CN113032834A - Database table processing method, device, equipment and storage medium - Google Patents
Database table processing method, device, equipment and storage medium Download PDFInfo
- Publication number
- CN113032834A CN113032834A CN202110424422.1A CN202110424422A CN113032834A CN 113032834 A CN113032834 A CN 113032834A CN 202110424422 A CN202110424422 A CN 202110424422A CN 113032834 A CN113032834 A CN 113032834A
- Authority
- CN
- China
- Prior art keywords
- processed
- field
- classification result
- sensitive
- type
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
- G06F21/6218—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
- G06F21/6227—Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database where protection concerns the structure of data, e.g. records, types, queries
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F16/00—Information retrieval; Database structures therefor; File system structures therefor
- G06F16/90—Details of database functions independent of the retrieved data types
- G06F16/906—Clustering; Classification
Abstract
The embodiment of the invention discloses a database table processing method, a database table processing device, database table processing equipment and a storage medium. The method comprises the following steps: acquiring a table to be processed from a database; determining the sensitive field type of each field in the table to be processed according to the field information of each field in the table to be processed; determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed; and determining the sensitivity level of the table to be processed according to the classification result of the table to be processed. The embodiment of the invention can accurately classify and grade the database table according to the sensitive field type of each field in the database table, and judge the classification result and the sensitive grade of the database table, has the characteristics of strong pertinence and high identification accuracy, and provides reference support for further safety control and data use of the database table.
Description
Technical Field
The embodiment of the invention relates to the technical field of computers, in particular to a database table processing method, a database table processing device and a database table processing equipment storage medium.
Background
Cloud computing, big data and artificial intelligence are rapidly developed and go deep into various fields, and the relevant mass data can cause the leakage of important sensitive data and even the events of tampering, illegal selling and the like in various links such as collection, storage, use, outgoing and the like, and influence the data security, social image and economic benefits of enterprises.
The data can be better managed by performing security level division on the sensitivity of the data, so that the data security is protected. The data processing method in the related art focuses on identifying sensitive data in document data and performing classification and grading processing, and a data processing mode for performing classification and grading processing on a database table is not available.
Disclosure of Invention
The embodiment of the invention provides a database table processing method, a database table processing device, database table processing equipment and a storage medium, which can identify sensitive data in a database table and perform classified and classified processing on the database table.
In a first aspect, an embodiment of the present invention provides a database table processing method, including:
acquiring a table to be processed from a database;
determining the sensitive field type of each field in the table to be processed according to the field information of each field in the table to be processed;
determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed;
and determining the sensitivity level of the table to be processed according to the classification result of the table to be processed.
In a second aspect, an embodiment of the present invention further provides a database table processing apparatus, including:
the table acquisition module is used for acquiring a table to be processed from the database;
a field type determining module, configured to determine, according to field information of each field in the table to be processed, a sensitive field type to which each field in the table to be processed belongs;
the classification result determining module is used for determining the classification result of the table to be processed according to the sensitive field type of each field in the table to be processed;
and the sensitivity level determining module is used for determining the sensitivity level of the table to be processed according to the classification result of the table to be processed.
In a third aspect, an embodiment of the present invention further provides a computer device, which includes a memory, a processor, and a computer program stored in the memory and executable on the processor, where the processor, when executing the computer program, implements the database table processing method according to the embodiment of the present invention.
In a fourth aspect, an embodiment of the present invention further provides a computer-readable storage medium, on which a computer program is stored, where the computer program is executed by a processor to implement the database table processing method according to the embodiment of the present invention.
According to the technical scheme of the embodiment of the invention, the table to be processed is obtained from the database, and then the sensitive field type of each field in the table to be processed is determined according to the field information of each field in the table to be processed; determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed; and finally, determining the sensitivity level of the table to be processed according to the classification result of the table to be processed, automatically identifying the sensitive field type of each field in the database table according to the database table, accurately classifying and grading the database table according to the sensitive field type of each field in the database table, and judging the classification result and the sensitivity level of the database table.
Drawings
Fig. 1 is a flowchart of a database table processing method according to an embodiment of the present invention.
Fig. 2 is a flowchart of a database table processing method according to a second embodiment of the present invention.
Fig. 3 is a schematic structural diagram of a database table processing apparatus according to a third embodiment of the present invention.
Fig. 4 is a schematic structural diagram of a computer device according to a fourth embodiment of the present invention.
Detailed Description
The present invention will be described in further detail with reference to the accompanying drawings and examples. It is to be understood that the specific embodiments described herein are merely illustrative of the invention and are not limiting of the invention.
It should be further noted that, for the convenience of description, only some but not all of the relevant aspects of the present invention are shown in the drawings. Before discussing exemplary embodiments in more detail, it should be noted that some exemplary embodiments are described as processes or methods depicted as flowcharts. Although a flowchart may describe the operations (or steps) as a sequential process, many of the operations can be performed in parallel, concurrently or simultaneously. In addition, the order of the operations may be re-arranged. The process may be terminated when its operations are completed, but may have additional steps not included in the figure. The processes may correspond to methods, functions, procedures, subroutines, and the like.
Example one
Fig. 1 is a flowchart of a database table processing method according to an embodiment of the present invention. The embodiment of the invention can be applied to the condition of identifying sensitive data in tables in a database and carrying out classification and grading processing on the database tables, and the method can be executed by the database table processing device provided by the embodiment of the invention, and the device can be realized in a software and/or hardware mode and can be generally integrated in computer equipment. For example in a server. As shown in fig. 1, the method of the embodiment of the present invention specifically includes:
Optionally, the table to be processed is one or more tables in the database that have not been subjected to classification and classification processing.
Alternatively, a large number of tables are stored in the database. Each table contains a plurality of fields, with different fields being used to store different traffic data. The table after classification and grading treatment has corresponding classification results and sensitivity levels. The classification result of the table is information indicating the type of data stored in the table. The sensitivity level of the table is information indicating the degree of sensitivity of data stored in the table. The database can perform corresponding safety processing on the tables according to the classification results and the sensitivity levels of the tables, and effectively reduces the probability of the occurrence of events such as important sensitive data leakage, tampering, illegal selling and the like.
