A method and device for displaying numbers with dynamic privacy protection

Abstract

The present invention relates to the field of privacy protection technology. A method and device for displaying a number with dynamic privacy protection are provided, the method comprising: after receiving a login request for an application APP from a current client, calling an authentication system for authentication; during the period of calling the authentication system for authentication, requesting to determine the privacy protection policy of the current client; specifically comprising determining the user number privacy display protection level according to the mobile phone number, application identifier, the type of software accessed by the client, the user location, and the user's own privacy protection preference; generating a one-time service token based on the determined user number privacy display protection level, generating a corresponding number display template, and returning it to the authentication module of the application APP, and performing corresponding display on the user authorization page of the application APP according to the confirmed number display scheme. The present invention realizes a more effective and customized display method based on the corresponding display provided by network security risks and user preferences, and also improves the user experience.

Description

Technical Field

[0001] The present invention belongs to the technical field of privacy protection, and provides a number display method and device with dynamic privacy protection. Background Art

[0002] The rapid development of mobile Internet applications has brought about rapid progress in user identity authentication technology. In recent years, identity authentication technologies for various unified accounts have developed rapidly, and identity authentication technologies based on WeChat accounts, Alipay accounts, and user mobile phone numbers have flourished. This type of unified identity authentication technology has the same process, that is, the user clicks on the authentication method, the login page of the application jumps to the selected login identity display page, the user clicks to confirm the login, and the third-party authentication capability system confirms the user authorization and returns the user identity to the application. Generally, large-scale Internet applications will directly display the user name currently logged in on the machine on the display page for the user to confirm the authorization. For example, when logging in with WeChat authentication, the WeChat nickname will be displayed on the login page. However, the login method provided by the operator to third-party applications is generally an anonymized mobile phone number. Generally, the middle or last 4 digits are concealed, and the user authorization method supports the method of not filling in or the user filling in 4 digits to confirm the authorization.

[0003] This display method has a single privacy protection, and some users have concerns about the displayed information, which cannot meet user requirements. The more serious problem is that after some applications collect some user information, they combine other terminal information collected in the application and the full number obtained in the historical real authentication to create a user portrait, forming a mapping relationship between the user number fragment and the real full number, so as to illegally obtain and use user information, or bypass the communication service provider's authorization authentication login and billing. This illegal acquisition of user information can also easily make users mistakenly believe that the subsequent number authentication process is provided by the communication service provider. Furthermore, the communication service provider's original business model of charging after the user authorizes and provides service tokens to replace the number is also destroyed.

[0004] Considering that the current user number display method is too simple and cannot provide corresponding display according to network security risks and user preferences, there are also security risks of privacy information leakage and damage to the interests of communication service providers under the background of rapid progress of big data technology and data abuse. Therefore, a new dynamic privacy protection number display method and device are needed to solve the above problems. Summary of the invention

[0005] The present invention provides a method and device for displaying numbers with dynamic privacy protection to solve the problems in the prior art.

[0006] The existing number authentication relies on mobile terminals to access applications through cellular traffic. The existing user number display strategy and display form are too single and cannot provide corresponding display according to network security risks and user preferences, which leads to technical problems such as the risk of privacy information leakage. The technical problem to be solved by the present invention is achieved through the following technical solution.

[0007] The first aspect of the present invention proposes a dynamic privacy protection number display method, which includes: after receiving a login request for an application APP from a current client, calling an authentication system for authentication; during the process of calling the authentication system for authentication, requesting to determine the privacy protection policy of the current client; specifically including determining the user number privacy display protection level based on the mobile phone number, application identifier, type of software accessed by the client, user location, and the user's own privacy protection preference; the authentication system generates a one-time service token based on the determined user number privacy display protection level, and generates a corresponding number display template; the generated one-time service token and number display template are returned to the authentication module of the application APP, and are displayed accordingly on the user authorization page of the application APP according to the confirmed number display scheme.

[0008] The second aspect of the present invention proposes a dynamic privacy protection number display device, which is the dynamic privacy protection number display method described in the first aspect of the present invention, and the number display device includes: an authentication module, which calls the authentication system for authentication after receiving the login request of the current client to the application APP; a judgment module, during the period of calling the authentication system for authentication, requests to judge the privacy protection policy of the current client; specifically including determining the user number privacy display protection level according to the mobile phone number, application identifier, the type of software accessed by the client, the user location, and the user's own privacy protection preference; a generation module, the authentication system generates a one-time service token based on the determined user number privacy display protection level, and generates a corresponding number display template; a display module, which returns the generated one-time service token and number display template to the authentication module of the application APP, and displays them accordingly on the user authorization page of the application APP according to the confirmed number display scheme.

[0009] The third aspect of the present invention provides an electronic device, comprising: one or more processors; a storage device for storing one or more programs; when the one or more programs are executed by the one or more processors, the one or more processors implement the dynamic privacy protection number display method described in the first aspect of the present invention.

[0010] A fourth aspect of the present invention provides a computer-readable medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the method for displaying numbers with dynamic privacy protection as described in the first aspect of the present invention.

[0011] The embodiments of the present invention include the following advantages:

[0012] Compared with the prior art, after receiving the login request for the application APP from the current client, the present invention calls the authentication system for authentication, requests to determine the privacy protection policy of the current client, and specifically determines the user number privacy display protection level, which can effectively solve the risk of privacy information leakage; based on the determined user number privacy display protection level, a one-time service token is further generated, and a corresponding number display template is generated, and the generated one-time service token and number display template are returned to the authentication module of the application APP, and after confirming that the current user has authorized, a corresponding display is performed on the current client of the current user. The formed display is a variety of display forms corresponding to the user, that is, the corresponding display provided according to network security risks and user preferences, which realizes a more effective and customized display method and improves the user experience.

[0013] In addition, the method can provide number authentication display strategies and authorization methods with various privacy protection strengths. BRIEF DESCRIPTION OF THE DRAWINGS

[0014] Figure 1 is a flowchart of the steps of the method for displaying numbers with dynamic privacy protection of the present invention;

[0015] Figure 2 It is a partial flow chart of the method for displaying numbers with dynamic privacy protection of the present invention;

[0016] Figure 3 It is a technical architecture diagram of an application scenario of the dynamic privacy protection number display method of the present invention;

[0017] Figure 4 It is a structural block diagram of the number display device for dynamic privacy protection of the present invention;

[0018] Figure 5 is a schematic structural diagram of an electronic device embodiment according to the present invention;

[0019] Figure 6 It is a schematic diagram of the structure of a computer-readable medium embodiment according to the present invention. DETAILED DESCRIPTION

[0020] It should be noted that, in the absence of conflict, the embodiments and features in the embodiments of the present application can be combined with each other. The present invention will be described in detail below with reference to the accompanying drawings and in combination with the embodiments.

[0021] In view of the above problems, the present invention proposes a method for displaying numbers with dynamic privacy protection. The method can provide number authentication display strategies and authorization methods with multiple privacy protection strengths. After receiving the login request from the current client to the application APP, the method calls the authentication system for authentication, requests to determine the privacy protection policy of the current client, and specifically determines the user number privacy display protection level, which can effectively solve the risk of privacy information leakage. Based on the determined user number privacy display protection level, a one-time service token is further generated, and a corresponding number display template is generated. The generated one-time service token and number display template are returned to the authentication module of the application APP, and after confirming that the current user has authorized it, the current client of the current user is displayed accordingly. The display formed is a variety of display forms corresponding to the user, that is, the corresponding display provided according to network security risks and user preferences, which realizes a more effective and customized display method and improves the user experience.

