Cloud disk data operation method and device, electronic equipment and readable storage medium

Abstract

The invention discloses a cloud disk data operation method and device, electronic equipment and a readable storage medium, and the method comprises the steps: obtaining historical interaction data between a terminal and a cloud disk under the condition that an operation on first data is received, and the first data is confidential data recorded in the cloud disk; based on the historical interaction data and the confidentiality level corresponding to the first data, determining a first answer and a target verification question corresponding to the first answer; displaying the target verification question; receiving a second answer input externally; and under the condition that verification of the second answer based on the first answer is passed, operation on the first data is allowed.

Description

Technical Field

[0001] The present application relates to the field of data security, and in particular to a cloud disk data operation method, device, electronic device and readable storage medium. Background Art

[0002] In work, life or study scenarios, users can create many folders in the cloud disk and store many files in different directories, such as word files, PDF files, PPT files, video files, photos, recordings, etc., to facilitate the management of different materials.

[0003] At present, for files with high confidentiality, cloud disks provide separate file encryption and folder encryption for protection. Whether it is file encryption or folder encryption, it is mainly implemented by using a secondary password. That is, the user opens the hidden space in the control interface of the cloud disk and sets an independent secondary password for the hidden space. The user adds folders in the hidden space and uploads files to any directory in the hidden space for protection. When the user subsequently opens the hidden space, he needs to enter the secondary password. When the secondary password is successfully verified, the user is allowed to read and write files and folders in the hidden space. When this solution is adopted, in addition to remembering the login password, the user also needs to remember the secondary password, which is easy to forget or confuse, and there is a risk of memory loss. Summary of the invention

[0004] The present application discloses a cloud disk data operation method, device, electronic device and readable storage medium, which can avoid memorizing a secondary password.

[0005] In order to solve the above problems, this application adopts the following technical solutions: In a first aspect, an embodiment of the present application discloses a cloud disk data operation method, comprising: upon receiving an operation on first data, obtaining historical interaction data between a terminal and a cloud disk, wherein the first data is confidential data recorded in the cloud disk; based on the historical interaction data and a confidentiality level corresponding to the first data, determining a first answer and a target verification question corresponding to the first answer; displaying the target verification question; receiving a second answer input from an external source; and allowing operations on the first data when the second answer is verified based on the first answer.

[0006] In a second aspect, an embodiment of the present application discloses a cloud disk data operation device, comprising: an acquisition module, used to acquire historical interaction data between a terminal and a cloud disk when an operation on first data is received, wherein the first data is confidential data recorded in the cloud disk; a determination module, used to determine a first answer and a target verification question corresponding to the first answer based on the historical interaction data and the confidentiality level corresponding to the first data; a display module, used to display the target verification question; a receiving module, used to receive a second answer input from an external source; and an operation module, used to allow operation on the first data when the second answer is verified based on the first answer.

[0007] In a third aspect, an embodiment of the present application provides an electronic device, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the method described in the first aspect are implemented.

[0008] In a fourth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented.

[0009] In a fifth aspect, an embodiment of the present application provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions, which, when executed by a computer, cause the computer to execute: the steps of the method described in the first aspect.

[0010] The technical solution adopted in this application can achieve the following beneficial effects: The embodiment of the present application provides a cloud disk data operation method. When an operation on the first data is received, the historical interaction data between the terminal and the cloud disk is obtained. The first data is the confidential data recorded in the cloud disk. Then, based on the historical interaction data and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer are determined, the target verification question is displayed and a second answer input from the outside is received. When the second answer is verified based on the first answer, the first data is allowed to be operated. With the scheme of the present application, when an operation on the confidential data in the cloud disk is received, the first answer can be directly determined based on the historical interaction data between the terminal and the cloud disk and the confidentiality level corresponding to the confidential data, and a target verification question can be designed for verification. The user does not need to remember the secondary password additionally, which reduces the pressure on the user to remember the secondary password, reduces the risk of password confusion, and improves the user experience. In addition, since the verification questions determined based on the historical interaction data are diverse, the risk of leakage can be reduced compared to a single fixed secondary password. BRIEF DESCRIPTION OF THE DRAWINGS

[0011] Figure 1 A flowchart of a cloud disk data operation method disclosed in an embodiment of the present application; Figure 2 A schematic diagram showing the first target verification problem disclosed in an embodiment of the present application; Figure 3 A schematic diagram showing the second target verification problem disclosed in the embodiment of the present application; Figure 4 A schematic diagram of the structure of a cloud disk data operation device disclosed in an embodiment of the present application; Figure 5 A schematic diagram of the structure of an electronic device disclosed in an embodiment of the present application. DETAILED DESCRIPTION

[0012] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the present application belong to the scope of protection of this application.

[0013] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable where appropriate, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the electrically connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0014] The cloud disk data operation method, device, electronic device and readable storage medium disclosed in the embodiments of the present application are described in detail below with reference to the accompanying drawings through specific embodiments and their application scenarios.

[0015] This application discloses a cloud disk data operation method, which is applied to a terminal. Figure 1 The following is a flow chart of a cloud disk data operation method disclosed in an embodiment of the present application. Figure 1 As shown, the method comprises the following steps: S110. When an operation on first data is received, obtain historical interaction data between the terminal and the cloud disk, wherein the first data is confidential data recorded in the cloud disk.

[0016] In the present application, the first data may be a file or folder in a cloud disk, and the received operation on the first data may be a click operation, a long press operation, etc.

[0017] The historical interaction data between the terminal and the cloud disk specifically refers to the historical interaction data between the user through the terminal and the cloud disk. The interaction data is dynamic data, for example, the user watches a movie in the cloud disk online, the user edits a document in the cloud disk online, the user uploads a new PPT to the cloud disk, etc.

[0018] The historical interaction data between the terminal and the cloud disk mainly refers to the operation data of the user on the files or folders in the cloud disk through the terminal recorded by the cloud disk.

