A method and related equipment for processing user privacy data

Abstract

The present invention provides a method for processing user privacy data and related equipment, which are applied to the field of data processing technology. The application obtains data access information sent by a download client; processes the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule; processes the attribute information of the encrypted data to be downloaded based on the preset decryption rule to generate the data to be downloaded, wherein the data to be downloaded is desensitized data; processes the purpose information of the encrypted data to be downloaded and the user attribute information of the download client based on the preset decryption rule to generate the target access time of the data to be downloaded; processes the data to be downloaded based on the preset access information of the data to be downloaded to generate the remaining cache time of the data to be downloaded; processes the target access time of the data to be downloaded and the remaining cache time of the data to be downloaded to generate a data access result.

Description

Technical Field

[0001] The present invention relates to the technical field of data processing, and in particular to a method for processing user privacy data and related equipment. Background Art

[0002] In the digital age, the protection of user privacy data has become the focus of attention of enterprises and society. In order to safely store user privacy data, it is necessary to adopt a series of technical means. Data encryption is the most basic means to protect data from unauthorized access or leakage. Encryption technology can prevent data from being stolen or tampered with during storage and transmission, and is the first line of defense for protecting privacy data. Data desensitization is the process of processing data to reduce its sensitivity without changing its original structure and characteristics.

[0003] However, the current system development is in a relatively isolated state. Most systems are developed independently and lack unified planning and integration. The data flow between systems adopts database synchronization, intermediate database and other methods, which may cause the same data to be stored repeatedly in multiple systems, forming multiple copies, which not only increases the complexity and cost of data management, but also increases the risk of potential data leakage or mishandling. This decentralized data management model not only reduces data security, but may also lead to business decision-making errors due to data inconsistency, thereby affecting the overall operational efficiency and service quality of the enterprise. Therefore, it is urgent to explore and implement a more efficient, secure and unified data storage, circulation and management system, which has become a problem to be solved in the current system development.

[0004] It should be noted that the information disclosed in the above background technology section is only used to enhance the understanding of the background of the present disclosure, and therefore may include information that does not constitute the prior art known to ordinary technicians in the field. Summary of the invention

[0005] The purpose of this application is to provide a method and related equipment for processing user privacy data, which at least overcomes the problems existing in the prior art to a certain extent, by obtaining and decrypting the data access information sent by the client, including data attributes, usage, client physical and user attributes. Using this information, a preset decryption rule is generated, the data is processed to generate desensitized data to be downloaded, and the target access time of the data is determined, the cache time of the data is managed, and a data index is generated when necessary to facilitate user access to relevant resources.

[0006] Other features and advantages of the present application will become apparent from the following detailed description, or may be learned in part by the practice of the present invention.

[0007] According to one aspect of the present application, a method for processing user privacy data is provided, comprising: obtaining data access information sent by a download client, wherein the data access information comprises encrypted attribute information of the data to be downloaded, encrypted usage information of the data to be downloaded, physical attribute information of the download client, and user attribute information of the download client; processing the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule; processing the attribute information of the encrypted data to be downloaded based on the preset decryption rule to generate data to be downloaded, wherein the data to be downloaded is desensitized data; processing the usage information of the encrypted data to be downloaded and the user attribute information of the download client based on the preset decryption rule to generate a target access duration of the data to be downloaded, wherein the target access duration of the data to be downloaded is used to represent the target access time of the download client to the data to be downloaded; processing the data to be downloaded based on the preset access information of the data to be downloaded to generate a remaining cache duration of the data to be downloaded; processing the target access duration of the data to be downloaded and the remaining cache duration of the data to be downloaded to generate a data access result.

[0008] In one embodiment of the present application, the physical attribute information of the download client and the user attribute information of the download client are processed to generate preset decryption rules, including: processing the user attribute information of the download client to generate limb image information of the target user and the identity information of the target user; processing the limb image information of the target user to generate the target user's motion feature influencing factors; processing the target user's motion feature influencing factors based on a preset limb motion recognition model to generate the target user's limb information, wherein the target user's limb information is used to characterize the target user's limb change information; processing the physical attribute information of the download client to generate the download client's security level information; processing the target user's limb information and the download client's security level information to generate a password mapping table, wherein the password mapping table is used to characterize the mapping relationship between different download clients and different limb information of the target user; processing the password mapping table to generate preset decryption rules, wherein the preset decryption rules are updated irregularly based on different limb information of the target user.

[0009] In one embodiment of the present application, the attribute information of the encrypted data to be downloaded is processed based on the preset decryption rule to generate the data to be downloaded, including: processing the attribute information of the data to be downloaded to generate mirror data of the data to be downloaded, wherein the mirror data of the data to be downloaded is non-original data of the data to be downloaded; processing the attribute information of the encrypted data to be downloaded based on the preset decryption rule to generate information to be decrypted, wherein the information to be decrypted is non-private data of the data to be downloaded; processing the mirror data of the data to be downloaded based on the information to be decrypted to generate the data to be downloaded, wherein the data to be downloaded is desensitized data.

[0010] In one embodiment of the present application, the usage information of the encrypted data to be downloaded and the user attribute information of the download client are processed based on the preset decryption rules to generate a target access time for the data to be downloaded, including: processing the usage information of the encrypted data to be downloaded based on the preset decryption rules to generate a preset access time for the data to be downloaded; processing the preset access time for the data to be downloaded based on the user attribute information of the download client to generate a target access time for the data to be downloaded.

