Electronic photo album access control method and device and electronic equipment

Abstract

The invention discloses an electronic photo album access control method and device and electronic equipment, and belongs to the technical field of image processing. The method comprises the following steps: receiving a first input for an application program, wherein the first input is used for indicating to grant a permission to access all images in an electronic photo album to the application program; responding to the first input, opening an open access permission of the application program to access all non-encrypted albums except the encrypted albums in the electronic albums, and opening a controlled access permission of the application program to access the encrypted albums in the electronic albums; wherein under the condition that the use scene of the application program is the personal information verification scene, the application program is allowed to access the image matched with the personal information verification scene in the encrypted photo album, and under the condition that the use scene of the application program is not the personal information verification scene, the application program is forbidden to access all the images in the encrypted photo album.

Description

Technical Field

[0001] This application belongs to the technical field of image processing, and particularly relates to an electronic album access control method, apparatus, and electronic device. Background Art

[0002] Nowadays, during the use of devices such as mobile phones and computers, in more and more scenarios, applications need to use the images stored in the electronic album. In this case, the application will request the user for access permissions to the images in the electronic album.

[0003] However, since there may be some privacy images including user privacy information in the electronic album, if the user directly grants the application open access permissions to all the images in the electronic album, the application is very likely to upload the privacy images in the electronic album to its server for analysis, resulting in the leakage of user privacy. Summary of the Invention

[0004] The purpose of the embodiments of this application is to provide an electronic album access control method, apparatus, and electronic device, which can prevent applications from randomly accessing privacy images in the album to collect user privacy data, avoid the leakage of privacy data, and thus protect user privacy.

[0005] In a first aspect, the embodiments of this application provide an electronic album access control method, which includes:

[0006] When the application has access permissions to the electronic album in the electronic device and the personal information verification interface is displayed in the application, receive a first input;

[0007] In response to the first input, obtain privacy images corresponding to the content in the personal information verification interface from the electronic album;

[0008] In response to the confirmation input to the personal information verification interface, display the privacy images;

[0009] When a third input to the privacy images is received, in response to the third input, transmit the privacy images to the application so that the application can verify personal information through the privacy images.

[0010] In a second aspect, the embodiments of this application provide an electronic album access control apparatus, which includes:

[0011] A receiving module, configured to receive a first input when the application has access permissions to the electronic album in the electronic device and the personal information verification interface is displayed in the application;

[0012] An acquisition module, configured to obtain, in response to the first input, a privacy image corresponding to the content in the personal information verification interface from the electronic album;

[0013] A display module, configured to display the privacy image in response to a confirmation input to the personal information verification interface;

[0014] A transmission module, configured to, in the case of receiving a third input to the privacy image, in response to the third input, transmit the privacy image to the application program, so that the application program implements verification of personal information through the privacy image.

[0015] In a third aspect, an embodiment of the present application provides an electronic device, which includes a processor and a memory. The memory stores a program or instruction that can run on the processor. When the program or instruction is executed by the processor, the steps of the method provided in the first aspect are implemented.

[0016] In a fourth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the steps of the method provided in the first aspect are implemented.

[0017] In a fifth aspect, an embodiment of the present application provides a chip, which includes a processor and a communication interface. The communication interface is coupled to the processor, and the processor is configured to run a program or instruction to implement the method provided in the first aspect.

[0018] In a sixth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the method provided in the first aspect.

[0019] In the embodiment of the present application, in the case where the user indicates, through the first input, to grant the application program the permission to access all images in the electronic album, the application program is allowed to freely access all images in the unencrypted album. For the encrypted album, the application can only access the privacy images matching the personal information verification scenario in the specific personal information verification scenario of the application program. In the non-personal information verification scenario, the application program is prohibited from accessing all images in the encrypted album. That is to say, even if the first input indicates to grant the application program the access permission to access all images in the electronic album, it is impossible to randomly read the privacy pictures in the encrypted album, but only the privacy images matching the scenario are allowed to be accessed in a specific scenario. In this way, it is possible to prevent the application program from randomly accessing the privacy images in the album to collect the user's privacy data, avoid the leakage of privacy data, and thus protect the user's privacy. Description of the Drawings

[0020] Figure 1It is a schematic flowchart of an electronic album access control method provided by some embodiments of the present application;

[0021] Figure 2 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0022] Figure 3 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0023] Figure 4 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0024] Figure 5 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0025] Figure 6 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0026] Figure 7 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0027] Figure 8 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0028] Figure 9 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0029] Figure 10 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0030] Figure 11 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0031] Figure 12 It is a schematic diagram of a display interface of an electronic device provided by some embodiments of the present application;

[0032] Figure 13 It is a schematic structural diagram of an electronic album access control device provided by some embodiments of the present application;

[0033] Figure 14 It is a schematic structural diagram of an electronic device provided by some embodiments of the present application;

[0034] Figure 15 It is a schematic hardware structural diagram of an electronic device provided by some embodiments of the present application. Detailed implementation manners

[0035] Next, the technical solutions in the embodiments of the present application will be clearly described in conjunction with the accompanying drawings in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art belong to the scope of protection of the present application.

[0036] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, rather than to describe a specific order or sequence. It should be understood that such terms can be interchanged under appropriate circumstances so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first", "second", etc. are usually of the same category, and do not limit the number of objects. For example, the first object can be one or multiple. In addition, "and / or" in the specification and claims means at least one of the connected objects, and the character " / " generally indicates an "or" relationship between the associated objects before and after.

[0037] Electronic album: A picture management system in an electronic device where users can store, view, classify, and manage pictures, including encrypted albums and non-encrypted albums.

[0038] Encrypted album: An electronic album that has been encrypted, where the stored images are restricted by access permissions. By default, the application cannot access them, and only controlled access is allowed under specific conditions.

[0039] Non-encrypted album: An ordinary electronic album that has not been encrypted. After the application obtains the album access permission, it can directly access all the images in it without additional access restrictions.

[0040] Open access permission: After the application obtains authorization, it can freely access all the images in the electronic album without additional authentication or scenario matching restrictions.

[0041] Controlled access permission: The application can only have limited access to the private images in the electronic album when the conditions match the personal information verification scenario of the application, and cannot read or browse them casually.

[0042] Interface: The operation window or page presented to the user by the application or the system of the electronic device, usually including interactive elements such as text, images, buttons, input boxes, etc. for the user to perform specific operations.

[0043] Application: A software program running on an electronic device, with specific functions such as social networking, album management, payment, etc., and may request access to device resources.

[0044] Control: An interactive element in the user interface, such as buttons, sliders, text boxes, dropdown menus, etc. Users can interact with the application through controls to perform operations such as clicking, inputting, and selecting.

[0045] System: The system of an electronic device refers to the core software architecture that manages the hardware resources of the electronic device and provides a running environment, including the operating system, drivers, system services, security mechanisms, and user interface. The system is used to ensure the stable operation of the electronic device and support the execution of applications therein.

[0046] The following will, in conjunction with the accompanying drawings, through specific embodiments and their application scenarios, elaborate in detail on the electronic album access control method provided by the embodiments of the present application.

[0047] It should be noted that for the electronic album access control method provided by the embodiments of the present application, the execution subject can be an electronic device such as a mobile phone, a tablet computer, a laptop computer, a handheld computer, a vehicle-mounted electronic device, etc. In some embodiments of the present application, taking the electronic device as the execution subject to execute the electronic album access control method as an example, the electronic album access control method provided by the embodiments of the present application will be described.

[0048] The electronic album access control method provided by the embodiments of the present application can be applied to scenarios of personal information verification. Among them, a specific application scenario is the scenario of ID card authentication, and another specific application scenario is the scenario of driver's license application. Specifically, the scenario of driver's license detection can be a scenario where the user has passed the driving test and needs to submit ID card information to apply for a formal driver's license.

[0049] As Figure 1 shown, Figure 1 is a flowchart of the electronic album access control method provided by an embodiment of the present application. The embodiments of the present application provide an electronic album access control method, and the method may include:

[0050] Step 101, receive a first input for the application, where the first input is used to indicate granting the application permission to access all images in the electronic album;

[0051] In some embodiments of the present application, the application can request the user to obtain the access permission to the images in the electronic album. The images can include pictures and videos. The user can perform a first input on the application, where the first input is used to indicate granting the application permission to access all images in the electronic album. Exemplarily, the application can be a social application, a video application, or an image editing application.

[0052] Among them, the first input may be a touch input by the user on the application in the electronic device using a finger or a touch device such as a stylus. For example, the touch input may be a touch click operation, a swipe operation, or other operations. The first input may also be an input operation performed by the user using other input devices such as a mouse, a remote control device, or a keyboard connected to the electronic device.