[0019] In the present application, the historical interaction data may include multiple groups of second data, wherein the second data includes historical operation data, a parent folder corresponding to the historical operation data, an operation identifier corresponding to the historical operation data, and an operation time corresponding to the historical operation data.

[0020] Among them, the historical operation data can be files or folders of historical operations. The historical operation data can be represented by the historical operation data ID, and the parent folder corresponding to the historical operation data can be represented by the parent folder ID. Then the second data can be represented as: [parent folder ID, historical operation data ID, operation ID, operation time].

[0021] In the historical operation data ID, you can use prefixes to record the major types (such as documents, videos, audios, etc.) and minor types (such as PDF, word, PPT, etc.) of files.

[0022] The parent folder refers to the directory where the operation data is located. For example, folder A includes file B and folder C, and folder C includes file D. The parent folder of file B and folder C is folder A, and the parent folder of file D is folder C. The path between the parent folder and the operation data (file or folder) is short, which is easy for users to remember and is operable when used to design verification questions. It should be noted that if the operation data is in the root directory of the cloud disk, the corresponding parent folder ID is unified as Root.

[0023] The operation identifiers corresponding to the historical operation data may include upload, download, online browsing, online editing, sharing, deletion, moving directory, etc.

[0024] The operation time corresponding to the historical operation data includes the start timestamp and the end timestamp. The difference between the start timestamp and the end timestamp is the operation duration. For long operations such as uploading, downloading, online previewing, and online editing, the start timestamp and the end timestamp are recorded normally, and the operation duration is counted normally; for short operations such as sharing, deleting, and moving directories, the start timestamp and the end timestamp are the same, and the operation duration defaults to 0.

[0025] In the second data, the relationship between the historical operation data, the parent folder corresponding to the historical operation data, the operation identifier corresponding to the historical operation data, and the operation time corresponding to the historical operation data is unique. Therefore, unique operation data can be determined based on the second data.

[0026] S120. Determine a first answer and a target verification question corresponding to the first answer based on the historical interaction data and a confidentiality level corresponding to the first data.

[0027] Since historical interaction data are operations that users have performed on the cloud disk through the terminal, users have a certain impression of these operations and are sensitive to historical interaction data. In addition, since the interaction data changes with the user's use of the cloud disk, the interaction data has a high degree of randomness. Therefore, determining the first answer based on the historical interaction data and then designing a target verification question corresponding to the first answer has high operability and security.

[0028] The confidentiality level corresponding to the first data can be level one confidentiality or level two confidentiality, wherein the confidentiality level of level two confidentiality is greater than that of level one confidentiality. In the present application, based on different confidentiality levels, different historical interaction data can be selected to determine the first answer, and then the corresponding target verification question is generated based on the first answer, and different confidentiality levels can correspond to different types of verification questions. For example, level one confidentiality corresponds to multiple-choice questions, and level two confidentiality corresponds to fill-in-the-blank questions. Other options (i.e., incorrect options) in multiple-choice questions except the correct options can be generated based on cloud disk data or based on data outside the cloud disk.

[0029] It should be noted that the first answer can correspond one-to-one with the target verification question.

[0030] S130: Display the target verification question.

[0031] When multiple first answers are determined, there are also multiple corresponding target verification questions generated. When displaying, one of the multiple target verification questions can be randomly selected for display, or one can be determined from the multiple target verification questions for display according to preset rules. For example, each target verification question has a corresponding score value, and it is preferred to select the target verification question with the highest score value for display.

[0032] S140: Receive a second answer input from the outside.

[0033] The second answer inputted externally is the answer inputted by the user based on the displayed target verification question. If the target verification question is a multiple-choice question, the second answer inputted is the selected option, and if the target verification question is a fill-in-the-blank question, the second answer inputted is the input text.

[0034] S150. When the second answer is verified based on the first answer, operation on the first data is allowed.

[0035] When the target verification question is a multiple-choice question, you can directly determine whether the selected option is consistent with the first answer. If they are consistent, the verification is passed. When the target verification question is a fill-in-the-blank question, you can use the BERT (Bidirectional Encoder Representations from Transformers) model to calculate the similarity between the second answer and the first answer. When the calculated similarity is greater than the preset threshold, the second answer is verified.

[0036] The embodiment of the present application provides a cloud disk data operation method. When an operation on the first data is received, the historical interaction data between the terminal and the cloud disk is obtained. The first data is the confidential data recorded in the cloud disk. Then, based on the historical interaction data and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer are determined, the target verification question is displayed and a second answer input from the outside is received. When the second answer is verified based on the first answer, the first data is allowed to be operated. With the scheme of the present application, when an operation on the confidential data in the cloud disk is received, the first answer can be directly determined based on the historical interaction data between the terminal and the cloud disk and the confidentiality level corresponding to the confidential data, and a target verification question can be designed for verification. The user does not need to remember the secondary password additionally, which reduces the pressure on the user to remember the secondary password, reduces the risk of password confusion, and improves the user experience. In addition, since the verification questions determined based on the historical interaction data are diverse, the risk of leakage can be reduced compared to a single fixed secondary password.

[0037] In one implementation, the allowing the first data to be operated on when the second answer is verified based on the first answer may include: allowing the first data to be operated on when the second answer is verified based on the first answer within a preset time and a preset number of times. Exemplarily, the preset time may be 60 seconds, 120 seconds, etc., and the preset number of times may be 3 times, 5 times, etc., which may be set according to actual needs.

[0038] It should be noted that within the preset number of times, the target verification question displayed each time is different. Specifically, when the verification fails, other target verification questions can be displayed to re-verify. When the number of verifications exceeds the preset number of times, the first data can be locked for a period of time and a text message can be sent to notify the user. At this time, if the user still wants to access the first data, he can use a password plus text message verification to unlock and access it.

