WO2021190017A1

WO2021190017A1 - Private data access method and apparatus, and electronic device

Info

Publication number: WO2021190017A1
Application number: PCT/CN2020/139720
Authority: WO
Inventors: 郑鹏; 吴迪; 贾茜; 刘洋; 张谦
Original assignee: 支付宝(杭州)信息技术有限公司
Priority date: 2020-03-25
Filing date: 2020-12-26
Publication date: 2021-09-30
Also published as: CN111400765A; CN111400765B

Abstract

A private data access method and apparatus, and an electronic device. The method comprises: monitoring an access request of a target user for a target data platform, the access request of the target user carrying account information of the target user and target data requested to be accessed by the target user (S110); determining a sensitive permission level matching the account information of the target user on the basis of a preset mapping relationship between the user account information and the sensitive permission level (S120); on the basis of the sensitive permission level of the target user and a sensitive level corresponding to the target data, determining whether the target user has permission to access the target data (S130); if the target user does not have the permission to access private data in the target data, performing desensitization processing on the queried target data, and feeding back the desensitized target data to the target user (S140).

Description

Method, device and electronic equipment for accessing private data

Technical field

This document relates to the field of computer software technology, in particular to a method, device and electronic equipment for accessing private data.

Background technique

With the rapid development of information technology, users' personal privacy data may be exposed through various channels every day. In order to strengthen the protection of users' personal privacy data, the regulatory authorities are paying more and more attention to the protection of users' personal privacy data, and have issued relevant laws and regulations, requiring relevant enterprises to do their responsibilities for the protection of users' personal privacy data.

At present, the identification of users’ personal privacy data is usually done by manually marking the corresponding labels on the data tables. However, in practical applications, the number of data tables involving users’ personal privacy data is often very large, relying on manual labeling of private data. Marking is less efficient, and it is easy to miss some private data marks, which may easily cause the leakage of user privacy data. In addition, when a data visitor accesses the user's personal privacy data, it is difficult to ensure that the data visitor will not conduct illegal operations on the user's personal privacy data. Therefore, how to effectively protect users' personal privacy data still needs to provide an effective solution.

Summary of the invention

The purpose of the embodiments of this specification is to provide a method, device, and electronic equipment for accessing private data, which are used to prevent data related to the user's personal privacy from being viewed by data visitors wantonly, causing the problem of leakage of the user's personal private data.

In order to solve the above technical problems, the embodiments of this specification are implemented in this way.

In the first aspect, a method for accessing private data is proposed, including: monitoring a target user’s access request to a target data platform, the target user’s access request carrying the target user’s account information and the target user’s request for access The target data; based on the preset mapping relationship between the user account information and the sensitive permission level, determine the sensitive permission level that matches the target user’s account information; based on the target user’s sensitive permission level and the target data correspondence The sensitivity level of to determine whether the target user has the permission to access the target data; if the target user does not have the permission to access the private data in the target data, desensitize the queried target data Then feedback to the target user.

In a second aspect, a device for accessing private data is proposed, including a request monitoring unit that monitors a target user’s access request to a target data platform, and the target user’s access request carries the target user’s account information and the target data platform. The target data that the target user requests to access; the level determining unit, based on the preset mapping relationship between the user account information and the sensitive authority level, determines the sensitive authority level that matches the account information of the target user; the authority determining unit is based on the The sensitivity level of the target user and the sensitivity level corresponding to the target data determine whether the target user has the permission to access the target data; a data feedback unit, if the target user does not have the privacy in accessing the target data Data authority, then desensitize the queried target data and feed it back to the target user.

In a third aspect, an electronic device is proposed, including: a processor; and a memory arranged to store computer-executable instructions, which when executed, cause the processor to perform the following operations: monitor target user interaction The access request of the target data platform, the access request of the target user carries the account information of the target user and the target data that the target user requests to access; based on the preset mapping relationship between the user account information and the sensitive authority level, it is determined A sensitive permission level matching the account information of the target user; based on the sensitive permission level of the target user and the sensitivity level corresponding to the target data, determine whether the target user has the permission to access the target data; if If the target user does not have the authority to access the private data in the target data, the queried target data is desensitized and fed back to the target user.

In a fourth aspect, a computer-readable storage medium is proposed. The computer-readable storage medium stores one or more programs. When the one or more programs are executed by an electronic device that includes multiple application programs, the The electronic device performs the following operations: monitors a target user's access request to a target data platform, and the target user's access request carries the target user's account information and the target data requested by the target user; based on a preset user The mapping relationship between the account information and the sensitive authority level determines the sensitive authority level that matches the account information of the target user; based on the sensitive authority level of the target user and the sensitivity level corresponding to the target data, the target user is determined Whether it has the authority to access the target data; if the target user does not have the authority to access the private data in the target data, desensitize the queried target data and feed it back to the target user.