[0022] Example 1

[0023] Refer to the following Figure 1 , Figure 2 , Figure 3 , the contents of the present invention will be described in detail.

[0024] Figure 1 It is a flowchart of the steps of the number display method for dynamic privacy protection of the present invention. Figure 2 It is a partial flow chart of the number display method with dynamic privacy protection of the present invention. Figure 3 It is a technical architecture diagram of an application scenario of the dynamic privacy protection number display method of the present invention.

[0025] like Figure 1 As shown, in step S101, after receiving the login request of the current client to the application APP, the authentication system is called to perform authentication.

[0026] In a specific implementation, after receiving a login request for an application APP from the current client (for example, a mobile phone terminal), for example, accessing the application APP through cellular traffic, specifically when the mobile phone turns on cellular traffic and wireless LAN at the same time and obtains network traffic request permission, the authentication system is called for authentication.

[0027] Specifically, the authentication system includes an authentication module of the application APP (such as an SDK authentication module) and an authentication terminal provided by a communication service provider (specifically also including an authentication server corresponding to the authentication terminal).

[0028] In an optional embodiment, the authentication process involves a client, an application APP (including an application server), a communication service provider, and a privacy and security policy server, wherein the application APP includes an SDK authentication module and an application server, the communication service provider includes a communication service provider authentication system, the communication service authentication system includes an authentication server and a network signaling data server, the authentication server and the network signaling data server can communicate bidirectionally, the authentication server of the communication service authentication system can communicate bidirectionally with the privacy and security policy server, the authentication server of the communication service authentication system can communicate bidirectionally with the application server of the application APP, and the authentication server of the communication service authentication system can communicate bidirectionally with the authentication module of the application APP (specifically the SDK authentication module).

[0029] Specifically, the current user of the current client sends a login request to the application APP. After receiving the login request, the application APP calls the authentication system for authentication. The authentication system is specifically the communication service provider authentication system. The login request contains APPID, API key, client cellular IP address, application package name, and the signature value of each parameter of the application.

[0030] For calling the authentication system for authentication, a login request is sent to the application server of the application APP, and the login request is converted into an authentication request and sent to the communication service provider authentication system (specifically, the authentication server of the communication service provider authentication system) for authentication. The parameters of the authentication request include the cellular network IP address information, see Figure 3 .

[0031] When the authentication system is called for authentication, the authentication system verifies the legitimacy and parameter integrity of the authentication request, and then, based on the cellular network IP address, requests the network signaling data server of the communication service provider to retrieve the mobile phone number corresponding to the cellular network IP address, receives the mobile phone number returned from the network signaling data server, and returns the mobile phone number as response information to the application server based on the replacement request.

[0032] It should be noted that the main process of the present invention includes the process of pre-obtaining a number from a communication service provider, the second step is authorization, and the third step is replacing the number. The above is only described as an optional example and cannot be understood as a limitation of the present invention.

[0033] Next, in step S102, during authentication, a request is made to determine the privacy protection policy of the current client; specifically, the user number privacy display protection level is determined based on the mobile phone number, application identifier, type of software accessed by the client, user location, and the user's own privacy protection preference.

[0034] In a specific implementation, the user number privacy display protection level is determined based on the mobile phone number, application identifier, type of software accessed by the client, user location, and the user's own privacy protection preference. The user's own privacy protection preference is determined by analyzing the communication service data. The specific determination method can be that if there is a record of user privacy complaints, the user number privacy display protection level is set to be higher than the default level by 1 level. It can also be determined by the privacy preference information collection data provided by the communication service provider. If the user has set the communication service privacy protection data, it is set to be higher than the default level by 1 level. If there is a complaint at the same time, it can be increased by 1 level until the highest level is reached.

[0035] exist Figure 3 In the example, the communication service provider's authentication server sends a request to the privacy security policy server to determine the current client's privacy protection and policy. The privacy security policy server determines the user number privacy display protection level based on the mobile phone number, application identifier, type of software accessed by the client, user location, and the user's own privacy protection preference. Specifically, it calculates and generates the user number privacy display protection level, and returns the generated user number privacy display protection level to the communication service provider's authentication server.

[0036] The following will explain in detail the calculation process of the user number privacy display protection level.

[0037] Use the following expression to calculate the user number privacy display protection level:

[0038] P=B+O

[0039] Among them, P represents the user number privacy display protection level corresponding to the current user of the current client; B represents the basic user number privacy display protection level, which is specifically calculated and determined based on the initial user privacy protection level, the minimum privacy protection level, the privacy risk level of the application, and the privacy risk level of the number; O represents the adjustment level for adjusting the basic user number privacy display protection level, which is specifically determined based on the product of multiple adjustment parameters and the weights corresponding to each adjustment parameter, wherein the weights of each adjustment parameter can be regularly calculated and adjusted or calculated and updated. The calculation process of the weights of each adjustment parameter will be specifically described below.

[0040] It should be noted that in some implementations, the server may be set based on the statistical analysis of user complaint data and application operation data of number authentication. The above is only used as an example and cannot be understood as a limitation of the present invention.

[0041] Specifically, the following expression is used to calculate the privacy risk value of the application in real time, or to calculate the privacy risk value of the application offline periodically, and to update the calculated privacy risk value of the number periodically:

[0042] R APPID =Y1(APPID,T) / Z1(APPID,T)

[0043] Among them, R APPID Represents the privacy risk value of the application, which is used to characterize the ratio of the number of pre-acquired numbers Y1 for all users of the APP with the identity identifier APPID that accesses the communication service provider's authentication service within a specified time period T to the final number of service token replacements Z1, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, a week, half a month, a month or longer.

[0044] The privacy risk level of the application is further determined according to the calculated privacy risk value of the application.

[0045] For the privacy risk value of the application, R APPID Specifically, it is a ratio, R APPID The larger the value is, the more likely it is that the application service provider will obtain the complete mobile phone number of all users through pre-acquisition during the APP authentication process, and the higher the risk of privacy leakage.

[0046] Use the following expression to calculate the privacy risk value of the number in real time, or calculate the privacy risk value of the number offline regularly, and update the calculated privacy risk value of the number regularly:

[0047] R UID =Y2(UID,T) / Z2(UID,T);

[0048] Among them, R UID Represents the privacy risk value of the number used by the user, and is used to characterize the ratio of the number of pre-taken numbers Y2 used by the user's number on all APPs within a specified time period T to the final number of service token replacements Z2, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, a week, half a month, a month or longer.

[0049] Further, based on the calculated privacy risk value of the number, the privacy risk level of the number is determined.

[0050] The privacy risk value R of the number UID , specifically a ratio, R UID The larger the value, the greater the possibility of obtaining the user's complete mobile phone number through pre-acquisition, and the higher the risk of privacy leakage.

[0051] In addition, the initial user privacy protection level specifically refers to the user privacy protection level D defaulted by the communication service provider, which can be set to the lowest level in the privacy protection level list, for example.

