Terminal privacy protection method, device, storage medium and electronic device

Abstract

The embodiment of the present application discloses a terminal privacy protection method, device, storage medium and electronic device. The method includes: based on the current terminal, receiving at least one access token sent by the server; determining at least one interaction token, exchanging the at least one access token with at least one interaction token to obtain at least one target access token; wherein the interaction token is used to represent the access tokens of other terminals of the server; sending the at least one target access token to the server for business processing for terminal privacy protection. This technical solution can exchange the used access tokens between terminals, so that the server cannot associate the access token with a specific terminal, thereby protecting user privacy.

Description

Technical Field

[0001] The embodiments of the present application relate to the field of Internet of Things technology, and in particular to a terminal privacy protection method, device, storage medium and electronic device. Background Art

[0002] IoT devices usually need a unique identifier to distinguish them. In order to ensure that the test is legal, the manufacturer needs to save the terminal ID. In this way, in theory, the device manufacturer will know the ID corresponding to a single terminal, which will cause privacy issues. That is, the manufacturer can track all the user's behaviors based on the access token corresponding to the terminal ID.

[0003] Currently, a common practice is that when a device communicates with a manufacturer, the ID is not used directly, but the ID is mapped into another value (ie, a token) through a certain algorithm.

[0004] However, this only protects the privacy of the ID during the transmission phase. On the manufacturer side, the original ID is still required to participate in the calculation when verifying the legitimacy of the mapped value, and the manufacturer can still obtain the user ID through the access token. Summary of the invention

[0005] The embodiments of the present application provide a terminal privacy protection method, device, storage medium and electronic device, which exchange access tokens used between terminals so that the server cannot associate the access token with a specific terminal, thereby protecting user privacy.

[0006] In a first aspect, an embodiment of the present application provides a terminal privacy protection method, the method comprising:

[0007] Based on the current terminal, receiving at least one access token sent by the server;

[0008] Determine at least one interaction token, exchange the at least one access token with the at least one interaction token, and obtain at least one target access token; wherein the interaction token is used to represent the access token of other terminals of the server;

[0009] The at least one target access token is sent to the server for business processing for terminal privacy protection.

[0010] In a second aspect, an embodiment of the present application provides a terminal privacy protection device, the device comprising:

[0011] An access token receiving module, configured to receive at least one access token sent by a server based on a current terminal;

[0012] A target access token obtaining module, used to determine at least one interactive token, and exchange the at least one access token with at least one interactive token to obtain at least one target access token; wherein the interactive token is used to represent the access token of other terminals of the server;

[0013] The target access token sending module is used to send the at least one target access token to the server for business processing for terminal privacy protection.

[0014] In a third aspect, an embodiment of the present application provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the terminal privacy protection method as described in the embodiment of the present application is implemented.

[0015] In a fourth aspect, an embodiment of the present application provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the terminal privacy protection method as described in the embodiment of the present application when executing the computer program.

[0016] The technical solution provided in the embodiment of the present application is based on the current terminal, receives at least one access token sent by the server, determines at least one interaction token, exchanges at least one access token with at least one interaction token, obtains at least one target access token, and then sends at least one target access token to the server for business processing for terminal privacy protection. This technical solution can exchange the used access tokens between terminals, so that the server cannot associate the access token with a specific terminal, thereby protecting user privacy. BRIEF DESCRIPTION OF THE DRAWINGS

[0017] Figure 1 is a flow chart of the terminal privacy protection method provided in Example 1 of the present application;

[0018] Figure 2 is a schematic diagram of the terminal interaction process provided in Example 1 of the present application;

[0019] Figure 3 is a schematic diagram of the terminal privacy protection process provided in Embodiment 2 of the present application;

[0020] Figure 4 It is a schematic diagram of the structure of the terminal privacy protection device provided in the third embodiment of the present application;

[0021] Figure 5 It is a structural schematic diagram of an electronic device provided in Example 5 of the present application. DETAILED DESCRIPTION

[0022] The present application will be further described in detail below in conjunction with the accompanying drawings and embodiments. It is to be understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for ease of description, only the parts related to the present application, rather than all structures, are shown in the accompanying drawings.