As can be seen from the technical solutions provided in the above embodiments of this specification, the embodiments of this specification have at least one of the following technical effects: one or more embodiments provided in this specification can monitor the target user’s access request to the target data platform. The target user’s access request carries the target user’s account information and the target data that the target user requests to access; and based on the preset mapping relationship between the user account information and the sensitive permission level, the sensitive permission that matches the target user’s account information can be determined Level; and based on the sensitivity level of the target user and the sensitivity level corresponding to the target data, determine whether the target user has the permission to access the target data; when the target user does not have the permission to access the private data in the target data, the query target data Feedback to target users after desensitization treatment. Through the mapping relationship between the preset user account information and the sensitive permission level of the data, it is determined whether the data visitor has the permission to access certain data, and when it is determined that the data visitor does not have the permission to access certain data, The desensitized data is fed back to the data visitor, which effectively protects the personal privacy data of the user and avoids the user's personal privacy data from being viewed at will.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of this specification, the following will briefly introduce the drawings needed in the description of the embodiments. Obviously, the drawings in the following description are only some of the implementations recorded in this specification. For example, for those of ordinary skill in the art, without creative work, other drawings can be obtained from these drawings.

Fig. 1 is a schematic diagram of an implementation process of a method for accessing private data provided by an embodiment of this specification.

Fig. 2 is a schematic diagram of a deployment environment of a method for accessing private data provided by an embodiment of this specification.

FIG. 3 is a schematic diagram of an interface of a matching rule of a configured private data in a method for accessing private data provided by an embodiment of this specification.

FIG. 4 is a schematic diagram of an interface for testing another configured identification rule of private data in the method for accessing private data provided by an embodiment of this specification.

FIG. 5 is a schematic diagram of identifying and marking certain metadata as private data in the method for accessing private data provided by an embodiment of this specification.

FIG. 6 is a schematic diagram of desensitizing and feeding back the identified private data in the method for accessing private data provided by an embodiment of the present specification.

Fig. 7 is a schematic structural diagram of a device for accessing private data provided by an embodiment of this specification.

FIG. 8 is a schematic structural diagram of an electronic device provided by an embodiment of this specification.

Detailed ways

In order to make the purpose, technical solutions and advantages of this specification clearer, the technical solutions in this specification will be clearly and completely described below in conjunction with specific embodiments of this specification and the corresponding drawings. Obviously, the described embodiments are only a part of the embodiments of this document, rather than all the embodiments. Based on the embodiments in this document, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this document.

The technical solutions provided by the embodiments of this specification will be described in detail below with reference to the accompanying drawings.

In order to prevent data related to the user's personal privacy from being viewed by data visitors wantonly, causing the leakage of the user's personal privacy data, an embodiment of this specification provides a method for accessing private data, which can monitor the target user's access to the target data platform Request, the target user’s access request carries the target user’s account information and the target data the target user requests to access; and based on the preset mapping relationship between user account information and sensitive authority levels, it can be determined to match the target user’s account information The sensitive permission level of the target user; and based on the sensitive permission level of the target user and the sensitivity level corresponding to the target data, determine whether the target user has the permission to access the target data; when the target user does not have the permission to access the private data in the target data, the query The target data is desensitized and fed back to the target user.

Since it is possible to determine whether the data visitor has the permission to access certain data through the mapping relationship between the preset user account information and the sensitive permission level of the data, and to determine whether the data visitor does not have the permission to access certain data At the time, the desensitized data is fed back to the data visitor, which effectively protects the personal privacy data of the user and prevents the personal privacy data of the user from being viewed at will.

Fig. 1 is a schematic diagram of an implementation process of a method for accessing private data provided by an embodiment of this specification. The method in FIG. 1 may include step S110 to step S140.

S110: Monitoring the access request of the target user to the target data platform, where the access request of the target user carries the account information of the target user and the target data that the target user requests to access.

Among them, the target data platform refers to the platform used for data storage, including relational databases and data warehouses. The data stored in the target data platform may include metadata and stored data corresponding to the metadata. Among them, metadata is used to describe the structural information of the data stored in the data platform, and specifically refers to information such as libraries, tables, and columns in a database or data warehouse. The metadata itself does not store data. For example, table names, column names, field types, field lengths, etc. are all table metadata. The stored data corresponding to the metadata is the data stored in the table corresponding to the table name, and the data stored in the column corresponding to the column name. For example, a personnel table includes name, age, height, weight, education, position, salary, etc. Column names (these are metadata), and the names of persons stored in the name column (such as Zhang San, Li Si, etc.) are the stored data corresponding to the metadata (name column).

