Method and device for providing and tracking sensitive information

Abstract

The invention provides a method and a device for providing and tracking sensitive information. Relevant information of a caller is added into the sensitive information, and the calling situation of the sensitive information by a relevant person can be tracked under the situation of not influencing the sensitive information, so that a leakage source can be tracked when a caller leaks the sensitiveinformation. The method for providing and tracking sensitive information comprises the following steps: receiving a calling request of the caller about the sensitive information, wherein the calling request carries identity authentication data of the caller; verifying the permission of the caller according to the identity authentication data, generating a unique serial number of the caller when the caller has corresponding permission, and determining an information text requested by the calling request; converting the information text, so that the unique serial number is included in the converted information text in a ciphertext form without influencing reading of the information text; and returning the converted information text to the caller, wherein the unique serial number of the corresponding caller can be extracted from the converted information text.

Description

technical field [0001] The invention relates to the technical field of computers and software thereof, in particular to a method and device for providing and tracking sensitive information. Background technique [0002] In the information age, the leakage of sensitive information has caused great information security risks to enterprise systems, so the management of sensitive information cannot be ignored. The so-called sensitive information refers to all information that will be detrimental to the implementation of national interests or government programs, or detrimental to the individual's legal right to privacy when it is lost, improperly used, or accessed or modified without authorization. [0003] For enterprise systems, such as e-commerce companies, sensitive information includes but is not limited to the following information: user name, user contact number, delivery address, order amount, etc. Since e-commerce companies usually have strict authority control over ex...

AI Technical Summary

Problems solved by technology

[0004] However, due to the large number of internal personnel in e-commerce enterprises, authority control is relatively difficult. Once sensitive information leaks, it is often difficult to trace the source of the leak, resulting in insufficient internal threat and irreparable losses.

Images