[0052] The minimum privacy protection level specifically refers to the default minimum privacy protection level U set by the user on the client side.

[0053] Next, according to the calculated privacy risk value R of the application APPID The privacy risk value R of the sum number UID , perform statistical analysis and sorting to form the privacy risk value R of the application APPID The privacy risk value R of the sum number UID The shared R value list, i.e., the privacy risk R value list, corresponds to N privacy risk levels, specifically including the privacy risk level of the application and the privacy risk level of the number, wherein the value of N is a positive integer greater than 1, and preferably, the value of N is 3 to 20.

[0054] For example, the N value is 15. Specifically, after calculating the privacy risk values ​​of all apps (i.e., the privacy risk values ​​of applications) and the privacy risk values ​​of all users' mobile phone numbers (i.e., the privacy risk values ​​of numbers), a list of R values ​​is formed by using data statistics, where the R value includes the privacy risk value R of the application. APPID The privacy risk value R of the sum number UID , sorted from small to large, and divided into 100 equal parts according to the number and evenly distributed, forming a percentile interval from 0 to 100. The lower the R value is, the smaller the security risk is. According to the lookup table 1, the privacy risk level P of the application can be determined respectively. APPID , the privacy risk level of the number P UID Two levels. The privacy risk value and privacy risk level are shown in Table 1.

[0055] Table 1

[0056]

[0057] According to the basic privacy protection level obtained, B=MIN(D,U,P APPID , P UID ), that is, the basic user number privacy display protection level B is the minimum value of all privacy protection level values, that is, the highest privacy protection level among all levels. Specifically, the basic user number privacy display protection level is the highest privacy protection level among the minimum privacy protection level, the privacy risk level of the application, the privacy risk level of the number, and the initial user privacy protection level.

[0058] In an optional implementation, a dynamically adjustable adjustment level is further added.

[0059] Specifically, the following expression is used to calculate and determine the initial adjustment level, and the final adjustment level is obtained according to the initial adjustment level:

[0060] O 初始 =r1*OIMEI +r2*O loc +r3*O t +r4*O s +r5*O APPID +r6*O opt

[0061] Among them, O 初始 represents the initial adjustment level for adjusting the privacy display protection level of the basic user number, O IMEI represents a first adjustment parameter, specifically whether the current user equipment is a common equipment, and r1 represents a weight corresponding to the first adjustment parameter; loc represents the second adjustment parameter, specifically whether the current user access base station location is a permanent location, and r2 represents the weight corresponding to the second adjustment parameter; t represents the third adjustment parameter, specifically whether the time when the user equipment is accessed is daytime, and r3 represents the weight corresponding to the third adjustment parameter; s represents the fourth adjustment parameter, specifically the current client access software type, and r4 represents the weight corresponding to the fourth adjustment parameter; APPID represents the fifth adjustment parameter, specifically the specified configuration of the application access channel, and r5 represents the weight corresponding to the fifth adjustment parameter; opt represents the sixth adjustment parameter, specifically the protection strength determined by the communication service provider according to the security response event, and r6 represents the weight corresponding to the sixth adjustment parameter.

[0062] Specifically, the security response events include multiple types of response level events, for example, three types of response level events, specifically first response level events, second response level events, and third response level events corresponding to first type time, second type time, and third type time. First response level events include, for example, theme conference activities held by relevant departments, technical conference activities and other related events with national impact, and events related to National Day, Spring Festival, etc. Second response level events are specifically events of important concern to the communication service industry, communication service provider activities and other related events with impact on the communication service industry. Third response level events are events other than first response level events and second response level events.

[0063] Further, the obtained O 初始 The value of is rounded down to get the final adjustment level.

[0064] In a preferred embodiment, Figure 2 As shown, calculating the weight r5 corresponding to the fifth adjustment parameter specifically includes:

[0065] Step S201: Calculate the overall pre-fetch number replacement ratio.

[0066] Specifically, the overall pre-acquisition number replacement ratio is calculated by first counting the total number of pre-acquisition numbers Y'a and the total number of replacements Z'a of all numbers of the communication service provider in a specific historical time period S, and using the following expression to calculate the overall pre-acquisition number replacement ratio:

[0067] Ha=Y'a / Z'a

[0068] Wherein, Ha represents the overall pre-fetch number replacement ratio within a specific historical time period S, and the specific historical time period is one month, three months, six months, or twelve months from the current time to the past;

[0069] Step S202: Calculate the pre-fetch number replacement ratio of the application to be processed.

[0070] Specifically, the total number of pre-taken numbers Y'j and the total number of replacements Z'j of all numbers of all APPs connected to the communication service provider within a specific historical time period S are calculated, and the pre-taken number replacement ratio of the application to be processed is calculated using the following expression:

[0071] Hj=Y'j / Z'j

[0072] Among them, Hj represents the pre-fetch number replacement ratio of the j-th application, that is, the application to be processed, within a specific historical time period S; the specific historical time period is one month, three months, six months, or twelve months from the current time to the past.

[0073] Step 203: Calculate the parameter ratio and determine the value of the weight r5 corresponding to the fifth adjustment parameter.

[0074] Specifically, select the application whose calculated pre-acquisition number replacement ratio Hj is greater than the overall pre-acquisition number replacement ratio Ha, and calculate the number m of applications whose pre-acquisition number replacement ratio is greater than the overall pre-acquisition number replacement ratio Ha, the total number A of applications of all APPs connected to the communication service provider, and calculate the parameter ratio ,in

[0075] When the parameter ratio When <1 / 6, the value of r5 is 1 / 10.

[0076] When 1 / 6≤ When <1 / 3, the value of r5 is 1 / 6.

[0077] When 1 / 3≤ <1 / 2, the value of r5 is 1 / 5.

[0078] When 1> ≥1 / 2, the value of r5 is 1 / 3.

[0079] Next, the value of the weight r6 corresponding to the sixth adjustment parameter is determined.

[0080] When the time is the first time period, the value of r6 is 4 / 15. The first time period includes specific related activity days and holidays longer than 3 days. For example, theme conferences and technical conferences held by relevant departments and other related events with national influence. Holidays longer than 3 days include National Day, Spring Festival, Labor Day, etc.

[0081] When the time is the second time period, the value of r6 is 1 / 5. The second time period includes holidays of less than three days, activities of communication service providers, and other activities that have an impact on the communication service industry.

[0082] When the time is the third type of time period, the value of r6 is 2 / 15. The third type of time is the time other than the first type of time and the second type of time.

[0083] Next, the weight r corresponding to the first adjustment parameter is further calculated. 1、 r2, r3, r4.

[0084] When the total number of all numbers on the privacy communication platform is L, the number of pre-taken numbers of each number in a specific historical time period S is Y'i, and the number of replacements is Z'i, the pre-taken number replacement ratio of the i-th number is calculated as:

[0085] Hi=Y'i / Z'i

[0086] Among them, Hi represents the pre-taken number replacement ratio of the i-th number in a specific historical time period S; the specific historical time period is one month, three months, six months, or twelve months from the current time to the past.

