Method, device, electronic device and storage medium for deleting multiple copies of private information

Abstract

The present invention provides a method, device, electronic device and storage medium for deleting multiple copies of private information, including: obtaining a deletion instruction, the deletion instruction is determined based on a deletion intention; performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, the information to be deleted is determined based on the first information; determining a deletion algorithm based on the deletion instruction and / or the information to be deleted; and deleting the information to be deleted based on the deletion algorithm. The method, device, electronic device and storage medium provided by the present invention can realize information deletion during the entire process of information transmission, thereby ensuring the completeness of information deletion. In this process, the deletion operation is performed based on the deletion instruction under the deletion intention, which can ensure that each subject on the information transmission path can complete the information deletion according to the deletion intention, thereby ensuring the compliance, efficiency and effectiveness of the information deletion operation.

Description

Technical Field

[0001] The present invention relates to the fields of information technology, computer technology, network technology and Internet technology, and in particular to a method, device, electronic device and storage medium for deleting multiple copies of private information. Background Art

[0002] The continuous evolution and in-depth application of communication technology, network technology and computing technology have promoted the intelligent interconnection of all things and the ubiquitous sharing of information. With the continuous evolution of new business forms, frequent cross-border, cross-system and cross-ecosystem exchange of information has become the norm.

[0003] The information contains a large amount of personal privacy data, which is retained intentionally or unintentionally between different systems, resulting in increasingly serious privacy issues. The lack of information protection measures and the difficulty in managing information abuse have attracted people's attention.

[0004] Most of the current information deletion solutions are based on the deterministic deletion of information stored in the server, and cannot meet the need for complete deletion of multiple copies of information when information is dynamically circulated in the Internet of Everything environment. In the process of information circulation, in addition to being stored at the service provider, it may also exist at any circulation node in the collection, storage, use, processing, transaction, transfer, and disclosure links. The deletion solution that only targets the service provider's stored information cannot achieve effective deletion of information. Summary of the invention

[0005] The present invention provides a method, device, electronic device and storage medium for deleting multiple copies of private information, so as to solve the defect that the information deletion scheme in the prior art cannot meet the deletion demand in the information flow process.

[0006] The present invention provides a method for deleting multiple copies of private information, the method being applied to any subject in a transmission path of first information, the method comprising:

[0007] obtaining a deletion instruction, wherein the deletion instruction is determined based on a deletion intention;

[0008] Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0009] Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0010] Based on the deletion algorithm, the information to be deleted is deleted.

[0011] According to a method for deleting multiple copies of private information provided by the present invention, the deletion instruction includes a deletion notification and / or a deletion trigger condition;

[0012] The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information;

[0013] Or, the deletion notification includes one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion notification also includes one or more of the following combinations: a deletion notification confirmation information reply subject, a deletion notification confirmation information reply requirement, and a deletion notification confirmation information reply method;

[0014] The deletion trigger conditions include any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, occurrence of illegal usage, meeting the specified information attributes, and meeting the deletion execution subject.

[0015] According to a method for deleting multiple copies of private information provided by the present invention, the obtaining of a deletion instruction includes:

[0016] receiving the deletion notification, or receiving the deletion notification and returning deletion notification confirmation information;

[0017] And / or, receiving first information and a deletion trigger condition corresponding to the first information.

[0018] According to a method for deleting multiple copies of private information provided by the present invention, performing information search based on the deletion instruction to obtain the information to be deleted corresponding to the deletion instruction includes:

[0019] When the deletion trigger condition is met, information search is performed based on the deletion instruction to obtain the to-be-deleted information corresponding to the deletion instruction.

[0020] According to a method for deleting multiple copies of private information provided by the present invention, performing information search based on the deletion instruction to obtain the information to be deleted corresponding to the deletion instruction includes:

[0021] Based on the attributes of the information to be deleted indicated by the deletion instruction, an information to be deleted search algorithm and / or an information to be deleted copy search algorithm are called to obtain the information to be deleted corresponding to the deletion instruction, wherein the information to be deleted includes the information body and / or the information copy.

[0022] According to a method for deleting multiple copies of private information provided by the present invention, determining a deletion algorithm based on the deletion instruction and / or the information to be deleted includes:

[0023] Based on the deletion method corresponding to one or more information indicated by the deletion instruction, and / or based on the information attributes reflected by the information body and / or the information copy in the information to be deleted, the deletion algorithm selection algorithm is called to determine the deletion algorithms corresponding to the information body and / or the information copy respectively, and the deletion algorithm corresponding to the information body is the same as or different from the deletion algorithm corresponding to the information copy.

[0024] According to a method for deleting multiple copies of private information provided by the present invention, the method deletes the information to be deleted based on the deletion algorithm, and then further includes:

[0025] Performing a deletion consistency assessment on the information body and / or the information copy included in the deletion information to obtain a deletion consistency assessment result;

[0026] The deletion consistency evaluation includes a deletion method consistency evaluation and / or a deletion result consistency evaluation, and the deletion information is the information to be deleted after the deletion is completed;

[0027] The deleting of the consistency assessment result includes any one or more of the following combinations: deleting a consistency assessment result identifier, a consistency assessment subject, a consistency assessment method, and a specific description of a consistency assessment conclusion.

[0028] According to a method for deleting multiple copies of private information provided by the present invention, the method deletes the information to be deleted based on the deletion algorithm, and then further includes:

[0029] Generate deletion confirmation information, and send the deletion confirmation information to at least one of the source subject, the evidence storage subject, and the supervision subject of the deletion instruction;

[0030] The deletion confirmation information includes any one or more of the following combinations: deletion confirmation information identifier, deletion information, deletion execution subject, deletion process record, deletion result, and deletion information confirmation information receiving subject.

[0031] According to a method for deleting multiple copies of private information provided by the present invention, generating deletion confirmation information includes:

[0032] Determine that a deletion process record is generated during the process of deleting the information to be deleted;

[0033] Based on the deletion process record, generating deletion confirmation information;

[0034] The deletion process record includes any combination of one or more of the following: deletion notification, deletion information, deletion algorithm, state before deletion, and state after deletion.

[0035] According to a method for deleting multiple copies of private information provided by the present invention, the step of generating deletion confirmation information further includes:

[0036] Based on at least one of the deletion intention, the deletion instruction, the deletion algorithm, the circulation evidence of the first information, the number of copies actually deleted, the deletion information, the deletion confirmation information, the deletion consistency evaluation result, and the arbitrary subject that executes the deletion, the overall deletion effect is evaluated to obtain an overall deletion effect evaluation result;

[0037] The overall deletion effect evaluation result includes any one or more of the following combinations: a deletion effect evaluation result identifier, a deletion effect evaluation subject, a deletion effect evaluation method, and a specific description of the deletion effect evaluation conclusion.

[0038] A method for deleting multiple copies of private information provided by the present invention also includes:

[0039] Generate a collection of evidence in the process of completing the information to be deleted, the deletion algorithm, the deletion notification, the deletion trigger condition, the deletion confirmation information, the deletion consistency evaluation result, the overall deletion effect evaluation result, and sending and / or receiving at least one of the deletion notification, the deletion trigger condition, and the deletion confirmation information.

[0040] The present invention also provides a method for deleting multiple copies of private information, the method being applied to any subject on a transmission path of first information, the method comprising:

[0041] Get the delete intent;

[0042] A deletion instruction is determined based on the deletion intention, and the deletion instruction is sent to other entities on the transmission path of the first information.

[0043] According to a method for deleting multiple copies of private information provided by the present invention, the step of obtaining the deletion intention includes:

[0044] Receive user input;

[0045] In response to the user input, determining a deletion intention corresponding to the user input;

[0046] The user input may be in the form of at least one of a button, a circle, a check, a mark, a key, a pulley, a menu, voice, video, eye contact, gesture, text, bioelectric signal, and virtual reality.

[0047] According to a method for deleting multiple copies of private information provided by the present invention, the deletion instruction includes a deletion notification;

[0048] The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information;

[0049] Or, the deletion notification includes one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion notification also includes one or more of the following combinations: a deletion notification confirmation information reply subject, a deletion notification confirmation information reply requirement, and a deletion notification confirmation information reply method;

[0050] The determining of the deletion instruction based on the deletion intention includes:

[0051] Generate a deletion trigger condition based on the deletion intention, and if the deletion trigger condition is met, generate the deletion notification based on at least one of the deletion intention, the deletion trigger condition and a pre-built deletion knowledge graph library;

[0052] Alternatively, the deletion notification is generated based on the deletion intention, or based on the deletion intention and the pre-built deletion knowledge graph library;

[0053] The sending the deletion instruction to other entities on the transmission path of the first information includes:

[0054] The deletion notification is sent to other entities on the transmission path of the first information, or the deletion notification and the deletion trigger condition are sent.

[0055] According to a method for deleting multiple copies of private information provided by the present invention, the deletion instruction includes a deletion trigger condition;

[0056] The deletion triggering condition includes any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, illegal use behavior, meeting the specified information attribute, and meeting the deletion execution subject;

[0057] The determining a deletion instruction based on the deletion intention, and sending the deletion instruction to other entities on the transmission path of the first information, includes:

[0058] The deletion trigger condition is determined based on the deletion intention, and the deletion trigger condition is sent to other entities on the transmission path of the first information at the same time as the first information is sent and / or separately without any particular order.

[0059] According to a method for deleting multiple copies of private information provided by the present invention, the method further includes sending the deletion instruction to other entities on the transmission path of the first information, and then:

[0060] Receive deletion confirmation information returned by the other subject, wherein the deletion confirmation information includes any combination of one or more of the following: deletion confirmation information identifier, deletion information identifier, deletion execution subject, deletion process record, deletion result, and deletion confirmation information receiving subject.

[0061] A method for deleting multiple copies of private information provided by the present invention also includes:

[0062] Generate a collection of evidence in the process of completing at least one of the deletion intention, deletion notification, deletion trigger condition, sending the deletion notification, the deletion trigger condition, and receiving the deletion confirmation information.

[0063] The present invention also provides a device for deleting multiple copies of private information, the device is applied to any subject in the transmission path of the first information, and the device includes:

[0064] an instruction acquisition unit, configured to acquire a deletion instruction, wherein the deletion instruction is determined based on a deletion intention;

[0065] an information search unit, configured to search for information based on the deletion instruction, and obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is included in the first information;

[0066] an algorithm determination unit, configured to determine a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0067] A deletion execution unit is used to delete the information to be deleted based on the deletion algorithm.

[0068] The present invention also provides a device for deleting multiple copies of private information, the device is applied to any subject in the transmission path of the first information, and the device includes:

[0069] An intention determination unit, used to obtain a deletion intention;

[0070] An instruction transmission unit is used to determine a deletion instruction based on the deletion intention and send the deletion instruction to other entities on the transmission path of the first information.

[0071] The present invention also provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, the method for deleting multiple copies of privacy information as described above is implemented.

[0072] The present invention also provides a non-transitory computer-readable storage medium on which a computer program is stored. When the computer program is executed by a processor, the method for deleting multiple copies of privacy information as described in any one of the above is implemented.

[0073] The present invention also provides a computer program product, including a computer program, wherein when the computer program is executed by a processor, the method for deleting multiple copies of private information as described above is implemented.

[0074] The method, device, electronic device and storage medium for deleting multiple copies of private information provided by the present invention can ensure that information deletion can be achieved during the entire process of information transmission by executing information deletion by any subject on the transmission path of the first information, thereby ensuring the completeness of information deletion. In this process, the deletion operation is executed based on the deletion instruction under the deletion intention, which can ensure that each subject on the information transmission path can complete the information deletion according to the deletion intention, thereby ensuring the compliance, efficiency and effectiveness of the execution of the information deletion operation. BRIEF DESCRIPTION OF THE DRAWINGS

[0075] In order to more clearly illustrate the technical solutions in the present invention or the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0076] Figure 1 This is one of the flow charts of the method for deleting multiple copies of private information provided by the present invention;

[0077] Figure 2 This is the second flow chart of the method for deleting multiple copies of private information provided by the present invention;

[0078] Figure 3 This is one of the flow charts of the method for automatic information deletion provided by the present invention;

[0079] Figure 4 This is the second flow chart of the method for automatic information deletion provided by the present invention;

[0080] Figure 5 It is a flowchart of the method for deleting information on demand provided by the present invention;

[0081] Figure 6This is one of the structural schematic diagrams of the device for deleting multiple copies of private information provided by the present invention;

[0082] Figure 7 This is the second structural diagram of the device for deleting multiple copies of private information provided by the present invention;

[0083] Figure 8 It is a structural schematic diagram of the electronic device provided by the present invention. DETAILED DESCRIPTION

[0084] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0085] The lack of information protection measures and the difficulty in controlling information abuse have become increasingly prominent, making the right to delete and the right to be forgotten in terms of personal information protection more and more concerning.