Optionally, the database is scanned, and one or more tables without classification results and sensitivity levels in the database are obtained as the tables to be processed.
And 102, determining the sensitive field type of each field in the table to be processed according to the field information of each field in the table to be processed.
Optionally, the field information is related information of the field. The sensitive field type is the sensitive type of the data stored in the field. According to the sensitive field type of the field, whether the data stored in the field is sensitive data or not can be determined, and the sensitive type of the data can be determined.
Optionally, the field information includes: field name, field remarks and/or field content. The field name is the name of the field. The field name may be set by the creator of the table. The field remarks are remark information related to the field, and can be used for explaining the type of data in the field. The field contents may be a specific data type of a field value of the field.
Optionally, the sensitive field types may include: user name, user phone number, user gender, Internet Technology (IT) device model number, IT device quantity, user login quantity, user registration quantity, user purchase quantity, and non-sensitive data.
In the case where the sensitive field type to which the field belongs is "user name", it can be determined that the data stored in the field is sensitive data, and the sensitive type of the data is "user name". In the case where the sensitive field type to which the field belongs is "non-sensitive data", it may be determined that the data stored in the field is not sensitive data.
Optionally, the determining, according to the field information of each field in the to-be-processed table, the sensitive field type to which each field in the to-be-processed table belongs includes: and searching for a sensitive field type matched with the field information of each field in the table to be processed according to a preset corresponding relation between the field information and the sensitive field type, and determining the sensitive field type matched with the field information of each field in the table to be processed as the sensitive field type to which each field in the table to be processed belongs.
Optionally, the method further includes: and establishing a corresponding relation between the field information and the sensitive field type according to the sensitive field type setting information input by the user.
The user can input the sensitive field type setting information through the terminal device. The sensitive field type setting information is information for setting a correspondence between field information and a sensitive field type, and may include a plurality of types of field information and sensitive field types corresponding to various types of field information.
In a specific example, the sensitive field type setting information includes: the field information comprises first type field information, a sensitive field type corresponding to the first type field information, second type field information, a sensitive field type corresponding to the second type field information, third type field information, a sensitive field type corresponding to the third type field information, fourth type field information, a sensitive field type corresponding to the fourth type field information, fifth type field information, a sensitive field type corresponding to the fifth type field information, sixth type field information, a sensitive field type corresponding to the sixth type field information, seventh type field information, a sensitive field type corresponding to the seventh type field information, eighth type field information and a sensitive field type corresponding to the eighth type field information.
The first type field information is: the field name, the field remark, the field content and the sensitive field type corresponding to the first type of field information are the name, the name and the name of the user. The second type of field information is: the field name "mobile phone number", the field remark "mobile phone number" and the field content "mobile phone number", and the sensitive field type corresponding to the second type of field information is "user mobile phone number". The third type of field information is: the field name "gender", the field remark "gender" and the field content "gender", and the sensitive field type corresponding to the third type of field information is "user gender". The fourth type field information is: the field name "switch model", the field remark "switch model" and the field content "switch model", and the sensitive field type corresponding to the fourth type of field information is "IT equipment model". The fifth type of field information is: the field name "number of switches", the field remark "number of switches" and the field content "number of switches", and the sensitive field type corresponding to the fifth type of field information is "number of IT devices". The sixth type field information is: the field name "login number", the field remark "login number", and the field content "login number", and the sensitive field type corresponding to the sixth type of field information is "user login number". The seventh type of field information is: the field name "registration number", the field remark "registration number" and the field content "registration number", and the sensitive field type corresponding to the seventh type of field information is "user registration number". The eighth type field information is: the field name "the number of purchasers", the field remark "the number of purchasers" and the field content "the number of purchasers", and the sensitive field type corresponding to the eighth type of field information is "the number of user purchasers".
According to the sensitive field type setting information, establishing a corresponding relation between a field name ', a field remark ' name ', a field content ' name ' and a sensitive field type ' user name ', establishing a corresponding relation between the field name ' mobile phone number ', the field remark ' mobile phone number ', the field content ' mobile phone number ' and a sensitive field type ' user mobile phone number ', establishing a corresponding relation between the field name ' gender ', the field remark ' gender ', the field content ' gender ' and a sensitive field type ' user gender ', establishing a corresponding relation between the field name ' switch model ', the field remark ' switch model ', the field content ' switch model ' and a sensitive field type ' IT equipment model ', establishing a corresponding relation between the field name ' switch number ', the field remark ' switch number ', the field content ' switch number ' and the sensitive field type ' IT equipment number ', the method comprises the steps of establishing a corresponding relation between a field name 'login number', a field remark 'login number', a field content 'login number' and a sensitive field type 'user login number', establishing a corresponding relation between a field name 'registration number', a field remark 'registration number', a field content 'registration number' and a sensitive field type 'user registration number', and establishing a corresponding relation between a field name 'purchasing number', a field remark 'purchasing number', a field content 'purchasing number' and a sensitive field type 'user purchasing number'.
Optionally, for each field in the table to be processed, field information of the field is identified, and then a sensitive field type matched with the field information of the field is searched according to a preset corresponding relationship between the field information and the sensitive field type. And when the sensitive field type matched with the field information of the field is found, determining the sensitive field type matched with the field information of the field as the sensitive field type to which the field belongs. And when the sensitive field type matched with the field information of the field is not found, determining that the sensitive field type of the field is 'non-sensitive data'.
In one embodiment, the field name, field notes, and field contents of the field are identified, and the field name of the field is determined as "name" the field notes are "name" and the field contents are "name". And then searching for the sensitive field type matched with the field name ', the field remark ' name ' and the field content ' name ' according to the corresponding relation between the preset field information and the sensitive field type. When the sensitive field type user name matched with the field name, the field remark and the field content is found, the sensitive field type user name matched with the field information of the field is determined as the sensitive field type to which the field belongs.