Optionally, since the data stored in the target data platform can be roughly divided into metadata and stored data corresponding to metadata, in order to improve the identification efficiency and accuracy of private data, the method for identifying private data in the embodiments of this specification It can also be classified into two categories: one is to determine which data of the target data platform is private data based on metadata; the other is to determine which data in the target data platform is private data based on the stored data corresponding to the metadata .

It should be understood that if only the metadata is used to determine which data of the target data platform is private data, although the efficiency of identifying private data is greatly improved, some metadata may be missed due to the naming method of certain metadata. In fact, the metadata of the private data is stored; and if only the stored data corresponding to the metadata is used to determine which data in the target data platform is private data, it will consume a lot of work to analyze the target data platform one by one The full amount of data stored. In order to avoid these two problems, the embodiment of this specification combines these two ways of determining private data. Specifically, before monitoring the access request of the target user to the target data platform, the method provided in the embodiment of this specification also includes: obtaining Multiple metadata information in the target data platform; based on multiple metadata information and preset metadata privacy matching rules, identify and mark privacy-related target metadata from multiple metadata; In the data, select a specified number of metadata; based on the privacy data recognition model, identify and mark the private data in the stored data corresponding to the specified number of metadata; among them, the sample data used for the training of the privacy data recognition model is the specified metadata The stored data corresponding to the data.

It should be understood that, in order to avoid missing the identification of metadata related to privacy in the target data platform, in the embodiment of this specification, the information of multiple metadata in the target data platform can be obtained, in fact, the full amount of metadata in the target data platform can also be obtained. Data information. In order to improve the recognition efficiency and accuracy of identifying privacy-related metadata, the privacy matching rules of preset metadata used to identify privacy-related metadata can also be obtained by training an artificial intelligence model, which can be specifically based on multiple metadata The information training is obtained.

In order to reduce the workload of identifying private data in the target data platform, the embodiment of this specification can randomly select a specified number of metadata from multiple metadata, and whether the selected specified number of metadata matches these metadata The privacy matching rules of the preset metadata are irrelevant.

As shown in FIG. 2, it is a schematic diagram of an actual deployment environment of the method provided in the embodiment of this specification. In Figure 2, the target data platform is interacted by deploying an independent application. The target data platform includes relational data blocks, file storage, and distributed cache. The independent application includes data recognition engine, configuration, classification and hierarchical display, User access records, risk identification engine, sensitivity level display and desensitization .jar, and plug-ins (including metadata reading, sampling data reading, classification and classification data write-back, user access data acquisition, and desensitization integration).

Among them, the independent application can provide a configurable page for the data security administrator to configure matching rules for private data. The matching rules for identifying private data can act on metadata or on the corresponding metadata. Storing data. Once the matching rule for identifying private data is configured, it can be stored in the database of the independent application for identifying private data in other data platforms. FIG. 3 is a schematic diagram of an interface of a matching rule of a configured private data in a method for accessing private data provided in an embodiment of this specification. In Figure 3, the user can input text content containing private data and click "Submit" to test whether the configured matching rule of private data can identify the private data in the text content entered by the user.

As shown in FIG. 4, in the method for accessing private data provided in the embodiment of this specification, another interface diagram for testing the configured identification rule of private data. In Fig. 4, the user can enter a link and click "test link" to identify the private data in the page corresponding to the link and the metadata related to the private data. Among them, the "content scanning" shown in FIG. 4 is to match the data content in the link through a pre-configured matching rule of private data to identify the private data in the link. The "field scanning" shown in FIG. 4 is to match the metadata in the link through a pre-configured matching rule of private data, and to identify the metadata in the link that involves private data.

In addition, in the process of testing the configured privacy data matching rules, if it is found that the configured privacy data matching rules omit privacy-related metadata or privacy data in the data content, the configured privacy data can also be tested. The data matching rules are modified.

Optionally, for different data visitors, the sensitivity levels of metadata related to privacy that they can view are often different, in order to facilitate the distinction between the sensitive permission levels of different data visitors, and for data access with different sensitivity levels The person matches the metadata that they can view. The preset metadata privacy matching rules in the embodiments of this specification also include matching rules involving the sensitivity level of privacy metadata. Then, based on the information of multiple metadata and the preset metadata privacy matching rules, Identify and mark the target metadata related to privacy from multiple metadata, including: based on the information of multiple metadata and the privacy matching rules of preset metadata, determine the target metadata related to privacy from the multiple metadata; The information of the target metadata and the matching rules of the sensitivity level of the privacy related metadata in the preset metadata matching rules determine the sensitivity level of the target metadata; based on the sensitivity level of the target metadata, the target metadata mark.

