WO2023035938A1 - Method for executing robot script and related device - Google Patents

Abstract

The present application discloses a method for executing a robot script and a related device, said method comprising: acquiring a target robot script from an RPA management center; when target sensitive information must be used to execute the target robot script, sending a sensitive information acquisition request to the RPA management center, the sensitive information acquisition request being used to request to acquire target sensitive information from the RPA management center, the sensitive information acquisition request carrying relevant information of the target robot script, the relevant information of the target robot script comprising a target actuator identifier and/or a target control identifier, the target executor identifier being used to indicate an RPA actuator that executes the target robot script, and the target control identifier being used to indicate a control that must use the target sensitive information; and if a first response message that carries the target sensitive information and is sent by the RPA management center is received, processing the target robot script according to the target sensitive information. By employing the embodiments of the present application, the risk of sensitive information being leaked can be reduced.

Description

Method and related device for executing robot script

This application claims the priority of the Chinese patent application with the application number 202111060121.1 and the title of the invention "Method for Executing Robotic Scripts and Related Devices" filed with the State Intellectual Property Office of China on September 9, 2021, the entire contents of which are incorporated herein by reference Applying.

technical field

The present application relates to the field of computer programs, in particular to a method for executing robot scripts and related devices.

Background technique

Robot process automation (robot process automation, RPA) system is an application program, which imitates the manual operation of the end user on the computer through software technology, realizes the replacement of manual operation by software, helps enterprises realize process automation, and improves enterprise operation efficiency.

Figure 1 shows a typical RPA system. As shown in Figure 1, the RPA system includes an RPA management center, an RPA actuator and a target system. As the control center of the RPA system, the RPA management center provides functions such as robot script management, actuator management, task management, and parameter management. As the control center of the entire RPA system, it is responsible for task scheduling, parameter management, and actuator management. As the execution end of RPA, the RPA executor provides the automatic operation capability for the target system. The executor usually supports the operation and calling of the browser, client software interface, and network interface. The RPA executor is controlled and scheduled by the RAP management center. When applied, multiple RPA executors may be deployed, and usually work and run in clusters to replace large-scale manual operations. In addition, the RPA designer usually provides the ability to arrange, debug and publish RPA robot scripts. Users can complete the operation automation scripts for external systems through the RPA designer. For example, in the financial field, the RPA designer can be used to arrange "automatic reimbursement". Robot Script", which can realize the purpose of automatically creating reimbursement applications, and complete the automation of a series of actions including opening the reimbursement system through a browser, entering the account number and password to log in to the reimbursement system, creating and submitting reimbursement applications.

RPA systems are currently widely used in many fields such as finance, government affairs, and telecommunications. By replacing repetitive manual operations, RPA has greatly improved the operating efficiency of enterprises. The RPA system often involves automatic operation of the target system during use. At this time, it is often necessary to enter sensitive data such as accounts and passwords required for RPA execution in the RPA system, so that the RPA executor can automatically log in based on these sensitive information when needed. And complete the automatic operation of the designated target system. The security protection of these sensitive information is one of the core concerns of enterprises when applying RPA systems. Users generally worry about whether the account and password information provided to the RPA system is leaked. This is Problems to be solved.

Contents of the invention

Embodiments of the present application provide a method for executing robot scripts and related devices, and the risk of sensitive information being leaked can be reduced by using the embodiments of the present application.

In the first aspect, the embodiment of the present application provides a method for executing a robot script, including:

Obtain the target robot script from the RPA management center; when executing the target robot script needs to use target sensitive information, send a sensitive information acquisition request to the RPA management center, and the sensitive information acquisition request is used to request to obtain target sensitive information from the RPA management center; The sensitive information acquisition request carries relevant information of the target robot script, and the relevant information of the target robot script includes the target executor ID and/or the target control ID; the target executor ID is used to indicate the RPA executor that executes the target robot script, and the target control ID A control for indicating that target sensitive information needs to be used; receiving a first response message sent by the RPA management center in response to the sensitive information acquisition request, wherein the first response message carries target sensitive information; and processing the target robot script according to the target sensitive information.

It should be pointed out here that after the RPA executor finishes using the target sensitive information, the target sensitive information is deleted.

When the RPA executor needs to use target sensitive information, it sends the RPA executor ID and/or control ID to the RPA management center, and the RPA management center verifies through the RPA executor ID and/or control ID; Send target sensitive information, and through verification in the dimension of RPA actuators and/or controls, the scope of use of sensitive information is limited, making it impossible to obtain sensitive information in scenarios targeting other RPA actuators and/or other controls, and avoiding sensitive information. Give way.

In an optional embodiment, the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier, and/or a target user identifier;

Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script.

By introducing part or all of target sensitive information identification, target robot script identification and target user identification, the verification threshold is raised, and the scope of use of sensitive information is further limited, thereby further reducing the risk of sensitive information being leaked.

In an optional embodiment, the target control is a target text box, and the target robot script is processed according to target sensitive information, including:

When the target text box is not a plain text box, input the target sensitive information into the target text box so as to continue processing the target robot script; when the target text box is a plain text box, end the execution of the target robot script.

By judging whether the target text box is not a plain text box before inputting the target sensitive information into the target text box, and only inputting the target sensitive information into the target text box when the target text box is not a plain text box, avoiding the target sensitive information Entering into a clear text box results in the disclosure of sensitive information.

It should be pointed out here that the target control is not limited to the input box, and can also be other controls, such as web pages, or office software, such as word, ppt or Excel.

In an optional embodiment, entering target sensitive information into the target text box in order to continue processing the target robot script includes:

Fragment the target sensitive information to obtain M sensitive information fragments, M is an integer greater than 1; input the M sensitive information fragments into the target text box in turn, after inputting the i-th sensitive information fragment in the target text box , if the sensitive information segment input into the target text box is input in cipher text, then continue to input the i+1th sensitive information segment in the target text box until all the target sensitive information is input into the target text box, so that Continue to execute the target robot script; i is an integer greater than 0 and less than M-1; if the sensitive information segment input into the target text box is entered in plain text, report the suspected sensitive information leakage warning event to the RPA management center, and end the execution of the target robot script.

It should be pointed out here that, after inputting one or more pieces of sensitive information in the target text box, an operation of judging whether the pieces of sensitive information input in the target text box are input in ciphertext is performed once.

In an optional embodiment, the method of the present application also includes:

Obtain the input data from the target text box in a preset manner; if no data is obtained or the obtained data is a preset character, then it is determined that the sensitive information segment input into the target text box is entered in ciphertext; if If the data is obtained or the obtained data is not a preset character, it is determined that the sensitive information segment entered into the target text box is entered in plain text;

Among them, the preset methods include:

Obtain the entered sensitive information fragment from the target text box by calling the control interface, or,

Retrieve the entered piece of sensitive information from the target text box by entering a copy command for the target text box; or,

A screenshot of the target text box is obtained to obtain a screenshot of the target text box; text recognition is performed on the screenshot of the target text box to obtain input sensitive information fragments from the target text box.

By judging the input method of the sensitive information input into the target text box, it is possible to further avoid leakage of the sensitive information when the sensitive information is input in plain text. And the sensitive information is input into the target text box in pieces, and when it is determined that the sensitive information may be leaked, since the leaked information is only a part of the sensitive information, the complete leak of the sensitive information is also avoided.

In an optional embodiment, the method of the present application also includes:

Receive the second response message sent by the RPA management center for responding to the sensitive information acquisition request, and end the execution of the target robot script;

Wherein, the second response message carries the first identifier, and the first identifier is used to indicate that the acquisition of the target sensitive information fails, or the second response message does not carry the target sensitive information.

In a second aspect, an embodiment of the present application provides a method for executing a robot script, including:

Receive the sensitive information acquisition request sent by the RPA executor, the sensitive information acquisition request is used to request the acquisition of target sensitive information, the sensitive information acquisition request carries the relevant information of the target robot script, and the relevant information of the target robot script includes the target executor ID and /or target control identification; the target executor identification is used to indicate the executor that executes the target robot script, and the target control identification is used to indicate the control that needs to use target sensitive information; according to the target executor identification and/or target control identification to the RPA executor Sending a first response message, where the first response message carries target sensitive information.

When the RPA executor needs to use target sensitive information, it sends the RPA executor ID and/or control ID to the RPA management center, and the RPA management center verifies through the RPA executor ID and/or control ID; Send target sensitive information, and through verification in the dimension of RPA actuators and/or controls, the scope of use of sensitive information is limited, making it impossible to obtain sensitive information in scenarios targeting other RPA actuators and/or other controls, and avoiding sensitive information. Give way.

In an optional embodiment, sending the first response message to the RPA executor according to the target executor identifier and/or the target control identifier includes:

The access authorization matrix is traversed according to the target robot ID and/or the target control ID, wherein the access authorization matrix includes related information of a plurality of robot scripts, and the related information of any robot script S in the related information of the plurality of robot scripts includes the first execution executor identifier and/or first control identifier; the first executor identifier is used to indicate the executor that executes the robot script S, and the first control identifier is used to indicate the control that needs to use the first sensitive information;

If the access authorization matrix traverses to the second executor ID and/or the second control ID, send the first response message to the RPA executor; wherein, the second executor ID is the same as the target in the first executor ID of the access authorization matrix The actuator ID is the same ID, the second control ID is the same ID as the target control ID in the first control ID of the access authorization matrix, and the target sensitive information is the sensitive information that needs to be used by the control indicated by the second control ID.

