隐私信息管理系统设计与实现

Design and implementation of privacy information management system

由于业务需要,如开发新的系统或升级业务模块时,软件产商需要业务部门提供真实业务数据做测试。敏感信息脱离单位的运行环境进入第三方存在非常大的泄露风险。根据数据脱敏全生命周期过程的管理思想,在提供给第三方含有敏感信息的数据之前需要进行脱敏处理。本文基于python+flask+mysql设计和实现了隐私信息管理系统。通过建立单位信息系统隐私信息台账、数据交换以及输出的数据脱敏方案的审核评估机制,可有效降低隐私信息泄露风险。

Due to business needs,such as developing new systems or upgrading business modules,software manufacturers need business departments to provide real business data for testing.There is a great risk of leakage of sensitive information out of the operating environment of the unit and entering the third party.According to the management idea of the whole life cycle process of data desensitization,desensitization is needed before providing the data with sensitive information to the third party.A privacy information management system based on python+flask+mysql was designed and implemented in this paper.The risk of privacy information disclosure can be effectively reduced by establishing the privacy information account of the unit information system as well as the audit and evaluation mechanism of data desensitization scheme for data exchange and output.