[0011] In one embodiment of the present application, the data to be downloaded is processed based on preset access information of the data to be downloaded to generate a remaining cache time of the data to be downloaded, including: obtaining preset access information of the data to be downloaded, wherein the preset access information of the data to be downloaded is used to characterize the access information of different download clients to the download data within a preset time period; processing the preset access information of the data to be downloaded to generate an access time of each download client; processing the data to be downloaded to generate a target cache time of the data to be downloaded, wherein the target cache time of the data to be downloaded is used to characterize the total access time of the data to be downloaded; processing the target cache time of the data to be downloaded based on the access time of each download client to generate a remaining cache time of the data to be downloaded.

[0012] In one embodiment of the present application, the target access time of the data to be downloaded and the remaining cache time of the data to be downloaded are processed to generate a data access result, including: processing the target access time of the data to be downloaded based on the remaining cache time of the data to be downloaded to generate a final access time of the data to be downloaded; if the final access time of the data to be downloaded is less than the target access time of the data to be downloaded, processing the data to be downloaded based on usage information of the data to be downloaded to generate data index information, wherein the data index information is used to represent data that matches the usage information of the data to be downloaded; processing the data index information to generate a data access result.

[0013] In one embodiment of the present application, after processing the target access time of the data to be downloaded and the remaining cache time of the data to be downloaded to generate a data access result, it also includes: performing data export processing on the data access result to generate data export information of the download client, wherein the data export information of the download client includes data export time information of the download client and data export frequency information of the download client; processing the data export time information of the download client and the data export frequency information of the download client to generate data export information of the data to be downloaded; respectively obtaining the data export information of the data to be downloaded generated by different download clients; processing the data export information of the data to be downloaded generated by different download clients to generate management information of the data to be downloaded, wherein the management information of the data to be downloaded is used to characterize the data access situation of the data to be downloaded.

[0014] Another aspect of the present application is a device for processing user privacy data, characterized in that it includes: an acquisition module, used to acquire data access information sent by a download client, wherein the data access information includes encrypted attribute information of the data to be downloaded, encrypted usage information of the data to be downloaded, physical attribute information of the download client, and user attribute information of the download client; a processing module, used to process the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule; based on the preset decryption rule, the attribute information of the encrypted data to be downloaded is processed to generate the data to be downloaded, wherein the data to be downloaded is desensitized data; based on the preset decryption rule, the usage information of the encrypted data to be downloaded and the user attribute information of the download client are processed to generate a target access duration of the data to be downloaded, wherein the target access duration of the data to be downloaded is used to represent the target access time of the download client to the data to be downloaded; based on the preset access information of the data to be downloaded, the data to be downloaded is processed to generate a remaining cache duration of the data to be downloaded; the target access duration of the data to be downloaded and the remaining cache duration of the data to be downloaded are processed to generate a data access result.

[0015] According to another aspect of the present application, an electronic device is characterized in that it includes: a first processor; and a memory for storing executable instructions of the first processor; wherein the first processor is configured to execute the above-mentioned method for processing user privacy data by executing the executable instructions.

[0016] According to another aspect of the present application, a computer-readable storage medium is provided, on which a computer program is stored. When the computer program is executed by a second processor, the above-mentioned method for processing user privacy data is implemented.

[0017] According to another aspect of the present application, a computer program product is provided, including a computer program, characterized in that when the computer program is executed by a third processor, the computer program implements the above-mentioned method for processing user privacy data.

[0018] The present application provides a method and related equipment for processing user privacy data, in which the server obtains and decrypts data access information sent by the client, including data attributes, usage, client physical and user attributes. The server uses this information to generate preset decryption rules, processes the data to generate desensitized data to be downloaded, determines the target access time of the data, manages the cache time of the data, and generates data indexes when necessary to facilitate user access to related resources.

[0019] It is to be understood that the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the present disclosure. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 A flowchart showing a method for processing user privacy data provided by an embodiment of the present application;

[0021] Figure 2 A schematic diagram showing the structure of a device for processing user privacy data provided by an embodiment of the present application is shown;

[0022] Figure 3 A schematic diagram of the structure of an electronic device provided by an embodiment of the present application is shown;

[0023] Figure 4 A schematic diagram of a storage medium provided in an embodiment of the present application is shown. DETAILED DESCRIPTION

[0024] The preferred embodiments of the present invention are described below in conjunction with the accompanying drawings. It should be understood that the preferred embodiments described herein are only used to illustrate and explain the present invention, and are not used to limit the present invention.

[0025] Combine the following Figure 1 To describe the method for processing user privacy data according to an exemplary embodiment of the present application. It should be noted that the following application scenarios are only shown to facilitate understanding of the spirit and principles of the present application, and the implementation of the present application is not limited in this regard. On the contrary, the implementation of the present application can be applied to any applicable scenario.

[0026] In one implementation, the present application also proposes a method for processing user privacy data and related equipment. Figure 1 The following schematically shows a flow chart of a method for processing user privacy data according to an embodiment of the present application. Figure 1As shown, the method is applied to a server, comprising:

[0027] S101, obtaining data access information sent by a download client.

