Electronic privacy information protection method and device, equipment and storage medium

Abstract

The invention discloses an electronic privacy information protection method and device, equipment and a storage medium, relates to the technical field of information security, and discloses an electronic privacy information protection method which comprises the following steps: when a request for reading electronic information is received, reading the electronic information; obtaining unprocessed duration between the time point of the request and the time point of receiving the electronic information, and performing identity verification on a user who reads the electronic information; if the unprocessed duration is greater than a preset retention duration and the user passes identity verification, reading data privacy in the electronic information from a preset standby device; and supplementing the data privacy into the electronic information to obtain complete information before the data privacy in the electronic information is transferred to the preset standby equipment. Namely, the digital privacy part in the information is transferred, and triple verification is performed on the user reading the information, so that the information is prevented from being leaked during reading and writing, and the leakage risk of the information during reading and writing is further reduced.

Description

Technical Field

[0001] The present application relates to the field of information security technology, and in particular to methods, devices, equipment, and storage media for protecting electronic privacy information. Background Art

[0002] As information digitization becomes more and more popular, information storage and transmission are all processed online, resulting in privacy and security issues for personal information and corporate information data.

[0003] Currently, to prevent information leakage, data packets are typically encrypted before being displayed to the user who is reading the packet and passing a password verification, thereby preventing the leakage of private data in the information. Alternatively, portions of the displayed information are coded to prevent the user from accessing the entire information. However, if the encrypted data packet is decrypted, the user can obtain all the information in the packet. In other words, if the data packet is improperly decrypted, all the information in the packet will be exposed to the user, resulting in information leakage, which in turn increases the risk of information leakage during reading and writing.

[0004] The above content is only used to assist in understanding the technical solution of this application and does not constitute an admission that the above content is prior art. Summary of the Invention

[0005] The main purpose of this application is to provide an invention name, which aims to solve the technical problem that after a user cracks an information data packet, all information in the data packet will be exposed to the user, thereby increasing the risk of information leakage when reading and writing.

[0006] To achieve the above objectives, this application proposes a method for protecting electronic privacy information, the method comprising:

[0007] Upon receiving a request to read electronic information, obtaining the unprocessed time between the time of the request and the time of receipt of the electronic information, and performing identity authentication on the user who reads the electronic information;

[0008] If the unprocessed time period is longer than the preset retention time period and the user passes identity authentication, then reading the data privacy in the electronic information from a preset backup device;

[0009] The data privacy is added to the electronic information to obtain complete information before the data privacy in the electronic information is transferred to the preset backup device.

[0010] In one embodiment, upon receiving a request to read electronic information, obtaining the unprocessed time between the time of the request and the time of receipt of the electronic information, and authenticating the user who reads the electronic information further comprises:

[0011] After receiving the electronic information, record the unprocessed time period during which the electronic information has not been operated on;

[0012] determining whether it is necessary to identify data privacy that needs to be hidden from the electronic information based on the unprocessed time period;

[0013] If it is determined that the data privacy needs to be hidden, the data privacy is transferred to a preset backup device, and the data privacy in the electronic information is coded.

[0014] In one embodiment, the step of determining whether it is necessary to identify data privacy that needs to be hidden from the electronic information based on the unprocessed time period includes:

[0015] Determine whether the unprocessed time is greater than the preset retention time;

[0016] If the unprocessed time period is longer than the preset retention time period, identifying data privacy that needs to be hidden from the electronic information;

[0017] If the unprocessed time period is less than or equal to the preset retention time period, the data privacy that needs to be hidden in the electronic information is retained before responding to a closing message operation on the electronic information.

[0018] In one embodiment, after the step of adding the data privacy to the electronic information to obtain the complete information before the data privacy in the electronic information is transferred to the preset backup device, the step further includes:

[0019] If a download or forwarding operation request is received, the data privacy is not obtained from the preset backup device, and public information that does not contain the data privacy is obtained in the electronic information.

[0020] In one embodiment, after the steps of, upon receiving a request to read electronic information, obtaining the unprocessed time between the time of the request and the time of receipt of the electronic information, and authenticating the user who reads the electronic information, further include:

[0021] If the user fails to pass identity authentication, determining whether the electronic information has been cracked;

[0022] If the electronic information is cracked, the public information after the data privacy is transferred in the electronic information is obtained.

[0023] In one embodiment, the step of performing face recognition on the user includes:

[0024] Detecting whether the face of the user reading the electronic information is within a preset area;

[0025] If the user's face is within the preset area, detecting whether there are other users within the preset area;

[0026] If the other users exist in the preset area, it is determined that the face recognition of the user fails.

[0027] In addition, to achieve the above-mentioned purpose, the present application also proposes a device for protecting electronic privacy information, the device comprising:

[0028] a verification module configured to, upon receiving a request to read electronic information, obtain an unprocessed time duration between a time point of the request and a time point of receipt of the electronic information, and authenticate the user who reads the electronic information;

[0029] a privacy reading module, configured to read the data privacy in the electronic information from a preset backup device if the unprocessed time period is greater than a preset retention time period and the user passes identity authentication;

[0030] The supplementing module is used to supplement the data privacy into the electronic information to obtain the complete information before the data privacy in the electronic information is transferred to the preset backup device.

