Data collection method, data acquisition method, electronic equipment and medium

Abstract

The embodiment of the invention provides a data collection method, a data acquisition method, electronic equipment and a medium, and belongs to the field of network operation and maintenance. The method comprises the following steps: receiving a data acquisition request sent by server equipment, wherein the data acquisition request is used for requesting to acquire target data of an associated user of terminal equipment; in response to the data acquisition request, collecting target data in the terminal equipment; acquiring data information of the target data, wherein the data information is used for indicating a data type of the target data; according to the data information, determining a target privacy protection strategy in a plurality of privacy protection strategies preset by the terminal equipment; performing privacy protection processing on the target data based on the target privacy protection strategy to obtain privacy protection data associated with the target data; and sending the privacy protection data to the server equipment. Therefore, the privacy protection processing of the target data is completed on the terminal equipment, so that the sensitive data of the user is effectively protected, and the leakage risk of the data of the user is reduced.

Description

Technical Field

[0001] The present application relates to the field of network operation and maintenance, and in particular to a data collection method, a data acquisition method, an electronic device and a medium. Background Art

[0002] With the development of mobile Internet, many industries increasingly rely on applications in smart terminal devices to provide services. However, these applications often need to access users' sensitive data, such as health status, geographic location, etc. However, in related technologies, there is a lack of protection for sensitive data as mentioned above, and users' privacy is at risk of being leaked. Summary of the invention

[0003] The main purpose of the embodiments of the present application is to propose a data collection method, a data acquisition method, an electronic device and a medium, aiming to protect the user's sensitive data.

[0004] To achieve the above-mentioned purpose, a first aspect of an embodiment of the present application proposes a data collection method, which is applied to a terminal device, and the method includes:

[0005] Receiving a data acquisition request sent by a server device, wherein the data acquisition request is used to request to acquire target data of a user associated with the terminal device;

[0006] In response to the data acquisition request, collecting the target data in the terminal device;

[0007] Acquire data information of the target data, where the data information is used to indicate a data type of the target data;

[0008] According to the data information, determining a target privacy protection strategy among a plurality of privacy protection strategies preset in the terminal device;

[0009] Performing privacy protection processing on the target data based on the target privacy protection policy to obtain privacy protection data associated with the target data;

[0010] Send the privacy protection data to the server device.

[0011] In some implementations, determining a target privacy protection strategy from among a plurality of privacy protection strategies preset in the terminal device according to the data information includes:

[0012] In a case where the data information indicates that the data type of the target data is non-single-person data, determining a noise adding strategy as the target privacy protection strategy among multiple privacy protection strategies preset by the terminal device, wherein the non-single-person data is data associated with multiple users;

[0013] The performing privacy protection processing on the target data based on the target privacy protection policy includes:

[0014] Based on the target privacy protection strategy, noise addition processing is performed on the target data.

[0015] In some implementations, the data acquisition request includes data usage information, where the data usage information is used to characterize the usage of the target data, and the performing noise adding processing on the target data includes:

[0016] Determining the sensitivity of the target data and the noise type according to the usage information;

[0017] Noise addition processing is performed on the target data according to the sensitivity and the noise type.

[0018] In some implementations, in response to the data acquisition request, collecting the target data in the terminal device includes:

[0019] According to the target data, performing authority determination on the data acquisition request to obtain a determination result; or performing authority determination on the target data to obtain a determination result;

[0020] When the first determination result is that acquisition is permitted, the target data is collected in the terminal device in response to the data acquisition request.

[0021] In some implementations, performing authority determination on the data acquisition request according to the target data to obtain a determination result includes:

[0022] In the case where the data acquisition request includes target function information, the target function information is used to represent the target function that the terminal device requests the server device to use, if the target data is necessary data for the target function, determining that the determination result is to allow acquisition; or

[0023] In a case where the data acquisition request includes data usage information, and the data usage information is used to characterize the target usage of the target data, if the target data is necessary data for the target usage, the determination result is determined to be that acquisition is allowed.

[0024] In some implementations, performing authority determination on the target data to obtain a determination result includes:

[0025] determining whether the target data is obtainable data, the obtainable data being data that is not determined by the associated user as unobtainable data;

[0026] In a case where the target data is the obtainable data, the determination result is determined to be acquisition permission.

[0027] In some implementations, the multiple privacy protection strategies include multiple encryption algorithms, the data information is further used to indicate the data size of the target data, and determining the target privacy protection strategy from the multiple privacy protection strategies preset in the terminal device according to the data information includes:

[0028] Determining a target encryption algorithm from among the multiple encryption algorithms according to the data size and the data type;

[0029] The target data is encrypted according to the target encryption algorithm.

[0030] To achieve the above-mentioned purpose, a second aspect of an embodiment of the present application proposes a data acquisition method, which is applied to a server device, and the method includes:

[0031] Sending a data acquisition request to a terminal device so that the terminal device executes a data collection process, wherein the data acquisition request is used to request to acquire target data of a user associated with the terminal device;

[0032] The data collection process includes:

[0033] In response to the data acquisition request, collecting the target data in the terminal device;

[0034] Acquire data information of the target data, where the data information is used to indicate a data type of the target data;

[0035] According to the data information, determining a target privacy protection strategy among a plurality of privacy protection strategies preset in the terminal device;

[0036] Performing privacy protection processing on the target data based on the target privacy protection policy to obtain privacy protection data associated with the target data;

[0037] Sending the privacy protection data to the server device;

[0038] The method further comprises:

[0039] The privacy protection data is received.