Optionally, the determining, according to the sensitive field type to which each field in the table to be processed belongs, a classification result of the table to be processed includes: and when detecting that the sensitive field type of each field in the table to be processed has the target key sensitive field type, determining the classification result matched with the target key sensitive field type as the classification result of the table to be processed.
Optionally, the key sensitive field types are one or more sensitive field types used to determine the classification result of the table.
Optionally, the method further includes: and establishing a corresponding relation between the type of the key sensitive field and the classification result according to the form classification setting information input by the user.
The user can input the form classification setting information through the terminal device. The form classification setting information is information for setting a correspondence between key sensitive field types and classification results, and may include key sensitive field types of a plurality of types and classification results corresponding to the key sensitive field types of each type.
In one embodiment, the table classification setting information: the method comprises the steps of obtaining a first type key sensitive field type, a classification result corresponding to the first type key sensitive field type, a second type key sensitive field type, a classification result corresponding to the second type key sensitive field type, a third type key sensitive field type and a classification result corresponding to the third type key sensitive field type. The first type of key sensitive field types are: the classification result corresponding to the first key sensitive field type is 'user basic data'. The second type of key sensitive field is: the sensitive field type is 'IT equipment model', the sensitive field type is 'IT equipment number', and the classification result corresponding to the second key sensitive field type is 'IT equipment data'. The third type of key sensitive field is: the classification result corresponding to the third type of key sensitive field type is 'operation data'.
According to the form classification setting information, a corresponding relation between a sensitive field type 'user name', a sensitive field type 'user mobile phone number', a sensitive field type 'user gender' and classification result 'user basic data' is established, a corresponding relation between a sensitive field type 'IT equipment model', a sensitive field type 'IT equipment quantity' and classification result 'IT equipment data' is established, and a corresponding relation between a sensitive field type 'user login quantity', a sensitive field type 'user registration quantity', a sensitive field type 'user purchase quantity' and classification result 'operation data' is established.
Optionally, the sensitive field type to which each field in the table to be processed belongs is identified. When the sensitive field type 'user name', the sensitive field type 'user mobile phone number' and the sensitive field type 'user gender' exist in the sensitive field types to which the fields in the table to be processed belong, namely when the sensitive field types to which the fields in the table to be processed belong are detected to have the first key sensitive field type, determining the classification result 'user basic data' matched with the first key sensitive field type as the classification result of the table to be processed. When the sensitive field type 'IT equipment model' and the sensitive field type 'IT equipment number' exist in the sensitive field type to which each field in the table to be processed belongs, namely when the sensitive field type to which each field in the table to be processed belongs is detected to have a second key sensitive field type, determining a classification result 'IT equipment data' matched with the second key sensitive field type as the classification result of the table to be processed. When the sensitive field type 'user login number', the sensitive field type 'user registration number' and the sensitive field type 'user purchase number' exist in the sensitive field types to which the fields in the table to be processed belong, namely when the sensitive field types to which the fields in the table to be processed belong are detected to have a third key sensitive field type, determining the classification result 'operation data' matched with the third key sensitive field type as the classification result of the table to be processed.
Optionally, when it is detected that there is no key sensitive field type of any type in the sensitive field types to which each field in the table to be processed belongs, it is determined that the classification result of the table to be processed is "non-important data".
And step 104, determining the sensitivity level of the table to be processed according to the classification result of the table to be processed.
Optionally, the determining the sensitivity level of the table to be processed according to the classification result of the table to be processed includes: and searching a sensitivity grade matched with the classification result of the table to be processed according to the corresponding relation between the preset classification result and the sensitivity grade, and determining the sensitivity grade matched with the classification result of the table to be processed as the sensitivity grade of the table to be processed.
Optionally, the method further includes: and establishing a corresponding relation between the classification result and the sensitivity level according to the sensitivity level setting information input by the user.
The user can input the sensitivity level setting information through the terminal device. The table classification setting information is information for setting a correspondence between the classification result and the sensitivity level, and may include a plurality of types of classification results and sensitivity levels corresponding to the types of classification results.
Optionally, the sensitivity levels include: primary, secondary and tertiary. The sensitivity degree decreases successively. The data in the table with the sensitivity level as one level contains important sensitive data. The data in the table with the sensitivity level of two levels contains general sensitive data. The data in the table with the sensitivity level of three levels does not contain sensitive data.
In a specific example, the sensitivity level setting information includes: the classification method comprises the steps of a first class classification result, a sensitivity grade corresponding to the first class classification result, a second class classification result, a sensitivity grade corresponding to the second class classification result, a third class classification result and a sensitivity grade corresponding to the third class classification result. The first category classification results are: the classification result "user basic data", the classification result "IT device data", and the sensitivity level corresponding to the first classification result is "first class". The second classification result is: the classification result is 'operation data', and the sensitivity level corresponding to the second classification result is 'second grade'. The third classification result is: the classified result is 'non-important data', and the sensitivity level corresponding to the classified result of the third class is 'third class'. According to the sensitivity level setting information, a corresponding relation between classification result 'user basic data', classification result 'IT equipment data' and sensitivity level 'primary', a corresponding relation between classification result 'operation data' and sensitivity level 'secondary', and a corresponding relation between classification result 'non-important data' and sensitivity level 'tertiary' are established.
Optionally, the sensitivity level matched with the classification result of the table to be processed is searched according to the corresponding relationship between the preset classification result and the sensitivity level.
In one embodiment, the classification result of the table to be processed is "user basic data". And determining the sensitivity level 'first grade' matched with the classification result 'user basic data' as the sensitivity level of the table to be processed when the sensitivity level 'first grade' matched with the classification result 'user basic data' of the table to be processed is found.
In another embodiment, the classification result of the table to be processed is "IT device data". And determining the sensitivity level 'first grade' matched with the classification result 'IT equipment data' as the sensitivity level of the table to be processed when the sensitivity level 'first grade' matched with the classification result 'IT equipment data' of the table to be processed is found.