In an optional embodiment, the method of the present application also includes:

If the second executor identifier and/or the second control identifier are not traversed in the access authorization matrix, a second response message is sent to the RPA executor; wherein, the second response message carries a first identifier, which is used to indicate Failed to obtain target sensitive information, or the second response message does not carry target sensitive information.

Match the RPA actuator ID and/or control ID with the actuator ID and control ID in the access authorization matrix; if matched, send sensitive information to the RPA actuator to authorize the RPA actuator or the control in the RPA actuator Use to prevent other controls or other actuators from using sensitive information without authorization.

In an optional embodiment, the method of the present application also includes:

Receive the suspected sensitive information leakage early warning events reported by the RPA actuator; record the suspected sensitive information leakage early warning events; send alarm information to the administrator to remind the administrator to modify the corresponding sensitive information.

After receiving an early warning event of suspected sensitive information leakage, in order to avoid misuse of sensitive information due to leakage, the RPA management center will remind the administrator to modify the corresponding sensitive information; recording the early warning event of suspected sensitive information leakage can facilitate the administrator's query.

What needs to be pointed out here is that the order of recording the early warning event of suspected sensitive information leakage and sending the warning information to the administrator is in no particular order. It can be executed first to record the early warning event of suspected sensitive information leakage, and then to send the warning information to the administrator; It can be executed first to send warning information to the administrator, and then to record the suspected sensitive information leakage warning event; or both can be executed at the same time.

In an optional embodiment, the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier and/or a target user identifier;

Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script.

In an optional embodiment, the method of the present application also includes:

Constructing an access authorization matrix, the access authorization matrix includes related information of a plurality of robot scripts; the related information of the robot script S also includes a first sensitive information identifier, a first robot script identifier, and/or a first user identifier;

Wherein, the first sensitive information identifier is used to indicate the first sensitive information, the first robot script identifier is used to indicate the robot script S, and the first user identifier is used to indicate the user who needs to complete the task corresponding to the robot script S.

It should be pointed out here that by further introducing some or all of the sensitive information identifier, robot script identifier and user identifier, the scope of use of sensitive information can be limited, thereby reducing the risk of sensitive information being leaked.

In the third aspect, the embodiment of the present application provides an RPA actuator, including:

The acquisition unit is used to acquire the target robot script from the RPA management center;

The transceiver unit is used to send a sensitive information acquisition request to the RPA management center when the target robot script needs to use target sensitive information, and the sensitive information acquisition request is used to request to obtain target sensitive information from the RPA management center; the sensitive information acquisition request carries the target Relevant information about the robot script, the relevant information of the target robot script includes the target executor ID and/or the target control ID; the target executor ID is used to indicate the RPA executor that executes the target robot script, and the target control ID is used to indicate the need to use target-sensitive Information control; receiving a first response message sent by the RPA management center in response to the sensitive information acquisition request, wherein the first response message carries the target sensitive information;

The processing unit is used for processing the target robot script according to the target sensitive information.

In an optional embodiment, the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier and/or a target user identifier;

Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script.

In an optional embodiment, the processing unit is specifically used for:

When the target text box is not a plain text box, input the target sensitive information into the target text box so as to continue processing the target robot script; when the target text box is a plain text box, end the execution of the target robot script.

In an optional embodiment, in terms of inputting target sensitive information into the target text box so as to continue processing the target robot script, the processing unit is specifically configured to:

Fragment the target sensitive information to obtain M sensitive information fragments, M is an integer greater than 1; input the M sensitive information fragments into the target text box in turn, after inputting the i-th sensitive information fragment in the target text box , if the sensitive information segment input into the target text box is input in cipher text, then continue to input the i+1th sensitive information segment in the target text box until all the target sensitive information is input into the target text box, so that Continue to execute the target robot script; i is an integer greater than 0 and less than M-1; if the sensitive information segment input into the target text box is entered in plain text, report the suspected sensitive information leakage warning event to the RPA management center, and end the execution of the target robot script.

In an optional embodiment, the processing unit is also used for:

Obtain the input data from the target text box in a preset manner; if no data is obtained or the obtained data is a preset character, then it is determined that the sensitive information segment input into the target text box is entered in ciphertext; if If the data is obtained or the obtained data is not a preset character, it is determined that the sensitive information segment entered into the target text box is entered in plain text; the preset method includes:

Obtain the entered sensitive information fragment from the target text box by calling the control interface, or,

Retrieve the entered piece of sensitive information from the target text box by entering a copy command for the target text box; or,

A screenshot of the target text box is obtained to obtain a screenshot of the target text box; text recognition is performed on the screenshot of the target text box to obtain input sensitive information fragments from the target text box.

In an alternative embodiment:

The transceiver unit is also used to receive the second response message sent by the RPA management center in response to the sensitive information acquisition request,

The processing unit is further configured to end the execution of the target robot script; wherein, the second response message carries a first identifier, and the first identifier is used to indicate that the acquisition of target sensitive information fails, or the second response message does not carry target sensitive information.

In a fourth aspect, the embodiment of the present application provides an RPA management center, including:

The transceiver unit is configured to receive the sensitive information acquisition request sent by the robotic process automation RPA executor. The sensitive information acquisition request is used to request the acquisition of target sensitive information. The sensitive information acquisition request carries relevant information of the target robot script, and the relevant information of the target robot script includes Target executor ID and/or target control ID; the target executor ID is used to indicate the executor that executes the target robot script, and the target control ID is used to indicate the control that needs to use target sensitive information;

An acquisition unit, configured to perform an operation of acquiring target sensitive information according to the target executor ID and/or the target control ID;

A transceiver unit, configured to send a first response message to the RPA executor if the target sensitive information is obtained according to the target executor identifier and/or the target control identifier,

Wherein, the first response message carries target sensitive information.

In an optional embodiment, the obtaining unit is specifically configured to: traverse the access authorization matrix according to the target robot ID and/or the target control ID, wherein the access authorization matrix includes information about multiple robot scripts, and the multiple robot scripts' The relevant information of any robot script S in the related information includes the first executor identifier and/or the first control identifier; the first executor identifier is used to indicate the executor executing the robot script S, and the first control identifier is used to indicate the need Controls using the first sensitive information;

The transceiver unit is configured to send a first response message to the RPA executor if the acquisition unit traverses the second executor identifier and/or the second control identifier in the access authorization matrix; wherein, the second executor identifier is the first in the access authorization matrix An identifier identical to the target actuator identifier in the first actuator identifier, the second control identifier is the same identifier as the target control identifier in the first control identifier of the access authorization matrix, and the target sensitive information is required to be used by the control indicated by the second control identifier Sensitive information.

In an optional embodiment, the transceiver unit is also used for:

If the second executor identifier and/or the second control identifier are not traversed in the access authorization matrix, send a second response message to the RPA executor;

Wherein, the second response message carries the first identifier, and the first identifier is used to indicate that the acquisition of the target sensitive information fails, or the second response message does not carry the target sensitive information.

In an optional embodiment, the transceiver unit is also used to: receive a suspected sensitive information leakage warning event reported by the RPA actuator; send an alarm message to the administrator to remind the administrator to modify the corresponding sensitive information;

The RPA Management Center also includes:

The recording unit is used to record the early warning events of suspected sensitive information leakage.

In an optional embodiment, the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier and/or a target user identifier;

Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script.

In an optional embodiment, the RPA management center also includes:

A construction unit, configured to construct an access authorization matrix, the access authorization matrix includes related information of a plurality of robot scripts; the related information of the robot script S also includes a first sensitive information identifier, a first robot script identifier and/or a first user identifier;

Wherein, the first sensitive information identifier is used to indicate the first sensitive information, the first robot script identifier is used to indicate the robot script S, and the first user identifier is used to indicate the user who needs to complete the task corresponding to the robot script S.

In the fifth aspect, the embodiment of the present application provides an electronic device, including a memory and one or more processors; wherein, one or more programs are stored in the memory; and the one or more processors execute the When the above one or more programs are used, the electronic device is made to implement part or all of the method described in the first aspect or the second aspect.

In the sixth aspect, the embodiment of the present application provides a computer storage medium, which is characterized in that it includes computer instructions, and when the computer instructions are run on the electronic device, the electronic device executes the computer storage medium described in the first aspect or the second aspect. part or all of the methods described above.

In the seventh aspect, the embodiment of the present application provides a computer program product, which is characterized in that, when the computer program product is run on a computer, the computer is made to execute part or part of the method described in the first aspect or the second aspect all.

It should be understood that any one of the above possible implementation manners can be freely combined under the premise of not violating the laws of nature, and will not be described in detail in this application.

It should be understood that descriptions of technical features, technical solutions, beneficial effects or similar language in this application do not imply that all features and advantages can be realized in any single embodiment. On the contrary, it can be understood that the description of features or beneficial effects means that specific technical features, technical solutions or beneficial effects are included in at least one embodiment. Therefore, descriptions of technical features, technical solutions or beneficial effects in this specification do not necessarily refer to the same embodiment. Furthermore, the technical features, technical solutions and beneficial effects described in this embodiment may also be combined in any appropriate manner. Those skilled in the art will understand that the embodiments can be implemented without one or more specific technical features, technical solutions or advantageous effects of the specific embodiments. In other embodiments, additional technical features and beneficial effects may also be identified in certain embodiments that do not embody all embodiments.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present application or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present application. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

Fig. 1 is a schematic diagram of the framework of an RPA system;

Fig. 2 is the frame diagram of a kind of RPA system provided by the embodiment of the present application;

FIG. 3 is a schematic flowchart of a method for executing a robot script provided by an embodiment of the present application;

FIG. 4 is a schematic flowchart of another method for executing a robot script provided by an embodiment of the present application;

FIG. 5 is a schematic diagram of a specific process of a method for executing a robot script provided by an embodiment of the present application;

Figure 6 is a schematic structural diagram of an RPA actuator provided in the embodiment of the application;

Fig. 7 is a schematic structural diagram of an RPA management center provided in the embodiment of the application;

FIG. 8 is a schematic structural diagram of another RPA actuator provided in the embodiment of the application;

FIG. 9 is a schematic structural diagram of another RPA management center provided in the embodiment of the application;

Fig. 10 is a schematic framework diagram of another RPA system provided by the embodiment of the application.