[0031] In addition, to achieve the above-mentioned purpose, the present application also proposes a device for protecting electronic privacy information, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the method for protecting electronic privacy information as described above.

[0032] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium. A computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the method for protecting electronic privacy information as described above are implemented.

[0033] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program. When the computer program is executed by a processor, it implements the steps of the method for protecting electronic privacy information as described above.

[0034] One or more technical solutions proposed in this application have at least the following technical effects:

[0035] In order to ensure that the data privacy in the electronic information will not be leaked, this application needs to authenticate the user when the user needs to read the electronic information. When the authentication is passed, it means that the user's identity is safe, that is, the user who reads the electronic information is the user with viewing permission. After confirming that the user is the user, it is necessary to further judge the difference between the time when the user reads the electronic information and the time when the electronic information is received (unprocessed time). In order to avoid the electronic information being cracked due to being unprocessed for a long time, and to avoid the delay in the display of the electronic information when the user views the electronic information due to the electronic information processing time being too fast, therefore, after determining that the unprocessed time exceeds the preset retention time, it means that the data privacy in the electronic information is not leaked. The private part is transferred and hidden. At this time, it is necessary to read the digital privacy part of the electronic information transferred to the preset backup device from the preset backup device. By transferring the digital privacy part in the information to the preset backup device, it can be avoided that when the electronic information is cracked, the data privacy in the electronic information will also be exposed, resulting in information leakage. In order to enable users who have passed the identity authentication to obtain the complete electronic information, it is necessary to read the data privacy from the preset backup device and add it to the electronic information to obtain complete information. That is, by transferring the digital privacy part in the electronic information and verifying the user who reads the electronic information, the information can be avoided from being leaked during reading and writing, thereby reducing the risk of information leakage during reading and writing. BRIEF DESCRIPTION OF THE DRAWINGS

[0036] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0037] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the following briefly introduces the drawings required for use in the embodiments or the description of the prior art. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without any creative work.

[0038] Figure 1 A flowchart of the first embodiment of the method for protecting electronic privacy information of this application is provided;

[0039] Figure 2 A flowchart of the second embodiment of the method for protecting electronic privacy information of this application is provided;

[0040] Figure 3 A flowchart of the third embodiment of the method for protecting electronic privacy information of this application is provided;

[0041] Figure 4 This is a schematic diagram of the module structure of the electronic privacy information protection device according to an embodiment of the present application;

[0042] Figure 5 Schematic diagram of the device structure of the hardware operating environment involved in the method for protecting electronic privacy information in the embodiment of the present application.

[0043] The realization of the objectives, functional features and advantages of this application will be further explained in conjunction with embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0044] It should be understood that the specific embodiments described herein are merely used to explain the technical solutions of the present application and are not intended to limit the present application.

[0045] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0046] The main solution of the embodiment of the present application is: when the information reading and writing device receives a request to read electronic information, it obtains the unprocessed time between the time point of the request and the time point of receipt of the electronic information, and authenticates the user who reads the electronic information; if the face recognition, the digital password verification and the fingerprint verification are all passed, the data privacy in the electronic information is obtained from the preset backup device to obtain the electronic information.

[0047] In this embodiment, for ease of description, the following description is made with the information reading and writing device as the execution subject.

[0048] To prevent information leakage, existing technologies typically encrypt data packets for reading and writing. After the user reading the data packet passes a password verification, the information content is displayed to the user, thereby preventing the leakage of private data in the information. Alternatively, portions of the displayed information are coded to prevent the user from accessing the entire information. However, if the data packet is encrypted, the user can decrypt the data packet and obtain all the information in the data packet. In other words, if the data packet is improperly decrypted, all the information in the data packet will be exposed to the user, resulting in information leakage, thereby increasing the risk of information leakage during reading and writing.

[0049] The present application provides a solution. In order to ensure that the data privacy in the electronic information will not be leaked, when the user needs to read the electronic information, the user needs to be authenticated. When the authentication is passed, it indicates that the user's identity is safe, that is, the user who reads the electronic information is the user with viewing permission. After confirming that the user is the user, it is necessary to further judge the difference between the time when the user reads the electronic information and the time when the electronic information is received (unprocessed time). In order to avoid the electronic information being cracked due to long-term unprocessing and to avoid the delay in displaying the electronic information when the user views the electronic information due to too fast processing time, therefore, after determining that the unprocessed time exceeds the preset retention time, it indicates that the electronic information The data privacy part in the electronic information is transferred and hidden. At this time, it is necessary to read the digital privacy part of the electronic information transferred to the preset backup device from the preset backup device. By transferring the digital privacy part in the information to the preset backup device, it can be avoided that when the electronic information is cracked, the data privacy in the electronic information will also be exposed, resulting in information leakage. In order to enable users who have passed the identity authentication to obtain the complete electronic information, it is necessary to read the data privacy from the preset backup device and add it to the electronic information to obtain complete information. That is, by transferring the digital privacy part in the electronic information and verifying the user who reads the electronic information, the information can be avoided from being leaked during reading and writing, thereby reducing the risk of information leakage during reading and writing.

