that, when executed, cause the processor to:

receiving the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs;

Searching for a desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized;

The desensitization process is performed on the field to be desensitized by using the desensitization rule.

The embodiment of the present application also provides a storage medium for storing computer-executable instructions, and the executable instructions implement the following process when executed:

receiving the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs;

Searching for a desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized;

The desensitization process is performed on the field to be desensitized by using the desensitization rule.

Through the technical solution in this embodiment, the sensitive fields involved in each business type under the business system can be desensitized; and the received desensitization request sent by the business system carries the field to be desensitized and the field to be desensitized The target business type to which the field pair belongs, so that the desensitization rule corresponding to the field to be desensitized can be uniquely determined according to the field to be desensitized and the target business type to which it belongs, so that the accuracy of desensitization is higher.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments described in this application. Those skilled in the art can also obtain other drawings based on these drawings without any creative effort.

Fig. 1 is the flow chart of the first method of the information desensitization method provided by the embodiment of the present application;

FIG. 2 is a flow chart of the second method of the information desensitization method provided in the embodiment of the present application;

Fig. 3 is a schematic diagram of the module composition of the information desensitization device provided by the embodiment of the present application;

Fig. 4 is a schematic structural diagram of the information desensitization system provided by the embodiment of the present application;

FIG. 5 is a flow chart of the third method of the information desensitization method provided in the embodiment of the present application;

FIG. 6 is a schematic structural diagram of an information desensitization device provided in an embodiment of the present application.

Detailed ways

In order to enable those skilled in the art to better understand the technical solutions in the present application, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described The embodiments are only some of the embodiments of the present application, but not all of them. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without creative efforts shall fall within the scope of protection of this application.

The embodiment of the present application provides an information desensitization method, which is applied to the information desensitization device corresponding to the business system, and can desensitize the sensitive information involved in the business type corresponding to each functional module in the business system, and is generally used in Various business types of the business system. Specifically, in this embodiment of the application, the information desensitization device is a device that is set independently from the business system.

Figure 1 is a flow chart of the first method of the information desensitization method provided in the embodiment of the present application. The method shown in Figure 1 at least includes the following steps:

Step 102, receiving a desensitization request sent by the service system; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs.

Specifically, the desensitization request sent by the receiving business system in step 102 above may be a desensitization request sent by any functional module of the receiving business system. Generally, different functional modules in the business system are used to handle different types of business, for example, the member registration module of the business system is used to handle the business of the member registration type; the login module of the business system is used to handle the user member login type business.

In a specific implementation, the above-mentioned field to be desensitized generally includes two parts, and the first half of the field to be desensitized is used to describe the type of the field, for example, mobile phone number, email account, password, etc. This part is mainly used It is used to find the desensitization rule corresponding to the field to be desensitized; the second half of the field to be desensitized is the specific field that needs to be desensitized, for example, the content of this part can be a specific mobile phone number, etc., when the desensitized After the rules, use the found desensitization rules to desensitize the specific fields.

For ease of understanding, the following examples will be used for illustration.

For example, the field to be desensitized carried in the desensitization request can be: "Mobile phone number: 18958186671" or "Email: abcdefg@126.com" and so on.

The above target business type may be the business type processed by any functional module in the business system.

Step 104, according to the target service type and the field to be desensitized, look up the desensitization rule corresponding to the field to be desensitized.

Wherein, in the embodiment of the present application, searching for the desensitization rule corresponding to the field to be desensitized is actually searching for the desensitization rule corresponding to the field type in the field to be desensitized. For example, it can be to search for desensitization rules corresponding to mobile phone numbers and email accounts.

Specifically, in the embodiment of the present application, the above step 104, according to the target business type and the field to be desensitized, searches for the desensitization rule corresponding to the field to be desensitized, which specifically includes the following steps:

According to the target business type and the field to be desensitized, find the desensitization rule corresponding to the field to be desensitized under the target business type from the established correspondence between the business type, sensitive field and desensitization rule.

In a specific implementation manner, the sensitive fields in the above correspondence may only be types of sensitive fields, for example, mobile phone numbers, email account numbers, etc., and may not include specific sensitive content.

In this embodiment of the application, the information desensitization device stores the correspondence between business types, sensitive fields, and desensitization rules. When the information desensitization device receives the desensitization request sent by the business system, it carries The field to be desensitized and the target business type are matched with the above correspondence, and whether there is a sensitive field and business type that matches the field to be desensitized and the target business type in the above correspondence, and if there is, the sensitive field and The desensitization rule corresponding to the business type is determined as the desensitization rule corresponding to the field to be desensitized under the target type.