[0039] In an embodiment of the present application, determining the first answer and the target verification question corresponding to the first answer based on the historical interaction data and the confidentiality level corresponding to the first data may include: screening the historical interaction data based on preset statistical rules to determine multiple statistical results; determining the first answer and the target verification question corresponding to the first answer based on the multiple statistical results and the confidentiality level corresponding to the first data.

[0040] The preset statistical rules may include a statistical scope and a statistical dimension.

[0041] Taking the second data in the historical interaction data as a quadruple: [parent folder, historical operation data, operation ID, operation time] as an example, the statistical scope may involve any element in the quadruple, or may involve a composite element (i.e., at least two elements) in the quadruple. When it comes to the parent folder in the quadruple, the actual parent folder may be selected from the directory structure of the cloud disk by exhaustive or random methods. When it comes to the historical operation data in the quadruple, the actual file or folder (i.e., historical operation data) may be selected from the directory structure of the cloud disk by exhaustive or random methods. When it comes to the operation ID in the quadruple, any operation ID may be selected from the operations provided to the user by the cloud disk by exhaustive or random methods. When it comes to the operation time in the quadruple, a period of time in history may be selected by random methods based on the current system time. Specifically, it may be a fixed period of time (e.g., the past week) or a periodic period of time (e.g., 00:00-06:00 every morning).

[0042] The statistical dimension may involve any element in the quadruple, or a composite element (i.e., at least two elements) in the quadruple. When it comes to the parent folder in the quadruple, the actual parent folder may be selected from the directory structure of the cloud disk by exhaustive or random methods. When it comes to the historical operation data in the quadruple, the actual file / folder (i.e., historical operation data) may be selected from the directory structure of the cloud disk by exhaustive or random methods. When it comes to the operation ID in the quadruple, any operation ID may be selected from the operations provided to the user by the cloud disk by exhaustive or random methods. When it comes to the operation time in the quadruple, a period of time in history may be selected by random methods based on the current system time. Specifically, it may be a fixed period of time (e.g., the past week) or a periodic period of time (e.g., 00:00-06:00 every morning).

[0043] Since the same element has different values, the same element can be involved in both the statistical scope and the statistical dimension. It should be noted that the elements of the statistical scope and the elements involved in the statistical dimension need to be checked to see if they are mutually exclusive. If they are, there will be problems with the statistical logic. In addition, the statistical method used in this application can be summation, averaging, etc.

[0044] The preset statistical rules in this application can be as follows: Example 1: In a certain folder (statistical scope: parent folder), count the frequency of opening (statistical dimension: operation) of each file or folder in the past month (statistical scope: operation time).

[0045] Example 2: Count the frequency of performing various operations (statistical dimension: operation) on image type files (statistical scope: historical operation data) in a certain folder (statistical scope: parent folder).

[0046] Example 3: For files that have been shared (statistical scope: operation), count the average number of views / collections / likes (statistical dimension: operation) in the past day (statistical scope: operation time).

[0047] Example 4: For any video type file in the cloud disk (statistical scope: historical operation data), count the frequency of opening (statistical dimension: operation) every night (statistical scope: operation time) in the past month.

[0048] Example 5: For any file in the cloud disk (statistical scope: historical operation data), count the frequency of moving in / out (statistical dimension: operation) to a certain folder (statistical dimension: parent folder) in the past year (statistical scope: operation time).

[0049] By adopting the solution of the present application, historical interaction data can be first screened based on preset statistical rules to determine multiple statistical results, and then based on the multiple statistical results and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer can be determined.

[0050] In an embodiment of the present application, determining a first answer and a target verification question corresponding to the first answer based on the multiple statistical results and the confidentiality level corresponding to the first data may include: determining a score value corresponding to each statistical result based on the user's awareness of each statistical result; determining a target position based on the confidentiality level of the first data; determining the statistical result corresponding to the score value of the target position as the first answer in ascending order of the score value; and determining a target verification question corresponding to the first answer based on the first answer and the confidentiality level corresponding to the first data.

[0051] In the present application, the target position determined based on the confidentiality level of the first data is the value position of the first answer. A corresponding relationship can be preset between the confidentiality level and the value position. Therefore, the target position can be determined based on the confidentiality level of the first data.

[0052] For example, when the target position is 50%-60% percentile, the statistical results corresponding to the score values ​​corresponding to 50%-60% percentile can be determined as the first answer in order of the score values ​​from small to large, and the target verification question corresponding to the first answer is determined based on the first answer and the confidentiality level corresponding to the first data. In addition, in this case, when displaying the target verification question, the target verification question corresponding to the first answer with a high score value can be displayed preferentially.

[0053] In one implementation, determining the score value corresponding to each statistical result based on the user's awareness of each statistical result may include: determining a target normal distribution based on the multiple statistical results; for each statistical result, determining the score value corresponding to the statistical result based on the distribution of the statistical result in the target normal distribution and the target time, wherein the target time is the distance between the operation time corresponding to the statistical result and the present time.

[0054] In one implementation, determining the score value corresponding to the statistical result based on the distribution of the statistical result in the target normal distribution and the target time may include: determining the score value corresponding to the statistical result based on a first weight value, the distribution of the statistical result in the target normal distribution, a second weight value and the target time.

[0055] In this application, it can be based on the formula , determine the score value corresponding to the statistical result, where, is the first weight value, is a value determined based on the distribution of the statistical results in the target normal distribution, is the second weight value, is a value determined based on the target time. In this application, , , that is, the score is For the Lord, Make adjustments.

[0056] For example, , It belongs to the inverse S function. The curve first drops gently (S1 segment), then drops sharply (S2 segment), and finally drops gently (S3 segment). m and n are hyperparameters. m controls the smoothness of the curve. The closer m is to 0, the smoother the curve is. The larger m is, the steeper the curve is. n controls the symmetric center position of the curve. n>0.

