Method and apparatus for control of data access

An electronic device, comprising:

• a memory and a processor;
• wherein the memory is used to store one or more computer instructions which are executed by the processor to
• receive a data query request characterizing that a first user requests target data using a query keyword;
• obtain a business data access capability attribute corresponding to the first user and obtaining a first business security attribute corresponding to the target data and a second business security attribute corresponding to the query keyword, wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user, and each of the first business security attribute and the second business security attribute is used to characterize an identification attribute for classifying data based on business security requirements, and comprises one or more of a public level, an identifiability level, and a time level of data, and wherein the public level indicates a degree of difficulty in obtaining the data, the identifiability level indicates whether the data can identify a user, a natural person, or an entity, and the time level indicates whether the association between user data and a user will become invalid within a threshold time period;
• determine a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user, the first business security attribute of the target data and the second business attribute of the query keyword;
• and
• process the target data by invoking the data query processing policy and generating a response message for feedback.

A computer program product comprising computer readable storage medium storing one or more computer instructions thereon which are executed by a processor to

• receive a data query request characterizing that a first user requests target data using a query keyword;
• obtain a business data access capability attribute corresponding to the first user and obtaining a first business security attribute corresponding to the target data and a second business security attribute corresponding to the query keyword, wherein the business data access capability attribute is used to characterize capability of accessing data in a business environment in the charge of a user based on a business attribute of the user, and each of the first business security attribute and the second business security attribute is used to characterize an identification attribute for classifying data based on business security requirements, and comprises one or more of a public level, an identifiability level, and a time level of data, and wherein the public level indicates a degree of difficulty in obtaining the data, the identifiability level indicates whether the data can identify a user, a natural person, or an entity, and the time level indicates whether the association between user data and a user will become invalid within a threshold time period;
• determine a data query processing policy corresponding to the data query request by invoking a data access security model based on the business data access capability attribute of the first user, the first business security attribute of the target data and the second business attribute of the query keyword;
• and
• process the target data by invoking the data query processing policy and generating a response message for feedback.