WO2021068835A1

WO2021068835A1 - Data outgoing method and device, and related apparatus

Info

Publication number: WO2021068835A1
Application number: PCT/CN2020/119332
Authority: WO
Inventors: 胡慧贤
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-10-10
Filing date: 2020-09-30
Publication date: 2021-04-15
Also published as: CN110855611A; CN110855611B

Abstract

Disclosed in embodiments of the present disclosure is a data outgoing method, comprising: acquiring outgoing data; the outgoing data comprises an outgoing mail and an outgoing file; performing security detection on the outgoing data on the basis of a first identifier of the outgoing data; the first identifier is used for distinguishing the outgoing mail from the outgoing file; in the case that the outgoing data is the outgoing mail, sending the outgoing mail that has passed the security detection to a target object; and in the case that the outgoing data is the outgoing file, assigning a viewing mode viewed by the target object to the outgoing file according to the level of the target object and the level of the outgoing file. In this way, data can be sent out more safely.

Description

Method, device and related equipment for data outsourcing

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on October 10, 2019, the application number is 201910965731.2, and the invention title is "a method, device and related equipment for data outsourcing", the entire content of which is incorporated by reference In this application.

Technical field

The present disclosure relates to the computer field, and in particular, to a data outsourcing method, device and related equipment.

Background technique

The inventor realizes that with the development of computer technology and Internet technology, more and more companies send some materials, files, etc. to other companies through emails and instant messaging tools. In this way, the company's confidential information is likely to be sent out by mistake. Therefore, a method is needed to detect whether the external data sent to the outside of the company can be sent to the outside, or to provide a way for other companies to view the data. In this way, the company's data can be prevented from landing on external companies, and the risk of data leakage can be reduced.

Summary of the invention

The embodiments of the present disclosure provide a data outsourcing technology.

In the first aspect, a data outsourcing method is disclosed, including:

Obtain external data; the external data includes external mail and external files;

Perform security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

In a case where the external data is the external mail, sending the external mail that has passed the security check to the target object;

In the case where the external data is the external file, according to the level of the target object and the level of the external file, a viewing mode in which the external file is viewed by the target object is assigned.

In the second aspect, a data outsourcing device is disclosed, including:

An obtaining unit for obtaining external data; the external data includes external mail and external files;

The detection unit is configured to perform security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

A sending unit, configured to send the external mail that has passed the security check to the target object when the external data is the external mail;

The allocating unit is configured to, when the external data is the external file, allocate the viewing mode of the external file to be viewed by the target object according to the level of the target object and the level of the external file.

In a third aspect, a data outsourcing device is disclosed, including a processor and a memory, wherein the memory is used to store computer program code, and the processor is configured to call the computer program code to execute the following method:

In a fourth aspect, the present application also provides a computer-readable storage medium, the computer-readable storage medium stores a computer program, and the computer program includes program instructions that, when executed by a processor, cause the The processor performs the following methods:

Obtain external data; the external data includes: external mail and external files;

In the embodiments of the present disclosure, it can be avoided that the outgoing external data includes confidential data that is not allowed to be outgoing. In addition, third parties can only view external files in the data outsourcing server, and external files will not be sent to the third party, ensuring information security.

Description of the drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present disclosure or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art.

FIG. 1 is a schematic diagram of the architecture of a data outsourcing system provided by an embodiment of the present disclosure;

FIG. 2 is a schematic flowchart of a data outsourcing method provided by an embodiment of the present disclosure;

Figure 3 is a schematic structural diagram of a data outsourcing device provided by an embodiment of the present disclosure;

Figure 4 is a schematic structural diagram of a data outsourcing device provided by an embodiment of the present disclosure.

Detailed ways

The technical solutions in the embodiments of the present disclosure will be clearly described below in conjunction with the accompanying drawings in the embodiments of the present disclosure. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, rather than all of the embodiments.

It should also be understood that the terms used in this specification of the present disclosure are only for the purpose of describing specific embodiments and are not intended to limit the present disclosure.

It should also be further understood that the term "and/or" used in the specification of this disclosure and the appended claims refers to any combination of one or more of the associated listed items and all possible combinations, and includes these combinations .

The technical solution of the present application can be applied to the fields of artificial intelligence, blockchain and/or big data technology, and the control method can be used to realize the security control of external data. Optionally, the data involved in this application, such as external data, can be stored in a database, or can be stored in a blockchain. For example, the data outsourcing method of the present application can be applied to a data outsourcing device (or a data outsourcing device), and the data outsourcing device can be a node in a blockchain.

In specific implementation, the technical solutions described in the embodiments of the present disclosure can be implemented by terminal devices or servers or systems with data outsourcing functions, such as mobile phones, desktop computers, laptop computers, and wearable devices, which are not limited here. For ease of understanding, the executor of the data outsourcing method is referred to as a data outsourcing device in the following.

