Desensitization data display method and device, intelligent wearable device, and augmented reality glasses

By acquiring the user's field of vision and verifying permissions through smart wearable devices, and performing de-identified data restoration operations, the problem of personalized data display for different passengers in the car cabin is solved, and sensitive data can be displayed in plaintext and protected for privacy.

CN116302275BActive Publication Date: 2025-12-16NIO SOFTWARE TECH (SHANGHAI) CO LTD
View PDF 1 Cites 0 Cited by

Patent Information

Application Number
CN202310273722.3
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2023-03-20
Publication Date
2025-12-16
Estimated Expiration
2043-03-20

AI Technical Summary

Technical Problem

In the car cabin, the shared data files displayed on the screen cannot meet the personalized data viewing needs of different passengers, especially the difficulty in desensitizing sensitive information.

Method used

By acquiring the user's field of vision through smart wearable devices, verifying user permissions, and performing the restoration of de-identified data after the permission verification is passed, the target content of sensitive data is displayed in plaintext, and personalized content is displayed using augmented reality technology.

Benefits of technology

It enables flexible adjustment of displayed content based on user permissions, protects data privacy and security, and meets the personalized data viewing needs of different passengers.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN116302275B_ABST
    Figure CN116302275B_ABST
Patent Text Reader

Abstract

The application relates to a desensitization data display method and device, an intelligent wearable device and an augmented reality glasses. The method is applied to the intelligent wearable device and comprises the following steps: acquiring the content of a user's field of view; in response to the result that there is desensitization data in the content of the user's field of view, checking the user's authority; in response to the result that the user's authority is checked, performing a restoration operation on the desensitization data to obtain target display content in which sensitive data corresponding to the desensitization data is displayed in plaintext, and displaying the target display content obtained after the restoration. The method can flexibly adjust the display content displayed by the intelligent wearable device based on the checking result of the user's authority, so that personalized content display for different users is realized.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] This application relates to the field of information security technology, and in particular to a method, apparatus, smart wearable device, augmented reality glasses, computer-readable storage medium, and computer program product for displaying de-identified data. Background Technology

[0002] As car cabins become increasingly intelligent, passengers can fulfill more and more of their functional needs within the car cabin. For example, passengers can share data files that they want to play or display by projecting them onto the car cabin's display screen, thereby fulfilling their needs for in-car entertainment, in-car office work, or in-car meetings.

[0003] However, since different passengers have different data viewing permissions, their data viewing needs may vary in scenarios such as working or holding meetings on the train. For example, they may want to view the original text of anonymized information such as contact details, ID numbers, or transaction prices. But the shared data files displayed on the screen are all the same, making it difficult to meet the personalized data display needs of different users. Summary of the Invention

[0004] Therefore, it is necessary to provide a desensitized data display method, apparatus, smart wearable device, augmented reality glasses, computer-readable storage medium, and computer program product that offer high flexibility in displaying data, addressing the aforementioned technical problems.

[0005] Firstly, this application provides a method for displaying de-identified data. Applied to smart wearable devices, the method includes:

[0006] Obtain the content visible to the user;

[0007] In response to the presence of de-identified data in the user's field of view, verify user permissions;

[0008] In response to the successful user permission verification, the de-identified data is restored to obtain the target display content of the sensitive data corresponding to the de-identified data in plaintext, and the restored target display content is displayed.

[0009] In one embodiment, the method further includes:

[0010] Establish a communication connection with a control terminal, wherein the control terminal is used to send a data restoration command to a target wearable device with data viewing permissions, and the data restoration command is used to instruct the target wearable device to perform a de-identified data restoration operation;

[0011] The response to the presence of de-identified data in the user's field of view, including verifying user permissions, includes:

[0012] In response to the presence of de-identified data in the user's field of vision, determine whether a data restoration command sent by the control terminal has been received;

[0013] Based on the receipt of the data restoration command, the result of the user permission verification is generated.

[0014] In one embodiment, the step of verifying user permissions in response to the presence of de-identified data in the user's field of view includes:

[0015] In response to the presence of de-identified data in the user's field of view content, the user's binding information is obtained;

[0016] The user's permissions are verified based on the user's binding information.

[0017] In one embodiment, the step of performing a restoration operation on the de-identified data in response to the successful user permission verification, to obtain the target display content of the sensitive data corresponding to the de-identified data in plaintext, includes:

[0018] In response to the successful user permission verification, a plaintext retrieval request is sent to the cloud server. The plaintext retrieval request is used to instruct the cloud server to retrieve the sensitive data corresponding to the de-identified data and send the sensitive data to the smart wearable device.

[0019] The system receives the sensitive data sent by the cloud server and uses the sensitive data to cover the de-identified data in the user's field of vision to obtain the target display content.

[0020] In one embodiment, the step of performing a restoration operation on the de-identified data in response to the successful user permission verification, to obtain the target display content of the sensitive data corresponding to the de-identified data in plaintext, includes:

[0021] In response to the successful verification of user permissions, the permission level corresponding to the user permissions is determined;

[0022] The de-identified data is restored using the sensitive data corresponding to the permission level to obtain the target display content corresponding to the permission level.

[0023] In one embodiment, before verifying user permissions in response to the presence of de-identified data in the user's field of view content, the following steps are included:

[0024] Obtain the location of the de-identified data and compare the location with the field of view corresponding to the user's visual content.

[0025] When it is determined that the location of the area is within the field of view, the result is that the desensitized data exists in the user's field of view content;

[0026] In response to the successful user permission verification, the process of restoring the de-identified data is performed to obtain the target display content of the sensitive data corresponding to the de-identified data in plaintext, including:

[0027] In response to the successful user permission verification, the sensitive data is overlaid onto the area where the de-identified data is located to perform augmented reality rendering on the content in the user's field of vision, so as to obtain the target display content displayed in an augmented reality manner.

[0028] Secondly, this application also provides a method for displaying anonymized data. Applied to a control terminal, the method includes:

[0029] Obtain the target wearable device with data viewing permissions, and confirm that the user permission verification corresponding to the target wearable device has passed;

[0030] A data restoration instruction is sent to the target wearable device. The data restoration instruction is used to instruct the target wearable device to perform a de-identified data restoration operation to obtain the target display content of the sensitive data corresponding to the plaintext de-identified data, and to instruct the target wearable device to display the restored target display content.

[0031] In one embodiment, before obtaining the smart wearable device with data viewing permissions and determining that the user permission verification corresponding to the smart wearable device has passed, the method further includes:

[0032] The system acquires the content to be displayed on the screen, uses preset rules to judge the content to be displayed, and identifies sensitive data in the content to be displayed.

[0033] The sensitive data is subjected to data desensitization processing to generate the desensitized data;

[0034] The sensitive data in the content to be displayed is replaced with the de-identified data to obtain the screen display content, and the screen display content is sent to the display screen for display.

[0035] In one embodiment, the step of performing data desensitization processing on the sensitive data to generate the desensitized data includes:

[0036] The sensitive data is generated by replacing the data at a preset position using a desensitization identifier.

[0037] Thirdly, this application also provides a de-identified data display device. Applied to smart wearable devices, the device includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the de-identified data display method described in any of the embodiments of the first aspect.