[0057] In this application, the target normal distribution can be determined based on multiple statistical results obtained by screening based on the same preset statistical rule. For group users using cloud disks, the 3σ information of each statistical result under the same rule can be updated regularly when offline.

[0058] According to the 3σ principle, in the normal distribution, μ is the mean of multiple statistical results under the same rule, and σ is the standard deviation of multiple statistical results under the same rule. The probability that the statistical results are distributed in (μ-σ, μ+σ) is 0.6827, which is a regular statistical result. The probability that the statistical results are distributed in (μ-2σ, μ+2σ) is 0.9545, which is a somewhat special statistical result. The probability that the statistical results are distributed in (μ-3σ, μ+3σ) is 0.9973, which is a very special statistical result. It can be considered that normal statistical results are almost all concentrated in the interval (μ-3σ, μ+3σ), and the probability of exceeding this range is less than 0.3%.

[0059] In this application, if the current statistical result is within (μ-σ, μ+σ) of the target normal distribution, the current statistical result is mapped to the S1 segment according to its relative position in the distribution of all statistical results under the same rule (i.e., the amplitude between the maximum and minimum values). At this time, =A1. If the current statistical result is within (μ-2σ, μ-σ) or (μ+σ, μ+2σ) of the target normal distribution, the current statistical result is mapped to the S2 segment according to its relative position in the distribution of all statistical results under the same rule (i.e., the amplitude between the maximum and minimum values). At this time, =A2. If the current statistical result is within (μ-3σ, μ-2σ) or (μ+2σ, μ+3σ) of the target normal distribution, the current statistical result is mapped to the S3 segment according to its relative position in the distribution of all statistical results under the same rule (i.e., the amplitude between the maximum and minimum values). At this time, =A3. If the current statistical result is outside the target normal distribution (μ-3σ,μ+3σ), the current statistical result is mapped to the S4 segment according to its relative position in the distribution of all statistical results under the same rule (i.e., the amplitude between the maximum and minimum values). At this time, =A4. It should be noted that A1<A2<A3<A4.

[0060] When the current statistical result is within (μ-σ, μ+σ), the statistical result is of poor significance, the user's impression is not deep, and the difficulty of recognizing this statistical result is high, which makes it difficult to answer the verification question constructed using it, and thus the score is slowly improved. For example, a bunch of photos were taken in a certain activity, and most users browsed them 3-5 times. Users really can't remember which photo they viewed 3 times and which photo they viewed 5 times. When the current statistical result is within (μ-2σ, μ-σ) or (μ+σ, μ+2σ), (μ-3σ, μ-2σ) or (μ+2σ, μ+3σ), the statistical result is of gradually increasing significance, the user's impression is gradually deepened, and the difficulty of recognizing this statistical result is low, which makes it gradually less difficult to answer the verification question constructed using it, and thus the score is instantly improved. When the current statistical result is outside (μ-3σ,μ+3σ), the statistical result is highly significant, and the user is impressed. The difficulty of recognizing the statistical result is relatively low, which significantly reduces the difficulty of answering verification questions constructed using the statistical result, and thus the score is slowly improved. For example, there is a photo that has special significance and users often watch it. The statistical average monthly viewing times of 100 and 1000 have little difference in significance for the answer.

[0061] For example, , where t is the target time mentioned above and is normalized. If the statistical results involve a period of time, t is calculated based on the midpoint of the period. It is a unimodal function. First it increases, then it decreases, and the increase and decrease are symmetrical. In this application, if t is smaller, it means that the operation time corresponding to the statistical result is closer to the present, and users will not deliberately keep it confidential during daily operations. Therefore, the possibility of statistical results being leaked is greater, and it is not suitable for constructing verification problems. If the size of t is appropriate, it means that the operation time corresponding to the statistical result is appropriate to the current time. Even if the user does not deliberately keep it confidential during daily operations, other people may browse the operation of the person concerned, but because they are not the person concerned, they do not have a deep memory and will soon forget the operation corresponding to the statistical result. Only the person concerned has a deep memory of the operation corresponding to the statistical result, and the possibility of leakage is small. It is suitable for constructing verification problems. The value of gradually increases, and then gradually decreases. If t is larger, it means that the operation time corresponding to the statistical result is farther away from now, and the user's impression of the operation corresponding to the statistical result is more vague, which is not suitable for constructing verification problems. The value of is lower.

[0062] In one implementation, the determining of the target location based on the confidentiality level of the first data may include: determining the target location based on the confidentiality level of the parent folder of the first data and the confidentiality level of the first data. That is, the present application determines the value location of the first answer based on the confidentiality level of the parent folder of the first data and the confidentiality level of the first data. By comprehensively considering the confidentiality level of the parent folder of the first data and the confidentiality level of the first data, the determined first answer is more appropriate.

[0063] In one implementation, the determining of the target position based on the confidentiality level of the parent folder of the first data and the confidentiality level of the first data may include: determining an initial position based on the confidentiality level of the first data; and adjusting the initial position to obtain the target position based on the confidentiality level of the parent folder of the first data. That is, firstly determining the initial value position of the first answer based on the confidentiality level of the first data, and then adjusting the initial value position based on the confidentiality level of the parent folder of the first data to obtain the target value position of the first answer, so that the difficulty of the generated target verification question is more appropriate.

[0064] In one implementation, the determining of the initial position based on the confidentiality level of the first data may include: when the confidentiality level of the first data is level one confidentiality, determining the first position as the initial position; when the confidentiality level of the first data is level two confidentiality, determining the second position as the initial position, wherein the confidentiality level of the level two confidentiality is greater than the confidentiality level of the level one confidentiality, and the second position is ranked after the first position. Exemplarily, the first position may be the 50% percentile-60% percentile, and the second position may be the 60% percentile-70% percentile, and the data may be determined based on statistics of verification questions that the user has answered correctly.