In another specific example, the classification result of the table to be processed is "operation data". And determining the sensitivity level 'two grade' matched with the classification result 'operation data' as the sensitivity level of the table to be processed when the sensitivity level 'two grade' matched with the classification result 'operation data' is found.
In another embodiment, the classification result of the table to be processed is "non-important data". And determining the sensitivity level 'three levels' matched with the classification result 'non-important data' as the sensitivity level of the table to be processed when the sensitivity level 'three levels' matched with the classification result 'non-important data' is found.
Optionally, after determining the sensitivity level of the table to be processed according to the classification result of the table to be processed, the method further includes: sending the table to be processed, and the classification result and the sensitivity level of the table to be processed to a manual auditing platform; when the classification result modification information and/or the sensitivity level modification information of the table to be processed fed back by the manual auditing platform are detected, updating the classification result and/or the sensitivity level of the table to be processed according to the classification result modification information and/or the sensitivity level modification information of the table to be processed; updating the corresponding relation between the key sensitive field type and the classification result and/or the corresponding relation between the preset classification result and the sensitive grade according to the classification result modification information and/or the sensitive grade modification information of the table to be processed; and storing the classification result and the sensitivity level of the updated table to be processed.
Optionally, the manual review platform is a platform for performing manual review on the classification result and the sensitivity level of the table to be processed. And the manual auditing platform receives the table to be processed and the classification result and the sensitivity level of the table to be processed, and scans and identifies whether the classification result of the table to be processed is matched with the table to be processed and whether the sensitivity level of the table to be processed is matched with the table to be processed.
Optionally, when the manual auditing platform detects that the classification result of the table to be processed is matched with the table to be processed and the sensitivity level of the table to be processed is matched with the table to be processed, the manual auditing platform feeds back processing completion information corresponding to the table to be processed. The processing completion information is used for prompting that the classification result and the sensitivity level of the table to be processed do not need to be modified. And when processing completion information corresponding to the to-be-processed form fed back by the manual auditing platform is detected, storing the classification result and the sensitivity level of the to-be-processed form.
Optionally, when detecting that the classification result of the table to be processed is not matched with the table to be processed, the manual review platform acquires classification result modification information input by a reviewer, and returns the classification result modification information as feedback information. The classification result modification information includes a correct classification result of the table to be processed. And the correct classification result is the accurate classification result of the to-be-processed table determined by the auditor according to the service data stored in the to-be-processed table. And when detecting the classification result modification information of the to-be-processed form fed back by the manual auditing platform, updating the classification result of the to-be-processed form into a correct classification result of the to-be-processed form. And updating the classification result corresponding to the target key sensitive field type related to the table to be processed into a correct classification result of the table to be processed according to the classification result modification information of the table to be processed, so that the corresponding relation between the preset key sensitive field type and the classification result is automatically memorized and updated according to the classification result modification information of the table to be processed, and the scanning recognition result is optimized.
Optionally, when detecting that the sensitivity level of the table to be processed is not matched with the table to be processed, the manual review platform obtains sensitivity level modification information input by a reviewer, and returns the sensitivity level modification information as feedback information. The sensitivity level modification information comprises the correct sensitivity level of the table to be processed. And determining the accurate sensitivity level of the table to be processed according to the service data stored in the table to be processed by the auditor as a correct classification result. And when the sensitivity grade modification information of the to-be-processed form fed back by the manual auditing platform is detected, updating the sensitivity grade of the to-be-processed form to be the correct sensitivity grade of the to-be-processed form. And updating the sensitivity grade corresponding to the classification result related to the table to be processed into the correct sensitivity grade of the table to be processed according to the sensitivity grade modification information of the table to be processed, so that the corresponding relation between the preset classification result and the sensitivity grade is automatically memorized and updated according to the sensitivity grade modification information of the table to be processed, and the scanning recognition result is optimized.
The embodiment of the invention provides a database table processing method, which comprises the steps of obtaining a table to be processed from a database, and then determining the sensitive field type of each field in the table to be processed according to the field information of each field in the table to be processed; determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed; and finally, determining the sensitivity level of the table to be processed according to the classification result of the table to be processed, automatically identifying the sensitive field type of each field in the database table according to the database table, accurately classifying and grading the database table according to the sensitive field type of each field in the database table, and judging the classification result and the sensitivity level of the database table.
Example two
Fig. 2 is a flowchart of a database table processing method according to a second embodiment of the present invention. Embodiments of the invention may be combined with various alternatives in one or more of the embodiments described above.
As shown in fig. 2, the method of the embodiment of the present invention specifically includes:
Optionally, the method further includes: and establishing a corresponding relation between the field information and the sensitive field type according to the sensitive field type setting information input by the user. The user can input the sensitive field type setting information through the terminal device. The sensitive field type setting information is information for setting a correspondence between field information and a sensitive field type, and may include a plurality of types of field information and sensitive field types corresponding to various types of field information.
Optionally, for each field in the table to be processed, field information of the field is identified, and then a sensitive field type matched with the field information of the field is searched according to a preset corresponding relationship between the field information and the sensitive field type. And when the sensitive field type matched with the field information of the field is found, determining the sensitive field type matched with the field information of the field as the sensitive field type to which the field belongs. And when the sensitive field type matched with the field information of the field is not found, determining that the sensitive field type of the field is 'non-sensitive data'.
Optionally, the key sensitive field types are one or more sensitive field types used to determine the classification result of the table.
Optionally, the method further includes: and establishing a corresponding relation between the type of the key sensitive field and the classification result according to the form classification setting information input by the user. The user can input the form classification setting information through the terminal device. The form classification setting information is information for setting a correspondence between key sensitive field types and classification results, and may include key sensitive field types of a plurality of types and classification results corresponding to the key sensitive field types of each type.
Optionally, when it is detected that there is no key sensitive field type of any type in the sensitive field types to which each field in the table to be processed belongs, it is determined that the classification result of the table to be processed is "non-important data".