Optionally, in order to distinguish the sensitivity levels of different privacy data, the privacy data identification model can also identify the privacy data and the corresponding sensitivity levels in the data stored in the metadata. Specifically, based on the privacy data identification model, identify and mark the specified number The private data in the stored data corresponding to the metadata includes: identifying the private data in the stored data corresponding to the specified amount of metadata and the corresponding sensitivity level based on the private data recognition model; corresponding to the specified amount of metadata The sensitivity level corresponding to the private data in the stored data is marked with the private data in the stored data corresponding to the specified amount of metadata.

As shown in FIG. 5, a schematic diagram of identifying and marking certain metadata as private data in the method for accessing private data provided in this embodiment of this specification. In Figure 5, in the "cert_no" field in the table "yixi_test_1210", it is recognized that the stored data corresponding to the metadata hits the matching rule of "ID card number" in the matching rule of private data, which is marked as "level8" Sensitivity level.

It should be understood that after identifying and marking metadata related to privacy, when a specified amount of metadata is randomly selected from multiple metadata, it is possible to repeatedly select metadata that has been identified and marked as involving privacy. In this case, if it is recognized that the stored data corresponding to the repeatedly selected metadata contains private data according to the private data recognition model, there will be two sensitive levels of privacy data in the metadata, and this specification implements For example, in this case, priority is given to selecting a sensitivity level with a higher privacy protection priority to mark metadata. After marking the private data in the stored data corresponding to the specified number of metadata, the method provided in the embodiment of this specification further includes: if the target metadata has first metadata, the first metadata is the specified number of metadata The corresponding stored data in includes the metadata of the privacy data, and the privacy protection priority is obtained from the sensitivity level of the first metadata in the target metadata and the sensitivity level of the first metadata in the specified number of metadata Higher sensitivity level; based on the higher sensitivity level of privacy protection priority, the first metadata is marked.

S120, based on a preset mapping relationship between user account information and sensitive permission levels, determine a sensitive permission level that matches the account information of the target user.

It should be understood that in order to facilitate the confirmation of whether the data visitor of the target data platform has the authority to access the private data in the target data platform, the data visitor of the target data platform can be assigned corresponding sensitive authority based on the account registration information of the data visitor in advance. grade. And maintain the preset mapping relationship between user account information and sensitive permission levels in the target data platform and/or the aforementioned independent applications. After receiving the target user's access request to the target data platform, the target user can be determined based on the target user account information carried in the target user's access request and the mapping relationship between the preset user account information and the sensitive authority level The sensitive permission level.

S130, based on the sensitivity level of the target user and the sensitivity level corresponding to the target data, determine whether the target user has the permission to access the target data.

It should be understood that, before monitoring the target user's access request to the target data platform, the metadata related to the private data in the target data platform and the sensitivity level of the private data in the stored data corresponding to the metadata are marked, therefore, When determining whether the target user has the permission to access the target data, the sensitivity level of the target data can be obtained based on the mark of the target data, and then based on the matching degree of the sensitivity level of the target data and the sensitivity level of the target user to determine the target user Do you have the appropriate access rights. Specifically, based on the sensitivity level of the target user and the sensitivity level corresponding to the target data, determine whether the target user has the permission to access the target data, including: obtaining the sensitivity level of the target data based on the mark of the target data; and based on the sensitivity permission of the target user The degree of matching between the level and the sensitivity level corresponding to the target data determines whether the target user has the authority to access the target data.

When the sensitivity level of the target user is not less than the sensitivity level corresponding to the target data, it can be determined that the target user has the permission to access the target data; and when the sensitivity level of the target user is less than the sensitivity level corresponding to the target data, the target can be determined The user does not have permission to access the target data.

It should be understood that when determining the sensitivity level of the target data, the target data may not have a sensitivity level mark, but there may be a sensitivity level mark in the metadata corresponding to the target data. Specifically, obtaining the sensitivity level of the target data based on the mark of the target data includes:

Based on the mark of the target data, determine whether the target data has a mark of sensitivity level;

If the target data does not have a sensitivity level mark, obtain whether the metadata corresponding to the target data has a sensitivity level mark;

If the metadata corresponding to the target data has a sensitivity level mark, the sensitivity level of the target data is acquired based on the sensitivity level mark of the metadata corresponding to the target data.

S140: If the target user does not have the authority to access the private data in the target data, desensitize the queried target data and feed it back to the target user.