[0086] Among them, the right to deletion is the right of the data subject to request the controller to delete his or her personal information. When the data subject withdraws consent or the personal information is no longer needed for the purpose for which it was collected and processed, the data controller can be requested to delete the relevant data. If the controller has already disclosed the data, the controller should consider taking reasonable measures, including technical measures, to inform other data controllers that are processing personal data that the data subject has requested them to delete the data subject's personal information. The data controller and processor should delete the personal information in a definite and irreversible manner.

[0087] The right to be forgotten means that when the retention period agreed upon by the data subject and the controller has expired or the processing purpose has been achieved, and the personal information controller or processor stops providing products or services, the controller or processor should actively delete the personal information. In other words, the personal information will be automatically deleted after being retained by the data controller or processor for a certain period of time or when the agreed deletion trigger conditions are met.

[0088] Most of the existing deletion solutions for personal information are based on the deterministic deletion of information stored in the server, and cannot effectively protect the right to delete information and the right to be forgotten when information is dynamically circulated in the current Internet of Everything environment. In addition to being stored at the service provider, during the circulation of information, the information may exist at any circulation node in the collection, storage, use, processing, transaction, transfer, disclosure and other links. The deletion solution that only targets the service provider's stored information cannot achieve effective deletion of information.

[0089] In response to the above problems, the present invention provides a method for deleting multiple copies of private information, which can be applied to any subject in the transmission path of the first information. Here, the first information is information circulated in the Internet of Everything environment, and there is private information in the first information. On the transmission path of the first information, each subject participating in the transmission of the first information, that is, each flow node, including the node that collects or generates the first information, may store all or part of the first information locally or on an associated storage device. Therefore, when it is necessary to delete all or part of the first information, each subject in the transmission path of the first information needs to execute the corresponding method for deleting multiple copies of private information, thereby ensuring that the information to be deleted in the first information can be completely deleted.

[0090] Figure 1 FIG. 1 is one of the flow charts of the method for deleting multiple copies of private information provided by the present invention. Figure 1 As shown, the execution subject of the method is any subject in the transmission path of the first information. For the convenience of description, the subject is recorded as the current subject below. The method includes:

[0091] Step 110, obtaining a deletion instruction, wherein the deletion instruction is determined based on the deletion intention;

[0092] Specifically, the deletion intention may be acquired by any subject participating in the transmission of the first information. Here, the subject acquiring the deletion intention may be at least one of the generating subject, sending subject, receiving subject, storing subject, using subject, and managing subject of the first information. The subject acquiring the deletion intention may also be a subject participating in at least one of the operations of generating, perceiving, publishing, sharing, receiving, storing, processing, using, managing, and destroying the first information. Here, the subject may be a device, software, or a person.

[0093] The deletion intention refers to part or all of the information that needs to be deleted in the first information. The deletion intention reflects the need to delete the information to be deleted in the first information. The deletion intention may cover at least one of the time of obtaining the deletion intention, the place of obtaining the deletion intention, the subject of obtaining the deletion intention, the content of the information to be deleted, the current deletion constraints, the multi-copy deletion constraints, the deletion evaluation constraints, and the deletion level.

[0094] The deletion instruction is the embodiment of the deletion operation corresponding to the deletion intention. The deletion instruction can be expressed in the form of a deletion notification, that is, the deletion operation that needs to be performed corresponding to the deletion intention is conveyed to each subject in the transmission path of the first information through the deletion notification; the deletion instruction can also be expressed in the form of a deletion trigger condition, that is, the conditions for performing the deletion operation corresponding to the deletion intention and the deletion operation that needs to be performed when the conditions are met are conveyed to each subject in the transmission path of the first information through the deletion trigger condition. The embodiment of the present invention does not make specific limitations on this.

[0095] Regarding the acquisition of the deletion instruction, the subject that obtains the deletion intention may generate the deletion instruction and send the deletion instruction to each subject in the transmission path of the first information, that is, the current subject directly receives the deletion instruction sent by the subject that generates the deletion instruction. Alternatively, the subject that obtains the deletion intention may generate the deletion instruction and send the deletion instruction to the starting subject of the transmission path of the first information, and then each subject in the transmission path transmits the deletion instruction backward one by one according to the rule of the first information transmission, that is, the current subject receives the deletion instruction sent by the previous subject in the first information transmission path. Alternatively, the current subject may directly generate the corresponding deletion instruction according to the deletion intention carried in the first information transmission process. The embodiments of the present invention do not make specific limitations on this.

[0096] It should be noted that the acquisition referred to here may include at least one of receiving, generating, creating, extracting based on existing information, and setting based on existing rules. Taking the acquisition of deletion intent as an example, the acquisition of deletion intent may be receiving deletion intent sent by other subjects, or importing a pre-set deletion intent into the current subject, or generating a deletion intent based on the settings made by the user based on pre-set deletion intent setting rules. The embodiments of the present invention do not specifically limit this.

[0097] Step 120, performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0098] Specifically, after obtaining the deletion instruction, information search can be performed on the storage device locally stored by the current subject and / or connected to the current subject based on the relevant characteristics or attributes of the information to be deleted indicated in the deletion instruction, thereby locating the information to be deleted stored in the storage device locally and / or connected to the current subject during the process of executing the transmission of the first information by the current subject.

[0099] Here, the information to be deleted is associated with the first information, and the information to be deleted may be part or all of the first information, or part or all of the information generated by the first information during the transmission process, and the embodiment of the present invention does not specifically limit this. In addition, the information to be deleted here may be the private information body of the first information during the transmission process, or one or more of the multiple copies of the private information generated by the first information during the transmission process, that is, when the information to be deleted contains multiple copies, multiple copies of the private information can be deleted.

[0100] Step 130, determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0101] Specifically, after determining the deletion instruction and the information to be deleted corresponding to the deletion instruction, a deletion algorithm suitable for the deletion instruction and the information to be deleted can be selected from a large number of candidate deletion algorithms based on the specific requirements indicated in the deletion instruction and the characteristics or attributes of the information to be deleted itself.

[0102] Here, the candidate mass deletion algorithms may include deleting data index, deleting data on storage medium, overwriting data, using desensitization instead of deletion, physical destruction, degaussing and destruction. For example, deleting data index means deleting only the retrieval index of data without clearing the data in the corresponding area on the medium, until the area has new data stored, the old data is overwritten, that is, the occupied storage space is released. Deleting data on the storage medium means clearing the data on the medium while deleting the medium index of the data. Overwriting data means deleting the data medium index, clearing the data on the medium, and then overwriting the area on the corresponding medium, or first overwriting the area on the corresponding medium and then clearing it, or only overwriting the area on the corresponding medium. Using desensitization instead of deletion means combining the classification and grading results of information and the desensitization records, and using desensitization to delete valid information to achieve deletion of information; for example, for audio information, a person's audio can be desensitized by adding noise, and for video information, faces and objects in the video can be desensitized by mosaic. Physical destruction refers to the destruction of storage media that store data using some physical methods, such as crushing, burning, chemical reaction, etc. Degaussing destruction refers to the destruction of information stored on magnetic media.

[0103] Step 140: Delete the information to be deleted based on the deletion algorithm.

[0104] Specifically, after determining the deletion algorithm used to perform the deletion operation, the located information to be deleted can be deleted based on the deletion algorithm, that is, the current subject completes the deletion operation under the deletion intention.

[0105] The method provided by the embodiment of the present invention ensures that information deletion can be achieved during the entire process of information transmission by executing information deletion on any subject on the transmission path of the first information, thereby ensuring the completeness of information deletion. In this process, the deletion operation is executed based on the deletion instruction under the deletion intention, which can ensure that each subject on the information transmission path can complete the information deletion according to the deletion intention, thereby ensuring the compliance, efficiency and effectiveness of the execution of the information deletion operation.

[0106] Based on the above embodiment, the deletion instruction includes a deletion notification and / or a deletion trigger condition.

[0107] Based on any of the above embodiments, when the deletion instruction includes a deletion notification, step 110 includes:

[0108] Receive the deletion notification, or receive the deletion notification and return deletion notification confirmation information.

[0109] Specifically, the deletion notification is a form in which the deletion operation that needs to be executed corresponding to the deletion intention flows between various entities.

[0110] The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information;

[0111] On this basis, the deletion notification may include one or more of the following arbitrary combinations in addition to: deletion notification identifier, deletion command set, deletion notification sending subject, deletion notification sending method, deletion notification confirmation information receiving subject; and may also include one or more of the following arbitrary combinations: deletion notification confirmation information reply subject, deletion notification confirmation information reply requirements, and deletion notification confirmation information reply method.

[0112] The deletion command includes any one or more of the following combinations: deletion method, deletion algorithm, deletion information identifier, deletion information component, and whether evaluation is required after deletion.

[0113] The deletion methods include but are not limited to complete deletion, partial deletion, deletion of data indexes, deletion of data on storage media, overwriting of data, use of desensitization instead of deletion, physical destruction, and demagnetization destruction.

[0114] The information identifier includes but is not limited to a combination of symbols that can identify specific information, and the method of obtaining the information identifier includes but is not limited to a hash algorithm and information feature extraction.

[0115] The subject that generates the deletion notification may directly send the deletion notification to the current subject, or may forward the deletion notification to the current subject through other subjects on the transmission path, so that the current subject may receive the deletion notification.

[0116] The deletion notification sending method includes but is not limited to any combination of one or more of the following: broadcast sending, point-to-point sending, same-level sending, cross-level sending, random sending, and conditional sending.

[0117] The broadcast transmission sends the deletion notification to all subjects in the form of broadcast; the broadcast transmission is applicable to the following situations including but not limited to: there is no specific subject, the subject is unknown;

[0118] The point-to-point sending is used to send the deletion notification to one or more specific subjects;

[0119] The same-level sending is used to send the deletion notice to entities at the same level; the levels include but are not limited to: security level, regional level, network level, and administrative level;

[0120] The same-level sending includes but is not limited to the following: sending the deletion notification to all subjects at the same level, and / or calling the deletion notification receiving subject search algorithm to obtain the deletion notification receiving subject at the same level, and sending the deletion notification to the deletion notification receiving subject at the same level;

[0121] The cross-level sending includes but is not limited to: sending the deletion notice to entities at different levels. The different levels include but are not limited to any combination of one or more of the following: superior, subordinate;

[0122] The cross-level sending includes but is not limited to any combination of one or more of the following: sending the deletion notification to all superior and / or subordinate entities, or the entity calling the deletion notification receiving entity search algorithm to obtain the superior and / or subordinate deletion notification receiving entities, and sending the deletion notification to the superior and / or subordinate deletion notification receiving entities.

[0123] The deletion notification recipient search algorithm obtains the deletion notification recipient based on, but not limited to, any combination of one or more of the following: deletion information identification, deletion information flow status, log, and evidence storage system information, and searches or generates the subject, access path, and access method that stores related deletion information and / or a copy of the deletion information.

[0124] The random sending is used to randomly send the deletion notification to any subject.

[0125] The conditional sending is used to send the deletion notification to the subject that meets the deletion notification receiving condition.

[0126] The deletion notification receiving conditions include but are not limited to: location, network segment, network status, storage status, and CPU usage.

[0127] The timing of sending the deletion notification includes but is not limited to at least one of the following: sending when the deletion notification is generated, sending at an appropriate time after the deletion notification is generated, and sending when a specific condition is met after the deletion notification is generated.

[0128] In addition, after receiving the deletion notification, the current subject may also generate and send deletion notification confirmation information.

[0129] The deletion notification confirmation information includes but is not limited to: deletion notification confirmation information identifier, deletion notification identifier, deletion notification sending subject, deletion notification receiving subject, deletion notification confirmation information sending subject, deletion notification confirmation information receiving subject; the deletion notification confirmation information can be sent to, but is not limited to, any combination of the following subjects: the generating subject of the deletion notification, the sending subject of the superior deletion notification, and all deletion subjects; the deletion notification confirmation information sending method includes but is not limited to: broadcast sending, point-to-point sending, same-level sending, cross-level sending, random sending, and conditional sending. The deletion notification confirmation information sending conditions include but are not limited to: any combination of one or more of time, place, and environment.

