CN114817975A - Data desensitization encryption and decryption method and device - Google Patents

Abstract

The present invention provides a data desensitization encryption and decryption method and device, wherein the method includes: obtaining a target expression corresponding to target data; performing a target operation on the target data based on the target expression; wherein, the target Operations include desensitization operations, encryption operations, or decryption operations. The data desensitization encryption and decryption method and device provided by the present invention can obtain the target expression corresponding to the target data and perform desensitization operation, encryption operation or decryption operation on the target data based on the target expression. Standardizing data-like applications can make code cleaner, more unified, and better constrained, realize unified, low-cost, and efficient data desensitization encryption and decryption, reduce code writing and development costs, and improve data cross-system call efficiency.

Description

Data desensitization encryption and decryption method and device

technical field

The invention relates to the field of computer technology, and in particular, to a method and device for data desensitization encryption and decryption.

Background technique

With the increasing importance of data security, it is necessary to desensitize, encrypt and decrypt data in the process of data collection, aggregation and sharing as well as for passwords and sensitive information in programs to prevent data exposure and leakage, improve Data security. For the integrated call of data between multiple systems, each system currently needs to perform desensitization encryption and decryption operations according to the requirements, thereby increasing the amount of code writing and development costs, and reducing the efficiency of data calling.

SUMMARY OF THE INVENTION

The invention provides a data desensitization encryption and decryption method and device, which are used to solve the defect of high development cost in the prior art and realize unified, low-cost and efficient data desensitization encryption and decryption.

The present invention provides a data desensitization encryption and decryption method, comprising:

Get the target expression corresponding to the target data;

Based on the target expression, a target operation is performed on the target data; wherein, the target operation includes a desensitization operation, an encryption operation or a decryption operation.

According to a data desensitization encryption and decryption method provided by the present invention, performing a target operation on the target data based on the target expression includes:

Obtain the information of the replacement character and the replacement range carried by the target expression;

Based on the replacement character and replacement range information, a desensitization operation is performed on the target data.

According to a data desensitization encryption and decryption method provided by the present invention, performing a target operation on the target data based on the target expression includes:

Obtain the information of the encryption algorithm, encryption rule and key carried by the target expression;

An encryption operation is performed on the target data based on the information of the encryption algorithm, encryption rule and key.

According to a data desensitization encryption and decryption method provided by the present invention, performing a target operation on the target data based on the target expression includes:

Obtain the information of the decryption algorithm, decryption rule and key carried by the target expression;

A decryption operation is performed on the target data based on the decryption algorithm, decryption rule and key information.

According to a data desensitization encryption and decryption method provided by the present invention, performing a target operation on the target data based on the target expression includes:

Obtain the information of the replaced character and the replacement serial number carried by the target expression;

Based on the information of the replaced character and the replacement serial number, character string replacement is performed on the target data to implement a desensitization operation.

According to a data desensitization encryption and decryption method provided by the present invention, the desensitization operation performed on the target data based on the information of the replacement characters and the replacement range includes:

When the length of the character string of the target data exceeds the length threshold, the target data is segmented based on the length threshold to obtain a plurality of data segments;

The desensitization operation is performed on each of the data segments based on the information of the replacement character and the replacement range, respectively.

The present invention also provides a data desensitization encryption and decryption device, comprising:

The acquisition module is used to acquire the target expression corresponding to the target data;

An execution module, configured to perform a target operation on the target data based on the target expression; wherein the target operation includes a desensitization operation, an encryption operation or a decryption operation.

The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and running on the processor, the processor implementing the data desensitization as described above when the processor executes the program The steps of the encryption and decryption method.

The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, implements the steps of any of the above-mentioned data desensitization encryption and decryption methods.

The present invention also provides a computer program product, including a computer program, which implements the steps of any of the above-mentioned data desensitization encryption and decryption methods when the computer program is executed by a processor.

The data desensitization encryption and decryption method and device provided by the present invention can obtain the target expression corresponding to the target data and perform desensitization, encryption or decryption operations on the target data based on the target expression. Standardizing data-like applications can make the code cleaner, more unified, and better constrained, can achieve unified, low-cost, and efficient data desensitization encryption and decryption, can reduce the amount of code writing and development costs, and improve data cross-system call efficiency.