It should be understood that, in order to avoid users who do not have the right to access the private data in the target data to wantonly view and forward the target data, the embodiment of this specification can desensitize the target data and feed it back to the target user, so as to avoid causing any problems in the target data. Privacy data leakage. Specifically, desensitizing the queried target data and feeding it back to the target user includes: if the target data is stored data corresponding to one or more metadata, then desensitize the stored data corresponding to one or more metadata. After sensitive processing, it is fed back to the target user; if the target data is target storage data corresponding to one metadata, the target storage data is desensitized and fed back to the target user.

It should be understood that there are two methods for determining private data in the embodiments of this specification, one is determined based on metadata, and the other is determined based on stored data corresponding to the metadata. Then there are two ways to desensitize the target data. One is to desensitize the stored data corresponding to one or more metadata. For example, the salary column is confidential to most people and needs to be desensitized. Processing, this belongs to desensitization processing based on metadata; the other is to desensitize the target storage data in a metadata. For example, if the position is general manager, it needs to be desensitized. This is based on a certain metadata. Desensitization processing of a certain stored data.

Optionally, desensitize the queried target data and feed it back to the target user, including: desensitizing all data of the target data and then feeding it back to the target user; or desensitizing part of the target data and feeding back to the target user To target users.

Among them, all data of the target data can be desensitized. Specifically, hash desensitization can be used. That is, all the data of the target data is hashed to obtain a hash value, and the hash value of the target data is fed back to the target user. , Can also use key encryption for desensitization. Or, some data of the target data can be desensitized. Specifically, part of the target data can be hidden. For example, for the ID number, the middle digits of the ID number can be hidden, for example, to the target user Feedback "310521********1234".

As shown in FIG. 6, a schematic diagram of identifying certain metadata as private data in the method for accessing private data provided in this embodiment of this specification. In Figure 6, the matching rule based on the configured privacy data identifies the MAC address "ab:cd:11:a3:a0:50" that the target user requests to access, and the target user does not have the sensitive authority to access the MAC address. Then, in order to avoid leakage of the MAC address, part of the data in the MAC address can be desensitized and fed back to the target user. For example, the desensitized MAC address "**:cd:11" can be fed back to the target user. :a3:a0:50".

The one or more embodiments provided in this specification can monitor the target user’s access request to the target data platform, and the target user’s access request carries the target user’s account information and the target data requested by the target user; and can be based on predictions. Set the mapping relationship between the user account information and the sensitive authority level, determine the sensitive authority level that matches the target user’s account information; and determine whether the target user has the access target based on the target user’s sensitive authority level and the sensitivity level corresponding to the target data Data authority; when the target user does not have the authority to access the private data in the target data, the queried target data is desensitized and fed back to the target user. Through the mapping relationship between the preset user account information and the sensitive permission level of the data, it is determined whether the data visitor has the permission to access certain data, and when it is determined that the data visitor does not have the permission to access certain data, The desensitized data is fed back to the data visitor, which effectively protects the personal privacy data of the user and avoids the user's personal privacy data from being viewed at will.

FIG. 7 is a schematic structural diagram of an apparatus 700 for accessing private data provided by an embodiment of this specification, which includes: a request monitoring unit 701, a level determination unit 702, a permission determination unit 703, and a data feedback unit 704.

The request monitoring unit 701 monitors the access request of the target user to the target data platform, and the access request of the target user carries the account information of the target user and the target data that the target user requests to access.

The level determining unit 702 determines the sensitive authority level that matches the target user's account information based on the preset mapping relationship between the user account information and the sensitive authority level.

The authority determining unit 703 determines whether the target user has the authority to access the target data based on the sensitive authority level of the target user and the sensitivity level corresponding to the target data.

The data feedback unit 704, if the target user does not have the authority to access the private data in the target data, desensitize the queried target data and feed it back to the target user.

Optionally, in an implementation manner, before the request detection unit 701 monitors the target user's access request to the target data platform, the device further includes: a first acquiring unit that acquires multiple elements in the target data platform Data information; a first marking unit, based on the information of the multiple metadata and preset privacy matching rules for metadata, determine and mark target metadata related to privacy from the multiple metadata; metadata selection A unit for selecting a specified number of metadata from the plurality of metadata; a second marking unit, based on a privacy data identification model, identifying and marking the private data in the stored data corresponding to the specified number of metadata; wherein , The sample data used for the training of the private data recognition model is the stored data corresponding to the specified metadata.

Optionally, in an implementation manner, the preset metadata privacy matching rule further includes a matching rule of the sensitivity level of the metadata related to privacy, and the first marking unit is configured to: The privacy matching rule of the multiple metadata information and the preset metadata, and the target metadata related to privacy is determined from the multiple metadata; the information based on the target metadata and the preset The privacy matching rule of the metadata involves the matching rule of the sensitivity level of the privacy metadata to determine the sensitivity level of the target metadata; based on the sensitivity level of the target metadata, the target metadata is marked.