[0130] Based on any of the above embodiments, when the deletion instruction includes a deletion trigger condition, step 110 includes:

[0131] First information and a deletion trigger condition corresponding to the first information are received.

[0132] Specifically, the deletion trigger conditions include any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, occurrence of illegal usage, meeting the specified information attributes, and meeting the deletion execution subject.

[0133] For example, when the deletion trigger condition is formed using the "deletion constraint time" element, for example, when the constraint time is "January 4, 2022 21:00", when it is determined that the system time is equal to the constraint time, the corresponding information is deleted.

[0134] For example, the deletion trigger condition is formed by using the "deletion constraint location" element. When a certain location or range is reached, the corresponding information is automatically deleted. For example, when the agreed location is "A City B District", when the information enters this area, the corresponding information will be deleted.

[0135] For example, the deletion trigger condition is formed by using the "device that meets the deletion constraint" element. When the information reaches a certain device or a certain type of device, the corresponding information is automatically deleted. For example, when information A reaches the server of a certain unit, the corresponding information is deleted.

[0136] For example, the deletion trigger condition is formed by using the "deletion constraint network" element. When the information is transmitted to a certain website (including but not limited to Ethernet address) or a certain communication address, the corresponding information is automatically deleted. For example, when information A reaches the website www.weibo.com, or when information A reaches the IP address 220.181.38.149, the corresponding information will be deleted.

[0137] For example, the deletion trigger condition is formed by using the "deletion constraint operation" element, such as "forward, copy, edit, save as", etc. Once such a specified operation is found, the information will be automatically deleted.

[0138] For example, the notification element "received notification" is used to form a deletion trigger condition, and when a certain notification is received, the corresponding information is automatically deleted. For example, when the notification element of the deletion trigger condition is "notification sent by the operator", the corresponding information is deleted after receiving the notification sent by the operator.

[0139] For example, the "illegal use behavior" element is used to constitute a deletion trigger condition. When the current information is not allowed to be posted to a certain social network, the information will be automatically deleted when it is detected that a user is in the process of posting it to the social network.

[0140] For example, the deletion trigger condition is formed by using the element of "meeting the specified information attribute", and the information attribute includes but is not limited to any combination of one or more of the following: information identification, information modality, storage form, storage address, keyword, storage method, sensitivity level, protection level. When the information attribute meets the corresponding condition, the corresponding information is automatically deleted. For example, when the deletion trigger condition meets the specified information attribute = "the information sensitivity level is high", when the sensitivity level of the corresponding information is high, the corresponding information is automatically deleted.

[0141] For example, the deletion trigger condition is formed by using the subject element "conforming to the deletion execution subject". When the subject meets the corresponding condition, the corresponding information is automatically deleted. For example, when the subject element of the deletion trigger condition is "server in Beijing area", when the information flows to the server in Beijing area, the corresponding information is automatically deleted.

[0142] The deletion trigger condition can be circulated with the first information or published to the information system. The deletion trigger condition is described in any combination of one or more of the following methods, including but not limited to: XML description language, regular expression, JSON statement.

[0143] Specifically, in the embodiment of the present invention, the deletion trigger condition may be transmitted along with the first information, so that each subject in the transmission path participating in the transmission of the first information can obtain the deletion trigger condition corresponding to the first information.

[0144] The timing of generating the deletion trigger condition includes but is not limited to: when the deletion intention is successfully acquired, and after the deletion intention is successfully acquired.

[0145] Based on any of the above embodiments, when the deletion instruction includes a deletion trigger condition, step 120 includes:

[0146] When the deletion trigger condition is met, information search is performed based on the deletion instruction to obtain the to-be-deleted information corresponding to the deletion instruction.

[0147] Specifically, after the current subject receives the deletion trigger condition transmitted together with the first information, it can determine whether the deletion trigger condition is currently met. If not, the deletion action is not performed; if it is met, information search is performed based on the deletion instruction to determine the information to be deleted corresponding to the deletion instruction, so as to subsequently perform the deletion operation on the information to be deleted.

[0148] That is, the right to be forgotten for personal information can be achieved through automatic deletion. Automatic deletion here means setting a deletion trigger condition for the first information according to the deletion intention, so as to ensure that each subject on the information transmission path can complete the automatic deletion of the information according to the deletion intention. Further, in the case of a deletion trigger condition, assuming that the deletion trigger condition does not flow with the first information, that is, the deletion trigger condition is at the subject that obtains the deletion intention, then the subject that obtains the deletion intention needs to determine whether the deletion trigger condition is currently met, and if so, generate a deletion notification and send it to each subject; assuming that the deletion trigger condition flows with the first information, that is, each subject has been informed of the deletion trigger condition, then each subject can separately determine whether the deletion trigger condition is currently met, and perform the deletion operation if it is met.

[0149] The right to delete personal information can be achieved through on-demand deletion. On-demand deletion here means setting a deletion notification for the first information based on the deletion intention, thereby ensuring that every subject on the information transmission path can complete the on-demand deletion of the information according to the deletion intention.

[0150] It should be noted that the above-mentioned method of obtaining the deletion instruction includes: receiving a deletion notification, or receiving first information and a deletion trigger condition corresponding to the first information.

[0151] Among them, on-demand deletion is implemented based on the transmission of the deletion notification, and automatic deletion can be implemented based on the transmission of the deletion trigger condition, or by generating a deletion notification based on the deletion trigger condition and then implementing it based on the transmission of the deletion notification. The embodiments of the present invention do not make specific limitations on this.

[0152] Based on any of the above embodiments, step 120 includes:

[0153] Based on the attributes of the information to be deleted indicated by the deletion instruction, an information to be deleted search algorithm and / or an information to be deleted copy search algorithm are called to obtain the information to be deleted corresponding to the deletion instruction, wherein the information to be deleted includes the information body and / or the information copy.

[0154] Specifically, considering that during the information transmission process, what is stored in the current subject may be the main body of each part of the first information, or it may be a copy of each part of the first information. Especially when the current subject involves desensitizing part of the first information, a part of the first information stored in the current subject may have the main body of the information and copies in multiple forms at the same time. Accordingly, when searching for information in response to the deletion instruction, not only the information main body of the information to be deleted can be searched by the information search algorithm to be deleted, but also the information copy search algorithm to be deleted can be applied to search for the information copy of the information to be deleted.

[0155] It should be noted that the information copies here include but are not limited to: re-retention caused by copying and pasting information, derivative information generated after processing information, and result information generated after data use of information. The ways to generate information copies include but are not limited to: preservation, use, processing, publishing, forwarding, transfer, and trading. Among them, preservation includes but is not limited to: re-retention after copying and copying the original information, and the copies generated after data preservation are different from the original information only in the preservation format and information quality. Use includes but is not limited to: using the original information to generate derivative information. Using the original information to generate derivative information includes but is not limited to: using the original information as a training sample for model training, information mining on the original information, and using the original information as a basis for generating other information. Processing includes but is not limited to: modifying the original information to generate modified information. Modifying the original information to generate modified information includes but is not limited to: performing information desensitization operations on the original information, filling the original information, changing the original information, and converting the original information. The said publishing includes but is not limited to: publishing the results related to the original information. The said publishing the results related to the original information includes but is not limited to: publishing the learning model trained with the original information, and publishing the statistical information containing the original information. The forwarding includes but is not limited to transferring the original information or the modified original information to other entities. The transfer includes but is not limited to transferring the original information or the modified original information to other entities. The transaction includes but is not limited to transferring the original information or the modified original information to other entities.

[0156] Specifically, whether to select the to-be-deleted information search algorithm for information search, or to select the to-be-deleted information copy search algorithm for information search, or to select both for information search, can be determined based on the information carried in the deletion instruction, or can be determined based on the rules pre-set by the current subject itself, and the embodiments of the present invention do not make specific limitations on this.

[0157] Here, the algorithm for searching for information to be deleted and / or the algorithm for searching for copies of information to be deleted includes but is not limited to: table lookup, mapping, correlation analysis, and traversal.

[0158] When the algorithm for searching for information to be deleted and / or the algorithm for searching for duplicate information to be deleted are specifically applied to search for information, the attributes of the information to be deleted can be obtained according to the deletion instruction, and the stored information can be compared with the attributes of the information to be deleted by traversal and correlation analysis. The information with a similarity greater than a certain threshold is the information to be deleted. In this process, the traversal range can also be narrowed by table lookup, mapping, etc. It should be noted that the attributes of the information to be deleted can be information identification, information mode, storage form, storage address, keyword, storage method, sensitivity level, protection level, file name, specific paragraph position in the file, file type, etc., and the embodiments of the present invention do not specifically limit this.

[0159] The method provided by the embodiment of the present invention realizes the search for the information body and / or the information copy of the information to be deleted by calling the information search algorithm to be deleted and / or the information copy search algorithm to be deleted, thereby avoiding the problem of deletion omission.

[0160] Based on any of the above embodiments, in step 130, determining a deletion algorithm based on the deletion instruction and / or the information to be deleted includes:

[0161] Based on the deletion method corresponding to one or more information indicated by the deletion instruction, and / or based on the information attributes reflected by the information body and / or the information copy in the information to be deleted, the deletion algorithm selection algorithm is called to determine the deletion algorithms corresponding to the information body and / or the information copy respectively, and the deletion algorithm corresponding to the information body is the same as or different from the deletion algorithm corresponding to the information copy.

[0162] Specifically, a deletion instruction may indicate a deletion method corresponding to one or more information, and the deletion methods corresponding to the one or more information referred to here may be the same or different; and the located information to be deleted may include the information body or the information copy. Since the information body and the information copy may participate in different operations during the information transmission process, the information attributes reflected by the information body and the information copy may be the same or different.

[0163] Therefore, for different information, or different attributes of the same information reflected in the main body and the copy, the deletion algorithm selection algorithm can be called to set corresponding deletion algorithms for the information main body and the information copy, thereby ensuring that the information main body and each copy can achieve differentiated and complete deletion.

[0164] It should be noted that for the original body and copy of the same information, the corresponding deletion algorithms may be the same or different.

[0165] For example, the main body and the copy of the same information may have been desensitized, but the desensitization algorithms used in the desensitization may be different, and the corresponding desensitization effects may also be different, which leads to differences in the content contained in the main body and the copy of the same information, or between the copies. In addition, the storage methods of the main body and the copy of the same information, or between the copies, may also be different. For example, the main body of the information may be stored as a whole, and the copy of the information may be stored in blocks and dispersedly. The above differences will affect the selection of the deletion algorithm. In this regard, in the embodiment of the present invention, more targeted deletion algorithms are selected for the main body of the information and each copy of the information, so as to achieve differentiated deletion, which can ensure the completeness of the deletion without excessively harsh means.

[0166] For example, the information body and the information copy may correspond to different deletion algorithms, and different information copies may also correspond to different deletion algorithms. The severity of different deletion algorithms may also be different. The deletion methods under different deletion algorithms cannot be mixed. When the deletion algorithm is physical destruction, it can be deleted by disassembly, melting, etc., but logical formatting, multiple rewriting or demagnetization and other deletion methods cannot be used.

[0167] Further, the deletion algorithm selection function includes but is not limited to the following methods for selecting a deletion algorithm: mapping table, machine learning;

[0168] The deletion algorithm selection function includes but is not limited to the following steps to select a deletion algorithm: obtaining a set of candidate deletion algorithms according to the deletion method contained in the deletion instruction command in the deletion notification; and selecting the best deletion algorithm from the set of candidate deletion algorithms through a mapping table and / or machine learning according to the attributes of the information to be deleted.

[0169] Among them, the mapping table includes but is not limited to the following methods: constructing a mapping function according to any combination of one or more time, location, application, and subject factors to obtain a deletion algorithm; here, the mapping table comprehensively considers the impact of different factors on the deletion result, and through any combination of different factors, dynamic selection of deletion algorithms in different situations is achieved.

[0170] The input information of the machine learning includes but is not limited to: obtaining a function model for selecting an algorithm to be deleted by any combination of the subject's own historical data, other subjects' historical data, historical data related to the information to be deleted, and historical data of related applications, and obtaining a deletion algorithm according to the function model for selecting an algorithm to be deleted. Through the above machine learning method, it is possible to dynamically select a deletion algorithm according to specific circumstances.

