A method and device for intelligent storage of mobile phone data for privacy protection

Abstract

The present invention proposes a method and device for intelligent storage of mobile phone data for privacy protection. The method and device receive a data writing request submitted by an application, wherein the data writing request carries the data to be written in the storage space, performs privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data. When the data to be written contains the user's privacy data, performs privacy data separation on the data to be written to generate privacy metadata and non-privacy data, writes the non-privacy data into the regular storage space of the local file system, writes the privacy metadata into the overwrite space of the local file system, establishes a mapping channel between the overwrite space and the trusted space of the external file system, maps the overwrite space as a whole to the trusted space through the mapping channel, and clears the privacy metadata in the overwrite space, thereby effectively protecting the user's privacy data from being stolen and lost.

Description

Technical Field

[0001] The present invention relates to the technical field of privacy protection, and in particular to a method and device for intelligently storing mobile phone data for privacy protection. Background Art

[0002] With the popularity of smartphones, smartphones have gradually become one of the main personal belongings that people carry with them. The rich and powerful functions of smartphones enable them to help people record and process various information in their lives and work. Therefore, the data stored in them also includes various private data of people, including life and consumption habits, financial and social information, work and personal files, etc. At present, most applications directly record user data in the local storage space of smartphones. Once the user's mobile phone is lost, traditional protection measures such as lock screen passwords and data encryption are difficult to effectively protect the user's private data, and the data will be lost and cannot be recovered when the mobile phone is lost. Although cloud backup can avoid data loss, since user data in smartphones is usually stored in the corresponding application directory, each application installed and used by the user may involve some of the user's private data. At the same time, each application will contain a large amount of non-private data, resulting in extremely serious storage fragmentation of user's private data in smartphones. The traditional cloud backup method has high requirements on the size of cloud disk space. Summary of the invention

[0003] Based on the above problems, the present invention proposes a method and device for intelligent storage of mobile phone data for privacy protection, which can effectively protect the user's private data from being stolen and lost.

[0004] In view of this, a first aspect of the present invention proposes a method for intelligently storing mobile phone data for privacy protection, comprising:

[0005] receiving a data write request submitted by an application, wherein the data write request carries data to be written into a storage space;

[0006] Performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data;

[0007] When the data to be written contains the user's private data, performing private data separation on the data to be written to generate private metadata and non-private data;

[0008] Writing the non-privacy data into a regular storage space of a local file system;

[0009] Writing the privacy metadata into the overwrite space of the local file system;

[0010] Establishing a mapping channel between the overwrite space and the trusted space of the external file system;

[0011] Mapping the overwrite space as a whole to the trusted space through the mapping channel;

[0012] The privacy metadata in the overwrite space is cleared.

[0013] Furthermore, before the step of receiving the data writing request submitted by the application, the method further includes:

[0014] Configure the user's privacy threshold;

[0015] Constructing a privacy data rule base, wherein the privacy data rule base is composed of privacy data identification rules, and each privacy data identification rule corresponds to a privacy degree;

[0016] The step of performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data specifically includes:

[0017] The privacy data in the data to be written is identified using a privacy data identification rule in the privacy data rule base whose privacy degree is greater than or equal to the privacy degree threshold.

[0018] Furthermore, the step of performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data specifically includes:

[0019] Decomposing the data to be written into a combination of a plurality of metadata and non-metadata, wherein the metadata is the smallest valid data unit constituting the data to be written;

[0020] Matching the metadata with privacy data identification rules in the privacy data rule base whose privacy degree is greater than the privacy degree threshold one by one;

[0021] When any metadata in the data to be written matches any privacy data identification rule in the privacy data rule base whose privacy degree is greater than the privacy degree threshold, it is determined that the data to be written contains the user's private data.

[0022] Furthermore, the step of performing privacy data separation on the data to be written to generate privacy metadata and non-privacy data specifically includes:

[0023] Requesting to allocate a first storage address of each privacy metadata to the overwrite space;

[0024] generating a text label corresponding to the privacy metadata;

[0025] Establishing a link relationship between the text label and the first storage address;

[0026] The text tag is inserted into a position in the non-metadata corresponding to the privacy metadata to generate the non-privacy data.