The embodiment of the present disclosure provides a data outsourcing method, including: obtaining external data; the external data includes external mail and external files; performing security detection on the external data based on a first identifier of the external data; the first identifier Used to distinguish the external mail from the external file; when the external data is the external mail, send the external mail that has passed the security check to the target object; when the external data is the external file In the case of, according to the level of the target object and the level of the external file, a viewing mode in which the external file is viewed by the target object is assigned.

The embodiments of the present disclosure also provide corresponding data outsourcing devices, computer-readable storage media, and computer program products. Detailed descriptions are given below.

First, the following describes the data outsourcing system to which the embodiments of the present disclosure are applicable. Referring to FIG. 1, FIG. 1 is a schematic structural diagram of an example of an application system of a technical solution provided by an embodiment of the present disclosure. As shown in Figure 1, the data outsourcing system may include one or more servers and multiple terminal devices, where:

The server and the terminal device can communicate via the Internet. Specifically, the terminal device on the user side sends an email or uploads a file to the data outsourcing server through a network or an interface. Here, the user refers to the sender of the email or the uploader of the file. The mail or file obtained by the data outgoing server is subjected to security inspection, and after the inspection is passed, it is sent to the terminal device of the target object. Or, the terminal device of the target object logs in to the data outsourcing server through the Internet to view the file. Here, the target object refers to the recipient of the mail or the viewer of the file.

The server may include, but is not limited to, a background server, a component server, a data outgoing system server, or a security detection software server, etc. The server sends emails to the terminal. The terminal device can install and run a related client (Client) (such as a mailbox client, etc.). Client refers to a program that corresponds to the server and provides users with local services. Here, the local service may include, but is not limited to: log-in data outgoing server interface, log-in mailbox interface, and so on.

Specifically, the client may include: applications running locally, functions running on a web browser (also called Web App), and so on. For the client, the corresponding server-side program needs to be run on the server to provide one or more functions such as the corresponding mail and file security detection processing, assigning target objects to view the file, and adding watermark to the file.

The terminal device in the embodiments of the present disclosure may include, but is not limited to, any electronic product based on a smart operating system, which can interact with a user through input devices such as a keyboard, a virtual keyboard, a touch panel, a touch screen, and a voice control device. Such as smart phones, tablet computers, personal computers, etc. Among them, the smart operating system includes, but is not limited to, any operating system that enriches device functions by providing various mobile applications to the mobile device, such as Android, iOS ^™ , Windows Phone, and so on.

It should be noted that the architecture of the data outsourcing system applied in the embodiment of the present disclosure is not limited to the example shown in FIG. 1.

The data outsourcing method provided by the embodiment of the present disclosure will be described below with reference to FIG. 2.

S100. Obtain external data; the external data includes external mail and external files.

The external data obtained by the data outgoing server can be mails or files. For example, when employees of Company A need to send emails to employees of different departments or employees of other companies, the emails will be sent to the data outgoing server first.

Optionally, the data outsourcing server may be a web service architecture, and the files obtained by the data outsourcing server may be files uploaded by the user logging in to the data outsourcing server.

In a possible implementation manner, the external data acquired by the data outsourcing device is encrypted data.

In a possible implementation manner, the data sending device may determine that the external data is encrypted data through the encryption identifier in the external data. The encrypted identifier can be in the form of data or string. There is no limitation here.

Optionally, the external data is encrypted data that has been transparently encrypted. The data outsourcing device can also obtain the decryption key of the outgoing data. The data outgoing device decrypts the outgoing data based on the decryption key. Here transparent encryption technology is a technology closely integrated with Windows, and it works at the bottom of Windows. By monitoring the operation of the application on the file, the ciphertext is automatically decrypted when the file is opened, and the plaintext in the memory is automatically encrypted and written into the storage medium when the file is written. This ensures that the files on the storage medium are always in an encrypted state.

S101. Perform a security check on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file.

The data outgoing server can determine whether the external data is an external mail or an external file according to the first identifier of the external data. The first identifier may be the format of the external data in the data outgoing server. If the first identifier is base64 encoding, it can be determined that the external data is an external mail. If the first identifier is a text in PDF format or Word format, the data outsourcing server can determine that the external data is an external file. The first identifier can also be the content of external data, such as sender and recipient. If the first identifier is the sender or recipient, it can be determined that the external data is an external mail. For example, the data outgoing server may recognize that the first identification of the outgoing data is the sender. The data outgoing server extracts the first identifier of the external data after receiving the external data. If the first identifier of the external data can be extracted, it determines that the external data is an external mail; if the data outgoing server cannot extract the first identifier from the external data , You can determine that the external data source is an external file. The data outgoing server decides how to perform the security check of the outgoing data according to the first identifier.

The data outgoing server determines that the external data is an outgoing mail according to the first identifier, and after receiving the outgoing mail, the data outgoing server performs a security check on the mail. The data outgoing server can detect whether there is any sensitive content in the outgoing mail through security inspection. The sensitive content can be confidential content that cannot be distributed, such as customer information (name, phone number, income, etc.), financial statements, bidding documents, and so on. The sensitive content can also be a recipient who is no longer able to receive the email, and there is no limitation here. After passing the security check, the external mail enters the mail outgoing queue and waits for the mail to be sent out. Emails that fail the security check will be rejected.