And 204, searching a sensitivity grade matched with the classification result of the table to be processed according to a preset corresponding relation between the classification result and the sensitivity grade, and determining the sensitivity grade matched with the classification result of the table to be processed as the sensitivity grade of the table to be processed.
Optionally, the method further includes: and establishing a corresponding relation between the classification result and the sensitivity level according to the sensitivity level setting information input by the user. The user can input the sensitivity level setting information through the terminal device. The table classification setting information is information for setting a correspondence between the classification result and the sensitivity level, and may include a plurality of types of classification results and sensitivity levels corresponding to the types of classification results.
Optionally, the sensitivity levels include: primary, secondary and tertiary. The sensitivity degree decreases successively. The data in the table with the sensitivity level as one level contains important sensitive data. The data in the table with the sensitivity level of two levels contains general sensitive data. The data in the table with the sensitivity level of three levels does not contain sensitive data.
And step 205, sending the table to be processed, the classification result and the sensitivity level of the table to be processed to a manual auditing platform.
Optionally, the manual review platform is a platform for performing manual review on the classification result and the sensitivity level of the table to be processed. And the manual auditing platform receives the table to be processed and the classification result and the sensitivity level of the table to be processed, and scans and identifies whether the classification result of the table to be processed is matched with the table to be processed and whether the sensitivity level of the table to be processed is matched with the table to be processed.
Optionally, when the manual auditing platform detects that the classification result of the table to be processed is matched with the table to be processed and the sensitivity level of the table to be processed is matched with the table to be processed, the manual auditing platform feeds back processing completion information corresponding to the table to be processed. The processing completion information is used for prompting that the classification result and the sensitivity level of the table to be processed do not need to be modified. And when processing completion information corresponding to the to-be-processed form fed back by the manual auditing platform is detected, storing the classification result and the sensitivity level of the to-be-processed form.
And step 206, when the classification result modification information and/or the sensitivity level modification information of the to-be-processed form fed back by the manual auditing platform are detected, updating the classification result and/or the sensitivity level of the to-be-processed form according to the classification result modification information and/or the sensitivity level modification information of the to-be-processed form.
Optionally, when detecting that the classification result of the table to be processed is not matched with the table to be processed, the manual review platform acquires classification result modification information input by a reviewer, and returns the classification result modification information as feedback information. The classification result modification information includes a correct classification result of the table to be processed. And the correct classification result is the accurate classification result of the to-be-processed table determined by the auditor according to the service data stored in the to-be-processed table. And when detecting the classification result modification information of the to-be-processed form fed back by the manual auditing platform, updating the classification result of the to-be-processed form into a correct classification result of the to-be-processed form.
Optionally, when detecting that the sensitivity level of the table to be processed is not matched with the table to be processed, the manual review platform obtains sensitivity level modification information input by a reviewer, and returns the sensitivity level modification information as feedback information. The sensitivity level modification information comprises the correct sensitivity level of the table to be processed. And determining the accurate sensitivity level of the table to be processed according to the service data stored in the table to be processed by the auditor as a correct classification result. And when the sensitivity grade modification information of the to-be-processed form fed back by the manual auditing platform is detected, updating the sensitivity grade of the to-be-processed form to be the correct sensitivity grade of the to-be-processed form.
And step 207, updating the corresponding relation between the key sensitive field type and the classification result and/or the corresponding relation between the preset classification result and the sensitivity level according to the classification result modification information and/or the sensitivity level modification information of the table to be processed.
Optionally, when detecting that the classification result of the table to be processed is not matched with the table to be processed, the manual review platform acquires classification result modification information input by a reviewer, and returns the classification result modification information as feedback information. The classification result modification information includes a correct classification result of the table to be processed. And updating the classification result corresponding to the target key sensitive field type related to the table to be processed into a correct classification result of the table to be processed according to the classification result modification information of the table to be processed, so that the corresponding relation between the preset key sensitive field type and the classification result is automatically memorized and updated according to the classification result modification information of the table to be processed, and the scanning recognition result is optimized.
Optionally, when detecting that the sensitivity level of the table to be processed is not matched with the table to be processed, the manual review platform obtains sensitivity level modification information input by a reviewer, and returns the sensitivity level modification information as feedback information. The sensitivity level modification information comprises the correct sensitivity level of the table to be processed. And updating the sensitivity grade corresponding to the classification result related to the table to be processed into the correct sensitivity grade of the table to be processed according to the sensitivity grade modification information of the table to be processed, so that the corresponding relation between the preset classification result and the sensitivity grade is automatically memorized and updated according to the sensitivity grade modification information of the table to be processed, and the scanning recognition result is optimized.
And step 208, storing the classification result and the sensitivity level of the updated table to be processed.
Optionally, after the classification result and/or the sensitivity level of the table to be processed is updated according to the classification result modification information and/or the sensitivity level modification information of the table to be processed, the updated classification result and the sensitivity level of the table to be processed are stored in a database, so that the accurate classification result and the sensitivity level of the table to be processed are stored.
The embodiment of the invention provides a database table processing method, which comprises the steps of searching a sensitive field type matched with field information of each field in a table to be processed according to a corresponding relation between preset field information and the sensitive field type, determining the sensitive field type matched with the field information of each field in the table to be processed as the sensitive field type to which each field in the table to be processed belongs, determining a classification result matched with a target key sensitive field type as the classification result of the table to be processed when detecting that the target key sensitive field type exists in the sensitive field type to which each field in the table to be processed belongs, searching a sensitive grade matched with the classification result of the table to be processed according to the corresponding relation between the preset classification result and the sensitive grade, and determining the sensitive grade matched with the classification result of the table to be the sensitive field of the table to be processed The grade can automatically identify the sensitive field type of each field in the database table aiming at the database table, accurately classify and grade the database table according to the sensitive field type of each field in the database table, judge the classification result and the sensitive grade of the database table, update the classification result and/or the sensitive grade of the table to be processed according to the classification result modification information and/or the sensitive grade modification information of the table to be processed when the classification result modification information and/or the sensitive grade modification information of the table to be processed fed back by a manual auditing platform is detected, update the corresponding relation between the key sensitive field type and the classification result and/or the corresponding relation between the preset classification result and the sensitive grade, and manually audit the classification result and the sensitive grade of the database table, the accuracy of the classification result and the sensitivity level of the database table is further improved.