Because there may be multiple functional modules on a business system, each functional module handles different businesses, each business type corresponds to sensitive fields that need to be desensitized, different business types may have the same sensitive fields, and for The same sensitive field may have different desensitization rules corresponding to different business types. Therefore, in this embodiment of the application, when establishing the correspondence between sensitive fields and desensitization rules, the business type to which the sensitive fields belong is taken into consideration, that is, the relationship between the business type, sensitive fields and desensitization rules is established. Therefore, the desensitization rule corresponding to the field to be desensitized can be uniquely determined, so that the determined desensitization rule corresponding to the field to be desensitized has higher accuracy.

In order to facilitate desensitization of information using the method provided by the embodiment of the present application, the desensitization rule corresponding to the field to be desensitized can be determined. Therefore, before performing the above step 102, the method provided by the embodiment of the present application also includes establishing a business Correspondence between types, sensitive fields, and desensitization rules.

Specifically, the establishment of the correspondence between business types, sensitive fields, and desensitization rules above includes the following steps:

Determine the sensitive field identification corresponding to each business type of the business system, and the desensitization rule corresponding to each sensitive field; establish the corresponding relationship between the above business type, the above sensitive field and the above desensitization rule.

Specifically, for a certain business system, you can first determine all the business types in the business system, and then determine the sensitive fields corresponding to each business type, for example, it can be mobile phone number, email account, password, etc. ;Finally determine the desensitization rules corresponding to each sensitive field; and then establish the correspondence between the above business types, sensitive fields and desensitization rules.

In a specific implementation manner, the correspondence between business types, sensitive fields, and desensitization rules may be expressed in the form of a table, as shown in Table 1. Table 1 shows a possible form of the correspondence between service types, sensitive fields and desensitization rules established in the embodiment of the present application.

In Table 1, mark the business type corresponding to each sensitive field. Among them, "mobile_no" in the above Table 1 means "mobile phone number", and any mobile phone number under the membership registration business type can be desensitized using Rule 1. "email" in Table 1 means "email account", and rule 4 can be used to desensitize any email account under the membership registration business type. In addition, the above-mentioned Table 1 is only an illustration, and the specific content of the business type, sensitive fields, and desensitization rules is not limited thereto.

Table 1

business type Sensitive fields desensitization rules Sign Up mobile_no Rule 1 Member Login mobile_no Rule 2 Member Login email Rule 3 Sign Up email Rule 4

In addition, the established correspondence between business types, sensitive fields, and desensitization rules may also be in the form shown in Table 2. Specifically, in Table 2, each sensitive field can be classified according to the business type, and then it is only necessary to mark the business type corresponding to one type of sensitive field.

If the corresponding relationship shown in Table 2 is used, after receiving the desensitization request sent by the business system, the target business type can be matched with the above-mentioned corresponding relationship to find out the business type that matches the target business type. Then, match the fields to be desensitized in the desensitization request with each sensitive field under the business type, find out the sensitive fields that match the fields to be desensitized, and match the sensitive fields that match the fields to be desensitized The desensitization rule of is determined as the desensitization rule corresponding to the field to be desensitized under the target business type.

Table 2

In addition, in a specific implementation manner, multiple tables can also be established, and a table stores the corresponding relationship between sensitive fields and desensitization rules under a business type, and then, each table can be identified by using the business type. name. In this way, when the information desensitization device receives the desensitization request sent by the business system, it first searches for the table corresponding to the target business type according to the target business type in the desensitization request, and then searches the table for the field to be desensitized Corresponding desensitization rules.

Or, in another specific implementation manner, multiple tables can also be established, one table stores a desensitization rule corresponding to a sensitive field under each business type, and then each table can be named by using the sensitive field. In this way, when the information desensitization device receives the desensitization request sent by the business system, it first finds the table corresponding to the sensitive field matching the field to be desensitized, and then searches the table for the desensitization request corresponding to the target business type. rule.

The foregoing only lists several possible implementations of the correspondence between business types, sensitive fields, and desensitization rules. Of course, the specific implementation of the correspondence is not limited thereto, and the embodiments of the present application will not list them one by one.

Step 106, desensitize the field to be desensitized by using the above desensitization rule.

In the embodiment of the present application, if the desensitization rule corresponding to the field to be desensitized is found, the desensitization rule is used to desensitize the field to be desensitized.

Specifically, in the embodiment of this application, each desensitization rule is represented by a regular expression;

Correspondingly, in step 106, use desensitization rules to desensitize the fields to be desensitized, including:

Analyze the regular expression to determine the meaning expressed by the regular expression; desensitize the desensitized field according to the meaning obtained by the analysis.

In the embodiment of the present application, the meaning represented by the regular expression can be determined according to the meaning represented by each symbol in the regular expression.