[0028] In one implementation, the data access information includes the encrypted attribute information of the data to be downloaded, the encrypted usage information of the data to be downloaded, the physical attribute information of the download client, and the user attribute information of the download client. Among them, the attribute information of the data to be downloaded (such as file size, type, creation date, etc.) is encrypted before sending to ensure that only the authorized recipient can decrypt and access this information. The usage information of the data to be downloaded (such as how the data will be used, the intended use, etc.) also needs to be encrypted to prevent unauthorized use or leakage. The physical attribute information of the download client (such as operating system version, hardware configuration, network status, etc.) should also be encrypted to protect the integrity and security of the client. User attribute information (such as user ID, permission level, user preference settings, etc.) is encrypted before sending to protect the privacy and security of the user. The specific encryption rules are configured by the target user in advance or in real time on the server to deal with different sudden situations. The specific encryption and decryption process will be expanded later and will not be repeated here.

[0029] In another implementation, the above information can be encrypted using symmetric encryption (such as SM4) or asymmetric encryption (such as SM2). Asymmetric encryption is usually used for key exchange during encrypted transmission, while symmetric encryption is used to encrypt the actual data content. When data is transmitted between the client and the server, a secure data transmission protocol (such as HTTPS, FTPS or SFTP) should be used to protect the data from being intercepted or tampered with, ensuring that only authorized users and systems can access the encrypted data, which usually involves identity authentication and authorization mechanisms. It can effectively protect data access information during the download process, prevent data leakage and unauthorized access, and ensure data security and user privacy.

[0030] S102: Process the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule.

[0031] In one implementation, the user attribute information of the download client is processed to generate the body image information of the target user and the identity information of the target user. Processing the user attribute information of the download client to generate the body image information and identity information of the target user involves multiple steps of data collection, analysis and processing. Specifically, the user's basic information, such as name, age, gender, height, weight, etc., is collected, and the user's behavior habits are understood through the user's behavior records on the client, such as usage habits, preference settings, interaction modes, etc. The above data is processed to remove invalid or incomplete data, ensure the quality and consistency of the data, and integrate data from different sources to form a comprehensive user portrait.

[0032] The target user's limb image information is processed to generate the target user's motion feature influencing factors, the user's limb images are collected using a camera or other sensor, the target user's motion feature influencing factors are processed based on a preset limb motion recognition model, and the target user's limb information is generated, wherein the target user's limb information is used to characterize the target user's limb change information.

[0033] Apply image processing techniques, such as image segmentation and feature extraction, to extract limb features from images. Use machine learning or deep learning algorithms to analyze limb images, identify information such as limb shape, size, and posture, extract key features from user attribute information, such as user behavior patterns and preferences, and combine user basic information and behavior characteristics to generate user identity information, which may include the user's unique identifier, account information, etc. Extract key limb features from the segmented image, such as contour, joint position, limb length, etc., and apply feature descriptors, such as scale-invariant feature transform (SIFT) and speed robust features (SURF), etc., to describe limb features. Use machine learning or deep learning algorithms (such as recursive neural network RNN, long short-term memory network LSTM) to analyze limb images, identify limb movements and postures, and identify continuous movements and behavior patterns through time series analysis. Process the physical attribute information of the download client to generate the security level information of the download client, collect the physical attribute information of the download client, such as the operating system version, hardware configuration, etc., and generate the security level information of the download client based on this information.

[0034] The target user's body information and the security level information of the download client are processed to generate a password mapping table, wherein the password mapping table is used to characterize the mapping relationship between different download clients and different body information of the target user. The password mapping table is processed to generate a preset decryption rule, wherein the preset decryption rule is updated irregularly based on the different body information of the target user. Specifically, the extracted body features are quantified into numerical values ​​for easy processing and analysis, including parameters such as the frequency, speed, and acceleration of body movements. The security level of the download client is evaluated, which may include factors such as the security of the operating system, the status of the antivirus software, and the security of the network connection, and a security level score or label is assigned to each client. The user's body information and the client's security level are used as inputs to generate a password mapping table through a certain algorithm. Each item in the mapping table may contain a specific combination of the user's body information and the corresponding client security level. Design an algorithm to generate a password based on the user's body information and the client's security level. The password may contain random elements and a specific pattern based on the user's body information. The following is a simplified example algorithm to illustrate how to generate a password mapping table:

[0035] First, define the input. For example, by analyzing the user's body pattern, the applicant obtains a vector containing various body features. , for example, the security level of the client can be an integer from 1 to 10, indicating different security levels. Convert the limb information into a numerical value or hash value. For example, a hash function H can be used to convert the gait feature vector: , where h is a fixed-length hash value that converts the client's security level into a weight factor w, which can be used to adjust the complexity of the password: , if the security level is 9, then w = 0.8. Combine the hash value and the weight factor to generate a password seed, for example Using the password seed to generate the final password can be achieved through a password generation function G, which may include a random number generator and certain encoding rules: For example, the G function can be to convert the seed value into a string through a pseudo-random number generator (PRNG). Specifically, the process is described by using a fictitious scenario and steps. Assume that the applicant has generated a password seed through the previous steps. This seed is obtained by XOR operation based on the hash value of the user's body information and the client's security level weight factor. The password seed is `seed = 0x9F4C3B2A`.

[0036] First, the applicant converts the password seed into a sequence of numbers, which will serve as the basis for generating the password, converting the hexadecimal seed into a decimal sequence of numbers. Next, the applicant applies a series of logical rules to generate the password. These rules may include: length rule, the length of the password should be between 12 and 16 characters; character diversity, the password should contain uppercase letters, lowercase letters, numbers and special characters; randomness, the characters in the password should be randomly distributed to increase the unpredictability of the password. Using the password seed and the above rules, the applicant performs the following operations: At the beginning, the password is an empty string. According to the password length and diversity requirements, a character set is selected, for example: uppercase letters: `ABCDEFGHIJKLMNOPQRSTUVWXYZ`; numbers: `0123456789`; lowercase letters: `abcdefghijklmnopqrstuvwxyz`; special characters: `!@#$%^& ()-_=+`.