[0023] It should be mentioned before discussing the exemplary embodiments in more detail that some exemplary embodiments are described as processes or methods depicted as flow charts. Although the flow charts describe the steps as sequential processes, many of the steps therein can be implemented in parallel, concurrently or simultaneously. In addition, the order of the steps can be rearranged. The process can be terminated when its operation is completed, but can also have additional steps not included in the accompanying drawings. The process can correspond to a method, function, procedure, subroutine, subprogram, etc.

[0024] Embodiment 1

[0025] Figure 1 This is a flowchart of the terminal privacy protection method provided in the first embodiment of the present application. This embodiment can be applied to the situation where the access tokens to be used are exchanged between terminals to protect user privacy. The method can be executed by the terminal privacy protection device provided in the embodiment of the present application. The device can be implemented by software and / or hardware and can be integrated into devices such as smart devices for access token exchange.

[0026] like Figure 1 As shown, the terminal privacy protection method includes:

[0027] S110, receiving at least one access token sent by the server based on the current terminal;

[0028] The access token contains the device's legitimacy identification, which can be used by subsequent devices to link to the server.

[0029] In this solution, after the current terminal goes online, it communicates with the server and obtains an access token sent by the server. Preferably, there are multiple access tokens.

[0030] In the technical solution, optionally, receiving at least one access token sent by the server includes:

[0031] Send the terminal serial number to the server;

[0032] If the terminal serial number meets the terminal validity constraint condition, at least one access token sent by the server is received.

[0033] The terminal legality constraint condition may refer to an encryption constraint condition, that is, determining whether the terminal serial number meets the encryption condition. The terminal legality constraint condition may be set according to the terminal privacy protection requirements. For example, it may be set as an ID number verification condition.

[0034] In this embodiment, the terminal serial number may refer to a device ID. After the terminal goes online for the first time, it communicates with the server through the device ID. The server verifies the legitimacy of the ID and returns at least one access token after the verification is passed.

[0035] By verifying the terminal serial number, the security of terminal interaction can be improved.

[0036] S120, determining at least one interaction token, exchanging the at least one access token with the at least one interaction token, and obtaining at least one target access token; wherein the interaction token is used to represent the access token of other terminals of the server;

[0037] The interactive token may refer to the access token of other terminals of the server. For example, if the other terminals are B and C, the access tokens TokenB1, TokenB2, TokenC1 and TokenC2 corresponding to the other terminals are interactive tokens for access token exchange.

[0038] In this embodiment, after other terminals go online, they communicate with the server, and the server also sends multiple access tokens to other terminals, and uses the access tokens of other terminals as interaction tokens.

[0039] In this solution, the current terminal connects with other terminals. If the connection is successful, it attempts to exchange its own tokens to obtain at least one target access token. For example, assuming that the access tokens of the current terminal are TokenA1, TokenA2, and TokenA3, and the access tokens of other terminals are TokenB1, TokenB2, TokenC1, and TokenC2, after exchanging tokens, the target access tokens obtained by the current terminal may be TokenA1, TokenB1, and TokenC2.

[0040] In the process of exchanging tokens between the current terminal and other terminals, the terminal listens for possible incoming connections. If there are incoming connections, the access tokens are also exchanged.

[0041] In this embodiment, if the current terminal cannot establish a direct connection with other terminals, the current terminal may also establish an indirect connection with other terminals through the server.

[0042] In the technical solution, optionally, exchanging the at least one access token with the at least one interaction token to obtain at least one target access token includes:

[0043] If the at least one interaction token satisfies the token validity constraint condition, the at least one access token is exchanged with the at least one interaction token to obtain at least one target access token.

[0044] The token validity constraint condition may refer to a token encryption condition, that is, if the interaction token satisfies the token encryption condition, at least one access token is exchanged with at least one interaction token.

[0045] In this embodiment, when all access tokens are exchanged, both parties determine the legitimacy of the exchanged access tokens through the public key.

[0046] By judging the legitimacy of the interaction token, illegal access tokens can be avoided during the exchange process, thereby improving the security of server access.