[0065] In one implementation, adjusting the initial position to obtain the target position based on the confidentiality level of the parent folder of the first data may include: when the confidentiality level of the parent folder of the first data is level zero confidentiality and the confidentiality level of the first data is level one confidentiality, determining the first position as the target position, wherein the confidentiality level of the level one confidentiality is greater than the confidentiality level of the level zero confidentiality; when the confidentiality level of the parent folder of the first data is level one confidentiality and the confidentiality level of the first data is level one confidentiality, determining a third position as the target position, wherein the third position is ranked before the first position; when the confidentiality level of the parent folder of the first data is level two confidentiality and the confidentiality level of the first data is level one confidentiality In the case of a confidentiality level of the parent folder of the first data being level zero confidentiality and the confidentiality level of the first data being level two confidentiality, the second position is determined as the target position; in the case of a confidentiality level of the parent folder of the first data being level one confidentiality and the confidentiality level of the first data being level two confidentiality, the fifth position is determined as the target position, wherein the fifth position is ranked after the second position; in the case of a confidentiality level of the parent folder of the first data being level two confidentiality and the confidentiality level of the first data being level two confidentiality, the sixth position is determined as the target position, wherein the sixth position is ranked after the fifth position.

[0066] It should be noted that zero-level confidentiality means that confidentiality is not set. After the user successfully logs in to the cloud disk through the terminal, he can directly read and write files or folders; level one confidentiality is applicable to files or folders with certain security requirements, such as life photos, life videos, etc. After the user successfully logs in to the cloud disk through the terminal, a verification question with a lower score is generated, and you can answer it in the form of multiple-choice questions. If the verification passes, you can read and write files or folders; level two confidentiality is applicable to files or folders with higher security requirements, such as contracts, address books, etc. After the user successfully logs in to the cloud disk through the terminal, a verification question with a higher score is generated, and you can answer it in the form of fill-in-the-blank questions. If the verification passes, you can read and write files or folders.

[0067] In the present application, when the confidentiality level of the parent folder of the first data is zero-level confidentiality, the initial position determined based on the confidentiality level of the first data is directly used as the target position.

[0068] Exemplarily, the third position may be 40% percentile-50% percentile. Specifically, when the confidentiality level of the parent folder of the first data is level one confidentiality and the confidentiality level of the first data is level one confidentiality, it means that the user wants to slightly increase the verification of the first data, but does not want to be troublesome (for example, after answering incorrectly, repeated verification is required, or even verification is performed using SMS or face recognition). Therefore, compared with the first position, the 10% percentile can be lowered to allow the user to quickly verify and output The statistical results ranked between the 40% and 50% percentiles are used as the first answers to design verification questions.

[0069] Exemplarily, the fourth position may be the 30% percentile-40% percentile. Specifically, when the confidentiality level of the parent folder of the first data is level 2 confidentiality and the confidentiality level of the first data is level 1 confidentiality, it means that the user wants to slightly increase the verification of the first data, but does not want to be bothered (for example, repeated verification is required after a wrong answer, or even verification is performed using SMS or face recognition). Considering that the previous level 2 confidentiality is strong enough, the 20% percentile may be lowered compared to the first position, and the output is The statistical results ranked between the 30% and 40% percentiles are used as the first answers to design verification questions.

[0070] For example, the fifth position may be 70% percentile-80% percentile. Specifically, when the confidentiality level of the parent folder of the first data is level one confidentiality and the confidentiality level of the first data is level two confidentiality, it means that the user wants to strengthen the confidentiality of the first data to a certain extent. Therefore, compared with the second position, the percentile may be increased by 10%, and the output The statistical results ranked between the 70% and 80% percentiles are used as the first answers to design verification questions.

[0071] For example, the sixth position may be between the 80% and 90% percentiles. Specifically, when the confidentiality level of the parent folder of the first data is level 2 confidentiality and the confidentiality level of the first data is level 2 confidentiality, it means that the user wants to strengthen confidentiality as much as possible. Therefore, compared with the second position, the percentile may be increased by 20%, and the output The statistical results ranked between the 80% and 90% percentiles are used as the first answers to design verification questions.

[0072] It should be noted that both the parent folder of the first data and the first data are set to be confidential, which is called a two-level nested confidentiality setting. Through the two-level nested confidentiality setting, the confidentiality of the first data can be enhanced while minimizing the complexity of operations.

[0073] In one implementation, determining the first answer and the target verification question corresponding to the first answer based on the historical interaction data and the confidentiality level corresponding to the first data may include: determining multiple groups of first answers and target verification questions corresponding to the first answers based on the historical interaction data and the confidentiality level corresponding to the first data; screening multiple target verification questions based on historical output verification questions and the pages displayed when the cloud disk is opened this time to obtain screened target verification questions; displaying the target verification questions may include: displaying the screened target verification questions.

[0074] In the present application, when multiple groups of first answers and target verification questions corresponding to the first answers are determined, deduplication can be performed based on historical output verification questions. Specifically, the BERT model can be used to calculate the similarity between each target verification question and the historical output verification question. If the similarity is greater than a preset threshold, it is filtered out. In addition, it can also be determined whether the answer to the target verification question is directly displayed on the page that was displayed when the cloud disk was opened this time. If so, it is filtered out.

[0075] After the screening of the target verification questions is completed, the screened target verification questions are displayed to ensure the reliability of the verification.

[0076] In one implementation, determining a first answer and a target verification question corresponding to the first answer based on the historical interaction data and the confidentiality level corresponding to the first data may include: determining the first answer based on the historical interaction data and the confidentiality level corresponding to the first data; determining a verification question type based on the confidentiality level corresponding to the first data; and generating a target verification question corresponding to the first answer based on the first answer and the verification question type.

[0077] It should be noted that the specific implementation of determining the first answer here is consistent with the above, and this application will not repeat it here.