[0050] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication, and program execution functions, such as a tablet computer, personal computer, mobile phone, etc., or an electronic device or information reading and writing device capable of performing the above functions. The following uses an information reading and writing device as an example to illustrate this embodiment and the following embodiments.

[0051] Based on this, the embodiment of the present application provides a method for protecting electronic privacy information, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the method for protecting electronic privacy information of this application.

[0052] In this embodiment, the method for protecting electronic privacy information includes steps S10 to S40:

[0053] Step S10, when a request to read electronic information is received, obtaining the unprocessed time between the time of the request and the time of receipt of the electronic information, and performing identity authentication on the user who reads the electronic information;

[0054] It should be noted that electronic information may be information received by an information reading and writing device, information to be sent, stored information, etc. The unprocessed time may be the time interval between receiving the electronic information and receiving a request to read the electronic information.

[0055] Furthermore, it should be noted that to prevent information leakage, the information received, sent, or stored by information reading and writing devices is all public information that has been shielded from data privacy. Therefore, users are required to trigger a read request for electronic information when receiving, sending, or storing information. Shielding can involve transferring private portions of information or masking private portions of information by coding or other means.

[0056] It is understandable that since users may not process electronic information in a timely manner after receiving it, and hiding and restoring electronic information will take up a certain amount of computing power and consume a certain amount of time, in order to ensure the privacy security of electronic information while avoiding reading delays when users process the electronic information, it is possible to determine whether the privacy in the electronic information needs to be hidden based on the length of time the electronic information has been unprocessed.

[0057] It is understandable that since the user who reads the electronic information may not be an authorized user of the information reading and writing device, in order to prevent the electronic information from being obtained by unauthorized users, it is necessary to authenticate the user to ensure the correctness of the user's identity.

[0058] It is understandable that when performing face recognition on twin users, recognition errors will occur, which increases the probability of electronic information leakage, and digital passwords are easy to crack. In addition, the user's fingerprints are easy to imitate. Therefore, whether using face recognition, digital passwords, or fingerprint verification, there is a risk of being cracked, which increases the risk of information leakage. In order to ensure that the user's identity information is the authorized user, the user can be triple-verified by face recognition, digital password verification, and fingerprint verification to ensure the user's identity information, thereby avoiding information leakage due to inaccurate user identity authentication.

[0059] It should be noted that since it is relatively complicated to crack digital passwords, facial recognition and fingerprint verification separately, triple verification of users including facial recognition, digital password verification and fingerprint verification can increase the difficulty of cracking, reduce the probability of information being cracked, and thus reduce the risk of information leakage.

[0060] Step S20: If the unprocessed time period is longer than the preset retention time period and the user passes the identity authentication, the data privacy in the electronic information is read from a preset backup device.

[0061] It should be noted that the preset backup device can be a cloud server, or it can be other information reading and writing devices other than the information reading and writing device, or it can be various storage devices, etc., without specific limitation. Data privacy is information directly or indirectly contained in the data, involving individuals or organizations, which is not suitable for public disclosure and needs to be protected during data collection, data storage, data query and analysis, and data release. Among them, data privacy is transferred to the preset backup device for storage, that is, when the user does not request to view the electronic information or the user's identity verification fails, the user obtains public data that does not contain the data privacy part. The preset retention period can be the time from the receipt of the electronic information to the beginning of hiding the data privacy of the electronic information.

[0062] In addition, it should be noted that data privacy can be set by the user. For example, part of the phone number can be set as data privacy, or the entire phone number can be set as data privacy. For example, if the phone number is "12234567890", the "34567890" part can be set as data privacy, that is, the last 8 digits of the phone number are set as data privacy, or the "34567" part can be set as data privacy, that is, the middle 5 digits of the phone number are set as data privacy, or "12234567890" can be set as data privacy, that is, all 11 digits of the phone number are set as data privacy.

[0063] It can be explained that when the unprocessed time of electronic information is longer than the preset retention time, it means that the probability of the electronic information being cracked increases. In order to avoid the data privacy in the electronic information being cracked when the electronic information is cracked, therefore, when the unprocessed time is longer than the preset retention time, the data privacy in the electronic information needs to be transferred to the preset backup device. This can ensure that the electronic information obtained by the user by cracking the electronic information does not contain the data privacy part, that is, the data privacy part is saved separately, avoiding the leakage of information during the reading and writing process, thereby reducing the risk of information leakage, and can also avoid prematurely shielding data privacy, resulting in delays when the user normally decodes and obtains electronic information.

[0064] Step S30: Supplement the data privacy into the electronic information to obtain complete information before the data privacy in the electronic information is transferred to the preset backup device.

[0065] It is understandable that after the user's identity is confirmed, in order to prevent the electronic information obtained by the user from being public information, it is necessary to supplement the data privacy read from the preset backup device to the electronic information so that the user can obtain complete electronic information.

[0066] Optionally, in order to prevent users from privately forwarding or downloading the complete information after reading it, which may lead to information leakage, the step of adding the data privacy to the electronic information and obtaining the complete information before transferring the data privacy in the electronic information to the preset backup device further includes:

[0067] If a download or forwarding operation request is received, the data privacy is not obtained from the preset backup device, and public information that does not contain the data privacy is obtained from the electronic information. The public information may be information that does not need to be kept confidential.