Detailed ways

Each will be described in detail below.

The terms "first", "second", "third" and "fourth" in the specification and claims of the present application and the drawings are used to distinguish different objects, rather than to describe a specific order . Furthermore, the terms "include" and "have", as well as any variations thereof, are intended to cover a non-exclusive inclusion. For example, a process, method, system, product or device comprising a series of steps or units is not limited to the listed steps or units, but optionally also includes unlisted steps or units, or optionally further includes For other steps or units inherent in these processes, methods, products or apparatuses.

Reference herein to an "embodiment" means that a particular feature, structure, or characteristic described in connection with the embodiment can be included in at least one embodiment of the present application. The occurrences of this phrase in various places in the specification are not necessarily all referring to the same embodiment, nor are separate or alternative embodiments mutually exclusive of other embodiments. It is understood explicitly and implicitly by those skilled in the art that the embodiments described herein can be combined with other embodiments.

"Multiple" means two or more. "And/or" describes the association relationship of associated objects, indicating that there may be three types of relationships, for example, A and/or B may indicate: A exists alone, A and B exist simultaneously, and B exists independently. The character "/" generally indicates that the contextual objects are an "or" relationship.

The following first introduces the relevant terms of this application

The RPA management center, as the management center of the RPA system, provides the management capabilities of RPA data such as scripts, tasks, and sensitive information, and realizes the unified management and scheduling management of RPA actuators. In the industry, the RPA management center is also called the RPA manager.

RPA robot script (RPA robot script) refers to the automation process defined by the user through recording, orchestration, etc., and the RPA robot script needs to be executed in the RPA executor.

The RPA executor, as the execution engine of the RPA robot script, is responsible for completing the execution of the automation steps defined in the RPA robot script.

The RPA designer is used to support users to record, arrange, test and publish RPA robot scripts.

RPA controls refer to the smallest action units that can be programmed and executed in the RPA designer, such as message dialog boxes, opening Excel files, reading the contents of Excel specified cells, and inputting information for specified web page controls are typical RPA controls.

Sensitive information refers to sensitive data that needs to be used during the execution of RPA robots, such as login passwords, etc. Sensitive data generally needs to meet the characteristics of encrypted storage and anonymized display when used.

UI controls refer to page elements that are visible and operable to users in a web page or application interface, such as a dialog box, a button, a text input box, a drop-down menu, etc., are typical UI controls.

Embodiments of the present application are described below in conjunction with the accompanying drawings.

Referring to FIG. 2, FIG. 2 is a schematic framework diagram of an RPA system provided by an embodiment of the present application. As shown in Figure 2, the system includes an RPA management center and multiple RPA actuators.

Among them, the RPA management center provides sensitive information configuration management functions. The RPA management center obtains sensitive information such as accounts and passwords that the robot needs to use to operate the target system. The RPA management center is configured with a range of allowed use of sensitive information; the RPA management center has the ability to configure and manage sensitive information authorization matrix, and can generate a sensitive information authorization matrix based on the obtained sensitive information; The executor allocates the capabilities of the robot script to realize the tasks corresponding to the robot script.

When the RPA executor needs to obtain sensitive information when executing robot scripts, it applies to the RPA management center for obtaining sensitive information; the RPA management center determines to return sensitive information for specific controls based on the authorization matrix to prevent unauthorized controls from using sensitive information. Input sensitive information in the UI interface, and when the RPA executor inputs sensitive information in the target system, the protection of sensitive information is realized by adding steps such as suspected password leakage inspection; when a suspected password leakage event is detected, it is reported to the RPA management center, and the system management Employees can learn about password leaks through this event. After obtaining sensitive information, the RPA executor realizes the automatic input of sensitive parameters through interactive interfaces such as the WEB page, client interface, and network interface of the target system, and continues to complete subsequent automation operations, such as completing the robot script on the target system. Tasks, such as reimbursement, etc.

Among them, the target system usually refers to the IT system used by the employees of the enterprise in their daily work, such as customer relationship management (customer relationship management, CRM) system, financial system, human resource management system, etc. The target system provides a login page or interface that carries sensitive information for input.

Referring to FIG. 3 , FIG. 3 is a schematic flowchart of a method for executing a robot script provided by an embodiment of the present application. As shown in Figure 3, the method includes:

S301. The RPA executor obtains the target robot script from the RPA management center.

There are multiple robot scripts stored in the RPA management center, which are used to realize different robot tasks; for example, automatic reimbursement robot scripts are used to realize automatic reimbursement tasks; meeting reservation robot scripts are used to realize meeting reservation tasks, etc.

Optionally, for the execution order of multiple robot scripts, an execution time may be allocated for the robot scripts, and when the execution time of the robot scripts arrives, the RPA management center may allocate an RPA executor for the robot scripts; it may be based on a message queue Execute multiple robot scripts in the same way, or manually triggered by the user.

For the execution of multiple robot scripts based on message queues, specifically, each time the RPA management center creates a robot task, it associates the robot task with the corresponding robot script, and puts the robot script into the message queue; when executing the robot script, follow the Execute in the order of "first in, first out".

When the RPA management center determines that the target robot script needs to be executed, an RPA executor is assigned to the target robot script; the RPA executor downloads the robot script from the RPA management center.

S302. The RPA executor sends a sensitive information acquisition request to the RPA management center when executing the target robot script needs to use target sensitive information, and the sensitive information acquisition request is used to request to acquire target sensitive information from the RPA management center.

Wherein, the sensitive information acquisition request carries relevant information of the target robot script, and the relevant information of the target robot script includes a target executor identifier and/or a target control identifier, and the target executor identifier is used to indicate the RPA executor executing the target robot script, That is, the target RPA executor described in the embodiment of the present application; the target control identifier is used to indicate the control that needs to use target sensitive information.

In an optional embodiment, the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier and/or a target user identifier;

Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script.

It should be pointed out here that the executor ID can be the name of the executor, the ID of the executor, or other attributes of the executor; the user ID can be the user ID or username; the robot script ID can be the name of the robot script , or the ID of the robot script, or other properties of the robot script; the control ID can be the name or ID of the control, or other properties of the control.

S303. If receiving the first response message sent by the RPA management center for responding to the sensitive information acquisition request, the RPA executor continues to execute the target robot script according to the target sensitive information.

Wherein, the first response message carries target sensitive information.

In an optional embodiment, after obtaining the target sensitive information, according to the definition of the target RPA robot script, connect to the network interface of the target system through the network protocol and the target sensitive information, and continue to execute the target robot script after the connection is successful, In order to realize the automatic operation of the target system.

In an optional embodiment, the target control is a target text box, and the target robot script is processed according to target sensitive information, including:

Determine whether the target text box is a plain text box; when the target text box is not a plain text box, input the target sensitive information into the target text box to continue processing the target robot script; when the target text box is a plain text box, end the target robot script execution.

Specifically, before the target sensitive information is input into the target text box, the target text box is detected to determine whether the target text box is a plain text box; the specific detection method is different depending on the system that the task performed by the target robot script depends on; it can be passed Call the relevant API of the system to detect and judge; for example, the WEB login interface control can be determined by whether the type attribute of the target text box is password; if the type attribute of the target text box is password, then determine whether the target text box is a plain text box; If the type attribute of the target text box is text, it is determined that the target text box is a plain text box; when it is determined that the target text box is not a plain text box, the RPA executor will input the target sensitive information into the target text box to continue processing the target robot script; If the target text box is determined to be a plain text box, then the target sensitive information is not input into the target text box to prevent the target sensitive information from being leaked, and at the same time, the execution of the target robot script is terminated and returned. Optionally, in order to prevent the target sensitive information from being leaked, the RPA executor deletes the target sensitive information.

In an optional embodiment, entering target sensitive information into the target text box in order to continue processing the target robot script includes:

Fragmenting the target sensitive information to obtain M sensitive information fragments, M is an integer greater than 1; input M sensitive information fragments into the target text box; after inputting the i-th sensitive information fragment in the target text box, Determine whether the sensitive information segment input into the target text box is input in ciphertext, where i is an integer greater than 0 and less than M-1; if the sensitive information segment input into the target text box is in ciphertext input, then continue to input the i+1th sensitive information segment in the target text box until all the target sensitive information is input in the target text box, so as to continue to execute the target robot script;

If the sensitive information segment input into the target text box is entered in plain text, report the suspected sensitive information leakage warning event to the RPA management center, and end the execution of the target robot script.