[0078] In the present application, a corresponding relationship can be set between the confidentiality level and the verification question type. For example, when the confidentiality level is level one, the verification question type can be a multiple-choice question, and when the confidentiality level is level two, the verification question type can be a fill-in-the-blank question.

[0079] When the verification question type is a multiple-choice question, the target verification question corresponding to the first answer can be generated as follows: Figure 2 As shown, Figure 2 The "Welcome" file in is the first data in this article. When the verification question type is a fill-in-the-blank question, the target verification question corresponding to the first answer can be generated as follows: Figure 3 As shown, Figure 3The "Welcome" file in the is the first data in this article.

[0080] In one implementation, generating a target verification question corresponding to the first answer based on the first answer and the verification question type may include: inputting the first answer and the verification question type into a large language model to obtain the target verification question corresponding to the first answer output by the large language model.

[0081] Specifically, the first answer and the verification question type can be input into the Propmt of the large language model LLM, and the Propmt can be input into the LLM to let the LLM generate a target verification question corresponding to the first answer and conforming to the verification question type. The target verification question can be used to guide the user to recall relevant operations in order to answer.

[0082] It should be noted that since the verification problem belongs to regular natural language, the general LLM can be used without additional training. Moreover, compared with using templates to generate verification problems, generating verification problems based on LLM is more flexible and more guiding.

[0083] In the embodiment of the present application, before obtaining the historical interaction data between the terminal and the cloud disk in the case of receiving an operation on the first data, it may also include: receiving an encryption operation on the first data; in response to the encryption operation, setting a confidentiality level of the first data, wherein the confidentiality level includes first-level confidentiality and second-level confidentiality, and the confidentiality level of the second-level confidentiality is greater than the confidentiality level of the first-level confidentiality.

[0084] After the user uploads or creates the first data for the first time, the default confidentiality level is zero-level confidentiality. The user can adjust the confidentiality level of the first data according to their own needs. When the first data is set to zero-level confidentiality by default, the user can directly set the first data from zero-level confidentiality to one-level confidentiality or two-level confidentiality.

[0085] After completing the setting of the confidentiality level of the first data, the confidentiality level of the first data can also be adjusted. When the first data is level one confidential, the user can use text messages, faces, etc. to verify. When the verification is successful, the confidentiality level of the first data is adjusted from level one confidential to level two confidential or level zero confidential. When the first data is level two confidential, the user can use text messages, faces, etc. to verify. When the verification is successful, the confidentiality level of the first data is adjusted from level two confidential to level one confidential or level zero confidential.

[0086] By adopting the solution of the present application, users have an impression of their previous operations and do not need to remember additional knowledge. The cloud disk does not provide proof to the user, thus realizing zero-knowledge proof. In addition, the user's operations are random, the combination methods are diversified, and the verification problems are diversified accordingly, reducing the risk of leakage, making the data design verification problem using the user operating the cloud disk through the terminal feasible and confidential.

[0087] The cloud disk data operation method provided in the embodiment of the present application can be executed by a cloud disk data operation device. In the embodiment of the present application, the cloud disk data operation device executing the cloud disk data operation method is taken as an example to illustrate the cloud disk data operation device provided in the embodiment of the present application.

[0088] Figure 4 This is a schematic diagram of the structure of a cloud disk data operation device disclosed in an embodiment of the present application. Figure 4 As shown, the cloud disk data operation device 400 includes: an acquisition module 410, a determination module 420, a display module 430, a receiving module 440 and an operation module 450.

[0089] In the present application, an acquisition module 410 is used to acquire historical interaction data between a terminal and a cloud disk upon receiving an operation on first data, wherein the first data is confidential data recorded in the cloud disk; a determination module 420 is used to determine a first answer and a target verification question corresponding to the first answer based on the historical interaction data and a confidentiality level corresponding to the first data; a display module 430 is used to display the target verification question; a receiving module 440 is used to receive a second answer input from an external source; and an operation module 450 is used to allow operation on the first data when the second answer is verified based on the first answer.

[0090] In one implementation, the determination module 420 determines a first answer and a target verification question corresponding to the first answer based on the historical interaction data and the confidentiality level corresponding to the first data, including: screening the historical interaction data based on preset statistical rules to determine multiple statistical results; determining the first answer and the target verification question corresponding to the first answer based on the multiple statistical results and the confidentiality level corresponding to the first data.

[0091] In one implementation, the determination module 420 determines a first answer and a target verification question corresponding to the first answer based on the multiple statistical results and the confidentiality level corresponding to the first data, including: determining the score value corresponding to each statistical result based on the user's awareness of each statistical result; determining the target position based on the confidentiality level of the first data; determining the statistical result corresponding to the score value of the target position as the first answer in ascending order of the score value; and determining the target verification question corresponding to the first answer based on the first answer and the confidentiality level corresponding to the first data.

[0092] In one implementation, the determination module 420 determines the score value corresponding to each of the statistical results based on the user's awareness of each of the statistical results, including: determining a target normal distribution based on the multiple statistical results; for each of the statistical results, determining the score value corresponding to the statistical result based on the distribution of the statistical result in the target normal distribution and the target time, wherein the target time is the distance between the operation time corresponding to the statistical result and the current time.

[0093] In one implementation, the determination module 420 determines the score value corresponding to the statistical result based on the distribution of the statistical result in the target normal distribution and the target time, including: determining the score value corresponding to the statistical result based on a first weight value, the distribution of the statistical result in the target normal distribution, a second weight value and the target time.

[0094] In one implementation, the determination module 420 determines the target location based on the confidentiality level of the first data, including: determining the target location based on the confidentiality level of a parent folder of the first data and the confidentiality level of the first data.

[0095] In one implementation, the determination module 420 determines the target location based on the confidentiality level of the parent folder of the first data and the confidentiality level of the first data, including: determining the initial location based on the confidentiality level of the first data; and adjusting the initial location to obtain the target location based on the confidentiality level of the parent folder of the first data.