In order to facilitate understanding of the solutions provided in the embodiments of the present application, the following examples will be used for illustration. For example, in the embodiment of the present application, Table 3 shows the corresponding relationship between a specific business type, sensitive fields and desensitization rules stored in the information desensitization device.

table 3

business type sensitive field desensitization rules Sign Up mobile_no [0-9]{1}[*]{9}[0-9]{1} Member Login email [0-9][a-z]{1}*{9}[0-9][a-z]{1}

When the information desensitization device receives the business type in the desensitization request sent by the business system as "member registration" and the field to be desensitized as "mobile_no:"18958186671", according to the corresponding relationship in Table 1 above, it can It is determined that under the "Member Registration" type, the desensitization rule corresponding to the mobile phone number is "[0-9]{1}[*]{9}[0-9]{1}", so use this desensitization rule After desensitizing the above mobile phone number, the obtained field is "1********1"; when the information desensitization device receives the desensitization request sent by the business system, the business type carried in it is "member login ", the field to be desensitized is identified as "email:abcdefg@126.com, according to the corresponding relationship in Table 1 above, it can be determined that under the "member login" type, the desensitization rule corresponding to the email account is "[0 -9][a-z]{1}*{9}[0-9][a-z]{1}", therefore, after using this desensitization rule to desensitize the above email account, the field obtained is "a** *************m".

Of course, the above Table 3 and the examples based on Table 3 are all illustrative descriptions, and do not constitute a limitation to the embodiment of the present application.

In the embodiment of the present application, after the information desensitization device desensitizes the field to be desensitized, it sends the desensitized field to the business system.

In addition, in the embodiment of the present application, if the desensitization rule corresponding to the field to be desensitized is not found after the above step 104, the information desensitization device sends a prompt message to the business system; wherein, the prompt message is used to prompt that there is no The desensitization rule corresponding to the field to be desensitized.

Specifically, if the desensitization rule corresponding to the field to be desensitized under the target business type is not found in the above correspondence, the information desensitization device sends a prompt message to the business system, and the prompt message is used to prompt the business system There is no desensitization rule corresponding to the field to be desensitized under the target business type in .

After the service system receives the prompt information sent by the information desensitization device, it checks whether the target service type or the field to be desensitized sent to the information desensitization device is wrong.

Specifically, in this embodiment of the application, the desensitization request received by the information desensitization device may carry one field to be desensitized, or may carry multiple fields to be desensitized. The number of fields carried in is limited.

In addition, in the embodiment of this application, when there are newly added sensitive fields in one or more business types under the business system, it is necessary to check the correspondence between the business types, sensitive fields and desensitization rules stored in the information desensitization device To update, therefore, the method provided in the embodiment of the present application also includes:

Obtain the newly added sensitive field; determine the business type to which the newly added sensitive field belongs and the desensitization rule corresponding to the newly added sensitive field; according to the newly added sensitive field, the business type to which the newly added sensitive field belongs and the newly added sensitive field The desensitization rules corresponding to the fields, and update the above correspondence.

In the embodiment of this application, since the information desensitization device is a device independent of the business system, the information desensitization device can desensitize the information in the entire business system, thus avoiding the A desensitization device for the functional module is set under the functional module, so that when there is a newly added sensitive field, it only needs to update the information sensitive device once, avoiding the need to update each functional module with the newly added field The corresponding desensitization device realizes the convenient and fast updating of the information desensitization device.

In order to facilitate the understanding of the information desensitization method provided by the embodiment of this application, the following will introduce the information desensitization method provided by the embodiment of this application through specific examples by taking the mobile phone number under the member registration service type as the field to be desensitized. Figure 2 is a flow chart of the second method of the information desensitization method provided in the embodiment of the present application. The method shown in Figure 2 includes at least the following steps:

Step 202, receiving the desensitization request sent by the business system, the desensitization request carrying the field to be desensitized and the membership registration service identifier.

Wherein, the above-mentioned member registration business identifier may be the name of the business type, for example: "member registration" or "registration" and so on; the above-mentioned field to be desensitized includes the type of the field and the specific content to be desensitized. In this embodiment, the type of the above field is a mobile phone number, and the specific content to be desensitized is the 11-digit mobile phone number that needs to be desensitized.

Step 204, find out whether there is a desensitization rule corresponding to the mobile phone number under the member registration business type in the pre-established correspondence between business types, sensitive fields and desensitization rules; if yes, perform step 206; otherwise, perform step 212.

Step 206, obtain the desensitization rule corresponding to the mobile phone number to be desensitized.

Wherein, the above desensitization rules are represented by regular expressions.

Step 208, use the above desensitization rule to desensitize the mobile phone number to be desensitized.

Step 210, sending the desensitized fields to the business system.

Step 212, sending prompt information to the service system, the prompt information is used to prompt that there is no desensitization rule corresponding to the mobile phone number to be desensitized.

The information desensitization method provided by the embodiment of this application can desensitize the sensitive fields involved in each business type under the business system; and the received desensitization request sent by the business system carries the field to be desensitized and the The target business type to which the desensitization field belongs, so that the desensitization rule corresponding to the field to be desensitized can be uniquely determined according to the field to be desensitized and the target business type to which it belongs, so that the accuracy of desensitization is higher.

