Data processing method and device based on privacy protection, equipment and storage medium
By introducing privacy processing rules and devices into data processing, analyzing and executing data processing commands, the problem of user privacy leakage during sensor data processing in smart devices is solved, efficient and secure data processing is achieved, and user privacy is ensured.
Patent Information
- Application Number
- CN202411345124.3
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-09-25
- Publication Date
- 2025-02-28
AI Technical Summary
The prior art is difficult to effectively prevent personal information leakage, especially the sensor data collected in smart devices may be illegally or maliciously used during processing, resulting in user privacy leakage.
A data processing method based on privacy protection is adopted to analyze and determine data processing commands, including processing data information and privacy processing rules of the privacy processing device by receiving data processing requests from the terminal device. The privacy processing device processes it in accordance with preset privacy processing rules to ensure that the data reaches the target data information that meets the security level.
It realizes efficient and secure data processing, effectively preventing the leakage of user privacy information, thereby ensuring user privacy and security.
Smart Images
Figure CN119538301A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the field of data processing technology, and in particular to a data processing method, device, equipment and storage medium based on privacy protection. Background Art
[0002] With the development and changes of the data era, all walks of life have proposed the development goals of digital transformation and deep integration with new technologies such as big data, which has accelerated the speed and scope of data flow in the entire ecosystem. However, the faster and wider the data flows, the more serious the security risks it brings, especially the security risks faced by operational data and personal information involving sensitive information. In recent years, personal information leakage incidents have emerged one after another, causing significant losses and adverse effects to citizens and enterprises.
[0003] Currently, many sensors are embedded in personal smart devices, including accelerometers, gyroscopes, and magnetometers. Applications installed on smart devices can access the raw data collected by these sensors and process the raw sensor data to interact with users, or calculate indicator data displayed to users to help users understand their activities or physical conditions. The rich raw sensor data also brings the risk of leaking user privacy. For example, users want to protect the privacy of certain aspects of themselves, such as gender, age, etc., but some apps may illegally or maliciously use and speculate on the raw sensor data, thereby leaking user privacy.
[0004] With the widespread application of big data, data privacy leakage has become an important issue of concern to all parties. The digital age has further increased the possibility of data privacy leakage. How to effectively avoid the risk of leakage in various scenarios is a technical problem that urgently needs to be solved in the industry.
[0005] Therefore, it is an urgent problem for those skilled in the art to propose a data processing method, device, equipment and storage medium based on privacy protection to solve the difficulties existing in the prior art. Summary of the invention
[0006] In view of this, the present invention provides a data processing method, device, equipment and storage medium based on privacy protection, which can efficiently and securely complete relevant data processing, effectively prevent the leakage of user privacy information, and thus ensure user privacy security.
[0007] In order to achieve the above object, the present invention adopts the following technical solution:
[0008] A data processing method based on privacy protection includes the following steps:
[0009] Based on the data processing task, receiving the data processing request sent by the terminal device, analyzing the data processing request, and determining the data processing command, where the data processing command includes the processing data information and the privacy processing rules of the privacy processing device;
[0010] In response to the data processing command, the privacy processing device performs privacy processing according to the preset privacy processing rules;
[0011] The target data information that meets the security level is processed and used to achieve privacy protection of the target data information.
[0012] The above method optionally analyzes the data processing request to determine the specific content of the data processing command: when the data processing request comes from outside the receiving terminal device, perform a permission query on the data processing request, and if the data access permission is available, determine the data processing command based on the data processing request, otherwise reject the data processing request.
[0013] The above method optionally includes obtaining authorization information instructions from a trusted authority according to the privacy processing rules if the determined data processing command is to reject the data processing request, and obtaining data access rights after obtaining the authorization.
[0014] In the above method, optionally, the trusted authority is the user himself or other system entity trusted by the user.
[0015] In the above method, optionally, the data information processed by the privacy processing device includes at least one of the following processing methods: data desensitization processing, homomorphic encryption processing, differential privacy processing and privacy anonymization processing.