In a possible implementation manner, the security check is performed on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file, including: The first identifier determines that the external data is the external mail; then extracts the content of the external mail; the content of the external mail includes at least the mail recipient, the mail subject, the mail body, and the mail attachment; the sensitive content matching algorithm is used to Security detection is performed on the content of the external mail; the sensitive content matching algorithm includes: a regular matching algorithm, a keyword matching algorithm, and a machine learning matching algorithm.

The regular matching algorithm uses regular expressions to identify regular numbers or characters, such as ID cards, bank card numbers, mobile phone numbers, fixed telephones, email addresses, domain names, etc. It can also be deduplicated, case-sensitive, hits, and contains Content, excluded content and other conditions search for documents that meet the feature rules.

The keyword matching algorithm can set the feature rule name, rule type, deduplication, case sensitivity, number of hits, inclusion content, excluded content and other conditions by adding keyword feature rules, and then find documents that meet the feature rules through these conditions.

The machine learning matching algorithm extracts keywords through lexical analysis of documents, supports the analysis of a large number of original documents, and automatically generates feature rules for keywords and regular expressions.

In a possible implementation, the emails matching the sensitive content rule are archived according to the email confidentiality level and the degree of harm, and a list of attributes of the confidentiality level and the degree of harm is established to facilitate future tracking and statistical analysis.

In a possible implementation manner, after the mail is archived, the original mail file and the basic information and secret-related information of the mail are saved, and the mail is statistically analyzed according to different types.

In a possible implementation, the emails that match the rule are sent to the head of the sender's department and the superior, and the supervisor will review the mail. After the review is passed, the mail will be sent out, otherwise the mail will be intercepted.

In an practicable example, for example, Ping An employees need to send emails to cooperating customers. Due to the company's security settings such as firewalls, most of Ping An's employees cannot send emails directly, and they must communicate through emails. , Then you can send the email to the data outgoing server first, and the data outgoing server will perform security check before sending it out. This can prevent the company's information, materials, etc. from being leaked.

After the data outsourcing server obtains the file, it performs a security check on the file, and the security check can be used for the target object to view on the data outgoing server.

In a possible implementation manner, the performing security detection on the file includes: extracting the file content of the file; performing sensitive content rule matching on the extracted file content; archiving the file that matches the sensitive content rule Process and review the files, and save them in a file disk that allows customers (ie target objects) to view in the data outsourcing platform after passing the review.

In a possible implementation manner, the performing security detection on the external file; includes: determining that the external data is the external file based on the first identifier;

Detect the login account level for uploading the file, and determine the security detection mechanism of the file based on the login account level; the security detection mechanism includes at least: exemption, light audit, and strict audit; according to the security detection mechanism The security check of the external file is performed. For example, if the level of the login account is advanced, the files uploaded by advanced users can be exempted; if the level of the login account is intermediate, the files uploaded by intermediate users can be lightly reviewed; if the level of the login account is beginner, for Files uploaded by junior users can be strictly reviewed.

In a possible implementation manner, the performing security detection on the external file according to the security detection mechanism includes: extracting the content of the external file based on the security detection mechanism; performing security detection on the content of the external file .

In a possible implementation manner, the file content includes: file name, file body title, and file body content.

In a possible implementation manner, the extracting the content of the external file based on the security detection mechanism includes: extracting the title of the external file and the external file when the security detection mechanism is a light audit The telephone number contained in the main text; in the case that the security detection mechanism is strictly audited, the title and main content of the file are extracted.

In a possible implementation manner, sensitive content rule matching is performed on the extracted file content, and the matching methods include: regular matching, keyword matching, and machine learning matching.

In a possible implementation manner, the security check is performed on the file, and after the security check is passed, the file is stored in a file disk that is allowed to be viewed by the client in the data outsourcing platform. Including: reviewing the file, adding a watermark to the content of the file after the review is passed, and saving it in a file disk that allows customers to view in the data outsourcing platform. It should be noted here that the added watermark can be in text form, such as the company name, or the validity period of the document, and the watermark can also be in the form of a picture, such as a company’s icon or other pictures. The form and content of the watermark in this application All are not limited. The watermark is added to further prevent the content of the file from being leaked and misappropriated.

S102: If the external data is the external mail, send the external mail that has passed the security check to the target object.

When the external mail passes the security check, the data outgoing server will send the external mail to the target object. Here, the target object can be the recipient of the external mail. If the external mail fails the security check, the data outgoing server can return the external mail to the sender, and it can also attach the details of the failed security check.

S103: In a case where the external data is the external file, according to the level of the target object and the level of the external file, assign a viewing mode in which the external file is viewed by the target object.