In an optional embodiment, judging whether the sensitive information segment input into the target text box is input in ciphertext includes:

Obtain the input data from the target text box in a preset manner; if no data is obtained or the obtained data is a preset character, then it is determined that the sensitive information segment input into the target text box is entered in ciphertext; if If the data is obtained or the obtained data is not a preset character, it is determined that the sensitive information segment entered into the target text box is entered in plain text;

Among them, the preset methods include:

Obtain the entered sensitive information fragment from the target text box by calling the control interface, or,

Retrieve the entered piece of sensitive information from the target text box by entering a copy command for the target text box; or,

By taking a screenshot of the target text box, the screenshot of the target text box is obtained for text recognition, so as to obtain the input sensitive information fragment from the target text box.

Specifically, before the target sensitive information is input into the target text box, the RPA executor fragments the target sensitive information to obtain M pieces of sensitive information, where M is an integer greater than 1; the target sensitive information can be randomly fragmented , that is to say, the lengths of the characters in the M sensitive information fragments can be different, partly or all the same; or the target sensitive information can be fragmented according to the preset character length, that is to say, the M sensitive information fragments The character length of each sensitive information segment in is preset; the RPA executor invokes the browser interface or keyboard interface to input M sensitive information segments into the target text box in turn; after inputting the i-th sensitive information segment into the target text After the box, determine whether the sensitive information segment is entered into the target text box in ciphertext; specifically, the sensitive information segment entered in the target text box can be obtained in any of the following three ways:

Method 1: Obtain by calling the control interface. For example, for the text box in the browser based on WEB, you can call the corresponding XPath control based on the XPath ID to obtain the content of the text box. For the text box in the browser based on JAVA, You can also call the corresponding control to get the content of the text box;

Method 2: Obtain the entered sensitive information fragment from the target text box by inputting copy commands for the target text box, such as Ctrl+A and Ctrl+C commands;

Method 3: First locate the target text box through the mouse control, then take a screenshot of the target text box, and then perform text recognition on the screenshot, such as calling OCR, to obtain the input sensitive information fragment from the target text box;

Optionally, if the input sensitive information segment can be obtained from the target text box, it is determined that the sensitive information segment input into the target text box is entered in plain text; if the target text box cannot be obtained from the target text box If the input sensitive information fragment is obtained in the target text box, it is determined that the sensitive information fragment input into the target text box is input in ciphertext.

Optionally, if the input sensitive information segment can be obtained from the target text box, then further judge whether the acquired data is a preset character; if it is determined that the acquired data is a preset character, then determine the Sensitive information fragments are entered in ciphertext; if the acquired data is not a preset character, then make sure that the sensitive information fragments entered into the target text box are entered in clear text; if the target text box cannot be obtained from the target text If the input sensitive information fragment is obtained in the target text box, it is determined that the sensitive information fragment input into the target text box is input in cipher text.

If it is determined that the sensitive information segment input into the target text box is entered in ciphertext, then continue to input the i+1th sensitive information segment in the target text box until the target sensitive information is completely input into the target text box ; After the target sensitive information is completely input into the target text box, continue to execute the target robot script in order to complete the task corresponding to the target robot script; The target sensitive information may be leaked, so the suspected sensitive information leakage warning event is reported to the RPA management center, and the execution of the target robot script is terminated; optionally, the RPA executor deletes the target sensitive information.

In an example, the preset character may be "*" or "●" or other characters, which are not limited herein.

In an optional embodiment, the execution timing of obtaining the input sensitive information fragments from the target text box may be executed once after each sensitive information fragment is input in the target text box, or it may be executed after the target text box It is executed after each multiple sensitive information fragments are input, and there is no limitation here.

After the target sensitive information is completely input into the target text box, the RPA executor continues to execute the target robot script to complete the task corresponding to the target robot script. For example, the automatic reimbursement robot script, after inputting the user's password into the password text box, the RPA executor continues to execute the automatic reimbursement robot script, so as to click the login button, create a reimbursement form, submit the reimbursement form, and complete the reimbursement task.

In an optional embodiment, before inputting the target sensitive information into the target text box; the RPA executor inputs a randomly generated character string into the target text box, wherein the character string may include numbers, letters, special characters Part or all of the string can be randomly generated by the RPA management center and sent to the RPA executor together with the target sensitive information, or randomly generated by the RPA executor; then the RPA executor follows the above method 1 and method 2 and method 3 to obtain the content in the target text box; in one example, if the RPA executor can obtain data from the target text box, then the RPA executor determines that the input of target sensitive information into the target text box exists The risk of being leaked; if the RPA executor fails to obtain data from the target text box, the RPA executor determines that there is no risk of non-disclosure when inputting the target sensitive information into the target text box; After the data is acquired in the text box, it is judged whether the acquired data is a preset character; if the acquired data is not a preset character, the RPA executor determines that there is a risk of leaking the target sensitive information into the target text box; if the acquired If the data is a preset character, the RPA executor determines that there is no risk of leakage of the target sensitive information input into the target text box;

When it is determined that there is no risk of leaking the target sensitive information into the target text box, the RPA executor inputs the target sensitive information into the target text box; When there is a risk of being leaked, in order to avoid the leakage of target sensitive information, the RPA executor deletes the target sensitive information and ends the execution of the target robot script.

S304. If the second response message for responding to the sensitive information acquisition request is received, the RPA executor ends the execution of the target robot script.

Wherein, the second response message carries the first identifier, and the first identifier is used to indicate that the acquisition of the target sensitive information fails, or the second response message does not carry the target sensitive information. The second response message does not carry target sensitive information, which means that the RPA management center returns a null value to the RPA executor for the RPA executor's sensitive information acquisition request.

It can be seen that in the scheme of this application, when the RPA actuator obtains sensitive information from the RPA management center, it needs to report at least the RPA actuator identifier and/or control identifier to the RPA management center, and the RPA management center verifies the reported information; Send sensitive information to the RPA executor after the verification is passed, so that the sensitive information can only be used by the verified RPA executor or control, thereby limiting the scope of use of sensitive information and reducing the risk of sensitive information being leaked, for example, a certain Sensitive information settings can only be used in the "input in web page" control. Based on this strategy, sensitive information can only be used in the input box of the web page, and cannot be used in API interface calls, log printing, message windows and other controls; another example A sensitive information setting can only be used in the "reimbursement automation robot script". Based on this policy, sensitive information can only be used in the "reimbursement automation robot script", and cannot be used in other robot scripts such as "working hour automation declaration robot script" ; Another example is that a certain sensitive information setting can only be used by Zhang San. Based on this policy, sensitive information can only be used on the executors that are accessed based on Zhang San’s account, and cannot be used on executors that are accessed using other accounts. For another example, a certain sensitive information setting can only be used by executor A. Based on this policy, sensitive information can only be used on executor A, and cannot be used on other executors such as executor B; it can also be the above Combination of strategies, so as to finely control the scope of use of sensitive information, and then effectively protect sensitive information, prevent the leakage and unauthorized use of sensitive information; before inputting sensitive information into the target text box, determine whether the target text box is a plain text box , the sensitive information is input into the target text box only when it is determined that the target text box is not a clear text box, which further reduces the risk of sensitive information being leaked; after determining that the sensitive information is input into the target text box, the sensitive information is classified slices, and then input the sensitive information fragments into the target text box in turn, and then obtain the input data from the target text box to judge whether the sensitive information fragments input into the target text box are input in cipher text; When inputting in plain text, the input of other sensitive information fragments is stopped, further reducing the risk of sensitive information being leaked.

Referring to FIG. 4 , FIG. 4 is a schematic flowchart of another method for executing a robot script provided by an embodiment of the present application. As shown in Figure 4, the method includes:

S401. Receive a sensitive information acquisition request sent by an RPA executor, the sensitive information acquisition request carries information about a target robot script, and the sensitive information acquisition request is used to request acquisition of target sensitive information.

Wherein, the relevant information of the target robot script includes the target RPA executor identification and/or the target control identification; wherein, the target RPA executor identifies the executor used to execute the target robot script, and the target control is used to indicate the control that needs to use the target sensitive information .

It should be noted here that the RPA management center stores multiple robot scripts for realizing different robot tasks; for example, automatic reimbursement robot scripts are used for automatic reimbursement tasks; meeting reservation robot scripts are used for meeting reservation tasks, etc.

Optionally, for the execution order of multiple robot scripts, an execution time may be allocated for the robot scripts, and when the execution time of the robot scripts arrives, the RPA management center may allocate an RPA executor for the robot scripts; it may be based on a message queue Execute multiple robot scripts in the same way, or manually triggered by the user.

For the execution of multiple robot scripts based on message queues, specifically, each time the RPA management center creates a robot task, it associates the robot task with the corresponding robot script, and puts the robot script into the message queue; when executing the robot script, follow the Execute in the order of "first in, first out".

When the RPA management center determines that the target robot script needs to be executed, it allocates an RPA executor for the target robot script, that is, the target RPA executor, and sends the target robot script to the target RPA executor.

In a feasible embodiment, the method of the present application also includes:

The RPA management center constructs an access authorization matrix, wherein the access authorization matrix includes relevant information of a plurality of robot scripts, and the relevant information of each robot script includes a first executor identifier and/or a first control identifier, and the first executor identifier uses For instructing the executor to execute the robot script, the first control identifier is used to indicate a control that needs to use sensitive information.

In one example, the access authorization matrix is shown in Table 1 below:

Sensitive parameter identification Actuator ID Zhangshan_password Actuator_1 Lisi_password Actuator_2 Wangwu_password Actuator_1

Table 1

Optionally, the relevant information of each robot script further includes a first sensitive information identifier, a first robot script identifier, and/or a first user identifier;

Wherein, the first sensitive information identifier is used to indicate the first sensitive information, the first robot script identifier is used to indicate the robot script S, and the first user identifier is used to indicate the user who needs to complete the task corresponding to the robot script S.