[0038] Fourthly, this application also provides a de-identified data display device. Applied to a control terminal, the device includes a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the de-identified data display method described in any of the embodiments of the second aspect above.

[0039] Fifthly, this application also provides a smart wearable device. The smart wearable device includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the de-identified data display method described in any of the embodiments of the first aspect.

[0040] Sixthly, this application also provides augmented reality glasses. The augmented reality glasses include an image acquisition component, an optical module, an interaction component, and the desensitized data display device described in any of the embodiments of the third aspect above. The desensitized data display device is connected to the image acquisition component and the optical module respectively, and is used to obtain the user's field of view content based on the image data acquired by the image acquisition component; in response to the presence of desensitized data in the user's field of view content, it verifies the user's permissions; in response to the successful verification of user permissions, it performs a restoration operation on the desensitized data to obtain the target display content of the sensitive data corresponding to the desensitized data in plaintext, and sends the target display content to the optical module for display.

[0041] In a seventh aspect, this application also provides a control terminal. The control terminal includes a memory and a processor, the memory storing a computer program, and the processor executing the computer program to implement the de-identified data display method described in any of the embodiments of the second aspect above.

[0042] Eighthly, this application also provides a computer-readable storage medium. The computer-readable storage medium stores a computer program thereon, which, when executed by a processor, implements the de-identified data display method described in any of the embodiments of the first aspect or any of the embodiments of the second aspect.

[0043] Ninthly, this application also provides a computer program product. The computer program product includes a computer program that, when executed by a processor, implements the de-identified data display method described in any of the embodiments of the first aspect or any of the embodiments of the second aspect.

[0044] The aforementioned de-identified data display method, apparatus, smart wearable device, augmented reality glasses, control terminal, computer-readable storage medium, and computer program product acquire content within the user's field of vision; in response to the presence of de-identified data within the user's field of vision, verify user permissions; and in response to the successful verification of user permissions, perform a restoration operation on the de-identified data to obtain the target display content of the sensitive data corresponding to the de-identified data in plaintext, and display the restored target display content. Based on the verification results of user permissions, the display content displayed by the smart wearable device can be flexibly adjusted, thereby achieving personalized content display for users with different permissions. Attached Figure Description

[0045] Figure 1A This is a diagram illustrating the application environment of the desensitized data display method in one embodiment;

[0046] Figure 1B This is a schematic diagram illustrating the content displayed by a smart wearable device in one embodiment;

[0047] Figure 1C This is a data interaction diagram of a de-identified data display method in one embodiment;

[0048] Figure 2 This is a flowchart illustrating a method for de-identifying data display applied to a smart wearable device in one embodiment;

[0049] Figure 3 This is a flowchart illustrating the target display content generation steps in one embodiment;

[0050] Figure 4 This is a flowchart illustrating a method for de-identifying data display applied to a smart wearable device in another embodiment;

[0051] Figure 5 This is a flowchart illustrating a de-identified data display method applied to a control terminal in one embodiment;

[0052] Figure 6 This is a structural block diagram of a de-identified data display device applied to a smart wearable device in one embodiment;

[0053] Figure 7 This is a structural block diagram of a de-identified data display device applied to a control terminal in one embodiment;

[0054] Figure 8 This is an internal structural diagram of a smart wearable device in one embodiment. Detailed Implementation

[0055] To make the objectives, technical solutions, and advantages of this application clearer, the following detailed description is provided in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative and not intended to limit the scope of this application.

[0056] It should be noted that the user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this application are all information and data authorized by the user or fully authorized by all parties.

[0057] The de-identified data display method provided in this application embodiment can be applied to, for example... Figure 1A The application environment shown includes a display screen 102, a smart wearable device 104, and a control terminal 106. Communication between the display screen 102 and the control terminal 106, and between the smart wearable device 104 and the control terminal 106, can be achieved using, but is not limited to, one or more communication methods such as bus, Bluetooth, and Wi-Fi. The display screen 102 and the smart wearable device 104 are located in the same space, and the user can view the content displayed on the display screen 102 using the smart wearable device 104.

[0058] Among them, the smart wearable device 104 can be used to acquire image data within the user's field of vision, render the image data, and finally display the rendered result to the user.

[0059] Specifically, the control terminal 106 can acquire the content to be displayed on the display screen 102, and use preset rules to judge the content to be displayed. For example, it can match the data type of the content to be displayed with the sensitive types in the preset rules, thereby determining the sensitive data in the content to be displayed based on the data type matching result, and recording the location of the sensitive data.

[0060] The control terminal 106 can perform desensitization processing on sensitive data, such as deleting some data content or replacing some data in sensitive data with symbols, thereby obtaining desensitized data that can be displayed to all users. The desensitized data is used to replace the sensitive data in the content to be displayed to obtain the screen display content, which is then sent to the display screen 102 for display.

[0061] The smart wearable device 104 can acquire the user's field of vision content within the current field of vision (which can be determined based on the user's eye position information, movement information, and field of view detected by the smart wearable device 104), and perform desensitized data detection on the user's field of vision content. For example, it can use data matching to match the data format in the user's field of vision content with the format of desensitized data to determine whether desensitized data exists. Alternatively, it can use location matching to match the field of vision range corresponding to the user's field of vision content with the location of the area where the desensitized data is located to determine whether desensitized data exists.

[0062] The smart wearable device 104 can verify user permissions in response to the presence of anonymized data within the user's field of vision. For example, it can bind the smart wearable device 104 to the user using various biometric authentication methods such as voiceprint, fingerprint, iris, and face recognition, or directly provide an account login interface. The information obtained during the authentication process is used as the user binding information for the smart wearable device 104. Verification rules are applied to this user binding information, such as matching it against a whitelist stored on a server, to generate a verification result for user permissions. Alternatively, the user binding information can be directly sent to the control terminal 106, instructing the control terminal 106 to verify the user binding information and return the corresponding user permission verification result.

[0063] The smart wearable device 104 can respond to different user permission verification results by using different rendering methods to render the content in the user's field of vision and display the rendered content to the user. For example, in response to a failed user permission verification, the smart wearable device 104 can generate default virtual display content in the rendering layer using default rendering parameters (such as color rendering parameters, line rendering parameters, etc.), overlay the virtual display content onto the content in the user's field of vision for rendering to obtain the corresponding rendered display content, and display the rendered display content carrying desensitized data to the user. At this time, the data displayed in the rendered display content is consistent with the data in the actual content in the user's field of vision.

[0064] Alternatively, the smart wearable device 104 can respond to the user permission verification result, determine that the user currently using the smart wearable device 104 has the permission to view the de-identified data in plaintext, generate a corresponding plaintext acquisition request based on the user permission verification result, and send the plaintext acquisition request to the control terminal 106. After receiving the plaintext acquisition request, the control terminal 106 can mark the smart wearable device 104 that sent the plaintext acquisition request as a smart wearable device 104 with data viewing permission, and then send the de-identification and restoration parameters, such as the sensitive data corresponding to the de-identified data, the location of the de-identified data, the restoration method of the de-identified data (overlay, overlay, or replacement, etc.), and the rendering display method of the sensitive data (rendering color format, rendering line type, rendering area, etc.), to the smart wearable device 104.

