Smart terminal privacy protection method and device

Abstract

The present invention relates to a method and device for protecting privacy information of a smart terminal. The method comprises the following steps: quantitatively evaluating the privacy risk faced by a smart terminal under an existing configuration to generate a privacy risk level L; collecting the privacy preferences of the users of the smart terminal to generate the user privacy preference degree P; calculating the actual privacy cost K after adopting various privacy protection technologies based on the privacy risk level L and the user privacy preference degree P; comparing the actual privacy cost K with a preset threshold T, and if the actual privacy cost K is less than or equal to the preset threshold T, determining the combination of the various privacy protection technologies adopted as a privacy protection strategy S; sending the privacy protection strategy S to an operating system of a smart terminal to inquire whether the user agrees with the privacy protection strategy S; and mapping the privacy protection strategy S to a combination of various privacy protection technologies when the user agrees with the privacy protection strategy S, and notifying the operating system of the smart terminal to enable the various privacy protection technologies.

Description

Technical Field

[0001] The present invention generally relates to the field of mobile terminal applications, and more specifically to a method and device for protecting the privacy of smart terminal users. Background Art

[0002] With the development of artificial intelligence technology, the application of artificial intelligence technologies such as machine learning has greatly expanded the scenarios, scope and amount of personal information collection. The application of artificial intelligence cognitive technologies such as image recognition, speech recognition, and semantic understanding on smart terminals has realized the collection of massive unstructured data. In this intelligent era where everything is connected and everything is media, any artificial intelligence terminal may become a source of content and a window for receiving content, storing a large amount of data that can be mined. Therefore, the problem of personal privacy leakage has become a prominent risk in artificial intelligence governance.

[0003] Compared with traditional big data applications that mainly collect information such as users' online habits and consumption records, applications on artificial intelligence smart terminals can collect richer and more sensitive personal information, including personal sensitive information of biometric features such as user faces, fingerprints, voiceprints, irises, heartbeats, genes, etc. This sensitive information is private, unique, and immutable. Once leaked or abused, it will have a serious impact on citizens' rights and interests.

[0004] In order to attract more developers, the existing terminal application ecosystems such as Android and iOS have exposed more and more APIs at the platform level. These APIs provide access to the hardware functions of smart terminals (including GPS, accelerometers, cameras) and user data (including unique identifiers, locations, social media accounts), most of which are privacy-sensitive information. Although both Android and iOS platforms have permission control mechanisms that allow users to control access to sensitive data and functions, on the one hand, the permission manager does not provide enough information to help users make reasonable judgments and decisions, and on the other hand, for some sensor permissions that receive less attention (such as gravity sensors), the permission manager does not provide permission management, and applications can use them freely. Therefore, relying solely on the operating system's permission manager is far from enough to achieve secure privacy protection.

[0005] Existing smart terminals have privacy security issues such as leakage and abuse of users' personal sensitive privacy information. Summary of the invention

[0006] In order to overcome the above defects, it is necessary to provide an innovative method and device for protecting the privacy of smart terminal users, so as to better protect the privacy of users while providing users with the required applications and services.

[0007] A brief overview of the disclosure is given below in order to provide a basic understanding of some aspects of the disclosure. However, it should be understood that this overview is not an exhaustive overview of the disclosure. It is not intended to identify the key or important parts of the disclosure, nor is it intended to limit the scope of the disclosure. Its purpose is simply to give some concepts of the disclosure in a simplified form as a prelude to a more detailed description given later.

[0008] According to one aspect of the present disclosure, a method for protecting the privacy of smart terminal users is provided, which quantitatively evaluates the privacy risks faced by the smart terminal under the existing configuration to generate a privacy risk level L; collects the privacy preferences of the smart terminal users to generate the user privacy preference degree P; based on the privacy risk level L and the user privacy preference degree P, calculates the actual privacy cost K after adopting various privacy protection technologies; compares the actual privacy cost K with a preset threshold T, and if the actual privacy cost K is less than or equal to the preset threshold T, determines the combination of the various privacy protection technologies adopted as a privacy protection strategy S; sends the privacy protection strategy S to the smart terminal operating system to inquire whether the user agrees to the privacy protection strategy S; and if the user agrees to the privacy protection strategy S, maps the privacy protection strategy S to a combination of various privacy protection technologies, and notifies the smart terminal operating system to enable various privacy protection technologies.