Corresponding to the information desensitization method provided in the embodiment of the present application, based on the same idea, the embodiment of the present application also provides an information desensitization device, which is used to implement the information desensitization method provided in the above embodiment. FIG. 3 shows A schematic diagram of the module composition of the information desensitization device provided in the embodiment of the present application. The device shown in Figure 3 includes:

The receiving module 301 is used to receive the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target business type to which the field to be desensitized belongs; the above-mentioned information desensitization device corresponds to the business system;

A search module 302, configured to search for a desensitization rule corresponding to the field to be desensitized according to the above-mentioned target business type and the field to be desensitized;

The desensitization module 303 is configured to desensitize the field to be desensitized by using the above desensitization rule.

Optionally, the above search module 302 is specifically used for:

According to the above-mentioned target business type and the above-mentioned fields to be desensitized, from the established correspondence between the business type, sensitive fields and desensitization rules, find the desensitization rules corresponding to the fields to be desensitized under the target business type.

Optionally, the device provided in the embodiment of the present application further includes:

The first determination module is configured to determine the sensitive fields corresponding to each business type under the business system, and the desensitization rules corresponding to each sensitive field;

The establishment module is used to establish the corresponding relationship between business types, sensitive fields and desensitization rules.

Optionally, the device provided in the embodiment of the present application further includes:

Acquisition module, used to obtain newly added sensitive fields;

The second determining module is used to determine the business type to which the newly added sensitive field belongs and the desensitization rule corresponding to the newly added sensitive field;

An update module, configured to update the corresponding relationship according to the newly added sensitive field, the business type to which the newly added sensitive field belongs, and the desensitization rule corresponding to the newly added sensitive field.

Optionally, the device provided in the embodiment of the present application further includes:

The first sending module is configured to send prompt information to the business system if no desensitization rule corresponding to the field to be desensitized is found; wherein, the prompt message is used to prompt that there is no desensitization rule corresponding to the field to be desensitized.

Optionally, the above desensitization rules are represented by regular expressions;

Correspondingly, the above desensitization module 303 is specifically used for:

Analyze the above regular expression to determine the meaning expressed by the regular expression; desensitize the desensitized field according to the meaning obtained by the analysis.

Optionally, the device provided in the embodiment of the present application further includes:

The second sending module is configured to send the desensitized fields to the business system.

The information desensitization device provided in the embodiment of the present application can realize the various processes and steps that can be realized by the information desensitization method in the method embodiment corresponding to Fig. 1 and Fig. 2. The specific implementation process of each module can refer to the above method embodiment, here No longer.

The information desensitization device provided by the embodiment of this application can desensitize the sensitive fields involved in each business type under the business system; and the received desensitization request sent by the business system carries the field to be desensitized and the The target business type to which the desensitization field belongs, so that the desensitization rule corresponding to the field to be desensitized can be uniquely determined according to the field to be desensitized and the target business type to which it belongs, so that the accuracy of desensitization is higher.

Based on the information desensitization method provided by the embodiment of the present application, the embodiment of the present application also provides an information desensitization system. Figure 4 is a schematic structural diagram of the information desensitization system provided by the embodiment of the present application, for the system shown in Figure 4 , the specific implementation principle, the specific execution process of each module and its composition can refer to the information desensitization method provided in the embodiment of the present application, and the specific implementation process will not be repeated. The information desensitization system shown in Figure 4 includes: a business system 401 and an information desensitization device 402;

Wherein, the above-mentioned business system 401 is configured to send a desensitization request to the information desensitization device 402; wherein, the desensitization request carries the field to be desensitized and the target business type to which the field to be desensitized belongs;

The above-mentioned information desensitization device 402 is configured to receive the above-mentioned desensitization request, and according to the above-mentioned target business type and the field to be desensitized, find a desensitization rule corresponding to the field to be desensitized; and use the desensitization rule to desensitize the field to be desensitized Sensitive handling.

Optionally, the above-mentioned information desensitization device 402 is specifically used for:

According to the target business type and the field to be desensitized, find the desensitization rule corresponding to the field to be desensitized under the target business type from the established correspondence between the business type, the sensitive field and the desensitization rule.

Optionally, the above-mentioned information desensitization device 402 is also used for:

Determine the sensitive fields corresponding to each business type in the business system, and the desensitization rules corresponding to each sensitive field; establish the correspondence between the above business types, sensitive fields and desensitization rules.

Optionally, the above-mentioned information desensitization device 402 is also used for:

Obtain the newly added sensitive field; determine the business type to which the newly added sensitive field belongs and the desensitization rule corresponding to the newly added sensitive field; according to the newly added sensitive field, the business type to which the newly added sensitive field belongs and the newly added sensitive field The desensitization rules corresponding to the fields, and update the above correspondence.