The data outsourcing platform determines how the target object views the file according to the target object's level and the security level of the file after the security check. The target audience is the viewer of the external file. In order to prevent external files from landing to a third party, the target object can only view external files on the data outsourcing server, but not download them. External files are stored in the data outsourcing server. The target object can enter the data outsourcing server through the link to view the external files, or log in to the data outsourcing server through a temporary account to view the external files. In this way, the leakage of commercial secrets in external documents can be reduced.

In a possible implementation manner, in the case that the external data is the external file, according to the level of the target object and the level of the external file, the external file is allocated to the external file. The viewing mode for viewing by the target object includes: assigning a viewing mode for viewing the external file by the target object based on a pre-established mapping relationship between the level of the external file and the level of the target object.

For example, suppose that the level of external documents is divided into 5 categories, namely very important, important, generally important, ordinary, and unimportant. The target object's level is also divided into 5 categories, namely, very important, important, generally important, and ordinary. , Temporary cooperation; as shown in Table 1, the mapping relationship between the external file level and the target object level can be that when the level is a very important target object viewing a very important file, a temporary account can be assigned to the very important target object In order for the target object to log in data and send the server to view the file, except for the target object with the level of very important, the target object with the level of important and generally important can only view the very important file through the method of link and password, and according to the target The level of the object sets the time limit for viewing files. From the important level to the common level, the time limit for the target object to view the file gradually becomes shorter. Ordinary, temporary cooperation is not allowed to view files with a very important rating. What needs to be explained here is that there is no limit to the level classification method of the file and the level classification method of the target object, and the number of classifications is also not limited.

Table 1 The mapping table of external file level and target object level

In a possible implementation, the link to view the file contains a password. Click on the link to enter the web page and enter the password to view the file. The password can be notified to the customer by SMS, or by other means. There are no restrictions.

Optionally, the data outsourcing platform provides a part of the viewing authority to the customer, so that the customer can view some files, but can only view it, not download it, or edit it.

Optionally, the data outsourcing server provides an upload module, but does not provide a download module. In this way, the account of the data outsourcing platform can be assigned to the customer for the customer to view the data, but the customer cannot download the data, which can avoid data leakage to a certain extent.

In a possible implementation manner, the data outgoing server determines whether the outgoing data can be outgoing according to an audit mechanism.

Optionally, the audit mechanism can be the security level of external data. For example, the security level of external data can include level A, level B, level C, and level D (for example, level D security> level C security> level The security of B> the security of level A) and so on, wherein, the higher the level, the higher the requirement for the security of the data, and the less leakage is allowed.

Optionally, the review mechanism may be the user level (sender) of the user. For example, the user level of the user may include: exemption level, review level, and outgoing suspension permission level. The review level can at least include: simple review level, light review level, heavy review level and strict review level.

For example, user A is a senior R&D personnel in the R&D department of K company, user B is a general R&D personnel in the R&D department of K company, user C is an employee of the marketing department of K company, and user D is a front desk personnel of K company. Since R&D personnel can release confidential technologies or files within the company, the transit server determines that the review mechanism for R&D personnel (User A and User B) is: stop outgoing permission level or strict review level. The transit server determines that the review mechanism for user C is a heavy review level, and the review mechanism for user D is a simple review level or an exemption level.

Optionally, the audit mechanism may be the level of the recipient. In practical applications, recipients can include ordinary partners, heavyweight partners, and government agencies. For example, the review level of ordinary partners is light review level, the review level of heavyweight partners is heavy review level, and the review level of government agencies is strict review level or the permission to stop sending out.

Optionally, the review mechanism is a deep learning review algorithm. In practical applications, the data outsourcing platform determines different levels of review of external data based on the previous historical situation. For example, the review level of the first external data is the right to stop the outsourcing, and the review level of the second external data is the light review level. , The third review level of external data is the heavy review level. When the data outsourcing platform intercepts and obtains the fourth external data, the transit server determines the similarity between the fourth external data and the first external data, the second external data, and the third external data respectively, and the similarity value among these three similarities The review level corresponding to the largest external data is the fourth review level of external data.

It is understandable that only the external data that has passed the security judgment can be sent out, and the external data that has not passed the security judgment can not be sent out.

In the embodiment of the present disclosure, external data can be obtained; the external data includes external mail and external files; the security detection is performed on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external data Mail and the external file; in the case where the external data is the external mail, the external mail that has passed the security check is sent to the target object; in the case where the external data is the external file, according to the According to the level of the target object and the level of the external file, a viewing mode for the external file to be viewed by the target object is assigned. During the security check, external data containing confidential data can be detected, and external mail containing confidential data will be returned to the sender. Only external data that has passed the security test can be sent out. In this way, it is possible to prevent the outgoing external data from containing confidential data that is not allowed to be sent out. In addition, third parties can only view important files, and important files should not be sent to third parties to ensure information security.