[0053] In some embodiments of the present application, the above-mentioned first input is used to instruct the system to grant the application permission to access all images in the electronic album. The first input may be a first operation. Exemplarily, the above-mentioned first input includes, but is not limited to: a long press input by the user on the power button of the electronic device using a finger or a stylus, or a voice command input by the user, or a specific gesture input by the user, or other feasible inputs, which can be specifically determined according to actual usage requirements, and the embodiments of the present invention do not make any limitations. The specific gesture in the embodiments of the present application may be any one of a click gesture, a swipe gesture, a drag gesture, a pressure recognition gesture, a long press gesture, an area change gesture, a double press gesture, and a double click gesture; the click input in the embodiments of the present application may be a single click input, a double click input, or a click input of any number of times, etc., and may also be a long press input or a short press input. For example, the above-mentioned first input may be: a double click input by the user on the application.

[0054] Step 102, in response to the first input, enable the application to have open access rights to all non-encrypted albums in the electronic album except for the encrypted album, and enable the application to have controlled access rights to the encrypted album in the electronic album;

[0055] Among them, in the case where the usage scenario of the application is a personal information verification scenario, allow the application to access the images in the encrypted album that match the personal information verification scenario, and in the case where the usage scenario of the application is a non-personal information verification scenario, prohibit the application from accessing all images in the encrypted album.

[0056] In some embodiments of the present application, since the first input is used to indicate granting the application permission to access all images in the electronic album, after the user makes the first input to the electronic device, the system of the electronic device will receive the first input, and the system can understand that the intention of the user's first input is to grant the application the permission to access all images in the electronic album at any time. Exemplarily, upon receiving the first input from the user, the system will, in response to the first input, add a global access permission mark for the electronic album to the application. Then the permission status of the application for the electronic album is the global access status, and then the system can store this permission status in the permission control list corresponding to the application. In this way, the system can understand that the intention of the first input is to grant the application the permission to access all images in the electronic album at any time.

[0057] However, in order to protect the privacy data in the electronic album, after receiving the first input from the user, the system of the electronic device will not enable the application to access all images in the electronic album at any time. Instead, in response to the first input, the system will manage the access permissions for the encrypted album and the non-encrypted album in the electronic album separately.

[0058] Specifically, the system of the electronic device can divide the permission for the application to access the electronic album into open access permission and controlled access permission. The system can set up a hierarchical access control mechanism, dividing the electronic album into a non-encrypted album and an encrypted album. The images in the encrypted album all contain user privacy information, and the images in the non-encrypted album are all ordinary images. The system can enable the open access permission for the application to access all non-encrypted albums in the electronic album except the encrypted album. Under the open access permission, the system allows the application to access all images in the non-encrypted album at any time. At the same time, the system can enable the controlled access permission for the application to access the encrypted album. Under the controlled access permission, the system will control the user's access permission to the images in the encrypted album based on the usage scenario of the application. Only when the application is in a specific scenario can the application access the privacy images in the encrypted album that match the specific scenario.

[0059] After the system enables the open access permission for the application to access the non-encrypted album, the application can access and use all images in all non-encrypted albums in the electronic album at any time, such as ordinary landscape photos, life photos, screenshots, etc.

[0060] After the system enables the application to access the controlled access right of the encrypted album in the electronic album, the images in the encrypted album are default inaccessible in the non-personal information verification scenario, but the images in the encrypted album can be accessed under controlled conditions. Specifically, the controlled access means that the application cannot randomly use or batch read all the images in the encrypted album. Instead, only when the usage scenario of the application is the personal information verification scenario, the application can access the images in the encrypted album that match the personal information verification scenario.

[0061] For example, the application can be a social application. If the usage scenario of the social application is the real-name authentication scenario, the system can allow the application to access the ID card photos in the encrypted album that match the real-name authentication scenario; the application can also be a government service application. If the usage scenario of the government service application is the driver's license detection scenario, the system can allow the application to access the driver's license photos in the encrypted album that match the driver's license detection scenario.

[0062] Moreover, if in the non-personal information verification scenario, the application wants to access the images in the encrypted album, it needs to perform identity recognition. Only after the user's identity recognition is passed can the application access the images in the encrypted album. The identity recognition can include fingerprint detection and face recognition.

[0063] In some embodiments of the present application, when the user grants the application the permission to access all the images in the electronic album through the first input, the application is allowed to freely access all the images in the non-encrypted album. For the encrypted album, only when the usage scenario of the application is a specific personal information verification scenario, the application can access the privacy images that match the personal information verification scenario. In the non-personal information verification scenario, the application is prohibited from accessing all the images in the encrypted album. That is to say, even if the first input indicates that the application is granted the access permission to all the images in the electronic album, it cannot randomly read the privacy pictures in the encrypted album. Instead, only in a specific scenario is it allowed to access the privacy images that match the scenario. In this way, it can be avoided that the application randomly accesses the privacy images in the album to collect the user's privacy data and prevent the leakage of privacy data, thereby protecting the user's privacy.

[0064] In some embodiments, after enabling the application to access the open access right of all non-encrypted albums in the electronic album except the encrypted album and enabling the application to access the controlled access right of the encrypted album in the electronic album, the method further includes:

[0065] Determine the usage scenario of the application according to the interface content of the program interface of the application;

[0066] In the case where the usage scenario is a personal information verification scenario and at least one private image matching the personal information verification scenario is found in the encrypted album, display the at least one private image, where the private image includes user privacy information;

[0067] Upon receiving a selection input for the image upload control, upload the at least one private image to the server of the application.

[0068] In some embodiments of the present application, after the system of the electronic device enables the open access permission for the application to access all non-encrypted albums in the electronic album except the encrypted album, and enables the controlled access permission for the application to access the encrypted album in the electronic album. The application cannot randomly read all the images in the entire electronic album, but can only randomly read the images in the non-encrypted albums of the electronic album. For the images in the encrypted album of the electronic album, the application still needs to perform controlled access according to the usage scenario of the application.

[0069] Specifically, after enabling the controlled access permission for the application to access the encrypted album in the electronic album, if the usage scenario of the application is a personal information verification scenario, then the application has the permission to access the private images matching the personal information verification scenario, but does not have the permission to access the private images other than the private images matching the usage scenario of the application in the encrypted album.

[0070] The images in the encrypted album are all images containing user privacy information. The private image understanding function can understand the content of each private image in the encrypted album, and the screen understanding function can capture the program interface of the application, and then identify the interface content of the current program interface to determine what usage scenario the current application is in.

[0071] Among them, the private image understanding function can be that the electronic device extracts text information from the images in the electronic album through optical character recognition technology, and then analyzes whether the extracted text information contains privacy information through semantic understanding technology and determines the privacy category of the privacy information. The screen understanding function can be that the electronic device extracts text information from the display interface of the electronic device screen through optical character recognition technology, and identifies the interactive controls in the display interface, and then uses a large language model to analyze the text information and the interactive controls to infer the usage scenario corresponding to the current display interface of the electronic device.

[0072] Therefore, if the application is running in the foreground of the electronic device, then the electronic device can determine the usage scenario of the current application through the screen understanding function according to the interface content of the program interface.

[0073] Specifically, when the application is running in the foreground of the electronic device, the display interface of the screen of the electronic device shows the program interface of the application. At this time, the electronic device can recognize the interface content in the program interface. The interface content may include the text information and interactive controls displayed in the program interface, and the large language model is used to analyze the interface content to infer the usage scenario of the application.

[0074] If the usage scenario of the application is a personal information verification scenario, the system can find at least one privacy image that matches the current personal information verification scenario from the encrypted album through the privacy image understanding function and display the at least one privacy image.

[0075] Among them, the personal information verification scenario refers to the scenario where the user needs to submit personal identity information for authentication. Real-name authentication, account security verification, payment authorization, etc. can be carried out in the personal information verification scenario. Therefore, when the usage scenario of the application is a personal information verification scenario, it means that personal information authentication is required in the application. And there may be at least one privacy image stored in the encrypted album that matches the current personal information verification scenario. Therefore, when the usage scenario is a personal information verification scenario and at least one privacy image that matches the personal information verification scenario is found from the encrypted album, the at least one privacy image can be displayed. The user is asked to confirm whether to upload the at least one matched privacy image to the server of the application.

[0076] Exemplarily, when the electronic device enables the controlled access permission for the application to access the encrypted album in the electronic album, and both the privacy image understanding function and the screen understanding function are enabled, if the application is running in the foreground, the user can perform screen understanding input on the electronic device. Then, in response to the screen understanding input, the system can recognize the interface content of the program interface of the application and determine the usage scenario of the application. For example, the above screen understanding input can be a long press input on the power button of the electronic device.

[0077] After the electronic device receives the screen understanding input, in response to the screen understanding input, it can judge what usage scenario the application is currently in by recognizing the content such as pictures, texts, and controls in the displayed personal information verification interface. Then, if the usage scenario is a personal information verification scenario, at least one privacy image that matches the personal information verification scenario can be searched for in the encrypted album.

[0078] Exemplarily, such as Figure 2As shown, the application is a social application app2, and the program interface of the application is the identity information verification interface 201. When the identity information verification interface is displayed in app2, since the document type selected by the user in the identity information verification interface is an ID card, the current usage scenario of the application is the personal information verification scenario, and the document to be verified is an ID card. Then, in the current personal information verification scenario, the user needs to upload the front photo and the back photo of the ID card to the server of app2 for identity information verification.

[0079] At this time, the screen understanding input is used to identify the pictures, texts, controls, etc. on the current display interface of the electronic device, so as to judge what scenario the electronic device is currently in, and obtain the image matching the scenario from the encrypted album. As Figure 2 shown, the screen understanding input can be a long press input on the power button 202 of the electronic device. Then, in response to this screen understanding input, the currently displayed program interface can be captured, and the controls, texts, text boxes, etc. displayed in the program interface can be identified. Through the above content, it can be judged what operations need to be performed on the currently displayed program interface and the usage scenario of the current program interface.

[0080] As Figure 2 shown, it can be judged that the usage scenario of the current application is the personal information verification scenario through the texts "Upload the front photo of the ID card" and "Upload the back photo of the ID card" identified in the currently displayed program interface. And in this personal information verification scenario, it is necessary to upload the front photo and the back photo of the ID card to the server of the application for identity information verification. After identifying the personal information verification requirements in the current personal information verification scenario, the user can search for the front photo and the back photo of the ID card that match the personal information verification requirements of the current scenario in the electronic album.

[0081] After finding at least one privacy image matching the personal information verification scenario from the encrypted album, the at least one privacy image can be displayed, and the user can confirm whether the at least one privacy image meets the requirements of the application based on the displayed privacy image.

[0082] If the user believes that the displayed privacy image meets the requirements of the application, the user can make a selection input on the image upload control associated with the displayed privacy image. The image upload control is used to indicate uploading the displayed privacy image to the server of the application. Therefore, the selection input on the image upload control is used to indicate uploading the at least one displayed privacy image to the server of the application, where the selection input can be a long press input or a click input by the user on the image upload control associated with the displayed privacy image through a finger or a touch device such as a stylus.

[0083] After the system receives the selection input for the image upload control, in response to the selection input, the private image can be transmitted to the server of the application. After the server of the application obtains the private image, the authenticity of the private image can be verified. After the private image passes the verification, the application can extract the personal information in the private image and verify whether the personal information is consistent with the personal information in the information database in the server. If they are consistent, then the personal information verification is completed.

[0084] As Figure 3 In the illustrated embodiment, the application is a social application app2, the program interface of the application is an identity information verification interface, and the usage scenario of the application is a personal information verification scenario. Therefore, at least one displayed private image is a front photo of the ID card and a back photo of the ID card.

[0085] After obtaining at least one private image that matches the personal information verification scenario, that is, the front photo of the ID card and the back photo of the ID card, a second dialog box 301 as shown in Figure 3 is displayed. The second dialog box includes the searched private images, that is, the first photo 302 and the second photo 303. Among them, the first photo is the matched front photo of the ID card, and the second photo is the matched back photo of the ID card. The second dialog box also includes an image upload control 304 and an image re-selection control 305. Among them, the image upload control is used to indicate uploading the displayed private image to the server of the application, and the image re-selection control is used to indicate re-selecting the private image to be uploaded to the server from the encrypted album. Then, if the user confirms at least one displayed private image, the user can make a selection input for the image upload control. The selection input can be a click input for the image upload control. In response to the selection input, the system can upload the private image to the server of the application and, as shown in Figure 4 display the matched private image in the program interface 201 of the application, that is, upload the first photo 302 as the front photo of the ID card and upload the second photo 303 as the back photo of the ID card.

[0086] In this application, if the application has controlled access rights to the encrypted album, then when personal information verification is required in the application, privacy images that meet the scenario requirements can be automatically obtained from the encrypted album based on the content in the program interface, and the privacy images can be displayed. After the user confirms the privacy images, the privacy images are transmitted to the server of the application to complete the personal information verification in the application. Since in the above solution, even if the application has access rights to the electronic album, the application can only access the privacy images that match the scenario in the encrypted album in the scenario where personal information verification is required, rather than all the privacy images in the entire encrypted album. Therefore, the above method can prevent the application from abusing the encrypted album permissions and prevent the application from randomly using the privacy images in the encrypted album, thereby protecting the user's privacy.

[0087] In some embodiments, before displaying the at least one privacy image, the method further includes:

[0088] Displaying a prompt message for prompting that at least one privacy image matching the personal information verification scenario is found from the encrypted album and asking the user whether to upload the found privacy image;

[0089] The displaying of the at least one privacy image includes:

[0090] Displaying the at least one privacy image in response to receiving an input for confirming the upload of the at least one privacy image.

[0091] In an embodiment of the present application, if the usage scenario of the application is a personal information verification scenario and after at least one privacy image matching the personal information verification scenario is found from the encrypted album, the system can display a prompt message for prompting the user that at least one privacy image matching the personal information verification scenario has been found from the encrypted album and asking the user whether to upload the found privacy image.

[0092] Specifically, the user can perform a confirmation input on the prompt message, and the confirmation input is used to indicate the display of the privacy images matched from the encrypted album. After the system receives the confirmation input, in response to the confirmation input, the privacy images obtained from the electronic album can be displayed. For example, the confirmation input can be a long-press input of the user on the prompt message with a finger or a touch device such as a stylus, the confirmation input can also be a voice command input by the user for indicating the display of the matched privacy images, or a specific gesture input by the user for indicating the display of the matched privacy images, or other feasible inputs.

[0093] Such as Figure 2In the illustrated embodiment, the application is a social application app2. The program interface of the application is an identity information verification interface, and the usage scenario of the application is a personal information verification scenario. When the identity information verification interface is displayed in app2, since the document type selected by the user in the identity information verification interface is an ID card, the system can find a front ID card photo and a back ID card photo in the encrypted album.

[0094] Subsequently, the system can display a first dialog box 501 as shown in Figure 5 The first dialog box includes a prompt message, a first control 502, and a second control 503. Among them, the prompt message is "It is recognized that this scenario requires uploading your ID card photo. Your ID card photo has been extracted from the encrypted album. Do you want to upload it?" The first control is used to indicate the display of at least one matching privacy image, and the second control is used to indicate the non-display of at least one matching privacy image.

[0095] After the user makes an input to the first control in the first dialog box as shown in Figure 4 the system will receive and respond to this input, and display at least one privacy image. Specifically, it can display a second dialog box 301 as shown in Figure 3 The second dialog box includes the searched privacy images. That is, the first photo 302 is the searched front ID card photo, and the second photo 303 is the searched back ID card photo. The second dialog box also includes an image upload control 304 and an image re-selection control 305. Among them, the image upload control is used to indicate uploading the displayed privacy image to the server of the application, and the image re-selection control is used to indicate re-selecting the image to be uploaded to the server of the application from the encrypted album.

[0096] In the embodiment of the present application, after finding at least one privacy image matching the personal information verification scenario in the encrypted album, the system can automatically ask the user whether to upload the found privacy image, and display the at least one privacy image and upload it after the user confirms the upload, reducing the operation of the user manually searching for photos and improving the efficiency of the application to obtain the required privacy images from the electronic album.

[0097] In some embodiments of the present application, after displaying the at least one privacy image, the method further includes:

[0098] When receiving a selection input for the image re-selection control, display a user identity authentication interface;

[0099] Obtain the user's to-be-verified user feature information through the user identity authentication interface;

[0100] When the to-be-verified user feature information matches the pre-stored user identity credential information, display the album interface of the encrypted album, where the album interface includes at least one private image;

[0101] Receive a selection input for a private image in the album interface of the encrypted album;

[0102] In response to the selection input, upload the private image selected by the selection input to the server of the application.

[0103] In some embodiments of the present application, after the system obtains at least one private image that matches the current personal information verification scenario from the encrypted album and the at least one private image is displayed on the electronic device, the user can observe the displayed at least one private image and determine whether the displayed private image meets the requirements of the application.

[0104] If the user believes that the displayed private image does not meet the requirements of the application, the user can make a selection input for the image re-selection control associated with the displayed private image. The image re-selection control is used to indicate ignoring the at least one private image that has been matched, and the user re-selects a private image containing the user's private information from the encrypted album and uploads it to the server of the application. Then, after the system receives the selection input for the image re-selection control, it can respond to the selection input, open the encrypted album, and display at least one private image in the album interface of the encrypted album, and the user selects a private image that meets their requirements from the at least one private image in the album interface.

[0105] Specifically, if the user believes that the private image matched by the system does not meet the requirements of the application, the user can select a private image from the at least one private image displayed in the album interface and upload the selected private image to the application.

[0106] However, since the encrypted image has been encrypted and the system only enables controlled access to the encrypted album, only when the user passes the identity authentication can the encrypted album be decrypted, the album interface of the encrypted album be displayed, allowing the user to select a suitable private image from the at least one private image in the album interface and upload the private image to the server of the application.

[0107] Therefore, after the system receives the selection input for the image re-selection control, in response to the selection input, it can first switch to the user identity authentication interface. Under the guidance of this user identity authentication interface, the user can upload the user feature information to be verified. Among them, identity authentication can include fingerprint authentication and face authentication. If the identity authentication is fingerprint authentication, the user feature information to be verified is the fingerprint feature of the user; if the identity authentication is face authentication, the user feature information to be verified is the face image of the user.

[0108] After obtaining the user feature information to be verified of the user, the user feature information to be verified of the user can be matched with the user identity credential information in the locally stored feature database. If there is user identity credential information in the feature database that matches the user identity credential information, it can be considered that the user identity authentication is successful. Then, the encrypted album can be opened, and at least one private image can be displayed in the encrypted album. Among them, the user identity credential information refers to the user biometric data stored in the feature database, such as the fingerprint feature point data extracted when the user registers the fingerprint, or the feature data of the user's face extracted when the user registers the face, which is used for matching during identity authentication to verify the user identity credential information. In this way, only users who pass the user identity authentication can view the private images in the encrypted album. Unauthorized access can be prevented, and the security of private information can be improved.

[0109] Subsequently, after at least one private image in the encrypted album is displayed on the electronic device, the user can select one private image that meets the requirements of the application from at least one private image, that is, make a selection input for one private image in the album interface of the encrypted album. This selection input is used to indicate that the selected private image is to be uploaded to the server of the application. Then, the electronic device can, in response to the selection input, obtain the private image from the encrypted album and upload the private image to the server of the application to complete the personal information verification in the application. For example, the selection input can be a click input or a long-press input on the selected private image.

[0110] As Figure 3 shown in the embodiment, the application is a social application app2, the program interface of the application is the identity information verification interface, and the usage scenario of the application is the personal information verification scenario.

[0111] As Figure 3As shown, in response to the confirmation input, a second dialog box is displayed. The second dialog box includes two privacy images automatically matched by the system according to the current usage scenario, namely, the front photo of the ID card and the back photo of the ID card. The second dialog box also includes an image upload control and an image re-selection control. Among them, the image upload control is used to indicate uploading the displayed privacy images to the server of the application, and the image re-selection control is used to indicate re-selecting privacy images from the encrypted album to be uploaded to the application. Then the user can make a selection input to the image re-selection control, and the selection input can be a click input to the image re-selection control. In response to the selection input, the system will display as Figure 6 the user identity authentication interface 601 shown. The user can upload their face image or fingerprint information in this user identity authentication interface. After the user's face image or fingerprint information passes the identity authentication, the encrypted album in the electronic device can be opened, and the album interface of the encrypted album is displayed. After the album interface of the encrypted album is displayed, at least one privacy image as shown in Figure 7 can be displayed in the encrypted album. Among them, at least one privacy image can include ID card photos, bank card photos, salary slip photos, and driver's license photos.

[0112] The user can make a selection input to one privacy image 701 among at least one privacy image as shown in Figure 7 to select the privacy image and upload the privacy image to the server of the application. Finally, as shown in Figure 8 the privacy image 701 is displayed in the personal information verification interface of the application. Among them, in the image in Figure 7 words such as "ID card photo 1" in the image are only for indicating that it is a thumbnail of a user's ID card image in the electronic album, and actual text content such as "ID card photo 1" will not be displayed in the actual electronic album.

[0113] In this embodiment, when the privacy images searched by the system from the electronic album based on the displayed personal information verification interface do not meet the user's requirements, the user can, after passing the identity authentication, manually select the correct privacy images from multiple other privacy images in the encrypted album for uploading, avoiding misselection of privacy images, so as to improve the accuracy of personal information verification, and at the same time reduce the risk of the application directly accessing all privacy images in the entire encrypted album, thereby improving the data security of privacy images.

[0114] In some embodiments, the method further includes:

[0115] Create an initial album in the electronic album;

[0116] Identify N images containing user privacy information in the electronic album, and move the N images to the initial album, where N is a positive integer;

[0117] Perform an encryption process on the initial photo album to obtain an encrypted photo album.

[0118] In some embodiments of the present application, the system can classify the images in the electronic photo album into private images and non-private images. Among them, the private images include the user's private information. In order to improve the data security of the user's private information, it is necessary to strengthen the control of private images. Therefore, the system can screen out all N images containing the user's private information from the electronic photo album, and can create an initial photo album in the electronic photo album, and then move all the N images containing the user's private information obtained by screening from the original photo album to the initial photo album. In this way, the images containing the user's private information in the electronic photo album can be separated from the ordinary images and stored and managed separately.

[0119] Specifically, after the user first enables the private image understanding function, an initial photo album will be created in the electronic photo album. Through the private image understanding function, N images containing the user's privacy in the electronic photo album can be identified, and the N images will be moved to the initial photo album, and then the initial photo album will be encrypted to obtain an encrypted photo album.

[0120] After that, after the encrypted photo album is created, the encrypted photo album will always exist in the electronic photo album. Whenever a new private image is detected outside the encrypted photo album in the electronic photo album through the private image understanding function, the newly detected private image will be moved to the encrypted photo album.

[0121] In this way, even if other application programs in the electronic device are authorized to access the images in the electronic photo album, they can only randomly access and use the images outside the encrypted photo album in the electronic photo album, and cannot randomly access the private images in the encrypted photo album.

[0122] Exemplarily, during the process of encrypting the initial photo album, the initial photo album can be encrypted through a three-level security architecture. Specifically, encrypting the initial photo album means encrypting all the images in the initial photo album with the key of the symmetric encryption algorithm, and storing the key in the trusted execution environment or the security chip to prevent external programs from obtaining the key. An access control middleware can also be set at the system layer, and this access control middleware is used to verify the user's identity and detect the application access scenario. Only in specific scenarios that meet personal information verification such as real-name authentication and social security payment, are the private images in the initial photo album allowed to be decrypted. In addition, when it is necessary to upload the private images in the initial photo album to the server of other applications, the private images can be decrypted in the trusted execution environment. This decryption method does not expose all the private images to other application programs, but transmits the temporarily authorized private images to the server of the application program through the sandbox pipeline. And the other private images in the encrypted photo album still remain encrypted and cannot be accessed.

[0123] In the above method, after automatically identifying the private images in the electronic album, all the private images can be stored in an encrypted album to prevent them from being randomly accessed by other applications, ensuring the security and controllability of private data.

[0124] In some embodiments of the present application, after encrypting the initial album to obtain an encrypted album, the method further includes:

[0125] When it is detected that the non-encrypted album has a newly added image including user privacy information, move the newly added image including user privacy information to the encrypted album.

[0126] In some embodiments of the present application, after generating an encrypted album in the electronic album, the system can continuously monitor the newly added pictures in the non-encrypted album. The newly added pictures can be photos newly taken by the user, pictures received from the network by the electronic device and saved in the electronic album, or pictures synchronized or imported from other electronic devices by the user. Among them, a fixed time interval can be set to batch scan the non-encrypted album to monitor whether there is an image including user privacy information in the newly added pictures in the non-encrypted album. The fixed time interval can be 5 minutes or 1 minute; or, when the electronic device is in an idle state, monitor whether there is an image including user privacy information in the newly added pictures in the non-encrypted album.

[0127] Specifically, after receiving the newly added picture, the system can identify the text information in the picture through optical character recognition technology, and then detect whether these text information contains privacy information through natural language processing. If it is recognized that the newly added picture includes privacy information, it can be considered that the newly added picture is a private image, and the system will automatically move it from the non-encrypted album to the encrypted album to prevent these private images from being randomly accessed and used by other applications. In this way, the system can automatically identify and encrypt and store the newly added pictures containing user privacy information, avoiding the pictures containing user privacy information from being exposed in the ordinary album. At the same time, there is no need for the user to manually organize the private images in the album, improving the convenience of private data management.

[0128] For example, after the user takes a photo of the ID card with the electronic device and saves the ID card photo in the non-encrypted album of the electronic album, the system can detect that the ID card photo contains user privacy information such as the ID card number, user name, and address. Then, it can be considered that the ID card photo is a private image, and the ID card photo will be automatically moved to the encrypted album.

[0129] For example, when a user receives a screenshot of a payslip sent by a company from a social application, the user can save the screenshot of the payslip to the electronic album. The system can automatically identify keywords such as salary and income in the screenshot of the payslip. These keywords all belong to private images, and then the system will automatically move the screenshot of the payslip to the encrypted album for protection.

[0130] In some embodiments, before displaying thumbnails of multiple private images in the electronic device, the method further includes:

[0131] Receiving a second input to an image management control in an image management interface of the electronic album;

[0132] In response to the second input, displaying a settings interface;

[0133] When a third input to an image understanding function enabling control in the settings interface is received, enabling a screen understanding function;

[0134] When a fourth input to a private image recognition function enabling control in the settings interface is received, enabling a private image understanding function.

[0135] In some embodiments of the present application, the image management interface is a user interface for viewing, selecting, and managing images in the electronic album. The user can browse, filter, delete, or share images in the image management interface. The settings interface is an interface for the user to configure and manage the functions of the electronic album. In this settings interface, the user can adjust various settings of the album, such as enabling or disabling the screen understanding function and the private image understanding function. The settings interface is a sub-interface of the image management interface, and the user can enter the settings interface from the image management interface.

[0136] When the image management interface is displayed on the electronic device, the user can perform a second input on the image management control in the displayed image management interface. The second input is used to indicate switching the displayed interface from the album interface of the electronic album to the settings interface. In the settings interface, the user can set the enabling and disabling of the image understanding function of the offline large model and set the enabling and disabling of the private image understanding function.

[0137] Specifically, when the image understanding function of the offline large model is enabled and the private image understanding function is enabled, the offline large model deployed in the electronic device can identify private images containing the user's private information in the electronic album. Then, after the system receives the second input, it can respond to the second input and display the settings interface.

[0138] The settings interface includes an image understanding function enabling control and a private image recognition function enabling control. Among them, the image understanding function enabling control is used to indicate enabling the image understanding function of the offline large model, and the private image recognition function enabling control is used to indicate enabling the private image understanding function for the private images in the electronic album. Then, after receiving a third input to the image understanding function enabling control, the system can, in response to the third input, enable the image understanding function of the offline large model, and after receiving a fourth input to the private image recognition function enabling control, can, in response to the fourth input, enable the private image understanding function. After the image understanding function of the offline large model and the private image understanding function start simultaneously, the system can traverse each image in the electronic album and screen out the images containing user privacy information as private images, where the offline large model can be a large language model.

[0139] Exemplarily, in the embodiment as Figure 9 shown, the image management interface 901 includes the title "Encrypted Album" of this interface and each image in the encrypted album. The image management interface may further include an image management control 902. Through this image management control, it is possible to select whether to switch the display interface to the settings interface, where the user can choose whether to enable the language large model associated with this electronic album and screen out private images from the images in the electronic album through the language large model.

[0140] Specifically, the second input may be a click input on the image management control 902 in the image management interface 901 as Figure 9 shown. After receiving the second input from the user, the system, in response to this second input, can switch to the settings interface 1001 as Figure 10 shown. The settings interface displays an image understanding function enabling control 1002 in the form of a switch slider. This large language model is used to understand all the images in the electronic album and determine whether each image is a private image containing user privacy information.

[0141] If the switch slider 1003 of the image understanding function enabling control 1002 in the model status selection interface as Figure 10 shown is in the off state, then the user can perform a third input on this switch slider. Among them, the third input may be a sliding input on the slider in this switch slider to switch the offline large model from the off state to the on state. After receiving the third input from the user, the system, in response to this third input, enables the image understanding function of this offline large model.

[0142] After the image understanding function of the large language model is enabled, as Figure 11As shown, a privacy image recognition function enabling control 1004 in the form of a switch slider is newly displayed in the setting interface. In the initial state, the switch slider corresponding to the privacy image recognition function enabling control is in the off state, and in the off state, the offline large model does not recognize privacy images in the electronic album. Then, in order to control whether the offline large model recognizes whether an image in the electronic album is a privacy image, the user can perform a fourth input on the switch slider corresponding to the privacy image recognition function enabling control. Among them, the fourth input can be a sliding input on the switch slider 1005 in the privacy image recognition function enabling control to switch the switch slider from the off state to the on state. Among them, the switch slider located at the left end of the privacy image recognition function enabling control means that the privacy image recognition function enabling control is in the off state, and the switch slider located at the right end of the privacy image recognition function enabling control means that the privacy image recognition function enabling control is in the off state. Sliding the switch slider from the left end to the right end switches the switch slider from the off state to the on state. After receiving the fourth input from the user, the system responds to the fourth input and uses the offline large model to recognize each image in the electronic album to identify the privacy images in the electronic album.

[0143] Exemplarily, the above-mentioned offline large model can be a 3B (3 Billion parameters) large language model deployed in an electronic device, and the user can pre-define personal information related to user privacy as user privacy information in the large language model. For example, user privacy information can include personal property information, personal basic information, work information, physical health monitoring information, and contact information. Then, the above categories of user privacy information constitute the target for the large language model to recognize, that is, any image containing these user privacy information may be determined as a privacy image. In the process of determining a privacy image, the large model will use Optical Character Recognition (OCR) technology to extract the text information in the image and analyze this text information and its context, that is, it can determine whether the image belongs to a privacy image.

[0144] Through the above method, the system can automatically recognize privacy images containing personal information without the user manually screening from the album, improving the screening efficiency of privacy images.

[0145] In some embodiments, the offline large model is trained by a training sample set, where,

[0146] The offline large model is trained by the training sample set;

[0147] Among them, the training sample set includes multiple training samples, and each training sample is associated with a privacy class label, and a privacy class label is used to indicate the privacy class of the user privacy information included in an image.

[0148] In some embodiments of the present application, the offline large model is deployed in an electronic device for identifying privacy images in the electronic photo album of the electronic device. Before applying the offline large model, it is necessary to first train the offline large model.

[0149] Specifically, the offline large model can be a large language model. During the training of the offline large model, a batch of images containing privacy data can be first labeled and obtained, such as real or synthetic photos of identity cards, passports, pay slips, medical records, etc. Then, the privacy classes of these photos are labeled with privacy class labels to construct a training sample set. Then, the offline large model is trained with the constructed training sample set to obtain a trained offline large model.

[0150] Specifically, for each training sample in the training sample set, an associated privacy class label can be added. The privacy class labels can include identity information labels, financial information labels, medical and health labels, work information labels, and contact information labels, etc. Among them, the identity information label can correspond to the user's identity card photo, passport photo, or social security card photo, the financial information label can correspond to the user's pay slip or bank statement picture, the medical and health label can correspond to the user's medical record or physical examination report picture, the contact information label can correspond to the user's mobile phone number screenshot or email screenshot, and the work information label can correspond to some contract screenshots or work certificate screenshots.

[0151] After training the preset offline large model with the training sample set until the offline large model meets the training stop condition, a trained offline large model can be obtained, and then the offline large model can be deployed to the electronic device to enable it to identify privacy images.

[0152] In the above method, the offline large model can be trained with a training sample set with privacy class labels to enable it to have the ability to identify privacy images locally. Then, the offline large model can be used to accurately identify privacy images in the photo album to automatically protect the privacy data in the electronic photo album.

[0153] In some embodiments, before receiving the first input corresponding to the application program, the method further includes:

[0154] Display the image access permission setting interface of the application. The image access permission setting interface includes: a first setting option, a second setting option, and a third setting option. The first setting option is used to set whether to prohibit the application from accessing all images in the electronic album. The second setting option is used to set whether to allow the application to access all images in the electronic album. The third setting option is used to set whether to allow the application to access some images in the electronic album.

[0155] The receiving of the first input for the application includes:

[0156] Receiving a selection input for the second setting option.

[0157] In some embodiments of the present application, the access permissions of the application to the electronic album can be divided into three types. The first type is the permission to prohibit the application from accessing all images in the electronic album. At this permission level, the application cannot access any photos or videos in the electronic album. The second type is the permission to allow the application to access all images in the electronic album. At this permission level, the application can access all pictures and videos in the electronic album. The third type is the permission to allow the application to access some images in the electronic album. At this permission level, the application can only access some pictures selected by the user in the electronic album and cannot view or read all the contents in the electronic album.

[0158] Specifically, the user can set the image access permission of the application in the image access permission setting interface of the application. The image access permission setting interface includes a first setting option, a second setting option, and a third setting option. The first setting option is used to indicate that the application is prohibited from accessing all images in the electronic album. That is, after the user makes a selection input for the first setting option, in response to this selection input, the application cannot view, read, or use any images in the electronic album. The second setting option is used to indicate that the application is allowed to access all images in the electronic album. That is, after the user makes a selection input for the second setting option, the electronic device can understand that the user's intention of this selection input is to grant the application the permission to access all images in the electronic album at any time. However, in order to protect the privacy data in the electronic album, in response to the first input, the electronic device will manage the access permissions of the encrypted album and the non-encrypted album in the electronic album separately. The system of the electronic device can divide the permission for the application to access the electronic album into open access permission and controlled access permission. The system allows the application to access all images in the non-encrypted album at any time. At the same time, the system will control the user's access permission to the images in the encrypted album based on the usage scenario of the application. Only when the application is in a specific scenario can the application access the privacy images in the encrypted album that match the specific scenario. The third setting option is used to indicate that only the images selected by the user in the electronic album are allowed to be accessed by the application. After the user makes a selection input for the third setting option, the electronic device allows the application to access the part of the images selected by the user in the electronic album at any time, but cannot view, read, or use the images not selected by the user in the electronic album.

[0159] Exemplarily, if the user makes a selection input for the third setting option and needs to manually select P images from the electronic album, then these P images are the images that the electronic device allows the application to access at any time, and the application cannot access the images outside these P images in the electronic album. P can be 5 or 10.

[0160] In this case, the first input to the application can be a selection input for the second setting option. After the system receives the selection input for the second setting option, it can, in response to this selection input, grant the application permission to access all images in the electronic photo album. The system will then enable the application to have open access to all non-encrypted photo albums in the electronic photo album except for the encrypted photo album, and enable the application to have controlled access to the encrypted photo album in the electronic photo album. Although selecting the second setting option and the third setting option will both allow the application to access some images in the electronic photo album at any time, compared with having to manually select the images for open access from the electronic photo album after selecting the third setting option, after the user selects the second setting option, there is no need to further select the images for open access and controlled access in the electronic photo album. The user only needs to make one input for the second setting option, and the system will automatically grant the application open access to the non-encrypted photos and control the access to the encrypted photo album. This not only simplifies the user's setting operation but also ensures that private images will not be randomly accessed by the application, improving the security of private data.

[0161] In some embodiments, the image access permission setting interface of the application is as Figure 12 shown. The image access permission setting interface may include a first setting option 1006, a second setting option 1007, and a third setting option 1008.

[0162] Among them, the third setting option is used to instruct the system to grant the application permission to access specific partial images in the electronic photo album. If the user makes a selection input for the third setting option, the system will, in response to this selection input, grant the application permission to access specific partial images in the electronic photo album; if the user makes a selection input for the first setting option, then the system will, in response to this selection input, prohibit the application from accessing all images in the electronic photo album. When the user makes a selection input for the second setting option, the system, in response to this selection input, can grant the application permission to access all images in the electronic photo album.

[0163] In the above manner, in the image access permission setting interface of the electronic device, the user can flexibly select the access permission level of the application to the electronic photo album, thereby realizing flexible management of the application permissions, avoiding unauthorized access by the application to private images in the electronic photo album, and achieving a balance between privacy protection and function availability.

[0164] Figure 13 is a schematic structural diagram of an electronic photo album access control device 130 provided in another embodiment of the present application. As Figure 13 shown, the electronic photo album access control device 130 may include:

[0165] A receiving module 131 for receiving a first input for an application, where the first input is used to indicate granting the application permission to access all images in an electronic album;

[0166] A processing module 132 for, in response to the first input, enabling the application to have open access to all non-encrypted albums in the electronic album except for encrypted albums, and enabling the application to have controlled access to encrypted albums in the electronic album;

[0167] Wherein, when the usage scenario of the application is a personal information verification scenario, the application is allowed to access images in the encrypted album that match the personal information verification scenario, and when the usage scenario of the application is a non-personal information verification scenario, the application is prohibited from accessing all images in the encrypted album.

[0168] In this application, after the user grants the application permission to access all images in the electronic album, the system sets different permission levels for encrypted albums and non-encrypted albums in the electronic album. Specifically, the system allows the application to freely access all images in non-encrypted albums. For encrypted albums, the application can only access privacy images that match the personal information verification scenario when the usage scenario of the application is a specific personal information verification scenario. In a non-personal information verification scenario, the application is prohibited from accessing all images in the encrypted album. That is to say, even if the application obtains permission to access all images in the electronic album, it cannot randomly read privacy pictures in the encrypted album, but is only allowed to access privacy images that match the scenario in a specific scenario. In this way, it can be avoided that the application randomly accesses privacy images in the album to collect the user's privacy data and prevent the leakage of privacy data, thereby protecting the user's privacy.

[0169] In another optional example, the device further includes:

[0170] A determination module for determining the usage scenario of the application according to the interface content of the program interface of the application;

[0171] A display module for, when the usage scenario is a personal information verification scenario and at least one privacy image that matches the personal information verification scenario is found in the encrypted album, displaying the at least one privacy image, where the privacy image includes user privacy information;

[0172] An upload module for, when a selection input for an image upload control is received, uploading the at least one privacy image to the server of the application.

[0173] In another optional example, the display module is further used for:

[0174] Display a prompt message, where the prompt message is used to prompt at least one private image found in the encrypted photo album that matches the personal information verification scenario, and ask the user whether to upload the found private image;

[0175] In the case of receiving an input for confirming the upload of the at least one private image, display the at least one private image.

[0176] In another alternative example, the device further includes:

[0177] A display module, configured to display a user identity authentication interface in the case of receiving a selection input for an image re-selection control;

[0178] An acquisition module, configured to acquire the user's to-be-verified user feature information through the user identity authentication interface;

[0179] A display module, configured to display the photo album interface of the encrypted photo album in the case where the to-be-verified user feature information matches the pre-stored user identity credential information, and the photo album interface includes at least one private image;

[0180] A receiving module, configured to receive a selection input for one private image in the photo album interface of the encrypted photo album;

[0181] An upload module, configured to upload the private image selected by the selection input to the server of the application program in response to the selection input.

[0182] In another alternative example, the device further includes:

[0183] A creation module, configured to create an initial photo album in the electronic photo album;

[0184] A moving module, configured to identify N images containing user private information in the electronic photo album, and move the N images to the initial photo album, where N is a positive integer;

[0185] An encryption module, configured to perform encryption processing on the initial photo album to obtain an encrypted photo album.

[0186] In another alternative example, the device further includes:

[0187] A moving module, configured to move the newly added images including user private information to the encrypted photo album in the case of detecting that the non-encrypted photo album newly adds images including user private information.

[0188] In another alternative example, the device further includes:

[0189] A receiving module, configured to receive a second input to an image management control in an image management interface of an electronic album;

[0190] A display module, configured to display a setting interface in response to the second input;

[0191] A processing module, configured to enable a screen understanding function when receiving a third input to an image understanding function enabling control in the setting interface;

[0192] A processing module, configured to enable a private image understanding function when receiving a fourth input to a private image recognition function enabling control in the setting interface.

[0193] In another optional example, the apparatus further includes:

[0194] A training module, configured to train an offline large model using the training sample set;

[0195] Wherein, the training sample set includes a plurality of training samples, each training sample is associated with a private category label, and a private category label is used to indicate the private category of the user privacy information included in an image.

[0196] In another optional example, the apparatus further includes:

[0197] A display module, configured to display an image access permission setting interface of an application, where the image access permission setting interface includes: a first setting option, a second setting option, and a third setting option; the first setting option is used to set whether to prohibit the application from accessing all images in the electronic album, the second setting option is used to set whether to allow the application to access all images in the electronic album, and the third setting option is used to set whether to allow the application to access some images in the electronic album;

[0198] A receiving module, configured to receive a selection input to the second setting option.

[0199] The electronic album access control device in the embodiments of the present application may be an electronic device or a component in an electronic device, such as an integrated circuit or a chip. The electronic device may be a terminal or other devices other than terminals. Exemplarily, the electronic device may be a mobile phone, a tablet computer, a laptop computer, a handheld computer, a vehicle-mounted electronic device, a Mobile Internet Device (MID), an augmented reality (AR) / virtual reality (VR) device, a robot, a wearable device, an ultra-mobile personal computer (UMPC), a netbook, or a personal digital assistant (PDA), etc., and may also be a server, a Network Attached Storage (NAS), a personal computer (PC), a television (TV), a teller machine, or a self-service machine, etc. The embodiments of the present application do not make specific limitations.

[0200] The electronic album access control device in the embodiments of the present application may be a device with an operating system. The operating system may be an Android operating system, an IOS operating system, or other possible operating systems. The embodiments of the present application do not make specific limitations.

[0201] The electronic album access control device provided by the embodiments of the present application can implement Figure 1 each process implemented by the method embodiments. To avoid repetition, it will not be elaborated here.

[0202] Optionally, as Figure 14 shown, the embodiments of the present application further provide an electronic device 100, including a processor 110, a memory 119, a program or instruction stored on the memory 119 and executable on the processor 110. When the program or instruction is executed by the processor 110, it implements each process of the above-mentioned electronic album access control method embodiments and can achieve the same technical effects. To avoid repetition, it will not be elaborated here.

[0203] It should be noted that the electronic devices in the embodiments of the present application include the above-mentioned mobile electronic devices and non-mobile electronic devices.

[0204] Please refer toFigure 15 , Figure 15 This is a schematic diagram of the hardware structure of an electronic device according to an embodiment of the present application. The electronic device 100 includes, but is not limited to, a radio frequency unit 121, a network module 122, an audio output unit 123, an input unit 124, a sensor 125, a display unit 126, a user input unit 127, an interface unit 128, a memory 129, a processor 120, and other components.

[0205] Those skilled in the art can understand that the electronic device 100 may further include a power source (such as a battery) for supplying power to each component. The power source can be logically connected to the processor 120 through a power management system, so as to implement functions such as management of charging, discharging, and power consumption management through the power management system. Figure 15 The structure of the electronic device shown does not limit the electronic device. The electronic device may include more or fewer components than shown, or combine certain components, or have different component arrangements, which will not be elaborated here.

[0206] Among them, the user input unit 127 is used to receive a first input for an application, and the first input is used to indicate granting the application permission to access all images in the electronic album.

[0207] The processor 120 is used to, in response to the first input, enable the application to access the open access permission of all non-encrypted albums in the electronic album except the encrypted album, and enable the application to access the controlled access permission of the encrypted album in the electronic album.

[0208] Among them, in the case where the usage scenario of the application is a personal information verification scenario, the application is allowed to access the images in the encrypted album that match the personal information verification scenario, and in the case where the usage scenario of the application is a non-personal information verification scenario, the application is prohibited from accessing all images in the encrypted album.

[0209] In this application, after the user grants the application permission to access all images in the electronic photo album, the system sets different permission levels for encrypted and non-encrypted photo albums in the electronic photo album. Specifically, the system allows the application to freely access all images in the non-encrypted photo album. For the encrypted photo album, the application can only access the private images that match the personal information verification scenario when the usage scenario of the application is a specific personal information verification scenario. In a non-personal information verification scenario, the application is prohibited from accessing all images in the encrypted photo album. That is to say, even if the application obtains the permission to access all images in the electronic photo album, it cannot randomly read the private pictures in the encrypted photo album, but only allows access to the private images that match the scenario in a specific scenario. In this way, it is possible to prevent the application from randomly accessing the private images in the photo album to collect the user's private data, avoid the leakage of private data, and thus protect the user's privacy.

[0210] In another optional example, the device further includes:

[0211] A processor 120, configured to determine the usage scenario of the application according to the interface content of the program interface of the application;

[0212] A display unit 126, configured to display the at least one private image when the usage scenario is a personal information verification scenario and at least one private image that matches the personal information verification scenario is found in the encrypted photo album, where the private image includes user private information;

[0213] A network module 122, configured to upload the at least one private image to the server of the application when a selection input for an image upload control is received.

[0214] In another optional example, the display unit 126 is further configured to:

[0215] Display a prompt message, where the prompt message is used to prompt that at least one private image that matches the personal information verification scenario is found in the encrypted photo album and ask the user whether to upload the found private image;

[0216] Display the at least one private image when an input for confirming the upload of the at least one private image is received.

[0217] In another optional example, the device further includes:

[0218] A display unit 126, configured to display a user authentication interface when a selection input for an image re-selection control is received;

[0219] A processor 120, configured to obtain user feature information to be verified of a user through the user authentication interface;

[0220] A display unit 126, configured to display an album interface of the encrypted album in a case where the user feature information to be verified matches the pre-stored user identity credential information, where the album interface includes at least one private image;

[0221] A user input unit 127, configured to receive a selection input for one of the private images in the album interface of the encrypted album;

[0222] A processor 120, configured to, in response to the selection input, upload the private image selected by the selection input to a server of the application.

[0223] In another alternative example, the device further includes:

[0224] A processor 120, configured to create an initial album in the electronic album;

[0225] A processor 120, configured to identify N images including user private information in the electronic album, and move the N images to the initial album, where N is a positive integer;

[0226] A processor 120, configured to perform an encryption process on the initial album to obtain an encrypted album.

[0227] In another alternative example, the device further includes:

[0228] A processor 120, configured to, in a case where it is monitored that the non-encrypted album newly adds an image including user private information, move the newly added image including user private information to the encrypted album.

[0229] In another alternative example, the device further includes:

[0230] A user input unit 127, configured to receive a second input for an image management control in an image management interface of the electronic album;

[0231] A display unit 126, configured to, in response to the second input, display a setting interface;

[0232] A processor 120, configured to, in a case where a third input for an image understanding function enabling control in the setting interface is received, enable a screen understanding function;

[0233] A processor 120, configured to, in a case where a fourth input for a private image recognition function enabling control in the setting interface is received, enable a private image understanding function.

[0234] In another alternative example, the device further includes:

[0235] A processor 120 for training an offline large model through the training sample set;

[0236] Wherein, the training sample set includes a plurality of training samples, each training sample is associated with a privacy class label, and a privacy class label is used to indicate the privacy class of the user privacy information included in an image.

[0237] In another alternative example, the device further includes:

[0238] A display unit 126 for displaying an image access permission setting interface of an application, the image access permission setting interface including: a first setting option, a second setting option, and a third setting option; the first setting option is used to set whether to prohibit the application from accessing all images in the electronic album, the second setting option is used to set whether to allow the application to access all images in the electronic album, and the third setting option is used to set whether to allow the application to access some images in the electronic album;

[0239] A user input unit 127 for receiving a selection input for the second setting option.

[0240] It should be understood that in the embodiments of the present application, the input unit 124 may include a Graphics Processing Unit (GPU) 1241 and a microphone 1242. The graphics processor 1241 processes the image data of static pictures or videos obtained by an image capture device (such as a camera) in a video capture mode or an image capture mode. The display unit 126 may include a display panel 1261, and the display panel 1261 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 127 includes at least one of a touch panel 1271 and other input devices 1272. The touch panel 1271 is also called a touch screen. The touch panel 1271 may include two parts: a touch detection device and a touch controller. The other input devices 1272 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be elaborated here.

[0241] The memory 129 can be used to store software programs and various data. The memory 129 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data. Among them, the first storage area can store an operating system, application programs or instructions required for at least one function (such as a sound playback function, an image playback function, etc.). In addition, the memory 129 can include volatile memory or non-volatile memory, or the memory 129 can include both volatile and non-volatile memory. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory can be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDR SDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synch link dynamic random access memory (SLDRAM), and a direct rambus random access memory (DRRAM). The memory 129 in the embodiments of the present application includes but is not limited to these and any other suitable types of memory.

[0242] The processor 120 may include one or more processing units; optionally, the processor 120 integrates an application processor and a modem processor. Among them, the application processor mainly processes operations related to the operating system, user interface, and application programs, etc., and the modem processor mainly processes wireless communication signals, such as a baseband processor. It can be understood that the above modem processor may not be integrated into the processor 120 either.

[0243] The embodiments of the present application also provide a readable storage medium. A program or instruction is stored on the readable storage medium. When the program or instruction is executed by a processor, it implements each process of the above embodiments of the electronic photo album access control method and can achieve the same technical effect. To avoid repetition, it will not be elaborated here.

[0244] Among them, the processor is the processor in the electronic device in the above embodiments. The readable storage medium includes computer-readable storage media such as computer read-only memory ROM, random access memory RAM, magnetic disks, or optical discs, etc.

[0245] Another embodiment of the present application provides a chip, which includes a processor and a communication interface. The communication interface is coupled to the processor. The processor is used to run programs or instructions to implement each process of the above embodiment of the electronic album access control method and can achieve the same technical effects. To avoid repetition, it will not be elaborated here.

[0246] It should be understood that the chip mentioned in the embodiments of the present application may also be referred to as a system-on-chip, system chip, chip system, or system-on-chip, etc.

[0247] The embodiments of the present application provide a computer program product. The program product is stored in a storage medium. The program product is executed by at least one processor to implement each process of the above embodiment of the electronic album access control method and can achieve the same technical effects. To avoid repetition, it will not be elaborated here.

[0248] It should be noted that in this article, the term "including", "comprising", or any other variant thereof is intended to cover non-exclusive inclusion, so that a process, method, article, or device including a series of elements not only includes those elements but also includes other elements not explicitly listed, or further includes elements inherent to such process, method, article, or device. Without more limitations, an element defined by the statement "including one..." does not exclude the existence of additional identical elements in the process, method, article, or device including that element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in the reverse order according to the functions involved. For example, the described methods may be performed in an order different from that described, and various steps may be added, omitted, or combined. Additionally, the features described with reference to certain examples may be combined in other examples.

[0249] Through the description of the above embodiments, those skilled in the art can clearly understand that the above-described embodiment methods can be implemented by means of software plus a necessary general hardware platform. Of course, they can also be implemented by hardware, but in many cases, the former is a better implementation. Based on such an understanding, the technical solution of the present application, in essence, or the part that contributes to the prior art can be embodied in the form of a computer software product. The computer software product is stored in a storage medium (such as ROM / RAM, magnetic disk, optical disk) and includes several instructions for causing a terminal (which can be a mobile phone, computer, server, or network device, etc.) to execute the methods described in various embodiments of the present application.

[0250] The embodiments of the present application have been described above in conjunction with the accompanying drawings. However, the present application is not limited to the above specific embodiments. The above specific embodiments are merely illustrative and not restrictive. Under the inspiration of the present application, those of ordinary skill in the art can also make many forms without departing from the purpose of the present application and the scope protected by the claims, and all of them belong to the protection scope of the present application.

Claims

1. An electronic photo album access control method, characterized in that Including: Receiving a first input for the application, the first input being used to indicate granting the application permission to access all images in the electronic photo album; In response to the first input, enabling open access permission for the application to access all non-encrypted photo albums in the electronic photo album except the encrypted photo album, and enabling controlled access permission for the application to access the encrypted photo album in the electronic photo album; Wherein, in the case where the usage scenario of the application is a personal information verification scenario, allowing the application to access images in the encrypted photo album that match the personal information verification scenario, and in the case where the usage scenario of the application is a non-personal information verification scenario, prohibiting the application from accessing all images in the encrypted photo album.

2. The method according to claim 1, wherein After enabling the open access permission for the application to access all non-encrypted photo albums in the electronic photo album except the encrypted photo album, and enabling the controlled access permission for the application to access the encrypted photo album in the electronic photo album, the method further includes: Determining the usage scenario of the application according to the interface content of the program interface of the application; In the case where the usage scenario is a personal information verification scenario and at least one private image that matches the personal information verification scenario is found in the encrypted photo album, displaying the at least one private image, wherein the private image includes user privacy information; When a selection input for an image upload control is received, uploading the at least one private image to the server of the application.

3. The method according to claim 2, characterized in that, Before displaying the at least one private image, it further includes: Displaying a prompt message, the prompt message being used to prompt that at least one private image that matches the personal information verification scenario is found in the encrypted photo album and asking the user whether to upload the found private image; The displaying of the at least one private image includes: When an input for confirming the upload of the at least one private image is received, displaying the at least one private image.

4. The method according to claim 2, wherein After displaying the at least one private image, the method further includes: When a selection input for an image re-selection control is received, displaying a user identity authentication interface; Obtaining the user's to-be-verified user feature information through the user identity authentication interface; In the case where the to-be-verified user feature information matches the pre-stored user identity credential information, displaying the photo album interface of the encrypted photo album, the photo album interface including at least one private image; Receiving a selection input for one private image in the photo album interface of the encrypted photo album; In response to the selection input, uploading the private image selected by the selection input to the server of the application.

5. The method according to claim 1, wherein The method further includes: Creating an initial photo album in the electronic photo album; Identifying N images in the electronic photo album that contain user privacy information, and moving the N images to the initial photo album, where N is a positive integer; Performing an encryption process on the initial photo album to obtain an encrypted photo album.

6. The method according to claim 5, wherein After performing the encryption process on the initial photo album to obtain an encrypted photo album, the method further includes: When it is detected that the non - encrypted album has newly added images including user privacy information, move the newly added images including user privacy information to the encrypted album.

7. The method according to claim 2, wherein The method further includes: Receiving a second input to an image management control in the image management interface of the electronic album; In response to the second input, displaying a settings interface; When receiving a third input to the image understanding function enabling control in the settings interface, enabling the screen understanding function; When receiving a fourth input to the privacy image recognition function enabling control in the settings interface, enabling the privacy image understanding function.

8. The method according to claim 2, wherein The offline large - model is obtained by training with a training sample set, where The offline large - model is trained through the training sample set; wherein, the training sample set includes multiple training samples, each training sample is associated with a privacy category label, and a privacy category label is used to indicate the privacy category of the user privacy information included in an image.

9. The method according to claim 1, wherein Before receiving the first input to the application, the method further includes: Displaying an image access permission settings interface of the application, the image access permission settings interface includes: a first setting option, a second setting option, and a third setting option; the first setting option is used to set whether to prohibit the application from accessing all images in the electronic album, the second setting option is used to set whether to allow the application to access all images in the electronic album, and the third setting option is used to set whether to allow the application to access some images in the electronic album; The receiving the first input to the application includes: Receiving a selection input to the second setting option.

10. An electronic photo album access control device, characterized in that, It includes: A receiving module, configured to receive a first input to the application, the first input being used to indicate granting the application permission to access all images in the electronic album; A processing module, configured to, in response to the first input, enable the application to have open access to all non - encrypted albums in the electronic album except the encrypted album, and enable the application to have controlled access to the encrypted album in the electronic album; wherein, when the usage scenario of the application is a personal information verification scenario, allow the application to access images in the encrypted album that match the personal information verification scenario, and when the usage scenario of the application is a non - personal information verification scenario, prohibit the application from accessing all images in the encrypted album.

11. The device according to claim 10, wherein The device further includes: A determination module, configured to determine the usage scenario of the application according to the interface content of the program interface of the application; A display module, configured to display at least one privacy image when the usage scenario is a personal information verification scenario and at least one privacy image that matches the personal information verification scenario is found in the encrypted album, wherein the privacy image includes user privacy information; An upload module, configured to upload the at least one privacy image to the server of the application when receiving a selection input to an image upload control.

12. The device according to claim 11, characterized in that, The display module is further configured to: Display a prompt message, which is used to prompt at least one private image found in the encrypted photo album that matches the personal information verification scenario, and ask the user whether to upload the found private image; In the case of receiving an input to confirm the upload of the at least one private image, display the at least one private image.

13. The device according to claim 11, characterized in that, The device further includes: A display module, configured to display a user identity authentication interface in the case of receiving a selection input for an image re-selection control; An acquisition module, configured to acquire user feature information to be verified of a user through the user identity authentication interface; A display module, configured to display an album interface of the encrypted photo album in the case where the user feature information to be verified matches pre-stored user identity credential information, and the album interface includes at least one private image; A receiving module, configured to receive a selection input for one private image in the album interface of the encrypted photo album; An upload module, configured to upload the private image selected by the selection input to the server of the application in response to the selection input.

14. The device according to claim 10, wherein The device further includes: A creation module, configured to create an initial photo album in the electronic photo album; A moving module, configured to identify N images containing user private information in the electronic photo album, and move the N images to the initial photo album, where N is a positive integer; An encryption module, configured to perform encryption processing on the initial photo album to obtain an encrypted photo album.

15. The device according to claim 14, characterized in that, The device further includes: A moving module, configured to move the newly added images containing user private information to the encrypted photo album in the case of detecting that the non-encrypted photo album newly adds images containing user private information.

16. The device according to claim 11, characterized in that, The device further includes: A receiving module, configured to receive a second input for an image management control in an image management interface of the electronic photo album; A display module, configured to display a setting interface in response to the second input; A processing module, configured to enable a screen understanding function in the case of receiving a third input for an image understanding function enabling control in the setting interface; A processing module, configured to enable a private image understanding function in the case of receiving a fourth input for a private image recognition function enabling control in the setting interface.

17. The device according to claim 11, characterized in that, The device further includes: A training module, configured to train an offline large model through the training sample set; Wherein, the training sample set includes a plurality of training samples, each training sample is associated with a private category label, and one private category label is used to indicate the private category of the user private information included in an image.

18. The device according to claim 10, characterized in that, The device further includes: A display module, configured to display an image access permission setting interface of the application, and the image access permission setting interface includes: a first setting option, a second setting option, and a third setting option; the first setting option is used to set whether to prohibit the application from accessing all images in the electronic photo album, the second setting option is used to set whether to allow the application to access all images in the electronic photo album, and the third setting option is used to set whether to allow the application to access some images in the electronic photo album; A receiving module, configured to receive a selection input for the second setting option.

19. An electronic device, characterized in that, It includes a processor and a memory, and the memory stores programs or instructions that can run on the processor. When the programs or instructions are executed by the processor, the steps of the electronic photo album access control method according to any one of claims 1-9 are implemented.

Images