Optionally, the above-mentioned information desensitization device 402 is also used for:

If no desensitization rule corresponding to the field to be desensitized is found, a prompt message is sent to the business system; wherein, the above prompt message is used to prompt that there is no desensitization rule corresponding to the field to be desensitized.

Optionally, the above desensitization rules are represented by regular expressions;

Correspondingly, the above-mentioned information desensitization device 402 is specifically used for:

Analyze the above regular expression to determine the meaning expressed by the regular expression; desensitize the desensitized field according to the meaning obtained by the analysis.

Optionally, the above-mentioned information desensitization device 402 is also used for:

The desensitized fields are sent to the business system 401 .

In order to facilitate understanding of the information desensitization system provided in the embodiment of the present application, the information desensitization method provided in the embodiment of the present application will be described below in conjunction with the information desensitization system.

Fig. 5 shows a flow chart of the third method of the information desensitization method provided by the embodiment of the present application. This method is applied to the information desensitization system and is completed by the interaction between the business system and the information desensitization device in the information desensitization system. The method shown in Figure 5 at least includes the following steps:

Step 502, the terminal device sends a registration request to the service system, and the registration request carries user information.

Specifically, in step 502, the user terminal device registers as a member in a certain service system, fills in user information, and sends the user information to the service system in a registration request.

Wherein, the above-mentioned terminal device may be a mobile phone, a tablet computer, a computer, and the like.

Step 504, the service system determines the field to be desensitized in the above user information.

Step 506, the business system sends a desensitization request to the information desensitization device, and the desensitization request carries the field to be desensitized and the membership registration service identifier.

Step 508: After receiving the desensitization request sent by the business system, the information desensitization device searches whether there is a desensitization rule corresponding to the field to be desensitized under the member registration service; if yes, execute step 510; otherwise, execute step 514.

Step 510, the information desensitization device uses the desensitization rule to desensitize the field to be desensitized.

Step 512, the information desensitization device sends the fields obtained after desensitization processing to the business system.

Step 514, the information desensitization device sends prompt information to the business system, and the prompt information is used to prompt that there is no desensitization rule corresponding to the field to be desensitized.

The information desensitization system provided by the embodiment of this application can desensitize the sensitive fields involved in each business type under the business system; and the received desensitization request sent by the business system carries the field to be desensitized and the The target business type to which the desensitization field belongs, so that the desensitization rule corresponding to the field to be desensitized can be uniquely determined according to the field to be desensitized and the target business type to which it belongs, so that the accuracy of desensitization is higher;

In addition, in the embodiment of this application, an information desensitization device independent of the business system is used to desensitize the field to be desensitized in the business system, and the information desensitization device can desensitize the information in the entire business system, so , to avoid setting a desensitization device for each functional module in the business system, so that when there is a newly added sensitive field, it is only necessary to update the information sensitive device once, avoiding the need to update The desensitization device corresponding to each functional module having the newly added field realizes convenient and fast updating of the information desensitization device.

Further, based on the methods shown in FIGS. 1 to 2 above, an embodiment of the present application also provides an information desensitization device, as shown in FIG. 6 .

The information desensitization device may have relatively large differences due to different configurations or performances, and may include one or more processors 601 and memory 602, and one or more storage applications or data may be stored in the memory 602. Wherein, the storage 602 may be a short-term storage or a persistent storage. The application program stored in the memory 602 may include one or more modules (not shown in the figure), and each module may include a series of computer-executable instructions in the information desensitization device. Furthermore, the processor 601 may be configured to communicate with the memory 602, and execute a series of computer-executable instructions in the memory 602 on the information desensitization device. The information desensitization device may also include one or more power sources 603, one or more wired or wireless network interfaces 604, one or more input and output interfaces 605, one or more keyboards 606, and the like.

In a specific embodiment, the information desensitization device includes a memory, and one or more programs, wherein one or more programs are stored in the memory, and one or more programs may include one or more modules, and Each module may include a series of computer-executable instructions in the information desensitization device, and the one or more programs configured to be executed by one or more processors include computer-executable instructions for performing the following:

Receive the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target business type to which the field to be desensitized belongs;

Find the desensitization rule corresponding to the field to be desensitized according to the target business type and the field to be desensitized;

Use the above desensitization rules to desensitize the fields to be desensitized.

Optionally, when the computer-executable instructions are executed, according to the target business type and the field to be desensitized, the desensitization rule corresponding to the field to be desensitized is searched, including:

According to the target business type and the field to be desensitized, find the desensitization rule corresponding to the field to be desensitized under the target business type from the established correspondence between the business type, sensitive field and desensitization rule.

Optionally, when the computer-executable instructions are executed, before receiving the desensitization request sent by the business system, it may further include:

Determine the sensitive fields corresponding to each business type under the business system, and the desensitization rules corresponding to each sensitive field;

Establish correspondence between business types, sensitive fields, and desensitization rules.

