Method and apparatus for control of data access

    公开(公告)号:US11669632B2

    公开(公告)日:2023-06-06

    申请号:US17585442

    申请日:2022-01-26

    IPC分类号: G06F21/62 G06F21/60

    摘要: According to examples of the present disclosure, there is provided a method and device for controlling data access. The method comprises: receiving a data query request characterizing that a first user requests target data; obtaining a business data access capability attribute corresponding to the first user and obtaining a business security attribute corresponding to the target data; wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user; determining a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user and the business security attribute of the target data; and processing the target data by invoking the data query processing policy and generating a response message for feedback.

    Method, apparatus, device, storage medium and program product for log information processing

    公开(公告)号:US11620179B1

    公开(公告)日:2023-04-04

    申请号:US17585434

    申请日:2022-01-26

    IPC分类号: G06F11/00 G06F11/07 G06F21/62

    摘要: According to embodiments of the present disclosure, there is provided a method, apparatus, device, storage medium and program product for log information processing. The method comprises: determining a source of a target log in response to a log query request, wherein the log query request indicates that a target user requests to query the target log; determining a log desensitization policy corresponding to the source of the target log, the log desensitization policy being determined based on log registration information associated with the source, the log registration information being used for indicating a physical meaning of a variable item in the target log; and performing, based on service attribute information of the target user, the log desensitization policy and service authority information, desensitization processing on the variable item related to the target user in the target log for providing the target user with a desensitized target log.

    METHOD AND APPARATUS FOR CONTROL OF DATA ACCESS

    公开(公告)号:US20230145130A1

    公开(公告)日:2023-05-11

    申请号:US17585442

    申请日:2022-01-26

    IPC分类号: G06F21/62

    CPC分类号: G06F21/6227

    摘要: According to examples of the present disclosure, there is provided a method and device for controlling data access. The method comprises: receiving a data query request characterizing that a first user requests target data; obtaining a business data access capability attribute corresponding to the first user and obtaining a business security attribute corresponding to the target data; wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user; determining a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user and the business security attribute of the target data; and processing the target data by invoking the data query processing policy and generating a response message for feedback.