[0065] The smart wearable device 104 can receive and store the desensitization and restoration parameters sent by the control terminal 106. When it is determined that the location of the desensitized data is within the user's field of vision, the smart wearable device 104 can render the user's field of vision content using the sensitive data corresponding to the desensitized data according to the desensitized data restoration method, so as to restore the desensitized data in the user's field of vision content, thereby obtaining the restored sensitive data displayed in plaintext, that is, the target display content that displays the true information of the desensitized data in plaintext, and showing the target display content to the user.

[0066] In one example, when the smart wearable device 104 has augmented reality capabilities, the content in the user's field of vision can be rendered and displayed in an augmented reality manner.

[0067] In one example, such as Figure 1B The diagram illustrates the display of content on a smart wearable device. The user on the left can be either a user not wearing the smart wearable device or a user wearing the device but whose user permissions have failed verification. In this case, the user on the left can directly see, or see through the smart wearable device, important information displayed in the form of anonymized data.

[0068] The user on the right can be someone who is wearing a smart wearable device and whose user permissions have been verified. At this time, the user on the right can see important information displayed in plaintext after the sensitive data corresponding to the de-identified data has been rendered through the smart wearable device.

[0069] In one example, such as Figure 1C The diagram illustrates a data interaction method for providing anonymized data display. The control terminal 106 may be equipped with a content control center 1062, and the control terminal 106 can simultaneously interact with the display screen 102 and multiple smart wearable devices (e.g.,...). Figure 1CThe devices A104, B104, and C104 shown communicate with each other. Each smart wearable device may have a content control module 1042 and a display module 1044 deployed in it, and each smart wearable device is bound to the currently wearing user, for example... Figure 1C As shown, device A104 is bound to user A108, device B104 is bound to user B108, and device C104 is bound to user C108.

[0070] Specifically, the content control center 1062 in the control terminal 106 can be used to obtain the content to be displayed on the display screen 102, perform desensitization processing on the sensitive data in the content to be displayed, generate screen display content carrying desensitized data, and send the screen display content to the display screen 102 for display.

[0071] Once devices A104 and B104 confirm that the user's permission verification has passed, the content control center 1062 of the control terminal 106 can send the sensitive data of the de-identified data and the location of the de-identified data to the content control modules 1042 of devices A104 and B104, respectively. This allows devices A104 and B104 to render the content in the user's field of vision based on the sensitive data and the location of the de-identified data, generating corresponding target display content. This target display content is then displayed to users A108 and B108 through the display module 1044. At this time, the content displayed on the display screen 102 seen by users A108 and B108 through devices A104 and B104 is obtained by fusing the virtual target display content generated in the display module 1044 with the actual screen display content on the display screen 102.

[0072] If device C104 determines that the user permission verification fails, it can directly use display module 1044 to render blank virtual display content to show the user's field of vision, displaying the rendered content with desensitized data to user C108. At this time, the content displayed on display screen 102 seen by user C108 through device C104 is obtained by superimposing the virtual rendered display content in display module 1044 and the actual screen display content in display screen 102.

[0073] Optionally, in some embodiments, the above application scenarios can also be deployed in a car cabin, with the car cabin control center as the control terminal, the car cabin screen as the display screen, and augmented reality glasses connected to the car cabin (the connection method is not limited to wired or wireless connection) as smart wearable devices. The desensitized data display method in the above application scenarios is realized through data interaction between the car cabin control center, the car cabin screen, and the augmented reality glasses connected to the car cabin.

[0074] In this embodiment, by controlling the terminal to desensitize sensitive data in the content to be displayed, and then sending the desensitized screen display content to the display screen for display, the privacy and security of the screen display content can be improved. By verifying user permissions through a smart wearable device and adjusting the display content based on the verification results, personalized content display for users with different permissions can be achieved, further protecting the privacy and security of data display.

[0075] In one embodiment, such as Figure 2 As shown, a method for de-identifying data display is provided. Taking the application of this method to the smart wearable device 104 in Figure 1 as an example, the method includes the following steps:

[0076] Step S202: Obtain the content in the user's field of view.

[0077] Among them, smart wearable devices can be, but are not limited to, any of a variety of devices such as smartwatches, smart bracelets, or head-mounted devices (such as glasses, helmets, etc.).

[0078] Specifically, smart wearable devices can acquire the user's current eye position. Based on the smart wearable device's field of view (FOV) and the user's eye position, the image acquisition area is determined, thereby obtaining the user's visual field content within the user's field of vision.

[0079] Smart wearable devices can store anonymized information such as data format, field type, or location corresponding to the anonymized data. This anonymized information is used to detect the content within the user's field of vision. For example, the format of the data within the user's field of vision can be matched with the format of the anonymized data; the field type of the data within the user's field of vision can be matched with the field type of the anonymized data; or the field of vision corresponding to the user's field of vision can be matched with the location of the anonymized data. Based on the matching results, it can be determined whether anonymized data exists within the user's field of vision.

[0080] If it is determined that de-identified data exists in the user's field of view, proceed to step S204. If it is determined that no de-identified data exists in the user's field of view, directly render the user's field of view using default rendering parameters (such as color rendering parameters, line rendering parameters, etc.) and display the rendered content.

[0081] Step S204: In response to the result that de-identified data exists in the content visible to the user, verify the user's permissions.

[0082] Among them, desensitized data can be used to characterize the data obtained after transforming certain sensitive information using preset desensitization rules, which can achieve reliable protection of sensitive privacy data.

[0083] Specifically, in response to the presence of anonymized data in the user's field of vision, the smart wearable device can either use its locally stored control chip to perform a user permission verification operation, or it can send user permission verification-related information to the control terminal, instructing the control terminal to perform the user permission verification operation. If the user permission verification passes, step S206 is executed. If the user permission verification fails, it is determined that the user currently wearing the smart wearable device does not have the corresponding data viewing permission. The default rendering parameters (such as color rendering parameters, line rendering parameters, etc.) are then used to render the content in the user's field of vision and display the rendered content carrying the anonymized data.

[0084] Optionally, in some embodiments, the smart wearable device may deploy a user authentication component. This component acquires one or more of the user's biometric information, such as voiceprint, fingerprint, iris, and face, or account password, through interaction between the user and the user authentication component. A control chip binds the acquired user information to the smart wearable device, thereby obtaining user binding information corresponding to the user currently wearing the smart wearable device. Specifically, when the user authentication component includes an audio acquisition component, it can acquire the user's voiceprint information. When the user authentication component includes an optical fingerprint sensor, it can acquire the user's fingerprint information. When the user authentication component includes an image acquisition device, it can acquire the user's iris, face, or other information. When the user authentication component includes an input device, it can acquire the user's entered account password.

[0085] In one example, a smart wearable device can use a control chip to match user binding information with whitelist data stored on a server. When it is determined that whitelist data matching the user binding information exists, a result indicating that the user's permission verification has passed is generated; otherwise, a result indicating that the user's permission verification has failed is generated.

[0086] In another example, a smart wearable device can send user binding information to a control terminal, instructing the control terminal to match the user binding information with the information of authorized users who have data viewing permissions, thereby generating a user permission verification result based on the matching result.

[0087] Step S206: In response to the successful user permission verification, perform the restoration operation on the de-identified data to obtain the target display content of the sensitive data corresponding to the plaintext display of the de-identified data.

[0088] Step S208: Display the target content obtained after restoration.