[0040] To achieve the above-mentioned purpose, the third aspect of an embodiment of the present application proposes an electronic device, which includes a memory and a processor, the memory stores a computer program, and the processor implements the method described in the first aspect or the second aspect when executing the computer program.

[0041] To achieve the above objectives, the fourth aspect of an embodiment of the present application proposes a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the method described in the first aspect or the method described in the second aspect.

[0042] The data collection method, data acquisition method, electronic device and medium proposed in the present application, after receiving the data acquisition request sent by the server device, the terminal device first determines the matching target privacy protection policy among multiple privacy protection policies according to the data type of the target data requested by the data acquisition request, and then uses the target privacy protection policy to perform privacy protection processing on the target data to obtain privacy protection data, and finally sends the privacy protection data to the terminal device. In this way, by completing the privacy protection processing of the target data on the terminal device, the user's sensitive data is effectively protected, reducing the risk of leakage of the user's data. Moreover, the flexible policy selection of determining the matching target privacy protection policy among multiple privacy protection policies improves the flexibility and pertinence of privacy protection, and avoids the unnecessary data processing complexity that may be brought about by a unified privacy protection policy. BRIEF DESCRIPTION OF THE DRAWINGS

[0043] Figure 1 It is a flowchart of a data collection method provided in an embodiment of the present application;

[0044] Figure 2 It is a schematic diagram of the interaction between the terminal device and the server device provided in the embodiment of the present application;

[0045] Figure 3 It is a flowchart of a data acquisition method provided in an embodiment of the present application;

[0046] Figure 4 is a schematic diagram of the structure of a data collection device provided in an embodiment of the present application;

[0047] Figure 5 is a structural schematic diagram of a data acquisition device provided in an embodiment of the present application;

[0048] Figure 6 It is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0049] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0050] It should be noted that, although the functional modules are divided in the device schematic diagram and the logical order is shown in the flowchart, in some cases, the steps shown or described may be performed in a different order than the module division in the device or the order in the flowchart. The terms "first", "second", etc. in the specification, claims and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence.

[0051] Unless otherwise defined, all technical and scientific terms used herein have the same meaning as those commonly understood by those skilled in the art to which this application belongs. The terms used herein are only for the purpose of describing the embodiments of this application and are not intended to limit this application.

[0052] First, some nouns involved in this application are analyzed:

[0053] Terminal device: The terminal device is a device used directly by the user to access applications and services. Common terminal devices include smartphones, tablets, smart watches, etc. These devices are usually equipped with various applications and have sensors and network connectivity. Terminal devices can collect target data related to users through their own sensors or installed applications. For example, geographic location information is obtained through the Global Positioning System (GPS) module, or step count or heart rate data is obtained through health applications.

[0054] Server device: A server device is a remote device or server that provides services, processes data, or performs computing tasks. It is usually located in a data center or cloud computing platform and is responsible for processing requests from terminal devices and performing corresponding operations. The server device uses the received data to provide corresponding services or perform analysis tasks, for example, providing personalized services based on the user's geographic location, or performing risk assessment based on health data.

[0055] With the development of mobile Internet, many industries increasingly rely on applications in smart terminal devices to provide services. However, these applications often need to access users' sensitive data, such as health status, geographic location, etc. However, in related technologies, there is a lack of protection for sensitive data as mentioned above, and users' privacy is at risk of being leaked.

[0056] Based on this, the embodiments of the present application provide a data collection method, a data acquisition method, an electronic device and a medium, which are intended to protect the user's sensitive data.

[0057] The data collection method, data acquisition method, electronic device and medium provided in the embodiments of the present application are specifically illustrated through the following embodiments. First, the data collection method and data acquisition method in the embodiments of the present application are described.

[0058] The embodiments of the present application can acquire and process relevant data based on artificial intelligence technology. Among them, artificial intelligence (AI) is the theory, method, technology and application system that uses digital computers or machines controlled by digital computers to simulate, extend and expand human intelligence, perceive the environment, acquire knowledge and use knowledge to obtain the best results.

[0059] AI basic technologies generally include sensors, dedicated AI chips, cloud computing, distributed storage, big data processing technology, operation / interaction systems, mechatronics, etc. AI software technologies mainly include computer vision technology, robotics technology, biometrics technology, speech processing technology, natural language processing technology, and machine learning / deep learning.

[0060] The data collection method and data acquisition method provided in the embodiments of the present application relate to the field of network operation and maintenance. The data collection method provided in the embodiments of the present application can be applied to the terminal, or to the software of the terminal, and the data acquisition method provided in the embodiments of the present application can be applied to the server side, or to the software of the server side. In some embodiments, the terminal can be a smart phone, a tablet computer, a laptop computer, a desktop computer, etc.; the server side can be configured as an independent physical server, or it can be configured as a server cluster or a distributed system composed of multiple physical servers, and it can also be configured as a cloud server that provides basic cloud computing services such as cloud services, cloud databases, cloud computing, cloud functions, cloud storage, network services, cloud communications, middleware services, domain name services, security services, CDN, and big data and artificial intelligence platforms; the software can be an application that implements the data collection method and the data acquisition method, etc., but is not limited to the above forms.