It should be pointed out here that the relevant information of the robot script is not limited to the information described above, and of course may also include other information, which is not limited here.

In another example, the access authorization matrix is shown in Table 2 below:

Table 2

In Table 2 above, Public_password is used to indicate the public password, and the daily operation report sending notification robot script can use the public password during execution, and the controls involved in executing the daily operation report sending notification robot script are not limited.

S402. Send a first response message to the RPA executor according to the target RPA executor identifier and/or the target control identifier; wherein, the first response message carries target sensitive information.

In a feasible embodiment, the first response message is sent to the RPA executor according to the target executor identifier and/or the target control identifier, including:

The access authorization matrix is traversed according to the target robot ID and/or the target control ID, wherein the access authorization matrix includes related information of a plurality of robot scripts, and the related information of any robot script S in the related information of the plurality of robot scripts includes the first The executor identifier and/or the first control identifier; the first executor identifier is used to indicate the executor executing the robot script S, and the first control identifier is used to indicate the control that needs to use the first sensitive information;

If the access authorization matrix traverses to the second executor ID and/or the second control ID, send the first response message to the RPA executor; wherein, the second executor ID is the same as the target in the first executor ID of the access authorization matrix The same identifier as the actuator identifier, the second control identifier is the same identifier as the target control identifier in the first control identifier of the access authorization matrix, and the target sensitive information is the sensitive information that needs to be used by the control indicated by the second control identifier;

If the second executor identifier and/or the second control identifier are not traversed in the access authorization matrix, a second response message is sent to the RPA executor; wherein, the second response message carries a first identifier, and the first identifier is used for Indicates that the acquisition of target sensitive information fails, or the second response message does not carry target sensitive information.

Specifically, the RPA management center traverses the relevant information of multiple machine scripts in the access authorization matrix according to the relevant information of the target robot script; , determine that the RPA executor executing the target robot script has the authority to obtain target sensitive information, and send the first response message carrying the target sensitive information to the RPA executor; when the access authorization matrix does not traverse to the same information as the target robot script When determining the relevant information of the robot script, it is determined that the RPA executor executing the target robot script does not have the authority to obtain the sensitive information of the target, and sends the above-mentioned second response message to the RPA executor.

In one example, the relevant information of any robot script S in the access authorization matrix includes the first executor identifier and/or the name of the first control, the first executor identifier is used to indicate the executor executing the robot script S, and the first control Identify the control used to indicate that the first sensitive information needs to be used; the first sensitive information is the sensitive information required when executing the robot script S; determine whether the relevant information of the robot script that is the same as the relevant information of the target robot script is traversed in the access authorization matrix , specifically includes: judging whether to traverse to the second executor ID and/or the second control ID in the access authorization matrix, wherein the second executor ID is the same as the target executor in the first executor ID in the access authorization matrix The identity of the same identity, or the identity of the executor indicated in the access authorization matrix is the same as the executor indicated by the identity of the target executor; identify the same ID, or the control ID indicated by the control indicated in the access authorization matrix is the same as the control indicated by the target control ID; if the access authorization matrix traverses to the second actuator ID and/or the second control ID, it is determined in The access authorization matrix traverses to the relevant information of the robot script that is the same as the relevant information of the target robot script; if the second executor identification and/or the second control identification are not traversed in the access authorization matrix, it is determined that the access authorization matrix does not traverse to Information about the same bot script as that of the target bot script.

In another example, the relevant information of the target robot further includes part or all of the target sensitive information identifier, the target robot script identifier and the target user identifier; the relevant information of any robot script S in the access authorization matrix includes the first sensitive information identifier 1. Part or all of the first robot script identifier and the first user identifier; judging whether the relevant information of the robot script that is the same as the relevant information of the target robot script has been traversed in the access authorization matrix, specifically including: judging whether in the access authorization matrix Simultaneously traverse the identifiers identified in the relevant information of the target robot script; if the same identifiers identified in the relevant information of the target robot script are traversed in the access authorization matrix at the same time, then it is determined that the access authorization matrix traverses to the relevant identifier of the target robot script. Relevant information of robot scripts with the same information; if the identifiers identified in the relevant information of the target robot script are not traversed at the same time in the access authorization matrix, or the identifiers partially identical to those of the target robot script are traversed in the access authorization matrix identification, it is determined that the relevant information of the robot script that is the same as the relevant information of the target robot script has not been traversed in the access authorization matrix.

For example, the relevant information of the target robot includes the target sensitive information identification, the target actuator identification and the target control identification, and the relevant information of the robot script S includes the first sensitive information identification, the first actuator identification and the target control identification; the judgment is in the access authorization matrix Whether to traverse at the same time the identifiers identified in the relevant information of the target robot script specifically refers to: judging whether the second sensitive information identifier, the second executor identifier, and the second control identifier are traversed in the access authorization matrix, wherein the second sensitive The information identifier is the same identifier as the target sensitive information identifier among the first sensitive information identifiers in the access authorization matrix, or the sensitive information identifier whose sensitive information indicated in the access authorization matrix is the same as the sensitive information indicated by the target sensitive information identifier; If the second sensitive information identifier, the second executor identifier and the second control identifier are simultaneously traversed in the access authorization matrix, then it is determined that the identifier identical to that identified in the relevant information of the target robot script is traversed in the access authorization matrix at the same time; The second sensitive information ID, the second executor ID, and the second control ID are not traversed in the authorization matrix at the same time, or the second sensitive information ID, the second executor ID, and the second control ID are traversed in the access authorization matrix part, then it is determined that the identifier identical to that identified in the relevant information of the target robot script is not traversed in the access authorization matrix at the same time.

By judging whether the control has permission to use sensitive information in the above way, the following situations can be avoided:

For a certain control, after the RPA controller obtains the sensitive information corresponding to the control, the sensitive information exists in the RPA controller as the context of the system for a long time, and the controls called by RPA can use the sensitive information in the context, so that the user can By using log printing, message boxes, or custom controls to print or use sensitive information, resulting in the disclosure of sensitive information.

In an optional embodiment, the method of the present application also includes:

Receive the suspected sensitive information leakage early warning event reported by the RPA executor; record the suspected sensitive information leakage early warning event; send an alarm message to the administrator to remind the administrator to modify the target sensitive information.

Specifically, after receiving the suspected sensitive information leakage early warning event reported by the RPA executor, record the suspected sensitive information leakage early warning event; wherein, the suspected sensitive information leakage event includes the target sensitive information identification; send an alarm message to the administrator, the alarm information Carry the identification of target sensitive information to remind administrators to modify target sensitive information.

Optionally, the alarm information may be SMS, email, or instant messaging application information, such as QQ, WeChat, Changlian, and the like. Use the above method to notify the administrator to improve the real-time performance of sensitive information leakage notification.

It can be seen that in the embodiment of the present application, when the RPA actuator obtains sensitive information from the RPA management center, it needs to report at least the RPA actuator identifier and/or control identifier to the RPA management center, and the RPA management center verifies the reported information ;Send sensitive information to the RPA actuator after the verification is passed, so that the sensitive information can only be used by the verified RPA actuator or control, thereby limiting the scope of use of sensitive information and reducing the risk of sensitive information being leaked; After the sensitive information leakage warning event, an alarm message is sent to the administrator to remind the administrator to modify the target sensitive information, so as to ensure that the machine hot script is used reasonably.

In a specific example, as shown in Figure 5, taking the user's need for reimbursement as an example; the RPA management center creates a reimbursement application task based on the user's needs, and obtains the task parameters of the reimbursement application task; the task parameters include the username (username:user001) and reimbursement information, and associate the reimbursement application task with the automatic reimbursement robot script. Prior to this, the RPA management center obtains and saves the user's username user0001 and the login password 01234567 in the reimbursement system, and sets access rights, that is, in the RPA management center The relevant information of the automatic reimbursement machine script is generated in the access authorization matrix, which includes sensitive information identification (user001_password), executor identification (executor_1), robot script identification (automatic reimbursement robot script) and control identification (in the web page Enter text); when the RPA management center receives the reimbursement application task, it assigns an executor_1 to execute the automatic reimbursement robot script; the executor_1 obtains the automatic reimbursement robot script and task parameters from the RPA management center; the executor_1 Report the relevant information of the automatic reimbursement robot script, including: user001_password, executor_1, automatic reimbursement robot script and text input in the webpage; the RPA management center traverses the access authorization matrix based on the reported information about the automatic reimbursement robot script, because the access authorization The matrix includes information about the automatic reimbursement robot script, which identifies that executor_1 has permission to obtain user001_password, and the RPA management center sends the login password "01234567" to executor_1; executor_1 executes the automatic reimbursement robot script: accesses the automatic reimbursement system Uniform resource locator (uniform resource locator, URL), open the reimbursement system interface; executor_1 locates the user name text box through the mouse control, and input user001 into the user name text box; executor_1 locates the password through the mouse control Text box; detect whether the password text box is a plaintext box, and the specific detection method can refer to the relevant description of the embodiment shown in Figure 3, which is not described here; if it is determined that the password text box is not a plaintext box, then log in password "01234567" Fragmentation to get the password segments "012", "34" and "567"; first input the password segment "012" into the password text box; then determine whether the password segment "012" is entered in ciphertext; the specific judgment process Can refer to the related description of the embodiment shown in Fig. 3, do not narrate here; If it is determined that the password segment "012" is input in a cipher text mode, then continue to input the password segment "34"; input in cipher text; if it is determined that the password segment "01234" is input in cipher text, continue to input the password segment "567"; determine whether the password segment "01234567" is input in cipher text, if it is determined that the password segment " 01234567" is If it is input in cipher text, the executor_1 will log in by clicking the login button with the mouse control to enter the creation reimbursement application interface, and automatically fill in the reimbursement information in the creation reimbursement application interface. After completion, click the submit button with the mouse control to complete the automatic reimbursement application submission of

In the above process, if it is determined that the password fragment is entered in plain text, or the data is obtained from the password text box, it is determined that the password has a risk of leakage; executor_1 ends the execution of the automatic reimbursement robot script and reports to the RPA management center The suspected sensitive information leakage early warning event, optionally, the event includes user001_password; the RPA management center records the suspected sensitive information leakage early warning event, and sends an alarm message to the administrator, so that the administrator can modify the password of user user001.