[0037] Based on the digital sequence of the seed, an algorithm (such as a linear congruential generator) is used to randomly select characters from the character set. For example, the first byte of the seed can determine the first character, the second byte determines the second character, and so on. To ensure the complexity of the password, the applicant inserts special characters at specific positions in the password. For example, the applicant can insert special characters at the 4th, 8th, and 12th positions. If the generated password does not meet the length or diversity requirements, the applicant can make adjustments, such as adding or replacing certain characters. Assuming that the applicant follows the above steps, the final generated password may be: `F7h!xV3@kP1qJ9 In this example, the applicant can see that the password contains uppercase letters, lowercase letters, numbers and special characters, and is 16 characters long, which meets the rules set by the applicant. A complex password that meets specific security requirements is generated using the password seed. This method ensures that the password generation is both random and predictable, providing a password generation solution that is both secure and practical.

[0038] The password mapping table is updated regularly or as needed to reflect changes in the user's body information and updates to the client's security status. The update mechanism can be based on long-term trends or short-term changes in user behavior. In this way, the password mapping table not only increases the security of the account, but also provides a personalized and dynamic authentication method, making each authentication unique and closely related to the user's behavior, ensuring that only authorized customers can access the corresponding data. By combining the user's body movements with the security features of the client, a dynamic password system is created. Such a system may be used in biometric security measures, such as gait recognition or motion recognition, to provide an additional layer of security.

[0039] S103: Process the attribute information of the encrypted data to be downloaded based on the preset decryption rule to generate the data to be downloaded.

[0040] In one implementation, the attribute information of the data to be downloaded is processed to generate mirror data of the data to be downloaded, wherein the mirror data of the data to be downloaded is non-original data of the data to be downloaded. The attribute information of the encrypted data to be downloaded is processed based on a preset decryption rule to generate information to be decrypted, wherein the information to be decrypted is non-private data of the data to be downloaded, and the mirror data of the data to be downloaded is processed based on the information to be decrypted to generate data to be downloaded, wherein the data to be downloaded is desensitized data.

[0041] First, collect the original data to be downloaded, which may contain sensitive information, process the original data, and generate non-original mirror data. This usually involves data desensitization or data deformation technology, such as replacing sensitive fields (such as name, address, ID number, etc.) with false data or placeholders, encrypting sensitive data, ensuring that only authorized users can access the original data, generalizing the data into a more general form, reducing the accuracy of the data, but retaining the practicality of the data.

[0042] The encrypted attribute information is processed using preset decryption rules. These rules may be based on the user's authentication, permission level, or other security policies. The processed information should be non-private, that is, it does not contain any sensitive data, but is sufficient to describe the content and purpose of the data. According to the description in the information to be decrypted, the mirror data is further processed, including: according to the data description in the information to be decrypted, the corresponding data is selected from the mirror data, the selected data is reorganized to meet the needs of the user, and the data is converted into a user-readable or usable format. Before generating the final data to be downloaded, desensitization is performed to ensure that all sensitive information is properly processed, and the processed data is packaged into the final format to be downloaded. These data have been desensitized and can be safely downloaded and used by users.

[0043] A specific example is as follows: suppose there is a data set containing customer personal information that needs to be downloaded for market analysis: original data: contains sensitive information such as name, address, and phone number; mirror data: name and address are replaced with fake data, and the phone number is partially hidden; information to be decrypted: describes the purpose of the data set (market analysis) and the fields included (such as age, gender, purchase history); final data to be downloaded: the data set downloaded by the user only contains age, gender, and purchase history, and all sensitive information has been desensitized. Through this process, the security of the data and the privacy of the user are protected, while the user can still access and use the data for analysis and decision-making.

[0044] S104: Process the encrypted usage information of the data to be downloaded and the user attribute information of the download client based on the preset decryption rule to generate a target access duration of the data to be downloaded.

[0045] In one implementation, the usage information of the encrypted data to be downloaded is processed based on preset decryption rules to generate a preset access time for the data to be downloaded; the preset access time for the data to be downloaded is processed based on user attribute information of the download client to generate a target access time for the data to be downloaded, and the target access time for the data to be downloaded is used to represent the target access time of the download client for the download data.

[0046] By dynamically managing data access rights, especially controlling the access time of data, data security is enhanced, ensuring that data is available within a specific time, thereby reducing the risk of data leakage. The following are the detailed steps of this process: First, the encrypted usage information is decrypted using the preset decryption rules. This usage information may include the purpose of data use, the expected usage environment, etc. Based on the decrypted usage information, the preset access time of the data is determined. This time can be set based on the sensitivity of the data, usage scenario or compliance requirements.

[0047] Collect user attribute information of the download client, which may include the user's role, permission level, historical usage behavior, etc. Adjust the preset access time based on the user attribute information. For example, high-authority users may get longer access time, while low-authority users may be subject to stricter time restrictions. Combine the preset access time and user attribute information to generate the target access time for the data to be downloaded. This time is the actual time that the user can access the data, which is used to ensure the security and compliance of the data. Implement this target access time in the data access system to ensure that users access the data within the specified time.