[0027] Furthermore, before the step of allocating the first storage address of each privacy metadata to the overwrite space request, the method further includes:

[0028] Traversing the privacy metadata stored in the overwrite space;

[0029] Determining whether the same privacy metadata is stored in the overwrite space;

[0030] When the same privacy metadata is stored in the overwrite space, the text label of the same privacy metadata and the corresponding first storage address are reused;

[0031] The steps of allocating a first storage address of each privacy metadata to the overwrite space request and generating a text label corresponding to the privacy metadata are skipped.

[0032] Furthermore, before the step of establishing a mapping channel between the overwrite space and the trusted space of the external file system, the method further includes:

[0033] Obtaining the space usage rate of the overwrite space;

[0034] Determining whether the space usage rate of the overwrite space is greater than a preset space usage rate threshold;

[0035] When the space usage rate of the overwrite space is greater than a preset space usage rate threshold, detecting a communication state between the mobile phone and an external storage device providing the external file system;

[0036] When the mobile phone is in a communication connection state with the external storage device providing the external file system, the step of establishing a mapping channel between the overwrite space and the trusted space of the external file system is performed.

[0037] Furthermore, the step of mapping the overwrite space as a whole to the trusted space through the mapping channel specifically includes:

[0038] Obtaining the size of the used storage space of the overwrite space;

[0039] Determine a storage space in the trusted space whose size is equal to the used storage space to construct a virtual overwrite space for mapping the overwrite space;

[0040] Generate a serial number for the virtual overwrite space;

[0041] The data in the overwrite space is mirrored and copied to the virtual overwrite space.

[0042] Furthermore, after the step of mapping the overwrite space as a whole to the trusted space through the mapping channel, the method further includes:

[0043] determining associated non-private data associated with the private metadata in the overwrite space;

[0044] Copying the associated non-private data to a trusted space;

[0045] An association relationship between the associated non-privacy data and the serial number of the virtual overwrite space is established.

[0046] Furthermore, after the step of clearing the privacy metadata in the overwrite space, the method further includes:

[0047] Determining whether the associated non-privacy data associated with the privacy metadata in the overwrite space is common data or uncommon data;

[0048] When the associated non-privacy data is commonly used data, retaining the non-privacy data in the regular storage space;

[0049] A link relationship between the text tag in the non-private data and the second storage address of the virtual overwrite space is established.

[0050] The second aspect of the present invention proposes a mobile phone data intelligent storage device for privacy protection, including a memory and a processor, wherein the processor executes a computer program stored in the memory to implement the mobile phone data intelligent storage method for privacy protection as described in any one of the first aspect of the present invention.

[0051] The present invention proposes a method and device for intelligent storage of mobile phone data for privacy protection. The method and device receive a data writing request submitted by an application, wherein the data writing request carries the data to be written in the storage space, performs privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data. When the data to be written contains the user's privacy data, performs privacy data separation on the data to be written to generate privacy metadata and non-privacy data, writes the non-privacy data into the regular storage space of the local file system, writes the privacy metadata into the overwrite space of the local file system, establishes a mapping channel between the overwrite space and the trusted space of the external file system, maps the overwrite space as a whole to the trusted space through the mapping channel, and clears the privacy metadata in the overwrite space, thereby effectively protecting the user's privacy data from being stolen and lost. BRIEF DESCRIPTION OF THE DRAWINGS

[0052] Figure 1 is a schematic block diagram of a smart phone provided by an embodiment of the present invention;

[0053] Figure 2 It is a flow chart of a method for intelligent storage of mobile phone data for privacy protection provided by one embodiment of the present invention;

[0054] Figure 3 It is a schematic block diagram of a smart phone provided by another embodiment of the present invention. DETAILED DESCRIPTION

[0055] In order to more clearly understand the above-mentioned purpose, features and advantages of the present invention, the present invention is further described in detail below in conjunction with the accompanying drawings and specific embodiments. It should be noted that the embodiments of the present application and the features in the embodiments can be combined with each other without conflict.

[0056] In the following description, many specific details are set forth to facilitate a full understanding of the present invention. However, the present invention may also be implemented in other ways different from those described herein. Therefore, the protection scope of the present invention is not limited to the specific embodiments disclosed below.