[0087] According to the calculated pre-taken number replacement ratio, select the number list that is greater than the overall pre-taken number replacement ratio Ha and the total number of numbers in the number list h 总 , calculate the number of user devices in the number list that are commonly used devices h 常设 , calculate the number of numbers h that are commonly used base stations in the number list during number authentication 基站 , calculate the number of numbers in the number list in the common time period h 常时 , calculate the number of numbers h when the client is H5 and the mini program in the number list 接入 , use the following expression to calculate r 1、 r2, r3, r4:

[0088] r1=h 常设 / h 总 *(1-r5-r6);

[0089] r2=h 基站 / h 总 *(1-r5-r6);

[0090] r3=h 常时 / h 总 *(1-r5-r6);

[0091] r4=h 接入 / h 总 *(1-r5-r6).

[0092] Specifically, the commonly used time periods are, for example, 8:00-20:00, 7:00-21:00, and the like.

[0093] In an optional implementation, data analysis is performed on the numbers in a historical time period from the current time to the past for one year to determine the weights of each adjustment parameter: r1=1 / 15, r2=1 / 15, r3=1 / 10, r4=1 / 3, r5=1 / 6, r6=4 / 15.

[0094] It should be noted that, among the weights of the adjustment parameters determined above, the fourth adjustment parameter O s and the sixth adjustment parameter O opt The value of is large, relative to the weight of other adjustment parameters, it will affect the initial adjustment level O 初始 The numerical impact is greater.

[0095] In another optional implementation, if no relevant data is found, the values ​​of r1, r2, r3, r4, r5, and r6 may be selected as 1 / 6. 初始 The value of is equal to the average value of each adjustment parameter, and then the obtained O 初始 The value of is rounded down to get the final adjustment level.

[0096] For rounding down, for example, O 初始 If the value of is less than -2, the final adjustment level is -2. 初始 If the value of is greater than 1, the final adjustment level is 1.

[0097] It should be noted that O IMEI Indicates whether the mobile phone is often used IMEI , determine whether the IMEI of the mobile phone used by the user is commonly used, find the historical IMEI record of the mobile phone network access in the network signaling server of the communication service provider according to the user's mobile phone number, and determine whether the IMEI is a commonly used mobile phone. If it is a commonly used IMEI, maintain the privacy display protection level of the user number or lower the privacy display protection level of the user number, that is, 0 IMEI =0 or 1, if it is not a frequently used device, the user number privacy display protection level is raised, that is, 0 IMEI = -1 or -2. locIndicates the location of the user accessing the base station. According to the current location of the mobile phone number, the historical location record is checked in the network signaling server of the communication service provider for comparison. If it is in the permanent location, the privacy display protection level of the user number is maintained or lowered, that is, 0 loc =0 or 0 loc =1, when in a non-resident position, the privacy display protection level of the user number is raised, that is, 0 loc = -1 or 0 loc =-2. t Indicates whether the user access time period and user login authentication time period are daytime. If they are daytime, the user number privacy display protection level is maintained or lowered, that is, 0 t =0 or 0 t =1. When it is not daytime, the privacy display protection level of the user number is raised to 0 t = -1 or 0 t =-2. Os indicates the security type of the client access software. When the software type accessed by the client is an SDK suite based on the mobile operating system, the privacy protection strength of the user can be maintained. s =0, such as AndroID, IOSSDK. If it is a weakly controlled contact point based on H5, WeChat applet or API service, or a contact channel that is vulnerable to hacker attacks, the privacy display protection level of the user number will be raised, that is, 0 s = -1 or 0 s =-2. APPID Indicates the specified configuration of the application access channel. This value is specified by the communication service provider according to the user number privacy display protection level in the application when the specific application is in a network security activity or event, that is, 0 APPID =0,O APPID = -1, or O APPID =-2. opt Indicates the communication service provider's specified time period activity response configuration. This value sets the user number privacy display protection level according to the operator's security response event, that is, 0 opt =0,O opt = -1, or O opt =-2.

[0098] For example, the range of values ​​that can be set for the adjustment level is [-2, -1, 0, 1]. When it takes 0 or a negative value, it is used to enhance privacy upward. And it is allowed to lower the security risk level under specific circumstances. The specific circumstances include the situation where the application subject accessing the communication service provider is the communication service provider itself, and the same user has multiple numbers with the same last digit on the same communication service provider. When the current level of privacy protection display scheme is adopted, there is no way to determine which specific number is the confirmed authorization number. For this specific situation, a detection strategy is set to identify that the same user has multiple numbers and determine the same number of digits. According to the results identified by the detection strategy, the current level of privacy protection display scheme is further adjusted so that the user can accurately confirm the authorized number.

[0099] For example, if the calculated user number privacy display protection level P is less than 0, the user number privacy display protection level P is 0. For example, if the calculated user number privacy display protection level P is greater than 14, the user number privacy display protection level P is 14.

[0100] In another optional implementation, during authentication, a request is made to determine the privacy protection policy of the current client, specifically by using an authentication system to request the privacy protection policy of the current client from a privacy security policy server based on the mobile phone number, the authentication system is specifically a communication service provider authentication system, and the authentication server of the communication service provider authentication system and the privacy security policy server can communicate bidirectionally. The privacy security policy server sends the determined user number privacy display protection level to the authentication system.

[0101] The authentication system returns the generated one-time service token as an authentication token to the authentication module of the application APP, and displays the authentication token on the user authorization page.

[0102] It should be noted that the above is only described as an optional example and should not be understood as a limitation to the present invention.

[0103] Next, in step S103, the authentication system generates a one-time service token based on the determined user number privacy display protection level, and generates a corresponding number display template.

[0104] In a specific implementation, the privacy security policy server sends the determined user number privacy display protection level to the authentication system, specifically the authentication server of the communication service provider. The authentication server of the communication service provider generates a one-time service token based on the determined user number privacy display protection level, generates a corresponding number display template, and returns the generated one-time service token and the generated corresponding number display template as response information to the authentication module (SDK authentication module) of the application APP.

[0105] When the authentication module of the application APP (SDK authentication module) confirms that it is an authorized client, the number and related information are displayed on the user authorization page according to the number display template.

[0106] In another specific implementation, the privacy security policy server sends the determined user number privacy display protection level to the authentication system, specifically the authentication server of the communication service provider, and the authentication server of the communication service provider generates a one-time service token based on the determined user number privacy display protection level. The authentication server of the communication service provider sends the generated one-time service token, the determined user number privacy display protection level and all number display templates as response information to the authentication module of the application APP (SDK authentication module), and the authentication module of the application APP (SDK authentication module) determines the number display scheme corresponding to the client, and displays the number and related information on the user authorization page according to the determined number display scheme.

[0107] It should be noted that, for the one-time service token, in this example, the same user uses it within a specified time (eg, about ten minutes). The above is only described as an optional example and cannot be understood as a limitation of the present invention.

[0108] Next, in step S104, the generated one-time service token and number display template are returned to the authentication module of the application APP, and are displayed accordingly on the user authorization page of the application APP according to the confirmed number display scheme.

[0109] In a specific implementation, when the authentication server of the communication service provider generates a number display template of the corresponding privacy protection level, it determines the corresponding number display template according to the value of the user number display privacy protection level, returns the one-time service token generated according to the user number display privacy protection level and the determined corresponding number display template to the authentication module of the application APP, and the authentication module of the application APP further confirms that the user is an authorized user and confirms the determined number display scheme. Then, the confirmed number display scheme is displayed accordingly on the user authorization page of the application APP.

