Automated data masking with false positive detection and avoidance
US-2022222372-A1 · Jul 14, 2022 · US
US11620179B1 · US · B1
| Field | Value |
|---|---|
| Publication number | US-11620179-B1 |
| Application number | US-202217585434-A |
| Country | US |
| Kind code | B1 |
| Filing date | Jan 26, 2022 |
| Priority date | Nov 5, 2021 |
| Publication date | Apr 4, 2023 |
| Grant date | Apr 4, 2023 |
A practical reading order for non-experts. Skip the full description unless you need deep technical detail.
What the patent document calls the invention.
A short plain-language summary of the technical disclosure.
Who owns or filed the patent and who is credited as inventor.
Filing, priority, publication, and grant dates set the timeline.
The legal scope of protection — read this for what is actually claimed.
Technology tags used to group this patent with similar filings.
Prior art links and similar publications in this corpus.
Official abstract text for this publication.
According to embodiments of the present disclosure, there is provided a method, apparatus, device, storage medium and program product for log information processing. The method comprises: determining a source of a target log in response to a log query request, wherein the log query request indicates that a target user requests to query the target log; determining a log desensitization policy corresponding to the source of the target log, the log desensitization policy being determined based on log registration information associated with the source, the log registration information being used for indicating a physical meaning of a variable item in the target log; and performing, based on service attribute information of the target user, the log desensitization policy and service authority information, desensitization processing on the variable item related to the target user in the target log for providing the target user with a desensitized target log.
Opening claim text (preview).
What is claimed is: 1. A method for log information processing, comprising: receiving, by a processor of a log processing device, a log query request indicating that a target user requests to query a target log that is generated by a running device in an environment of a trusted technology partner during a running or debugging process of a program code, wherein the target user is prevented from directly accessing the target log generated by the running device, and wherein the target user is provided with the log processing device by the trusted technology partner; determining, by the processor of the log processing device, a source of the target log in response to the log query request, the target log being a log that is generated by a preset log software development kit and has a preset structured format, the preset structured format identifying a variable item in the log by a preset structure identifier; determining, by the processor of the log processing device, a log desensitization policy corresponding to the source of the target log, the log desensitization policy being determined based on log registration information associated with the source, the log registration information being used for indicating a physical meaning of the variable item in the target log and being submitted through a log registration platform provided by the trusted technology partner to register content that can be revealed in logs generated by different sources; and performing, by the processor of the log processing device and based on business attribute information of the target user, the log desensitization policy and pre-configured business authority information, desensitization processing on the variable item related to the target user in the target log for providing the target user with a desensitized target log. 2. The method according to claim 1 , wherein determining the source of the target log in response to the log query request comprises: determining, by the processor of the log processing device, a type of the target log based on a compilation path associated with the target log, the type indicating that the target log belongs to a framework type log or a business type log, the framework type log being a log generated by running of an underlying framework code, the business type log being a log generated by running of a business type logic code; in accordance with a determination that the target log is a framework type log, determining, by the processor of the log processing device, a framework identifier from the compilation path of the target log as the source of the target log; and in accordance with a determination that the target log is a business type log, determining, by the processor of the log processing device, a service name from the target log as the source of the target log. 3. The method according to claim 1 , wherein, if the target log is a framework type log, the target log comprises a first part generated by the log software development kit (SDK) itself and a second part generated by an underlying framework code through the log SDK; or if the target log is a business type log, the target log comprises a first part generated by the log SDK itself and a second part generated by a business type logic code through the log SDK. 4. The method according to claim 1 , wherein the log registration information comprises a type of the variable item in the target log and description information of the physical meaning of the variable item; and the variable item comprises the following types: a character variable, a Boolean variable, a floating point variable or an integer variable. 5. The method according to claim 1 , wherein the performing desensitization processing on the variable item related to the target user in the target log according to the business attribute information of the target user, the log desensitization policy and the pre-configured business authority information, comprises: determining, by the processor of the log processing device, business attribute information of the target user according to a user identifier of the target user; determining, by the processor of the log processing device, target business sensitive data matching the target user according to the business attribute information of the target user and the pre-configured business authority information; and performing, by the processor of the log processing device, the desensitization processing on the variable item of the target business sensitive data in the target log based on the log desensitization policy. 6. The method according to claim 1 , wherein determining the source of the target log in response to the log query request, comprises: in response to the log query request, determining, by the processor of the log processing device, a content format of the target log; and in accordance with a determination that the content format of the target log meets a predetermined format specification, determining, by the processor of the log processing device, the source of the target log, wherein the predetermined format specification indicates that a log content comprises a service name, a compilation path, a code version number and the preset structure identifier. 7. The method according to claim 1 , wherein, when the target log is a business type log, the log registration information further comprises a set of character strings comprised in the target log, and description information of physical meanings of the set of character strings. 8. An electronic device, comprising: a memory and a processor, wherein the memory is used for storing one or more computer instructions, wherein the one or more computer instructions, when executed by the processor, cause the electronic device to: receive a log query request indicating that a target user requests to query a target log that is generated by a running device in an environment of a trusted technology partner during a running or debugging process of a program code, wherein the target user is prevented from directly accessing the target log generated by the running device, and wherein the target user is provided with the electronic device by the trusted technology partner; determine a source of the target log in response to the log query request, the target log being a log that is generated by a preset log software development kit and has a preset structured format, the preset structured format identifying a variable item in the log by a preset structure identifier; determine a log desensitization policy corresponding to the source of the target log, the log desensitization policy being determined based on log registration information associated with the source, the log registration information being used for indicating a physical meaning of the variable item in the target log and being submitted through a log registration platform provided by the trusted technology partner to register content that can be revealed in logs generated by different sources; and perform, based on business attribute information of the target user, the log desensitization policy and pre-configured business authority information, desensitization processing on the variable item related to the target user in the target log for providing the target user with a desensitized target log. 9. A computer-readable storage medium, having one or more computer instructions stored thereon, wherein the one or more computer instructions are executed by a processor of an electronic device to implement a method comprising: receiving a log query request indicating that a target user requests to query a target log that is generated by a running device in an environment of a trusted technology partner during a running or debugging process of a pro
Auditing as a secondary aspect · CPC title
Protecting personal data, e.g. for financial or medical purposes · CPC title
Energy efficient computing, e.g. low power processors, power management or thermal management · CPC title
Content or structure details of the error report, e.g. specific table structure, specific error fields · CPC title
Readable error formats, e.g. cross-platform generic formats, human understandable formats · CPC title
Related publications grouped by family.
Answers are generated from the same data shown on this page.