[0047] S130: Send the at least one target access token to a server for business processing to protect terminal privacy.

[0048] In this solution, an access token can be selected from at least one target access token to go online and perform actual business processing with the server.

[0049] Among them, the access token currently in use in the terminal does not participate in the exchange, and the remaining access tokens continue to participate in the exchange.

[0050] In the technical solution, optionally, sending the at least one target access token to the server for business processing includes:

[0051] If it is the first time to send, determine the online token according to the at least one target access token, and send the online token to the server for business processing;

[0052] If it is not the first time to send, the token to be online is determined according to the at least one target access token, and the online token is selected from the tokens to be online and sent to the server for business processing; wherein, the token to be online is used to represent the token in the target access token that has not been processed for business.

[0053] In this embodiment, if the current terminal is online for the first time, an online token is selected from at least one target access token of the current terminal to perform business processing with the server; if the current terminal is not online for the first time, an online token is selected from the remaining target access tokens to perform business processing with the server, that is, after a period of time, the current terminal goes offline and uses another access token to go online again.

[0054] By exchanging the access tokens used between terminals and using different access tokens to conduct business with the server, the server cannot associate the access token with a specific terminal, thereby protecting user privacy.

[0055] For example, Figure 2 is a schematic diagram of the terminal interaction process provided in the first embodiment of the present application, such as Figure 2 As shown, after the current terminal A goes online for the first time, it communicates with the server through the device ID. The server verifies the legitimacy of the ID and returns at least one access token after the verification. The current terminal exchanges at least one access token with at least one access token of another terminal to obtain at least one target access token. The actual business is carried out with the server based on at least one target access token.

[0056] The technical solution provided in the embodiment of the present application is based on the current terminal, receives at least one access token sent by the server, determines at least one interaction token, exchanges at least one access token with at least one interaction token, obtains at least one target access token, and then sends at least one target access token to the server for business processing for terminal privacy protection. By executing this technical solution, the access tokens used can be exchanged between terminals, and different access tokens can be used to process business with the server, so that the server cannot associate the access token with a specific terminal, thereby protecting user privacy.

[0057] Embodiment 2

[0058] Figure 3 This is a schematic diagram of the terminal privacy protection process provided by the second embodiment of the present application. The second embodiment is further optimized on the basis of the first embodiment. The specific optimization is: determining at least one interactive token, including: receiving at least one terminal address sent by the server; based on the at least one terminal address, determining at least one interactive token matching the at least one terminal address. For details not described in detail in this embodiment, please refer to the first embodiment. Figure 3 As shown, the method comprises the following steps:

[0059] S310, receiving at least one access token sent by the server based on the current terminal;

[0060] S320, receiving at least one terminal address sent by the server;

[0061] The terminal address may refer to the address of other terminals in the server except the current terminal, including IP (Internet Protocol) and port.

[0062] In this solution, after the current terminal goes online for the first time, it communicates with the server through the device ID. The server verifies the legitimacy of the ID and returns at least one access token and at least one terminal address after the verification.

[0063] S330, based on the at least one terminal address, determining at least one interactive token matching the at least one terminal address;

[0064] In this solution, when other terminals communicate with the server, they will also receive the access token returned by the server and use the access token as an interaction token.

[0065] In this embodiment, the current terminal selects one of the other terminal addresses given by the server, tries to establish a connection, and if the connection is successful, tries to exchange its own token.

[0066] In the technical solution, optionally, after receiving at least one terminal address sent by the server, the method further includes:

[0067] Based on the at least one terminal address, determining at least one target terminal address corresponding to the at least one terminal address;

[0068] Based on the at least one target terminal address, at least one interaction token matching the at least one target terminal address is determined.

[0069] In this solution, other terminals will receive the target terminal address at the same time as receiving the access token returned by the server. Therefore, after the current terminal connects with other terminals, it obtains the target terminal address corresponding to the other terminal, connects with the target terminal, and exchanges the access token with the target terminal. At this time, the server side has no way of knowing the corresponding relationship of the access token actually saved by the current terminal.