[0068] It is understandable that in order to avoid information leakage due to downloading or forwarding, after receiving the download or forwarding operation request, data privacy may not be obtained from the preset backup device, so that the information downloaded or forwarded by the user only contains public information that does not contain data privacy in the electronic information, and there is no data privacy, thereby avoiding information leakage due to downloading or forwarding.

[0069] This embodiment provides a method for protecting electronic privacy information. In order to ensure that the data privacy in the electronic information will not be leaked, when a user needs to read the electronic information, the user needs to be authenticated. When the authentication is passed, it indicates that the user's identity is safe, that is, the user who reads the electronic information is the user with viewing permission. After confirming that the user is the user, it is necessary to further determine the difference between the time when the user reads the electronic information and the time when the electronic information is received (unprocessed time). In order to prevent the electronic information from being cracked due to being unprocessed for a long time and to avoid the delay in displaying the electronic information when the user views the electronic information due to the electronic information being processed too quickly, after determining that the unprocessed time exceeds the preset retention time, it indicates that the user has passed the authentication. The data privacy part in the electronic information is transferred and hidden. At this time, the digital privacy part of the electronic information transferred to the preset backup device needs to be read from the preset backup device. By transferring the digital privacy part of the information to the preset backup device, it can be avoided that when the electronic information is cracked, the data privacy in the electronic information will also be exposed, resulting in information leakage. In order to enable users who have passed the identity authentication to obtain the complete electronic information, it is necessary to read the data privacy from the preset backup device and supplement it to the electronic information to obtain complete information. That is, by transferring the digital privacy part in the electronic information and verifying the user who reads the electronic information, the information can be avoided from being leaked during reading and writing, thereby reducing the risk of information leakage during reading and writing.

[0070] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above embodiment 1 can be referred to the above introduction and will not be described in detail later. Figure 2Before step S10, the method for protecting electronic privacy information further includes steps S01 to S02:

[0071] Step S01, after receiving the electronic information, recording the unprocessed time length of the electronic information;

[0072] It should be noted that the operation may be an operation on electronic information such as reading information, downloading information, deleting information or forwarding information. The electronic information may be any type of information transmitted through an electronic device, such as file information, image information, text information, or digital information.

[0073] Step S02: determining whether it is necessary to identify data privacy that needs to be hidden from the electronic information based on the unprocessed time period.

[0074] It is understandable that after acquiring new information, the data privacy in the electronic information can be identified based on a pre-set character string to facilitate hiding the data privacy.

[0075] Optionally, in order to avoid identifying all 11-digit numeric strings as telephone numbers, or all 18-digit numeric strings as ID numbers, etc., a character string for identifying the data privacy may be set before identifying the data privacy from the electronic information. The character string includes a character string representing the name of the data privacy and a character string representing the format of the data privacy. Specifically:

[0076] Get the format characteristics of the set data privacy;

[0077] A character identifier of the data privacy is generated based on the format characteristics.

[0078] It should be noted that format characteristics can be names of data privacy, such as ID cards, names, addresses, and mobile phone numbers; they can also be characteristics of data privacy, such as the composition characteristics of mobile phone numbers, ID card composition characteristics, or address record characteristics. Character strings representing data privacy names can be "ID card," "name," "address," and "mobile phone number." After identifying these character strings, the data privacy to be hidden can be identified from the numeric strings following these character strings. Character strings representing data privacy formats can be easily identified based on the characteristics of the information to be hidden, such as phone numbers, ID card numbers, work numbers, or addresses. For example, the first two digits of mobile phone numbers often begin with "13," "18," or "15," so "13," "18," or "15" can be set as character strings representing mobile phone numbers. For another example, the first two digits of an ID card generally represent the province, and the seventh to fourteenth digits represent the date of birth. Therefore, the first two digits and the seventh to fourteenth digits of an ID card can be set as character strings representing the ID card format.

[0079] It is understandable that in order to avoid identifying all 11-digit strings as telephone numbers, or identifying 18-digit strings as ID numbers, or any text with road names or province names as addresses for digital privacy identification, it is necessary to first generate identification characters for identifying digital privacy in information based on the format characteristics of data privacy, so as to carry out targeted identification of digital privacy of electronic information based on the identification characters and improve the intelligence of information hiding.

[0080] Step S03: If it is determined that the data privacy needs to be hidden, the data privacy is transferred to a preset backup device, and the data privacy in the electronic information is coded.

[0081] It should be noted that the coding process can be to indicate the data privacy part with an "X", or to delete the original data privacy part in the electronic information after the data privacy part is transferred, and cover the part with mosaics.

[0082] It is understandable that since each character in electronic information occupies a certain amount of space and each character requires a certain amount of transmission resources during transmission, in order to obtain the transmission resources required for electronic information based on shielded information during data transmission, the data privacy can be transferred and then coded so that the resources required to transmit or store the information are the same as those of the electronic information.