[0089] Specifically, the smart wearable device can determine that the user currently wearing the device has the corresponding data viewing permissions based on the successful user permission verification. It can retrieve the sensitive data (plaintext-displayed anonymized data) from a local database or receive it from a third-party device (such as the control terminal 106 in Figure 1 or a server deployed in the cloud). The sensitive data is then used to restore the anonymized data. For example, the sensitive data can be used to cover the area containing the anonymized data to present the target display content of the sensitive data corresponding to the plaintext anonymized data; alternatively, a rendering vector can be generated from the sensitive data and superimposed on the user's field of view for full-area rendering (i.e., rendering the entire user's field of view, but only overlaying and masking the anonymized data) to present the target display content of the sensitive data corresponding to the plaintext anonymized data; or, a 3D model can be constructed based on the user's field of view, and the sensitive data can be used to replace the display area corresponding to the anonymized data in the 3D model to present the target display content of the sensitive data corresponding to the plaintext anonymized data. The restored target display content is then displayed on the display area of ​​the smart wearable device.

[0090] Optionally, in some embodiments, the smart wearable device can be a device with augmented reality functionality. In response to a failed user permission verification, the smart wearable device can perform augmented reality rendering on the user's field of vision containing de-identified data within the current field of view, and display the rendered content to the user currently wearing the smart wearable device.

[0091] Alternatively, in response to successful user permission verification, smart wearable devices can generate corresponding virtual display content in a rendering area corresponding to the location of the de-identified data, using sensitive data. Augmented reality fusion rendering is then applied to the virtual display content and the content within the user's field of vision, presenting the merged target display content to the user in an augmented reality manner.

[0092] In the aforementioned method for displaying anonymized data, the user's field of vision content is obtained; in response to the presence of anonymized data in the user's field of vision content, the user's permissions are verified; in response to the successful verification of user permissions, the anonymized data is restored to obtain the target display content of the sensitive data corresponding to the anonymized data in plaintext, and the restored target display content is displayed. This method can flexibly adjust the display content of the smart wearable device based on the verification result of user permissions, thereby achieving personalized content display for users with different permissions.

[0093] In one embodiment, the method for displaying de-identified data in a smart wearable device further includes: establishing a communication connection with a control terminal. Step S204, in response to the presence of de-identified data in the user's field of vision, verifies user permissions, including: in response to the presence of de-identified data in the user's field of vision, determining whether a data restoration command sent by the control terminal has been received, and generating a result of the user permission verification based on the receipt of the data restoration command.

[0094] The control terminal can be used to send data restoration commands to target wearable devices with data viewing permissions, thereby instructing the target wearable device to perform de-identified data restoration operations. The control terminal can include, but is not limited to, various personal computers, laptops, smartphones, tablets, IoT devices, or portable wearable devices. IoT devices can be smart TVs, smart in-vehicle devices, etc., and portable wearable devices can be smartwatches, smart bracelets, head-mounted devices, etc.

[0095] Specifically, smart wearable devices can establish a communication connection with a control terminal through wireless connection methods such as Ethernet, Bluetooth, and wireless LAN, or wired connection methods such as bus connection and port connection, so as to realize data sharing between smart wearable devices and control terminals through the communication connection.

[0096] The control terminal can determine whether the smart wearable device is a target wearable device with data viewing permissions based on the user binding information currently associated with the smart wearable device, and send a data restoration command for the de-identified data to the target wearable device.

[0097] The smart wearable device can respond to the presence of anonymized data within the user's field of vision by checking whether a data restoration command has been received from the control terminal. If a data restoration command from the control terminal is confirmed, a result indicating that the user's permission verification has passed is generated. Alternatively, if no data restoration command from the control terminal is confirmed, a result indicating that the user's permission verification has failed is generated.

[0098] In this embodiment, by establishing a communication connection with the control terminal, the user binding information corresponding to the smart wearable device is shared with the control terminal. User permissions are verified based on the receipt of data restoration instructions from the control terminal, which simplifies the user permission verification logic of the smart wearable device and reduces the data calculation cost of user permission verification.

[0099] In one embodiment, step S204, in response to the result that de-identified data exists in the content visible to the user, verifies user permissions, including: in response to the result that de-identified data exists in the content visible to the user, obtaining user binding information, and verifying user permissions based on the user binding information.

[0100] The user binding information may include, but is not limited to, any one or more of the following: biometric information such as the user's voiceprint, fingerprint, iris, and face, or data information such as account password.

[0101] Specifically, smart wearable devices can retrieve user-bound information in response to the presence of anonymized data within the user's field of vision. This user-bound information is then matched against user information of authorized users with data viewing permissions. If a match is successful, a result indicating successful user permission verification is generated. If a match fails, a result indicating failed user permission verification is generated.

[0102] In this embodiment, by directly verifying user permissions based on the user's binding information through the smart wearable device, the data interaction between the smart wearable device and external devices can be reduced, thereby improving the efficiency of user permission verification.

[0103] In one embodiment, step S206, in response to the successful user permission verification, performs a restoration operation on the de-identified data to obtain the target display content of the sensitive data corresponding to the plaintext de-identified data, including: in response to the successful user permission verification, sending a plaintext acquisition request to the cloud server; receiving the sensitive data sent by the cloud server, and using the sensitive data to cover the de-identified data in the user's field of vision to obtain the target display content.

[0104] Among them, plaintext retrieval requests can be used to instruct cloud servers to retrieve sensitive data corresponding to de-identified data and send the sensitive data to smart wearable devices.

[0105] Cloud servers can store large amounts of sensitive data, as well as the correspondence between each piece of sensitive data and de-identified data. Cloud servers can include, but are not limited to, standalone servers deployed in the cloud or server clusters consisting of multiple servers.

[0106] Specifically, if the user's authorization verification is successful based on the user's binding information, the smart wearable device, in response to the successful user authorization verification, generates a plaintext retrieval request corresponding to the anonymized data and sends the plaintext retrieval request to the cloud server. This instructs the cloud server, upon receiving the plaintext retrieval request, to retrieve the sensitive data from the anonymized data and send the sensitive data back to the smart wearable device.

[0107] After receiving sensitive data from a cloud server, smart wearable devices can use the sensitive data to cover the de-identified data in the user's field of vision, so as to obtain the target display content of the de-identified data in plaintext.

[0108] In this embodiment, the smart wearable device, in response to the successful user permission verification, retrieves sensitive data from the cloud server based on the plaintext retrieval request corresponding to the anonymized data. This sensitive data is then used to render the content within the user's field of vision, improving the efficiency of sensitive data retrieval and consequently increasing the efficiency of generating the target display content. Furthermore, since the anonymized data display method provided in this embodiment utilizes a cloud server to store sensitive data, it reduces the data storage costs of the smart wearable device.

[0109] In one embodiment, such as Figure 3 As shown, a flowchart illustrating the steps for generating target display content is provided, including:

[0110] Step S302: Obtain the location of the de-identified data and compare the location with the field of view corresponding to the user's field of view content.

[0111] The region location can be the two-dimensional spatial location of the anonymized data within the user's field of vision, or the three-dimensional spatial location of the display screen containing the anonymized data relative to the smart wearable device. In one example, the boundary point of the region containing the anonymized data, such as the coordinates of the top-left corner, can be used as the region location. Alternatively, the center point of the region containing the anonymized data can also be used.