[0070] By exchanging access tokens with the target terminal address, the access tokens used are exchanged between terminals, making it impossible for the server to associate the access token with a specific terminal, thereby protecting user privacy.

[0071] In the technical solution, optionally, exchanging the at least one access token with the at least one interaction token to obtain at least one target access token includes:

[0072] A connection is established with the at least one terminal address and / or at least one target terminal address based on point-to-point technology. If the connection is successful, the at least one access token is exchanged with at least one interaction token to obtain at least one target access token.

[0073] In this solution, the current terminal establishes a P2P connection with other terminals. The current terminal selects one of the terminal addresses given by the server and tries to initiate a connection. If the connection is successful, it tries to exchange its own access token. At the same time, the device listens for possible incoming connections. If there is an incoming connection, it also exchanges tokens. At the same time, the current terminal tries to obtain the address of another terminal from other terminals again, that is, the target terminal address, establishes a connection with the target terminal address, and tries to exchange access tokens.

[0074] The access tokens to be used are exchanged between terminals, making it impossible for the server to associate the access token with a specific terminal, thereby protecting user privacy.

[0075] S340, exchanging the at least one access token with at least one interaction token to obtain at least one target access token; wherein the interaction token is used to represent the access tokens of other terminals of the server;

[0076] S350: Send the at least one target access token to a server for business processing to protect terminal privacy.

[0077] The technical solution provided in the embodiment of the present application is based on the current terminal, receiving at least one access token sent by the server, and receiving at least one terminal address sent by the server, and based on the at least one terminal address, determining at least one interactive token matching the at least one terminal address, and then exchanging at least one access token with at least one interactive token to obtain at least one target access token, and finally sending at least one target access token to the server for business processing for terminal privacy protection. By executing this technical solution, the access tokens used can be exchanged between terminals, and different access tokens can be used to perform business processing with the server, so that the server cannot associate the access token with a specific terminal, thereby protecting user privacy.

[0078] Embodiment 3

[0079] Figure 4 is a schematic diagram of the structure of the terminal privacy protection device provided in the third embodiment of the present application. Figure 4 As shown, the terminal privacy protection device includes:

[0080] The access token receiving module 410 is used to receive at least one access token sent by the server based on the current terminal;

[0081] The target access token obtaining module 420 is used to determine at least one interactive token, and exchange the at least one access token with the at least one interactive token to obtain at least one target access token; wherein the interactive token is used to represent the access token of other terminals of the server;

[0082] The target access token sending module 430 is used to send the at least one target access token to the server for business processing for terminal privacy protection.

[0083] In this technical solution, optionally, the target access token obtaining module 420 includes:

[0084] A terminal address receiving unit, configured to receive at least one terminal address sent by a server;

[0085] The interaction token determination unit is used to determine at least one interaction token matching the at least one terminal address based on the at least one terminal address.

[0086] In this technical solution, optionally, the target access token obtaining module 420 further includes:

[0087] a target terminal address determining unit, configured to determine, based on the at least one terminal address, at least one target terminal address corresponding to the at least one terminal address;

[0088] The interaction token determination unit is used to determine at least one interaction token matching the at least one target terminal address based on the at least one target terminal address.

[0089] In this technical solution, optionally, the target access token obtaining module 420 is specifically used to:

[0090] A connection is established with the at least one terminal address and / or at least one target terminal address based on point-to-point technology. If the connection is successful, the at least one access token is exchanged with at least one interaction token to obtain at least one target access token.

[0091] In this technical solution, optionally, the target access token obtaining module 420 is further used to:

[0092] If the at least one interaction token satisfies the token validity constraint condition, the at least one access token is exchanged with the at least one interaction token to obtain at least one target access token.

[0093] In this technical solution, optionally, the target access token sending module 430 is specifically used to:

[0094] If it is the first time to send, determine the online token according to the at least one target access token, and send the online token to the server for business processing;

[0095] If it is not the first time to send, the token to be online is determined according to the at least one target access token, and the online token is selected from the tokens to be online and sent to the server for business processing; wherein, the token to be online is used to represent the token in the target access token that has not been processed for business.