Optionally, when executed, the computer-executable instructions further include:

Obtain newly added sensitive fields;

Determine the business type to which the newly added sensitive fields belong and the desensitization rules corresponding to the newly added sensitive fields;

The above corresponding relationship is updated according to the newly added sensitive field, the service type to which the newly added sensitive field belongs, and the desensitization rule corresponding to the newly added sensitive field.

Optionally, when executed, the computer-executable instructions further include:

If no desensitization rule corresponding to the field to be desensitized is found, a prompt message is sent to the business system; wherein, the prompt message is used to prompt that there is no desensitization rule corresponding to the field to be desensitized.

Optionally, when the computer-executable instructions are executed, the desensitization rules are represented by regular expressions;

Use the desensitization rules to desensitize the fields to be desensitized, including:

Analyze the regular expression to determine the meaning represented by the regular expression;

Desensitize the desensitized field according to the meaning obtained by parsing.

Optionally, when the computer-executable instructions are executed, after desensitizing the field to be desensitized using a desensitization rule, it further includes:

Send the desensitized fields to the business system.

The information desensitization device provided by the embodiment of this application can desensitize the sensitive fields involved in each business type under the business system; and the received desensitization request sent by the business system carries the field to be desensitized and the The target business type to which the desensitization field belongs, so that the desensitization rule corresponding to the field to be desensitized can be uniquely determined according to the field to be desensitized and the target business type to which it belongs, so that the accuracy of desensitization is higher.

Further, based on the above methods shown in Figures 1 to 2, the embodiment of the present application also provides a storage medium for storing computer-executable instructions. In a specific embodiment, the storage medium may be a USB flash drive , optical disc, hard disk, etc., when the computer-executable instructions stored in the storage medium are executed by the processor, the following process can be realized:

Receive the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target business type to which the field to be desensitized belongs;

Find the desensitization rule corresponding to the field to be desensitized according to the target business type and the field to be desensitized;

Use the above desensitization rules to desensitize the fields to be desensitized.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the desensitization rules corresponding to the fields to be desensitized are searched according to the target business type and the fields to be desensitized, including:

According to the target business type and the field to be desensitized, find the desensitization rule corresponding to the field to be desensitized under the target business type from the established correspondence between the business type, sensitive field and desensitization rule.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, before receiving the desensitization request sent by the business system, it further includes:

Determine the sensitive fields corresponding to each business type under the business system, and the desensitization rules corresponding to each sensitive field;

Establish correspondence between business types, sensitive fields, and desensitization rules.

Optionally, when executed by the processor, the computer-executable instructions stored in the storage medium further include:

Obtain newly added sensitive fields;

Determine the business type to which the newly added sensitive fields belong and the desensitization rules corresponding to the newly added sensitive fields;

The above corresponding relationship is updated according to the newly added sensitive field, the service type to which the newly added sensitive field belongs, and the desensitization rule corresponding to the newly added sensitive field.

Optionally, when executed by the processor, the computer-executable instructions stored in the storage medium further include:

If no desensitization rule corresponding to the field to be desensitized is found, a prompt message is sent to the business system; wherein, the prompt message is used to prompt that there is no desensitization rule corresponding to the field to be desensitized.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, the desensitization rules are represented by regular expressions;

Use the desensitization rules to desensitize the fields to be desensitized, including:

Analyze the regular expression to determine the meaning represented by the regular expression;

Desensitize the desensitized field according to the meaning obtained by parsing.

Optionally, when the computer-executable instructions stored in the storage medium are executed by the processor, after desensitizing the field to be desensitized by using a desensitization rule, it further includes:

Send the desensitized fields to the business system.

When the computer-executable instructions stored in the storage medium provided by the embodiment of the present application are executed by the processor, the sensitive fields involved in each business type under the business system can be desensitized; and, the received data sent by the business system The desensitization request carries the field to be desensitized and the target business type to which the field to be desensitized belongs, so that the desensitization rule corresponding to the field to be desensitized can be uniquely determined according to the field to be desensitized and the target business type to which it belongs, so that The accuracy of desensitization is higher.