[0112] Specifically, when the region is in three-dimensional space, the smart wearable device can determine the screen projection parameters of the display screen where the desensitized data is located based on its own field of view. The region is then transformed using these screen projection parameters to obtain the field-of-view position of the desensitized data relative to the smart wearable device. This field-of-view position is then compared with the field of view of the user currently wearing the smart wearable device. When the region is in two-dimensional space, the smart wearable device can directly compare the region position with the field of view. If the region is determined to be outside the field of view, augmented reality rendering is performed on the current user's field of view using default rendering parameters (consistent with the default rendering parameters provided in the above embodiments), and the augmented reality rendered content is displayed to the user. If the region is determined to be within the field of view, the operations in steps S304 to S306 are executed.

[0113] Step S304: When the determined area location is within the field of view, the result is obtained that there is desensitized data in the user's field of view content.

[0114] Step S306: In response to the successful user permission verification, the sensitive data is overlaid onto the area where the de-identified data is located to perform augmented reality rendering on the content in the user's field of vision.

[0115] Specifically, when the smart wearable device determines that the area is within the user's field of vision, it obtains the result that de-identified data exists in the user's field of vision. In response to the result that de-identified data exists in the user's field of vision, user permissions are verified. The specific user permission verification operation can be implemented with reference to the user permission verification method provided in the above embodiments, and will not be elaborated here.

[0116] In response to the successful user permission verification, augmented reality rendering is applied to the area containing the anonymized data within the user's field of vision. This rendering restores the anonymized data from the user's view to reveal the target display content, which is the plaintext version of the anonymized sensitive data. The rendered target content is then displayed in an augmented reality manner within the display area of ​​the smart wearable device.

[0117] In one example, the smart wearable device can also store a rendering range corresponding to sensitive data, where the rendering range can be determined based on the location of the de-identified data. For instance, the rendering range can be selected to be greater than or equal to the area where the de-identified data is located, in order to cover the de-identified data within the user's field of vision. If the location of the de-identified data is [(x,y),(x+50cm,y+20cm)], a rectangular area extending 50cm to the right and 20cm downwards from (x,y) can be selected as the rendering range for the sensitive data. Alternatively, a rectangular area extending 55cm to the right and 25cm downwards from (x,y) can also be selected as the rendering range for the sensitive data.

[0118] In another example, smart wearable devices can also store data rendering formats corresponding to sensitive data, such as color rendering formats, font size rendering formats, line rendering formats, etc.

[0119] In this embodiment, by comparing the location of the de-identified data with the current user's field of vision, it is possible to determine whether de-identified data exists in the user's field of vision, thereby improving the accuracy of de-identification data determination. By overlaying sensitive data onto the user's field of vision based on the location of the de-identified data for augmented reality rendering, the rendering performance and efficiency of the user's field of vision can be improved.

[0120] In one embodiment, step S206, in response to the result of the user permission verification passing, performs a restoration operation on the de-identified data to obtain the target display content of the sensitive data corresponding to the plaintext display of the de-identified data, including: in response to the result of the user permission verification passing, determining the permission level corresponding to the user permission; and restoring the de-identified data using the de-identified data and the sensitive data corresponding to the permission level to obtain the target display content corresponding to the permission level.

[0121] Specifically, smart wearable devices can store the correspondence between permission levels and user-bound information. In response to a successful user permission verification, the permission level corresponding to the current user's bound information can be determined from the correspondence. This allows the de-identified data and the corresponding sensitive data for the permission level to be retrieved from a local database or cloud server. The content within the user's field of vision is then rendered using the sensitive data corresponding to the permission level to restore the de-identified data, resulting in the target display content that displays the sensitive data corresponding to the permission level in plaintext. The specific de-identified data restoration operation can be implemented using the de-identified data restoration method provided in the above embodiments, and will not be elaborated upon here.

[0122] In one example, the smart wearable device can also send the user's permission level to the control terminal, instructing the control terminal to obtain the de-identified data and the sensitive data corresponding to the permission level, and then send the sensitive data corresponding to the permission level to the smart wearable device through the control terminal.

[0123] In one example, when the user's permission level is A, the anonymized data and the sensitive data corresponding to permission level A can be the entire plaintext content of the anonymized data (including plaintext content with data types such as mobile phone number, ID number, and identification code). When the user's permission level is B, the anonymized data and the sensitive data corresponding to permission level B can include plaintext content with data type such as ID number. When the user's permission level is C, the anonymized data and the sensitive data corresponding to permission level C can include plaintext content with data type such as identification code.

[0124] In this embodiment, by determining the permission level corresponding to the user's bound information, the user's field of vision content is rendered using de-identified data and sensitive data corresponding to the permission level, and the rendered target display content is displayed. This allows smart wearable devices to flexibly adjust the content displayed to the user based on the user's permission level, further improving the flexibility of de-identified data display.

[0125] In one embodiment, such as Figure 4 As shown, a method for de-identifying data display applied to smart wearable devices is provided, including:

[0126] Step S402: Establish a communication connection with the control terminal and send the user binding information to the control terminal.

[0127] Step S404: Receive the data restoration command sent by the control terminal, and parse the data restoration command to obtain the location of the desensitized data, the sensitive data, the rendering range of the sensitive data, and the data rendering format.

[0128] Specifically, smart wearable devices can bind to the user currently wearing the device through biometric authentication or account authentication to obtain user binding information. A communication connection is established with the control terminal, sending the user binding information to the control terminal. This instructs the control terminal to determine whether the current user has data viewing permissions based on the binding information and to send a data restoration command to the smart wearable device with those permissions. Upon receiving the data restoration command from the control terminal, the smart wearable device can parse the command to obtain the location of the de-identified data, the sensitive data itself, the rendering range of the sensitive data, and the data rendering format of the sensitive data.

[0129] Step S406: Obtain the user's field of vision content and compare the location of the de-identified data with the field of vision content corresponding to the user's field of vision content.

[0130] Step S408: In response to the result that de-identified data exists in the content visible to the user, verify the user's permissions.

[0131] In step S410, in response to the successful user permission verification, the user's view content is enhanced and rendered using de-identified data and sensitive data corresponding to the permission level, and the target display content is displayed.

[0132] Specifically, the smart wearable device can acquire the current user's field of vision and determine the corresponding field of vision range. It compares the location of the anonymized data with the user's field of vision. When it's determined that the anonymized data is located within the field of vision, it verifies user permissions in response to the presence of anonymized data. In response to a received data restoration command, it determines the permission level corresponding to the user currently wearing the smart wearable device. It then acquires the sensitive data corresponding to the permission level. This sensitive data is overlaid onto the rendering area, and augmented reality rendering is performed on the user's field of vision according to the data rendering format to restore the anonymized data, resulting in target display content that displays the sensitive data in plaintext. The restored target display content is then displayed. At this point, the difference between the target display content and the user's field of vision is that the sensitive data corresponding to the anonymized data is displayed in plaintext.

[0133] Step S412: Use the default rendering parameters to perform augmented reality rendering on the content in the user's field of view, and display the rendered content.