[0016] The above method is optional, and the privacy processing rules are as follows:
[0017] According to the data information to be processed of the data security level, a first private data sequence and a second private data sequence corresponding to each piece of data information to be processed are obtained;
[0018] Performing anonymization pre-analysis on the first private data sequence and the second private data sequence corresponding to each piece of data information to be processed, to obtain an anonymization pre-analysis result;
[0019] According to the anonymization pre-analysis results, the information correlation coefficient between the data information corresponding to the privacy labels without abnormalities in the anonymization pre-analysis results and the data information corresponding to the privacy labels with abnormalities is obtained, and the anonymization requirement information matching the abnormal privacy labels is determined;
[0020] Perform anonymization pre-analysis on the anonymization requirement information matched with the abnormal privacy label to obtain the anonymization pre-analysis result of the abnormal label;
[0021] According to the anonymization pre-analysis result of the abnormal label, an anonymization processing instruction corresponding to the privacy data processing rule is obtained, and the privacy data information is anonymized according to the anonymization processing instruction to obtain the target data information.
[0022] A data processing device based on privacy protection, applying any one of the above-mentioned data processing methods based on privacy protection, comprises a data receiving module, a data processing module and a data transmission module connected in sequence; wherein,
[0023] A data receiving module, which is used to receive a data processing request sent by a terminal device based on a data processing task, analyze the data processing request, and determine a data processing command, where the data processing command includes processing data information and privacy processing rules of a privacy processing device;
[0024] The data processing module is used to respond to the data processing command, and the privacy processing device performs privacy processing according to the preset privacy processing rules;
[0025] The data transmission module processes the target data information to obtain the target data information that meets the security level, and is used to achieve the privacy protection of the target data information.
[0026] A computing device includes a memory and one or more instructions, wherein the one or more instructions are stored in the memory and are configured to be executed by one or more processors to perform the above-mentioned data processing method based on privacy protection.
[0027] A computer-readable storage medium stores a computer program, wherein when the computer program is executed in a computer, the computer is caused to execute the above-mentioned data processing method based on privacy protection.
[0028] It can be seen from the above technical solution that, compared with the prior art, the present invention provides a data processing method, device, equipment and storage medium based on privacy protection, which has the following beneficial effects: it can efficiently and securely complete relevant data processing, effectively prevent the leakage of user privacy information, and thus ensure user privacy security. BRIEF DESCRIPTION OF THE DRAWINGS
[0029] In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, the drawings described below are only embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on the provided drawings without paying creative work.
[0030] Figure 1 A flow chart of a data processing method based on privacy protection provided by the present invention;
[0031] Figure 2 A structural block diagram of a data processing device based on privacy protection provided by the present invention;
[0032] Figure 3 A schematic diagram of a computing device structure provided by an embodiment of the present invention;
[0033] Among them, 301-memory, 302-instruction, 303-processor. DETAILED DESCRIPTION
[0034] The following will be combined with the drawings in the embodiments of the present invention to clearly and completely describe the technical solutions in the embodiments of the present invention. Obviously, the described embodiments are only part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.
[0035] Reference Figure 1 As shown, the present invention discloses a data processing method based on privacy protection, comprising the following steps:
[0036] Based on the data processing task, receiving the data processing request sent by the terminal device, analyzing the data processing request, and determining the data processing command, where the data processing command includes the processing data information and the privacy processing rules of the privacy processing device;
[0037] In response to the data processing command, the privacy processing device performs privacy processing according to the preset privacy processing rules;
[0038] The target data information that meets the security level is processed and used to achieve privacy protection of the target data information.
[0039] Furthermore, the data processing request is analyzed to determine the specific content of the data processing command: when the data processing request comes from outside the receiving terminal device, a permission query is performed on the data processing request. If the data access permission is available, the data processing command is determined based on the data processing request, otherwise the data processing request is rejected.
[0040] Furthermore, if the determined data processing command is to reject the data processing request, authorization information instructions are obtained from the trusted authority according to the privacy processing rules, and data access rights are obtained after obtaining the authorization.
[0041] Furthermore, the trusted authority is the user himself or another system entity that the user trusts.