[0009] According to another aspect of the present disclosure, a device for protecting the privacy of a smart terminal user is provided, comprising a privacy risk assessment unit, for quantitatively assessing the privacy risk faced by the smart terminal under its existing configuration to generate a privacy risk level L; a privacy preference collection unit, for collecting the privacy preferences of the smart terminal user to generate a user privacy preference degree P; a privacy policy generation unit, for calculating an actual privacy cost K after adopting various privacy protection technologies based on the terminal privacy risk level L received from the privacy risk assessment unit and the user privacy preference degree P received from the privacy preference collection unit, and determining a combination of various privacy protection technologies as a privacy protection policy S when the actual privacy cost K is less than or equal to a preset threshold value T and sending it to an operating system of the smart terminal to inquire whether the user agrees with the privacy protection policy S; and a privacy management implementation unit, for mapping the privacy protection policy S received from the privacy policy generation unit to a combination of various privacy protection technologies and notifying the operating system of the smart terminal to enable various privacy protection technologies when the user agrees with the privacy protection policy S generated by the privacy policy generation unit.

[0010] According to another aspect of the present disclosure, a smart terminal privacy information protection device is provided, comprising: a memory on which instructions are stored; and a processor configured to execute the instructions stored on the memory to execute the method according to the above aspects of the present disclosure.

[0011] According to another aspect of the present disclosure, a computer-readable storage medium is provided, which includes computer-executable instructions. When the computer-executable instructions are executed by one or more processors, the one or more processors execute the method according to the above aspects of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] The accompanying drawings, which constitute a part of the specification, illustrate embodiments of the present disclosure and, together with the description, serve to explain the principles of the present disclosure.

[0013] The present disclosure may be more clearly understood from the following detailed description with reference to the accompanying drawings, in which:

[0014] Figure 1 A schematic diagram showing the overall architecture of a smart terminal user privacy protection device according to an embodiment of the present disclosure;

[0015] Figure 2 A flowchart showing a method for protecting privacy of a smart terminal user according to an embodiment of the present disclosure; and

[0016] Figure 3 An exemplary configuration of a smart terminal user privacy protection device that can implement an embodiment of the present disclosure is shown. DETAILED DESCRIPTION

[0017] The following detailed description is made with reference to the accompanying drawings, and the following detailed description is provided to assist in a comprehensive understanding of the various exemplary embodiments of the present disclosure. The following description includes various details to assist in understanding, but these details are considered to be examples only and not to limit the present disclosure, which is defined by the appended claims and their equivalents. The words and phrases used in the following description are only used to enable a clear and consistent understanding of the present disclosure. In addition, for the sake of clarity and brevity, descriptions of well-known structures, functions, and configurations may be omitted. Those of ordinary skill in the art will recognize that various changes and modifications may be made to the examples described herein without departing from the spirit and scope of the present disclosure.

[0018] Figure 1 The schematic diagram shows the overall architecture of the smart terminal privacy protection device 100 according to an embodiment of the present disclosure. The smart terminal may be, but is not limited to, a desktop computer, a laptop computer, a tablet computer, a personal data assistant (PDA), a smart phone, a vehicle-mounted computer, or a combination thereof.

[0019] The smart terminal privacy protection device 100 includes a privacy risk assessment unit 101 , a privacy preference collection unit 102 , a privacy policy generation unit 103 and a privacy management implementation unit 104 .

[0020] The privacy risk assessment unit 101 is used to perform a quantitative assessment of the privacy risks faced by the smart terminal under its existing configuration, for example, a quantitative assessment of the use of various privacy permissions by applications installed in the smart terminal, such as the number and frequency of calling permissions, to generate a quantitative expression of the privacy risk of the smart terminal, i.e., the privacy risk level L.