[0096] In one implementation, the determination module 420 determines the initial position based on the confidentiality level of the first data, including: when the confidentiality level of the first data is level one confidentiality, determining the first position as the initial position; when the confidentiality level of the first data is level two confidentiality, determining the second position as the initial position, wherein the confidentiality level of the level two confidentiality is greater than the confidentiality level of the level one confidentiality, and the second position is ranked after the first position.

[0097] In one implementation, the determination module 420 adjusts the initial position to obtain a target position based on the confidentiality level of the parent folder of the first data, including: when the confidentiality level of the parent folder of the first data is level zero confidentiality and the confidentiality level of the first data is level one confidentiality, determining the first position as the target position, wherein the confidentiality level of the level one confidentiality is greater than the confidentiality level of the level zero confidentiality; when the confidentiality level of the parent folder of the first data is level one confidentiality and the confidentiality level of the first data is level one confidentiality, determining a third position as the target position, wherein the third position is ranked before the first position; when the confidentiality level of the parent folder of the first data is level two confidentiality and the confidentiality level of the first data is level one confidentiality In the case of level 2 confidentiality, the fourth position is determined as the target position, wherein the fourth position is ranked before the third position; in the case of the confidentiality level of the parent folder of the first data is level 0 confidentiality, and the confidentiality level of the first data is level 2 confidentiality, the second position is determined as the target position; in the case of the confidentiality level of the parent folder of the first data is level 1 confidentiality, and the confidentiality level of the first data is level 2 confidentiality, the fifth position is determined as the target position, wherein the fifth position is ranked after the second position; in the case of the confidentiality level of the parent folder of the first data is level 2 confidentiality, and the confidentiality level of the first data is level 2 confidentiality, the sixth position is determined as the target position, wherein the sixth position is ranked after the fifth position.

[0098] In one implementation, the determination module 420 determines the first answer and the target verification question corresponding to the first answer based on the historical interaction data and the confidentiality level corresponding to the first data, including: determining multiple groups of first answers and target verification questions corresponding to the first answers based on the historical interaction data and the confidentiality level corresponding to the first data; screening multiple target verification questions based on historical output verification questions and the pages displayed when the cloud disk is opened this time to obtain screened target verification questions; the display module displays the target verification questions, including: displaying the screened target verification questions.

[0099] In one implementation, the determination module 420 determines a first answer and a target verification question corresponding to the first answer based on the historical interaction data and the confidentiality level corresponding to the first data, including: determining the first answer based on the historical interaction data and the confidentiality level corresponding to the first data; determining the verification question type based on the confidentiality level corresponding to the first data; and generating a target verification question corresponding to the first answer based on the first answer and the verification question type.

[0100] In one implementation, the determination module 420 generates a target verification question corresponding to the first answer based on the first answer and the verification question type, including: inputting the first answer and the verification question type into a large language model to obtain the target verification question corresponding to the first answer output by the large language model.

[0101] In one implementation, the above-mentioned device also includes: the receiving module 440, which is also used to receive an encryption operation on the first data before obtaining the historical interaction data between the terminal and the cloud disk when the operation on the first data is received; a response module, which is used to set the confidentiality level of the first data in response to the encryption operation, wherein the confidentiality level includes first-level confidentiality and second-level confidentiality, and the confidentiality level of the second-level confidentiality is greater than the confidentiality level of the first-level confidentiality.

[0102] In one implementation, the historical interaction data includes multiple groups of second data, wherein the second data includes historical operation data, a parent folder corresponding to the historical operation data, an operation identifier corresponding to the historical operation data, and an operation time corresponding to the historical operation data.

[0103] The cloud disk data operation device provided in the embodiment of the present application can implement each process implemented in the embodiment of the cloud disk data operation method. To avoid repetition, it will not be repeated here.

[0104] Alternatively, if Figure 5 As shown, an embodiment of the present application also provides an electronic device 500, including a processor 501 and a memory 502, and the memory 502 stores a program or instruction that can be executed on the processor 501. When the program or instruction is executed by the processor 501, the various steps of the above-mentioned cloud disk data operation method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0105] It should be noted that the electronic devices in the embodiments of the present application include mobile electronic devices and non-mobile electronic devices.

[0106] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, each process of the above-mentioned cloud disk data operation method embodiment is implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0107] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0108] An embodiment of the present application also provides a computer program product, which includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer executes: the steps of the above-mentioned cloud disk data operation method.

[0109] The above embodiments of the present application focus on describing the differences between the various embodiments. As long as the different optimization features between the various embodiments are not contradictory, they can be combined to form a better embodiment. Considering the simplicity of the text, they will not be repeated here.

[0110] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.

Claims

1. A cloud disk data operation method, characterized in that: include: When an operation on first data is received, obtaining historical interaction data between the terminal and the cloud disk, wherein the first data is confidential data recorded in the cloud disk; Determine a first answer and a target verification question corresponding to the first answer based on the historical interaction data and a confidentiality level corresponding to the first data; Displaying said target validation question; receiving a second answer from external input; In the case where the second answer is verified based on the first answer, the operation on the first data is allowed.

2. The method according to claim 1, characterized in that The determining, based on the historical interaction data and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer comprises: Filter the historical interaction data based on preset statistical rules to determine multiple statistical results; Based on the multiple statistical results and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer are determined.

3. The method according to claim 2, characterized in that The determining, based on the plurality of statistical results and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer comprises: Based on the user's degree of recognition of each of the statistical results, respectively determine a score value corresponding to each of the statistical results; determining a target location based on the confidentiality level of the first data; In order of the score values ​​from small to large, the statistical result corresponding to the score value of the target position is determined as the first answer; Based on the first answer and the confidentiality level corresponding to the first data, a target verification question corresponding to the first answer is determined.