[0057] In the description of the present invention, the term "multiple" refers to two or more. Unless otherwise clearly defined, the orientation or positional relationship indicated by the terms "upper", "lower", etc. is based on the orientation or positional relationship shown in the drawings. It is only for the convenience of describing the present invention and simplifying the description, and does not indicate or imply that the device or element referred to must have a specific orientation, be constructed and operated in a specific orientation. Therefore, it cannot be understood as a limitation of the present invention. The terms "connection", "installation", "fixation", etc. should be understood in a broad sense. For example, "connection" can be a fixed connection, a detachable connection, or an integral connection; it can be directly connected or indirectly connected through an intermediate medium. For ordinary technicians in this field, the specific meanings of the above terms in the present invention can be understood according to the specific circumstances. In addition, the terms "first", "second", etc. are only used for descriptive purposes, and cannot be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, the features defined as "first", "second", etc. can explicitly or implicitly include one or more of the features. In the description of the present invention, unless otherwise specified, the meaning of "multiple" is two or more.

[0058] In the description of this specification, the description of the terms "one embodiment", "some implementations", "specific embodiments", etc. means that the specific features, structures, materials or characteristics described in conjunction with the embodiment or example are included in at least one embodiment or example of the present invention. In this specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Moreover, the specific features, structures, materials or characteristics described can be combined in any one or more embodiments or examples in a suitable manner.

[0059] A method and device for intelligent storage of mobile phone data for privacy protection provided in accordance with some embodiments of the present invention will be described below with reference to the accompanying drawings.

[0060] The present invention provides a method for intelligently storing mobile phone data for privacy protection, which is applied to a smart phone with a privacy protection module. Figure 1 As shown, the smartphone includes a privacy protection module and a file system. The privacy protection module is a middleware used to connect applications and file systems. Each application needs to access the file system of the smartphone through the privacy protection system. The application's access to the file system includes but is not limited to file reading and file writing.

[0061] like Figure 2 As shown, the first aspect of the present invention proposes a method for intelligent storage of mobile phone data for privacy protection, comprising:

[0062] receiving a data write request submitted by an application, wherein the data write request carries data to be written into a storage space;

[0063] Performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data;

[0064] When the data to be written contains the user's private data, performing private data separation on the data to be written to generate private metadata and non-private data;

[0065] Writing the non-privacy data into a regular storage space of a local file system;

[0066] Writing the privacy metadata into the overwrite space of the local file system;

[0067] Establishing a mapping channel between the overwrite space and the trusted space of the external file system;

[0068] Mapping the overwrite space as a whole to the trusted space through the mapping channel;

[0069] The privacy metadata in the overwrite space is cleared.

[0070] Specifically, when an application is running in a smartphone, it often generates data read and write requests due to various internal and external events, where a data write request is a request for an application to write data generated by a sensor or processor, or data received from the network, to the local storage space of the smartphone. For example, a camera application generates an image file from the image data obtained from the image sensor and saves the image to the local storage space, or a browser application saves a document file downloaded by the user from the network to the local storage space. These data to be written usually contain some personal privacy data of the user, such as a photo containing the user's facial image, a photo of the user's ID card, or a document containing the user's name, address, work unit or work content.

[0071] like Figure 3 As shown, the local file system of the smartphone includes a regular storage space and an overwrite space. The regular storage space is a local storage space to which all applications can apply for read and write permissions, and the overwrite space is a local storage space that only the privacy protection module can access. The overwrite space only needs to store a small amount of privacy metadata, so only a small amount of space needs to be allocated from the local file system to meet usage requirements. The privacy protection module is also connected to an external storage device to establish a mapping channel between the overwrite space and the trusted space of the external file system. The external storage device is a storage device that is arranged outside the body of the smartphone. After the smartphone is connected to the external storage device by wired or wireless connection, files can be transferred to the external file system of the external storage device. The external file system provides users with a trusted space for storing their privacy data.

[0072] Furthermore, before the step of receiving the data writing request submitted by the application, the method further includes:

[0073] Configure the user's privacy threshold;

[0074] Constructing a privacy data rule base, wherein the privacy data rule base is composed of privacy data identification rules, and each privacy data identification rule corresponds to a privacy degree;

[0075] The step of performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data specifically includes:

[0076] The privacy data in the data to be written is identified using a privacy data identification rule in the privacy data rule base whose privacy degree is greater than or equal to the privacy degree threshold.