[0042] Furthermore, the data information processed by the privacy processing device includes at least one of the following processing methods: data desensitization processing, homomorphic encryption processing, differential privacy processing and privacy anonymization processing.
[0043] Furthermore, the privacy processing rules are as follows:
[0044] According to the data information to be processed of the data security level, a first private data sequence and a second private data sequence corresponding to each piece of data information to be processed are obtained;
[0045] Performing anonymization pre-analysis on the first private data sequence and the second private data sequence corresponding to each piece of data information to be processed, to obtain an anonymization pre-analysis result;
[0046] According to the anonymization pre-analysis results, the information correlation coefficient between the data information corresponding to the privacy labels without abnormalities in the anonymization pre-analysis results and the data information corresponding to the privacy labels with abnormalities is obtained, and the anonymization requirement information matching the abnormal privacy labels is determined;
[0047] Perform anonymization pre-analysis on the anonymization requirement information matched with the abnormal privacy label to obtain the anonymization pre-analysis result of the abnormal label;
[0048] According to the anonymization pre-analysis result of the abnormal label, an anonymization processing instruction corresponding to the privacy data processing rule is obtained, and the privacy data information is anonymized according to the anonymization processing instruction to obtain the target data information.
[0049] In a specific embodiment, in privacy-preserving data processing, the main participants include: users, digital identity providers, digital identity requesters and users, and trusted identity authorities.
[0050] The digital identity provider provides digital identity information access services and authority judgment services for digital identity requests and users, and interacts with the trusted identity authority to confirm the authenticity of the identity information or credentials provided by the user. The trusted identity authority is responsible for storing and managing the user's real identity information, including name, gender, age, etc., and provides real network identity judgment services.
[0051] Before registering an account with an identity provider, a user needs to provide certain credentials of real identity information, such as whether he is a legal citizen, whether he is over 18 years old, etc. The identity provider interacts with the trusted identity authority to confirm the authenticity of the user information; the identity provider then registers an account for the user and obtains, maintains or generates account information about the user in the subsequent interaction with the user.
[0052] The identity provider manages the user's digital identity, including the life cycle management process such as the creation, maintenance, and destruction of the digital identity, as well as the digital identity information access control management process based on the user's wishes.
[0053] Users interact with service providers, transmitting user requests for services and service providers' responses to the requests.
[0054] The service provider interacts with the identity provider. After receiving the user access request, the service provider calls the digital identity information access service provided by the identity provider to obtain the permission judgment result for the user. If the permission is granted, part of the user's digital identity information is obtained, and whether to grant the user service access rights is determined according to the privacy processing rules. During this process, if necessary, according to the user's wishes, the service provider interacts with the digital identity provider to add, delete, check and modify the user's digital identity information.
[0055] In another specific embodiment, the service provider interacts with the identity provider. After receiving the user access request, the service provider calls the digital identity information access service provided by the identity provider to obtain the result of the authority judgment for the user. If the authority is not granted, the identity provider provides digital identity information management for user 1, and the digital identity information of user 2 can be managed by it or by other identity providers. User 2 makes a request to the identity provider to access the identity information of user 1, and the identity provider provides appropriate digital identity information access rights to the user according to the user's wishes.
[0056] and Figure 1 Corresponding to the method described above, the embodiment of the present invention further provides a data processing device based on privacy protection, and its structural diagram is shown in FIG. Figure 2 As shown, it includes a data receiving module, a data processing module and a data transmission module connected in sequence; wherein,
[0057] A data receiving module, which is used to receive a data processing request sent by a terminal device based on a data processing task, analyze the data processing request, and determine a data processing command, where the data processing command includes processing data information and privacy processing rules of a privacy processing device;
[0058] The data processing module is used to respond to the data processing command, and the privacy processing device performs privacy processing according to the preset privacy processing rules;
[0059] The data transmission module processes the target data information to obtain the target data information that meets the security level, and is used to achieve the privacy protection of the target data information.
[0060] The embodiment of the present invention further provides a computing device, the structural diagram of which is shown in FIG. Figure 3 As shown, it specifically includes a memory 301 and one or more instructions 302, wherein the one or more instructions 302 are stored in the memory 301 and are configured to be executed by one or more processors 303 to perform data processing operations based on privacy protection.
