System and method for realizing data desensitization

Abstract

The invention discloses a system for realizing data desensitization. The system comprises a database, a rule setting module, a to-be-changed script recognition module, a script changing module and a script execution module, wherein the rule setting module, the to-be-changed script recognition module, the script changing module and the script execution module are connected in sequence; according to the rule setting module, an access permission of a user on data is set according to a business demand in advance, and sql rewriting rules are set for sensitive fields and stored into the database; according to the to-be-changed script recognition module, the access permission of the user on the data is judged, an sql script of an unauthorized user is recognized, and a to-be-changed script is determined; the script changing module rewrites and changes the sql script of the unauthorized user; and the script execution module executes the changed sql script, generates desensitized data and transmits the desensitized data to an access terminal accessed by the user. The invention furthermore discloses a desensitization method of the system for realizing data desensitization. Through the system and the method, targeted desensitization can be performed, and desensitization workload is reduced.

Description

technical field [0001] The invention relates to the field of data security, in particular to a system and method for desensitizing sensitive data. Background technique [0002] With the popularization of the Internet and the rapid development of information technology, data has become the core asset within the enterprise, and data security issues or information security issues have become more and more important as the value of data has become prominent. In order to protect data security, a series of laws and regulations have been introduced. For example, the Federal Information Management Act, the Sarbanes-Oxley Act, and the Health Insurance Portability and Accountability Act have been introduced internationally to protect information and data security. China has also passed the "Information System Security Level Protection", "GBT 22240-2008 Information Security Technology Information System Security Level Protection Grading Guide, "Information Security Technology Public a...

AI Technical Summary

Problems solved by technology

However, this method also has certain disadvantages, that is, the data needs to be preprocessed, the preparation workload is heavy, the data needs to be updated regularly, and all the data is desensitized. Some users may have access to some sensitive data, so this The desensitization method cannot meet the flexible and changeable needs

Images