[0077] Specifically, different users often have different definitions of privacy, that is, different users have different acceptance levels for the public scope of personal information. In the technical solution of the present invention, corresponding privacy thresholds can be configured for different users to define private data and non-private data, thereby ultimately determining which data can be written into the conventional storage space and which data needs to be transferred to the trusted space through the overwrite space.

[0078] Exemplarily, taking the privacy degree range of 0-100 as an example, each privacy data identification rule corresponds to a privacy degree with a value between 0-100. When the configured user's privacy threshold is 50, the privacy data identification rule with a privacy degree greater than or equal to 10 is used to perform the step of performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data.

[0079] Furthermore, the steps of configuring the user's privacy threshold specifically include:

[0080] Providing a first UI (User Interface) for a user to configure the privacy threshold;

[0081] Receiving a first configuration operation input by a user in the first UI interface for configuring the privacy threshold;

[0082] In response to the first configuration operation, the privacy threshold of the user is configured to a corresponding value.

[0083] In the technical solution of the above-mentioned implementation, the system can configure a default privacy threshold. During use, the user can decide whether to reconfigure the privacy threshold based on the content and data volume of the privacy metadata written to the overwrite space. For example, when the user believes that the amount of data written to the trusted space is large and contains data that the user believes has a low privacy level, the amount of private data written to the overwrite space can be reduced by increasing the privacy threshold. Conversely, when the user believes that the conventional storage space still contains some private data, the amount of private data written to the overwrite space can be increased by lowering the privacy threshold.

[0084] Furthermore, the method for intelligently storing mobile phone data for privacy protection also includes:

[0085] Provide a second UI interface for users to configure custom privacy data rules;

[0086] Receiving a second configuration operation for configuring a custom privacy data rule input by the user in the second UI interface;

[0087] In response to the second configuration operation, the user-defined privacy data rule input by the user is added to the privacy data rule library.

[0088] Furthermore, the step of performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data specifically includes:

[0089] Decomposing the data to be written into a combination of a plurality of metadata and non-metadata, wherein the metadata is the smallest valid data unit constituting the data to be written;

[0090] Matching the metadata with privacy data identification rules in the privacy data rule base whose privacy degree is greater than the privacy degree threshold one by one;

[0091] When any metadata in the data to be written matches any privacy data identification rule in the privacy data rule base whose privacy degree is greater than the privacy degree threshold, it is determined that the data to be written contains the user's private data.

[0092] In the technical scheme of the above-mentioned implementation mode, the metadata is the smallest valid data unit constituting the data to be written, specifically referring to that each metadata is a data unit carrying valid information, and the valid information carried by these data units will not change or cause ambiguity after it is separated from the data to be written as a whole. For example, a group of digital characters used to represent a mobile phone number, a group of digital strings or digital plus letter strings used to represent an ID card number, a group of text strings used to represent a name, a picture containing a face image, and an audio data containing a user's voice can all be metadata, but a single number, a text, a word, a pixel, a sound waveform, etc., after changing different contexts, the information or meaning it carries may change, and it is not the metadata referred to in the present invention. It should be known that although images or audio, etc. can also be decomposed into smaller metadata, such as a face image extracted from a photo, or a voice extracted from an audio file, etc., in order to reduce the processing difficulty and improve the processing efficiency, in the technical scheme of the present invention, a picture, an audio, a video and other multimedia data are processed as a whole without further decomposition, that is, we regard multimedia objects such as pictures, audio and video as indecomposable minimum valid data units.

[0093] The non-metadata is other data in the data to be written except the metadata, and the non-metadata can be decomposed into smaller data units, but the decomposed data units no longer carry valid information, such as pronouns such as you, me, him, here, there, etc. in the text content, or symbols such as punctuation, separators, and emoticons.

[0094] Furthermore, the step of performing privacy data separation on the data to be written to generate privacy metadata and non-privacy data specifically includes:

[0095] Requesting to allocate a first storage address of each privacy metadata to the overwrite space;

[0096] generating a text label corresponding to the privacy metadata;

[0097] Establishing a link relationship between the text label and the first storage address;

[0098] The text tag is inserted into a position in the non-metadata corresponding to the privacy metadata to generate the non-privacy data.