[0134] Specifically, in response to the absence of anonymized data in the user's field of vision, or in response to a failed user permission verification, the smart wearable device can enhance the display rendering of the user's field of vision using default rendering parameters and then display the rendered content. In this case, the rendered content is consistent with the content in the user's field of vision.

[0135] Alternatively, in some embodiments, the smart wearable device may employ augmented reality glasses.

[0136] In this embodiment, by acquiring the user's field of vision content; in response to the result that de-identified data exists in the user's field of vision content, verifying the user's permissions; in response to the result that the user's permissions verification is passed, using the sensitive data of the de-identified data to render the user's field of vision content, so as to restore the de-identified data in the user's field of vision content and display the restored target display content, the display content displayed by the smart wearable device can be flexibly adjusted based on the verification result of the user's permissions, so as to realize personalized content display for users with different permissions.

[0137] In one embodiment, such as Figure 5 As shown, a method for displaying de-identified data is provided. Taking the application of this method to the control terminal 106 in Figure 1 as an example, the method includes the following steps:

[0138] Step S502: Obtain the content to be displayed on the display screen, use preset rules to judge the content to be displayed, and determine the sensitive data in the content to be displayed.

[0139] The content to be displayed can be used to represent the content that will be displayed on the screen. In one example, the content to be displayed can be content obtained by the control terminal from the user in response to a screen mirroring request triggered by the user.

[0140] The display screen can be used to show content to the user. The display screen can be located within the field of view of the smart wearable device.

[0141] Sensitive data can be used to characterize data that is not suitable for being made public to all users.

[0142] Specifically, the control terminal can acquire the content to be displayed on the screen. It extracts data from the content to determine the data type of each piece of data. Then, it uses preset rules to judge the content, matching the data types corresponding to the data in the content with sensitive types (such as contact numbers, ID numbers, license plate numbers, vehicle identification numbers, and chassis numbers) in the preset rules, thereby identifying sensitive data in the content to be displayed.

[0143] Step S504: Perform data anonymization processing on the sensitive data to generate anonymized data.

[0144] Step S506: Replace the sensitive data in the content to be displayed with desensitized data to obtain the screen display content, and send the screen display content to the display screen for display.

[0145] The screen display content can be used to represent the actual content displayed on the current screen. This content can be obtained by replacing sensitive data in the content to be displayed on the screen using de-identified data from the control terminal. The content to be displayed can represent the content to be shown on the screen, such as the original data content that the user needs to project onto the screen.

[0146] Specifically, the control terminal can perform data anonymization on sensitive data, invalidating parts of the sensitive data and generating anonymized data corresponding to the sensitive data. For example, it can replace parts of the sensitive data with preset identifiers or numbers. In one example, the control terminal can use the identifier * to anonymize sensitive data, replacing the sensitive data 124592178 with the anonymized data 1*******8. The control terminal can then use the anonymized data to replace the sensitive data in the content to be displayed, obtaining the anonymized screen display content. This screen display content is then sent to the display screen for display.

[0147] In one example, the control terminal can store the mapping between the data types of sensitive data and their permission levels. Different data anonymization methods can be used when de-identifying sensitive data corresponding to different permission levels. For instance, data with high permission levels can be anonymized using random number encryption, while data with low permission levels can be anonymized using preset identifier replacement.

[0148] Step S508: Obtain the target wearable device with data viewing permissions and send a data restoration command to the target wearable device.

[0149] Specifically, the control terminal can identify the target wearable device with data viewing permissions from among several connected smart wearable devices and verify the user permissions corresponding to that target wearable device. For example, data viewing permissions can be determined by the device identifier or by verifying the user binding information corresponding to the smart wearable device.

[0150] Based on preset anonymization and restoration parameters, a corresponding data restoration instruction is generated and sent to the target wearable device. This instruction instructs the target wearable device to perform anonymization data restoration using the sensitive data corresponding to the anonymized data. This allows the target wearable device to obtain the target display content of the sensitive data corresponding to the anonymized data in plaintext, and instructs the target wearable device to display the restored target display content. Specifically, the target display content restoration operation can be implemented using the target display content restoration method provided in the above embodiments, and will not be elaborated upon here.

[0151] The desensitization and restoration parameters may include, but are not limited to, any one or more of the following: the sensitive data corresponding to the desensitized data, the location of the desensitized data, the restoration method of the desensitized data (overlay, overlay, or replacement, etc.), and the rendering display method of the sensitive data (rendering color format, rendering line type, rendering area, etc.).

[0152] In the aforementioned method for displaying de-identified data, sensitive data within the content to be displayed is identified by using preset rules. This sensitive data is then de-identified, and the de-identified data replaces the sensitive data in the content to be displayed. This results in screen display content that is easily shown to all users, thus improving the data privacy of the screen display content. By sending a data restoration command to a target wearable device with data viewing permissions to instruct it to perform a de-identified data restoration operation, the target wearable device can easily display the sensitive data corresponding to the de-identified data to authorized users in plaintext, thereby improving the privacy of sensitive data display.

[0153] It should be understood that although the steps in the flowcharts of the embodiments described above are shown sequentially according to the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless explicitly stated herein, there is no strict order restriction on the execution of these steps, and they can be executed in other orders. Moreover, at least some steps in the flowcharts of the embodiments described above may include multiple steps or multiple stages. These steps or stages are not necessarily completed at the same time, but can be executed at different times. The execution order of these steps or stages is not necessarily sequential, but can be performed alternately or in turn with other steps or at least a portion of the steps or stages of other steps.

[0154] Based on the same inventive concept, this application also provides a display device for desensitized data to implement the above-mentioned method for displaying desensitized data. The solution provided by this device is similar to the solution described in the above method. Therefore, the specific limitations in one or more embodiments of the desensitized data display device provided below can be found in the limitations of the desensitized data display method described above, and will not be repeated here.

[0155] In one embodiment, such as Figure 6 As shown, a de-identified data display device 600 is provided for use in smart wearable devices, including: a data acquisition module 602, an authorization verification module 604, and a display rendering module 606, wherein:

[0156] The data acquisition module 602 is used to acquire the content in the user's field of vision.

[0157] The permission verification module 604 is used to verify user permissions in response to the presence of de-identified data in the content viewed by the user.

[0158] The display rendering module 606 is used to perform a restoration operation on the de-identified data in response to the result of the user permission verification, so as to obtain the target display content of the sensitive data corresponding to the de-identified data in plaintext, and display the target display content obtained after restoration.

[0159] In one embodiment, the de-identified data display device 600 includes: a communication connection module for establishing a communication connection with a control terminal, wherein the control terminal is used to send a data restoration command to a target wearable device with data viewing permissions, the data restoration command instructing the target wearable device to perform a de-identified data restoration operation. An access control module 604 is further used to determine whether the data restoration command sent by the control terminal has been received in response to the presence of de-identified data in the user's field of vision; and to generate the user access control result based on the receipt of the data restoration command.

[0160] In one embodiment, the permission verification module 604 is further configured to obtain user binding information in response to the presence of de-identified data in the user's field of view content; and verify the user's permissions based on the user binding information.

[0161] In one embodiment, the display rendering module 606 is further configured to: in response to the result of the user permission verification passing, send a plaintext acquisition request to the cloud server, the plaintext acquisition request being used to instruct the cloud server to acquire the sensitive data corresponding to the de-identified data, and send the sensitive data to the smart wearable device; receive the sensitive data sent by the cloud server, and use the sensitive data to cover the de-identified data in the user's field of vision content to obtain the target display content.