[0083] It is understandable that transferring data privacy to a preset backup device can ensure that after the information reading and writing device is cracked, the user obtains information with missing data privacy parts, so that the user cannot obtain electronic information even after cracking the information reading and writing device, thereby reducing the risk of information leakage during reading and writing.

[0084] In a specific implementation, if the received electronic information is identity information and the unprocessed time is set to 30 minutes, then when it is necessary to block the identity information, the employee's name, ID number, home address, telephone number and other information can be identified from the employee information, and the name in the name, the 7th to 14th digits of the ID number, the detailed address information part of the home address and the last 9 digits of the telephone number are deleted, and this part of the information is stored in the remaining information reading and writing devices, and the name, the 7th to 14th digits of the ID number, the detailed address information part and the last 9 digits of the telephone number contained in the electronic information in this information reading and writing device are deleted, and this part of the information is represented by "X", or the part of the information is coded to cover it. When it is detected that this information reading and writing device has been cracked to view the identity information or download the identity information, the cracking or downloading user obtains the electronic information with the covered name, the 7th to 14th digits of the ID number, the detailed address information part and the last 9 digits of the telephone number.

[0085] Furthermore, step S01 may further include:

[0086] Identifying character identifiers corresponding to data to be hidden from electronic information;

[0087] The data privacy that needs to be hidden in the electronic information is identified based on the character identifier.

[0088] It is understandable that since electronic information may contain information similar to data privacy, in order to avoid identifying the similar information as data privacy, the data privacy to be hidden in the electronic information can be determined by identifying the character identifier corresponding to the data to be hidden.

[0089] For example, address information may include not only actual addresses but also addresses in the game. In some cases, there is no need to hide the addresses in the game. Therefore, in order to accurately identify the actual address and hide the actual address, it is necessary to identify whether the address information in the electronic information is an actual address or a game address based on the character identifier of the actual address.

[0090] Furthermore, step S02 may further include:

[0091] Determine whether the unprocessed time is greater than the preset retention time;

[0092] If the unprocessed time period is longer than the preset retention time period, identifying data privacy that needs to be hidden from the electronic information;

[0093] If the unprocessed time period is less than or equal to the preset retention time period, the data privacy that needs to be hidden in the electronic information is retained before responding to a closing message operation on the electronic information.

[0094] It should be noted that the message closing operation can be triggered after the user has finished viewing the message, or it can be automatically triggered after the user has viewed the message for a certain period of time. The preset retention period can be customized by the sender of the electronic message. In other words, the preset retention period can be included in the electronic message, and the preset retention period can be automatically triggered after the electronic message is received, thus providing flexibility to various users.

[0095] It is understandable that since the same electronic information may be sent to multiple information reading and writing devices, and the trust level of each information reading and writing device is also different, the preset retention time can be configured in the electronic information, and the deletion time of the electronic information can also be configured in the electronic information to achieve different security protection for users according to different trust levels.

[0096] It is understandable that the longer the time, the greater the probability of electronic information being cracked, and it takes a certain amount of time to obtain data privacy from the preset backup device, and consumes the resources of the information reading and writing device. Therefore, in order to avoid the reading delay caused by the need to obtain data privacy when the user reads the electronic information in time, and to avoid information leakage caused by the user not processing the electronic information for a long time, when the unprocessed time exceeds the preset retention time, the data privacy identified in the electronic information will be transferred to the preset backup device in time. When the unprocessed time does not exceed the preset retention time, in order to ensure the efficiency of the user reading the electronic information, the data privacy in the electronic information will be retained.

[0097] In a specific implementation, an important information capture system can be used to identify data privacy from the received electronic information. The information capture system can be understood as a software electronic module, including an electronic module part set on the information reading device and a software part installed on the information reading device. After receiving the electronic information, the received electronic information is first scanned line by line, and important information (data privacy) is scanned out from the electronic information. The important information is shielded, coded or black-screened, and then the important information is transferred to the software part, and the data privacy is transferred to the preset backup device through the software part.

[0098] Based on the first and second embodiments of the present application, in the third embodiment of the present application, the same or similar contents as those in the above embodiments can be referred to the above introduction and will not be described in detail later. Figure 3 After step S10, the method for protecting electronic privacy information further includes steps S1 to S2:

[0099] Step S1, if the user fails identity verification, determining whether the electronic information has been cracked;

[0100] Step S2: If the electronic information is cracked, then obtain the public information after the data privacy is transferred from the electronic information.

[0101] It should be noted that cracking can mean that electronic information has been illegally decoded, that is, it has not been properly decoded through facial recognition, digital password verification, and fingerprint verification. Public information is information that can be displayed to the public or downloaded by the public, that is, information that does not need to be kept confidential.

[0102] It is understandable that in order to increase the difficulty of cracking electronic information, triple identity verification is required for users to ensure that other users cannot steal the identity of the user who has the ability to read electronic information and obtain the electronic information, thereby reducing the risk of information leakage.

[0103] It is understandable that the three-factor authentication of face recognition, digital password verification and fingerprint verification must all be passed to ensure the user's correct identity. Therefore, when one of the three fails to pass the verification, it means that the user's identity is incorrect, and it is necessary to further determine whether the electronic information has been cracked to avoid the user obtaining complete information containing data privacy after the electronic information is cracked. Therefore, after determining that the electronic information has been cracked, the information reading and writing device can only obtain the electronic information (public information) after the data privacy is transferred, thereby avoiding information leakage after the electronic information is cracked, thereby reducing the risk of information leakage.