[0048] Specifically, suppose a company's data management system needs to control access to financial reports: the purpose information of the financial reports is encrypted, and after decryption, it is shown that these reports are used for internal audits. According to the general process of auditing, the preset access period is set to 30 days. Suppose a user is a senior staff member of the audit department with higher authority. According to the user's senior position and audit needs, the access period is extended to 60 days. In the end, the user is granted 60 days of access to download and view financial reports. Through dynamic access period management based on roles and purposes, organizations can more effectively control access to sensitive data, reduce the risk of data leakage, and ensure the compliance of data use. This approach not only improves data security, but also provides flexibility to meet the needs of different users and different scenarios.

[0049] S105: Process the data to be downloaded based on preset access information of the data to be downloaded, and generate a remaining cache duration of the data to be downloaded.

[0050] In one implementation, preset access information of the data to be downloaded is obtained, wherein the preset access information of the data to be downloaded is used to represent the access information of different download clients to the downloaded data within a preset time period. The preset access information of the data to be downloaded is processed to generate the access duration of each download client, and the data to be downloaded is processed to generate the target cache duration of the data to be downloaded, wherein the target cache duration of the data to be downloaded is used to represent the total access duration of the data to be downloaded, and the target cache duration of the data to be downloaded is processed based on the access duration of each download client to generate the remaining cache duration of the data to be downloaded.

[0051] Specifically, obtain the preset access information of the data to be downloaded, which includes determining which clients can access the data and their permissions to access the data within a preset time period, and collect information about different download clients, including their types, user identities, permission levels, etc. Generate a specific access time for each client based on the preset access information and the attributes of the client, ensure that the allocation of access time complies with data security policies and compliance requirements, and analyze the characteristics of the data to be downloaded, such as data size, type, frequency of use, etc. Based on the characteristics of the data and the access pattern of the client, determine the target cache time of the data. This is usually the sum of the data access time or a preset maximum value. Based on the access time of each download client, calculate the remaining cache time of the data to be downloaded, and adjust the data cache strategy based on the remaining cache time to optimize performance and resource usage.

[0052] Specifically, suppose an online education platform needs to manage the download of teaching videos: the online education platform releases a teaching video with a total duration of 100 minutes. The platform stipulates that the video can be downloaded and viewed by registered users within 30 days after release. The platform collects attribute information of different users, including user A, user B, etc. According to the user's subscription level and historical viewing behavior, the platform allocates different access time to each user. For example: user A: allocated 10 minutes of access time, user B: allocated 20 minutes of access time. The platform processes the video content so that users can download and watch it. The platform sets a target cache time for the video content, assuming that the total video duration is 100 minutes. According to the user's access time distribution, the remaining cache time of the video content is calculated. Initially, the total cache time of the video is 100 minutes. User A downloads 10 minutes of video content, and the remaining cache time becomes 90 minutes. User B then downloads 20 minutes of video content, and the remaining cache time is further reduced to 70 minutes. The cache strategy is updated according to the remaining cache time to ensure the effective distribution and storage of video content. Ensure that users can effectively access and watch video content within the preset time period. At the same time, the platform can monitor and manage the storage duration of video content to optimize resource usage and improve user experience. This approach helps improve data availability and security while optimizing the use of network and storage resources, protect data from unauthorized access, improve data availability and security, and optimize the use of network and storage resources.

[0053] S106: Process the target access duration of the data to be downloaded and the remaining cache duration of the data to be downloaded to generate a data access result.

[0054] In one implementation, the target access time of the data to be downloaded is processed based on the remaining cache time of the data to be downloaded to generate a final access time of the data to be downloaded; if the final access time of the data to be downloaded is less than the target access time of the data to be downloaded, the data to be downloaded is processed based on the usage information of the data to be downloaded to generate data index information, wherein the data index information is used to represent data that matches the usage information of the data to be downloaded, and the data index information is processed to generate a data access result.

[0055] Determine the remaining cache time, as mentioned above, this refers to the remaining time that the video content or data file can be further accessed on the server, and compare the remaining cache time with the user's target access time. If the remaining cache time is sufficient to meet the user's target access time, the final access time is the same as the target access time. If it is not enough, the final access time is equal to the remaining cache time. If the final access time is less than the target access time, it means that the user cannot fully access the data within the expected time. In this case, the system will generate data index information based on the purpose information of the data to be downloaded. This may include metadata, summaries, keywords or other information related to the data that can help users find alternative data.

[0056] The data index information is used to search the system for other data or resources that match the user's needs. Based on the search results, the system generates a list of available data from which the user can select alternative data to access. Specifically, suppose there is a teaching video about history on the online education platform with a total duration of 100 minutes. The remaining cache duration is currently 50 minutes, and user C requests to watch the full 100-minute video. Since the remaining cache duration is only 50 minutes, which is less than the user's target access duration (100 minutes), the system will handle this situation. The system generates data index information based on the purpose information of the video (history teaching), which may include links or summaries of other related historical videos. Through this method of dynamically managing data access duration and providing data index information, the platform can ensure that users can obtain valuable data and information even when resources are limited. This approach not only improves the user experience, but also optimizes the use of resources and ensures the effective distribution of data. At the same time, it also provides the platform with flexibility to adapt to the needs and preferences of different users.