Description of drawings

In order to explain the present invention or the technical solutions in the prior art more clearly, the following briefly introduces the accompanying drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are of the present invention. For some embodiments of the present invention, for those of ordinary skill in the art, other drawings can also be obtained from these drawings without any creative effort.

Fig. 1 is the schematic flowchart of the data desensitization encryption and decryption method provided by the present invention;

Fig. 2 is the structural representation of the data desensitization encryption and decryption device provided by the present invention;

FIG. 3 is a schematic structural diagram of an electronic device provided by the present invention.

Detailed ways

In order to make the objectives, technical solutions and advantages of the present invention clearer, the technical solutions in the present invention will be clearly and completely described below with reference to the accompanying drawings. Obviously, the described embodiments are part of the embodiments of the present invention. , not all examples. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative efforts shall fall within the protection scope of the present invention.

In the description of the embodiments of the present invention, the terms "first", "second" and "third" are only used for the purpose of description, and should not be construed as indicating or implying relative importance, and do not involve sequence.

In the description of the embodiments of the present invention, it should be noted that the terms "installed", "connected" and "connected" should be understood in a broad sense, unless otherwise expressly specified and limited. For example, it may be a fixed connection or a Removable connection, or integral connection; can be mechanical connection, can also be electrical connection; can be directly connected, can also be indirectly connected through an intermediate medium, can be internal communication between two components. Those of ordinary skill in the art can understand the specific meanings of the above terms in the embodiments of the present invention in specific situations.

The data desensitization encryption and decryption method and device provided by the present invention will be described below with reference to FIG. 1 to FIG. 3 .

1 is a schematic flowchart of a data desensitization encryption and decryption method provided by the present invention. The data desensitization encryption and decryption method according to the embodiment of the present application is disclosed below with reference to FIG. 1 . As shown in FIG. 1 , the method may include: step 101 and step 102 .

Specifically, the execution body of the data desensitization encryption and decryption method provided by the embodiment of the present invention may be a data desensitization encryption and decryption device.

Step 101: Obtain a target expression corresponding to the target data.

Specifically, the target data can be a string.

The target expression, which is used to perform the target operation on the target data.

Optionally, the target operation may be a desensitization operation, an encryption operation or a decryption operation.

It should be noted that, before step 101, expressions have been defined in advance for various desensitization operations, encryption operations, and decryption operations. For each desensitization operation, encryption operation, and decryption operation, expressions can be defined according to their corresponding preset formats and business requirements. The expression can carry information about the various parameters of the operation.

Optionally, the target expression corresponding to the target data may be obtained based on the correspondence between the target data and the expression.

Optionally, the corresponding relationship between the target data and the expression may be determined by the user's input, or may be preset.

Exemplarily, an expression is defined for the desensitization operation, the encryption operation, and the decryption operation respectively, and in the case that the target data needs to be desensitized, the expression defined for the desensitization operation is the target expression corresponding to the target data. .

Step 102 , based on the target expression, perform a target operation on the target data; wherein, the target operation includes a desensitization operation, an encryption operation or a decryption operation.

Specifically, the target expression can carry information of each parameter of the target operation, so the target operation can be performed on the target data based on the information of each parameter of the target operation carried by the target expression.

It can be understood that by combining business requirements and desensitization encryption and decryption algorithms to form a unified standard expression, through a unified standard expression, operations such as desensitization encryption and decryption can be formed into a unified standard, and the encryption and decryption and desensitization operations can be standardized. In the process of code writing, a unified and standardized expression can be used, so that each system can perform target operations on the target data based on the target expression corresponding to the target data.

It should be noted that the target expression can be released in the form of a jar package, which is convenient for multi-system integration. Multiple systems require encryption and decryption operations for data transmission, which can reduce communication costs between multiple systems, and the specific operations are more standardized; the target expression can be applied to a large number of scenarios (ID card, phone, IP, bank card, etc.), which can reduce the amount of code writing And the number of bugs, after the promotion and use, the readability of the code is improved.

In the embodiment of the present invention, by acquiring the target expression corresponding to the target data, and based on the target expression, the desensitization operation, encryption operation or decryption operation is performed on the target data, so that the application of such data can be standardized through standard expressions, and the code Cleaner, more unified, and better constraints can achieve unified, low-cost, and efficient data desensitization encryption and decryption, reduce the amount of code writing and development costs, and improve the efficiency of data cross-system calls.