[0104] Optionally, although cracking triple identity authentication increases the difficulty of cracking, it can be cracked eventually given enough time. In order to determine that the user's identity is not authentic before all three identities are cracked, step S10 may further include:

[0105] If the face recognition, the digital password verification, and the fingerprint verification are all successful, the recognition time of the face recognition, the password verification time of the digital password, and the fingerprint verification time of the fingerprint verification are retrieved;

[0106] If the sum of the recognition time, the password verification time and the fingerprint verification time is less than the preset time, it is determined that the face recognition, the digital password verification and the fingerprint verification are all passed.

[0107] It should be noted that the recognition duration can be the time difference between the start time of face recognition and the start time of the next verification or the end time of recognition. Digital password verification can be the time difference between the start time of digital password verification and the start time of the next verification or the end time of verification. Fingerprint verification can be the time difference between the start time of fingerprint verification and the start time of the next verification or the end time of verification. For example, the user is first recognized by face, the face recognition starts at 11:0:00, the face recognition is successful and the digital password verification starts at 11:0:11, then the recognition duration of face recognition is 11 seconds, the digital password verification ends and the fingerprint verification starts at 11:01:12, then the password verification duration of digital password verification is 1 minute and 1 second, the fingerprint verification ends at 11:01:20, then the fingerprint verification duration of fingerprint verification is 8 seconds. The preset time length can be the longest time length for normal triple verification, so as to avoid verification delays caused by problems with the verification module in the information reading and writing device and to leave a certain amount of reaction time for the user.

[0108] It is understandable that in order to avoid giving users enough time to crack the identity authentication, resulting in users who do not meet the authorization requirements being authenticated as qualified users, resulting in the theft of private data in electronic information, and to ensure that users have enough time to verify their identities normally, after performing triple identity authentication on the user, it is necessary to further determine whether the total time used for verification is less than the normal verification time, so as to avoid errors in the user identity authentication process, which in turn leads to information leakage.

[0109] Optionally, because the environment in which the authorized user views electronic information includes other unauthorized users, in this environment, the electronic information of the authorized user may be viewed by the unauthorized users when viewing the electronic information, thereby causing information leakage. To avoid this situation, the user's environment may be detected during the face recognition of the user. Specifically, the step of performing face recognition on the user includes:

[0110] Detecting whether the face of the user reading the electronic information is within a preset area;

[0111] If the user's face is within the preset area, detecting whether there are other users within the preset area;

[0112] If the other users exist in the preset area, it is determined that the face recognition of the user fails.

[0113] It should be noted that detecting the presence of other users in the preset area may not mean detecting the user's face, but detecting the outline of the other users. That is, if the body outlines or faces of other users in addition to the user's face are detected in the preset area, it is determined that face recognition has failed.

[0114] It is understandable that in order to avoid the situation where there are other users at the workstations behind the authorized user, thereby causing face recognition failure, when other users are identified in the preset area, the distance between the other users and the user can be further determined, or whether the other users are facing away from the user or facing the user. When the distance exceeds the set distance or the other users are facing away from the user, it is determined that the face recognition is successful to avoid affecting the user's normal work.

[0115] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the method for protecting electronic privacy information of the present application. Simple transformations in more forms based on this technical concept are all within the scope of protection of the present application.

[0116] This application also provides a device for protecting electronic privacy information. Please refer to Figure 4 , the electronic privacy information protection device includes:

[0117] The verification module 10 is configured to, upon receiving a request to read electronic information, obtain the unprocessed time between the time of the request and the time of receipt of the electronic information, and authenticate the user who reads the electronic information;

[0118] The privacy reading module 20 is configured to read the data privacy in the electronic information from a preset backup device if the unprocessed time period is greater than a preset retention time period and the user passes identity authentication;

[0119] The supplementing module 30 is used to supplement the data privacy into the electronic information to obtain the complete information before the data privacy in the electronic information is transferred to the preset backup device.

[0120] Optionally, the electronic privacy information protection device further includes:

[0121] The timing module 40 is used to record the unprocessed time period of the electronic information after receiving the electronic information;

[0122] an identification module 50, configured to determine whether it is necessary to identify data privacy that needs to be hidden from the electronic information based on the unprocessed time period;

[0123] The privacy transfer module 60 is used to transfer the data privacy to a preset backup device if it is determined that the data privacy needs to be hidden, and to perform coding processing on the data privacy in the electronic information.

[0124] Optionally, the identification module 40 is also used to determine whether the unprocessed time period is greater than the preset retention time period; if the unprocessed time period is greater than the preset retention time period, the data privacy that needs to be hidden is identified from the electronic information; if the unprocessed time period is less than or equal to the preset retention time period, the data privacy that needs to be hidden in the electronic information is retained before responding to the closing message operation of the electronic information.

[0125] Optionally, the supplementing module 30 is further configured to, if a download or forwarding operation request is received, not execute the acquisition of data privacy from the preset backup device, and obtain public information in the electronic information that does not contain the data privacy.