[0171] It should be noted that, when selecting a deletion algorithm based on the deletion algorithm, the deletion method indicated by the deletion instruction and the attributes reflected by the information to be deleted can be used as inputs to the deletion algorithm selection algorithm, wherein the deletion method can specifically be complete deletion, partial deletion, deletion of data index, deletion of data on the storage medium, overwriting of logarithmic data, use of desensitization instead of deletion, physical destruction, demagnetization and destruction, etc., and the attributes reflected by the information to be deleted can specifically be at least one of information identification, information modality, storage form, storage address, keywords, storage method, sensitivity level, protection level, file name, specific paragraph position in the file, and file type.

[0172] In particular, for the case where the data to be deleted contains multiple types of information, such as the case where the information body and information copies are included at the same time, or the case where multiple types of information copies are included at the same time, the deletion algorithm can be selected for each type of information in the information to be deleted according to the attributes reflected by the various types of information in the information to be deleted. The deletion algorithm thus obtained is for each type of information in the information to be deleted. The information body and the information copy can correspond to the same deletion algorithm or different deletion algorithms, and different information copies can correspond to the same deletion algorithm or different deletion algorithms. The embodiments of the present invention do not specifically limit this.

[0173] The method provided by the embodiment of the present invention realizes the refined selection of the deletion algorithm by determining the deletion algorithms corresponding to the information body and / or the information copy respectively, making the deletion operation more flexible and personalized, and helping to further improve the deletion effect.

[0174] Based on any of the above embodiments, in step 140, the information to be deleted is deleted based on the deletion algorithm, and then further includes:

[0175] Performing a deletion consistency assessment on the information body and / or the information copy included in the deletion information to obtain a deletion consistency assessment result;

[0176] The deletion consistency evaluation includes a deletion method consistency evaluation and / or a deletion result consistency evaluation, and the deletion information is the information to be deleted after the deletion is completed.

[0177] Specifically, considering that various information in the information to be deleted may be deleted using different deletion algorithms, after the deletion is completed, it is necessary to perform deletion consistency evaluation on the situations after various information in the information to be deleted is deleted respectively.

[0178] The deletion consistency evaluation here can be implemented by calling the deletion consistency evaluation function. The input of the deletion consistency evaluation function includes but is not limited to one or more of the following combinations: deletion process records, information body in the deletion information, information copies, and all relevant information of the deletion information.

[0179] Deleting the consistency assessment content includes but is not limited to: deleting the consistency assessment of the method and / or deleting the consistency assessment of the result; deleting the consistency assessment result includes but is not limited to: deleting the consistency assessment result identifier, the consistency assessment subject, the consistency assessment method, and the specific description of the consistency assessment conclusion. The assessment conclusion includes but is not limited to: passing the assessment, failing the assessment, and the quantitative value of the assessment result.

[0180] Here, the deletion consistency assessment is used to evaluate and analyze whether the deletion effects of different deletion algorithms used by different information bodies and copies are consistent, and thus determine whether deletion correction is required. This process can be understood as an iterative process, that is, when the deletion consistency assessment result indicates that the deletion effect is inconsistent, the information with a weaker deletion effect needs to change the algorithm or adjust the algorithm parameters, and then re-execute the deletion, and the information with a stronger deletion effect does not need to be re-deleted. In this way, after the re-deletion is completed, the deletion consistency is evaluated again until the new deletion consistency assessment result indicates that the deletion effect is consistent.

[0181] Optionally, the deletion consistency evaluation function also includes deciding whether to adjust the deletion algorithm and / or deletion algorithm parameters of the deletion information, the original information of the deletion information, the derivative information of the deletion information, the modified information of the deletion information, and the copy of the deletion information based on the deletion consistency evaluation records of the deletion information, the original information of the deletion information, the derivative information of the deletion information, the modified information of the deletion information, and the copy of the deletion information, and re-execute the deletion process.

[0182] Based on any of the above embodiments, in step 140, the information to be deleted is deleted based on the deletion algorithm, and then the following steps are further included:

[0183] Generate deletion confirmation information, and send the deletion confirmation information to at least one of the source subject, the evidence storage subject, and the supervision subject of the deletion instruction;

[0184] The deletion confirmation information includes any one or more of the following combinations: deletion confirmation information identifier, deletion information, deletion execution subject, deletion process record, deletion result, and deletion information confirmation information receiving subject.

[0185] Specifically, after the information deletion is completed, deletion confirmation information reflecting the completion of the information deletion can be generated, and the deletion confirmation information can be returned to at least one of the source subject, evidence subject and supervisory subject of the deletion instruction, so that at least one of the source subject, evidence subject and supervisory subject can determine that the current subject has completed the deletion operation.

[0186] Furthermore, when the current subject receives a deletion instruction, the source subject of the deletion instruction is the subject that sent the deletion instruction to the current subject; when the current subject generates a deletion instruction based on the deletion intention, the source subject of the deletion instruction is the subject that sent the deletion intention to the current subject. By returning the deletion confirmation information, the source subject can determine that the information deletion has been completed and end the information deletion monitoring for the current subject. In addition, the evidence subject can generate evidence through the received deletion confirmation information to facilitate subsequent deletion supervision; the supervision subject can also perform deletion supervision through the received deletion confirmation information.

[0187] In the deletion confirmation information, the deletion information is used to indicate the completion of deletion.

[0188] The deletion results include but are not limited to any combination of one or more of the following: deletion result identification, successful deletion according to the deletion method, successful deletion according to other methods, partial deletion, complete deletion, no deletion; the storage location of the deletion confirmation information includes but is not limited to: personal devices, service providers, and third-party organizations.

[0189] Optionally, in order to prevent forgery or denial, authentication information may be added to the deletion confirmation information. The authentication methods that may be used include, but are not limited to, digital signatures, information encryption, and digital watermarks.

[0190] Based on any of the above embodiments, generating deletion confirmation information includes:

[0191] Determine that a deletion process record is generated during the process of deleting the information to be deleted;

[0192] Based on the deletion process record, generating deletion confirmation information;

[0193] The deletion process record includes one or more of the following in any combination: deletion process record identification, deletion notification, deletion information, deletion algorithm, state before deletion, and state after deletion. The deletion information is used to indicate the information of the completion of deletion.

[0194] Based on any of the above embodiments, the generating of deletion confirmation information further includes:

[0195] Based on at least one of the deletion intention, the deletion instruction, the deletion algorithm, the circulation evidence of the first information, the number of copies actually deleted, the deletion information, the deletion confirmation information, the deletion consistency evaluation result, and the arbitrary subject that executes the deletion, the overall deletion effect is evaluated to obtain an overall deletion effect evaluation result;

[0196] The overall deletion effect evaluation result includes any one or more of the following combinations: a deletion effect evaluation result identifier, a deletion effect evaluation subject, a deletion effect evaluation method, and a specific description of the deletion effect evaluation conclusion.

[0197] Specifically, the overall deletion effect evaluation can be implemented through an overall deletion effect evaluation function, and the input of the overall deletion effect evaluation function may include but is not limited to any combination of one or more of the following: the deletion intention, the deletion instruction, the deletion algorithm, the circulation and storage of the first information, the number of copies actually deleted, the deletion information, the deletion confirmation information, the deletion consistency evaluation result and any subject that executes the deletion.

[0198] In the overall deletion effect evaluation result thus obtained, the deletion effect evaluation conclusion may include but is not limited to evaluation pass, evaluation fail, and the quantitative value of the evaluation result.

[0199] Optionally, after obtaining the overall deletion effect evaluation result, you can also decide whether to adjust the deletion algorithm and / or deletion algorithm parameters of the deletion information, the original information of the deletion information, the derivative information of the deletion information, the modified information of the deletion information, and the copy of the deletion information based on the overall deletion effect evaluation result, and / or adjust the deletion system.

[0200] Here, the overall deletion effect evaluation result is used to determine whether to carry out deletion rectification. If the overall deletion effect evaluation result is poor, it is necessary to replace the deletion plan and algorithm system of the entire information system / unit, and delete again until it meets the specific requirements for deletion.

[0201] Based on any of the above embodiments, the method further includes:

[0202] Generate a collection of evidence in the process of completing the information to be deleted, the deletion algorithm, the deletion notification, the deletion trigger condition, the deletion confirmation information, the deletion consistency evaluation result, the overall deletion effect evaluation result, and sending and / or receiving at least one of the deletion notification, the deletion trigger condition, and the deletion confirmation information.

[0203] For deletion instructions, such as deletion trigger conditions in deletion instructions, a deletion trigger condition generation status evidence set can be generated, wherein the content of the deletion trigger condition evidence set includes but is not limited to any combination of one or more of the following: deletion intention, pre-built deletion knowledge graph library, deletion trigger condition generation function, deletion trigger condition generation function running process record, deletion trigger condition, deletion trigger condition generation process record, information corresponding to the deletion trigger condition, and information attributes corresponding to the deletion trigger condition.

[0204] A deletion trigger condition sending status evidence set can also be generated, and the deletion trigger condition sending status evidence set includes but is not limited to any combination of one or more of the following: deletion trigger condition, deletion trigger condition sending time, deletion trigger condition sending condition, deletion trigger condition sending method, deletion trigger condition sending subject, deletion trigger condition receiving subject, and information corresponding to the deletion trigger condition.

[0205] In addition, a deletion trigger condition receiving status evidence set can also be generated, and the deletion trigger condition receiving status evidence set includes but is not limited to any combination of one or more of the following: deletion trigger condition receiving subject, deletion trigger condition, deletion trigger condition confirmation information, deletion trigger condition confirmation information sending method, deletion trigger condition confirmation information generation process record, deletion trigger condition confirmation information receiving subject, deletion trigger condition confirmation information sending time, deletion trigger condition confirmation information sending process record.

[0206] For a deletion instruction, such as a deletion notification in a deletion instruction, a deletion notification generation status evidence set may be generated, and the deletion notification generation status evidence set may include but is not limited to evidence information formed by storing the deletion notification generation status in an evidence storage system. The deletion notification generation status may include but is not limited to any combination of one or more of the following: deletion intention, pre-built deletion knowledge graph library, deletion notification, deletion notification generation process record, deletion notification generation time, and deletion notification generation subject;

[0207] A deletion notification sending status evidence collection may also be generated, including but not limited to any combination of one or more of the following: deletion notification, deletion notification sending timing, deletion notification sending conditions, deletion notification sending method, deletion notification sending subject, and deletion notification receiving subject.

[0208] A deletion notification receipt confirmation evidence collection may also be generated, the contents of which include, but are not limited to, any combination of one or more of the following: deletion notification recipient, deletion notification, deletion notification confirmation information, deletion notification confirmation information sending method, deletion notification confirmation information generation process record, deletion notification confirmation information recipient, deletion notification confirmation information sending time, and deletion notification confirmation information sending process record.

[0209] In order to search for information to be deleted, a deletion information search status evidence set can be generated. The content of the deletion information search status evidence set includes but is not limited to any combination of one or more of the following: deletion notification, deletion trigger condition, search algorithm for information to be deleted, search algorithm for copy of information to be deleted, running process record of search algorithm for information to be deleted, running process record of copy of information to be deleted, information to be deleted, and attributes of information to be deleted.

[0210] For the selection of deletion algorithm, a deletion algorithm selection status evidence set can be generated. The deletion algorithm selection status evidence set includes but is not limited to any combination of one or more of the following: deletion notification, deletion trigger condition, information to be deleted, attributes of information to be deleted, and deletion algorithm.

[0211] For the deletion execution process, a deletion process evidence set can be generated. The deletion process evidence set includes but is not limited to any combination of one or more of the following: deletion algorithm caller, information to be deleted, deletion notification, deletion information, deletion algorithm, status before deletion, status after deletion, and deletion result.

[0212] For the deletion confirmation information, a deletion confirmation evidence set can be generated. The deletion confirmation evidence set includes but is not limited to any combination of one or more of the following: deletion information attributes, deletion execution subject, deletion process record, deletion confirmation subject, and deletion confirmation information.

[0213] In addition, a deletion confirmation information sending evidence set can also be generated. The deletion confirmation information sending evidence set includes but is not limited to any combination of one or more of the following: deletion confirmation information, deletion confirmation information sending time, deletion confirmation information sending conditions, deletion confirmation information sending method, deletion confirmation information sending subject, deletion confirmation information receiving subject, and information corresponding to the deletion confirmation information.

