Beijing Bytedance Network Technology Co., Ltd.

Jianqing Zhang

Zhipeng Tian

Zhengqin Luo

Hengming Dai

Xingxiu Chen

Mu Du

Lifeng Sang

Zhijun Ling

Xiangyun Cao

Ruoxin Shen

Xuan Zhang

Deyang Yin

Xinglang Wang

Systems and methods for processing data are described. More specifically, a query request may be received and a data pattern may be identified in the query request. Personally identifiable information associated with the query request may then be de-pseudonymized. Accordingly, a second request using the de-pseudonymized personally identifiable information and receiving a response to the second request may be generated. The personally identifiable information in the response may be pseudonymized such that the pseudonymized personally identifiable information and data included in the response is provided to a client.

Data access gateway for security and privacy

According to examples of the present disclosure, there is provided a method and device for controlling data access. The method comprises: receiving a data query request characterizing that a first user requests target data; obtaining a business data access capability attribute corresponding to the first user and obtaining a business security attribute corresponding to the target data; wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user; determining a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user and the business security attribute of the target data; and processing the target data by invoking the data query processing policy and generating a response message for feedback.

Method and apparatus for control of data access

According to embodiments of the present disclosure, there is provided a method, apparatus, device, storage medium and program product for log information processing. The method comprises: determining a source of a target log in response to a log query request, wherein the log query request indicates that a target user requests to query the target log; determining a log desensitization policy corresponding to the source of the target log, the log desensitization policy being determined based on log registration information associated with the source, the log registration information being used for indicating a physical meaning of a variable item in the target log; and performing, based on service attribute information of the target user, the log desensitization policy and service authority information, desensitization processing on the variable item related to the target user in the target log for providing the target user with a desensitized target log.

Method, apparatus, device, storage medium and program product for log information processing

Systems and methods directed to providing a data security labeling framework at a first device are described. The system may include a storage area and at least one data labeler. The data labeler may be configured to locate one or more data instances, define one or more security attributes to be used under one or more different contexts, and apply a labeling to the located one or more data instances such that each label provided by the labeler includes or is otherwise associated with a plurality of security attributes.

Unified data security labeling framework

Growing community of inventors

Los Angeles, CA, United States of America

Jianqing Zhang