[0021] The privacy preference collection unit 102 is used to collect the privacy preferences of users of smart terminals. Privacy preferences indicate the degree of importance users place on privacy information and reflect the user's subjective intention for privacy protection. Privacy preferences include what privacy information the user allows the smart terminal or its loaded applications to collect, what privacy information is prohibited from being collected, and the frequency of allowing the collection of privacy information. After collecting the user's privacy preferences, the privacy preference collection unit 102 quantifies the privacy preferences through a formal definition. The formal definition includes two items, "privacy content" and "privacy weight". The privacy preference collection unit quantifies and merges all privacy contents according to the privacy weight, and finally generates a quantitative expression of the user's privacy preference, that is, the user's privacy preference degree P. The larger the P, the higher the user's protection demand for his or her own privacy data; the smaller the P, the lower the user's protection demand for his or her own privacy data.

[0022] The privacy policy generation unit 103 receives the privacy risk level L from the privacy risk assessment unit 101 and the user privacy preference P from the privacy preference collection unit 102, and generates an indicator K0 named "initial privacy overhead" according to the two indicators of the terminal privacy risk level L and the user privacy preference P, that is, K0 = αL + βP, where 0≤α≤1, 0≤β≤1, and α+β=1.

[0023] The purpose of the privacy policy generation unit 103 is to generate a privacy protection policy S to reduce the initial privacy cost K0 to below a preset threshold value T. The threshold value T represents the maximum value of the actual privacy cost corresponding to the privacy protection that the user can accept by adopting various privacy protection technologies. Assume that the privacy cost that can be reduced by various privacy protection technologies i (such as system permission call rules, encryption or perturbation of user original privacy data and terminal device information (including but not limited to IMEI number, MAC address), etc.) is K i (i is an integer, i=1, ..., n), then the initial privacy cost K0 minus the privacy cost K saved by using the privacy protection technology i , we get the actual privacy cost K:

[0024]

[0025] Among them, ω i is the weight coefficient, 0≤ω i≤1. If the actual privacy cost K is less than or equal to the threshold T, that is, K≤threshold T, then participate in the calculation of K i The combination of various privacy protection technologies constitutes a privacy protection strategy S that meets the privacy protection requirements.

[0026] The privacy policy generation unit 103 sends the privacy protection policy S to the smart terminal operating system in real time to inquire whether the user agrees with the privacy protection policy S, and transmits the privacy protection policy S to the privacy manager unit 104 if the user agrees with the privacy protection policy S.

[0027] When the user agrees with the privacy protection policy S generated by the privacy policy generation unit 103 , the privacy management implementation unit 104 is used to map the privacy protection policy S to a corresponding combination of various privacy protection technologies and notify the smart terminal operating system to enable these privacy protection technologies.

[0028] Reference now Figure 2 A flowchart describing a privacy protection method for a smart terminal according to an embodiment of the present disclosure is provided.

[0029] The smart terminal enables the privacy protection method each time before installing a new Internet application.

[0030] First, the privacy risk assessment unit 101 and the privacy preference collection unit 102 may perform operations in parallel to generate a privacy risk level L and a user privacy preference degree P respectively.

[0031] In step S21.1, the privacy risk assessment unit 101 performs a quantitative assessment of the privacy risks faced by the smart terminal under its existing configuration. A quantitative assessment is performed on the use of various privacy permissions by the applications installed in the smart terminal, such as the number and frequency of calling permissions, to generate a quantitative expression of the privacy risk of the smart terminal, that is, the privacy risk level L. The privacy risk level L is set to a value between [0-10], where [0-3] is low risk, [4-6] is medium risk, and [7-10] is high risk. In this embodiment, the privacy risk level L belongs to the high risk level, L = 8.

[0032] Then, in step S22.1, the privacy risk assessment unit 101 sends the generated smart terminal privacy risk level L to the privacy policy generation unit 103 of the smart terminal.