[0214] A deletion confirmation information receiving evidence collection can also be generated, and the deletion confirmation information receiving evidence collection includes but is not limited to any combination of one or more of the following: deletion confirmation information, deletion confirmation information receiving time, deletion confirmation information sending conditions, deletion confirmation information sending method, deletion confirmation information generation process record, deletion confirmation information sending subject, deletion confirmation information receiving subject, deletion confirmation information sending time, deletion confirmation information sending process record, and information corresponding to the deletion confirmation information.

[0215] For deletion of consistency assessment, a deletion consistency assessment evidence set can be generated, which includes but is not limited to any combination of one or more of the following: deletion confirmation information, deletion of consistency assessment subject, deletion of consistency assessment function, deletion of consistency assessment function running process record, deletion of consistency assessment process record, deletion of consistency assessment result generation process record, and deletion of consistency assessment result.

[0216] For the overall deletion effect evaluation, a deletion effect evaluation evidence set can be generated. The deletion effect evaluation evidence set includes but is not limited to any combination of one or more of the following: deletion confirmation information, overall deletion effect evaluation subject, deletion consistency evaluation process record, deletion effect evaluation function, deletion effect evaluation function running process record, overall deletion effect evaluation process record, overall deletion effect evaluation result generation process record, and overall deletion effect evaluation result.

[0217] The method provided by the embodiment of the present invention ensures that each step in the deletion process is traceable by storing deletion evidence throughout the entire life cycle of information deletion, which helps support subsequent supervision work.

[0218] Based on any of the above embodiments, Figure 2 FIG. 2 is a flow chart of the method for deleting multiple copies of private information provided by the present invention. Figure 2 As shown, the execution subject of the method is any subject in the transmission path of the first information. For the convenience of description, the subject is recorded as the current subject below. The method includes:

[0219] Step 210, obtaining deletion intention;

[0220] The deletion intention may be acquired by any subject participating in the transmission of the first information. Here, the subject acquiring the deletion intention may be at least one of the generating subject, sending subject, receiving subject, storing subject, using subject, and managing subject of the first information. The subject acquiring the deletion intention may also be a subject participating in at least one of the operations of generating, perceiving, publishing, sharing, receiving, storing, processing, using, managing, and destroying the first information. Here, the subject may be a device, software, or a person.

[0221] The current subject in the embodiment of the present invention may be a subject that obtains the deletion intention or a subject that receives the deletion intention, and the embodiment of the present invention does not specifically limit this.

[0222] The deletion intention refers to part or all of the information that needs to be deleted in the first information. The deletion intention reflects the need to delete the information to be deleted in the first information. The deletion intention may cover at least one of the time of obtaining the deletion intention, the place of obtaining the deletion intention, the subject of obtaining the deletion intention, the content of the information to be deleted, the current deletion constraints, the multi-copy deletion constraints, the deletion evaluation constraints, and the deletion level.

[0223] Step 220: Determine a deletion instruction based on the deletion intention, and send the deletion instruction to other entities on the transmission path of the first information.

[0224] Specifically, after obtaining the deletion intention, the current subject can generate a deletion instruction corresponding to the deletion intention. The deletion instruction here is the embodiment of the deletion operation corresponding to the deletion intention. The deletion instruction can be expressed in the form of a deletion notification, that is, the deletion operation that needs to be performed corresponding to the deletion intention is conveyed to each subject in the transmission path of the first information through the deletion notification; the deletion instruction can also be expressed in the form of a deletion trigger condition, that is, the conditions for executing the deletion operation corresponding to the deletion intention and the deletion operation that needs to be performed when the conditions are met are conveyed to each subject in the transmission path of the first information through the deletion trigger condition. The embodiment of the present invention does not make specific limitations on this.

[0225] After the deletion instruction is generated, the deletion instruction can be sent to other subjects on the transmission path of the first information, so that other subjects can perform deletion operations that meet the deletion intention according to the received deletion instruction. Here, with respect to the sending of the deletion instruction, specifically, the current subject can directly transmit the deletion instruction to each subject on the transmission path of the first information in the form of broadcast, or directly transmit the deletion instruction to the subject that needs to perform the deletion operation on the transmission path of the first information in the form of cross-level, point-to-point propagation, etc., or the current subject can send the deletion instruction to the starting subject of the transmission path of the first information, and then each subject in the transmission path transmits the deletion instruction backward one by one according to the rule of the first information transmission, that is, each subject receives the deletion instruction sent by the previous subject on the transmission path of the first information, and the embodiment of the present invention does not make specific limitations on this.

[0226] After receiving the deletion instruction, other subjects can search for information in the storage devices stored locally and / or connected to other subjects based on the relevant features or attributes of the information to be deleted indicated in the deletion instruction, so as to locate the information to be deleted in the first information stored locally and / or in the storage devices connected to the current subject during the transmission of the first information by other subjects. After determining the deletion instruction and the information to be deleted corresponding to the deletion instruction, other subjects can select a deletion algorithm suitable for the deletion instruction and the information to be deleted from a large number of candidate deletion algorithms based on the specific requirements indicated in the deletion instruction and the features or attributes of the information to be deleted itself, and delete the located information to be deleted based on the deletion algorithm, thereby completing the information deletion.

[0227] The method provided by the embodiment of the present invention ensures that information deletion can be achieved during the entire process of information transmission by executing information deletion by any subject on the transmission path of the first information, thereby ensuring the completeness of information deletion. In this process, the deletion operation is executed based on the deletion instruction under the deletion intention, which can ensure that each subject on the information transmission path can complete the information deletion according to the deletion intention, thereby ensuring the compliance, efficiency and effectiveness of the execution of the information deletion operation.

[0228] Based on any of the above embodiments, step 210 includes:

[0229] Receive user input;

[0230] In response to the user input, determining a deletion intention corresponding to the user input;

[0231] The user input may be in the form of at least one of a button, a circle, a check, a mark, a key, a pulley, a menu, voice, video, eye contact, a gesture, text, a bioelectric signal, and virtual reality. Here, the user input may be reflected as input based on a physical switch, such as an up and down toggle key, a left and right toggle key, or may be reflected as input independent of a physical switch, such as a screen gesture (left to right, right to left, up to down, down to up, etc.), a pop-up interface filling (such as form entry), a file (such as XML, JSON format) import, voice entry, and the like.

[0232] Specifically, the user can input the intention to delete by interacting with the current subject, that is, the user can input the intention to delete by at least one of the following acquisition methods: buttons, circles, ticks, marks, keys, pulleys, menus, voice, video, eye contact, gestures, text, bioelectric signals, and virtual reality. The acquisition time of the intention to delete can be pre-set by category before the first information is collected and / or disseminated, while the first information is collected and / or disseminated, and before and / or after the first information is collected.

[0233] The deletion intention thus obtained may cover at least one of the time of obtaining the deletion intention, the place of obtaining the deletion intention, the subject of obtaining the deletion intention, the information content to be deleted, the current deletion constraints, the multi-copy deletion constraints, the deletion evaluation constraints, and the deletion level.

[0234] The deletion intention acquisition time is used to identify the time when the deletion intention is acquired.

[0235] The deletion intention acquisition location is used to identify the location where the deletion intention is acquired.

[0236] The information content to be deleted, i.e. the information to be deleted, can be the entire document, or an object, or a fragment of a document. The information content to be deleted is usually a set. If the set is empty, the deletion intention applies to all information; when the set is not empty, the deletion intention applies only to the information in the set, including but not limited to any combination of one or more of the following: text deletion information, audio deletion information, video deletion information, image deletion information, picture deletion information, location / track deletion information, web page deletion information, form deletion information, and library table deletion information.

[0237] The deletion constraints include but are not limited to any combination of one or more of the following: the time when deletion should be completed, deletion at a designated location, deletion method, automatic deletion upon notification, deletion after the number of uses has expired, deletion due to unauthorized use, information attributes, and deletion execution subject.

[0238] The multiple copy deletion constraints include, but are not limited to, any combination of one or more of the following: deletion granularity, deletion level, deletion after the agreed upper limit of the number of times is reached, deletion according to the passed deletion conditions, deletion algorithm identifier, deletion algorithm and its parameters. Among them, the deletion granularity includes, but is not limited to, full deletion and partial deletion.

[0239] Deletion evaluation constraints include but are not limited to any combination of one or more of the following: deletion of consistency evaluation content, deletion of consistency evaluation granularity, deletion of consistency evaluation frequency, overall deletion of effect evaluation content, overall deletion of effect evaluation granularity, and overall deletion of effect evaluation frequency.

[0240] The deletion level includes, but is not limited to, any combination of one or more of the following: high, medium, low, and no deletion. The deletion level can be represented in different ways, and the representation method is not limited. For example, the deletion level can also be represented in digital form.

[0241] The timing of receiving user input to determine the intention to delete includes, but is not limited to, any combination of one or more of the following: pre-acquisition before the first information is collected, acquisition for the current collection before the collection is performed, acquisition after the first information is collected, acquisition of the collected first information before sending / exchanging it externally, and acquisition of the collected first information after sending / exchanging it externally;

[0242] When the user initializes the system, the system can also adaptively and / or delete the intent according to a predefined policy;

[0243] It should be noted that the acquisition referred to here may include at least one of receiving, generating, creating, extracting based on existing information, and setting based on existing rules.

[0244] Optionally, the deletion intention is obtained by the information subject in a way including but not limited to: a smart terminal, a computer client, and an information collector system.

[0245] As an example, the received user input may be implemented in the following form:

[0246] For example, when the deletion trigger condition is acquired by using a button, the user acquires / selects the deletion intention by clicking a button, and the acquisition of the deletion intention is completed through a combination of one and / or multiple buttons.

[0247] For example, when using the circling method to obtain the deletion intention, a pen or hand is used to circle the optional items on the screen to complete the acquisition of the deletion intention.

[0248] For example, when the deletion intention is acquired by checking the box, a check is made on an existing menu to complete the acquisition of the deletion intention.

[0249] For example, when using marking to obtain the deletion intention, use underline, bold, or yellow under the text or option to complete the acquisition of the deletion intention.

[0250] For example, when using voice to obtain the deletion intention, the user expresses his or her deletion intention through voice input, and the deletion intention is obtained by recording the input voice.

[0251] For example, when using bioelectric signals to obtain the deletion intention, the deletion intention is obtained by capturing any combination of one or more of the following, including but not limited to, electroencephalogram, electrocardiogram, electromyography, electrogastric electricity, and retinal electricity.

[0252] For example, when using eye contact to obtain the deletion trigger condition, the user's acquisition intention is understood by following the gaze, and the deletion intention is obtained;

[0253] For example, when using gestures to obtain the deletion trigger condition, the deletion trigger condition is obtained by capturing the changes in the shape and direction of the user's hand;

[0254] For example, when using VR technology (Virtual Reality) to acquire the deletion trigger condition, the acquisition of the deletion trigger condition is completed through a VR device;

[0255] For example, when using a pop-up interface to fill in and obtain the deletion trigger condition, fill in and enter it through the pop-up interface of the system or application;

[0256] For example, when using file import to obtain deletion trigger conditions, import is performed through the device external interface or network transmission;

[0257] For example, when the deletion intention is acquired by using a pulley, the deletion intention is acquired by performing any combination of one or more operations including but not limited to pushing up, pushing down, sliding left, and sliding right on the pulley.

[0258] Based on any of the above embodiments, the deletion instruction includes a deletion notification;

[0259] The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information;

[0260] Or, the deletion notification includes one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion notification also includes one or more of the following combinations: a deletion notification confirmation information reply subject, a deletion notification confirmation information reply requirement, and a deletion notification confirmation information reply method;

[0261] The deletion command includes one or more of the following arbitrary combinations: deletion method, deletion algorithm, deletion information component, and whether evaluation is required after deletion.

[0262] The deletion notification may be stored in the following manners: stored separately or stored together with the information.

[0263] Accordingly, in step 220, determining a deletion instruction based on the deletion intention includes:

[0264] Generate a deletion trigger condition based on the deletion intention, and if the deletion trigger condition is met, generate the deletion notification based on at least one of the deletion intention, the deletion trigger condition and a pre-built deletion knowledge graph library;

[0265] Alternatively, the deletion notification is generated based on the deletion intention, or based on the deletion intention and the pre-built deletion knowledge graph library.