[0061] The present application can be used in many general or special computer system environments or configurations. For example: personal computers, server computers, handheld or portable devices, tablet devices, multiprocessor systems, microprocessor-based systems, set-top boxes, programmable consumer electronics, network PCs, minicomputers, mainframe computers, distributed computing environments including any of the above systems or devices, etc. The present application can be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application can also be practiced in distributed computing environments, in which tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules can be located in local and remote computer storage media including storage devices.

[0062] It should be noted that in each specific implementation of the present application, when it comes to the need to perform relevant processing based on data related to user identity or characteristics such as user information, user behavior data, user historical data, and user location information, the user's permission or consent will be obtained first, and the collection, use, and processing of these data will comply with relevant laws, regulations, and standards. In addition, when the embodiment of the present application needs to obtain the user's sensitive personal information, the user's separate permission or consent will be obtained through a pop-up window or by jumping to a confirmation page. After clearly obtaining the user's separate permission or consent, the necessary user-related data for the normal operation of the embodiment of the present application will be obtained.

[0063] See also Figure 1 , is a flow chart of a data collection method provided by an embodiment of the present application. In a first aspect, an embodiment of the present application provides a data collection method, which is applied to a terminal device. The method includes:

[0064] Step S110: receiving a data acquisition request sent by the server device, where the data acquisition request is used to request to acquire target data of a user associated with the terminal device.

[0065] Please also read Figure 1 and Figure 2 , Figure 2 This is a schematic diagram of the interaction between a terminal device and a server device provided in an embodiment of the present application. In some terminal device usage scenarios, when the terminal device needs to use certain specific functions (such as needing to open certain functional modules in an application), it first sends a function usage request to the server device so that the server device and the terminal device synchronize data to enable the function. In order to enable the function, the server device needs to obtain the target data of the associated user using the terminal device through the terminal device, so the server device sends a data acquisition request to the terminal device.

[0066] The terminal device first receives a data acquisition request from the server device, where the data acquisition request includes detailed information about the target data that the server device wishes to acquire, including the data type.

[0067] For example, a user's smartphone (i.e., a terminal device) needs to open a policy viewing function in a financial insurance application, send a function usage request to the server device to obtain the policy data and turn on the function, and after receiving the function usage request, the insurance company's server (i.e., the server device) sends a data acquisition request to the user's smartphone, which may request to obtain the user's geographic location information.

[0068] Step S120: In response to the data acquisition request, target data is collected in the terminal device.

[0069] The terminal device responds to the data acquisition request sent by the server device and starts collecting the required target data. The target data can be collected through the built-in sensors of the terminal device, the data of the application, or the data input by the associated user.

[0070] For example, in response to a data acquisition request sent by an insurance company's server, which requests the user's geographic location information, the user's smartphone will use the GPS module to collect the current geographic location information and use it as target data. This geographic location information can be used by the insurance company's server to assess the risk level of the user's location.

[0071] Step S130: Acquire data information of the target data, where the data information is used to indicate the data type of the target data.

[0072] After collecting the target data, the terminal device obtains data information related to the data, and the data information is used for the subsequent selection of privacy protection strategies. The data information is used to indicate the data type of the data, and can also be used to indicate other attributes or other important information of the data. The data type can include single-person data and non-single-person data. Single-person data is data associated only with the associated user, and non-single-person data is data associated with multiple users. For example, after the target data is obtained by the server device, it is used to calculate the average value of a certain data of multiple users in a certain area. In this case, the target data is associated with multiple users in the area, and the target data is non-single-person data.

[0073] Exemplarily, the smart phone obtains data information of the geographic location information of the associated user, and the data information indicates that the data type of the target data is single-person data, which is only associated with the associated user.

[0074] Step S140: Determine a target privacy protection strategy from among a plurality of privacy protection strategies preset in the terminal device according to the data information.

[0075] According to the acquired data information, the terminal device selects the most appropriate one from the preset multiple privacy protection strategies as the target privacy protection strategy. The multiple privacy protection strategies may include different technical means such as data encryption, anonymization, differential privacy, etc. to protect the user's privacy.

[0076] For example, suppose that the financial insurance application in the terminal device presets several privacy protection policies, such as the option to reduce the accuracy of geographic location information to the city level, or to blur the data. Based on the previously acquired data information (real-time location with an accuracy of less than ten meters), the terminal device may choose to blur the location data to the nearest block or city.

[0077] Step S150: performing privacy protection processing on the target data based on the target privacy protection policy to obtain privacy protection data associated with the target data.

[0078] The terminal device processes the target data using the selected target privacy protection strategy to generate privacy-protected data. The processed target data no longer directly exposes the user's sensitive information, but can still meet the needs of the server device.

[0079] Exemplarily, the financial insurance application in the terminal device processes the user's geographic location from precise longitude and latitude coordinates (such as a street number) into a city-level fuzzy location (such as the city where the user is located) based on the selected fuzzification strategy, and uses it as privacy-protected data.

[0080] Step S160: Sending privacy protection data to the server device.

[0081] The terminal device sends the privacy-protected data back to the server device. The privacy-protected data received by the server device can still be used for analysis and decision-making while protecting user privacy.

[0082] For example, the financial insurance application in the terminal device sends the blurred user city location back to the insurance company's server. Although the server cannot accurately locate the user's specific address, it can still assess the risk based on city-level information and provide reasonable insurance quotes.