[0033] Step S21.2 can be performed in parallel with step S21.1, wherein the privacy preference collection unit 102 collects the privacy preferences of the smart terminal user. Privacy preferences indicate the degree of importance that users place on privacy information and reflect the user's subjective intention for privacy protection. Privacy preferences include what privacy information the user allows the smart terminal or its loaded applications to collect, what privacy information is prohibited from being collected, and the frequency of allowing the collection of privacy information. After collecting the user's privacy preferences, the privacy preference collection unit 102 quantifies the privacy preferences through a formal definition, which includes two items: "privacy content" and "privacy weight". The privacy preference collection unit quantifies and merges all privacy contents according to the privacy weight, and finally generates a quantitative expression of the user's privacy preference, that is, the user's privacy preference degree P.

[0034] The larger the P is, the higher the user's demand for protecting their privacy data is; the smaller the P is, the lower the user's demand for protecting their privacy data is. Set P to a value between [0-10], where [0-3] indicates a low privacy preference, [4-6] indicates a medium privacy preference, and [7-10] indicates a high privacy preference. In this embodiment, the user's privacy preference P belongs to a medium privacy preference, and P=6.

[0035] Then, in step S22.2, the privacy preference collecting unit 102 sends the generated user privacy preference degree P to the privacy policy generating unit 103 of the smart terminal.

[0036] Next, in step S23, the privacy policy generation unit 103 calculates the initial privacy cost K0 according to the privacy risk level L received from the privacy risk assessment unit and the user privacy preference P received from the privacy preference collection unit according to the following formula:

[0037] K0=αL+βP where 0≤α≤1, 0≤β≤1, α+β=1

[0038] In this embodiment, α=β=0.5, and the calculation results are:

[0039] K0=0.5×8+0.5×8=7

[0040] In addition, in another embodiment, the values ​​of α and β may be:

[0041] α=1,β=0

[0042] In this case, the privacy policy generation unit 103 generates the privacy protection policy S by only considering the privacy risk level L generated by quantitatively evaluating the privacy risk faced by the smart terminal under its existing configuration.

[0043] In another embodiment, the values ​​of α and β may be:

[0044] α=0,β=1

[0045] In this case, the privacy policy generation unit 103 generates the privacy protection policy S by only considering the user privacy preference degree P generated according to the privacy preference of the smart terminal user.

[0046] The purpose of the privacy policy generation unit 103 is to generate a privacy protection policy S to reduce the initial privacy cost K0 to below a preset threshold value T. The threshold value T represents the maximum value of the actual privacy cost corresponding to the privacy protection that the user can accept by adopting various privacy protection technologies. In this embodiment, it is assumed that the privacy cost threshold T preset by the user is 5. Since the calculated value 7 of the initial privacy cost K0 is greater than 5, it is necessary to adopt some privacy protection technologies to reduce the actual privacy cost K. It is assumed that various privacy protection technologies i (such as system permission call rules, encryption or perturbation of user original privacy data and terminal device information (including but not limited to IMEI number, MAC address) and other technical processing) can reduce the privacy cost to K. i (i is an integer, i=1, ..., n), then the initial privacy cost K0 minus the privacy cost K saved by using the privacy protection technology i , we get the actual privacy cost K:

[0047]

[0048] ), then the initial privacy cost K0 minus the privacy cost K saved by using various privacy protection technologies i , we get the actual privacy cost K:

[0049]

[0050] Among them, ω i is the weight coefficient, 0≤ω i ≤1. If the actual privacy cost K is less than or equal to the threshold T, that is, K≤T, then the combination of various privacy protection technologies involved in calculating the privacy cost K constitutes a privacy protection strategy S that meets the privacy protection requirements.

[0051] In this embodiment, by analyzing the usage of applications installed on the smart terminal, it is found that most of the loaded applications are non-real-time interactive applications. Therefore, the strategy of reducing the frequency of system privacy permission calls is enabled to reduce the frequency of calls for the three important privacy permissions of "location", "camera" and "read contacts". Assuming that the privacy cost K1 reduced by reducing the frequency of calls for the "location" privacy permission by half is 3, and the weight ω1 is 0.5; the privacy cost K2 reduced by reducing the frequency of calls for the "camera" privacy permission by half is 2, and the weight ω2 is 0.3; the privacy cost K3 reduced by reducing the frequency of calls for the "read contacts" privacy permission by half is 1, and the weight ω3 is 0.2, then the actual privacy cost K is calculated to be:

[0052]

[0053] Since the calculated actual privacy overhead K value of 4.7 is less than the preset threshold T value of 5, the technical combination of reducing the calling frequency of the above three privacy permissions by half can be determined as constituting a privacy protection strategy S, that is, S = {reduce the calling frequency of the three system permissions of "location", "camera" and "read contacts" by half}.