In order to facilitate better implementation of the above-mentioned solutions of the embodiments of the present disclosure, the present disclosure also correspondingly provides a data outsourcing device, which will be described in detail below with reference to the accompanying drawings:

Fig. 3 shows a schematic structural diagram of the data outsourcing device provided by the embodiment of the present disclosure. The data outsourcing device may include: an acquisition unit 100, a detection unit 101, a sending unit 102, and a distribution unit 103, where:

The obtaining unit 100 obtains external data; the external data includes external mail and external files;

The detection unit 101 is configured to perform security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

The sending unit 102 is configured to send the external mail that has passed the security check to the target object when the external data is the external mail;

The allocating unit 103 is configured to, when the external data is the external file, allocate a viewing mode for the external file to be viewed by the target object according to the level of the target object and the level of the external file.

Optionally, the detection unit 101 is further configured to:

If it is determined that the external data is the external mail based on the first identifier;

Extract the content of the external mail; the content of the external mail includes at least the recipient, the subject of the mail, the body of the mail, and the attachment of the mail;

A sensitive content matching algorithm is used to perform security detection on the external mail content; the sensitive content matching algorithm includes: a regular matching algorithm, a keyword matching algorithm, and a machine learning matching algorithm.

Optionally, the detection unit 101 is further configured to:

If it is determined that the external data is the external file based on the first identifier;

Then, the login account level of the uploaded file is detected, and the security detection mechanism of the file is determined based on the login account level; the security detection mechanism includes at least: exemption from review, light review, and strict review.

Perform a security check on the external file according to the security check mechanism.

Optionally, the detection unit 101 is further configured to:

Extracting the content of the external file based on the security detection mechanism;

Perform security inspection on the content of the external file.

In a possible implementation manner, the detection unit 101 is configured to:

In the case that the security detection mechanism is a light audit, extract the title of the external document and the telephone number contained in the body of the external document;

In the case that the security detection mechanism is strict review, the title and body content of the file are extracted.

In a possible implementation manner, the allocating unit 103 is configured to:

Based on a pre-established mapping relationship between the level of the external file and the level of the target object, a viewing mode for the external file to be viewed by the target object is assigned.

In a possible implementation manner, the viewing manner of the external file being viewed by the target object at least includes: a link after the external file is encrypted, and a temporary login account.

In the embodiment of the present disclosure, external data can be obtained; the external data includes external mail and external files; the security detection is performed on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external data Mail and the external file; in the case where the external data is the external mail, the external mail that has passed the security check is sent to the target object; in the case where the external data is the external file, according to the According to the level of the target object and the level of the external file, a viewing mode for the external file to be viewed by the target object is assigned. During the security check, external data containing confidential data can be detected, and external mail containing confidential data will be returned to the sender. Only the external data that has passed the security inspection can be sent out. In this way, it is possible to prevent the outgoing external data from containing confidential data that is not allowed to be sent out. In addition, third parties can only view important files, and important files should not be sent to third parties to ensure information security.

It should be noted that the data outsourcing device 10 in the embodiment of the present disclosure is the data outsourcing device in the embodiment of FIG. 2 The specific implementation of the embodiment will not be repeated here.

In order to facilitate better implementation of the above-mentioned solutions of the embodiments of the present disclosure, the present disclosure also provides a corresponding data outsourcing device, which will be described in detail below with reference to the accompanying drawings:

Fig. 4 shows a schematic structural diagram of a data outsourcing device provided by an embodiment of the present disclosure. The data outsourcing device 110 may include a processor 1101, an input unit (input device) 1102, an output unit (output device) 1103, and a memory 1104. Optionally, the data sending device may further include a communication unit 1105 and a bus 1106. The processor 1101, an input unit 1102, an output unit 1103, a memory 1104, and a communication unit 1105 may be connected to each other through the bus 1106. The memory 1104 may be a high-speed RAM memory, or a non-volatile memory (non-volatile memory), such as at least one disk memory. Optionally, the memory 1104 may also be at least one storage system located far away from the foregoing processor 1101. The memory 1104 is used to store application program codes, which may include an operating system, a network communication module, a user interface module, and a data outbound program. The communication unit 1105 is used to exchange information with external units; the processor 1101 is configured to call the program Code, perform the following steps:

The processor 1101 obtains external data; the external data includes external mail and external files;

The processor 1101 performs security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

When the external data is the external mail, the processor 1101 sends the external mail that has passed the security check to the target object;

When the external data is the external file, the processor 1101 allocates a viewing mode for the external file to be viewed by the target object according to the level of the target object and the level of the external file.

The processor 1101 determines that the external data is the external mail based on the first identifier; extracts the content of the external mail; the content of the external mail includes at least the mail recipient, the mail subject, the mail body, and the mail attachment; The content matching algorithm performs security detection on the content of the external mail; the sensitive content matching algorithm includes: a regular matching algorithm, a keyword matching algorithm, and a machine learning matching algorithm.

The processor 1101 determines that the external data is the external file based on the first identifier; detects the login account level of the uploaded file, and determines the security detection mechanism of the file based on the login account level; the security detection mechanism It includes at least: exemption from review, light review, and strict review; performing security testing on the external file according to the security testing mechanism.