[0266] Specifically, the right to be forgotten with respect to personal information can be achieved through automatic deletion. Automatic deletion here means setting a deletion trigger condition for the first information according to the deletion intention, thereby ensuring that every subject on the information transmission path can complete the automatic deletion of the information in accordance with the deletion intention.

[0267] In the case of automatic deletion, the current subject can generate a deletion trigger condition based on the deletion intention, and when the deletion trigger condition is met, that is, when it is determined that the deletion operation needs to be performed, a deletion notification is generated and sent to other subjects.

[0268] In this process, the deletion trigger condition can be generated according to the deletion intention, or in combination with the deletion intention and the pre-built deletion knowledge graph library. Here, the generation of the deletion trigger condition can be achieved by calling the deletion trigger condition generation function.

[0269] Among them, the pre-built deletion knowledge graph library refers to a collection of deletion knowledge graphs, and the generation method of the pre-built deletion knowledge graph library includes but is not limited to any one or a combination of the following methods: deletion trigger conditions can be generated according to deletion standards, and the deletion trigger conditions can be converted into deletion knowledge graphs; deletion trigger conditions can also be generated according to deletion intentions, and the deletion trigger conditions can be converted into deletion knowledge graphs; new deletion knowledge graphs can also be generated based on deletion intentions and existing deletion knowledge graphs; new deletion knowledge graphs can also be generated based on a combination of existing deletion knowledge graphs.

[0270] The deletion knowledge graph includes but is not limited to any combination of one or more of the following: deletion intention, deletion standard, deletion algorithm, deletion information component, deletion information component feature, deletion level, and deletion rule;

[0271] Among them, the deleted information components refer to the components after the complete information is segmented. Different information components can correspond to different features. For example, the entire word document can be regarded as a complete information. The text, pictures, tables, etc. in the word document can be regarded as different types of information components. Different types of information components can correspond to the same or different deletion methods.

[0272] The deletion trigger condition generation function includes but is not limited to one or more of the following combinations: keyword matching and natural language processing.

[0273] Furthermore, the deletion trigger condition generation function can be called to generate new deletion trigger conditions according to the deletion intention and / or the pre-built deletion knowledge graph library and the existing deletion trigger conditions. It should be noted that such situations often occur when the deletion intention or the pre-built deletion knowledge graph library is changed.

[0274] After the deletion trigger condition is generated, that is, when it is determined that the deletion trigger condition is met, the deletion notification can be further generated based on at least one of the deletion intention, the deletion trigger condition, and the pre-built deletion knowledge graph library. In other words, the generation of the deletion notification can be performed on the premise that the deletion trigger condition is met, that is, the satisfaction of the deletion trigger condition can trigger the generation of the deletion notification. In addition, the generation of the deletion notification can also be performed at any time without the triggering of the deletion trigger condition.

[0275] The right to delete personal information can be achieved through on-demand deletion. On-demand deletion here means setting a deletion notification for the first information based on the deletion intention, thereby ensuring that every subject on the information transmission path can complete the on-demand deletion of the information according to the deletion intention.

[0276] In this process, the deletion notification can be directly determined based on the deletion intention without generating the deletion trigger condition. In addition, in the process of generating the deletion notification, the pre-built deletion knowledge graph library can also be used as a reference.

[0277] Based on any of the foregoing embodiments, when the deletion instruction includes a deletion notification, in step 220, sending the deletion instruction to other entities on the transmission path of the first information includes:

[0278] Sending a deletion notification to other entities on the transmission path of the first information, or sending the deletion notification and the deletion trigger condition;

[0279] The deletion notification sending method includes but is not limited to: broadcast sending, point-to-point sending, same-level sending, cross-level sending, random sending, and conditional sending.

[0280] The timing of sending the deletion notification includes but is not limited to the following situations: sending when the deletion notification is generated, sending at an appropriate time after the deletion notification is generated, and sending when specific conditions are met after the deletion notification is generated;

[0281] Optionally, after receiving the deletion notification, the deletion notification recipient generates and sends deletion notification confirmation information.

[0282] The deletion notification confirmation information includes but is not limited to: deletion notification confirmation information identifier, deletion notification identifier, deletion notification sending subject, deletion notification receiving subject, deletion notification confirmation information sending subject, deletion notification confirmation information receiving subject;

[0283] The deletion notification confirmation information may be sent to any combination of the following entities, including but not limited to: the entity that generates the deletion notification, the entity that sends the superior deletion notification, and all deletion entities. The deletion entity here refers to the entity that performs the deletion operation.

[0284] Based on any of the above embodiments, the deletion instruction includes a deletion trigger condition;

[0285] The deletion triggering condition includes any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, illegal use behavior, meeting the specified information attribute, and meeting the deletion execution subject;

[0286] In step 220, determining a deletion instruction based on the deletion intention and sending the deletion instruction to other entities on the transmission path of the first information includes:

[0287] The deletion trigger condition is determined based on the deletion intention, and the deletion trigger condition is sent to other entities on the transmission path of the first information at the same time as the first information is sent, and / or separately, without any particular order.

[0288] Specifically, the right to be forgotten with respect to personal information can be achieved through automatic deletion. Automatic deletion here means setting a deletion trigger condition for the first information according to the deletion intention, thereby ensuring that every subject on the information transmission path can complete the automatic deletion of the information in accordance with the deletion intention.

[0289] In the case of automatic deletion, the current subject can generate a deletion trigger condition based on the deletion intention and send the deletion trigger condition to other subjects.

[0290] Here, the deletion trigger condition may be published or circulated together with the first information and / or the deletion notification, or the deletion trigger condition may be published or circulated separately without being synchronized with the first information and / or the deletion notification.

[0291] Based on any of the above embodiments, in step 220, the sending of the deletion instruction to other entities on the transmission path of the first information further includes:

[0292] Receive deletion confirmation information returned by the other subject, wherein the deletion confirmation information includes any combination of one or more of the following: deletion confirmation information identifier, deletion information identifier, deletion execution subject, deletion process record, deletion result, and deletion confirmation information receiving subject.

[0293] Specifically, after completing the information deletion, the other subjects may generate deletion confirmation information reflecting the completion of the information deletion, and return the deletion confirmation information to the current subject.

[0294] The current subject can receive deletion confirmation information from other subjects after completing the deletion. When receiving the deletion confirmation information, the current subject can determine that the information deletion has been completed on the subject that returns the deletion confirmation information.

[0295] Based on any of the above embodiments, the method further includes:

[0296] Generate a collection of evidence in the process of completing at least one of the deletion intention, deletion notification, deletion trigger condition, sending the deletion notification, the deletion trigger condition, and receiving the deletion confirmation information.

[0297] Specifically, for the deletion intention, a deletion intention evidence set can be generated, the content of the deletion intention evidence set including but not limited to any combination of one or more of the following: the time of obtaining the deletion intention, the place of obtaining the deletion intention, the subject of obtaining the deletion intention, the method of obtaining the deletion intention, the information content to be deleted, the current deletion constraints, the multi-copy deletion constraints, the deletion evaluation constraints, the deletion level, the information corresponding to the deletion intention, and the information attributes corresponding to the deletion intention.

[0298] For the deletion notification in the deletion instruction, a deletion notification evidence collection may be generated, the content of which includes but is not limited to any combination of one or more of the following: deletion intention, pre-built deletion knowledge graph library, deletion notification, deletion notification generation time, deletion notification generation subject, deletion notification sending timing, deletion notification sending conditions, deletion notification sending method, deletion notification receiving subject, deletion notification confirmation information, deletion notification confirmation information sending method, deletion notification confirmation information receiving subject, deletion notification confirmation information sending time. The deletion notification evidence information thus formed may cover one or more of the deletion notification, deletion notification generation process record, deletion notification sending process record, and deletion notification confirmation process record.

[0299] Furthermore, for the status of deletion notification generation, a deletion notification generation status evidence collection can be generated, including the deletion notification, the generation process of the deletion notification, the deletion intention, the pre-built deletion knowledge graph library, the deletion notification generation time, and the deletion notification generation subject.

[0300] For the status of deletion notification sending, a deletion notification sending status evidence collection can be generated, including deletion notification, deletion notification sending timing, deletion notification sending conditions, deletion notification sending method, deletion notification sending subject, deletion notification receiving subject.

[0301] For the deletion trigger conditions in the deletion instruction, a deletion trigger condition evidence set can be generated. The deletion trigger condition evidence set may include the deletion trigger conditions, the generation process of the deletion trigger conditions, the deletion intention, and one or more information in the pre-built deletion knowledge graph library.

[0302] A deletion trigger condition sending status evidence set can also be generated, and the deletion trigger condition sending status evidence set includes but is not limited to any combination of one or more of the following: deletion trigger condition, deletion trigger condition sending time, deletion trigger condition sending condition, deletion trigger condition sending method, deletion trigger condition sending subject, deletion trigger condition receiving subject, and information corresponding to the deletion trigger condition.

[0303] For the deletion confirmation information, a deletion confirmation evidence set can be generated. The deletion confirmation evidence set includes but is not limited to any combination of one or more of the following: deletion information attributes, deletion execution subject, deletion process record, deletion confirmation subject, and deletion confirmation information.

[0304] In addition, a deletion confirmation information receiving status evidence set can also be generated, and the deletion confirmation information receiving status evidence set includes but is not limited to any combination of one or more of the following: deletion confirmation information, deletion confirmation information receiving time, deletion confirmation information sending conditions, deletion confirmation information sending method, deletion confirmation information generation process record, deletion confirmation information sending subject, deletion confirmation information receiving subject, deletion confirmation information sending time, deletion confirmation information sending process record, and information corresponding to the deletion confirmation information.

[0305] Based on any of the above embodiments, Figure 3 FIG. 1 is one of the flow charts of the method for automatically deleting information provided by the present invention, such as Figure 3 As shown, the automatic deletion method includes the following steps:

[0306] Step 310: the intent acquisition subject receives user input, and in response to the user input, determines a deletion intent corresponding to the user input.

[0307] Step 320, the intent acquisition subject generates a deletion trigger condition based on the deletion intent, or based on the deletion intent and a pre-built deletion knowledge graph library.

[0308] Step 330: When the deletion trigger condition is met, the intended acquisition subject generates a deletion notification and sends the deletion notification to each subject on the transmission path of the first information.

[0309] In step 340, each subject searches for information based on the deletion notification to obtain the information to be deleted, and determines a deletion algorithm based on the deletion instruction and / or the information to be deleted, deletes the information to be deleted based on the deletion algorithm, and generates deletion confirmation information after the deletion is completed.

[0310] Step 350: Each subject performs a deletion consistency assessment on the information entity and / or the information copy included in the deletion information based on the deletion confirmation information to obtain a deletion consistency assessment result.

[0311] In step 360, each subject evaluates the overall deletion effect based on the deletion intention, the deletion instruction, the deletion algorithm, the circulation and storage of the first information, the number of copies actually deleted, the deletion confirmation information, the deletion consistency assessment result and at least one of the arbitrary subjects that execute the deletion, and obtains an overall deletion effect assessment result.

[0312] Based on any of the above embodiments, Figure 4 FIG. 2 is a flow chart of the automatic information deletion method provided by the present invention. Figure 4 As shown, the automatic deletion method includes the following steps:

[0313] Step 410: the intent acquisition subject receives user input, and in response to the user input, determines a deletion intent corresponding to the user input.

[0314] Step 420, the intent acquisition subject generates a deletion trigger condition based on the deletion intent, or based on the deletion intent and a pre-built deletion knowledge graph library.

[0315] In step 430, the subject intending to obtain the deletion trigger condition sends the deletion trigger condition along with the first information to each subject on the transmission path of the first information.

[0316] In step 440, each subject receives a deletion trigger condition, and when the deletion trigger condition is met, performs information search to obtain the information to be deleted, and determines a deletion algorithm based on the deletion trigger condition and the information to be deleted, and deletes the information to be deleted based on the deletion algorithm, and generates deletion confirmation information after the deletion is completed.

[0317] Step 450: Each subject performs a deletion consistency assessment on the information entity and / or the information copy included in the deletion information based on the deletion confirmation information to obtain a deletion consistency assessment result.

[0318] In step 460, each subject evaluates the overall deletion effect based on the deletion intention, the deletion instruction, the deletion algorithm, the circulation and storage of the first information, the number of copies actually deleted, the deletion confirmation information, the deletion consistency assessment result and at least one of the arbitrary subjects that execute the deletion, and obtains an overall deletion effect assessment result.