Based on the contents of any of the foregoing embodiments, and based on the target expression, performing the target operation on the target data includes: acquiring information on replacement characters and replacement ranges carried by the target expression.

Specifically, for the desensitization operation, the target expression can carry information such as replacement characters and replacement ranges. In the case where the target operation is a desensitization operation, the target expression may be a desensitization expression.

It is understandable that data desensitization can be performed by means of character replacement.

The replacement character refers to the character used to replace the original character in the target data.

The replacement range refers to the range of characters to be replaced in the target data.

Perform desensitization operations on target data based on information about replacement characters and replacement ranges.

Specifically, based on the information of the replacement characters and the replacement range, the characters in the replacement range in the target data can be replaced with the above-mentioned replacement characters to complete the desensitization operation on the target data.

Optionally, in the target expression, the replacement character and replacement range can be limited by specific characters.

Exemplarily, "{}" is used to define the range, and "," can be used to define multiple replacement characters. The replacement range is defined with "-". By default, the count starts from the first character (starting from 0), and $ defines the number from the last position. Count forward.

For example, {4,6-$2}* represents the 5th digit, and the 7th to the penultimate 3rd digit, and each string is replaced with *; if you do not want to expose the character length, {4,6-$2}*** represents the first The 5th place is replaced by three *, and the 7th is replaced by *** for the characters in the range from the 7th to the penultimate 3rd place.

The embodiment of the present invention performs desensitization operations on target data through a unified standard desensitization expression, can standardize the application of such data through a standard expression, can carry out cleaner, more unified, and better constraints on the code, and can Implementing unified, low-cost, and efficient data desensitization encryption and decryption can reduce the amount of code writing and development costs, and improve the efficiency of data cross-system calls.

Based on the content of any of the above embodiments, and based on the information of the replacement characters and the replacement range, performing a desensitization operation on the target data, including: in the case that the length of the character string of the target data exceeds the length threshold, based on the length threshold, perform a desensitization operation on the target data. segment to get multiple data segments.

Specifically, for a longer character string, that is, when the length of the character string of the target data exceeds the length threshold, the target data may be segmented to obtain multiple data segments.

For example, for a string like the IP address of a machine, it needs to be segmented and then desensitized.

Based on the replacement character and replacement range information, a desensitization operation is performed separately for each data segment.

Specifically, for each data segment, based on the information of the replacement character and the replacement range, the characters in the replacement range in the data segment can be replaced with the above-mentioned replacement characters to complete the desensitization operation of the data segment.

Exemplarily, "?" can be defined as a keyword for string segmentation in the desensitization expression.

The embodiment of the present invention performs desensitization operations on target data through a unified standard desensitization expression, can standardize the application of such data through a standard expression, can carry out cleaner, more unified, and better constraints on the code, and can Implementing unified, low-cost, and efficient data desensitization encryption and decryption can reduce the amount of code writing and development costs, and improve the efficiency of data cross-system calls.

Based on the content of any of the foregoing embodiments, and based on the target expression, performing the target operation on the target data includes: obtaining the information of the encryption algorithm, encryption rule and key carried by the target expression.

Specifically, for encryption operations, the target expression can carry information such as encryption algorithms, encryption rules, and keys. Where the target operation is a cryptographic operation, the target expression may be a cryptographic expression.

The encryption algorithm may include AES (Advanced Encryption Standard, Advanced Encryption Standard), DES (Data Encryption Standard, Data Encryption Standard), RSA or MD5 and the like.

If the encryption algorithm is AES, DES or RSA, the target expression also needs to carry specific encryption rules and key information, define AES (encryption rules, encryption keys), DES (encryption rules, encryption keys), RSA (encryption rule, encryption key).

If the encryption algorithm is the MD5 algorithm, the information of the encryption rule and key in the target expression is the default value.

Perform cryptographic operations on target data based on information about encryption algorithms, encryption rules, and keys.

Specifically, based on the information of the encryption algorithm, the encryption rule and the key, an encryption operation can be performed on the target data to obtain the encrypted target data.