[0096] In this technical solution, optionally, the access token receiving module 410 is specifically used to:

[0097] Send the terminal serial number to the server;

[0098] If the terminal serial number meets the terminal validity constraint condition, at least one access token sent by the server is received.

[0099] The above-mentioned product can execute the method provided in the embodiment of the present application, and has the corresponding functional modules and beneficial effects of the execution method.

[0100] Embodiment 4

[0101] The embodiment of the present application further provides a storage medium containing computer executable instructions, wherein the computer executable instructions are used to execute a terminal privacy protection method when executed by a computer processor, the method comprising:

[0102] Based on the current terminal, receiving at least one access token sent by the server;

[0103] Determine at least one interaction token, exchange the at least one access token with the at least one interaction token, and obtain at least one target access token; wherein the interaction token is used to represent the access token of other terminals of the server;

[0104] The at least one target access token is sent to the server for business processing for terminal privacy protection.

[0105] Storage medium - any of various types of memory devices or storage devices. The term "storage medium" is intended to include: installation media, such as CD-ROM, floppy disk or tape device; computer system memory or random access memory, such as DRAM, DDR RAM, SRAM, EDO RAM, Rambus RAM, etc.; non-volatile memory, such as flash memory, magnetic media (such as hard disk or optical storage); registers or other similar types of memory elements, etc. The storage medium may also include other types of memory or combinations thereof. In addition, the storage medium may be located in the computer system in which the program is executed, or may be located in a different second computer system, which is connected to the computer system via a network (such as the Internet). The second computer system can provide program instructions to the computer for execution. The term "storage medium" may include two or more storage media that may reside in different locations (for example, in different computer systems connected by a network). The storage medium may store program instructions (for example, embodied as a computer program) that can be executed by one or more processors.

[0106] Of course, the storage medium containing computer executable instructions provided in the embodiment of the present application, whose computer executable instructions are not limited to the terminal privacy protection operations described above, can also execute related operations in the terminal privacy protection method provided in any embodiment of the present application.

[0107] Embodiment 5

[0108] An embodiment of the present application provides an electronic device, in which the terminal privacy protection device provided by the embodiment of the present application can be integrated. Figure 5 Schematic diagram of the structure of an electronic device provided in Embodiment 5 of the present application. Figure 5 As shown, this embodiment provides an electronic device 500, which includes: one or more processors 520; a storage device 510, which is used to store one or more programs. When the one or more programs are executed by the one or more processors 520, the one or more processors 520 implement the terminal privacy protection method provided in the embodiment of the present application. The method includes:

[0109] Based on the current terminal, receiving at least one access token sent by the server;

[0110] Determine at least one interaction token, exchange the at least one access token with the at least one interaction token, and obtain at least one target access token; wherein the interaction token is used to represent the access token of other terminals of the server;

[0111] The at least one target access token is sent to the server for business processing for terminal privacy protection.

[0112] Of course, those skilled in the art can understand that the processor 520 also implements the technical solution of the terminal privacy protection method provided in any embodiment of the present application.

[0113] Figure 5 The electronic device 500 shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0114] like Figure 5 As shown, the electronic device 500 includes a processor 520, a storage device 510, an input device 530, and an output device 540; the number of the processor 520 in the electronic device can be one or more. Figure 5 A processor 520 is taken as an example; the processor 520, the storage device 510, the input device 530 and the output device 540 in the electronic device can be connected via a bus or other means. Figure 5 The connection via bus 550 is taken as an example.

[0115] The storage device 510, as a computer-readable storage medium, can be used to store software programs, computer executable programs and module units, such as program instructions corresponding to the terminal privacy protection method in the embodiment of the present application.

[0116] The storage device 510 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system and at least one application required for a function; the data storage area may store data created according to the use of the device, etc. In addition, the storage device 510 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other non-volatile solid-state storage device. In some instances, the storage device 510 may further include a memory remotely arranged relative to the processor 520, and these remote memories may be connected via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0117] The input device 530 may be used to receive input numbers, character information or voice information, and generate key signal input related to user settings and function control of the electronic device. The output device 540 may include electronic devices such as a display screen and a speaker.