The processor 1101 extracts the content of the external file based on the security detection mechanism; performs security detection on the content of the external file.

The processor 1101 extracts the title of the external document and the telephone number contained in the body of the external document when the security detection mechanism is a light audit; when the security detection mechanism is a strict audit, extracts all The title and body content of the document.

The processor 1101 assigns a viewing mode for the external file to be viewed by the target object based on a pre-established mapping relationship between the level of the external file and the level of the target object.

It should be noted that the data outgoing device 110 in the embodiment of the present disclosure is the data outgoing device in the embodiment of FIG. 2 described above. For details, please refer to the specific implementation of the embodiment of FIG. 1 in the foregoing method embodiments. Go into details again.

The embodiments of the present application also provide a computer (readable) storage medium, wherein the computer storage medium can store a program. Optionally, the program, such as a computer program, may include program instructions. Wherein, the program (or program instruction) includes part or all of the steps of any one of the above method embodiments when executed. Optionally, the program, such as a computer program, may include program instructions that, when executed by a processor, cause the processor to perform part or all of the steps of any one of the foregoing method embodiments. For example, when the program (or program instruction) is executed by the processor, the following methods can be implemented: obtain external data; the external data includes: external mail, external files; and secure the external data based on the first identifier of the external data Detection; the first identifier is used to distinguish the external mail and the external file; in the case that the external data is the external mail, the external mail that has passed the security detection is sent to the target object; in the When the external data is the external file, according to the level of the target object and the level of the external file, a viewing mode for the external file to be viewed by the target object is allocated. Optionally, when the program (or program instruction) is executed by the processor, other steps of the method in the foregoing embodiment may also be implemented, which will not be repeated here.

Optionally, the storage medium involved in this application, such as a computer-readable storage medium, may be non-volatile or volatile.

The embodiments of the present application also provide a computer program, which includes instructions, when the computer program is executed by a computer, the computer can execute part or all of the steps of any text conversion method.

A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing relevant hardware through a computer program. The program can be stored in a computer readable storage medium. During execution, it may include the procedures of the above-mentioned method embodiments. Wherein, the storage medium may be a U disk, a magnetic disk, an optical disk, a read-only memory (Read-Only Memory, ROM), or a random access memory (Random Access Memory, RAM), etc.

The present disclosure may be a system, method and/or computer program product. The computer program product may include a computer-readable storage medium loaded with computer-readable program instructions for enabling a processor to implement various aspects of the present disclosure.

The computer-readable storage medium may be a tangible device that can hold and store instructions used by the instruction execution device. The computer-readable storage medium may be, for example, but not limited to, an electrical storage device, a magnetic storage device, an optical storage device, an electromagnetic storage device, a semiconductor storage device, or any suitable combination of the foregoing. More specific examples (non-exhaustive list) of computer-readable storage media include: portable computer disks, hard disks, random access memory (RAM), read-only memory (ROM), erasable programmable read-only memory (EPROM) Or flash memory), static random access memory (SRAM), portable compact disk read-only memory (CD-ROM), digital versatile disk (DVD), memory stick, floppy disk, mechanical encoding device, such as a printer with instructions stored thereon The protruding structure in the hole card or the groove, and any suitable combination of the above. The computer-readable storage medium used here is not interpreted as the instantaneous signal itself, such as radio waves or other freely propagating electromagnetic waves, electromagnetic waves propagating through waveguides or other transmission media (for example, light pulses through fiber optic cables), or through wires Transmission of electrical signals.

The computer-readable program instructions described herein can be downloaded from a computer-readable storage medium to various computing/processing devices, or downloaded to an external computer or external storage device via a network, such as the Internet, a local area network, a wide area network, and/or a wireless network. The network may include copper transmission cables, optical fiber transmission, wireless transmission, routers, firewalls, switches, gateway computers, and/or edge servers. The network adapter card or network interface in each computing/processing device receives computer-readable program instructions from the network, and forwards the computer-readable program instructions for storage in the computer-readable storage medium in each computing/processing device .

The computer program instructions used to perform the operations of the present disclosure may be assembly instructions, instruction set architecture (ISA) instructions, machine instructions, machine-related instructions, microcode, firmware instructions, state setting data, or in one or more programming languages. Source code or object code written in any combination, the programming language includes object-oriented programming languages such as Smalltalk, C++, etc., and conventional procedural programming languages such as "C" language or similar programming languages. Computer-readable program instructions can be executed entirely on the user's computer, partly on the user's computer, executed as a stand-alone software package, partly on the user's computer and partly executed on a remote computer, or entirely on the remote computer or server carried out. In the case of a remote computer, the remote computer can be connected to the user's computer through any kind of network, including a local area network (LAN) or a wide area network (WAN), or it can be connected to an external computer (for example, using an Internet service provider to access the Internet). connection). In some embodiments, an electronic circuit, such as a programmable logic circuit, a field programmable gate array (FPGA), or a programmable logic array (PLA), can be customized by using the status information of the computer-readable program instructions. The computer-readable program instructions are executed to realize various aspects of the present disclosure.