[0099] Furthermore, the step of writing the non-privacy data into the regular storage space of the local file system specifically includes:

[0100] Requesting the regular storage space to allocate a second storage address of the non-privacy metadata;

[0101] The privacy metadata is written into a storage space in the regular storage space corresponding to the second storage address.

[0102] Furthermore, the step of writing the privacy metadata into the overwrite space of the local file system is specifically to write the privacy metadata into the storage space in the overwrite space corresponding to the first storage address.

[0103] The text tag is a character tag used to replace the privacy metadata in the data to be written. It can be a randomly generated string or the type name of the privacy metadata. For example, if a word document contains the user's ID number, the string " ID number " to replace the ID number in the document. For example, if a PDF file contains a user's photo, you can use the string " photo " to replace the photo in the document.

[0104] Furthermore, the step of establishing a link relationship between the text label and the first storage address specifically includes:

[0105] Generate an identifier corresponding to each text label;

[0106] The identity identifier and the first storage address are associated and stored.

[0107] When an application with access rights to privacy data reads the data to be written, the first storage address of the corresponding privacy metadata is obtained through the identity identifier of the text tag, and the privacy metadata stored at the first storage address is read from the overwrite space and then restored to the corresponding position of the data to be written.

[0108] Furthermore, before the step of allocating the first storage address of each privacy metadata to the overwrite space request, the method further includes:

[0109] Traversing the privacy metadata stored in the overwrite space;

[0110] Determining whether the same privacy metadata is stored in the overwrite space;

[0111] When the same privacy metadata is stored in the overwrite space, the text label of the same privacy metadata and the corresponding first storage address are reused;

[0112] The steps of allocating a first storage address of each privacy metadata to the overwrite space request and generating a text label corresponding to the privacy metadata are skipped.

[0113] Specifically, privacy metadata, especially text-based privacy metadata, has a very high recurrence rate in smart phones, and multimedia-based privacy metadata is often copied into multiple files when it is forwarded multiple times in communication tools. In order to save the occupation of the overwrite space, when any privacy metadata already exists in the overwrite space, storage space is no longer allocated repeatedly. It should be known that in the technical solution of this embodiment, when different data to be written reuse the text label and first storage address of the same privacy metadata, their text labels have different identity identifiers.

[0114] Furthermore, before the step of establishing a mapping channel between the overwrite space and the trusted space of the external file system, the method further includes:

[0115] Obtaining the space usage rate of the overwrite space;

[0116] Determining whether the space usage rate of the overwrite space is greater than a preset space usage rate threshold;

[0117] When the space usage rate of the overwrite space is greater than a preset space usage rate threshold, detecting a communication state between the mobile phone and an external storage device providing the external file system;

[0118] When the mobile phone is in a communication connection state with the external storage device providing the external file system, the step of establishing a mapping channel between the overwrite space and the trusted space of the external file system is performed.

[0119] The space usage rate of the overwrite space refers to the ratio between the used storage space and the total storage space of the overwrite space, and is used to indicate the space occupation of the privacy data in the overwrite space.

[0120] Preferably, the external storage device of the external file system is a home data center. When the mobile phone and the home data center are in the same network environment, a communication connection is automatically established with the home data center, that is, at this time, the condition that the mobile phone and the external storage device providing the external file system are in a communication connection state is met.

[0121] Furthermore, the step of mapping the overwrite space as a whole to the trusted space through the mapping channel specifically includes:

[0122] Obtaining the size of the used storage space of the overwrite space;

[0123] Determine a storage space in the trusted space whose size is equal to the used storage space to construct a virtual overwrite space for mapping the overwrite space;

[0124] Generate a serial number for the virtual overwrite space;

[0125] The data in the overwrite space is mirrored and copied to the virtual overwrite space.

[0126] The virtual overwrite space is a storage space that is completely consistent with the overwrite space. Each storage unit in the virtual overwrite space has the same virtual access address as the storage unit at the corresponding position in the overwrite space. In the step of mirroring the data in the overwrite space to the virtual overwrite space, the data in each storage unit in the overwrite space is copied to the storage unit at the corresponding storage position in the virtual overwrite space, so that the virtual access address of each privacy metadata in the virtual overwrite space is consistent with the access address in the overwrite space, that is, the first storage address.

[0127] The number of the virtual overwrite space is a unique identification of the virtual overwrite space, that is, the virtual overwrite space constructed in each execution of the step of mapping the overwrite space as a whole to the trusted space through the mapping channel has a unique number.