[0054] Then, in step S24, the privacy policy generation unit 103 sends the determined privacy protection policy S to the smart terminal operating system in real time.

[0055] Next, after receiving the privacy policy S, the smart terminal operating system actively prompts the user that in order to control privacy overhead, the call frequency of the three system permissions "location", "camera" and "read contacts" needs to be reduced by half, and asks the user whether he agrees to the privacy protection policy S.

[0056] After obtaining feedback that the user agrees to the privacy protection policy S, the smart terminal operating system feeds back the result of the user's inquiry and consent to the privacy protection policy S to the privacy policy generating unit 103 in step S25 .

[0057] After receiving the result of the inquiry and consent to the privacy protection policy S fed back by the smart terminal operating system, the privacy policy generation unit 103 sends the privacy protection policy S = {reduce the calling frequency of the three system permissions of "location", "camera" and "read contacts" by half} to the privacy management implementation unit 104 in step S26.

[0058] Finally, in step S27, the privacy management implementation unit 104 maps the received privacy protection policy S to a corresponding combination of various privacy protection technologies, and notifies the smart terminal operating system to enable these privacy protection technologies, such as reducing the calling frequency of the three system permissions of "location", "camera" and "read contacts" by half.

[0059] It should be understood that the present invention may not be limited to the above steps, may include additional steps or delete some steps, and the order of the steps may be different. Moreover, the present invention does not need to perform all the above steps, and may only perform a part of the steps for one or more specific purposes.

[0060] It is worth noting that every time a new application is installed on a smart terminal, the smart terminal privacy risk assessment in this disclosure will be triggered, and the privacy protection strategy will be modified in real time based on the latest assessment results, and the corresponding privacy protection technology will be enabled. These privacy protection technologies include, but are not limited to: adjusting the application permissions on the terminal, using encryption and perturbation technologies to process the original privacy data and terminal device information (including but not limited to IMEI number, MAC address), etc., so as to ensure timely protection of user privacy.

[0061] It can be seen that according to the disclosed method and device for protecting user privacy of smart terminals, by quantitatively evaluating the privacy risks under the existing configuration of smart terminals and considering the personalized privacy preferences of users to generate privacy protection strategies, different levels of privacy protection functions can be provided for terminals with different configurations and users with different privacy preferences. In addition, the privacy protection mechanism of the present invention can also provide different levels of privacy protection by only considering the privacy risks under the existing configuration of smart terminals, or by only considering the privacy preferences of users to provide different levels of privacy protection, so as to meet the personalized needs of different users for privacy protection.

[0062] Figure 3 An exemplary configuration of a smart terminal user privacy protection device according to an embodiment of the present invention is shown.

[0063] like Figure 3As shown, the smart terminal user privacy protection device may include one or more elements that may be connected or communicated with the bus 302 via one or more interfaces. The bus 302 may include, but is not limited to, an Industry Standard Architecture (ISA) bus, a Micro Channel Architecture (MCA) bus, an Enhanced ISA (EISA) bus, a Video Electronics Standards Association (VESA) local bus, and a Peripheral Component Interconnect (PCI) bus, etc. The smart terminal user privacy protection device may include, for example, one or more processors 304, one or more input devices 306, and one or more output devices 308. One or more processors 304 may be any kind of processor, and may include, but is not limited to, one or more general-purpose processors or special-purpose processors (such as special-purpose processing chips). The input device 306 may be any type of input device capable of inputting information to a computing device, and may include, but is not limited to, a mouse, a keyboard, a touch screen, a microphone, and / or a remote controller. The output device 308 may be any type of device capable of presenting information, and may include, but is not limited to, a display, a speaker, a video / audio output terminal, a vibrator, and / or a printer.