[0083] Through steps S110-S160, after receiving the data acquisition request sent by the server device, the terminal device first determines the matching target privacy protection policy among multiple privacy protection policies according to the data type of the target data requested by the data acquisition request, and then uses the target privacy protection policy to perform privacy protection processing on the target data to obtain privacy protection data, and finally sends the privacy protection data to the terminal device. In this way, by completing the privacy protection processing of the target data on the terminal device, the user's sensitive data is effectively protected, reducing the risk of user data leakage, and the flexible policy selection of determining the matching target privacy protection policy among multiple privacy protection policies improves the flexibility and pertinence of privacy protection, and avoids the unnecessary data processing complexity that may be brought about by a unified privacy protection policy.

[0084] In some implementations, according to the data information, a target privacy protection strategy is determined from among a plurality of privacy protection strategies preset in the terminal device, including:

[0085] When the data information indicates that the data type of the target data is non-single-person data, among multiple privacy protection strategies preset by the terminal device, a noise addition strategy is determined as a target privacy protection strategy, wherein the non-single-person data is data associated with multiple users;

[0086] Perform privacy protection processing on target data based on the target privacy protection strategy, including:

[0087] Based on the target privacy protection strategy, noise is added to the target data.

[0088] In this embodiment, when it is necessary to process non-single-person data associated with multiple users, the target privacy protection strategy is selected in a targeted manner. Non-single-person data refers to data associated with multiple users. For example, the server device needs to obtain the walking data of all users in a certain area and calculate the average value based on it. For the walking data of a single user in the area, the walking data is associated with all users in the area. The privacy protection of such data needs to consider group privacy, not just individual privacy.

[0089] In order to protect the privacy of such non-single-person data, this implementation adopts differential privacy technology. Differential privacy adds noise (i.e., random perturbations) to the data, making it difficult for external observers to identify or infer the specific behavior of any single user by analyzing the data. Noise addition processing is an effective method that can avoid leaking the privacy of a single user while ensuring the overall statistical characteristics of the data.

[0090] In this way, the server device can not only complete the data analysis needs, but also effectively protect the user's privacy and prevent the privacy data of a single user from being leaked.

[0091] For example, in a financial insurance application in a terminal device, the insurance company hopes to adjust the insurance premium by analyzing the average walking data of users in a specific area. These walking data are non-single-person data associated with multiple users. In order to protect the privacy of each user, the application adds noise to the data after collecting these walking data. For example, after collecting the actual number of steps of the user using the terminal device, that is, the associated user, the application adds a certain amount of noise to the actual number of steps of the associated user, so that the average number of steps finally calculated by the server device can still reflect the overall health level of the community, but the specific walking data of a single user is difficult to identify or infer.

[0092] In some implementations, the data acquisition request may include data usage information, where the data usage information is used to characterize the usage of the target data. Performing noise addition processing on the target data may include:

[0093] Determine the sensitivity of the target data and the type of noise based on the usage information;

[0094] Noise is added to the target data according to the sensitivity and noise type.

[0095] In this embodiment, the data acquisition request includes not only the type of data to be collected, but also the purpose of the data. The data purpose information is used to characterize the purpose for which the target data will be used, such as calculating the average or sum. The purpose of the data will directly affect the sensitivity of the data and the requirements for privacy protection.

[0096] For different data purposes, the sensitivity of the target data may be different. When protecting the privacy of highly sensitive data, it is necessary to add more noise to improve the protection strength, while for low-sensitivity data, smaller noise can be added to reduce the impact on data accuracy.

[0097] The selection of noise type can also be based on the sensitivity and purpose of the target data. Noise types can include Laplace noise and Gaussian noise, which are suitable for different privacy protection requirements. In this way, by combining the purpose information, sensitivity and noise type, appropriate noise addition processing can be performed on the target data, so that the server device can protect user privacy while realizing data analysis functions.

[0098] For example, in a financial insurance application on a terminal device, suppose that the insurance company's server needs to collect walking data of users in a certain area to calculate the average number of steps in the area, so as to assess the overall health level and adjust the insurance premium. In this case, the usage information of the walking data is "used to calculate the average value".

[0099] For this purpose, the sensitivity of the walking data can be determined using the following formula:

[0100] Δq=1 / n (1)

[0101] Where n is the number of users in the area, and Δq is the sensitivity.

[0102] Since the usage information of walking data is "used to calculate the average value", Gaussian noise can be selected as the noise type. For each user's walking data, the Gaussian distribution expressed by the following formula can be used to add noise:

[0103] N(0,(σ 2 ·Δq 2 / 2ε) 2 )(2)

[0104] Among them, σ 2is the variance of the preset Gaussian distribution, Δq is the sensitivity, and ε is the preset privacy budget, which is used to characterize the strength of privacy protection.

[0105] Assume that the insurance company's server needs to collect walking data of users in a certain area to calculate the total number of steps in the area. In this case, the usage information of the walking data is "used to calculate the total". For this purpose, the sensitivity of the walking data can be determined to be 1, and Laplace noise is selected for noise addition.

[0106] In some implementations, in response to a data acquisition request, collecting target data in a terminal device includes:

[0107] According to the target data, perform authority determination on the data acquisition request to obtain a determination result; or perform authority determination on the target data to obtain a determination result;

[0108] When the result of the first determination is that the acquisition is permitted, the target data is collected in the terminal device in response to the data acquisition request.

[0109] In this embodiment, in order to protect the privacy security of the user, the terminal device may also perform an authority determination before collecting data to ensure that the terminal device has checked and confirmed the authority to obtain the user data before collecting the target data.