[0128] Furthermore, after the step of mapping the overwrite space as a whole to the trusted space through the mapping channel, the method further includes:

[0129] determining associated non-private data associated with the private metadata in the overwrite space;

[0130] Copying the associated non-private data to a trusted space;

[0131] An association relationship between the associated non-privacy data and the serial number of the virtual overwrite space is established.

[0132] The associated non-privacy data refers to non-privacy data containing a text tag pointing to the privacy metadata stored in the overwrite space. After the step of establishing the association relationship between the associated non-privacy data and the number of the virtual overwrite space, when an application with access rights accesses the non-privacy data in the trusted space, the associated virtual overwrite space can be determined by the number of the associated virtual overwrite space, so as to restore the corresponding data by reading the corresponding privacy metadata from the corresponding virtual overwrite space according to the first storage address to which it is linked.

[0133] Furthermore, after the step of clearing the privacy metadata in the overwrite space, the method further includes:

[0134] Determining whether the associated non-privacy data associated with the privacy metadata in the overwrite space is commonly used data or uncommon data;

[0135] When the associated non-privacy data is commonly used data, retaining the non-privacy data in the regular storage space;

[0136] A link relationship between the text tag in the non-private data and the second storage address of the virtual overwrite space is established.

[0137] Furthermore, whether the associated non-privacy data associated with the privacy metadata in the overwrite space is commonly used data or infrequently used data may be determined in the form of a combination of one or more of the number of accesses, the access frequency or the data type.

[0138] In the technical solution of the above-mentioned embodiment, the second storage address of the virtual overwrite space is the same as the first storage address of the overwrite space, and establishing a link relationship between the text label in the non-privacy data and the second storage address of the virtual overwrite space is specifically to modify the text label from pointing to the overwrite space to pointing to the corresponding virtual overwrite space according to the number of the virtual overwrite space.

[0139] Further, after the step of determining whether the associated non-privacy data associated with the privacy metadata in the overwrite space is common data or uncommon data, the method further includes:

[0140] When the associated non-privacy data is not commonly used data, the non-privacy data is deleted from the regular storage space of the local file system.

[0141] Furthermore, after the step of mapping the overwrite space as a whole to the trusted space through the mapping channel, the method further includes:

[0142] Constructing a common privacy metadata storage space in the trusted space;

[0143] Get the pre-configured virtual overwrite space scanning period;

[0144] Performing a virtual overlay space scan in each virtual overlay space scan cycle;

[0145] Identify the same privacy metadata in each virtual overlay space;

[0146] When the same privacy metadata exists in multiple virtual overwrite spaces, the corresponding privacy metadata is determined as the target privacy metadata;

[0147] Copying the target privacy metadata to the common privacy metadata storage space;

[0148] Linking the target privacy metadata in the corresponding virtual overwrite space to the common privacy metadata storage space;

[0149] The target privacy metadata in the corresponding virtual overwrite space is cleared and the storage space occupied by the target privacy metadata in the virtual overwrite space is reclaimed.

[0150] Exemplarily, when the same privacy metadata exists in three or more virtual overwrite spaces, the corresponding privacy metadata is determined as the target privacy metadata and subsequent steps are performed.

[0151] The second aspect of the present invention proposes a mobile phone data intelligent storage device for privacy protection, including a memory and a processor, wherein the processor executes a computer program stored in the memory to implement the mobile phone data intelligent storage method for privacy protection as described in any one of the first aspect of the present invention.

[0152] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "comprise a ..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.

[0153] According to the embodiments of the present invention as described above, these embodiments do not describe all the details in detail, nor do they limit the invention to the specific embodiments described. Obviously, many modifications and changes can be made based on the above description. This specification selects and specifically describes these embodiments in order to better explain the principles and practical applications of the present invention, so that those skilled in the art can make good use of the present invention and the modified use based on the present invention. The present invention is limited only by the claims and their full scope and equivalents.