In the 1990s, the improvement of a technology can be clearly distinguished as an improvement in hardware (for example, improvements in circuit structures such as diodes, transistors, and switches) or improvements in software (improvement in method flow). However, with the development of technology, the improvement of many current method flows can be regarded as the direct improvement of the hardware circuit structure. Designers almost always get the corresponding hardware circuit structure by programming the improved method flow into the hardware circuit. Therefore, it cannot be said that the improvement of a method flow cannot be realized by hardware physical modules. For example, a Programmable Logic Device (Programmable Logic Device, PLD) (such as a Field Programmable Gate Array (Field Programmable GateArray, FPGA)) is such an integrated circuit, and its logic function is determined by programming the device by a user. It is programmed by the designer to "integrate" a digital system on a PLD, instead of asking a chip manufacturer to design and make a dedicated integrated circuit chip. Moreover, nowadays, instead of making integrated circuit chips by hand, this kind of programming is mostly realized by "logic compiler (logic compiler)" software, which is similar to the software compiler used when writing programs. The original code of the computer must also be written in a specific programming language, which is called a hardware description language (Hardware Description Language, HDL), and there is not only one kind of HDL, but many kinds, such as ABEL (Advanced Boolean Expression Language) , AHDL (Altera Hardware Description Language), Confluence, CUPL (Cornell University Programming Language), HDCal, JHDL (Java Hardware Description Language), Lava, Lola, MyHDL, PALASM, RHDL (Ruby Hardware Description Language), etc., currently the most commonly used is VHDL (Very-High-Speed Integrated Circuit Hardware Description Language) and Verilog. It should also be clear to those skilled in the art that only a little logical programming of the method flow in the above-mentioned hardware description languages and programming into an integrated circuit can easily obtain a hardware circuit for realizing the logic method flow.

The controller may be implemented in any suitable way, for example the controller may take the form of a microprocessor or processor and a computer readable medium storing computer readable program code (such as software or firmware) executable by the (micro)processor , logic gates, switches, Application Specific Integrated Circuit (ASIC), programmable logic controllers, and embedded microcontrollers, examples of controllers include but are not limited to the following microcontrollers: ARC 625D, Atmel AT91SAM, Microchip PIC18F26K20 and Silicone Labs C8051F320, the memory controller can also be implemented as part of the memory's control logic. Those skilled in the art also know that, in addition to realizing the controller in a purely computer-readable program code mode, it is entirely possible to make the controller use logic gates, switches, application-specific integrated circuits, programmable logic controllers, and embedded The same function can be realized in the form of a microcontroller or the like. Therefore, such a controller can be regarded as a hardware component, and the devices included in it for realizing various functions can also be regarded as structures within the hardware component. Or even, means for realizing various functions can be regarded as a structure within both a software module realizing a method and a hardware component.

The systems, devices, modules, or units described in the above embodiments can be specifically implemented by computer chips or entities, or by products with certain functions. A typical implementing device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cellular phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or Combinations of any of these devices.

For the convenience of description, when describing the above devices, functions are divided into various units and described separately. Of course, when implementing the present application, the functions of each unit can be implemented in one or more pieces of software and/or hardware.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems, or computer program products. Accordingly, the present application may take the form of an entirely hardware embodiment, an entirely software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

The present application is described with reference to flowcharts and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the present application. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

In a typical configuration, a computing device includes one or more processors (CPUs), input/output interfaces, network interfaces, and memory.

Memory may include non-permanent storage in computer readable media, in the form of random access memory (RAM) and/or nonvolatile memory such as read only memory (ROM) or flash RAM. Memory is an example of computer readable media.

Computer-readable media, including both permanent and non-permanent, removable and non-removable media, can be implemented by any method or technology for storage of information. Information may be computer readable instructions, data structures, modules of a program, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read only memory (ROM), Electrically Erasable Programmable Read-Only Memory (EEPROM), Flash memory or other memory technology, Compact Disc Read-Only Memory (CD-ROM), Digital Versatile Disc (DVD) or other optical storage, Magnetic tape cartridge, tape magnetic disk storage or other magnetic storage device or any other non-transmission medium that can be used to store information that can be accessed by a computing device. As defined herein, computer-readable media excludes transitory computer-readable media, such as modulated data signals and carrier waves.

It should also be noted that the term "comprises", "comprises" or any other variation thereof is intended to cover a non-exclusive inclusion such that a process, method, article, or apparatus comprising a set of elements includes not only those elements, but also includes Other elements not expressly listed, or elements inherent in the process, method, commodity, or apparatus are also included. Without further limitations, an element defined by the phrase "comprising a ..." does not exclude the presence of additional identical elements in the process, method, article or apparatus comprising said element.

Those skilled in the art should understand that the embodiments of the present application may be provided as methods, systems or computer program products. Accordingly, the present application can take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the present application may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) having computer-usable program code embodied therein.

This application may be described in the general context of computer-executable instructions, such as program modules, being executed by a computer. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform particular tasks or implement particular abstract data types. The application may also be practiced in distributed computing environments where tasks are performed by remote processing devices that are linked through a communications network. In a distributed computing environment, program modules may be located in both local and remote computer storage media including storage devices.

Each embodiment in this specification is described in a progressive manner, the same and similar parts of each embodiment can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for relevant parts, refer to part of the description of the method embodiment.

The above descriptions are only examples of the present application, and are not intended to limit the present application. For those skilled in the art, various modifications and changes may occur in this application. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application shall be included within the scope of the claims of the present application.