Optionally, the RPA management center regularly checks suspected sensitive information leakage early warning events to determine whether the corresponding sensitive information needs to be modified.

Referring to FIG. 6, FIG. 6 is a schematic structural diagram of an RPA actuator provided in an embodiment of the present application. As shown in Figure 6, the RPA actuator 600 includes:

Obtaining unit 601, used to obtain the target robot script from the RPA management center;

The transceiver unit 602 is used to send a sensitive information acquisition request to the RPA management center when the target robot script needs to use target sensitive information, and the sensitive information acquisition request is used to request to obtain target sensitive information from the RPA management center; the sensitive information acquisition request carries Relevant information of the target robot script, the relevant information of the target robot script includes the target executor ID and/or target control ID; the target executor ID is used to indicate the RPA executor that executes the target robot script, and the target control ID is used to indicate the need to use the target Sensitive information control; receiving a first response message sent by the RPA management center in response to the sensitive information acquisition request, wherein the first response message carries the target sensitive information

The processing unit 603 is configured to process the target robot script according to the target sensitive information.

In an optional embodiment, the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier, and/or a target user identifier;

Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script.

In an optional embodiment, the processing unit 603 is specifically configured to:

When the target text box is not a plain text box, input the target sensitive information into the target text box so as to continue processing the target robot script; when the target text box is a plain text box, end the execution of the target robot script.

In an optional embodiment, in terms of inputting target sensitive information into the target text box so as to continue processing the target robot script, the processing unit 603 is specifically configured to:

Fragment the target sensitive information to obtain M sensitive information fragments, M is an integer greater than 1; input the M sensitive information fragments into the target text box in turn, after inputting the i-th sensitive information fragment in the target text box , if the sensitive information segment input into the target text box is input in cipher text, then continue to input the i+1th sensitive information segment in the target text box until all the target sensitive information is input into the target text box, so that Continue to execute the target robot script; i is an integer greater than 0 and less than M-1; if the sensitive information segment input into the target text box is entered in plain text, report the suspected sensitive information leakage warning event to the RPA management center, and end the execution of the target robot script.

In an optional embodiment, the processing unit 603 is also configured to:

Obtain the input data from the target text box in a preset manner; if no data is obtained or the obtained data is a preset character, then it is determined that the sensitive information segment input into the target text box is entered in ciphertext; if If the data is obtained or the obtained data is not a preset character, it is determined that the sensitive information segment entered into the target text box is entered in plain text; the preset method includes:

Obtain the entered sensitive information fragment from the target text box by calling the control interface, or,

Retrieve the entered piece of sensitive information from the target text box by entering a copy command for the target text box; or,

A screenshot of the target text box is obtained to obtain a screenshot of the target text box; text recognition is performed on the screenshot of the target text box to obtain input sensitive information fragments from the target text box.

In an optional embodiment, the transceiver unit 602 is further configured to receive the second response message sent by the RPA management center in response to the sensitive information acquisition request,

The processing unit 603 is further configured to end the execution of the target robot script; wherein, the second response message carries a first identifier, and the first identifier is used to indicate that the acquisition of target sensitive information fails, or the second response message does not carry target sensitive information.

It should be noted that, the above-mentioned units (acquisition unit 601, transceiver unit 602, and processing unit 603) are used to execute relevant steps of the above-mentioned method.

In this embodiment, the RPA actuator 600 is presented in the form of a unit. The "unit" here may refer to an application-specific integrated circuit (ASIC), a processor and memory executing one or more software or firmware programs, an integrated logic circuit, and/or other devices that can provide the above functions . In addition, the acquisition unit 601 and the processing unit 603 above can be implemented by the processor 801 of the RPA executor shown in FIG. 8 .

Referring to FIG. 7, FIG. 7 is a schematic structural diagram of an RPA management center provided in an embodiment of the present application. As shown in Figure 7, the RPA management center 700 includes:

The transceiver unit 701 is configured to receive the sensitive information acquisition request sent by the robotic process automation RPA executor, the sensitive information acquisition request is used to request the acquisition of target sensitive information, the sensitive information acquisition request carries the relevant information of the target robot script, and the relevant information of the target robot script Including target executor identification and/or target control identification; the target executor identification is used to indicate the executor that executes the target robot script, and the target control identification is used to indicate the control that needs to use target sensitive information;

An acquisition unit 702, configured to perform an operation of acquiring target sensitive information according to the target executor ID and/or the target control ID;

The transceiver unit 701 is configured to send a first response message to the RPA executor if the target sensitive information is obtained according to the target executor identifier and/or the target control identifier,

Wherein, the first response message carries target sensitive information.

In an optional embodiment, the acquiring unit 702 is specifically configured to: traverse the access authorization matrix according to the target robot ID and/or the target control ID, where the access authorization matrix includes information about multiple robot scripts, and the multiple robot scripts The relevant information of any robot script S in the relevant information includes the first executor identifier and/or the first control identifier; the first executor identifier is used to indicate the executor that executes the robot script S, and the first control identifier is used to indicate Controls that need to use the first sensitive information;

The transceiver unit 701 is configured to send a first response message to the RPA executor if the acquisition unit 702 traverses to the second executor identifier and/or the second control identifier in the access authorization matrix; wherein, the second executor identifier is the access authorization matrix The first executor ID of the access authorization matrix is the same as the target executor ID, the second control ID is the same as the target control ID in the first control ID of the access authorization matrix, and the target sensitive information is required by the control indicated by the second control ID Sensitive information used.

In an optional embodiment, the transceiver unit 701 is also used for:

If the second executor ID and/or the second control ID are not traversed in the access authorization matrix, send a second response message to the RPA executor;

Wherein, the second response message carries the first identifier, and the first identifier is used to indicate that the acquisition of the target sensitive information fails, or the second response message does not carry the target sensitive information.

In an optional embodiment, the transceiver unit 701 is also configured to: receive a suspected sensitive information leakage warning event reported by the RPA executor; send an alarm message to the administrator to remind the administrator to modify the corresponding sensitive information;

The RPA management center 700 also includes:

The recording unit 703 is configured to record the suspected sensitive information leakage early warning event.

In an optional embodiment, the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier, and/or a target user identifier;

Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script.

In an optional embodiment, the RPA management center also includes:

The construction unit 704 is configured to construct an access authorization matrix, where the access authorization matrix includes relevant information of multiple robot scripts; the relevant information of the robot script S also includes the first sensitive information identifier, the first robot script identifier, and/or the first user logo;

Wherein, the first sensitive information identifier is used to indicate the first sensitive information, the first robot script identifier is used to indicate the robot script S, and the first user identifier is used to indicate the user who needs to complete the task corresponding to the robot script S.

It should be noted that each of the above units (the transceiver unit 701, the acquisition unit 702, the recording unit 703 and the construction unit 704) is used to execute the relevant steps of the above method.

In this embodiment, the RPA management center 700 is presented in the form of a unit. The "unit" here may refer to an application-specific integrated circuit (ASIC), a processor and memory executing one or more software or firmware programs, an integrated logic circuit, and/or other devices that can provide the above functions . In addition, the above acquisition unit 702, recording unit 703 and construction unit 704 can be realized by the processor 901 of the RPA management center shown in FIG. 9 .

As shown in FIG. 8 , the RPA executor 800 may be implemented with the structure in FIG. 8 , and the RPA executor 800 includes at least one processor 801 , at least one memory 802 and at least one communication interface 803 . The processor 801 , the memory 802 and the communication interface 803 are connected through the communication bus and complete mutual communication.

The processor 801 may be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of programs in the above solutions.

The communication interface 803 is used for communicating with other devices or communication networks, such as Ethernet, radio access network (RAN), wireless local area network (Wireless Local Area Networks, WLAN), etc.

Memory 802 may be read-only memory (read-only memory, ROM) or other types of static storage devices that can store static information and instructions, random access memory (random access memory, RAM) or other types that can store information and instructions It can also be an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), a read-only disc (Compact Disc Read-Only Memory, CD-ROM) or other optical disc storage, optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or can be used to carry or store desired program code in the form of instructions or data structures and can be programmed by a computer Any other medium accessed, but not limited to. The memory can exist independently and be connected to the processor through the bus. Memory can also be integrated with the processor.

Wherein, the memory 802 is used to store application program codes for executing the above solutions, and the execution is controlled by the processor 801 . The processor 801 is configured to execute application program codes stored in the memory 802 .