[0110] In another specific implementation, after generating the number display template of the corresponding privacy protection level, the authentication server of the communication service provider returns the value of the user number display privacy protection level, all number display templates, and the generated one-time service token to the authentication module of the application APP, and the authentication module of the application APP confirms that the user is an authorized user. According to the value of the user number display privacy protection level, the corresponding number display template is selected to confirm the number display scheme to be used further (including the corresponding number display template, template style, and display method). Then, the confirmed number display scheme is displayed accordingly on the user authorization page of the application APP.

[0111] In another specific implementation, the authentication server of the communication service provider determines the value of the user number display privacy protection level when generating the number display template of the corresponding privacy protection level. The number of display templates is the same as the number of user number display privacy protection levels. When a number display scheme (including corresponding number display templates, template styles, and display methods) with a higher security user number display privacy protection level is displayed, the number of digits displayed in plain text is less, or the number that can be directly obtained by the computer application is less. Table 2 shows different user number privacy display protection levels and template styles of number display schemes.

[0112] Table 2

[0113]

[0114] Table 2 is an example table of number display solutions with multiple privacy protection levels.

[0115] As can be seen from Table 2, the content of the number display template of the number display plan includes hiding the first specified digits, hiding the middle specified digits, hiding the last specified digits, using picture numbers, placing the name of the communication service provider or the logo of the communication service provider in the middle part, and the privacy number methods include changing the shape and inclination of the data, etc.

[0116] Specifically, the four-digit number hidden in the middle of the present invention can be filled with the name or abbreviation of the communication service provider, such as "communication service provider a"; all explicit number positions or middle placeholders are in the Chinese character encoding format of the computer, or can be in the form of displayed picture encoding, such as the middle placeholder can be in the picture encoding form of "communication", "service", "party", "a". The specific picture format can also be randomly generated from the server of the communication service provider, or selected from a large number of sample libraries, or can be a picture with deformed characters or pixel interference. As long as the placeholder picture can be recognizable as Chinese characters by natural persons, its size should not be too large.

[0117] It should be noted that the above is only described as an optional example and should not be understood as a limitation to the present invention.

[0118] Compared with the prior art, after receiving the login request for the application APP from the current client, the present invention calls the authentication system for authentication, requests to determine the privacy protection policy of the current client, and specifically determines the user number privacy display protection level, which can effectively solve the risk of privacy information leakage; based on the determined user number privacy display protection level, a one-time service token is further generated, and a corresponding number display template is generated, and the generated one-time service token and number display template are returned to the authentication module of the application APP, and after confirming that the current user has authorized, a corresponding display is performed on the current client of the current user. The formed display is a variety of display forms corresponding to the user, that is, the corresponding display provided according to network security risks and user preferences, which realizes a more effective and customized display method and improves the user experience.

[0119] In addition, the method can provide number authentication display strategies and authorization methods with multiple privacy protection strengths.

[0120] The following are embodiments of the device of the present invention, which can be used to implement the method embodiments of the present invention. For details not disclosed in the device embodiments of the present invention, please refer to the method embodiments of the present invention.

[0121] Figure 4 4 is a schematic diagram of the structure of an example of a number display device for dynamic privacy protection according to the present invention.

[0122] like Figure 4 As shown, the second aspect of the present invention provides a dynamic privacy protection number display device, which executes the dynamic privacy protection number display method described in Example 1. The number display device includes an authentication module 410, a judgment module 420, a generation module 430, and a display module 440.

[0123] In a specific implementation, after receiving the login request of the current client to the application APP, the authentication module 410 calls the authentication system for authentication. During the process of calling the authentication system for authentication, the judgment module 420 requests to judge the privacy protection policy of the current client, specifically including determining the user number privacy display protection level based on the mobile phone number, application identifier, the type of software accessed by the client, the user location, and the user's own privacy protection preference; the generation module 430 is used for the authentication system to generate a one-time service token based on the determined user number privacy display protection level, and generate a corresponding number display template. The display module 440 returns the generated one-time service token and number display template to the authentication module of the application APP, and displays them accordingly on the user authorization page of the application APP according to the confirmed number display scheme.

[0124] According to an optional implementation manner, determining the user number privacy display protection level according to the mobile phone number, application identifier, software type accessed by the client, user location, and user's own privacy protection preference includes:

[0125] Use the following expression to calculate the user number privacy display protection level:

[0126] P=B+O

[0127] Among them, P represents the user number privacy display protection level corresponding to the current user of the current client; B represents the basic user number privacy display protection level, which is specifically calculated and determined based on the initial user privacy protection level, the minimum privacy protection level, the privacy risk level of the application, and the privacy risk level of the number; O represents the adjustment level for adjusting the basic user number privacy display protection level, which is specifically determined based on the product of multiple adjustment parameters and the weights corresponding to each adjustment parameter, wherein the weights of each adjustment parameter can be regularly calculated and adjusted or calculated and updated. The calculation process of the weights of each adjustment parameter will be specifically described below.

[0128] According to an optional implementation manner, the following expression is used to calculate the privacy risk value of the application in real time, or to calculate the privacy risk value of the application offline periodically:

[0129] R APPID =Y1(APPID,T) / Z1(APPID,T)

[0130] Among them, R APPID The privacy risk value of the application is used to characterize the ratio of the number of pre-acquisition times Y1 for all users of the APP with the identity identifier APPID accessing the authentication service of the communication service provider to the final number of service token replacement times Z1 within the specified time period T, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, one week, half a month, one month or longer; further determine the privacy risk level of the application according to the calculated privacy risk value of the application;

[0131] Use the following expression to calculate the privacy risk value of a number in real time, or calculate the privacy risk value of a number offline periodically:

[0132] R UID =Y2(UID,T) / Z2(UID,T);

[0133] Among them, R UIDThe privacy risk value of the number used by the user is used to characterize the ratio of the number pre-fetched on all APPs by the number used by the user within a specified time period T Y2 to the final number of service token replacements Z2, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, a week, half a month, a month or longer; further, based on the calculated privacy risk value of the number, the privacy risk level of the number is determined.

[0134] According to the calculated privacy risk values ​​of the application and the privacy risk values ​​of the number, statistical analysis is performed and sorting is performed to form a privacy risk R value list, wherein the privacy risk R value list corresponds to N privacy risk levels, specifically including the privacy risk level of the application and the privacy risk level of the number, wherein the value of N is a positive integer greater than 1, and the value of N is 3 to 20.

[0135] Specifically, the basic user number privacy display protection level is the highest privacy protection level among the lowest privacy protection level, the privacy risk level of the application, the privacy risk level of the number, and the initial user privacy protection level.

[0136] The following expression is used to calculate and determine the initial adjustment level, and the final adjustment level is obtained based on the initial adjustment level:

[0137] O 初始 =r1*O IMEI +r2*O loc +r3*O t +r4*O s +r5*O APPID +r6*O opt

[0138] Among them, O 初始 represents the initial adjustment level for adjusting the privacy display protection level of the basic user number, O IMEI represents a first adjustment parameter, specifically whether the current user equipment is a common equipment, and r1 represents a weight corresponding to the first adjustment parameter; loc represents the second adjustment parameter, specifically whether the current user access base station location is a permanent location, and r2 represents the weight corresponding to the second adjustment parameter; t represents the third adjustment parameter, specifically whether the time when the user equipment is accessed is daytime, and r3 represents the weight corresponding to the third adjustment parameter; s represents the fourth adjustment parameter, specifically the current client access software type, and r4 represents the weight corresponding to the fourth adjustment parameter; APPID represents the fifth adjustment parameter, specifically the specified configuration of the application access channel, and r5 represents the weight corresponding to the fifth adjustment parameter; optrepresents the sixth adjustment parameter, specifically the protection strength determined by the communication service provider according to the security response event, and r6 represents the weight corresponding to the sixth adjustment parameter.

