Data security management method and device

The invention provides a data security management method and device, applied to a server, and comprising: receiving query data request information and user token information sent by a client, the query data request information comprising a database query language; analyzing the user token information to obtain a user ID (Identity); matching the user ID with a user ID in a database; if so, authorizing the user to access the metadata management system; searching a corresponding to-be-desensitized data result set from a computing framework tool according to the query data request information; analyzing the database query language to obtain a metadata set; searching sensitive field information included in the source and target field mapping relation from a metadata management system according to the metadata set; and performing data desensitization replacement on the to-be-desensitized data result set, the sensitive field information and the source and target field mapping relationship by adopting a desensitizati