Exemplarily, e(AES, AES/ECB/PKCS7Padding, admin123) means that the AES algorithm is used, and the AES/ECB/PKCS7Padding encryption rule is used to encrypt data according to the admin123 key; e(MD5) means that MD5 is used for encryption.

The embodiment of the present invention performs an encryption operation on target data through a unified standard encryption expression, can standardize the application of such data through a standard expression, can carry out cleaner, more unified, and better constraints on the code, and can achieve a unified , Low-cost and efficient data desensitization encryption and decryption, can reduce the amount of code writing and development costs, and improve the efficiency of data cross-system calls.

Based on the content of any of the foregoing embodiments, and based on the target expression, performing the target operation on the target data includes: obtaining the decryption algorithm, decryption rule and key information carried by the target expression.

Specifically, for the decryption operation, the target expression can carry information such as decryption algorithm, decryption rule, and key. In the case where the target operation is a decryption operation, the target expression may be a decryption expression.

The decryption algorithm may include AES, DES or RSA, etc.

If the decryption algorithm is AES, DES or RSA, the target expression also needs to carry specific decryption rules and key information, define AES (decryption rule, decryption key), DES (decryption rule, decryption key), RSA (encryption rules, decryption keys).

The decryption operation is performed on the target data based on the information of the decryption algorithm, decryption rule and key.

Specifically, based on the information of the decryption algorithm, the decryption rule and the key, a decryption operation can be performed on the target data to obtain the decrypted target data.

Exemplarily, d(DES, Desede/ECB/PKCS5Padding, admin123), indicates that the DES algorithm is used, and the Desede/ECB/PKCS5Padding decryption rule is used to decrypt the data according to the admin123 key.

The embodiment of the present invention performs decryption operations on target data through a unified standard decryption expression, can standardize the application of such data through a standard expression, and can carry out cleaner, more unified, and better constraints on the code, and can achieve a unified , Low-cost and efficient data desensitization encryption and decryption, can reduce the amount of code writing and development costs, and improve the efficiency of data cross-system calls.

Based on the content of any of the foregoing embodiments, and based on the target expression, performing the target operation on the target data includes: acquiring information of the replaced character and the replacement sequence number carried by the target expression.

Specifically, desensitization can be achieved by replacing specific strings in the target data. The specific character string in the above target data, that is, the replaced character.

The replacement sequence number refers to the sequence number of the specific string to be replaced, which can be regarded as a form of identifying the replacement range.

Based on the information of the replaced character and the replacement serial number, the target data is replaced by a string to realize the desensitization operation.

Specifically, based on the information of the replaced character and the replacement serial number, the replaced character of the above-mentioned replacement serial number in the target data can be replaced with a replacement character to complete the desensitization operation on the target data.

Exemplarily, define R (replacement character: replacement number: i) as a string replacement expression; use R(...[:...][:i]) as an expression keyword; the replaced character is the desired The character to be searched; the replacement sequence number is the position that needs to be replaced. When you want to replace all, you can use: g to represent; :i to ignore case.

For example, R(java:{1-$1}:i) means to replace java in the string, ignoring case, and replace the second to penultimate string "java".

Understandably, a string replacement expression can be regarded as a desensitization expression.

The embodiment of the present invention performs desensitization operations on target data through a unified standard desensitization expression, can standardize the application of such data through a standard expression, can carry out cleaner, more unified, and better constraints on the code, and can Implementing unified, low-cost, and efficient data desensitization encryption and decryption can reduce the amount of code writing and development costs, and improve the efficiency of data cross-system calls.

The data desensitization encryption and decryption device provided by the present invention is described below. The data desensitization encryption and decryption device described below and the data desensitization encryption and decryption method described above can be referred to each other correspondingly.

FIG. 2 is a schematic structural diagram of a data desensitization encryption and decryption device provided by the present invention. Based on the contents of any of the above embodiments, as shown in FIG. 2 , the apparatus may include an acquisition module 201 and an execution module 202, wherein:

an acquisition module 201, used for acquiring a target expression corresponding to the target data;

an execution module 202, configured to perform a target operation on the target data based on the target expression;

The target operation includes a desensitization operation, an encryption operation or a decryption operation.

Specifically, the acquisition module 201 and the execution module 202 are electrically connected.