[0139] Specifically, the security response events include multiple types of response level events, for example, three types of response level events, specifically first response level events, second response level events, and third response level events corresponding to first type time, second type time, and third type time. First response level events include, for example, theme conference activities held by relevant departments, technical conference activities and other related events with national impact, and events related to National Day, Spring Festival, etc. Second response level events are specifically events of important concern to the communication service industry, communication service provider activities and other related events with impact on the communication service industry. Third response level events are events other than first response level events and second response level events.

[0140] Further, the obtained O 初始 The value of is rounded down to get the final adjustment level.

[0141] According to an optional implementation manner, calculating the weight r5 corresponding to the fifth adjustment parameter specifically includes:

[0142] Calculate the overall pre-acquisition number replacement ratio. Specifically, first count the total pre-acquisition number times Y'a and the total replacement times Z'a of all numbers of the communication service provider in a specific historical time period S, and use the following expression to calculate the overall pre-acquisition number replacement ratio:

[0143] Ha=Y'a / Z'a

[0144] Among them, Ha represents the overall pre-fetch number replacement ratio within a specific historical time period S, and the specific historical time period is one month, three months, six months, or twelve months from the current time to the past.

[0145] Calculate the pre-acquisition number replacement ratio of the application to be processed, specifically calculate the total pre-acquisition number times Y'j and the total replacement times Z'j of all numbers of all APPs connected to the communication service provider in a specific historical time period S, and use the following expression to calculate the pre-acquisition number replacement ratio of the application to be processed:

[0146] Hj=Y'j / Z'j

[0147] Among them, Hj represents the pre-fetch number replacement ratio of the j-th application, that is, the application to be processed, within a specific historical time period S; the specific historical time period is one month, three months, six months, or twelve months from the current time to the past.

[0148] Select the applications whose calculated pre-acquisition number replacement ratio Hj is greater than the overall pre-acquisition number replacement ratio Ha, and calculate the number m of applications whose pre-acquisition number replacement ratio is greater than the overall pre-acquisition number replacement ratio Ha, the total number A of applications of all APPs connected to the communication service provider, and calculate the parameter ratio ,in,

[0149] When the parameter ratio When <1 / 6, the value of r5 is 1 / 10.

[0150] When 1 / 6≤ When <1 / 3, the value of r5 is 1 / 6.

[0151] When 1 / 3≤ <1 / 2, the value of r5 is 1 / 5.

[0152] When 1> ≥1 / 2, the value of r5 is 1 / 3.

[0153] According to an optional implementation, when the time is the first time period, the value of r6 is 4 / 15. The first time period includes specific related activity days and holidays longer than 3 days. For example, theme conferences and technical conferences held by relevant departments and other related events with national influence. Holidays longer than 3 days include National Day, Spring Festival, Labor Day, etc.

[0154] When the time is the second time period, the value of r6 is 1 / 5. The second time period includes holidays of less than three days, activities of communication service providers, and other activities that have an impact on the communication service industry.

[0155] When the time is the third type of time period, the value of r6 is 2 / 15. The third type of time is the time other than the first type of time and the second type of time.

[0156] According to an optional implementation, the weight r corresponding to the first adjustment parameter is calculated 1、 r2, r3, r4, specifically include:

[0157] When the total number of all numbers on the privacy communication platform is L, the number of pre-taken numbers of each number in a specific historical time period S is Y'i, and the number of replacements is Z'i, the pre-taken number replacement ratio of the i-th number is calculated as:

[0158] Hi=Y'i / Z'i.

[0159] Hi represents the pre-taken number replacement ratio of the i-th number in a specific historical time period S; the specific historical time period is one month, three months, six months, or twelve months from the current time to the past;

[0160] According to the calculated pre-taken number replacement ratio, select the number list that is greater than the overall pre-taken number replacement ratio Ha and the total number of numbers in the number list h 总 , calculate the number of user devices in the number list that are commonly used devices h 常设 , calculate the number of numbers h that are commonly used base stations in the number list during number authentication 基站 , calculate the number of numbers in the number list in the common time period h 常时 , calculate the number of numbers h when the client is H5 and the mini program in the number list 接入 , use the following expression to calculate r 1、 r2, r3, r4:

[0161] r1=h 常设 / h 总 *(1-r5-r6);

[0162] r2=h 基站 / h 总 *(1-r5-r6);

[0163] r3=h 常时 / h 总 *(1-r5-r6);

[0164] r4=h 接入 / h 总 *(1-r5-r6).

[0165] Specifically, the commonly used time periods are, for example, 8:00-20:00, 7:00-21:00, and the like.

[0166] According to an optional implementation manner, data analysis is performed on the numbers in a historical time period from the current time to the past for one year, and the weights of each adjustment parameter are determined to be: r1=1 / 15, r2=1 / 15, r3=1 / 10, r4=1 / 3, r5=1 / 6, r6=4 / 15.

[0167] It should be noted that, among the weights of the adjustment parameters determined above, the fourth adjustment parameter O s and the sixth adjustment parameter O opt The value of is large, relative to the weight of other adjustment parameters, it will affect the initial adjustment level O 初始 The numerical impact is greater.

[0168] It should be noted that due to Figure 4 Dynamic privacy protection number display method and method performed by a dynamic privacy protection number display device Figure 1 The method of displaying numbers with dynamic privacy protection in the examples is roughly the same, so the description of the same parts is omitted.

[0169] Compared with the prior art, after receiving the login request for the application APP from the current client, the present invention calls the authentication system for authentication, requests to determine the privacy protection policy of the current client, and specifically determines the user number privacy display protection level, which can effectively solve the risk of privacy information leakage; based on the determined user number privacy display protection level, a one-time service token is further generated, and a corresponding number display template is generated, and the generated one-time service token and number display template are returned to the authentication module of the application APP, and after confirming that the current user has authorized, a corresponding display is performed on the current client of the current user. The formed display is a variety of display forms corresponding to the user, that is, the corresponding display provided according to network security risks and user preferences, which realizes a more effective and customized display method and improves the user experience.

[0170] In addition, the method can provide number authentication display strategies and authorization methods with various privacy protection strengths.

[0171] Figure 5 is a schematic structural diagram of an electronic device according to an embodiment of the present invention.

[0172] like Figure 5 As shown, the electronic device is presented in the form of a general computing device. The processor may be one or more and work in coordination. The present invention does not exclude distributed processing, that is, the processor may be dispersed in different physical devices. The electronic device of the present invention is not limited to a single entity, but may also be the sum of multiple physical devices.

[0173] The memory stores a computer executable program, which is usually a machine-readable code. The computer-readable program can be executed by the processor to enable the electronic device to perform the method of the present invention, or at least part of the steps in the method.