EXAMPLE III
Fig. 3 is a schematic structural diagram of a database table processing apparatus according to a third embodiment of the present invention. As shown in fig. 3, the apparatus includes: a table acquisition module 301, a field type determination module 302, a classification result determination module 303, and a sensitivity level determination module 304.
The table acquiring module 301 is configured to acquire a table to be processed from a database; a field type determining module 302, configured to determine, according to field information of each field in the table to be processed, a sensitive field type to which each field in the table to be processed belongs; a classification result determining module 303, configured to determine a classification result of the table to be processed according to the sensitive field type to which each field in the table to be processed belongs; and a sensitivity level determining module 304, configured to determine a sensitivity level of the table to be processed according to the classification result of the table to be processed.
The embodiment of the invention provides a database table processing device, which is characterized in that a table to be processed is obtained from a database, and then the sensitive field type of each field in the table to be processed is determined according to the field information of each field in the table to be processed; determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed; and finally, determining the sensitivity level of the table to be processed according to the classification result of the table to be processed, automatically identifying the sensitive field type of each field in the database table according to the database table, accurately classifying and grading the database table according to the sensitive field type of each field in the database table, and judging the classification result and the sensitivity level of the database table.
In an optional implementation manner of the embodiment of the present invention, optionally, the field information includes: field name, field remarks and/or field content.
In an optional implementation manner of the embodiment of the present invention, optionally, when the field type determining module 302 performs an operation of determining, according to the field information of each field in the to-be-processed table, a sensitive field type to which each field in the to-be-processed table belongs, specifically, the operation is to: and searching for a sensitive field type matched with the field information of each field in the table to be processed according to a preset corresponding relation between the field information and the sensitive field type, and determining the sensitive field type matched with the field information of each field in the table to be processed as the sensitive field type to which each field in the table to be processed belongs.
In an optional implementation manner of the embodiment of the present invention, optionally, when the classification result determining module 303 executes an operation of determining the classification result of the table to be processed according to the sensitive field type to which each field in the table to be processed belongs, specifically, the operation is to: and when detecting that the sensitive field type of each field in the table to be processed has the target key sensitive field type, determining the classification result matched with the target key sensitive field type as the classification result of the table to be processed.
In an optional implementation manner of the embodiment of the present invention, optionally, the database table processing apparatus may further include: and the relation establishing module is used for establishing the corresponding relation between the key sensitive field type and the classification result according to the form classification setting information input by the user.
In an optional implementation manner of the embodiment of the present invention, optionally, when the sensitivity level determining module 304 executes an operation of determining the sensitivity level of the to-be-processed table according to the classification result of the to-be-processed table, specifically, the operation is to: and searching a sensitivity grade matched with the classification result of the table to be processed according to the corresponding relation between the preset classification result and the sensitivity grade, and determining the sensitivity grade matched with the classification result of the table to be processed as the sensitivity grade of the table to be processed.
In an optional implementation manner of the embodiment of the present invention, optionally, the database table processing apparatus may further include: the result sending module is used for sending the table to be processed, and the classification result and the sensitivity level of the table to be processed to a manual auditing platform; the result updating module is used for updating the classification result and/or the sensitivity level of the table to be processed according to the classification result modification information and/or the sensitivity level modification information of the table to be processed when the classification result modification information and/or the sensitivity level modification information of the table to be processed fed back by the manual auditing platform are detected; the relation updating module is used for updating the corresponding relation between the key sensitive field type and the classification result and/or the corresponding relation between the preset classification result and the sensitive grade according to the classification result modification information and/or the sensitive grade modification information of the table to be processed; and the result storage module is used for storing the classification result and the sensitivity level of the updated table to be processed.
With regard to the apparatus in the above-described embodiment, the specific manner in which each module performs the operation has been described in detail in the embodiment related to the method, and will not be elaborated here.
The database table processing device can execute the database table processing method provided by any embodiment of the invention, and has the corresponding functional modules and beneficial effects of executing the database table processing method.
Example four
Fig. 4 is a schematic structural diagram of a computer device according to a fourth embodiment of the present invention. FIG. 4 illustrates a block diagram of an exemplary computer device 12 suitable for use in implementing embodiments of the present invention. The computer device 12 shown in FIG. 4 is only one example and should not bring any limitations to the functionality or scope of use of embodiments of the present invention.
As shown in FIG. 4, computer device 12 is in the form of a general purpose computing device. The components of computer device 12 may include, but are not limited to: one or more processors 16, a memory 28, and a bus 18 that connects the various system components (including the memory 28 and the processors 16).
Computer device 12 typically includes a variety of computer system readable media. Such media may be any available media that is accessible by computer device 12 and includes both volatile and nonvolatile media, removable and non-removable media.
The memory 28 may include computer system readable media in the form of volatile memory, such as Random Access Memory (RAM)30 and/or cache memory 32. Computer device 12 may further include other removable/non-removable, volatile/nonvolatile computer system storage media. By way of example only, storage system 34 may be used to read from and write to non-removable, nonvolatile magnetic media (not shown in FIG. 4, and commonly referred to as a "hard drive"). Although not shown in FIG. 4, a magnetic disk drive for reading from and writing to a removable, nonvolatile magnetic disk (e.g., a "floppy disk") and an optical disk drive for reading from or writing to a removable, nonvolatile optical disk (e.g., a CD-ROM, DVD-ROM, or other optical media) may be provided. In these cases, each drive may be connected to bus 18 by one or more data media interfaces. Memory 28 may include at least one program product having a set (e.g., at least one) of program modules that are configured to carry out the functions of embodiments of the invention.
A program/utility 40 having a set (at least one) of program modules 42 may be stored, for example, in memory 28, such program modules 42 including, but not limited to, an operating system, one or more application programs, other program modules, and program data, each of which examples or some combination thereof may comprise an implementation of a network environment. Program modules 42 generally carry out the functions and/or methodologies of the described embodiments of the invention.