The obtaining module 201 can obtain the target expression corresponding to the target data based on the corresponding relationship between the target data and the expression.

The target expression may carry information of each parameter of the target operation, and the execution module 202 may execute the target operation on the target data based on the information of each parameter of the target operation carried by the target expression.

Optionally, the execution module 202 may include:

The first obtaining unit is used to obtain the information of the replacement character and the replacement range carried by the target expression;

The desensitization unit is used to desensitize the target data based on the information of the replacement characters and the replacement range.

Optionally, the execution module 202 may include:

The second obtaining unit is used to obtain the information of the encryption algorithm, encryption rule and key carried by the target expression;

The encryption unit is used to perform encryption operations on target data based on the information of encryption algorithms, encryption rules and keys.

Optionally, the execution module 202 may include:

The third obtaining unit is used to obtain the information of the decryption algorithm, decryption rule and key carried by the target expression;

The decryption unit is used to perform decryption operation on the target data based on the decryption algorithm, decryption rule and key information.

Optionally, the execution module 202 may include:

The fourth acquisition unit is used to acquire the information of the replaced character and the replacement serial number carried by the target expression;

The string replacement unit is used to perform string replacement on the target data based on the information of the replaced character and the replacement serial number, so as to realize the desensitization operation.

Optionally, the desensitization unit can be specifically used for:

When the string length of the target data exceeds the length threshold, the target data is segmented based on the length threshold to obtain multiple data segments;

Based on the replacement character and replacement range information, a desensitization operation is performed separately for each data segment.

The data desensitization encryption and decryption device provided by the embodiment of the present invention is used to execute the above-mentioned data desensitization encryption and decryption method of the present invention. The beneficial effects will not be repeated here.

The data desensitization encryption and decryption device is used in the data desensitization encryption and decryption methods of the foregoing embodiments. Therefore, the descriptions and definitions in the data desensitization encryption and decryption methods in the foregoing embodiments can be used to understand the execution modules in the embodiments of the present invention.

In the embodiment of the present invention, by acquiring the target expression corresponding to the target data, and based on the target expression, the desensitization operation, encryption operation or decryption operation is performed on the target data, so that the application of such data can be standardized through standard expressions, and the code Cleaner, more unified, and better constraints can achieve unified, low-cost, and efficient data desensitization encryption and decryption, reduce the amount of code writing and development costs, and improve the efficiency of data cross-system calls.

FIG. 3 illustrates a schematic diagram of the physical structure of an electronic device. As shown in FIG. 3 , the electronic device may include: a processor (processor) 310, a communication interface (Communications Interface) 320, a memory (memory) 330 and a communication bus 340, The processor 310 , the communication interface 320 , and the memory 330 communicate with each other through the communication bus 340 . The processor 310 can call the logic instructions in the memory 330 to execute the data desensitization encryption and decryption method, the method includes: obtaining a target expression corresponding to the target data; performing a target operation on the target data based on the target expression; wherein, the target operation Including desensitization operations, encryption operations or decryption operations.

In addition, the above-mentioned logic instructions in the memory 330 may be implemented in the form of software functional units and may be stored in a computer-readable storage medium when sold or used as an independent product. Based on this understanding, the technical solution of the present invention can be embodied in the form of a software product in essence, or the part that contributes to the prior art or the part of the technical solution. The computer software product is stored in a storage medium, including Several instructions are used to cause a computer device (which may be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, Read-Only Memory (ROM, Read-Only Memory), Random Access Memory (RAM, Random Access Memory), magnetic disk or optical disk and other media that can store program codes .

The processor 310 in the electronic device provided in the embodiment of the present application can call the logic instruction in the memory 330, and its implementation is consistent with the implementation of the data desensitization encryption and decryption method provided in the present application, and can achieve the same beneficial effects. It is not repeated here.

In another aspect, the present invention also provides a computer program product, the computer program product comprising a computer program stored on a non-transitory computer-readable storage medium, the computer program comprising program instructions, when the program instructions are executed by a computer When executing, the computer can execute the data desensitization encryption and decryption methods provided by the above methods, and the method includes: obtaining a target expression corresponding to the target data; based on the target expression, performing a target operation on the target data; wherein, the target operation includes desensitizing the target data. sensitive operations, encryption operations, or decryption operations.