[0057] Optionally, in another embodiment of the method of the present application, after processing the target access duration of the data to be downloaded and the remaining cache duration of the data to be downloaded to generate a data access result, the method further includes:

[0058] Performing data export processing on the data access result to generate data export information of the download client, wherein the data export information of the download client includes data export time information of the download client and data export frequency information of the download client;

[0059] Processing the data export time information of the download client and the data export frequency information of the download client to generate data export information of the data to be downloaded;

[0060] Respectively obtain data export information of data to be downloaded generated by different download clients;

[0061] The data export information of the data to be downloaded generated by different download clients is processed to generate management information of the data to be downloaded, wherein the management information of the data to be downloaded is used to characterize the data access status of the data to be downloaded.

[0062] In one implementation, a user requests to export data through a download client, and the system records the time and frequency of each data export and generates data export information for the download client. The data export time information of the download client is analyzed to determine the peak and off-peak periods of data export, and the data export frequency information of the download client is analyzed to determine which users or clients request data export more frequently. The data export time and frequency information of the download client are merged to generate data export information for the data to be downloaded, and appropriate export parameters such as export time window and export limit are set for the data to be downloaded based on the export information. Data export information for the data to be downloaded is collected from different download clients. Ensure that the format of the collected data export information is consistent to facilitate subsequent processing. Analyze the data export information collected from different download clients to identify data access patterns and trends, and generate management information for the data to be downloaded based on the analysis results, which may include data access statistics, user behavior analysis, resource usage, etc.

[0063] Specifically, assume a scientific research data sharing platform where users can export research data sets: User A and User B request to export the same data set at different times, and record the export activities: User A requests to export at 10 a.m., once a week; User B requests to export at 3 p.m., once a day. The platform records these export activities and generates data export information. The platform analyzes this information and finds that the afternoon period is the peak period for data export. Based on this, the server resource allocation is adjusted to optimize performance. Effectively manage data export activities to ensure efficient and secure data access. At the same time, by monitoring and analyzing data export information, the platform can optimize resource usage, improve service quality, and provide users with a better data access experience. This approach helps to improve the transparency and efficiency of data management while protecting data from abuse.

[0064] In another implementation, the batch export function is prohibited, the time period and frequency of batch export are limited, and the number of batch exports is limited to no more than 10,000 each time. The fields of batch export are limited, and private data is desensitized. Functions involving the export of user private data are added with two-factor authentication, and detailed audit logs are recorded to record which user (Who) exported how much user private data (PrivateData) at which time point (When) and where (Where) using what search conditions (Condition).

[0065] By desensitizing sensitive data, the security and privacy of data during transmission, storage and processing are ensured. In the process of user privacy desensitization and storage, it is impossible to identify specific individuals or organizations, protect user data privacy, and convert it into a form that cannot be directly traced back to specific individuals, ensuring that the data can be used in compliance. During the data transmission process, this method uses end-to-end encryption technology to ensure that the data is encrypted throughout the entire transmission path from the source to the destination. Even if the data is intercepted during the transmission process, it cannot be decrypted and read by unauthorized third parties. This encryption method greatly enhances the security of data transmission and effectively prevents the risk of data leakage. In the process of privacy data access control and permission management, identity authentication and permission management technology are combined to achieve dynamic access control of user privacy data, effectively preventing data from being accessed and abused by unauthorized personnel.

[0066] The present invention aims to ensure that user privacy is fully protected when downloading and using data, while optimizing data access and resource management, the acquisition of data access information, the generation of decryption rules, data desensitization, the management of access time and the processing of data export information, so as to achieve safe, efficient and compliant use of data. In this application, the server obtains the data access information sent by the download client, including encrypted data attribute information, usage information, and physical and user attribute information of the client. Then, the physical and user attribute information of the client is used to generate preset decryption rules, which are used for subsequent data decryption and access control. During the decryption process, the encrypted data attribute information is processed to generate desensitized data to be downloaded. At the same time, combined with the preset decryption rules and the user attribute information of the client, the target access time of the data to be downloaded is generated, which helps to control and optimize the access time of the data.

[0067] In addition, the preset access information of the data to be downloaded is processed to generate the remaining cache time, which helps manage the storage and cache resources of the data. If the final access time of the data to be downloaded is less than the target access time, the system will generate a data index based on the data usage information so that users can find relevant data resources. Finally, the data access results are exported, the data export time information and frequency information of the download client are recorded, and the data export information is generated. By analyzing the data export information of different clients, the management information of the data to be downloaded is generated to characterize the data access situation and further optimize the data service and resource allocation. By comprehensively considering the security of the data, the attributes of the client and the needs of the user, a comprehensive data management solution is provided. This method not only protects user privacy, but also improves the efficiency and security of data use.

[0068] In one embodiment, if Figure 2 As shown, the present application also provides a device for processing user privacy data, including:

[0069] The acquisition module 201 is used to acquire data access information sent by the download client, wherein the data access information includes encrypted attribute information of the data to be downloaded, encrypted usage information of the data to be downloaded, physical attribute information of the download client, and user attribute information of the download client;

[0070] The processing module 202 is used to process the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule; based on the preset decryption rule, the attribute information of the encrypted data to be downloaded is processed to generate the data to be downloaded, wherein the data to be downloaded is desensitized data; based on the preset decryption rule, the usage information of the encrypted data to be downloaded and the user attribute information of the download client are processed to generate a target access time of the data to be downloaded, wherein the target access time of the data to be downloaded is used to represent the target access time of the download client to the data to be downloaded; based on the preset access information of the data to be downloaded, the data to be downloaded is processed to generate a remaining cache time of the data to be downloaded; the target access time of the data to be downloaded and the remaining cache time of the data to be downloaded are processed to generate a data access result.