[0118] The electronic device provided by the embodiment of the present application can achieve the purpose of protecting user privacy.

[0119] The terminal privacy protection device, storage medium and electronic device provided in the above embodiments can execute the terminal privacy protection method provided in any embodiment of the present application, and have the corresponding functional modules and beneficial effects of executing the method. For technical details not described in detail in the above embodiments, please refer to the terminal privacy protection method provided in any embodiment of the present application.

[0120] Note that the above are only preferred embodiments of the present application and the technical principles used. Those skilled in the art will understand that the present application is not limited to the specific embodiments described herein, and that various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the scope of protection of the present application. Therefore, although the present application is described in more detail through the above embodiments, the present application is not limited to the above embodiments, and may include more other equivalent embodiments without departing from the concept of the present application, and the scope of the present application is determined by the scope of the appended claims.

Claims

1. A terminal privacy protection method, characterized in that: include: Based on the current terminal, receiving at least one access token sent by the server; Determine at least one interactive token, exchange the at least one access token with the at least one interactive token, and obtain at least one target access token; wherein the interactive token is used to represent the access tokens of other terminals of the server, and the interactive token is also used for the exchange of access tokens between different terminals; Sending the at least one target access token to a server for business processing for terminal privacy protection; The sending of the at least one target access token to the server for business processing includes: If it is the first time to send, determine the online token according to the at least one target access token, and send the online token to the server for business processing; If it is not the first time to send, the token to be online is determined according to the at least one target access token, and the online token is selected from the tokens to be online and sent to the server for business processing; wherein, the token to be online is used to represent the token in the target access token that has not been processed for business.

2. The method according to claim 1, characterized in that Determining at least one interaction token, including: receiving at least one terminal address sent by the server; Based on the at least one terminal address, at least one interaction token matching the at least one terminal address is determined.

3. The method according to claim 2, characterized in that After receiving at least one terminal address sent by the server, the method further includes: Based on the at least one terminal address, determining at least one target terminal address corresponding to the at least one terminal address; Based on the at least one target terminal address, at least one interaction token matching the at least one target terminal address is determined.

4. The method according to claim 3, characterized in that Exchanging the at least one access token with the at least one interaction token to obtain at least one target access token includes: A connection is established with the at least one terminal address and / or at least one target terminal address based on point-to-point technology. If the connection is successful, the at least one access token is exchanged with at least one interaction token to obtain at least one target access token.

5. The method according to claim 1, characterized in that Exchanging the at least one access token with the at least one interaction token to obtain at least one target access token includes: If the at least one interaction token satisfies the token validity constraint condition, the at least one access token is exchanged with the at least one interaction token to obtain at least one target access token.

6. The method according to claim 1, characterized in that Receive at least one access token sent by the server, including: Send the terminal serial number to the server; If the terminal serial number meets the terminal validity constraint condition, at least one access token sent by the server is received.

7. A terminal privacy protection device, characterized in that: include: An access token receiving module, configured to receive at least one access token sent by a server based on a current terminal; A target access token obtaining module, used to determine at least one interactive token, and exchange the at least one access token with the at least one interactive token to obtain at least one target access token; wherein the interactive token is used to represent the access tokens of other terminals of the server, and the interactive token is also used for access token exchange between different terminals; A target access token sending module, used to send the at least one target access token to a server for business processing for terminal privacy protection; Wherein, the target access token sending module is specifically used for: If it is the first time to send, determine the online token according to the at least one target access token, and send the online token to the server for business processing; If it is not the first time to send, the token to be online is determined according to the at least one target access token, and the online token is selected from the tokens to be online and sent to the server for business processing; wherein, the token to be online is used to represent the token in the target access token that has not been processed for business.

8. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the program is executed by a processor, the terminal privacy protection method as described in any one of claims 1 to 6 is implemented.

9. An electronic device comprising a memory, a processor and a computer program stored in the memory and executable on the processor, characterized in that: When the processor executes the computer program, the terminal privacy protection method according to any one of claims 1 to 6 is implemented.

Images