[0319] Based on any of the above embodiments, Figure 5 : is a flow chart of the method for deleting information on demand provided by the present invention, such as Figure 5 As shown, the on-demand deletion method includes the following steps:

[0320] Step 510: the intent acquisition subject receives user input, and in response to the user input, determines a deletion intent corresponding to the user input.

[0321] Step 520, the intent acquisition subject generates a deletion notification based on the deletion intent, or based on the deletion intent and a pre-built deletion knowledge graph library.

[0322] Step 530: The subject intending to obtain the information sends a deletion notification to each subject on the transmission path of the first information.

[0323] In step 540, each subject searches for information based on the deletion notification to obtain the information to be deleted, and determines a deletion algorithm based on the deletion instruction and / or the information to be deleted, deletes the information to be deleted based on the deletion algorithm, and generates deletion confirmation information after the deletion is completed.

[0324] Step 550: Each subject performs a deletion consistency assessment on the information entity and / or the information copy included in the deletion information based on the deletion confirmation information to obtain a deletion consistency assessment result.

[0325] In step 560, each subject evaluates the overall deletion effect based on the deletion intention, the deletion instruction, the deletion algorithm, the circulation and storage of the first information, the number of copies actually deleted, the deletion confirmation information, the deletion consistency assessment result and at least one of the arbitrary subjects that execute the deletion, and obtains an overall deletion effect assessment result.

[0326] The multiple copies deletion device of the privacy information provided by the present invention is described below. The multiple copies deletion device of the privacy information described below and the multiple copies deletion method of the privacy information described above can be referred to each other.

[0327] Figure 6 is one of the structural diagrams of the device for deleting multiple copies of private information provided by the present invention, such as Figure 6 As shown, the device is applied to any subject in the transmission path of the first information, and the device includes:

[0328] An instruction acquisition unit 610, configured to acquire a deletion instruction, wherein the deletion instruction is determined based on a deletion intention;

[0329] An information search unit 620, configured to search for information based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is included in the first information;

[0330] An algorithm determination unit 630, configured to determine a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0331] The deletion execution unit 640 is configured to delete the information to be deleted based on the deletion algorithm.

[0332] Based on any of the above embodiments, the deletion instruction includes a deletion notification and / or a deletion trigger condition;

[0333] The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information;

[0334] Or, the deletion notification includes one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion notification also includes one or more of the following combinations: a deletion notification confirmation information reply subject, a deletion notification confirmation information reply requirement, and a deletion notification confirmation information reply method;

[0335] The deletion trigger conditions include any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, occurrence of illegal usage, meeting the specified information attributes, and meeting the deletion execution subject.

[0336] Based on any of the above embodiments, the instruction fetching unit is used for:

[0337] receiving the deletion notification, or receiving the deletion notification and returning deletion notification confirmation information;

[0338] And / or, receiving first information and a deletion trigger condition corresponding to the first information.

[0339] Based on any of the above embodiments, the information searching unit is used for:

[0340] When the deletion trigger condition is met, information search is performed based on the deletion instruction to obtain the to-be-deleted information corresponding to the deletion instruction.

[0341] Based on any of the above embodiments, the information searching unit is used for:

[0342] Based on the attributes of the information to be deleted indicated by the deletion instruction, an information to be deleted search algorithm and / or an information to be deleted copy search algorithm are called to obtain the information to be deleted corresponding to the deletion instruction, wherein the information to be deleted includes the information body and / or the information copy.

[0343] Based on any of the above embodiments, the algorithm determination unit is used to:

[0344] Based on the deletion method corresponding to one or more information indicated by the deletion instruction, and / or based on the information attributes reflected by the information body and / or the information copy in the information to be deleted, the deletion algorithm selection algorithm is called to determine the deletion algorithms corresponding to the information body and / or the information copy respectively, and the deletion algorithm corresponding to the information body is the same as or different from the deletion algorithm corresponding to the information copy.

[0345] Based on any of the above embodiments, the method further includes a consistency evaluation unit, which is used to:

[0346] Performing a deletion consistency assessment on the information body and / or the information copy included in the deletion information to obtain a deletion consistency assessment result;

[0347] The deletion consistency evaluation includes a deletion method consistency evaluation and / or a deletion result consistency evaluation, and the deletion information is the information to be deleted after the deletion is completed;

[0348] The deleting of the consistency assessment result includes any one or more of the following combinations: deleting a consistency assessment result identifier, a consistency assessment subject, a consistency assessment method, and a specific description of a consistency assessment conclusion.

[0349] Based on any of the above embodiments, it further includes a deletion confirmation unit, which is used to:

[0350] Generate deletion confirmation information, and send the deletion confirmation information to at least one of the source subject, the evidence storage subject, and the supervision subject of the deletion instruction;

[0351] The deletion confirmation information includes any one or more of the following combinations: deletion confirmation information identifier, deletion information, deletion execution subject, deletion process record, deletion result, and deletion information confirmation information receiving subject.

[0352] Based on any of the above embodiments, the deletion confirmation unit is used to:

[0353] Determine that a deletion process record is generated during the process of deleting the information to be deleted;

[0354] Based on the deletion process record, generating deletion confirmation information;

[0355] The deletion process record includes any combination of one or more of the following: deletion notification, deletion information, deletion algorithm, state before deletion, and state after deletion.

[0356] Based on any of the above embodiments, it further includes an overall evaluation unit, which is used for:

[0357] Based on at least one of the deletion intention, the deletion instruction, the deletion algorithm, the circulation evidence of the first information, the number of copies actually deleted, the deletion information, the deletion confirmation information, the deletion consistency evaluation result, and the arbitrary subject that executes the deletion, the overall deletion effect is evaluated to obtain an overall deletion effect evaluation result;

[0358] The overall deletion effect evaluation result includes any one or more of the following combinations: a deletion effect evaluation result identifier, a deletion effect evaluation subject, a deletion effect evaluation method, and a specific description of the deletion effect evaluation conclusion.

[0359] Based on any of the above embodiments, it also includes a first evidence storage unit, which is used to:

[0360] Generate a collection of evidence in the process of completing the information to be deleted, the deletion algorithm, the deletion notification, the deletion trigger condition, the deletion confirmation information, the deletion consistency evaluation result, the overall deletion effect evaluation result, and sending and / or receiving at least one of the deletion notification, the deletion trigger condition, and the deletion confirmation information.

[0361] Figure 7 This is a second structural diagram of the device for deleting multiple copies of private information provided by the present invention. Figure 7 As shown, the device is applied to any subject in the transmission path of the first information, and the device includes:

[0362] An intention determination unit 710, used to obtain a deletion intention;

[0363] The instruction transmission unit 720 determines a deletion instruction based on the deletion intention, and sends the deletion instruction to other entities on the transmission path of the first information.

[0364] Based on any of the above embodiments, the intention determination unit is used to:

[0365] Receive user input;

[0366] In response to the user input, determining a deletion intention corresponding to the user input;

[0367] The user input may be in the form of at least one of a button, a circle, a check, a mark, a key, a pulley, a menu, voice, video, eye contact, gesture, text, bioelectric signal, and virtual reality.

[0368] Based on any of the above embodiments, the deletion instruction includes a deletion notification;

[0369] The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information;

[0370] Or, the deletion notification includes one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion notification also includes one or more of the following combinations: a deletion notification confirmation information reply subject, a deletion notification confirmation information reply requirement, and a deletion notification confirmation information reply method;

[0371] The instruction transmission unit is used for:

[0372] Generate a deletion trigger condition based on the deletion intention, and if the deletion trigger condition is met, generate the deletion notification based on at least one of the deletion intention, the deletion trigger condition and a pre-built deletion knowledge graph library;

[0373] Alternatively, the deletion notification is generated based on the deletion intention, or based on the deletion intention and the pre-built deletion knowledge graph library;

[0374] The deletion notification is sent to other entities on the transmission path of the first information, or the deletion notification and the deletion trigger condition are sent.

[0375] Based on any of the above embodiments, the deletion instruction includes a deletion trigger condition;

[0376] The deletion triggering condition includes any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, illegal use behavior, meeting the specified information attribute, and meeting the deletion execution subject;

[0377] The instruction transmission unit is used for:

[0378] The deletion trigger condition is determined based on the deletion intention, and the deletion trigger condition is sent to other entities on the transmission path of the first information at the same time as the first information is sent and / or separately without any particular order.

[0379] Based on any of the above embodiments, the device further includes a confirmation receiving unit, configured to:

[0380] Receive deletion confirmation information returned by the other subject, wherein the deletion confirmation information includes any combination of one or more of the following: deletion confirmation information identifier, deletion information identifier, deletion execution subject, deletion process record, deletion result, and deletion confirmation information receiving subject.

[0381] Based on any of the above embodiments, the device further includes a second evidence storage unit, which is used to:

[0382] Generate a collection of evidence in the process of completing at least one of the deletion intention, deletion notification, deletion trigger condition, sending the deletion notification, the deletion trigger condition, and receiving the deletion confirmation information.

[0383] Figure 8 An example of a physical structure diagram of an electronic device is shown in FIG. Figure 8 As shown, the electronic device may include: a processor 810, a communication interface 820, a memory 830 and a communication bus 840, wherein the processor 810, the communication interface 820 and the memory 830 communicate with each other through the communication bus 840. The processor 810 may call the logic instructions in the memory 830 to execute the method for deleting multiple copies of private information, and the method includes:

[0384] obtaining a deletion instruction, wherein the deletion instruction is determined based on a deletion intention;

[0385] Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0386] Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0387] Based on the deletion algorithm, the information to be deleted is deleted.

[0388] Alternatively, the method comprises:

[0389] Get the delete intent;

[0390] A deletion instruction is determined based on the deletion intention, and the deletion instruction is sent to other entities on the transmission path of the first information.

[0391] In addition, the logic instructions in the above-mentioned memory 830 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on such an understanding, the technical solution of the present invention, in essence, or the part that contributes to the prior art or the part of the technical solution, can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present invention. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk and other media that can store program codes.

[0392] On the other hand, the present invention further provides a computer program product, the computer program product comprising a computer program, the computer program can be stored in a non-transitory computer-readable storage medium, when the computer program is executed by a processor, the computer can execute the multiple copies of privacy information provided by the above methods, the method comprising:

[0393] obtaining a deletion instruction, wherein the deletion instruction is determined based on a deletion intention;

[0394] Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0395] Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0396] Based on the deletion algorithm, the information to be deleted is deleted.

[0397] Alternatively, the method comprises:

[0398] Get the delete intent;

[0399] A deletion instruction is determined based on the deletion intention, and the deletion instruction is sent to other entities on the transmission path of the first information.

[0400] In another aspect, the present invention further provides a non-transitory computer-readable storage medium having a computer program stored thereon, which is implemented when the computer program is executed by a processor to execute the multiple copies of privacy information deletion method provided by the above methods, the method comprising:

[0401] obtaining a deletion instruction, wherein the deletion instruction is determined based on a deletion intention;

[0402] Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is determined based on the first information;

[0403] Determining a deletion algorithm based on the deletion instruction and / or the information to be deleted;

[0404] Based on the deletion algorithm, the information to be deleted is deleted.

[0405] Alternatively, the method comprises:

[0406] Get the delete intent;

[0407] A deletion instruction is determined based on the deletion intention, and the deletion instruction is sent to other entities on the transmission path of the first information.

[0408] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0409] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, it can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiments.

[0410] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit it. Although the present invention has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present invention.

Claims

1. A method for deleting multiple copies of private information, characterized in that: The method is applied to any subject in the transmission path of the first information, and the method includes: Obtaining a deletion instruction, where the deletion instruction is determined based on a deletion intention, where the deletion intention reflects a deletion requirement for the information to be deleted in the first information; Performing information search based on the deletion instruction to obtain information to be deleted corresponding to the deletion instruction, the information to be deleted is determined based on the first information, the information to be deleted includes the private information body of the first information during the transmission process, and one or more of multiple copies of the private information generated during the transmission process of the first information, the copies including one or more of the following: retained information caused by copying and pasting the information, derivative information generated after processing the information, and result information generated after data use of the information; Based on the deletion instruction and the information to be deleted, determining a deletion algorithm from candidate deletion algorithms, wherein the candidate deletion algorithms include at least two of deleting data indexes, deleting data on storage media, overwriting data, using desensitization instead of deletion, physical destruction, and degaussing destruction; Based on the deletion algorithm, deleting the information to be deleted; The determining of a deletion algorithm from candidate deletion algorithms based on the deletion instruction and the information to be deleted includes: Based on the deletion methods corresponding to one or more information indicated by the deletion instruction and the information attributes reflected by the information body and the information copy in the information to be deleted, the deletion algorithm selection algorithm is called to determine the deletion algorithms corresponding to the information body and the information copy respectively. The deletion algorithm corresponding to the information body is the same as or different from the deletion algorithm corresponding to the information copy.