[0110] The authority determination may include an authority determination for a data acquisition request (expressed as a first acquisition authority determination in the following expression, and the determination result of the first acquisition authority determination is expressed as a first determination result). The first acquisition authority determination may be performed on the information carried in the data acquisition request, which may characterize the purpose of the target data or the function requested to be enabled by the terminal device. If the first determination result of the first acquisition authority determination is to allow acquisition, the terminal device continues to collect data.

[0111] The authority determination may include an authority determination on the target data itself (expressed as a second acquisition authority determination in the following expression, and the determination result of the second acquisition authority determination is expressed as a second determination result). The second acquisition authority determination may be based on whether the target data is data authorized for sharing by the user. If the second determination result of the second acquisition authority determination is that acquisition is allowed, the terminal device continues to collect data.

[0112] For example, in a financial insurance application in a terminal device, the insurance company's server may send a data acquisition request to obtain the user's step data, and carry information that the acquired walking data is used for user health risk assessment in the data acquisition request.

[0113] After receiving the request, the application performs a first access permission determination, determines that the walking data is necessary data for user health risk assessment, and determines that the first determination result is that the acquisition is allowed.

[0114] After receiving the request, the application may also perform a second access permission determination to determine whether the walking data is set by the user as not shareable. If the walking data is not set by the user as not shareable, the second determination result may be determined to be that access is allowed.

[0115] In some implementations, performing authority determination on a data acquisition request according to target data to obtain a determination result may include:

[0116] In the case where the data acquisition request includes target function information, and the target function information is used to represent the target function that the terminal device requests the server device to use, if the target data is necessary data for the target function, determining that the determination result is that the acquisition is allowed; or

[0117] In the case where the data acquisition request includes data usage information, and the data usage information is used to characterize the target usage of the target data, if the target data is necessary data for the target usage, the determination result is that the acquisition is allowed.

[0118] In this embodiment, when the data acquisition request includes target function information (the target function is the function that the terminal device requests the server device to enable), the terminal device will determine whether the target data is necessary data for using or enabling the target function. If the target data is necessary for using or enabling the target function, the first determination result will be to allow acquisition. Specifically, the terminal device can pre-define the configuration of the minimum permission set (MPS), and the necessary data corresponding to each function can be defined in the MPS. For example, for a financial insurance application in a terminal device, the MPS can be: personalized insurance quotes - user's age, gender, health tracking - user's daily steps, accident reports - user location data, online payments - user's credit card information.

[0119] It will be understood by those skilled in the art that when pre-configuring the processing of data acquisition requests (i.e., the first acquisition permission determination) in a terminal device, the processing of data acquisition requests is pre-configured in accordance with the best practices of the operating system of the terminal device. For example, when the operating system of the terminal device is an IOS system, the NS Location When In Use UsageDescription key is used to process the first acquisition permission determination regarding user location information, and the NS Health UpdateUsage Description key is used to process the first acquisition permission determination regarding user health information.

[0120] When the data acquisition request includes data usage information, the terminal device will determine whether the target data is necessary data for the target usage. If so, the first determination result will be that the acquisition is allowed. For example, the target data is the user's vehicle driving operation data, and the target usage is that after the target data is acquired by the server-side device, it is analyzed through a deep learning model and the auto insurance premium is adjusted according to the analysis results. The terminal device determines that the vehicle driving operation data is necessary data for the target usage, and the first determination result is that the acquisition is allowed; for another example, the target data is the user's age information, and the target usage is that after the target data is acquired by the server-side device, it is analyzed through a deep learning model and the auto insurance premium is adjusted according to the analysis results. The terminal device determines that the age information is not necessary data for the target usage, and the first determination result is that the acquisition is not allowed.

[0121] In this way, the terminal device can make permission determinations on data acquisition requests based on the target data to ensure that necessary permission checks are performed before collecting the target data, thereby enhancing privacy protection during the data collection process.

[0122] In some implementations, performing authority determination on target data to obtain a determination result may include:

[0123] Determining whether the target data is accessible data, where accessible data is data that has not been determined as unavailable data by the associated user;

[0124] In the case where the target data is retrievable data, the determination result is that the acquisition is permitted.

[0125] In this embodiment, before responding to the data acquisition request, the terminal device will perform a second acquisition permission determination on the target data requested to be acquired, to ensure that the target data is not data explicitly set by the user as unavailable. Specifically, the terminal device determines whether the target data belongs to the range of available data. If the user has not set the target data as unavailable data, the terminal device will determine that the target data is available data and return the second determination result that acquisition is allowed.

[0126] For example, a financial insurance application in a terminal device needs to obtain the walking data of a user from the terminal device to analyze the health status and provide personalized insurance advice. In the financial insurance application, the user has previously set the privacy rights of the walking data and has not added the walking data to the set of unobtainable data.

[0127] When the server device sends a data acquisition request to obtain the user's walking data, the terminal device performs a second acquisition permission determination to check whether the user has marked the walking data as unobtainable data. If the user has not set the walking data as unobtainable, the electronic device will determine that the data is obtainable data. Therefore, the second determination result is that the acquisition is allowed, and the terminal device continues to respond to the data acquisition request and collect the walking data.