Optionally, in an embodiment, the second marking unit is configured to: based on a private data identification model, identify the private data in the stored data corresponding to the specified amount of metadata and the corresponding sensitivity level; Based on the sensitivity level corresponding to the privacy data in the storage data corresponding to the specified number of metadata, mark the privacy data in the storage data corresponding to the specified number of metadata.

Optionally, in an embodiment, after the second marking unit marks the privacy data in the stored data corresponding to the specified amount of metadata, the apparatus further includes: a second acquiring unit, If there is first metadata in the target metadata, and the first metadata is metadata in which the stored data corresponding to the specified number of metadata includes private data, then the first metadata is stored in the The sensitivity level in the target metadata, and the sensitivity level of the first metadata in the specified number of metadata, obtain a sensitivity level with a higher privacy protection priority; the third marking unit is based on the privacy protection The higher priority sensitivity level marks the first metadata.

Optionally, in an implementation manner, the authority determining unit 703 is configured to: obtain the sensitivity level of the target data based on the mark of the target data; based on the sensitivity level of the target user and the The matching degree of the sensitivity level corresponding to the target data determines whether the target user has the permission to access the target data.

Optionally, in an embodiment, the authority determining unit 703 is configured to: based on the mark of the target data, determine whether the target data has a sensitivity level mark; if the target data does not have a sensitivity level If the metadata corresponding to the target data has a sensitivity level mark, it is obtained whether the metadata corresponding to the target data has a sensitivity level mark, then based on the metadata corresponding to the target data, there is a sensitivity level mark To obtain the sensitivity level of the target data.

Optionally, in an embodiment, the data feedback unit 704 is configured to: if the target data is stored data corresponding to one or more metadata, store data corresponding to the one or more metadata The data is desensitized and fed back to the target user; if the target data is target storage data corresponding to more than one metadata, the target storage data is desensitized and fed back to the target user.

Optionally, in an embodiment, the data feedback unit 704 is configured to: desensitize all the data of the target data and then feed it back to the target user; or desensitize part of the target data. Feedback to the target user after sensitive processing.

The device 700 for accessing private data can implement the methods of the method embodiments shown in FIGS. 1 to 6. For details, reference may be made to the method for accessing private data in the embodiments shown in FIGS. 1 to 6, which will not be repeated here.

FIG. 8 is a schematic diagram of the structure of an electronic device according to an embodiment of the present specification. Please refer to FIG. 8. At the hardware level, the electronic device includes a processor, and optionally an internal bus, a network interface, and a memory. Among them, the memory may include memory, such as high-speed random access memory (Random-Access Memory, RAM), or may also include non-volatile memory (non-volatile memory), such as at least one disk storage. Of course, the electronic device may also include hardware required by other services.

The processor, network interface, and memory can be connected to each other through an internal bus. The internal bus can be an ISA (Industry Standard Architecture) bus, a PCI (Peripheral Component Interconnect, peripheral component interconnection standard) bus, or an EISA (Extended) bus. Industry Standard Architecture, extended industry standard structure) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, and so on. For ease of presentation, only one bidirectional arrow is used in FIG. 8, but it does not mean that there is only one bus or one type of bus.

Memory, used to store programs. Specifically, the program may include program code, and the program code includes computer operation instructions. The memory may include memory and non-volatile memory, and provide instructions and data to the processor.

The processor reads the corresponding computer program from the non-volatile memory to the memory and then runs it, forming a private data access device at the logical level. The processor executes the program stored in the memory, and is specifically configured to perform the following operations: monitoring the access request of the target user to the target data platform, and the access request of the target user carries the account information of the target user and the target user The target data requested to be accessed; based on the preset mapping relationship between the user account information and the sensitive permission level, the sensitive permission level that matches the target user’s account information is determined; based on the sensitive permission level of the target user and the target The sensitivity level corresponding to the data determines whether the target user has the permission to access the target data; if the target user does not have the permission to access the private data in the target data, the target data that is queried is disconnected Feedback to the target user after sensitive processing.

Through the mapping relationship between the preset user account information and the sensitive permission level of the data, it is determined whether the data visitor has the permission to access certain data, and when it is determined that the data visitor does not have the permission to access certain data, The desensitized data is fed back to the data visitor, which effectively protects the personal privacy data of the user and avoids the user's personal privacy data from being viewed at will.