[0162] In one embodiment, the display rendering module 606 is further configured to: in response to the result of the user permission verification passing, determine the permission level corresponding to the user permission; and restore the de-identified data using the de-identified data and the sensitive data corresponding to the permission level to obtain the target display content corresponding to the permission level.

[0163] In one embodiment, the anonymized data display device 600 includes: a range comparison module, configured to obtain the location of the anonymized data, compare the location with the field of view corresponding to the user's field of view content, and when it is determined that the location is within the field of view content, obtain a result that the anonymized data exists in the user's field of view content. The display rendering module 606 is further configured to: in response to the result of the user permission verification passing, overlay the sensitive data onto the location of the anonymized data to perform augmented reality rendering on the user's field of view content, so as to obtain target display content displayed in an augmented reality manner.

[0164] In one embodiment, such as Figure 7 As shown, a de-identified data display device 700 is provided for use in a control terminal, including: a device acquisition module 702 and an instruction sending module 704.

[0165] The device acquisition module 702 is used to acquire a target wearable device with data viewing permissions and to confirm that the user permission verification corresponding to the target wearable device has passed.

[0166] The instruction sending module 704 is used to send a data restoration instruction to the target wearable device. The data restoration instruction is used to instruct the target wearable device to perform a desensitized data restoration operation to obtain the target display content of the sensitive data corresponding to the plaintext desensitized data, and to instruct the target wearable device to display the restored target display content.

[0167] In one embodiment, the desensitized data display device 700 further includes:

[0168] The content acquisition module 702 is used to acquire the content to be displayed on the display screen, judge the content to be displayed using preset rules, and determine the sensitive data in the content to be displayed.

[0169] The data desensitization module 704 is used to desensitize sensitive data and generate desensitized data;

[0170] The content display module 706 is used to replace sensitive data in the content to be displayed with de-identified data to obtain the screen display content, and then send the screen display content to the display screen for display.

[0171] Each module in the aforementioned desensitized data display device can be implemented entirely or partially through software, hardware, or a combination thereof. These modules can be embedded in or independent of the processor in a computer device, or stored in the memory of a computer device as software, so that the processor can call and execute the operations corresponding to each module.

[0172] In one embodiment, a smart wearable device is provided, which may be a terminal, and its internal structure diagram may be as follows: Figure 8 As shown, the smart wearable device includes a processor, memory, communication interface, display screen, and input device connected via a system bus. The processor provides computing and control capabilities. The memory includes a non-volatile storage medium and internal memory. The non-volatile storage medium stores the operating system and computer programs. The internal memory provides an environment for the operation of the operating system and computer programs stored in the non-volatile storage medium. The communication interface allows for wired or wireless communication with external terminals; wireless communication can be achieved through Wi-Fi, mobile cellular networks, NFC (Near Field Communication), or other technologies. When the computer program is executed by the processor, it implements a method for displaying de-identified data applied to the smart wearable device. The display screen can be an LCD screen or an e-ink screen. The input device can be a touch layer covering the display screen, buttons, a trackball, or a touchpad on the device's casing, or an external keyboard, touchpad, or mouse.

[0173] Those skilled in the art will understand that Figure 8 The structure shown is merely a block diagram of a portion of the structure related to the present application and does not constitute a limitation on the smart wearable device to which the present application is applied. A specific smart wearable device may include more or fewer components than those shown in the figure, or combine certain components, or have different component arrangements.

[0174] In one embodiment, augmented reality glasses are also provided, including an image acquisition component, an optical module, and a desensitized data display device (such as...). Figure 6The desensitized data display device 600 shown may include a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the steps described in the various method embodiments applied to smart wearable devices. The desensitized data display device is connected to an image acquisition component and an optical module, respectively. It is used to obtain the user's field of view content based on the image data acquired by the image acquisition component. In response to the presence of desensitized data in the user's field of view content, it verifies the user's permissions. In response to the successful verification of user permissions, it performs a restoration operation on the desensitized data to obtain the target display content of the sensitive data corresponding to the desensitized data in plaintext, and sends the target display content to the optical module for display.

[0175] In one embodiment, a control terminal is also provided, including a memory and a processor, wherein the memory stores a computer program, and the processor executes the computer program to implement the steps described above in the various method embodiments applied to the control terminal.

[0176] In one embodiment, an automotive cockpit control terminal is also provided, including a memory and a processor. The memory stores a computer program, and the processor executes the computer program to implement the steps described above in the various method embodiments applied to the control terminal.

[0177] In one embodiment, a computer-readable storage medium is also provided, on which a computer program is stored, which, when executed by a processor, implements the steps in the above method embodiments.

[0178] In one embodiment, a computer program product is provided, including a computer program that, when executed by a processor, implements the steps in the above method embodiments.

[0179] Those skilled in the art will understand that all or part of the processes in the methods of the above embodiments can be implemented by a computer program instructing related hardware. The computer program can be stored in a non-volatile computer-readable storage medium, and when executed, it can include the processes of the embodiments of the above methods. Any references to memory, databases, or other media used in the embodiments provided in this application can include at least one of non-volatile and volatile memory. Non-volatile memory can include read-only memory (ROM), magnetic tape, floppy disk, flash memory, optical memory, high-density embedded non-volatile memory, ferroelectric random access memory (FRAM), phase change memory (PCM), graphene memory, etc. Volatile memory can include random access memory (RAM) or external cache memory, etc. By way of illustration and not limitation, RAM can be in various forms, such as static random access memory (SRAM) or dynamic random access memory (DRAM), etc. The databases involved in the embodiments provided in this application may include at least one type of relational database and non-relational database. Non-relational databases may include, but are not limited to, blockchain-based distributed databases. The processors involved in the embodiments provided in this application may be general-purpose processors, central processing units, graphics processing units, digital signal processors, programmable logic devices, quantum computing-based data processing logic devices, etc., and are not limited to these.

[0180] The technical features of the above embodiments can be combined in any way. For the sake of brevity, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0181] The embodiments described above are merely illustrative of several implementation methods of this application, and while the descriptions are specific and detailed, they should not be construed as limiting the scope of this patent application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of this application, and these all fall within the protection scope of this application. Therefore, the protection scope of this application should be determined by the appended claims.

Claims

1. A method for displaying anonymized data, characterized in that, A smart wearable device is applied in the context of an automotive cockpit. The automotive cockpit scenario uses augmented reality glasses connected to the automotive cockpit as the smart wearable device, the automotive cockpit screen as the display screen, and the automotive cockpit control center as the control terminal. The automotive cockpit control center interacts with the augmented reality glasses and the automotive cockpit screen respectively, and the display screen is located within the field of view of the smart wearable device. The method includes: Obtain the content visible to the user; The user's field of view content is subjected to desensitized data detection. The desensitized data is generated by the control terminal after desensitizing sensitive data in the content to be displayed on the display screen. In response to the absence of de-identified data in the user's field of view, the user's field of view is rendered using the default rendering parameters, and the rendered content is displayed. In response to the presence of de-identified data in the user's field of view, verify user permissions; In response to the successful user permission verification, the permission level corresponding to the user permission is determined, and the restoration operation of the de-identified data is performed. The de-identified data is restored using the sensitive data corresponding to the permission level to obtain the target display content of the de-identified data and the sensitive data corresponding to the permission level in plaintext. Augmented reality fusion rendering is performed on the target display content and the user's field of vision content to display the fused target display content. In response to the failure of the user permission verification, the user's field of view content carrying de-identified data within the current field of view is subjected to augmented reality rendering processing using the default rendering parameters, and the rendered content after augmented reality rendering processing is displayed.