[0128] In some implementations, the multiple privacy protection strategies include multiple encryption algorithms, and the data information is also used to indicate the data size of the target data. According to the data information, determining the target privacy protection strategy from the multiple privacy protection strategies preset in the terminal device may include:

[0129] Determine the target encryption algorithm among multiple encryption algorithms based on the data size and data type;

[0130] The target data is encrypted according to the target encryption algorithm.

[0131] In this embodiment, when responding to a data acquisition request, the terminal device protects user privacy by encrypting the target data. The multiple encryption algorithms included in the multiple privacy protection strategies are designed for different data types and data scales. The terminal device will select the most appropriate target encryption algorithm from the preset multiple encryption algorithms based on the data information (including data type and data scale), and then encrypt the target data. The multiple encryption algorithms may include symmetric encryption (such as Advanced Encryption Standard, AES), asymmetric encryption (such as RSA), hash functions, etc.

[0132] Data scale refers to the size or magnitude of data, while data type may refer to the nature or category of data (e.g., text data, image data, key data, etc.) This information helps the terminal device select a suitable encryption algorithm.

[0133] The terminal device can select the most effective encryption algorithm according to the size and type of data. For example, for small-scale sensitive text data, the terminal device can choose symmetric encryption, while for large-scale data, it can choose a hash algorithm.

[0134] The terminal device uses the selected target encryption algorithm to encrypt the data to ensure the security of the data during transmission or storage.

[0135] For example, a financial insurance application in a terminal device needs to collect the user's health data (such as steps and heart rate) and send it to the server device for risk assessment and personalized insurance plan recommendation. The terminal device receives a data acquisition request from the server device, requesting to obtain the user's health data, including steps (small-scale text data) and heart rate data (large-scale sensor data).

[0136] The terminal device first analyzes the scale and type of these health data. The number of steps is small-scale text data, while the heart rate data is large-scale sensor data. For the number of steps data, the terminal device can choose the AES symmetric encryption algorithm because it is suitable for processing small-scale sensitive data. For the heart rate data, the terminal device can choose the SHA-256 hash algorithm to ensure data integrity and security.

[0137] The terminal device then encrypts the step and heart rate data according to the selected encryption algorithm. The step data becomes encrypted text after AES encryption, and the heart rate data is hashed with SHA-256 to generate a hash value of a fixed length. The encrypted step data and heart rate data (hash value) are sent back to the server device to ensure the security of the data during transmission.

[0138] In some implementations, the terminal device may use an encryption protocol to send the target data to the server to achieve privacy protection. The encryption protocol may be Transport Layer Security (TLS) or Secure Sockets Layer (SSL).

[0139] In some implementations, after collecting the target data, the terminal device can create a secure sandbox environment for processing and storing the target data to ensure that the target data will not be accessed by processes or services of other terminal devices to ensure the privacy security of the user.

[0140] See also Figure 3 , is a flow chart of a data acquisition method provided in an embodiment of the present application. A second aspect of an embodiment of the present application provides a data acquisition method, which is applied to a server device, and the method includes:

[0141] Step S310: Sending a data acquisition request to the terminal device so that the terminal device executes a data collection process, wherein the data acquisition request is used to request to acquire target data of a user associated with the terminal device;

[0142] The data collection process includes:

[0143] In response to the data acquisition request, collecting target data in the terminal device;

[0144] Acquire data information of target data, where the data information is used to indicate the data type of the target data;

[0145] According to the data information, determine the target privacy protection strategy among the multiple privacy protection strategies preset in the terminal device;

[0146] Performing privacy protection processing on the target data based on the target privacy protection strategy to obtain privacy protection data associated with the target data;

[0147] Send privacy-protected data to the server device;

[0148] The method also includes:

[0149] Step S320: receiving privacy protection data.

[0150] The data acquisition method applied to the server-side device provided in the second aspect of the embodiment of the present application corresponds to the data collection method applied to the terminal device provided in the first aspect of the embodiment of the present application, sends a data acquisition request to the terminal device, and receives the privacy protection data sent by the terminal device through the data collection method provided in the first aspect of the embodiment of the present application. The data acquisition method applied to the server-side device provided in the second aspect of the embodiment of the present application can achieve the same technical effect as the data collection method applied to the terminal device provided in the first aspect of the embodiment of the present application, and will not be repeated here.

[0151] See also Figure 4 , is a structural diagram of a data collection device provided in an embodiment of the present application. The embodiment of the present application further provides a data collection device 400, which is applied to a terminal device and can implement the above data collection method. The device 400 includes:

[0152] The request acquisition module 410 is used to receive a data acquisition request sent by a server device, where the data acquisition request is used to request to acquire target data of a user associated with a terminal device;

[0153] The data collection module 420 is used to collect target data in the terminal device in response to the data acquisition request;

[0154] An information acquisition module 430 is used to acquire data information of target data, where the data information is used to indicate the data type of the target data;

[0155] A policy determination module 440 is used to determine a target privacy protection policy from among a plurality of privacy protection policies preset in the terminal device according to the data information;

[0156] A data processing module 450 is used to perform privacy protection processing on the target data based on the target privacy protection policy to obtain privacy protection data associated with the target data;

[0157] The data sending module 460 is used to send privacy protection data to the server device.

[0158] The specific implementation of the data collection device 400 is substantially the same as the specific implementation of the above-mentioned data collection method, and will not be described in detail herein.