Various aspects of the present disclosure are described herein with reference to flowcharts and/or block diagrams of methods, apparatuses (systems) and computer program products according to embodiments of the present disclosure. It should be understood that each block of the flowcharts and/or block diagrams, and combinations of blocks in the flowcharts and/or block diagrams, can be implemented by computer-readable program instructions.

These computer-readable program instructions can be provided to the processor of a general-purpose computer, a special-purpose computer, or other programmable data processing device, thereby producing a machine that makes these instructions when executed by the processor of the computer or other programmable data processing device , A device that implements the functions/actions specified in one or more blocks in the flowcharts and/or block diagrams is produced. It is also possible to store these computer-readable program instructions in a computer-readable storage medium. These instructions make computers, programmable data processing apparatuses, and/or other devices work in a specific manner. Thus, the computer-readable medium storing the instructions includes An article of manufacture, which includes instructions for implementing various aspects of the functions/actions specified in one or more blocks in the flowcharts and/or block diagrams.

It is also possible to load computer-readable program instructions on a computer, other programmable data processing device, or other equipment, so that a series of operation steps are executed on the computer, other programmable data processing device, or other equipment to produce a computer-implemented process , So that the instructions executed on the computer, other programmable data processing apparatus, or other equipment realize the functions/actions specified in one or more blocks in the flowcharts and/or block diagrams.

The flowcharts and block diagrams in the accompanying drawings show the possible implementation architecture, functions, and operations of the system, method, and computer program product according to multiple embodiments of the present disclosure. In this regard, each block in the flowchart or block diagram may represent a module, program segment, or part of an instruction, and the module, program segment, or part of an instruction contains one or more components for realizing the specified logical function. Executable instructions. In some alternative implementations, the functions marked in the block may also occur in a different order than the order marked in the drawings. For example, two consecutive blocks can actually be executed substantially in parallel, or they can sometimes be executed in the reverse order, depending on the functions involved. It should also be noted that each block in the block diagram and/or flowchart, and the combination of the blocks in the block diagram and/or flowchart, can be implemented by a dedicated hardware-based system that performs the specified functions or actions Or it can be realized by a combination of dedicated hardware and computer instructions.

The above-disclosed are only the preferred embodiments of the present disclosure, which of course cannot be used to limit the scope of rights of the present disclosure. Therefore, equivalent changes made in accordance with the claims of the present disclosure still fall within the scope of the present disclosure.

Claims

A data outgoing method, applied to the server, including:

Obtain external data; the external data includes: external mail and external files;

Perform security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

In a case where the external data is the external mail, sending the external mail that has passed the security check to the target object;

In the case where the external data is the external file, according to the level of the target object and the level of the external file, a viewing mode in which the external file is viewed by the target object is assigned.
The method according to claim 1, wherein said performing security detection on said external data based on a first identification of external data; said first identification for distinguishing said external mail from said external file, comprising:

If it is determined that the external data is the external mail based on the first identifier;

Extract the content of the external mail; the content of the external mail includes at least the recipient, the subject of the mail, the body of the mail, and the attachment of the mail;

A sensitive content matching algorithm is used to perform security detection on the external mail content; the sensitive content matching algorithm includes: a regular matching algorithm, a keyword matching algorithm, and a machine learning matching algorithm.
The method according to claim 1, wherein said performing security detection on said external data based on a first identification of external data; said first identification for distinguishing said external mail from said external file, comprising:

If it is determined that the external data is the external file based on the first identifier;

The login account level of the uploaded file is detected, and the security detection mechanism of the file is determined based on the login account level; the security detection mechanism includes at least: exemption from review, light review, and strict review;

Perform a security check on the external file according to the security check mechanism.
The method according to claim 3, wherein said performing security detection on said external file according to said security detection mechanism comprises:

Extracting the content of the external file based on the security detection mechanism;

Perform security inspection on the content of the external file.
The method according to claim 4, wherein said extracting the content of the external file based on the security detection mechanism comprises:

In the case that the security detection mechanism is a light audit, extract the title of the external document and the telephone number contained in the body of the external document;

In the case that the security detection mechanism is strict review, the title and body content of the file are extracted.
The method according to claim 1, wherein, in the case that the external data is the external file, the external file is allocated to the external file according to the level of the target object and the level of the external file. The viewing methods for the target audience include:

Based on a pre-established mapping relationship between the level of the external file and the level of the target object, a viewing mode for the external file to be viewed by the target object is assigned.
The method according to claim 6, wherein the viewing mode of the external file being viewed by the target object at least includes: an encrypted link of the external file and a temporary login account.
A data outsourcing device, which includes:

The obtaining unit is used to obtain external data; the external data includes: external mail and external files;

The detection unit is configured to perform security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