Claims

1. A method for intelligent storage of mobile phone data for privacy protection, characterized in that: include: receiving a data write request submitted by an application, wherein the data write request carries data to be written into a storage space; Performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data; When the data to be written contains the user's private data, performing private data separation on the data to be written to generate private metadata and non-private data; Writing the non-privacy data into a regular storage space of a local file system; Writing the privacy metadata into the overwrite space of the local file system; Establishing a mapping channel between the overwrite space and the trusted space of the external file system; Mapping the overwrite space as a whole to the trusted space through the mapping channel; clearing the privacy metadata in the overwrite space; Before the step of receiving the data writing request submitted by the application, the step further includes: Configure the user's privacy threshold; Constructing a privacy data rule base, wherein the privacy data rule base is composed of privacy data identification rules, and each privacy data identification rule corresponds to a privacy degree; The step of performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data specifically includes: Using a privacy data identification rule in the privacy data rule base whose privacy degree is greater than or equal to the privacy degree threshold to identify the privacy data in the data to be written; The step of performing privacy data identification on the data to be written to determine whether the data to be written contains the user's privacy data specifically includes: Decomposing the data to be written into a combination of a plurality of metadata and non-metadata, wherein the metadata is the smallest valid data unit constituting the data to be written; Matching the metadata with privacy data identification rules in the privacy data rule base whose privacy degree is greater than the privacy degree threshold one by one; When any metadata in the data to be written matches any privacy data identification rule in the privacy data rule base whose privacy degree is greater than the privacy degree threshold, it is determined that the data to be written contains the user's private data; The step of performing privacy data separation on the data to be written to generate privacy metadata and non-privacy data specifically includes: Requesting to allocate a first storage address of each privacy metadata to the overwrite space; generating a text label corresponding to the privacy metadata; Establishing a link relationship between the text label and the first storage address; Inserting the text tag into a position in the non-metadata corresponding to the privacy metadata to generate the non-privacy data; Before the step of allocating the first storage address of each privacy metadata to the overwrite space request, the method further includes: Traversing the privacy metadata stored in the overwrite space; Determining whether the same privacy metadata is stored in the overwrite space; When the same privacy metadata is stored in the overwrite space, the text label of the same privacy metadata and the corresponding first storage address are reused; The steps of allocating a first storage address of each privacy metadata to the overwrite space request and generating a text label corresponding to the privacy metadata are skipped.

2. The method for intelligent storage of mobile phone data for privacy protection according to claim 1, characterized in that: Before the step of establishing a mapping channel between the overwrite space and the trusted space of the external file system, the method further includes: Obtaining the space usage rate of the overwrite space; Determining whether the space usage rate of the overwrite space is greater than a preset space usage rate threshold; When the space usage rate of the overwrite space is greater than a preset space usage rate threshold, detecting a communication state between the mobile phone and an external storage device providing the external file system; When the mobile phone is in a communication connection state with the external storage device providing the external file system, the step of establishing a mapping channel between the overwrite space and the trusted space of the external file system is performed.

3. The method for intelligent storage of mobile phone data for privacy protection according to claim 2, characterized in that: The step of mapping the overwrite space as a whole to the trusted space through the mapping channel specifically includes: Obtaining the size of the used storage space of the overwrite space; Determine a storage space in the trusted space whose size is equal to the used storage space to construct a virtual overwrite space for mapping the overwrite space; Generate a serial number for the virtual overwrite space; The data in the overwrite space is mirrored and copied to the virtual overwrite space.

4. The method for intelligent storage of mobile phone data for privacy protection according to claim 3, characterized in that: After the step of mapping the overwrite space as a whole to the trusted space through the mapping channel, the method further includes: determining associated non-private data associated with the private metadata in the overwrite space; Copying the associated non-private data to a trusted space; An association relationship between the associated non-privacy data and the serial number of the virtual overwrite space is established.

5. The method for intelligent storage of mobile phone data for privacy protection according to claim 4, characterized in that: After the step of clearing the privacy metadata in the overwrite space, the method further includes: Determining whether the associated non-privacy data associated with the privacy metadata in the overwrite space is common data or uncommon data; When the associated non-privacy data is commonly used data, retaining the non-privacy data in the regular storage space; A link relationship between the text tag in the non-private data and the second storage address of the virtual overwrite space is established.

6. A mobile phone data intelligent storage device for privacy protection, characterized in that: It comprises a memory and a processor, wherein the processor executes a computer program stored in the memory to implement a mobile phone data intelligent storage method for privacy protection as described in any one of claims 1 to 5.

Images