[0071] The present application embodiment provides an electronic device, such as Figure 3 As shown, the electronic device 3 includes a first processor 300, a memory 301, a bus 302 and a communication interface 303. The first processor 300, the communication interface 303 and the memory 301 are connected via the bus 302; the memory 301 stores a computer program that can be run on the first processor 300, and when the first processor 300 runs the computer program, it executes the user privacy data processing method provided in any of the aforementioned embodiments of the present application.

[0072] The memory 301 may include a high-speed random access memory (RAM), and may also include a non-volatile memory, such as at least one disk memory. The communication connection between the system network element and at least one other network element is realized through at least one communication interface 303 (which may be wired or wireless), and the Internet, wide area network, local area network, metropolitan area network, etc. may be used.

[0073] The bus 302 may be an ISA bus, a PCI bus, or an EISA bus, etc. The bus may be divided into an address bus, a data bus, a control bus, etc. Among them, the memory 301 is used to store programs, and the first processor 300 executes the program after receiving the execution instruction. The method for processing user privacy data disclosed in any implementation of the embodiment of the present application may be applied to the first processor 300, or implemented by the first processor 300.

[0074] The first processor 300 may be an integrated circuit chip with signal processing capabilities. In the implementation process, each step of the above method can be completed by the hardware integrated logic circuit or software instructions in the first processor 300. The above-mentioned first processor 300 can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a readily available programmable gate array (FPGA) or other programmable logic devices, discrete gates or transistor logic devices, discrete hardware components. The methods, steps and logic block diagrams disclosed in the embodiments of the present application can be implemented or executed. The general-purpose processor can be a microprocessor or the processor can also be any conventional processor, etc. The steps of the method disclosed in the embodiments of the present application can be embodied as a hardware decoding processor to execute, or a combination of hardware and software modules in the decoding processor to execute. The software module can be located in a mature storage medium in the field such as a random access memory, a flash memory, a read-only memory, a programmable read-only memory or an electrically erasable programmable memory, a register, etc. The storage medium is located in the memory 301, and the first processor 300 reads the information in the memory 301 and completes the steps of the above method in combination with its hardware.

[0075] The electronic device provided by the above-mentioned embodiments of the present application and the method for processing user privacy data provided by the embodiments of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the applications stored therein.

[0076] The present application embodiment provides a computer-readable storage medium, such as Figure 4 As shown, the computer-readable storage medium 401 stores a computer program, and when the computer program is read and executed by the second processor 402, the method for processing user privacy data as described above is implemented.

[0077] The technical solution of the embodiment of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for enabling an electronic device (which may be an air conditioner, a refrigeration device, a personal computer, a server, or a network device, etc.) or a processor to execute all or part of the steps of the method described in the embodiment of the present application. The aforementioned storage medium includes: various media that can store program codes, such as a USB flash drive, a mobile hard disk, a ROM, a RAM, a magnetic disk, or an optical disk.

[0078] The computer-readable storage medium provided in the above-mentioned embodiments of the present application and the method for processing user privacy data provided in the embodiments of the present application are based on the same inventive concept and have the same beneficial effects as the methods adopted, run or implemented by the application programs stored therein.

[0079] It should be noted that, in this application, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or still includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0080] Each embodiment in this application is described in a related manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the processing method, electronic device, electronic device, and readable storage medium embodiment for evaluating user privacy data, since they are basically similar to the above-mentioned embodiment of the processing method for user privacy data, the description is relatively simple, and the relevant parts can be referred to the partial description of the embodiment of the above-mentioned method for processing user privacy data.

[0081] Although the present application is disclosed as above, the present application is not limited thereto. Any person skilled in the art can make various changes and modifications without departing from the spirit and scope of the present application. Therefore, the protection scope of the present application shall be subject to the scope defined by the claims.

Claims

1. A method for processing user privacy data, characterized in that: include: Acquire data access information sent by the download client, wherein the data access information includes encrypted attribute information of the data to be downloaded, encrypted usage information of the data to be downloaded, physical attribute information of the download client, and user attribute information of the download client; Processing the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule; Processing the attribute information of the encrypted data to be downloaded based on the preset decryption rule to generate the data to be downloaded, wherein the data to be downloaded is desensitized data; Processing the encrypted usage information of the data to be downloaded and the user attribute information of the download client based on the preset decryption rule to generate a target access duration of the data to be downloaded, wherein the target access duration of the data to be downloaded is used to represent the target access time of the download client to the downloaded data; Processing the data to be downloaded based on preset access information of the data to be downloaded to generate a remaining cache duration of the data to be downloaded; Processing the target access duration of the data to be downloaded and the remaining cache duration of the data to be downloaded to generate a data access result; The encrypted usage information of the data to be downloaded and the user attribute information of the download client are processed based on the preset decryption rule to generate a target access duration of the data to be downloaded, including: Processing the usage information of the encrypted data to be downloaded based on the preset decryption rule to generate a preset access duration of the data to be downloaded; Processing the preset access duration of the data to be downloaded based on the user attribute information of the download client to generate a target access duration of the data to be downloaded; The data to be downloaded is processed based on preset access information of the data to be downloaded to generate a remaining cache duration of the data to be downloaded, including: Acquire preset access information of the data to be downloaded, wherein the preset access information of the data to be downloaded is used to represent access information of different download clients to the download data within a preset time period; Processing the preset access information of the data to be downloaded to generate the access duration of each download client; Processing the data to be downloaded to generate a target cache duration of the data to be downloaded, wherein the target cache duration of the data to be downloaded is used to represent a total access duration of the data to be downloaded; Processing the target cache duration of the data to be downloaded based on the access duration of each download client to generate a remaining cache duration of the data to be downloaded; The target access duration of the data to be downloaded and the remaining cache duration of the data to be downloaded are processed to generate a data access result, including: Processing the target access duration of the data to be downloaded based on the remaining cache duration of the data to be downloaded to generate a final access duration of the data to be downloaded; If the final access duration of the data to be downloaded is less than the target access duration of the data to be downloaded, the data to be downloaded is processed based on the usage information of the data to be downloaded to generate data index information, wherein the data index information is used to represent data matching the usage information of the data to be downloaded; The data index information is processed to generate a data access result.