The code stored in the memory 802 can perform the execution method of any robot script provided above, such as: obtain the target robot script from the RPA management center; when executing the target robot script needs to use target sensitive information, send sensitive information to the RPA management center Request, the sensitive information acquisition request is used to request to obtain the target sensitive information from the RPA management center; the sensitive information acquisition request carries the relevant information of the target robot script, and the relevant information of the target robot script includes the target executor ID and/or the target control ID ; The target executor identifier is used to indicate the RPA executor that executes the target robot script, and the target control identifier is used to indicate the control that needs to use the sensitive information of the target; if the first response sent by the RPA management center to respond to the sensitive information acquisition request is received message, processing the target robot script according to the target sensitive information, wherein the first response message carries the target sensitive information.

As shown in FIG. 9 , the RPA management center 900 can be implemented with the structure in FIG. 9 , and the RPA management center 900 includes at least one processor 901 , at least one memory 902 and at least one communication interface 903 . The processor 901 , the memory 902 and the communication interface 903 are connected through the communication bus and complete mutual communication.

The processor 901 may be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits for controlling the execution of programs in the above solutions.

The communication interface 903 is used to communicate with other devices or communication networks, such as Ethernet, Radio Access Network (RAN), Wireless Local Area Networks (Wireless Local Area Networks, WLAN), etc.

Memory 902 may be read-only memory (read-only memory, ROM) or other types of static storage devices that can store static information and instructions, random access memory (random access memory, RAM) or other types that can store information and instructions It can also be an electrically erasable programmable read-only memory (Electrically Erasable Programmable Read-Only Memory, EEPROM), a compact disc (Compact Disc Read-Only Memory, CD-ROM) or other optical disc storage, optical disc storage (including compact discs, laser discs, optical discs, digital versatile discs, Blu-ray discs, etc.), magnetic disk storage media or other magnetic storage devices, or can be used to carry or store desired program code in the form of instructions or data structures and can be programmed by a computer Any other medium accessed, but not limited to. The memory can exist independently and be connected to the processor through the bus. Memory can also be integrated with the processor.

Wherein, the memory 902 is used to store application program codes for executing the above solutions, and the execution is controlled by the processor 901 . The processor 901 is configured to execute application program codes stored in the memory 902 .

The code stored in the memory 902 can execute any one of the robot script execution methods provided above, such as:

Receive the sensitive information acquisition request sent by the RPA executor, the sensitive information acquisition request is used to request the acquisition of target sensitive information, the sensitive information acquisition request carries the relevant information of the target robot script, and the relevant information of the target robot script includes the target executor ID and /or target control identification; the target executor identification is used to indicate the executor that executes the target robot script, and the target control identification is used to indicate the control that needs to use target sensitive information; according to the target executor identification and/or target control identification to the RPA executor Sending a first response message, where the first response message carries target sensitive information.

Referring to FIG. 10 , FIG. 10 is a schematic structural diagram of a system provided by an embodiment of the present application. As shown in Figure 10, the system includes an RPA management center and an RPA actuator,

Among them, the RPA management center includes a task management module, a sensitive information management module, a sensitive information authorization module and a sensitive information leakage warning information management module;

The task management module is used to create robot tasks and associate corresponding robot scripts; and determine the execution sequence of robot tasks; when the robot tasks need to be executed, assign RPA executors to the robot scripts in the robot tasks and execute them to the RPA The controller sends the robot script and task parameters;

The sensitive information management module is used to build the access authorization matrix, and provides the function of adding, deleting, checking and modifying the information in the access authorization matrix, so that users can manage all sensitive information involved in the use of RPA in a unified manner;

The sensitive information authorization module provides the configuration management capability and authorization interface of the access authorization matrix, and supports users to manage the scope of use of sensitive information through one or more of executors, robot scripts, user roles, and control names.

The sensitive information leakage early warning information management module provides the management function and writing interface of sensitive information leakage early warning information, and supports users to query and view sensitive information leakage early warning events.

The RPA executor includes a script execution engine, a sensitive information input module and a sensitive information leakage detection module,

Script execution engine for executing robot scripts based on task parameters;

The sensitive information input module is used to interact with the sensitive information authorization module of the RPA management center to obtain sensitive information when the control involves sensitive information operations. Sensitive information is correctly entered into the sensitive information input box, such as the password input box, by means of type detection and sensitive information segmentation input.

The sensitive information leakage detection module is used for inputting sensitive information on the UI interface, such as the login interface of the target system shown in Figure 10, by detecting whether there is clear text sensitive information in the target input box on the UI interface after the sensitive information is input , and based on this, identify whether sensitive information has been input into the non-sensitive information input box, and report the suspected sensitive information leakage event to the sensitive information leakage warning information management module of the RPA management center when it is found that sensitive information has been input into the non-sensitive information input box.

It should be pointed out here that, for the functions realized by the modules in the above-mentioned RPA management center, please refer to the relevant description of the embodiment shown in FIG. The related description of the embodiment shown in FIG. 3 is omitted here.

The embodiment of the present application also provides a computer storage medium, wherein the computer storage medium can store a program, and when the program is executed, it includes some or all steps of any method for executing a robot script described in the above method embodiments.

It should be noted that for the foregoing method embodiments, for the sake of simple description, they are expressed as a series of action combinations, but those skilled in the art should know that the present application is not limited by the described action sequence. Depending on the application, certain steps may be performed in other orders or simultaneously. Secondly, those skilled in the art should also know that the embodiments described in the specification belong to preferred embodiments, and the actions and modules involved are not necessarily required by this application.

In the foregoing embodiments, the descriptions of each embodiment have their own emphases, and for parts not described in detail in a certain embodiment, reference may be made to relevant descriptions of other embodiments.

In the several embodiments provided in this application, it should be understood that the disclosed device can be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or can be Integrate into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit. The above-mentioned integrated units can be implemented in the form of hardware or in the form of software functional units.

If the integrated unit is realized in the form of a software function unit and sold or used as an independent product, it can be stored in a computer-readable memory. Based on this understanding, the technical solution of the present application is essentially or part of the contribution to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a memory. Several instructions are included to make a computer device (which may be a personal computer, server or network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned memory includes: various media that can store program codes such as U disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), mobile hard disk, magnetic disk or optical disk.

Those of ordinary skill in the art can understand that all or part of the steps in the various methods of the above-mentioned embodiments can be completed by instructing related hardware through a program, and the program can be stored in a computer-readable memory, and the memory can include: a flash disk , Read-only memory (English: Read-Only Memory, referred to as: ROM), random access device (English: Random Access Memory, referred to as: RAM), magnetic disk or optical disc, etc.

The embodiments of the present application have been introduced in detail above, and specific examples have been used in this paper to illustrate the principles and implementation methods of the present application. The descriptions of the above embodiments are only used to help understand the methods and core ideas of the present application; meanwhile, for Those skilled in the art will have changes in the specific implementation and scope of application based on the ideas of the present application. In summary, the contents of this specification should not be construed as limiting the present application.

Claims (27)