[0064] The smart terminal user privacy protection device may also include or be connected to a non-transitory storage device 314, which may be any non-transitory storage device that can implement data storage, and may include but is not limited to a disk drive, an optical storage device, a solid-state memory, a floppy disk, a flexible disk, a hard disk, a tape or any other magnetic medium, a compressed disk or any other optical medium, a cache memory and / or any other storage chip or unit, and / or any other medium from which a computer can read data, instructions and / or codes. The smart terminal user privacy protection device may also include a random access memory (RAM) 310 and a read-only memory (ROM) 312. ROM 312 may store programs, utilities or processes to be executed in a non-volatile manner. RAM 310 may provide volatile data storage and store instructions related to the operation of the smart terminal user privacy protection device. The smart terminal user privacy protection device may also include a network / bus interface 316 coupled to a data link 318. The network / bus interface 316 may be any type of device or system capable of enabling communication with an external device and / or network, and may include but is not limited to a modem, a network card, an infrared communication device, a wireless communication device, and / or a chipset (such as a Bluetooth TM equipment, 1302.11 equipment, WiFi equipment, WiMax equipment, cellular communication facilities, etc.).

[0065] Various aspects, embodiments, implementations or features of the foregoing embodiments may be used alone or in any combination. Various aspects of the foregoing embodiments may be implemented by software, hardware or a combination of hardware and software.

[0066] For example, the foregoing embodiments may be embodied as computer readable code on a computer readable medium. A computer readable medium is any data storage device that can store data that can thereafter be read by a computer system. Examples of computer readable media include read-only memory, random access memory, CD-ROM, DVD, magnetic tape, hard drive, solid state drive, and optical data storage device. The computer readable medium may also be distributed in a network coupled computer system so that the computer readable code is stored and executed in a distributed manner.

[0067] For example, the aforementioned embodiments may be in the form of hardware circuits. The hardware circuits may include any combination of combinational logic circuits, clock storage devices (such as floppy disks, flip-flops, latches, etc.), finite state machines, memories such as static random access memories or embedded dynamic random access memories, custom designed circuits, programmable logic arrays, etc.

[0068] Although some embodiments of the present invention have been described in detail by way of example, it will be appreciated by those skilled in the art that the above examples are for illustration only and are not intended to limit the scope of the present invention. It will be appreciated by those skilled in the art that the above embodiments may be modified without departing from the scope and spirit of the present invention. The scope of the present invention is defined by the appended claims.

[0069] Similarly, while operations are depicted in a particular order in the drawings, this should not be understood as requiring that such operations be performed in the particular order shown or in sequential order, or that all illustrated operations be performed to achieve desired results. In certain circumstances, multitasking and parallel processing can be advantageous.

Claims

1. A method for protecting privacy information of a smart terminal, comprising: Quantitatively evaluate the privacy risks faced by smart terminals under existing configurations to generate a privacy risk level L; Collecting the privacy preferences of smart terminal users to generate a user privacy preference degree P; Based on the privacy risk level L and the user's privacy preference P, the actual privacy cost K after adopting various privacy protection technologies is calculated, including: Generate the initial privacy cost K0 according to the privacy risk level L and the user's privacy preference P; If K0>threshold T, the initial privacy cost K0 minus the privacy cost K saved by using various privacy protection technologies is calculated according to the following formula: i , to get the actual privacy cost K: Among them, ω i is the weight coefficient, 0≤ω i ≤1, i is an integer and i=1,…,n, the threshold T represents the maximum value of the actual privacy cost corresponding to the privacy protection that the user can accept by adopting various privacy protection technologies; Compare the actual privacy cost K with the preset threshold T. If the actual privacy cost K is less than or equal to the preset threshold T, determine the combination of the various privacy protection technologies adopted as the privacy protection strategy S; Sending the privacy protection policy S to the smart terminal operating system to ask the user whether to agree with the privacy protection policy S; and When the user agrees to the privacy protection policy S, the privacy protection policy S is mapped to a combination of the various privacy protection technologies, and the smart terminal operating system is notified to enable the various privacy protection technologies.

