Data storage method and device, computer readable storage medium and electronic equipment

Abstract

The invention relates to a data storage method and device, a computer readable storage medium and electronic equipment. The method comprises the steps of obtaining original sensitive data in a data warehouse; backing up the original sensitive data to obtain backup sensitive data, independently storing the backup sensitive data into a data warehouse, and enabling the backup sensitive data not to flow in the data warehouse; and performing desensitization operation on the original sensitive data. Therefore, the risk of leakage of the sensitive data in the data warehouse circulation process can bereduced. Besides, the original sensitive data is backed up (namely backup sensitive data) and is independently stored, and the backup sensitive data does not flow in the data warehouse, so that the reversibility and uniqueness of the data can be ensured, and the requirements of a user on reversible operation of the sensitive data and table association operation based on sensitive fields are met.Moreover, the backup sensitive data does not flow in the data warehouse, so that the risk of sensitive data leakage can be reduced, and subsequent auditing of the sensitive data and tracing of the sensitive data leakage are facilitated.

Description

technical field [0001] The present disclosure relates to the field of information security, and in particular, to a data storage method, device, computer-readable storage medium, and electronic equipment. Background technique [0002] Against the backdrop of the promulgation and implementation of the "Network Security Law" and the frequent occurrence of various external data leakage incidents, data storage security has also been raised to a new level, requiring us to conduct in-depth management of big data security, privacy and compliance Analysis in order to better understand the complexity of big data security and privacy issues, so as to solve the problem of sensitive data leakage in data warehouses under the premise of "safe use" of data. [0003] At present, the following two methods are mainly used to protect the storage security of sensitive data: (1) Simple data desensitization method, that is, using desensitization rules such as replacement, rearrangement, and encry...

AI Technical Summary

Problems solved by technology

[0003] At present, the following two methods are mainly used to protect the storage security of sensitive data: (1) Simple data desensitization method, that is, using desensitization rules such as replacement, rearrangement, and encryption for sensitive data to desensitize data, but this method , the data is irreversible, and the uniqueness of the data cannot be guaranteed, so the table association operation based on sensitive data cannot be satisfied; (2) Sensitive data is encrypted symmetrically through a user-defined function (User Define Function, UDF), although this method can Guarantee the reversibility and uniqueness of data, but there is a risk of sensitive data leakage

Images