4. The method according to claim 3, characterized in that The step of determining the score value corresponding to each of the statistical results based on the user's degree of recognition of each of the statistical results comprises: Based on the multiple statistical results, determining a target normal distribution; For each of the statistical results, a score value corresponding to the statistical result is determined based on the distribution of the statistical result in the target normal distribution and the target time, wherein the target time is the distance between the operation time corresponding to the statistical result and the present time.

5. The method according to claim 4, characterized in that The determining a score value corresponding to the statistical result based on the distribution of the statistical result in the target normal distribution and the target time includes: Based on the first weight value, the distribution of the statistical result in the target normal distribution, the second weight value and the target time, a score value corresponding to the statistical result is determined.

6. The method according to claim 3, characterized in that The determining the target location based on the confidentiality level of the first data includes: A target location is determined based on the confidentiality level of the parent folder of the first data and the confidentiality level of the first data.

7. The method according to claim 6, characterized in that The determining the target location based on the confidentiality level of the parent folder of the first data and the confidentiality level of the first data includes: Determining an initial position based on the confidentiality level of the first data; Based on the confidentiality level of the parent folder of the first data, the initial position is adjusted to obtain the target position.

8. The method according to claim 7, characterized in that The determining the initial position based on the confidentiality level of the first data includes: When the confidentiality level of the first data is level one confidentiality, determining the first position as the initial position; When the confidentiality level of the first data is level 2 confidentiality, the second position is determined as the initial position, wherein the confidentiality level of the level 2 confidentiality is greater than the confidentiality level of the level 1 confidentiality, and the second position is ranked after the first position.

9. The method according to claim 8, characterized in that The adjusting the initial position to obtain the target position based on the confidentiality level of the parent folder of the first data includes: In a case where the confidentiality level of the parent folder of the first data is level zero confidentiality and the confidentiality level of the first data is level one confidentiality, determining the first location as the target location, wherein the confidentiality level of the level one confidentiality is greater than the confidentiality level of the level zero confidentiality; When the confidentiality level of the parent folder of the first data is level one confidentiality and the confidentiality level of the first data is level one confidentiality, determining a third position as the target position, wherein the third position is ranked before the first position; When the confidentiality level of the parent folder of the first data is level 2 confidentiality and the confidentiality level of the first data is level 1 confidentiality, determining the fourth position as the target position, wherein the fourth position is ranked before the third position; When the confidentiality level of the parent folder of the first data is level 0 confidentiality and the confidentiality level of the first data is level 2 confidentiality, determining the second location as the target location; When the confidentiality level of the parent folder of the first data is level one confidentiality and the confidentiality level of the first data is level two confidentiality, determining the fifth position as the target position, wherein the fifth position is ranked after the second position; When the confidentiality level of the parent folder of the first data is level 2 confidentiality and the confidentiality level of the first data is level 2 confidentiality, the sixth position is determined as the target position, wherein the sixth position is ranked after the fifth position.

10. The method according to claim 1, characterized in that The determining, based on the historical interaction data and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer comprises: Determining, based on the historical interaction data and the confidentiality level corresponding to the first data, a plurality of sets of first answers and target verification questions corresponding to the first answers; Based on the historical output verification questions and the page displayed when the cloud disk is opened this time, the plurality of target verification questions are screened to obtain the screened target verification questions; The display of the target verification problem includes: Displays the target validation questions after the above screening.

11. The method according to claim 1, characterized in that: The determining, based on the historical interaction data and the confidentiality level corresponding to the first data, a first answer and a target verification question corresponding to the first answer comprises: Determining a first answer based on the historical interaction data and a confidentiality level corresponding to the first data; Determining a verification question type based on a confidentiality level corresponding to the first data; Based on the first answer and the verification question type, a target verification question corresponding to the first answer is generated.

12. The method according to claim 11, characterized in that The step of generating a target verification question corresponding to the first answer based on the first answer and the verification question type includes: By inputting the first answer and the verification question type into a large language model, a target verification question corresponding to the first answer and output by the large language model is obtained.

13. The method according to claim 1, characterized in that Before acquiring the historical interaction data between the terminal and the cloud disk when the operation on the first data is received, the method further includes: receiving an encryption operation on first data; In response to the encryption operation, a confidentiality level of the first data is set, wherein the confidentiality level includes primary confidentiality and secondary confidentiality, and the confidentiality level of the secondary confidentiality is greater than the confidentiality level of the primary confidentiality.

14. The method according to claim 1, characterized in that The historical interaction data includes multiple groups of second data, wherein the second data includes historical operation data, a parent folder corresponding to the historical operation data, an operation identifier corresponding to the historical operation data, and an operation time corresponding to the historical operation data.

15. A cloud disk data operation device, characterized in that: include: an acquisition module, configured to acquire historical interaction data between the terminal and the cloud disk when an operation on first data is received, wherein the first data is confidential data recorded in the cloud disk; a determination module, configured to determine a first answer and a target verification question corresponding to the first answer based on the historical interaction data and a confidentiality level corresponding to the first data; A display module, used for displaying the target verification question; A receiving module, used for receiving a second answer input from outside; An operation module is used to allow operation on the first data when the second answer is verified based on the first answer.

16. An electronic device, characterized in that: It includes a processor and a memory, the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the cloud disk data operation method as described in any one of claims 1-14 are implemented.

17. A readable storage medium, characterized in that: The readable storage medium stores a program or instruction, and when the program or instruction is executed by the processor, the steps of the cloud disk data operation method as described in any one of claims 1-14 are implemented.

18. A computer program product, characterized in that The computer program product includes a computer program stored on a non-transitory computer-readable storage medium, and the computer program includes program instructions. When the program instructions are executed by a computer, the computer is caused to execute: the steps of the cloud disk data operation method according to any one of claims 1-14.

Images