The method performed by the device for accessing private data disclosed in the embodiment shown in FIG. 1 of this specification can be applied to a processor or implemented by the processor. The processor may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by an integrated logic circuit of hardware in the processor or instructions in the form of software. The above-mentioned processor may be a general-purpose processor, including a central processing unit (CPU), a network processor (Network Processor, NP), etc.; it may also be a digital signal processor (DSP), a dedicated integrated Circuit (Application Specific Integrated Circuit, ASIC), Field-Programmable Gate Array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps, and logical block diagrams disclosed in the embodiments of this specification can be implemented or executed. The general-purpose processor may be a microprocessor or the processor may also be any conventional processor or the like. The steps of the method disclosed in the embodiments of this specification can be directly embodied as being executed and completed by a hardware decoding processor, or executed and completed by a combination of hardware and software modules in the decoding processor. The software module can be located in a mature storage medium in the field, such as random access memory, flash memory, read-only memory, programmable read-only memory, or electrically erasable programmable memory, registers. The storage medium is located in the memory, and the processor reads the information in the memory and completes the steps of the above method in combination with its hardware.

The electronic device can also execute the method in FIG. 1 and realize the functions of the embodiment shown in FIG. 1 of the device for accessing private data, which will not be repeated here.

The embodiment of the present specification also proposes a computer-readable storage medium that stores one or more programs, the one or more programs include instructions, and the instructions are used in a portable electronic device that includes multiple application programs. When executed, the portable electronic device can execute the method of the embodiment shown in FIG. 1, and is specifically used to perform the following operations: monitor the target user's access request to the target data platform, and the target user's access request carries the target The user’s account information and the target data that the target user requests to access; based on the preset mapping relationship between the user account information and the sensitive permission level, the sensitive permission level that matches the target user’s account information is determined; based on the target The sensitivity level of the user and the sensitivity level corresponding to the target data are used to determine whether the target user has the permission to access the target data; if the target user does not have the permission to access the private data in the target data, then Desensitizing the queried target data is fed back to the target user.

The foregoing describes specific embodiments of this specification. Other embodiments are within the scope of the appended claims. In some cases, the actions or steps described in the claims can be performed in a different order than in the embodiments and still achieve desired results. In addition, the processes depicted in the drawings do not necessarily require the specific order or sequential order shown in order to achieve the desired results. In some embodiments, multitasking and parallel processing are also possible or may be advantageous.

In short, the above descriptions are only preferred embodiments of this specification, and are not intended to limit the protection scope of this specification. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of this specification shall be included in the protection scope of this specification.

The systems, devices, modules, or units illustrated in the above embodiments may be specifically implemented by computer chips or entities, or implemented by products with certain functions. A typical implementation device is a computer. Specifically, the computer may be, for example, a personal computer, a laptop computer, a cell phone, a camera phone, a smart phone, a personal digital assistant, a media player, a navigation device, an email device, a game console, a tablet computer, a wearable device, or Any combination of these devices.

Computer-readable media include permanent and non-permanent, removable and non-removable media, and information storage can be realized by any method or technology. The information can be computer-readable instructions, data structures, program modules, or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, CD-ROM, digital versatile disc (DVD) or other optical storage, Magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media can be used to store information that can be accessed by computing devices. According to the definition in this article, computer-readable media does not include transitory media, such as modulated data signals and carrier waves.

It should also be noted that the terms "include", "include" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or equipment including a series of elements not only includes those elements, but also includes Other elements that are not explicitly listed, or also include elements inherent to such processes, methods, commodities, or equipment. If there are no more restrictions, the element defined by the sentence "including a..." does not exclude the existence of other identical elements in the process, method, commodity, or equipment that includes the element.

The various embodiments in this specification are described in a progressive manner, and the same or similar parts between the various embodiments can be referred to each other, and each embodiment focuses on the difference from other embodiments. In particular, as for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

Claims

A method for accessing private data, including:

Monitoring the access request of the target user to the target data platform, the access request of the target user carries the account information of the target user and the target data that the target user requests to access;

Based on the preset mapping relationship between the user account information and the sensitive permission level, determine the sensitive permission level that matches the target user's account information;

Determining whether the target user has the permission to access the target data based on the sensitivity level of the target user and the sensitivity level corresponding to the target data;

If the target user does not have the authority to access the private data in the target data, the queried target data is desensitized and fed back to the target user.
The method according to claim 1, before the monitoring the access request of the target user to the target data platform, the method further comprises:

Obtain multiple metadata information in the target data platform;

Based on the information of the plurality of metadata and preset privacy matching rules for the metadata, determine and mark the target metadata related to privacy from the plurality of metadata;

Select a specified number of metadata from the plurality of metadata;