[0174] The memory includes a volatile memory, such as a random access memory unit (RAM) and / or a cache memory unit, and may also be a non-volatile memory, such as a read-only memory unit (ROM).

[0175] Optionally, in this embodiment, the electronic device further includes an I / O interface, which is used for the electronic device to exchange data with an external device. The I / O interface can represent one or more of several types of bus structures, including a storage unit bus or a storage unit controller, a peripheral bus, a graphics acceleration port, a processing unit, or a local bus using any of a variety of bus structures.

[0176] It should be understood that Figure 5The electronic device shown is only an example of the present invention, and the electronic device of the present invention may also include elements or components not shown in the above examples. For example, some electronic devices also include display units such as display screens, and some electronic devices also include human-computer interaction elements such as buttons, keyboards, etc. As long as the electronic device can execute the computer-readable program in the memory to implement the method of the present invention or at least part of the steps of the method, it can be considered as an electronic device covered by the present invention.

[0177] Through the above description of the implementation, it is easy for those skilled in the art to understand that the example implementation described here can be implemented by software, or by combining software with necessary hardware. Figure 6 As shown, the technical solution according to the embodiment of the present invention can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes a number of commands to enable a computing device (which can be a personal computer, a server, or a network device, etc.) to execute the above method according to the embodiment of the present invention.

[0178] The software product may be any combination of one or more readable media. The readable medium may be a readable signal medium or a readable storage medium. The readable storage medium may be, for example, but not limited to, a system, device or component of electricity, magnetism, light, electromagnetic, infrared, or semiconductor, or any combination thereof. More specific examples (non-exhaustive list) of readable storage media include: an electrical connection with one or more wires, a portable disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof.

[0179] The computer readable storage medium may include a data signal propagated in a baseband or as part of a carrier wave, wherein a readable program code is carried. This propagated data signal may take a variety of forms, including but not limited to an electromagnetic signal, an optical signal, or any suitable combination of the above. The readable storage medium may also be any readable medium other than a readable storage medium, which may send, propagate, or transmit a program for use by or in conjunction with a command execution system, device, or device. The program code contained on the readable storage medium may be transmitted using any suitable medium, including but not limited to wireless, wired, optical cable, RF, etc., or any suitable combination of the above.

[0180] Program code for performing the operations of the present invention may be written in any combination of one or more programming languages, including object-oriented programming languages ​​such as Java, C++, etc., and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user computing device, partially on the user device, as a separate software package, partially on the user computing device and partially on a remote computing device, or entirely on a remote computing device or server. In the case of a remote computing device, the remote computing device may be connected to the user computing device through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computing device (e.g., via the Internet using an Internet service provider).

[0181] The computer-readable medium carries one or more programs. When the one or more programs are executed by a device, the computer-readable medium implements the data interaction method of the present disclosure.

[0182] Those skilled in the art will appreciate that the above modules can be distributed in the device according to the description of the embodiment, or can be changed accordingly and only used in one or more devices different from the embodiment. The modules of the above embodiments can be combined into one module, or further divided into multiple sub-modules.

[0183] Through the description of the above embodiments, it is easy for those skilled in the art to understand that the exemplary embodiments described here can be implemented by software, or by software combined with necessary hardware. Therefore, the technical solution according to the embodiment of the present invention can be embodied in the form of a software product, which can be stored in a non-volatile storage medium (which can be a CD-ROM, a USB flash drive, a mobile hard disk, etc.) or on a network, and includes several commands to enable a computing device (which can be a personal computer, a server, a mobile terminal, or a network device, etc.) to execute the method according to the embodiment of the present invention.

[0184] It should be noted that the above detailed descriptions are exemplary and are intended to provide further explanation of the present application. Unless otherwise specified, all technical and scientific terms used herein have the same meaning as commonly understood by those of ordinary skill in the art to which the present application belongs.

[0185] In the above detailed description, reference is made to the accompanying drawings, which form a part of this document. In the accompanying drawings, similar symbols typically identify similar components unless the context indicates otherwise. The illustrated embodiments described in the detailed description, drawings, and claims are not meant to be limiting. Other embodiments may be used, and other changes may be made, without departing from the spirit or scope of the subject matter presented herein.

[0186] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. For those skilled in the art, the present invention may have various modifications and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present invention shall be included in the protection scope of the present invention.

Claims

1. A method for displaying a number with dynamic privacy protection, characterized in that: The method comprises: After receiving the login request from the current client to the application APP, call the authentication system for authentication; During the authentication process, the authentication system is called to determine the privacy protection policy of the current client. Specifically, the privacy protection level of the user number is determined based on the mobile phone number, application ID, the type of software accessed by the client, the user's location, and the user's own privacy protection preference. The authentication system generates a one-time service token based on the determined user number privacy display protection level, and generates a corresponding number display template; The generated one-time service token and number display template are returned to the authentication module of the application APP, and displayed accordingly on the user authorization page of the application APP according to the confirmed number display scheme, wherein: Use the following expression to calculate the user number privacy display protection level: P = B + O; Among them, P represents the user number privacy display protection level corresponding to the current user of the current client; B represents the basic user number privacy display protection level, which is specifically calculated and determined according to the initial user privacy protection level, the minimum privacy protection level, the privacy risk level of the application, and the privacy risk level of the number; O represents the adjustment level for adjusting the basic user number privacy display protection level, which is specifically determined according to the product of multiple adjustment parameters and the weights corresponding to each adjustment parameter, wherein the weight of each adjustment parameter is a dynamic weight; Use the following expression to calculate the privacy risk value of the application in real time, or periodically calculate the privacy risk value of the application offline: R APPID =Y1(APPID,T) / Z1(APPID,T); Among them, R APPID The privacy risk value of the application is used to characterize the ratio of the number of pre-acquisition times Y1 for all users of the APP with the identity identifier APPID accessing the authentication service of the communication service provider within the specified time period T to the final number of service token replacement times Z1, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, one week, half a month, one month or longer; further determine the privacy risk level of the application according to the calculated privacy risk value of the application; The following expression is used to calculate the privacy risk value of the number in real time, or to calculate the privacy risk value of the number offline, and to update the calculated privacy risk value of the number at regular intervals: R UID =Y2(UID,T) / Z2(UID,T); Among them, R UID The privacy risk value of the number used by the user is used to characterize the ratio of the number pre-fetched on all APPs by the number used by the user within a specified time period T Y2 to the final number of service token replacements Z2, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, a week, half a month, a month or longer; further, based on the calculated privacy risk value of the number, the privacy risk level of the number is determined.

2. The method for displaying a number with dynamic privacy protection according to claim 1, characterized in that: include: According to the calculated privacy risk values ​​of the application and the privacy risk values ​​of the number, statistical analysis is performed and sorting is performed to form a privacy risk R value list, wherein the privacy risk R value list corresponds to N privacy risk levels, specifically including the privacy risk level of the application and the privacy risk level of the number, wherein the value of N is a positive integer greater than 1, and the value of N is 3 to 20.

3. The method for displaying a number with dynamic privacy protection according to claim 2, characterized in that: include: The basic user number privacy display protection level is the highest privacy protection level among the minimum privacy protection level, the privacy risk level of the application, the privacy risk level of the number, and the initial user privacy protection level.