2. The method according to claim 1, characterized in that Processing the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule includes: Processing the user attribute information of the download client to generate body image information of the target user and identity information of the target user; Processing the limb image information of the target user to generate action feature influencing factors of the target user; Processing the influencing factors of the target user's motion characteristics based on a preset limb motion recognition model to generate limb information of the target user, wherein the limb information of the target user is used to characterize limb change information of the target user; Processing the physical attribute information of the download client to generate security level information of the download client; Processing the target user's body information and the security level information of the download client to generate a password mapping table, wherein the password mapping table is used to represent the mapping relationship between different download clients and different body information of the target user; The password mapping table is processed to generate a preset decryption rule, wherein the preset decryption rule is updated irregularly based on different body information of the target user.

3. The method according to claim 1, characterized in that Processing the encrypted attribute information of the data to be downloaded based on the preset decryption rule to generate the data to be downloaded includes: Processing the attribute information of the data to be downloaded to generate mirror data of the data to be downloaded, wherein the mirror data of the data to be downloaded is non-original data of the data to be downloaded; Processing the encrypted attribute information of the data to be downloaded based on the preset decryption rule to generate information to be decrypted, wherein the information to be decrypted is non-private data of the data to be downloaded; The mirror data of the data to be downloaded is processed based on the information to be decrypted to generate the data to be downloaded, wherein the data to be downloaded is desensitized data.

4. The method according to claim 1, characterized in that After processing the target access duration of the data to be downloaded and the remaining cache duration of the data to be downloaded to generate a data access result, the method further includes: Performing data export processing on the data access result to generate data export information of the download client, wherein the data export information of the download client includes data export time information of the download client and data export frequency information of the download client; Processing the data export time information of the download client and the data export frequency information of the download client to generate data export information of the data to be downloaded; Respectively obtain data export information of data to be downloaded generated by different download clients; The data export information of the data to be downloaded generated by different download clients is processed to generate management information of the data to be downloaded, wherein the management information of the data to be downloaded is used to characterize the data access status of the data to be downloaded.

5. A device for processing user privacy data, characterized in that: The device comprises: An acquisition module, used to acquire data access information sent by a download client, wherein the data access information includes encrypted attribute information of the data to be downloaded, encrypted usage information of the data to be downloaded, physical attribute information of the download client, and user attribute information of the download client; A processing module, used to process the physical attribute information of the download client and the user attribute information of the download client to generate a preset decryption rule; based on the preset decryption rule, the attribute information of the encrypted data to be downloaded is processed to generate the data to be downloaded, wherein the data to be downloaded is the data after desensitization processing; based on the preset decryption rule, the usage information of the encrypted data to be downloaded and the user attribute information of the download client are processed to generate a target access time of the data to be downloaded, wherein the target access time of the data to be downloaded is used to characterize the target access time of the download client to the data to be downloaded; based on the preset access information of the data to be downloaded, the data to be downloaded is processed to generate a remaining cache time of the data to be downloaded; the target access time of the data to be downloaded and the remaining cache time of the data to be downloaded are processed to generate a data access result; based on the preset access information of the data to be downloaded, the data to be downloaded is processed to generate a remaining cache time of the data to be downloaded, including: obtaining the preset access information of the data to be downloaded, wherein the preset access information of the data to be downloaded is used to characterize different download The client receives access information of the data to be downloaded within a preset time period; processes the preset access information of the data to be downloaded to generate the access time of each download client; processes the data to be downloaded to generate a target cache time of the data to be downloaded, wherein the target cache time of the data to be downloaded is used to represent the total access time of the data to be downloaded; processes the target cache time of the data to be downloaded based on the access time of each download client to generate a remaining cache time of the data to be downloaded; processes the target access time of the data to be downloaded and the remaining cache time of the data to be downloaded to generate a data access result, including: processing the target access time of the data to be downloaded based on the remaining cache time of the data to be downloaded to generate a final access time of the data to be downloaded; if the final access time of the data to be downloaded is less than the target access time of the data to be downloaded, processing the data to be downloaded based on the usage information of the data to be downloaded to generate data index information, wherein the data index information is used to represent data matching the usage information of the data to be downloaded; processes the data index information to generate a data access result.

6. An electronic device, characterized in that: include: a first processor; and a memory for storing executable instructions of the first processor; The first processor is configured to execute the method for processing user privacy data as described in any one of claims 1 to 4 by executing the executable instructions.

7. A computer-readable storage medium having a computer program stored thereon, characterized in that: When the computer program is executed by the second processor, the method for processing user privacy data according to any one of claims 1 to 4 is implemented.

Images