A sending unit, configured to send the external mail that has passed the security check to the target object when the external data is the external mail;

The allocating unit is configured to, when the external data is the external file, allocate the viewing mode of the external file to be viewed by the target object according to the level of the target object and the level of the external file.
A device for sending out data, including a processor, an input device, an output device, and a memory. The processor, input device, output device, and memory are connected to each other, wherein the memory is used to store application program code, and the The processor is configured to call the program code and execute the following methods:

Obtain external data; the external data includes: external mail and external files;

Perform security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

In a case where the external data is the external mail, sending the external mail that has passed the security check to the target object;

In the case where the external data is the external file, according to the level of the target object and the level of the external file, a viewing mode in which the external file is viewed by the target object is assigned.
The device according to claim 9, wherein said first identifier based on said external data performs security detection on said external data; said first identifier is used to distinguish between said external mail and said external file. :

If it is determined that the external data is the external mail based on the first identifier;

Extract the content of the external mail; the content of the external mail includes at least the recipient, the subject of the mail, the body of the mail, and the attachment of the mail;

A sensitive content matching algorithm is used to perform security detection on the external mail content; the sensitive content matching algorithm includes: a regular matching algorithm, a keyword matching algorithm, and a machine learning matching algorithm.
The device according to claim 9, wherein said first identifier based on said external data performs security detection on said external data; said first identifier is used to distinguish between said external mail and said external file. :

If it is determined that the external data is the external file based on the first identifier;

The login account level of the uploaded file is detected, and the security detection mechanism of the file is determined based on the login account level; the security detection mechanism includes at least: exemption from review, light review, and strict review;

Perform a security check on the external file according to the security check mechanism.
The device according to claim 11, wherein when the security detection of the external file is performed according to the security detection mechanism, the following is specifically executed:

Extracting the content of the external file based on the security detection mechanism;

Perform security inspection on the content of the external file.
The device according to claim 12, wherein, when extracting the content of the external file based on the security detection mechanism, specifically execute:

In the case that the security detection mechanism is a light audit, extract the title of the external document and the telephone number contained in the body of the external document;

In the case that the security detection mechanism is strict review, the title and body content of the file are extracted.
The device according to claim 9, wherein, in the case that the external data is the external file, the external file is allocated to the external file according to the level of the target object and the level of the external file. When viewing the viewing mode of the target object, the specific implementation is as follows:

Based on a pre-established mapping relationship between the level of the external file and the level of the target object, a viewing mode for the external file to be viewed by the target object is assigned.
A computer-readable storage medium, wherein the computer-readable storage medium stores a computer program, and the computer program includes program instructions that, when executed by a processor, cause the processor to perform the following method:

Obtain external data; the external data includes: external mail and external files;

Perform security detection on the external data based on the first identifier of the external data; the first identifier is used to distinguish the external mail from the external file;

In a case where the external data is the external mail, sending the external mail that has passed the security check to the target object;

In the case where the external data is the external file, according to the level of the target object and the level of the external file, a viewing mode in which the external file is viewed by the target object is assigned.
The computer-readable storage medium according to claim 15, wherein the first identification of the external data is used to perform a security check on the external data; the first identification is used to distinguish the external mail from the external file When, the specific implementation:

If it is determined that the external data is the external mail based on the first identifier;

Extract the content of the external mail; the content of the external mail includes at least the recipient, the subject of the mail, the body of the mail, and the attachment of the mail;

A sensitive content matching algorithm is used to perform security detection on the external mail content; the sensitive content matching algorithm includes: a regular matching algorithm, a keyword matching algorithm, and a machine learning matching algorithm.
The computer-readable storage medium according to claim 15, wherein the first identification of the external data is used to perform a security check on the external data; the first identification is used to distinguish the external mail from the external file When, the specific implementation:

If it is determined that the external data is the external file based on the first identifier;

The login account level of the uploaded file is detected, and the security detection mechanism of the file is determined based on the login account level; the security detection mechanism includes at least: exemption from review, light review, and strict review;

Perform a security check on the external file according to the security check mechanism.
18. The computer-readable storage medium according to claim 17, wherein when the security detection of the external file is performed according to the security detection mechanism, the following is specifically executed:

Extracting the content of the external file based on the security detection mechanism;

Perform security inspection on the content of the external file.
18. The computer-readable storage medium according to claim 18, wherein when the content of the external file is extracted based on the security detection mechanism, the following is specifically executed:

In the case that the security detection mechanism is a light audit, extract the title of the external document and the telephone number contained in the body of the external document;

In the case that the security detection mechanism is strict review, the title and body content of the file are extracted.
The computer-readable storage medium according to claim 15, wherein, in the case that the external data is the external file, the external file is allocated according to the level of the target object and the level of the external file. When the file is viewed by the target object, the specific implementation is as follows:

Based on a pre-established mapping relationship between the level of the external file and the level of the target object, a viewing mode for the external file to be viewed by the target object is assigned.