4. The method for displaying a number with dynamic privacy protection according to claim 1, characterized in that: include: The following expression is used to calculate and determine the initial adjustment level, and the final adjustment level is obtained based on the initial adjustment level: THE 初始 =r1*O IMEI +r2*O loc +r3*O t +r4*O s +r5*O APPID +r6*O opt ; Among them, O 初始 represents the initial adjustment level for adjusting the privacy display protection level of the basic user number, O IMEI represents a first adjustment parameter, specifically whether the current user equipment is a common equipment, and r1 represents a weight corresponding to the first adjustment parameter; loc represents the second adjustment parameter, specifically whether the current user access base station location is a permanent location, and r2 represents the weight corresponding to the second adjustment parameter; t represents the third adjustment parameter, specifically whether the time when the user equipment is accessed is daytime, and r3 represents the weight corresponding to the third adjustment parameter; s represents the fourth adjustment parameter, specifically the current client access software type, and r4 represents the weight corresponding to the fourth adjustment parameter; APPID represents the fifth adjustment parameter, specifically the specified configuration of the application access channel, and r5 represents the weight corresponding to the fifth adjustment parameter; opt represents a sixth adjustment parameter, specifically, a protection strength determined by the communication service provider according to a security response event, and r6 represents a weight corresponding to the sixth adjustment parameter; Further, the obtained O 初始 The value of is rounded down to get the final adjustment level.

5. The method for displaying a number with dynamic privacy protection according to claim 4, characterized in that: Further including: Calculating the weight r5 corresponding to the fifth adjustment parameter specifically includes: Calculate the overall pre-acquisition number replacement ratio. Specifically, first count the total pre-acquisition number times Y'a and the total replacement times Z'a of all numbers of the communication service provider in a specific historical time period S, and use the following expression to calculate the overall pre-acquisition number replacement ratio: Ha = Y'a / Z'a; Wherein, Ha represents the overall pre-fetch number replacement ratio within a specific historical time period S, and the specific historical time period is one month, three months, six months, or twelve months from the current time to the past; Calculate the pre-acquisition number replacement ratio of the application to be processed, specifically calculate the total pre-acquisition number times Y'j and the total replacement times Z'j of all numbers of all APPs connected to the communication service provider in a specific historical time period S, and use the following expression to calculate the pre-acquisition number replacement ratio of the application to be processed: Hj=Y'j / Z'j; Wherein, Hj represents the pre-fetch number replacement ratio of the j-th application, i.e., the application to be processed, within a specific historical time period S; the specific historical time period is one month, three months, six months, or twelve months from the current time to the past; Select the applications whose calculated pre-acquisition number replacement ratio Hj is greater than the overall pre-acquisition number replacement ratio Ha, and calculate the number m of applications whose pre-acquisition number replacement ratio is greater than the overall pre-acquisition number replacement ratio Ha, the total number A of applications of all APPs connected to the communication service provider, and calculate the parameter ratio ,in When the parameter ratio When <1 / 6, the value of r5 is 1 / 10; When 1 / 6≤ When <1 / 3, the value of r5 is 1 / 6; When 1 / 3≤ <1 / 2, the value of r5 is 1 / 5; When 1> ≥1 / 2, the value of r5 is 1 / 3.

6. The method for displaying a number with dynamic privacy protection according to claim 5, characterized in that: Further including: When the time is the first time period, the value of r6 is 4 / 15. The first time period includes specific related activity days and holidays longer than 3 days; When the time is the second time period, the value of r6 is 1 / 5. The second time period includes holidays less than three days and communication service provider activity periods.

7. The method for displaying a number with dynamic privacy protection according to claim 6, characterized in that: Further including: Calculate the weight r corresponding to the first adjustment parameter 1、 r2, r3, r4, specifically include: When the total number of all numbers on the privacy communication platform is L, the number of pre-taken numbers of each number in a specific historical time period S is Y'i, and the number of replacements is Z'i, the pre-taken number replacement ratio of the i-th number is calculated as: Hi=Y'i / Z'i Hi represents the pre-taken number replacement ratio of the i-th number in a specific historical time period S; the specific historical time period is one month, three months, six months, or twelve months from the current time to the past; According to the calculated pre-taken number replacement ratio, select the number list that is greater than the overall pre-taken number replacement ratio Ha and the total number of numbers in the number list h 总 , calculate the number of user devices in the number list that are commonly used devices h 常设 , calculate the number of numbers h that are commonly used base stations in the number list during number authentication 基站 , calculate the number of numbers in the number list in the common time period h 常时 , calculate the number of numbers h when the client is H5 and the mini program in the number list 接入 , use the following expression to calculate r 1、 r2, r3, r4: r1=h 常设 / h 总 *(1-r5-r6); r2=h 基站 / h 总 *(1-r5-r6); r3=h 常时 / h 总 *(1-r5-r6); r4=h 接入 / h 总 *(1-r5-r6)。 8. A number display device with dynamic privacy protection, characterized in that: It implements the dynamic privacy protection number display method according to any one of claims 1 to 7, and the number display method device comprises: The authentication module, after receiving the current client's login request to the application APP, calls the authentication system for authentication; The judgment module requests to judge the privacy protection policy of the current client during the authentication process of calling the authentication system; specifically, it determines the privacy display protection level of the user number according to the mobile phone number, application identifier, the type of software accessed by the client, the user's location, and the user's own privacy protection preference; A generation module, wherein the authentication system generates a one-time service token based on the determined user number privacy display protection level, and generates a corresponding number display template; The display module returns the generated one-time service token and number display template to the authentication module of the application APP, and displays them on the user authorization page of the application APP according to the confirmed number display scheme, wherein: Use the following expression to calculate the user number privacy display protection level: P = B + O; Among them, P represents the user number privacy display protection level corresponding to the current user of the current client; B represents the basic user number privacy display protection level, which is specifically calculated and determined according to the initial user privacy protection level, the minimum privacy protection level, the privacy risk level of the application, and the privacy risk level of the number; O represents the adjustment level for adjusting the basic user number privacy display protection level, which is specifically determined according to the product of multiple adjustment parameters and the weights corresponding to each adjustment parameter, wherein the weight of each adjustment parameter is a dynamic weight; Use the following expression to calculate the privacy risk value of the application in real time, or periodically calculate the privacy risk value of the application offline: R APPID =Y1(APPID,T) / Z1(APPID,T); Among them, R APPID The privacy risk value of the application is used to characterize the ratio of the number of pre-acquisition times Y1 for all users of the APP with the identity identifier APPID accessing the authentication service of the communication service provider within the specified time period T to the final number of service token replacement times Z1, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, one week, half a month, one month or longer; further determine the privacy risk level of the application according to the calculated privacy risk value of the application; The following expression is used to calculate the privacy risk value of the number in real time, or to calculate the privacy risk value of the number offline, and to update the calculated privacy risk value of the number at regular intervals: R UID =Y2(UID,T) / Z2(UID,T); Among them, R UID The privacy risk value of the number used by the user is used to characterize the ratio of the number pre-fetched on all APPs by the number used by the user within a specified time period T Y2 to the final number of service token replacements Z2, wherein the specified time period T is a specific time calculated from the current time to the past, specifically one day, two days, a week, half a month, a month or longer; further, based on the calculated privacy risk value of the number, the privacy risk level of the number is determined.

Images