Database processing method and apparatus, device, and medium

An electronic device, comprising:

• a processor;
• and
• a memory configured to store instructions executable by the processor;
• wherein the processor is configured to read the instructions from the memory, and execute the instructions to implement a method comprising:
• receiving an access request to a database, the access request carrying a user identifier of an accessor and a data processing instruction, wherein the data processing instruction is used to instruct to process specified data in the database to obtain target data, and the database is deployed in an independent, safe execution environment;
• in a case that a part of the target data is encrypted data, querying, based on the user identifier of the accessor, an authorization information table in the database, to detect whether the accessor is an authorized user of the part of the target data, wherein the encrypted data comprises data stored in the database in an encrypted form, and the authorization information table is used to record authorized user information configured by a data provider for the encrypted data;
• and
• in a case that the accessor is not an authorized user of the part of the target data, performing mask processing on the part of the target data to generate invisible masked data, and returning the masked data and remaining unencrypted target data in the target data in response to the access request.

A non-transitory computer readable storage medium having a computer program stored thereon for performing a method comprising:

• receiving an access request to a database, the access request carrying a user identifier of an accessor and a data processing instruction, wherein the data processing instruction is used to instruct to process specified data in the database to obtain target data, and the database is deployed in an independent, safe execution environment;
• in a case that a part of the target data is encrypted data, querying, based on the user identifier of the accessor, an authorization information table in the database, to detect whether the accessor is an authorized user of the part of the target data, wherein the encrypted data comprises data stored in the database in an encrypted form, and the authorization information table is used to record authorized user information configured by a data provider for the encrypted data;
• and
• in a case that the accessor is not an authorized user of the part of the target data, performing mask processing on the part of the target data to generate invisible masked data, and returning the masked data and remaining unencrypted target data in the target data in response to the access request.