Computer device 12 may also communicate with one or more external devices 14 (e.g., keyboard, pointing device, display 24, etc.), with one or more devices that enable a user to interact with computer device 12, and/or with any devices (e.g., network card, modem, etc.) that enable computer device 12 to communicate with one or more other computing devices. Such communication may be through an input/output (I/O) interface 22. Also, computer device 12 may communicate with one or more networks (e.g., a Local Area Network (LAN), a Wide Area Network (WAN), and/or a public network such as the Internet) via network adapter 20. As shown, network adapter 20 communicates with the other modules of computer device 12 via bus 18. It should be appreciated that although not shown in FIG. 4, other hardware and/or software modules may be used in conjunction with computer device 12, including but not limited to: microcode, device drivers, redundant processing units, external disk drive arrays, RAID systems, tape drives, and data backup storage systems, among others.
The processor 16 executes various functional applications and data processing by running the program stored in the memory 28, thereby implementing the database table processing method provided by the embodiment of the present invention: acquiring a table to be processed from a database; determining the sensitive field type of each field in the table to be processed according to the field information of each field in the table to be processed; determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed; and determining the sensitivity level of the table to be processed according to the classification result of the table to be processed.
EXAMPLE five
Fifth embodiment of the present invention provides a computer-readable storage medium, on which a computer program is stored, where when the computer program is executed by a processor, the computer program implements a database table processing method provided in the embodiments of the present invention: acquiring a table to be processed from a database; determining the sensitive field type of each field in the table to be processed according to the field information of each field in the table to be processed; determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed; and determining the sensitivity level of the table to be processed according to the classification result of the table to be processed.
Any combination of one or more computer-readable media may be employed. The computer readable medium may be a computer readable signal medium or a computer readable storage medium. A computer readable storage medium may be, for example, but not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any combination of the foregoing. More specific examples (a non-exhaustive list) of the computer readable storage medium would include the following: an electrical connection having one or more wires, a portable computer diskette, a hard disk, a Random Access Memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing. In the context of this document, a computer readable storage medium may be any tangible medium that can contain, or store a program for use by or in connection with an instruction execution system, apparatus, or device.
A computer readable signal medium may include a propagated data signal with computer readable program code embodied therein, for example, in baseband or as part of a carrier wave. Such a propagated data signal may take many forms, including, but not limited to, electro-magnetic, optical, or any suitable combination thereof. A computer readable signal medium may also be any computer readable medium that is not a computer readable storage medium and that can communicate, propagate, or transport a program for use by or in connection with an instruction execution system, apparatus, or device.
Program code embodied on a computer readable medium may be transmitted using any appropriate medium, including but not limited to wireless, wireline, optical fiber cable, RF, etc., or any suitable combination of the foregoing.
Computer program code for carrying out operations for aspects of the present invention may be written in any combination of one or more programming languages, including an object oriented programming language such as Java, Smalltalk, C + + or the like and conventional procedural programming languages, such as the "C" programming language or similar programming languages. The program code may execute entirely on the user's computer, partly on the user's computer, as a stand-alone software package, partly on the user's computer and partly on a remote computer or entirely on the remote computer or computer device. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a Local Area Network (LAN) or a Wide Area Network (WAN), or the connection may be made to an external computer (for example, through the Internet using an Internet service provider).
It is to be noted that the foregoing is only illustrative of the preferred embodiments of the present invention and the technical principles employed. It will be understood by those skilled in the art that the present invention is not limited to the particular embodiments described herein, but is capable of various obvious changes, rearrangements and substitutions as will now become apparent to those skilled in the art without departing from the scope of the invention. Therefore, although the present invention has been described in greater detail by the above embodiments, the present invention is not limited to the above embodiments, and may include other equivalent embodiments without departing from the spirit of the present invention, and the scope of the present invention is determined by the scope of the appended claims.
Claims (10)
1. A database table processing method, comprising:
acquiring a table to be processed from a database;
determining the sensitive field type of each field in the table to be processed according to the field information of each field in the table to be processed;
determining a classification result of the table to be processed according to the sensitive field type of each field in the table to be processed;
and determining the sensitivity level of the table to be processed according to the classification result of the table to be processed.
2. The method of claim 1, wherein the field information comprises: field name, field remarks and/or field content.
3. The method according to claim 1, wherein the determining, according to the field information of each field in the table to be processed, the sensitive field type to which each field in the table to be processed belongs includes:
and searching for a sensitive field type matched with the field information of each field in the table to be processed according to a preset corresponding relation between the field information and the sensitive field type, and determining the sensitive field type matched with the field information of each field in the table to be processed as the sensitive field type to which each field in the table to be processed belongs.
4. The method according to claim 1, wherein the determining the classification result of the table to be processed according to the sensitive field type to which each field in the table to be processed belongs comprises:
and when detecting that the sensitive field type of each field in the table to be processed has the target key sensitive field type, determining the classification result matched with the target key sensitive field type as the classification result of the table to be processed.
5. The method of claim 4, further comprising:
and establishing a corresponding relation between the type of the key sensitive field and the classification result according to the form classification setting information input by the user.
6. The method according to claim 1 or 5, wherein the determining the sensitivity level of the table to be processed according to the classification result of the table to be processed comprises:
and searching a sensitivity grade matched with the classification result of the table to be processed according to the corresponding relation between the preset classification result and the sensitivity grade, and determining the sensitivity grade matched with the classification result of the table to be processed as the sensitivity grade of the table to be processed.
7. The method of claim 6, after determining the sensitivity level of the table to be processed according to the classification result of the table to be processed, further comprising:
sending the table to be processed, and the classification result and the sensitivity level of the table to be processed to a manual auditing platform;
when the classification result modification information and/or the sensitivity level modification information of the table to be processed fed back by the manual auditing platform are detected, updating the classification result and/or the sensitivity level of the table to be processed according to the classification result modification information and/or the sensitivity level modification information of the table to be processed;
updating the corresponding relation between the key sensitive field type and the classification result and/or the corresponding relation between the preset classification result and the sensitive grade according to the classification result modification information and/or the sensitive grade modification information of the table to be processed;
and storing the classification result and the sensitivity level of the updated table to be processed.