[0159] See also Figure 5 , is a schematic diagram of the structure of a data acquisition device provided in an embodiment of the present application. The embodiment of the present application also provides a data acquisition device 500, which is applied to a server device and can implement the above data acquisition method. The device 500 includes:

[0160] A request sending module 510 is used to send a data acquisition request to a terminal device so that the terminal device executes a data collection process, wherein the data acquisition request is used to request to acquire target data of a user associated with the terminal device;

[0161] The data collection process includes:

[0162] In response to the data acquisition request, collecting target data in the terminal device;

[0163] Acquire data information of target data, where the data information is used to indicate the data type of the target data;

[0164] According to the data information, determine the target privacy protection strategy among the multiple privacy protection strategies preset in the terminal device;

[0165] Performing privacy protection processing on the target data based on the target privacy protection strategy to obtain privacy protection data associated with the target data;

[0166] Send privacy-protected data to the server device;

[0167] The apparatus 500 further comprises:

[0168] The data receiving module 520 is used to receive privacy protection data.

[0169] The specific implementation of the data acquisition device 500 is substantially the same as the specific implementation of the above-mentioned data acquisition method, and will not be described in detail herein.

[0170] The embodiment of the present application also provides an electronic device, the electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the above data collection method or data acquisition method when executing the computer program. The electronic device can be any smart terminal including a tablet computer, a car computer, etc.

[0171] See also Figure 6 , Figure 6 The hardware structure of an electronic device of another embodiment is illustrated, and the electronic device includes:

[0172] The processor 601 may be implemented by a general-purpose CPU (Central Processing Unit), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, and is used to execute relevant programs to implement the technical solutions provided in the embodiments of the present application;

[0173] The memory 602 can be implemented in the form of a read-only memory (ROM), a static storage device, a dynamic storage device, or a random access memory (RAM). The memory 602 can store an operating system and other application programs. When the technical solution provided in the embodiment of this specification is implemented by software or firmware, the relevant program code is stored in the memory 602, and the processor 601 calls and executes the data collection method or data acquisition method of the embodiment of this application;

[0174] Input / output interface 603, used to implement information input and output;

[0175] Communication interface 604, used to realize communication interaction between the device and other devices, which can be realized through wired mode (such as USB, network cable, etc.) or wireless mode (such as mobile network, WI FI, Bluetooth, etc.);

[0176] Bus 605 , which transmits information between various components of the device (e.g., processor 601 , memory 602 , input / output interface 603 , and communication interface 604 );

[0177] The processor 601 , the memory 602 , the input / output interface 603 and the communication interface 604 are connected to each other in communication within the device via a bus 605 .

[0178] An embodiment of the present application also provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, the above-mentioned data collection method or data acquisition method is implemented.

[0179] The memory, as a non-transient computer-readable storage medium, can be used to store non-transient software programs and non-transient computer executable programs. In addition, the memory may include a high-speed random access memory, and may also include a non-transient memory, such as at least one disk storage device, a flash memory device, or other non-transient solid-state storage device. In some embodiments, the memory may optionally include a memory remotely disposed relative to the processor, and these remote memories may be connected to the processor via a network. Examples of the above-mentioned network include, but are not limited to, the Internet, an intranet, a local area network, a mobile communication network, and combinations thereof.

[0180] The data collection method, data acquisition method, electronic device and medium provided by the embodiment of the present application, after receiving the data acquisition request sent by the server device, the terminal device first determines the matching target privacy protection policy among multiple privacy protection policies according to the data type of the target data requested by the data acquisition request, and then uses the target privacy protection policy to perform privacy protection processing on the target data to obtain privacy protection data, and finally sends the privacy protection data to the terminal device. In this way, by completing the privacy protection processing of the target data on the terminal device, the user's sensitive data is effectively protected, reducing the risk of leakage of the user's data, and the flexible policy selection of determining the matching target privacy protection policy among multiple privacy protection policies improves the flexibility and pertinence of privacy protection, and avoids the unnecessary data processing complexity that may be brought about by a unified privacy protection policy.

[0181] The embodiments described in the embodiments of the present application are intended to more clearly illustrate the technical solutions of the embodiments of the present application and do not constitute a limitation on the technical solutions provided in the embodiments of the present application. Those skilled in the art will appreciate that with the evolution of technology and the emergence of new application scenarios, the technical solutions provided in the embodiments of the present application are also applicable to similar technical problems.

[0182] Those skilled in the art will appreciate that the technical solutions shown in the figures do not constitute a limitation on the embodiments of the present application, and may include more or fewer steps than shown in the figures, or a combination of certain steps, or different steps.

[0183] The device embodiments described above are merely illustrative, and the units described as separate components may or may not be physically separated, that is, they may be located in one place or distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0184] Those skilled in the art will appreciate that all or some of the steps in the methods disclosed above, and the functional modules / units in the systems and devices may be implemented as software, firmware, hardware, or a suitable combination thereof.

[0185] The terms "first", "second", "third", "fourth", etc. (if any) in the specification of the present application and the above-mentioned drawings are used to distinguish similar objects, and are not necessarily used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable where appropriate, so that the embodiments of the present application described herein can be implemented in an order other than those illustrated or described herein. In addition, the terms "including" and "having" and any of their variations are intended to cover non-exclusive inclusions, for example, a process, method, system, product or device comprising a series of steps or units is not necessarily limited to those steps or units clearly listed, but may include other steps or units that are not clearly listed or inherent to these processes, methods, products or devices.