When the computer program product provided by the embodiment of the present application is executed, the above-mentioned data desensitization encryption and decryption method is implemented. No longer.

In another aspect, the present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored, and the computer program is implemented when executed by a processor to execute the data desensitization encryption and decryption methods provided above, the method It includes: acquiring a target expression corresponding to the target data; performing a target operation on the target data based on the target expression; wherein, the target operation includes a desensitization operation, an encryption operation or a decryption operation.

When the computer program stored on the non-transitory computer-readable storage medium provided in the embodiment of the present application is executed, the above-mentioned data desensitization encryption and decryption method is implemented, and the specific implementation thereof is consistent with the implementation described in the foregoing method embodiment. And the same beneficial effect can be achieved, which is not repeated here.

The device embodiments described above are only illustrative, wherein the units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in One place, or it can be distributed over multiple network elements. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution in this embodiment. Those of ordinary skill in the art can understand and implement it without creative effort.

From the description of the above embodiments, those skilled in the art can clearly understand that each embodiment can be implemented by means of software plus a necessary general hardware platform, and certainly can also be implemented by hardware. Based on this understanding, the above-mentioned technical solutions can be embodied in the form of software products in essence or the parts that make contributions to the prior art, and the computer software products can be stored in computer-readable storage media, such as ROM/RAM, magnetic A disc, an optical disc, etc., including several instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods described in various embodiments or some parts of the embodiments.

Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, but not to limit them; although the present invention has been described in detail with reference to the foregoing embodiments, those of ordinary skill in the art should understand that it can still be The technical solutions described in the foregoing embodiments are modified, or some technical features thereof are equivalently replaced; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims (10)

1. A method of desensitizing data encryption and decryption, comprising:

acquiring a target expression corresponding to target data;

executing a target operation on the target data based on the target expression; wherein the target operation comprises a desensitization operation, an encryption operation, or a decryption operation.

2. The data desensitization encryption/decryption method according to claim 1, wherein said performing a target operation on said target data based on said target expression comprises:

acquiring information of the replacement characters and the replacement range carried by the target expression;

performing a desensitization operation on the target data based on the information of the replacement characters and replacement ranges.

3. The data desensitization encryption/decryption method according to claim 1, wherein said performing a target operation on said target data based on said target expression comprises:

acquiring information of an encryption algorithm, an encryption rule and a secret key carried by the target expression;

and performing encryption operation on the target data based on the information of the encryption algorithm, the encryption rule and the secret key.

4. The data desensitization encryption/decryption method according to claim 1, wherein said performing a target operation on said target data based on said target expression comprises:

acquiring information of a decryption algorithm, a decryption rule and a secret key carried by the target expression;

and executing decryption operation on the target data based on the decryption algorithm, the decryption rule and the information of the key.

5. The data desensitization encryption/decryption method according to claim 1, wherein said performing a target operation on said target data based on said target expression comprises:

acquiring information of replaced characters and replacement serial numbers carried by the target expression;

and performing character string replacement on the target data based on the replaced characters and the information of the replacement serial number so as to realize desensitization operation.

6. The data desensitization encryption and decryption method according to claim 2, wherein the performing desensitization operations on the target data based on the information of the replacement characters and replacement ranges comprises:

under the condition that the character string length of the target data exceeds a length threshold, segmenting the target data based on the length threshold to obtain a plurality of data segments;

and performing desensitization operation on each data segment respectively based on the information of the replacement characters and the replacement range.

7. A data desensitization encryption/decryption apparatus, comprising:

the acquisition module is used for acquiring a target expression corresponding to the target data;

the execution module is used for executing target operation on the target data based on the target expression; wherein the target operation comprises a desensitization operation, an encryption operation, or a decryption operation.

8. An electronic device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor when executing the program performs the steps of a data desensitising encryption/decryption method as claimed in any one of claims 1 to 6.

9. A non-transitory computer readable storage medium having stored thereon a computer program, wherein the computer program when executed by a processor implements the steps of a data desensitisation encryption/decryption method according to any one of claims 1 to 6.

10. A computer program product comprising a computer program, wherein the computer program when executed by a processor implements the steps of a data de-encryption/decryption method as claimed in any one of claims 1 to 6.

Images