Based on the private data identification model, identify and mark the private data in the stored data corresponding to the specified amount of metadata;

Wherein, the sample data used for the training of the private data recognition model is the stored data corresponding to the specified metadata.
The method according to claim 2, wherein the preset metadata privacy matching rule further includes a matching rule of the sensitivity level of the metadata related to privacy, based on the information of the multiple metadata and the preset metadata. Data privacy matching rules, which determine and mark target metadata related to privacy from the multiple metadata, include:

Based on the information of the plurality of metadata and the preset privacy matching rule of the metadata, determining the target metadata related to privacy from the plurality of metadata;

Determine the sensitivity level of the target metadata based on the information of the target metadata and the matching rule of the sensitivity level of the privacy-related metadata in the preset privacy matching rules of the metadata;

Mark the target metadata based on the sensitivity level of the target metadata.
The method according to claim 3, based on the private data identification model, identifying and marking the private data in the stored data corresponding to the specified amount of metadata, comprising:

Based on the privacy data identification model, identify the privacy data and the corresponding sensitivity level in the stored data corresponding to the specified amount of metadata;

Based on the sensitivity level corresponding to the privacy data in the storage data corresponding to the specified number of metadata, mark the privacy data in the storage data corresponding to the specified number of metadata.
5. The method according to claim 4, after marking the private data in the stored data corresponding to the specified amount of metadata, the method further comprises:

If there is first metadata in the target metadata, and the first metadata is metadata in which the stored data corresponding to the specified number of metadata includes private data, then the first metadata is stored in the The sensitivity level in the target metadata and the sensitivity level of the first metadata in the specified number of metadata, obtaining a sensitivity level with a higher privacy protection priority;

Mark the first metadata based on the higher sensitivity level of the privacy protection priority.
The method according to claim 5, determining whether the target user has the permission to access the target data based on the sensitivity level of the target user and the sensitivity level corresponding to the target data, comprising:

Obtaining the sensitivity level of the target data based on the mark of the target data;

Based on the degree of matching between the sensitivity level of the target user and the sensitivity level corresponding to the target data, it is determined whether the target user has the permission to access the target data.
8. The method of claim 6, obtaining the sensitivity level of the target data based on the mark of the target data, comprising:

Based on the mark of the target data, determine whether the target data has a mark of sensitivity level;

If the target data does not have a sensitivity level mark, acquiring whether the metadata corresponding to the target data has a sensitivity level mark;

If the metadata corresponding to the target data has a sensitivity level mark, the sensitivity level of the target data is acquired based on the sensitivity level mark of the metadata corresponding to the target data.
7. The method according to any one of claims 1 to 7, performing desensitization processing on the target data inquired and feeding back to the target user, comprising:

If the target data is stored data corresponding to one or more metadata, desensitize the stored data corresponding to the one or more metadata and feed it back to the target user;

If the target data is target storage data corresponding to more than one metadata, the target storage data is desensitized and fed back to the target user.
A device for accessing private data includes:

A request monitoring unit that monitors a target user's access request to a target data platform, where the target user's access request carries the target user's account information and the target data that the target user requests to access;

The level determining unit, based on the preset mapping relationship between the user account information and the sensitive authority level, determines the sensitive authority level that matches the target user's account information;

An authority determining unit, based on the sensitive authority level of the target user and the sensitivity level corresponding to the target data, determining whether the target user has the authority to access the target data;

The data feedback unit, if the target user does not have the authority to access the private data in the target data, desensitize the queried target data and feed it back to the target user.
An electronic device including:

Processor; and

A memory arranged to store computer-executable instructions that, when executed, cause the processor to perform the following operations:

Monitoring the access request of the target user to the target data platform, the access request of the target user carries the account information of the target user and the target data that the target user requests to access;

Based on the preset mapping relationship between the user account information and the sensitive permission level, determine the sensitive permission level that matches the target user's account information;

Determining whether the target user has the permission to access the target data based on the sensitivity level of the target user and the sensitivity level corresponding to the target data;

If the target user does not have the authority to access the private data in the target data, the queried target data is desensitized and fed back to the target user.
A computer-readable storage medium that stores one or more programs that, when executed by an electronic device including multiple application programs, cause the electronic device to perform the following operations :

Monitoring the access request of the target user to the target data platform, the access request of the target user carries the account information of the target user and the target data that the target user requests to access;

Based on the preset mapping relationship between the user account information and the sensitive permission level, determine the sensitive permission level that matches the target user's account information;

Determining whether the target user has the permission to access the target data based on the sensitivity level of the target user and the sensitivity level corresponding to the target data;

If the target user does not have the authority to access the private data in the target data, the queried target data is desensitized and fed back to the target user.