[0186] It should be understood that in the present application, "at least one (item)" means one or more, and "plurality" means two or more. "And / or" is used to describe the association relationship of associated objects, indicating that three relationships may exist. For example, "A and / or B" can mean: only A exists, only B exists, and A and B exist at the same time, where A and B can be singular or plural. The character " / " generally indicates that the objects associated before and after are in an "or" relationship. "At least one of the following" or similar expressions refers to any combination of these items, including any combination of single or plural items. For example, at least one of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c", where a, b, c can be single or multiple.

[0187] In the several embodiments provided in the present application, it should be understood that the disclosed devices and methods can be implemented in other ways. For example, the device embodiments described above are only schematic. For example, the division of the above units is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be through some interfaces, indirect coupling or communication connection of devices or units, which can be electrical, mechanical or other forms.

[0188] The units described above as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0189] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above-mentioned integrated unit may be implemented in the form of hardware or in the form of software functional units.

[0190] If the integrated unit is implemented in the form of a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application, or the part that contributes to the prior art, or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including multiple instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods of various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (Read-Only Memory, referred to as ROM), random access memory (Random Access Memory, referred to as RAM), disk or optical disk and other media that can store programs.

[0191] The preferred embodiments of the present invention are described above with reference to the accompanying drawings, but the scope of the rights of the present invention is not limited thereto. Any modification, equivalent substitution and improvement made by a person skilled in the art without departing from the scope and essence of the present invention should be within the scope of the rights of the present invention.

Claims

1. A data collection method, characterized in that: Applied to a terminal device, the method comprises: Receiving a data acquisition request sent by a server device, wherein the data acquisition request is used to request to acquire target data of a user associated with the terminal device; In response to the data acquisition request, collecting the target data in the terminal device; Acquire data information of the target data, where the data information is used to indicate a data type of the target data; According to the data information, determining a target privacy protection strategy among a plurality of privacy protection strategies preset in the terminal device; Performing privacy protection processing on the target data based on the target privacy protection policy to obtain privacy protection data associated with the target data; Send the privacy protection data to the server device.

2. The method according to claim 1, characterized in that Determining a target privacy protection strategy from among a plurality of privacy protection strategies preset in the terminal device according to the data information includes: In a case where the data information indicates that the data type of the target data is non-single-person data, determining a noise adding strategy as the target privacy protection strategy among multiple privacy protection strategies preset by the terminal device, wherein the non-single-person data is data associated with multiple users; The performing privacy protection processing on the target data based on the target privacy protection policy includes: Based on the target privacy protection strategy, noise addition processing is performed on the target data.

3. The method according to claim 2, characterized in that The data acquisition request includes data usage information, and the data usage information is used to characterize the usage of the target data. The performing noise adding processing on the target data comprises: Determining the sensitivity of the target data and the noise type according to the usage information; Noise addition processing is performed on the target data according to the sensitivity and the noise type.

4. The method according to claim 1, characterized in that: In response to the data acquisition request, collecting the target data in the terminal device includes: According to the target data, performing authority determination on the data acquisition request to obtain a determination result; or performing authority determination on the target data to obtain a determination result; When the determination result is that acquisition is permitted, the target data is collected in the terminal device in response to the data acquisition request.

5. The method according to claim 4, characterized in that The step of performing authority determination on the data acquisition request according to the target data to obtain a determination result includes: In the case where the data acquisition request includes target function information, the target function information is used to represent the target function that the terminal device requests the server device to use, if the target data is necessary data for the target function, determining that the determination result is to allow acquisition; or In the case where the data acquisition request includes data usage information, and the data usage information is used to characterize the target usage of the target data, if the target data is necessary data for the target usage, determining that the determination result is to allow acquisition 。 6. The method according to claim 4, characterized in that The performing authority determination on the target data to obtain a determination result includes: determining whether the target data is obtainable data, the obtainable data being data that is not determined by the associated user as unobtainable data; In a case where the target data is the obtainable data, the determination result is determined to be acquisition permission.

7. The method according to claim 1, characterized in that The multiple privacy protection strategies include multiple encryption algorithms, and the data information is also used to indicate the data size of the target data. Determining a target privacy protection strategy from among a plurality of privacy protection strategies preset in the terminal device according to the data information includes: Determining a target encryption algorithm from among the multiple encryption algorithms according to the data size and the data type; The target data is encrypted according to the target encryption algorithm.

8. A data acquisition method, characterized in that: Applied to a server device, the method comprises: Sending a data acquisition request to a terminal device so that the terminal device executes a data collection process, wherein the data acquisition request is used to request to acquire target data of a user associated with the terminal device; The data collection process includes: In response to the data acquisition request, collecting the target data in the terminal device; Acquire data information of the target data, where the data information is used to indicate a data type of the target data; According to the data information, determining a target privacy protection strategy among a plurality of privacy protection strategies preset in the terminal device; Performing privacy protection processing on the target data based on the target privacy protection policy to obtain privacy protection data associated with the target data; Sending the privacy protection data to the server device; The method further comprises: The privacy protection data is received.

9. An electronic device, characterized in that: The electronic device includes a memory and a processor, the memory stores a computer program, and the processor implements the data collection method according to any one of claims 1 to 7, or the data acquisition method according to claim 8 when executing the computer program.

10. A computer-readable storage medium storing a computer program, characterized in that: When the computer program is executed by a processor, the data collection method according to any one of claims 1 to 7 or the data acquisition method according to claim 8 is implemented.

Images