[0126] Optionally, the privacy reading module 20 is further configured to determine whether the electronic information has been cracked if the user fails identity authentication; and if the electronic information has been cracked, obtain the public information in the electronic information after the data privacy has been transferred.

[0127] Optionally, the verification module 10 is further used to detect whether the face of the user who reads the electronic information is within a preset area; if the face of the user is within the preset area, then detect whether there are other users within the preset area; if the other users are within the preset area, then determine that the face recognition of the user has failed.

[0128] The electronic privacy information protection device provided in this application utilizes the electronic privacy information protection method described in the aforementioned embodiments. This device can address the technical issue of exposing all information in a data packet to the user after decrypting the packet, thereby increasing the risk of information leakage during reading and writing. Compared to the prior art, the electronic privacy information protection device provided in this application achieves the same beneficial effects as the electronic privacy information protection method described in the aforementioned embodiments. Other technical features of the electronic privacy information protection device are the same as those disclosed in the aforementioned embodiments and are not further elaborated here.

[0129] The present application provides a device for protecting electronic privacy information, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to execute the electronic privacy information protection method of the above-mentioned embodiment 1.

[0130] Reference below Figure 5 , which shows a schematic diagram of the structure of an electronic privacy information protection device suitable for implementing the embodiments of the present application. The electronic privacy information protection device in the embodiments of the present application may include, but is not limited to, mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions), PMPs (Portable Media Players), in-vehicle terminals (such as in-vehicle navigation terminals), and fixed terminals such as digital TVs and desktop computers. Figure 5 The electronic privacy information protection device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0131] like Figure 5As shown, the electronic privacy information protection device may include a processing device 1001 (e.g., a central processing unit, a graphics processing unit, etc.), which can perform various appropriate actions and processes based on programs stored in a read-only memory (ROM) 1002 or programs loaded from a storage device 1003 into a random access memory (RAM) 1004. RAM 1004 also stores various programs and data required for the operation of the electronic privacy information protection device. Processing device 1001, ROM 1002, and RAM 1004 are interconnected via a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Typically, the following systems can be connected to I / O interface 1006: input devices 1007 including, for example, a touch screen, touchpad, keyboard, mouse, image sensor, microphone, accelerometer, gyroscope, etc.; output devices 1008 including, for example, a liquid crystal display (LCD), speaker, vibrator, etc.; storage device 1003 including, for example, a magnetic tape, hard disk, etc.; and communication device 1009. The communication device 1009 can allow the electronic privacy information protection device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows the electronic privacy information protection device with various systems, it should be understood that it is not required to implement or have all of the systems shown. More or fewer systems can be implemented or have alternatively.

[0132] In particular, according to the embodiments disclosed in the present application, the processes described above with reference to the flowcharts can be implemented as computer software programs. For example, the embodiments disclosed in the present application include a computer program product comprising a computer program carried on a computer-readable medium, the computer program comprising program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network via a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0133] The electronic privacy information protection device provided in this application utilizes the electronic privacy information protection method described in the aforementioned embodiments, resolving the technical issue of exposing all information in a data packet to the user after decrypting the packet, thereby increasing the risk of information leakage during reading and writing. Compared to the prior art, the electronic privacy information protection device provided in this application achieves the same beneficial effects as the electronic privacy information protection method described in the aforementioned embodiments. Other technical features of this electronic privacy information protection device are the same as those disclosed in the aforementioned embodiments and are not further elaborated upon here.

[0134] It should be understood that the various parts disclosed in this application can be implemented using hardware, software, firmware, or a combination thereof. In the description of the above embodiments, specific features, structures, materials, or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0135] The above description is merely a specific embodiment of the present application, but the scope of protection of the present application is not limited thereto. Any changes or substitutions that can be easily conceived by a person skilled in the art within the technical scope disclosed in this application should be included in the scope of protection of this application. Therefore, the scope of protection of this application should be based on the scope of protection of the claims.

[0136] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer program) stored thereon, and the computer-readable program instructions are used to execute the method for protecting electronic privacy information in the above-mentioned embodiment.

[0137] The computer-readable storage medium provided in this application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems, systems or devices, or any combination thereof. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In this embodiment, the computer-readable storage medium may be any tangible medium that contains or stores a program that can be used by or in conjunction with an instruction execution system, system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency), etc., or any suitable combination thereof.

[0138] The computer-readable storage medium may be included in the electronic privacy information protection device; or it may exist independently without being assembled into the electronic privacy information protection device.

[0139] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by the electronic privacy information protection device, the electronic privacy information protection device: when receiving a request to read electronic information, obtains the unprocessed time between the time point of the request and the time point of receipt of the electronic information, and authenticates the user who reads the electronic information; if the unprocessed time is greater than the preset retention time and the user passes the authentication, reads the data privacy in the electronic information from the preset backup device; supplements the data privacy to the electronic information, and obtains the complete information before the data privacy in the electronic information is transferred to the preset backup device.

[0140] Computer program code for performing the operations of the present application may be written in one or more programming languages, or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a stand-alone software package, partially on the user's computer and partially on a remote computer, or entirely on the remote computer or server. In cases involving a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., through the Internet using an Internet service provider).

[0141] The flow charts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present application. In this regard, each box in the flow chart or block diagram can represent a module, program segment or a part of code, and the module, program segment or a part of code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box can also occur in a different order than that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram and / or flow chart, and the combination of the boxes in the block diagram and / or flow chart can be implemented by a dedicated hardware-based system that performs the specified function or operation, or can be implemented by a combination of dedicated hardware and computer instructions.

[0142] The modules described in the embodiments of the present application may be implemented in software or hardware, wherein the name of a module does not necessarily limit the unit itself.

[0143] The computer-readable storage medium provided in this application is a computer-readable storage medium that stores computer-readable program instructions (i.e., a computer program) for executing the aforementioned method for protecting electronic privacy information. This computer-readable storage medium can address the technical issue of exposing all information in a data packet to the user after decrypting the data packet, thereby increasing the risk of information leakage during reading and writing. Compared to the prior art, the beneficial effects of the computer-readable storage medium provided in this application are the same as those of the method for protecting electronic privacy information provided in the aforementioned embodiments, and are not further elaborated here.

[0144] The present application also provides a computer program product, including a computer program, which implements the steps of the above-mentioned method for protecting electronic privacy information when executed by a processor.

[0145] The computer program product provided in this application can resolve the technical problem that, after a user decrypts a data packet, all information in the packet is exposed to the user, thereby increasing the risk of information leakage during reading and writing. Compared with the existing technology, the beneficial effects of the computer program product provided in this application are the same as those of the electronic privacy information protection method provided in the above-mentioned embodiment, and will not be elaborated here.

[0146] The above description is only part of the embodiments of the present application and does not limit the patent scope of the present application. All equivalent structural transformations made by using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect application in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A method for protecting electronic privacy information, It is characterized in that The method includes: When receiving a request to read electronic information, obtaining the unprocessed time between the time point of the request and the time point of receiving the electronic information, and performing identity authentication on the user who reads the electronic information; If the unprocessed time period is longer than the preset retention time period and the user passes identity authentication, then reading the data privacy in the electronic information from a preset backup device; The data privacy is supplemented into the electronic information to obtain the complete information before the data privacy in the electronic information is transferred to the preset backup device.

2. The method according to claim 1, It is characterized in that Before the step of obtaining the unprocessed time between the time point of the request and the time point of receiving the electronic information when receiving the request for reading the electronic information and authenticating the user who reads the electronic information, the method further includes: After receiving the electronic information, record the unprocessed time period during which the electronic information has not been operated; Determining whether it is necessary to identify data privacy that needs to be hidden from the electronic information based on the unprocessed time period; If it is determined that the data privacy needs to be hidden, the data privacy is transferred to a preset backup device, and the data privacy in the electronic information is coded.

3. The method according to claim 2, It is characterized in that The step of determining whether it is necessary to identify data privacy that needs to be hidden from the electronic information based on the unprocessed time period includes: Determine whether the unprocessed time is greater than a preset retention time; If the unprocessed time period is longer than the preset retention time period, identifying data privacy that needs to be hidden from the electronic information; If the unprocessed time period is less than or equal to the preset retention time period, the privacy of data to be hidden in the electronic information is retained before responding to a closing message operation on the electronic information.

4. The method according to claim 1, It is characterized in that After the step of adding the data privacy to the electronic information to obtain the complete information before the data privacy in the electronic information is transferred to the preset backup device, the following step further comprises: If a download or forwarding operation request is received, the data privacy is not obtained from the preset backup device, and the public information that does not contain the data privacy is obtained in the electronic information.

5. The method according to claim 1, It is characterized in that After the step of authenticating the user who reads the electronic information, the following step is further included: If the user fails identity authentication, determining whether the electronic information has been cracked; If the electronic information is cracked, the public information after the data privacy is transferred in the electronic information is obtained.

6. The method according to claim 1, It is characterized in that The identity verification includes face recognition, and the step of performing identity verification on the user who reads the electronic information includes: Detecting whether the face of the user who reads the electronic information is within a preset area; If the user's face is within the preset area, detecting whether there are other users within the preset area; If the other users exist in the preset area, it is determined that the face recognition of the user fails.

7. A device for protecting electronic privacy information, It is characterized in that The device comprises: A verification module, for, upon receiving a request to read electronic information, obtaining an unprocessed time duration between a time point of the request and a time point of receipt of the electronic information, and performing identity authentication on a user who reads the electronic information; A privacy reading module, configured to read the data privacy in the electronic information from a preset standby device if the unprocessed time period is greater than a preset retention time period and the user passes identity authentication; The supplementing module is used to supplement the data privacy into the electronic information to obtain the complete information before the data privacy in the electronic information is transferred to the preset backup device.

8. A device for protecting electronic privacy information, It is characterized in that The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the method for protecting electronic privacy information according to any one of claims 1 to 6.

9. A storage medium, It is characterized in that The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the method for protecting electronic privacy information according to any one of claims 1 to 6 are implemented.

10. A computer program product, It is characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the method for protecting electronic privacy information according to any one of claims 1 to 6 are implemented.

Images