[0061] An embodiment of the present invention further provides a computer-readable storage medium on which a computer program is stored. When the computer program is executed in a computer, the computer is caused to execute the above-mentioned data processing method based on privacy protection.
[0062] In this specification, each embodiment is described in a progressive manner, and each embodiment focuses on the differences from other embodiments. The same or similar parts between the embodiments can be referred to each other. For the device disclosed in the embodiment, since it corresponds to the method disclosed in the embodiment, the description is relatively simple, and the relevant parts can be referred to the method part.
[0063] The above description of the disclosed embodiments enables one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention will not be limited to the embodiments shown herein, but rather to the widest scope consistent with the principles and novel features disclosed herein.
Claims
1. A data processing method based on privacy protection, characterized in that: The following steps are involved: Based on the data processing task, receiving the data processing request sent by the terminal device, analyzing the data processing request, and determining the data processing command, where the data processing command includes the processing data information and the privacy processing rules of the privacy processing device; In response to the data processing command, the privacy processing device performs privacy processing according to the preset privacy processing rules; The target data information that meets the security level is processed and used to achieve privacy protection of the target data information.
2. A data processing method based on privacy protection according to claim 1, characterized in that: The data processing request is analyzed to determine the specific content of the data processing command: when the data processing request comes from outside the receiving terminal device, a permission query is performed on the data processing request. If the data access permission is available, the data processing command is determined based on the data processing request, otherwise the data processing request is rejected.
3. A data processing method based on privacy protection according to claim 2, characterized in that: If the determined data processing command is to reject the data processing request, the authorization information instruction is obtained from the trusted authority according to the privacy processing rules, and the data access rights are obtained after obtaining the authorization.
4. A data processing method based on privacy protection according to claim 3, characterized in that: The trusted authority is the user himself or another system entity that the user trusts.
5. The data processing method based on privacy protection according to claim 1, characterized in that: The data information processed by the privacy processing device includes at least one of the following processing methods: data desensitization processing, homomorphic encryption processing, differential privacy processing and privacy anonymization processing.
6. A data processing method based on privacy protection according to claim 1, characterized in that: The specific privacy processing rules are as follows: According to the data information to be processed of the data security level, a first private data sequence and a second private data sequence corresponding to each piece of data information to be processed are obtained; Performing anonymization pre-analysis on the first private data sequence and the second private data sequence corresponding to each piece of data information to be processed, to obtain an anonymization pre-analysis result; According to the anonymization pre-analysis results, the information correlation coefficient between the data information corresponding to the privacy labels without abnormalities in the anonymization pre-analysis results and the data information corresponding to the privacy labels with abnormalities is obtained, and the anonymization requirement information matching the abnormal privacy labels is determined; Perform anonymization pre-analysis on the anonymization requirement information matched with the abnormal privacy label to obtain the anonymization pre-analysis result of the abnormal label; According to the anonymization pre-analysis result of the abnormal label, an anonymization processing instruction corresponding to the privacy data processing rule is obtained, and the privacy data information is anonymized according to the anonymization processing instruction to obtain the target data information.
7. A data processing device based on privacy protection, characterized in that: A data processing method based on privacy protection according to any one of claims 1 to 6 is applied, comprising a data receiving module, a data processing module and a data transmission module connected in sequence; wherein: A data receiving module, which is used to receive a data processing request sent by a terminal device based on a data processing task, analyze the data processing request, and determine a data processing command, where the data processing command includes processing data information and privacy processing rules of a privacy processing device; The data processing module is used to respond to the data processing command, and the privacy processing device performs privacy processing according to the preset privacy processing rules; The data transmission module processes the target data information to obtain the target data information that meets the security level, and is used to achieve the privacy protection of the target data information.
8. A computing device comprising a memory and one or more instructions, wherein the one or more instructions are stored in the memory and configured to implement the method of any one of claims 1 to 6 by one or more processors.
9. A computer-readable storage medium having a computer program stored thereon, wherein: When the computer program is executed in a computer, the computer is caused to execute the method according to any one of claims 1 to 6.