8. A database table processing apparatus, comprising:
the table acquisition module is used for acquiring a table to be processed from the database;
a field type determining module, configured to determine, according to field information of each field in the table to be processed, a sensitive field type to which each field in the table to be processed belongs;
the classification result determining module is used for determining the classification result of the table to be processed according to the sensitive field type of each field in the table to be processed;
and the sensitivity level determining module is used for determining the sensitivity level of the table to be processed according to the classification result of the table to be processed.
9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, characterized in that the processor implements the database table processing method according to any one of claims 1 to 7 when executing the computer program.
10. A computer-readable storage medium, on which a computer program is stored, which, when being executed by a processor, carries out a database table processing method according to any one of claims 1 to 7.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110424422.1A CN113032834A (en) | 2021-04-20 | 2021-04-20 | Database table processing method, device, equipment and storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110424422.1A CN113032834A (en) | 2021-04-20 | 2021-04-20 | Database table processing method, device, equipment and storage medium |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN113032834A true CN113032834A (en) | 2021-06-25 |
Family
ID=76457004
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110424422.1A Pending CN113032834A (en) | 2021-04-20 | 2021-04-20 | Database table processing method, device, equipment and storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113032834A (en) |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114169004A (en) * | 2021-12-10 | 2022-03-11 | 泰康保险集团股份有限公司 | Data processing method and device, electronic equipment and computer readable storage medium |
| CN114265967A (en) * | 2022-03-01 | 2022-04-01 | 中国光大银行股份有限公司 | Sensitive data security level marking method and device |
Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108536739A (en) * | 2018-03-07 | 2018-09-14 | 中国平安人寿保险股份有限公司 | The recognition methods of metadata sensitive information field, device, equipment and storage medium |
| CN109614816A (en) * | 2018-11-19 | 2019-04-12 | 平安科技（深圳）有限公司 | Data desensitization method, device and storage medium |
| CN110704873A (en) * | 2019-09-25 | 2020-01-17 | 全球能源互联网研究院有限公司 | Method and system for preventing sensitive data from being leaked |
| CN111914294A (en) * | 2020-07-31 | 2020-11-10 | 中国建设银行股份有限公司 | Database sensitive data identification method and system |
| CN112528315A (en) * | 2019-09-19 | 2021-03-19 | 华为技术有限公司 | Method and device for identifying sensitive data |
-
2021
- 2021-04-20 CN CN202110424422.1A patent/CN113032834A/en active Pending
Patent Citations (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN108536739A (en) * | 2018-03-07 | 2018-09-14 | 中国平安人寿保险股份有限公司 | The recognition methods of metadata sensitive information field, device, equipment and storage medium |
| CN109614816A (en) * | 2018-11-19 | 2019-04-12 | 平安科技（深圳）有限公司 | Data desensitization method, device and storage medium |
| CN112528315A (en) * | 2019-09-19 | 2021-03-19 | 华为技术有限公司 | Method and device for identifying sensitive data |
| CN110704873A (en) * | 2019-09-25 | 2020-01-17 | 全球能源互联网研究院有限公司 | Method and system for preventing sensitive data from being leaked |
| CN111914294A (en) * | 2020-07-31 | 2020-11-10 | 中国建设银行股份有限公司 | Database sensitive data identification method and system |
Cited By (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN114169004A (en) * | 2021-12-10 | 2022-03-11 | 泰康保险集团股份有限公司 | Data processing method and device, electronic equipment and computer readable storage medium |
| CN114265967A (en) * | 2022-03-01 | 2022-04-01 | 中国光大银行股份有限公司 | Sensitive data security level marking method and device |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US20100185660A1 (en) | Determining suitability of entity to provide products or services based on factors of acquisition context | |
| CN109345417B (en) | Online assessment method and terminal equipment for business personnel based on identity authentication | |
| KR102002024B1 (en) | Method for processing labeling of object and object management server | |
| CN110674360B (en) | Tracing method and system for data | |
| CN113032834A (en) | Database table processing method, device, equipment and storage medium | |
| CN110633381A (en) | Method and device for identifying false house source, storage medium and electronic equipment | |
| CN110688536A (en) | Label prediction method, device, equipment and storage medium | |
| CN110348471B (en) | Abnormal object identification method, device, medium and electronic equipment | |
| CN112989050B (en) | Form classification method, device, equipment and storage medium | |
| CN110837635A (en) | Method, device, equipment and storage medium for equipment verification | |
| US10489728B1 (en) | Generating and publishing a problem ticket | |
| CN110196952B (en) | Program code search processing method, device, equipment and storage medium | |
| CN114237588A (en) | Code warehouse selection method, device, equipment and storage medium | |
| CN114721943A (en) | Method and device for determining test range | |
| CN112685072B (en) | Method, device, equipment and storage medium for generating communication address knowledge base | |
| CN110083807B (en) | Contract modification influence automatic prediction method, device, medium and electronic equipment | |
| CN110674491B (en) | Method and device for real-time evidence obtaining of android application and electronic equipment | |
| CN111459936B (en) | Data management method, data management device and server | |
| CN114090650A (en) | Sample data identification method and device, electronic equipment and storage medium | |
| CN115016929A (en) | Data processing method, device, equipment and storage medium | |
| CN114443721A (en) | Data processing method and device, electronic equipment and storage medium | |
| CN112966671A (en) | Contract detection method and device, electronic equipment and storage medium | |
| CN115618350A (en) | Industrial control asset vulnerability detection method, equipment, storage medium and device | |
| CN114157439A (en) | Vulnerability scanning method, computing device and recording medium | |
| CN116629639B (en) | Evaluation information determining method and device, medium and electronic equipment |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |