Dynamic management method and system for user privacy data protection and network equipment
By acquiring and storing user privacy policies in real time, and combining intelligent models to predict user preferences, and dynamically generating privacy policies, the problem of lack of flexibility and personalization of privacy policies in the existing technology is solved, and more efficient privacy management and lower privacy leakage risks are achieved.
Patent Information
- Application Number
- CN202510041111.5
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2025-01-10
- Publication Date
- 2025-05-30
AI Technical Summary
In the prior art, network programs lack flexibility and personalization of user privacy data collection and use during runtime, resulting in an increased risk of privacy leakage.
By obtaining and storing the privacy policies actively set by users in real time, and combining intelligent models to predict user preferences, dynamically generate corresponding privacy policies, and automatically adjust the privacy rights of the application.
It realizes automatic adjustment of privacy policies based on user privacy preferences, improves the flexibility and accuracy of privacy management, reduces the risk of privacy leakage, and enhances users' trust and satisfaction with the application.
Smart Images
Figure CN120068142A_ABST
Abstract
Description
Technical Field
[0001] The present invention relates to the technical field of privacy data collection and management, and particularly to a dynamic management method, system and network device for protecting user privacy data. Background Art
[0002] With the rapid development of mobile network technology, more and more electronic devices rely on network programs (i.e., APPs) to provide users with rich functions and services. However, these network programs usually need to collect users' privacy data and call privacy permissions on the device during operation, such as accessing the camera, microphone, location data or multimedia files, etc. Although the collection and use of user privacy data can improve service quality, it also brings increasingly prominent privacy protection problems.
[0003] Currently, the privacy protection mechanisms adopted by most network programs are based on static authorization, that is, users authorize the data collection permissions once when the program is installed or first run. This authorization strategy is the same for all users, so it lacks flexibility for individual users' privacy needs.
[0004] With the increasing complexity of network program functions, the requirements for user privacy protection have become more diverse and personalized. Specifically, different users have different sensitivities to privacy data, and their expected privacy protection strategies also vary from person to person. In addition, although users can adjust privacy protection strategies through manual operations, in actual use, many users often ignore the separate adjustment of privacy policies for certain applications. This leads to some applications opening user permissions to the maximum according to the preset, thus triggering the risk of privacy leakage.
[0005] Therefore, how to automatically adjust the privacy policies of application programs according to users' usage preferences has become an urgent problem to be solved in the market. Summary of the Invention
[0006] The purpose of the present invention is to provide a dynamic management method for protecting user privacy data, which can automatically generate corresponding privacy policies according to users' privacy setting preferences to solve the above technical problems.
[0007] To achieve the above purpose, the present invention provides a dynamic management method for protecting user privacy data, which is used to manage the collection of user privacy data of electronic devices working based on mobile networks. The dynamic management method includes: Real-time acquiring and storing a first privacy policy related to user data access and configuration information generated based on a user's request when the electronic device runs any network program; Process the first privacy policy during the historical period collected based on a preset intelligent model to predict the user privacy preference corresponding to the electronic device; When receiving a request for the electronic device to start any of the network programs, query the user privacy preference corresponding to the electronic device, and generate a second privacy policy related to user data access and configuration information based on the user privacy preference; Based on the first privacy policy or the second privacy policy, instruct the network program to collect privacy data on the electronic device and call relevant function modules.
[0008] Preferably, the priority of the first privacy policy is greater than that of the second privacy policy.
[0009] Preferably, the first privacy policy and the second privacy policy include user permission settings, data access scope, and data access conditions.
[0010] Preferably, the privacy data includes one or more of personal identity information, financial information, health information, location record information, communication record information, and online search history information.
[0011] Preferably, the intelligent model is set in the network data analysis function in the core network.
[0012] Preferably, the network data analysis function obtains the first privacy policy by subscribing to events provided by one or more of the access and mobility management function, session management function, policy control function, unified data management function, unified data storage function, network function registration function, application function, and network capability open function.
[0013] The present invention also provides a network device for managing the collection of user privacy data of an electronic device operating based on a mobile network. The network device includes a network controller that operates based on the dynamic management method described above.
[0014] The present invention also provides a dynamic management system, which includes: One or more processors; A memory; And one or more programs, where one or more programs are stored in the memory and are configured to be executed by the one or more processors. The programs include instructions for executing the dynamic management method described above.
[0015] The present invention also provides a computer-readable storage medium, which includes a computer program that can be executed by a processor to complete the dynamic management method described above.
[0016] The present invention also provides a computer program product, including a computer program which, when executed by a processor, implements the dynamic management method described above.
[0017] Compared with the prior art, the dynamic management method for user privacy data protection provided by the above technical solution of the present invention can obtain and store in real time the privacy policies actively set by users, predict user preferences in combination with an intelligent model, and generate automatically configured privacy policies based on the prediction. It can be seen that this solution can automatically adjust privacy policies according to users' privacy preferences. This effectively solves the problem that traditional static authorization cannot meet users' personalized needs, improves the flexibility and accuracy of privacy management; in addition, the automatic adjustment of privacy policies reduces the burden on users for manual setting, reduces the risk of privacy leakage caused by users' negligence, and enhances users' trust and satisfaction with application programs. Description of the Drawings
[0018] Figure 1 It is a flowchart of the dynamic management method in an embodiment of the present invention. Detailed Embodiments
[0019] To describe in detail the technical content, structural features, achieved objectives and effects of the present invention, the following is described in detail in combination with the embodiments and accompanied by the drawings.
[0020] This embodiment discloses a dynamic management method for user privacy data protection, which is used to manage the collection of user privacy data of an electronic device (such as a mobile phone) working based on a mobile network, that is, to manage which information can be collected by application programs on the electronic device and which function modules can be called.
[0021] As shown in the figure, the dynamic management method includes the following steps: S10: Obtain and store in real time the first privacy policy related to user data access and configuration information generated based on the user's request when the electronic device runs any network program.
[0022] S11: Process the first privacy policy collected during the historical period based on a preset intelligent model to predict the user privacy preference corresponding to the electronic device.
[0023] S12: When receiving a request for the electronic device to start any of the network programs, query the user privacy preference corresponding to the electronic device, and generate a second privacy policy related to user data access and configuration information based on the user privacy preference.
[0024] S13: Based on the first privacy policy or the second privacy policy, instruct the network program to collect privacy data on the electronic device and call relevant function modules.
[0025] On the other hand, when a network program requests permission to obtain collected data and call relevant functional modules, the network first refers to the first privacy policy. If there is no first privacy policy, the network program is automatically configured based on the second privacy policy to protect user privacy. This is because the first privacy policy represents more direct or more recent user authorizations or preference settings, representing the direct will of the user.
[0026] On the other hand, the content items of the first privacy policy and the second privacy policy are the same, both including user permission settings, data access scope, and data access conditions.
[0027] Specifically, the user permission settings include: Location information access permission: For example, whether an application can access the user's real-time location information, or can only access the location information when the user last used the application; Voice information access permission: For example, whether an application can record the user's voice information, or can only access specific voice information authorized by the user; Camera access permission: For example, whether an application can access the user's camera function, or can only access specific camera functions authorized by the user; Storage access permission: For example, whether an application can access the user's storage space, or can only access specific storage spaces authorized by the user.
[0028] The data access scope includes: Data type: For example, what types of data an application can access, such as user basic information, contact list, call records, etc.; Data time period: For example, how long a period of data an application can access, such as data in the most recent week, month, or year; Data purpose: For example, what is the purpose for an application to access data, such as for personalized recommendation, improving user experience, etc.
[0029] The data access conditions include: Application status: For example, an application can only access user data when it is running in the foreground, or can only access user data when the user actively authorizes; Network status: For example, an application can only access user data when connected to a specific network; User behavior: For example, an application can only access user data when the user performs a specific operation.
[0030] On the other hand, the privacy data includes one or more of personal identity information, financial information, health information, location record information, communication record information, and online search history information.
[0031] Furthermore, the intelligent model is set in the Network Data Analytics Function (NWDAF) in the core network.
[0032] In this regard, NWDAF obtains the first privacy policy by subscribing to events provided by one or more of the Access and Mobility Management Function (AMF), Session Management Function (SMF), Policy Control Function (PCF), Unified Data Management Function (UDM), Unified Data Repository (UDR), Network Function Repository Function (NRF), Application Function (AF), and Network Exposure Function (NEF).
[0033] In summary, the present invention discloses a dynamic management method for protecting user privacy data. The working process of this method will be further illustrated by a specific example below.
[0034] 1. Device A is an electronic device that operates based on a mobile network. When the user of Device A starts a shopping network program and manually configures a privacy policy, then, according to the user's request, NWDAF generates and stores the first privacy policy. For example, the user sets in the program that location information is not allowed to be accessed, and this setting is stored in the database as the first privacy policy. Thus, whenever the user of Device A starts any other network program and manually configures the privacy policy, the first privacy policy will be generated.
[0035] 2. Based on a preset intelligent model, multiple first privacy policies of Device A in a historical period are processed. For example, the intelligent model analyzes and discovers that the user has repeatedly refused program access to location information in the past month, predicting that the user's privacy preference for location information is relatively sensitive.
[0036] 3. When Device A starts a social network program, NWDAF queries the user's privacy preference corresponding to Device A (sensitive to location information) and generates a second privacy policy based on this preference. For example, the second privacy policy is: restrict the program from accessing location information and remind the user when accessing other non-sensitive data. At this time, assuming that the user has not manually configured the current privacy policy of Device A, then NWDAF configures Device A with the second privacy policy.
[0037] 4. The network program collects privacy data and invokes relevant functional modules according to the instructions of the first privacy policy or the second privacy policy. In this example, when the network program attempts to access location information, it will be blocked by the system; when accessing other non-sensitive data, the system will remind the user.
[0038] The dynamic management method for user privacy data protection provided in the above embodiments of the present invention can obtain and store the privacy policies actively set by users in real time, predict user preferences in combination with an intelligent model, and generate automatically configured privacy policies based on the prediction. It can be seen that this method can automatically adjust privacy policies according to users' privacy preferences. This effectively solves the problem that traditional static authorization cannot meet users' personalized needs, improves the flexibility and accuracy of privacy management; in addition, the automatic adjustment of privacy policies reduces the burden of manual setting by users, reduces the risk of privacy leakage caused by users' negligence, and enhances users' trust and satisfaction with the application. Moreover, reasonable permission management reduces unnecessary data access and permission calls, optimizes the resource utilization efficiency of the application, and improves the overall performance.
[0039] In another preferred embodiment of the present invention, a network device is also disclosed for managing the collection of user privacy data of an electronic device operating based on a mobile network. The network device includes a network controller that operates based on the dynamic management method in the above embodiments.
[0040] The present invention also discloses a dynamic management system, which includes one or more processors, a memory, and one or more programs. One or more programs are stored in the memory and are configured to be executed by the one or more processors. The programs include instructions for executing the dynamic management method as described above. The processor can be a general-purpose central processing unit (CPU), a microprocessor, an application-specific integrated circuit (ASIC), or one or more integrated circuits, which are used to execute relevant programs to implement the functions required by the modules in the dynamic management system of the embodiments of the present application, or to execute the dynamic management method of the method embodiments of the present application.
[0041] The present invention also discloses a computer-readable storage medium, which includes a computer program that can be executed by a processor to complete the dynamic management method as described above. The computer-readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server or a data center that includes one or more integrated available media. The available medium can be a read-only memory (ROM), a random access memory (RAM), a magnetic medium, such as a floppy disk, a hard disk, a magnetic tape, a magnetic disk, or an optical medium, such as a digital versatile disc (DVD), or a semiconductor medium, such as a solid-state disk (SSD), etc.
[0042] The embodiment of the present application also discloses a computer program product or a computer program. The computer program product or the computer program includes computer instructions, and the computer instructions are stored in a computer-readable storage medium. A processor of the electronic device reads the computer instructions from the computer-readable storage medium, and the processor executes the computer instructions, so that the electronic device executes the above-mentioned dynamic management method.
[0043] The above-disclosed are only the preferred embodiments of the present invention. Of course, the scope of rights of the present invention cannot be limited thereby. Therefore, equivalent changes made according to the scope of the patent application of the present invention still fall within the scope covered by the present invention.
Claims
1. A dynamic management method for protecting user privacy data, used to manage the collection of user privacy data of electronic devices working based on mobile networks, characterized in that: The dynamic management method comprises: Acquire and store in real time a first privacy policy related to user data access and configuration information generated based on a user's request when the electronic device runs any network program; Processing the first privacy policy collected in the historical period based on a preset intelligent model to predict the user privacy preference corresponding to the electronic device; When receiving a request from the electronic device to start any of the network programs, querying a user privacy preference corresponding to the electronic device, and generating a second privacy policy related to user data access and configuration information based on the user privacy preference; The network program is instructed to collect privacy data on the electronic device and call related function modules based on the first privacy policy or the second privacy policy.
2. The dynamic management method for protecting user privacy data according to claim 1, characterized in that: The priority of the first privacy policy is higher than that of the second privacy policy.
3. The dynamic management method for protecting user privacy data according to claim 1, characterized in that: The first privacy policy and the second privacy policy include user authority settings, data access scopes, and data access conditions.
4. The dynamic management method for protecting user privacy data according to claim 1, characterized in that: The private data includes one or more of personal identity information, financial information, health information, location record information, communication record information, and online search history information.
5. The dynamic management method for protecting user privacy data according to claim 1, characterized in that: The intelligent model is arranged in the network data analysis function in the core network.
6. The dynamic management method for protecting user privacy data according to claim 5, characterized in that: The network data analysis function obtains the first privacy policy by subscribing to events provided by one or more of the access and mobility management function, session management function, policy control function, unified data management function, unified data storage function, network function registration function, application function, and network capability exposure function.
7. A network device for managing the collection of user privacy data of electronic devices working based on a mobile network, characterized in that: The network device comprises a network controller, and the network controller operates based on the dynamic management method according to any one of claims 1 to 6.
8. A dynamic management system, characterized in that: include: one or more processors; Memory; and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the programs comprising instructions for executing the dynamic management method according to any one of claims 1 to 6.
9. A computer-readable storage medium, characterized in that: The invention comprises a computer program, wherein the computer program can be executed by a processor to implement the dynamic management method according to any one of claims 1 to 6.
10. A computer program product, characterized in that The invention comprises a computer program, which implements the dynamic management method according to any one of claims 1 to 6 when executed by a processor.