2. The method for deleting multiple copies of private information according to claim 1, characterized in that: The deletion instruction includes a deletion notification and / or a deletion trigger condition; The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information; Or, the deletion notification includes one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion notification also includes one or more of the following combinations: a deletion notification confirmation information reply subject, a deletion notification confirmation information reply requirement, and a deletion notification confirmation information reply method; The deletion trigger conditions include any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, occurrence of illegal usage, meeting the specified information attributes, and meeting the deletion execution subject.

3. The method for deleting multiple copies of private information according to claim 2, characterized in that: The obtaining of the deletion instruction comprises: receiving the deletion notification, or receiving the deletion notification and returning deletion notification confirmation information; And / or, receiving first information and a deletion trigger condition corresponding to the first information.

4. The method for deleting multiple copies of private information according to claim 2, characterized in that: The performing information search based on the deletion instruction to obtain the to-be-deleted information corresponding to the deletion instruction includes: When the deletion trigger condition is met, information search is performed based on the deletion instruction to obtain the to-be-deleted information corresponding to the deletion instruction.

5. The method for deleting multiple copies of private information according to any one of claims 1 to 4, characterized in that: The performing information search based on the deletion instruction to obtain the to-be-deleted information corresponding to the deletion instruction includes: Based on the attributes of the information to be deleted indicated by the deletion instruction, an information to be deleted search algorithm and / or an information to be deleted copy search algorithm are called to obtain the information to be deleted corresponding to the deletion instruction, wherein the information to be deleted includes the information body and / or the information copy.

6. The method for deleting multiple copies of private information according to claim 5, characterized in that: The deleting the information to be deleted based on the deletion algorithm further comprises: Performing a deletion consistency assessment on the information body and / or the information copy included in the deletion information to obtain a deletion consistency assessment result; The deletion consistency evaluation includes a deletion method consistency evaluation and / or a deletion result consistency evaluation, and the deletion information is the information to be deleted after the deletion is completed; The deleting of the consistency assessment result includes any one or more of the following combinations: deleting a consistency assessment result identifier, a consistency assessment subject, a consistency assessment method, and a specific description of a consistency assessment conclusion.

7. The method for deleting multiple copies of private information according to any one of claims 1 to 4, characterized in that: The deleting the information to be deleted based on the deletion algorithm further comprises: Generate deletion confirmation information, and send the deletion confirmation information to at least one of the source subject, the evidence storage subject, and the supervision subject of the deletion instruction; The deletion confirmation information includes any one or more of the following combinations: deletion confirmation information identifier, deletion information, deletion execution subject, deletion process record, deletion result, and deletion information confirmation information receiving subject.

8. The method for deleting multiple copies of private information according to claim 7, characterized in that: The generating of deletion confirmation information includes: Determine that a deletion process record is generated during the process of deleting the information to be deleted; Based on the deletion process record, generating deletion confirmation information; The deletion process record includes any combination of one or more of the following: deletion notification, deletion information, deletion algorithm, state before deletion, and state after deletion.

9. The method for deleting multiple copies of private information according to claim 7, characterized in that: The generating of the deletion confirmation information further includes: Based on at least one of the deletion intention, the deletion instruction, the deletion algorithm, the circulation evidence of the first information, the number of copies actually deleted, the deletion information, the deletion confirmation information, the deletion consistency evaluation result, and the arbitrary subject that executes the deletion, the overall deletion effect is evaluated to obtain an overall deletion effect evaluation result; The overall deletion effect evaluation result includes any one or more of the following combinations: a deletion effect evaluation result identifier, a deletion effect evaluation subject, a deletion effect evaluation method, and a specific description of the deletion effect evaluation conclusion.

10. The method for deleting multiple copies of private information according to any one of claims 1 to 4, characterized in that: Also includes: Generate a collection of evidence in the process of completing the information to be deleted, the deletion algorithm, the deletion notification, the deletion trigger condition, the deletion confirmation information, the deletion consistency evaluation result, the overall deletion effect evaluation result, and sending and / or receiving at least one of the deletion notification, the deletion trigger condition, and the deletion confirmation information.

11. A method for deleting multiple copies of private information, characterized in that: The method is applied to any subject on the transmission path of the first information, and the method includes: Acquire a deletion intention, where the deletion intention reflects a deletion requirement for the information to be deleted in the first information; Determine a deletion instruction based on the deletion intention, and send the deletion instruction to other subjects on the transmission path of the first information, the deletion instruction is used to perform information search at the other subjects to obtain the information to be deleted corresponding to the deletion instruction, and determine a deletion algorithm from candidate deletion algorithms based on the deletion instruction and the information to be deleted, and delete the information to be deleted based on the deletion algorithm; The information to be deleted is determined based on the first information, and the information to be deleted includes the private information body of the first information during the transmission process, and one or more of multiple copies of the private information generated by the first information during the transmission process, and the copies include one or more of the following: retained information caused by copying and pasting the information, derivative information generated after processing the information, and result information generated after data use of the information; the candidate deletion algorithms include at least two of deleting data indexes, deleting data on storage media, overwriting data, using desensitization instead of deletion, physical destruction, and demagnetization destruction; The determining of a deletion algorithm from candidate deletion algorithms based on the deletion instruction and the information to be deleted includes: Based on the deletion methods corresponding to one or more information indicated by the deletion instruction and the information attributes reflected by the information body and the information copy in the information to be deleted, the deletion algorithm selection algorithm is called to determine the deletion algorithms corresponding to the information body and the information copy respectively. The deletion algorithm corresponding to the information body is the same as or different from the deletion algorithm corresponding to the information copy.

12. The method for deleting multiple copies of private information according to claim 11, characterized in that: The obtaining of deletion intention includes: Receive user input; In response to the user input, determining a deletion intention corresponding to the user input; The user input may be in the form of at least one of a button, a circle, a check, a mark, a key, a pulley, a menu, voice, video, eye contact, gesture, text, bioelectric signal, and virtual reality.

13. The method for deleting multiple copies of private information according to claim 11, characterized in that: The deletion instruction includes a deletion notice; The deletion notification includes any one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion command set includes one or more deletion commands, and the deletion command is used to delete one or more information; Or, the deletion notification includes one or more of the following combinations: a deletion notification identifier, a deletion command set, a deletion notification sending subject, a deletion notification sending method, and a deletion notification confirmation information receiving subject; the deletion notification also includes one or more of the following combinations: a deletion notification confirmation information reply subject, a deletion notification confirmation information reply requirement, and a deletion notification confirmation information reply method; The determining of the deletion instruction based on the deletion intention includes: Generate a deletion trigger condition based on the deletion intention, and if the deletion trigger condition is met, generate the deletion notification based on at least one of the deletion intention, the deletion trigger condition and a pre-built deletion knowledge graph library; Alternatively, the deletion notification is generated based on the deletion intention, or based on the deletion intention and the pre-built deletion knowledge graph library; The sending the deletion instruction to other entities on the transmission path of the first information includes: The deletion notification is sent to other entities on the transmission path of the first information, or the deletion notification and the deletion trigger condition are sent.

14. The method for deleting multiple copies of private information according to claim 11, characterized in that: The deletion instruction includes a deletion trigger condition; The deletion triggering condition includes any one or more of the following combinations: meeting the deletion constraint time, meeting the deletion constraint location, meeting the deletion constraint device, meeting the deletion constraint network, meeting the deletion constraint operation, receiving a notification, illegal use behavior, meeting the specified information attribute, and meeting the deletion execution subject; The determining a deletion instruction based on the deletion intention, and sending the deletion instruction to other entities on the transmission path of the first information, includes: The deletion trigger condition is determined based on the deletion intention, and the deletion trigger condition is sent to other entities on the transmission path of the first information at the same time as the first information is sent and / or separately without any particular order.

15. The method for deleting multiple copies of private information according to any one of claims 11 to 14, characterized in that: The step of sending the deletion instruction to other entities on the transmission path of the first information further includes: Receive deletion confirmation information returned by the other subject, wherein the deletion confirmation information includes any combination of one or more of the following: deletion confirmation information identifier, deletion information identifier, deletion execution subject, deletion process record, deletion result, and deletion confirmation information receiving subject.

16. The method for deleting multiple copies of private information according to claim 15, characterized in that: Also includes: Generate a collection of evidence in the process of completing at least one of the deletion intention, deletion notification, deletion trigger condition, sending the deletion notification, the deletion trigger condition, and receiving the deletion confirmation information.

17. A device for deleting multiple copies of private information, characterized in that: The device is applied to any subject in the transmission path of the first information, and the device includes: an instruction acquisition unit, configured to acquire a deletion instruction, wherein the deletion instruction is determined based on a deletion intention, and the deletion intention reflects a deletion requirement for the information to be deleted in the first information; an information search unit, configured to search for information based on the deletion instruction, and obtain information to be deleted corresponding to the deletion instruction, wherein the information to be deleted is contained in the first information, and the information to be deleted includes the private information body of the first information during the transmission process, and one or more of multiple copies of the private information generated during the transmission process of the first information, wherein the copy includes one or more of the following: retained information caused by copying and pasting the information, derivative information generated after processing the information, and result information generated after data use of the information; an algorithm determination unit, configured to determine a deletion algorithm from candidate deletion algorithms based on the deletion instruction and the information to be deleted, wherein the candidate deletion algorithms include at least two of deleting a data index, deleting data on a storage medium, overwriting data, using desensitization instead of deletion, physical destruction, and degaussing destruction; A deletion execution unit, used for deleting the information to be deleted based on the deletion algorithm; The determining of a deletion algorithm from candidate deletion algorithms based on the deletion instruction and the information to be deleted includes: Based on the deletion methods corresponding to one or more information indicated by the deletion instruction and the information attributes reflected by the information body and the information copy in the information to be deleted, the deletion algorithm selection algorithm is called to determine the deletion algorithms corresponding to the information body and the information copy respectively. The deletion algorithm corresponding to the information body is the same as or different from the deletion algorithm corresponding to the information copy.

18. A device for deleting multiple copies of private information, characterized in that: The device is applied to any subject in the transmission path of the first information, and the device includes: an intention determination unit, configured to obtain a deletion intention, wherein the deletion intention reflects a requirement for deleting information to be deleted in the first information; an instruction transmission unit, configured to determine a deletion instruction based on the deletion intention, and send the deletion instruction to other subjects on the transmission path of the first information, wherein the deletion instruction is used to perform information search at the other subjects to obtain the information to be deleted corresponding to the deletion instruction, and determine a deletion algorithm from candidate deletion algorithms based on the deletion instruction and the information to be deleted, and delete the information to be deleted based on the deletion algorithm; The information to be deleted is determined based on the first information, and the information to be deleted includes the private information body of the first information during the transmission process, and one or more of multiple copies of the private information generated by the first information during the transmission process, and the copies include one or more of the following: retained information caused by copying and pasting the information, derivative information generated after processing the information, and result information generated after data use of the information; the candidate deletion algorithms include at least two of deleting data indexes, deleting data on storage media, overwriting data, using desensitization instead of deletion, physical destruction, and demagnetization destruction; The step of determining a deletion algorithm based on the deletion instruction and the information to be deleted includes: Based on the deletion methods corresponding to one or more information indicated by the deletion instruction and the information attributes reflected by the information body and the information copy in the information to be deleted, the deletion algorithm selection algorithm is called to determine the deletion algorithms corresponding to the information body and the information copy respectively. The deletion algorithm corresponding to the information body is the same as or different from the deletion algorithm corresponding to the information copy.

19. An electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein: When the processor executes the program, the method for deleting multiple copies of private information as described in any one of claims 1 to 16 is implemented.

20. A non-transitory computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by a processor, the method for deleting multiple copies of private information as described in any one of claims 1 to 16 is implemented.

Images