2. The method for protecting privacy information of a smart terminal according to claim 1, wherein: The initial privacy cost K0 is calculated according to the following formula: K0=αL+Bp where 0≤α≤1, 0≤β≤1, α+β=1.

3. The method for protecting privacy information of a smart terminal according to claim 1 or 2, wherein the step of quantitatively evaluating the privacy risk faced by the smart terminal under the existing configuration to generate a privacy risk level L comprises: A quantitative assessment is conducted on the number and frequency of various privacy-related call permissions of applications installed in smart terminals to generate a quantitative expression of the privacy risk of the smart terminal, namely the privacy risk level L.

4. The method for protecting privacy information of a smart terminal according to claim 1 or 2, wherein: The user's privacy preference includes privacy content and privacy weight. The user's privacy preference P is obtained by quantifying and merging the privacy content according to the privacy weight.

5. The method for protecting privacy information of a smart terminal according to claim 1 or 2, wherein: The privacy risk level L is a value between [0-10], where [0-3] is low risk, [4-6] is medium risk, and [7-10] is high risk.

6. The method for protecting privacy information of a smart terminal according to claim 1 or 2, wherein: The user privacy preference P is a value between [0-10], where [0-3] represents a low privacy preference, [4-6] represents a medium privacy preference, and [7-10] represents a high privacy preference.

7. The method for protecting privacy information of a smart terminal according to claim 1 or 2, wherein: Privacy protection technologies include system permission call rules and the use of encryption or perturbation technology to process user original privacy data and terminal device information.

8. The method for protecting privacy information of a smart terminal according to claim 1 or 2, wherein: For non-real-time interactive applications installed in smart terminals, enable privacy protection technology to reduce the frequency of system privacy permission calls.

9. A smart terminal privacy information protection device (100), comprising: A privacy risk assessment unit (101) is used to quantitatively assess the privacy risk faced by the smart terminal under its existing configuration to generate a privacy risk level L; A privacy preference collection unit (102), used to collect the privacy preferences of the smart terminal users to generate a user privacy preference degree P; The privacy policy generating unit (103) is used to calculate the actual privacy cost K after adopting various privacy protection technologies based on the terminal privacy risk level L received from the privacy risk assessment unit (101) and the user privacy preference P received from the privacy preference collecting unit (102), including: generating an initial privacy cost K0 according to the privacy risk level L and the user privacy preference P; if K0>threshold T, subtracting the privacy cost K saved by adopting various privacy protection technologies from the initial privacy cost K0 according to the following formula: i , to get the actual privacy cost K: Among them, ω i is the weight coefficient, 0≤ω i ≤1, i is an integer and i=1, ..., n, the threshold T represents the maximum value of the actual privacy cost corresponding to the privacy protection that the user can accept by adopting various privacy protection technologies; when the actual privacy cost K is less than or equal to the preset threshold T, the combination of various privacy protection technologies is determined as the privacy protection strategy S and sent to the smart terminal operating system to ask the user whether to agree with the privacy protection strategy S; and The privacy management implementation unit (104) is used to map the privacy protection policy S received from the privacy policy generation unit (103) into a combination of the various privacy protection technologies and notify the smart terminal operating system to enable the various privacy protection technologies when the user agrees with the privacy protection policy S generated by the privacy policy generation unit (103).

10. The smart terminal privacy information protection device according to claim 9, wherein: The initial privacy cost K0 is calculated according to the following formula: K0=αL+βP where 0≤α≤1, 0≤β≤1, α+β=1.

11. A smart terminal privacy information protection device, comprising: a memory having instructions stored therein; as well as A processor configured to execute instructions stored on the memory to perform the method according to any one of claims 1 to 8.

12. A computer-readable storage medium comprising computer-executable instructions, which, when executed by one or more processors, cause the one or more processors to perform the method according to any one of claims 1 to 8.

Images