2. The method according to claim 1, characterized in that, The method further includes: Establish a communication connection with the control terminal, wherein the control terminal is used to send a data restoration command to the target wearable device with data viewing permission, and the data restoration command is used to instruct the target wearable device to perform a de-identified data restoration operation; The response to the presence of de-identified data in the user's field of view, including verifying user permissions, includes: In response to the presence of de-identified data in the user's field of vision, determine whether a data restoration command sent by the control terminal has been received; Based on the receipt of the data restoration command, the result of the user permission verification is generated.

3. The method according to any one of claims 1 to 2, characterized in that, Before verifying user permissions in response to the presence of anonymized data in the user's field of view content, the following steps are also included: Obtain the location of the de-identified data and compare the location with the field of view corresponding to the user's visual content. When it is determined that the location of the area is within the field of view, the result is that the desensitized data exists in the user's field of view content; In response to the successful user permission verification, the system determines the permission level corresponding to the user permission, performs a restoration operation on the de-identified data, and restores the de-identified data using the sensitive data corresponding to the permission level to obtain the target display content that displays the de-identified data and the sensitive data corresponding to the permission level in plaintext. Augmented reality fusion rendering is then performed on the target display content and the user's field of vision content, including: In response to the successful user permission verification, the sensitive data corresponding to the permission level is overlaid onto the area where the de-identified data is located to perform augmented reality rendering on the content in the user's field of vision, so as to obtain the target display content displayed in an augmented reality manner.

4. The method according to claim 1, characterized in that, The response to the presence of de-identified data in the user's field of view, including verifying user permissions, includes: In response to the presence of de-identified data in the user's field of view content, the user's binding information is obtained; The user's permissions are verified based on the user's binding information.

5. The method according to claim 1, characterized in that, In response to the successful user permission verification, the system determines the permission level corresponding to the user permission, performs a restoration operation on the de-identified data, and restores the de-identified data using the sensitive data corresponding to the permission level to obtain the target display content of the de-identified data and the sensitive data corresponding to the permission level in plaintext, including: In response to the successful user permission verification, a plaintext retrieval request is sent to the cloud server. The plaintext retrieval request is used to instruct the cloud server to retrieve the sensitive data corresponding to the de-identified data and send the sensitive data to the smart wearable device. The system receives the sensitive data sent by the cloud server and uses the sensitive data to cover the de-identified data in the user's field of vision to obtain the target display content.

6. A method for displaying anonymized data, characterized in that, A control terminal applied in a car cockpit scenario, wherein the car cockpit scenario uses augmented reality glasses connected to the car cockpit as a smart wearable device, the car cockpit screen as a display screen, and the car cockpit control center as a control terminal, and the car cockpit control center interacts with the augmented reality glasses and the car cockpit screen respectively through the car cockpit control center, and the display screen is located within the field of view of the smart wearable device; The method includes: The system acquires a target wearable device with data viewing permissions and confirms that the user permission verification corresponding to the target wearable device has passed. The user permission verification operation of the target wearable device is performed when the target wearable device detects desensitized data in the user's field of vision and responds to the result that desensitized data exists in the user's field of vision. The desensitized data is generated by the control terminal through desensitization processing of sensitive data in the content to be displayed on the display screen. Determine the permission level corresponding to the user permission, send a data restoration instruction to the target wearable device, the data restoration instruction is used to instruct the target wearable device to perform a de-identified data restoration operation to obtain the target display content of the plaintext de-identified data and the sensitive data corresponding to the permission level, and instruct the target wearable device to display the restored target display content.

7. The method according to claim 6, characterized in that, Before obtaining the target wearable device with data viewing permissions and determining that the user permission verification corresponding to the target wearable device has passed, the method further includes: The system acquires the content to be displayed on the screen, uses preset rules to judge the content to be displayed, and identifies sensitive data in the content to be displayed. The sensitive data is subjected to data desensitization processing to generate the desensitized data; The sensitive data in the content to be displayed is replaced with the de-identified data to obtain the screen display content, and the screen display content is sent to the display screen for display.

8. A desensitized data display device, characterized in that, A smart wearable device is applied to a car cabin scenario, wherein the car cabin scenario uses augmented reality glasses connected to the car cabin as the smart wearable device, the car cabin screen as the display screen, and the car cabin control center as the control terminal, and the car cabin control center interacts with the augmented reality glasses and the car cabin screen respectively through the car cabin control center; the device includes a memory and a processor, the memory storing a computer program, characterized in that the processor executes the computer program to implement the steps of the method according to any one of claims 1 to 5.

9. A desensitized data display device, characterized in that, A control terminal applied in an automotive cockpit scenario, wherein the automotive cockpit scenario uses augmented reality glasses connected to the automotive cockpit as a smart wearable device, the automotive cockpit screen as a display screen, and the automotive cockpit control center as a control terminal, and the automotive cockpit control center interacts with the augmented reality glasses and the automotive cockpit screen respectively through the automotive cockpit control center; the device includes a memory and a processor, the memory storing a computer program, characterized in that, when the processor executes the computer program, it implements the steps of the method described in any one of claims 6 to 7.

10. A smart wearable device, comprising a memory and a processor, wherein the memory stores a computer program, characterized in that, The method is applied to a car cabin scenario, wherein the car cabin scenario uses augmented reality glasses connected to the car cabin as a smart wearable device, the car cabin screen as a display screen, and the car cabin control center as a control terminal, and the car cabin control center interacts with the augmented reality glasses and the car cabin screen respectively through the car cabin control center; when the processor executes the computer program, it implements the steps of the method according to any one of claims 1 to 5.

11. An augmented reality glasses, characterized in that, This invention is applied to a car cabin scenario, wherein the car cabin scenario uses augmented reality glasses connected to the car cabin as a smart wearable device, the car cabin screen as a display screen, and the car cabin control center as a control terminal, and the car cabin control center interacts with the augmented reality glasses and the car cabin screen respectively through the car cabin control center; the augmented reality glasses include an image acquisition component, an optical module, and the desensitized data display device as described in claim 8; The desensitized data display device is connected to the image acquisition component and the optical module respectively, and is used to obtain the user's field of view content based on the image data acquired by the image acquisition component, and to verify user permissions in response to the result that desensitized data exists in the user's field of view content. In response to the successful user permission verification, the de-identified data is restored to obtain the target display content of the sensitive data corresponding to the de-identified data in plaintext, and the target display content is sent to the optical module for display.

12. A computer-readable storage medium having a computer program stored thereon, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 7.

13. A computer program product, comprising a computer program, characterized in that, When the computer program is executed by a processor, it implements the steps of the method according to any one of claims 1 to 7.

Citation Information

Patent Citations

  • Information Handling System Encrypted Image Display Through Secondary Device

    US20170161506A1