A method for executing a robot script, characterized in that it comprises: Obtain the target robot script from the Robotic Process Automation RPA Management Center; When executing the target robot script needs to use target sensitive information, send a sensitive information acquisition request to the RPA management center, and the sensitive information acquisition request is used to request to obtain target sensitive information from the RPA management center; the sensitive The information acquisition request carries relevant information of the target robot script, and the relevant information of the target robot script includes a target executor identifier and/or a target control identifier; the target executor identifier is used to indicate the RPA executing the target robot script An executor, the target control identifier is used to indicate the control that needs to use the target sensitive information; receiving a first response message sent by the RPA management center in response to the sensitive information acquisition request, where the first response message carries the target sensitive information; Processing the target robot script based on the target sensitive information. The method according to claim 1, wherein the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier, and/or a target user identifier; Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script user. The method according to claim 2, wherein the target control is a target text box, and processing the target robot script according to the target sensitive information includes: When the target text box is not the plain text box, input the target sensitive information into the target text box, so as to continue processing the target robot script; When the target text box is a plain text box, end the execution of the target robot script. The method according to claim 3, wherein said inputting said target sensitive information into said target text box so as to continue processing said target robot script comprises: Fragmenting the target sensitive information to obtain M pieces of sensitive information, where M is an integer greater than 1; inputting the M pieces of sensitive information into the target text box in sequence, After inputting the i-th sensitive information fragment in the target text box, If the sensitive information segment input into the target text box is input in ciphertext, then continue to input the i+1th sensitive information segment in the target text box until all the target sensitive information is input into the target text box. In the target text box, so as to continue to execute the target robot script; the i is an integer greater than 0 and less than M-1; If the sensitive information segment input into the target text box is input in plain text, report the suspected sensitive information leakage warning event to the RPA management center, and end the execution of the target robot script. The method according to claim 4, characterized in that the method further comprises: Obtain the input data from the target text box in a preset manner; if no data is acquired or the acquired data is a preset character, it is determined that the sensitive information segment input into the target text box is in cipher text input; if the acquired data or the acquired data is not the preset character, then determine that the sensitive information segment input into the target text box is input in plain text; Among them, the preset methods include: Obtaining the input sensitive information fragment from the target text box by calling a control interface, or, Obtain the input sensitive information segment from the target text box by inputting a copy instruction for the target text box; or, Taking a screenshot of the target text box to obtain a screenshot of the target text box; performing text recognition on the screenshot of the target text box to obtain the input sensitive information segment from the target text box. The method according to any one of claims 1-5, wherein the method further comprises: receiving the second response message sent by the RPA management center in response to the sensitive information acquisition request, ending the execution of the target robot script; Wherein, the second response message carries a first identifier, and the first identifier is used to indicate that the acquisition of the target sensitive information fails, or the second response message does not carry the target sensitive information. A method for executing a robot script, characterized in that it comprises: Receiving the sensitive information acquisition request sent by the robotic process automation RPA executor, the sensitive information acquisition request is used to request acquisition of target sensitive information, the sensitive information acquisition request carries the relevant information of the target robot script, and the relevant information of the target robot script Including target executor identification and/or target control identification; the target executor identification is used to indicate the executor that executes the target robot script, and the target control identification is used to indicate the control that needs to use the target sensitive information; sending a first response message to the RPA executor according to the target executor identifier and/or target control identifier, Wherein, the first response message carries the target sensitive information. The method according to claim 7, wherein the sending a first response message to the RPA executor according to the target executor identification and/or target control identification includes: According to the target robot ID and/or the target control ID, the access authorization matrix is traversed, wherein the access authorization matrix includes related information of a plurality of robot scripts, and any robot script in the related information of the plurality of robot scripts The relevant information of S includes the first executor identifier and/or the first control identifier; the first executor identifier is used to indicate the executor that executes the robot script S, and the first control identifier is used to indicate the need to use the first - control of sensitive information; If the access authorization matrix traverses to the second executor identifier and/or the second control identifier, send the first response message to the RPA executor; wherein, the second executor identifier is the access authorization The first executor identifier of the matrix is the same as the target executor identifier, the second control identifier is the same identifier as the target control identifier in the first control identifier of the access authorization matrix, and the target The sensitive information is sensitive information that needs to be used by the control indicated by the second control identifier. The method according to claim 8, characterized in that the method further comprises: If the second executor identifier and/or the second control identifier is not traversed in the access authorization matrix, send the second response message to the RPA executor; Wherein, the second response message carries a first identifier, and the first identifier is used to indicate that the acquisition of target sensitive information fails, or the second response message does not carry the target sensitive information. The method according to any one of claims 7-9, wherein the method further comprises: Receive the suspected sensitive information leakage warning event reported by the RPA actuator; Record the suspected sensitive information leakage warning event; An alarm message is sent to the administrator to remind the administrator to modify the corresponding sensitive information. The method according to any one of claims 7-10, wherein the relevant information of the target robot script further includes a target sensitive information identifier, a target robot script identifier and/or a target user identifier; Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script user. The method according to claim 11, characterized in that the method further comprises: Constructing the access authorization matrix, the access authorization matrix includes relevant information of a plurality of robot scripts; The relevant information of the robot script S also includes a first sensitive information identifier, a first robot script identifier and/or a first user identifier; Wherein, the first sensitive information identifier is used to indicate the first sensitive information, the first robot script identifier is used to indicate the robot script S, and the first user identifier is used to indicate that the robot script needs to be completed S corresponds to the user of the task. A robotic process automation RPA executor is characterized in that it comprises: The acquisition unit is used to acquire the target robot script from the RPA management center; A transceiver unit, configured to send a sensitive information acquisition request to the RPA management center when executing the target robot script needs to use target sensitive information, and the sensitive information acquisition request is used to request to obtain target sensitive information from the RPA management center. information; the sensitive information acquisition request carries relevant information of the target robot script, and the relevant information of the target robot script includes a target executor identifier and/or a target control identifier; the target executor identifier is used to instruct the execution of the The RPA executor of the target robot script, the target control identification is used to indicate the control that needs to use the target sensitive information; receiving the first response message sent by the RPA management center for responding to the sensitive information acquisition request, wherein , the first response message carries the target sensitive information; A processing unit, configured to process the target robot script according to the target sensitive information. The RPA executor according to claim 13, wherein the relevant information of the target robot script also includes target sensitive information identification, target robot script identification and/or target user identification; Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script user. The RPA actuator according to claim 14, wherein the processing unit is specifically used for: When the target text box is not the plain text box, input the target sensitive information into the target text box, so as to continue processing the target robot script; When the target text box is a plain text box, end the execution of the target robot script. The RPA executor according to claim 15, wherein in the aspect of inputting the target sensitive information into the target text box so as to continue processing the target robot script, the processing unit is specifically used to : Fragmenting the target sensitive information to obtain M pieces of sensitive information, where M is an integer greater than 1; inputting the M pieces of sensitive information into the target text box in sequence, After inputting the i-th sensitive information fragment in the target text box, If the sensitive information segment input into the target text box is input in ciphertext, then continue to input the i+1th sensitive information segment in the target text box until all the target sensitive information is input into the target text box. In the target text box, so as to continue to execute the target robot script; the i is an integer greater than 0 and less than M-1; If the sensitive information segment input into the target text box is input in plain text, report the suspected sensitive information leakage warning event to the RPA management center, and end the execution of the target robot script. The RPA actuator according to claim 16, wherein the processing unit is also used for: Obtain the input data from the target text box in a preset manner; if no data is acquired or the acquired data is a preset character, it is determined that the sensitive information segment input into the target text box is in cipher text input; if the acquired data or the acquired data is not the preset character, then determine that the sensitive information segment input into the target text box is input in plain text; Among them, the preset methods include: Obtaining the input sensitive information fragment from the target text box by calling a control interface, or, Obtain the input sensitive information segment from the target text box by inputting a copy instruction for the target text box; or, Taking a screenshot of the target text box to obtain a screenshot of the target text box; performing text recognition on the screenshot of the target text box to obtain the input sensitive information segment from the target text box. The RPA actuator according to any one of claims 13-17, characterized in that, The transceiving unit is further configured to receive a second response message sent by the RPA management center in response to the sensitive information acquisition request; The processing unit is further configured to end the execution of the target robot script; Wherein, the second response message carries a first identifier, and the first identifier is used to indicate that the acquisition of target sensitive information fails, or the second response message does not carry the target sensitive information. A robotic process automation RPA management center is characterized in that it includes: The transceiver unit is configured to receive the sensitive information acquisition request sent by the robot process automation RPA executor, the sensitive information acquisition request is used to request the acquisition of target sensitive information, the sensitive information acquisition request carries the relevant information of the target robot script, and the target The relevant information of the robot script includes a target executor identifier and/or a target control identifier; the target executor identifier is used to indicate the executor that executes the target robot script, and the target control identifier is used to indicate that the target sensitive information controls; An acquisition unit, configured to perform an operation of acquiring the target sensitive information according to the target executor identifier and/or the target control identifier; The transceiver unit is configured to send a first response message to the RPA executor if the target sensitive information is acquired according to the target executor identifier and/or the target control identifier, Wherein, the first response message carries the target sensitive information. The RPA management center according to claim 19, wherein the acquisition unit is specifically used for: Traverse the access authorization matrix according to the target robot ID and/or target control ID, wherein the access authorization matrix includes related information of a plurality of robot scripts, any robot script S in the related information of the plurality of robot scripts Relevant information includes a first executor identifier and/or a first control identifier; the first executor identifier is used to indicate the executor executing the robot script S, and the first control identifier is used to indicate that the first sensitive information controls; The transceiver unit is configured to send the first response message to the RPA executor if the acquisition unit traverses the second executor identifier and/or the second control identifier in the access authorization matrix; wherein, the The second executor ID is the same ID as the target executor ID in the first executor ID of the access authorization matrix, and the second control ID is the same as the target executor ID in the first control ID of the access authorization matrix. The same identifier as the target control identifier, and the target sensitive information is sensitive information that needs to be used by the control indicated by the second control identifier. The RPA management center according to claim 20, wherein the transceiver unit is also used for: If the second executor identifier and/or the second control identifier is not traversed in the access authorization matrix, send the second response message to the RPA executor; Wherein, the second response message carries a first identifier, and the first identifier is used to indicate that the acquisition of target sensitive information fails, or the second response message does not carry the target sensitive information. The RPA management center according to any one of claims 19-21, wherein the transceiver unit is also used for: Receive the suspected sensitive information leakage warning event reported by the RPA executor; send an alarm message to the administrator to remind the administrator to modify the corresponding sensitive information The RPA management center also includes: A recording unit, configured to record the suspected sensitive information leakage warning event. The RPA management center according to any one of claims 19-22, wherein the relevant information of the target robot script also includes a target sensitive information identifier, a target robot script identifier, and/or a target user identifier; Wherein, the target sensitive information identifier is used to indicate the target sensitive information, the target robot script identifier is used to indicate the target robot script, and the target user identifier is used to indicate the user who needs to complete the task corresponding to the target robot script user. RPA management center according to claim 23, is characterized in that, described RPA management center also comprises: A construction unit, configured to construct the access authorization matrix, where the access authorization matrix includes relevant information of multiple robot scripts; The relevant information of the robot script S also includes a first sensitive information identifier, a first robot script identifier, and/or a first user identifier; Wherein, the first sensitive information identifier is used to indicate the first sensitive information, the first robot script identifier is used to indicate the robot script S, and the first user identifier is used to indicate that the robot script needs to be completed S corresponds to the user of the task. An electronic device, comprising a communication interface, a memory, and one or more processors; wherein, one or more programs are stored in the memory; it is characterized in that, the one or more processors execute the one or more or multiple programs, causing the electronic device to implement the method according to any one of claims 1 to 12. A computer storage medium, characterized by comprising computer instructions, and when the computer instructions are run on an electronic device, the electronic device is made to execute the method according to any one of claims 1 to 12. A computer program product, characterized in that, when the computer program product is run on a computer, the computer is made to execute the method according to any one of claims 1 to 12.

Images