Claims (18)

1. An information desensitization method applied to an information desensitization device corresponding to a business system, the method comprising: receiving the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs; Searching for a desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized; The desensitization process is performed on the field to be desensitized by using the desensitization rule. 2. The method according to claim 1, said searching the desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized, comprising: According to the target business type and the field to be desensitized, search for the desensitization rule corresponding to the field to be desensitized under the target business type from the established correspondence between the business type, sensitive field and desensitization rule . 3. The method according to claim 2, before receiving the desensitization request sent by the business system, the method further comprises: Determine the sensitive fields corresponding to each business type under the business system, and the desensitization rules corresponding to each sensitive field; A correspondence relationship between the service type, the sensitive field, and the desensitization rule is established. 4. The method of claim 2, further comprising: Obtain newly added sensitive fields; Determine the business type to which the newly added sensitive field belongs and the desensitization rule corresponding to the newly added sensitive field; The corresponding relationship is updated according to the newly added sensitive field, the service type to which the newly added sensitive field belongs, and the desensitization rule corresponding to the newly added sensitive field. 5. The method of any one of claims 1-4, further comprising: If no desensitization rule corresponding to the field to be desensitized is found, a prompt message is sent to the business system; wherein the prompt message is used to prompt that there is no desensitization rule corresponding to the field to be desensitized. 6. The method according to claim 1, wherein the desensitization rule is represented by a regular expression; The desensitization of the field to be desensitized by using the desensitization rule includes: Analyzing the regular expression to determine the meaning represented by the regular expression; The field to be desensitized is desensitized according to the meaning obtained by parsing. 7. The method according to claim 1, after using the desensitization rule to desensitize the field to be desensitized, the method further comprises: Send the desensitized fields to the business system. 8. An information desensitization device, said device comprising: The receiving module receives the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target business type to which the field to be desensitized belongs; the information desensitization device corresponds to the business system ; A search module, searching for a desensitization rule corresponding to the field to be desensitized according to the target business type and the field to be desensitized; A desensitization module, which uses the desensitization rule to desensitize the field to be desensitized. 9. The device according to claim 8, the search module is specifically used for: According to the target business type and the field to be desensitized, search for the desensitization rule corresponding to the field to be desensitized under the target business type from the established correspondence between the business type, sensitive field and desensitization rule . 10. The apparatus of claim 9, further comprising: The first determination module determines the sensitive fields corresponding to each business type under the business system, and the desensitization rules corresponding to each sensitive field; The establishment module is used to establish the corresponding relationship between the service type, the sensitive field and the desensitization rule. 11. The apparatus of claim 9, further comprising: Get the module and get the newly added sensitive fields; The second determination module determines the business type to which the newly added sensitive field belongs and the desensitization rule corresponding to the newly added sensitive field; The update module is configured to update the corresponding relationship according to the newly added sensitive field, the business type to which the newly added sensitive field belongs, and the desensitization rule corresponding to the newly added sensitive field. 12. An information desensitization system, comprising: a business system and an information desensitization device; The business system is configured to send a desensitization request to the information desensitization device; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs; An information desensitization device, configured to receive the desensitization request, and according to the target service type and the field to be desensitized, find a desensitization rule corresponding to the field to be desensitized; and use the desensitization rule to The field to be desensitized is desensitized. 13. The system according to claim 12, the information desensitization device is specifically used for: According to the target business type and the field to be desensitized, search for the desensitization rule corresponding to the field to be desensitized under the target business type from the established correspondence between the business type, sensitive field and desensitization rule . 14. The system according to claim 13, the information desensitization device is also used for: Determining the sensitive fields corresponding to each business type under the business system, and the desensitization rules corresponding to each sensitive field; establishing the corresponding relationship between the business type, the sensitive fields and the desensitization rules. 15. The system according to claim 13, the information desensitization device is also used for: Obtain the newly added sensitive field; determine the business type to which the newly added sensitive field belongs and the desensitization rule corresponding to the newly added sensitive field; according to the newly added sensitive field, the business type to which the newly added sensitive field belongs type and the desensitization rule corresponding to the newly added sensitive field, and update the corresponding relationship. 16. The system according to any one of claims 12-15, the information desensitization device is also used for: If no desensitization rule corresponding to the field to be desensitized is found, a prompt message is sent to the business system; wherein the prompt message is used to prompt that there is no desensitization rule corresponding to the field to be desensitized. 17. An information desensitization device, comprising: processor; and A memory arranged to store computer-executable instructions that, when executed, cause the processor to: receiving the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs; Searching for a desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized; The desensitization process is performed on the field to be desensitized by using the desensitization rule. 18. A storage medium for storing computer-executable instructions that, when executed, implement the following processes: receiving the desensitization request sent by the business system; wherein, the desensitization request carries the field to be desensitized and the target service type to which the field to be desensitized belongs; Searching for a desensitization rule corresponding to the field to be desensitized according to the target service type and the field to be desensitized; The desensitization process is performed on the field to be desensitized by using the desensitization rule.