Privacy protection implementation method and device, electronic equipment and storage medium
By identifying and verifying specific target objects within the detection range, executing targeted privacy protection actions, and quickly restoring monitoring status after the target leaves, the problem of inappropriate timing control of privacy protection during electronic device monitoring is solved, achieving a balance between privacy protection and monitoring, and improving the reliability of the security system.
Patent Information
- Application Number
- CN202511416645.8
- Authority / Receiving Office
- CN · China
- Patent Type
- Patents(China)
- Current Assignee / Owner
- Filing Date
- 2025-09-29
- Publication Date
- 2026-08-25
- Estimated Expiration
- 2045-09-29
AI Technical Summary
Existing electronic devices fail to effectively control the timing of privacy protection during monitoring, leading to the leakage of privacy information of neighbors or family members, and the continuous privacy protection status may cause unnecessary monitoring interruptions.
By identifying specific target objects within the detection range, the system uses network device fingerprints and biometric behavioral information to determine their identity and performs privacy protection actions when a specific target object appears, such as turning off the camera or adjusting the angle of the acquisition module to avoid collecting private information. At the same time, the system quickly resumes monitoring after the target leaves.
It effectively prevents the leakage of privacy information, ensures the continuity of the monitored area, and improves the reliability of the security system and the ability to capture security incidents.
Smart Images

Figure CN120910913B_ABST
Abstract
Description
Technical Field
[0001] This specification relates to one or more embodiments in the field of security technology, and more particularly to a method, apparatus, electronic device, and storage medium for implementing privacy protection. Background Technology
[0002] Smart door locks, security monitoring devices, and other electronic equipment commonly integrate functions such as facial recognition, wide-angle cameras, remote monitoring, and human body sensing. While these technologies improve security efficiency, they may also cover the entry and exit paths or indoor spaces of neighbors and other individuals, leading to privacy risks. However, residents within communities or households require electronic security devices that can monitor the movements of strangers, hoping to protect the biometric information privacy of themselves or certain neighbors, and they also want to prevent data leakage from their devices.
[0003] At the same time, existing equipment does not have the timing control logic to exit privacy protection in a timely manner, which means that the privacy protection status continues even after the face has left the monitoring field of view (such as the lens remaining blocked or the angle continuing to deviate), causing subsequent security incidents in the monitored area (such as people re-entering or objects moving abnormally) to be unable to be effectively captured. Summary of the Invention
[0004] In view of the above, one or more embodiments of this specification provide the following technical solutions: According to a first aspect of one or more embodiments of this specification, a method for implementing privacy protection is proposed, the method being applied to an electronic device with a biometric information acquisition module, comprising: To identify whether a specific target object appears within the detection range of the electronic device; In the event of the presence of the specific target object, privacy protection actions are performed on the specific target object.
[0005] Optionally, the process of determining the specific target object includes: In a disconnected state, the fingerprint of the network device within the detection range is acquired to determine the identity of the target object; or the identity of the target object is determined based on the fingerprint of the network device combined with biometric behavioral information. In response to the target object's identity satisfying a first preset condition, the target object is determined to be a specific target object; The disconnected state refers to the absence of any valid communication link between the electronic device and the network device.
[0006] Optionally, after performing privacy protection actions on the specific target object, the method further includes: In response to the fulfillment of the switching conditions, the electronic device is restored to the state before the privacy protection action was performed; Or stop privacy protection actions targeting the specific object.
[0007] Optionally, the switching condition includes: the duration of the privacy protection action performed on the specific target object reaches a preset duration.
[0008] Optionally, the switching condition includes: no specific target object is detected within the detection range.
[0009] Optionally, the switching condition includes: sensing a state change of other electronic devices within a preset range; The state changes include: information interaction state changes and / or operation action state changes; The changes in information interaction status include: disconnection of connection status, stabilization after changes in network signal strength, and / or switching of scheduling signals. The changes in the operating status include: equipment shutdown and equipment moving away.
[0010] Optionally, the privacy protection actions include one or more of the following: The biological information acquisition module is turned off; the angle of the biological information acquisition module is adjusted so that it is not aligned with the specific target object; the resolution of the biological information acquisition module is reduced; and the image acquired by the biological information acquisition module is blurred.
[0011] According to a second aspect of one or more embodiments of this specification, a privacy protection implementation apparatus is provided, the apparatus being applied to an electronic device with a biometric information acquisition module, comprising: The identification unit identifies whether a specific target object appears within the detection range of the electronic device; The execution unit performs privacy protection actions for the specific target object when the specific target object is detected; if no specific target object is detected, it restores to the previous state or stops the current privacy protection actions for the specific target object.
[0012] According to a third aspect of one or more embodiments of this specification, an electronic device is provided, comprising: a processor; a memory for storing processor-executable instructions; wherein the processor performs the steps of the method as described above by executing the executable instructions.
[0013] According to a fourth aspect of one or more embodiments of this specification, a computer-readable storage medium is provided that stores computer instructions thereon, which, when executed by a processor, implement the steps of the method as described above.
[0014] As described in the above embodiments, this solution determines the identity of a target object by detecting device fingerprints in the network environment and combining this with behavioral analysis of the target object. The electronic device can identify whether a specific target object appears within the detection range. If a specific target object is present, the biometric information collection module can be controlled to perform privacy protection actions for that specific target object, thereby avoiding the collection of the target object's biometric information, or preventing the collection of ambiguous biometric information to avoid collecting the target object's privacy information, thus mitigating the risk of privacy leakage. This solution can also trigger an immediate exit from the privacy protection state, allowing the device to quickly return to a ready monitoring state. This effectively eliminates unnecessary monitoring interruptions caused by the continued privacy protection state, ensuring seamless coverage of the monitoring area after the target leaves. This significantly improves the system's ability to detect subsequent security events (such as secondary unauthorized intrusion, theft, or abnormal movement), enhancing the reliability and effectiveness of the overall security system. Attached Figure Description
[0015] Figure 1 This is a flowchart illustrating an exemplary embodiment of a method for implementing privacy protection.
[0016] Figure 2 This is a flowchart of a method for determining a specific target object, provided in an exemplary embodiment.
[0017] Figure 3 This is a flowchart of a method for disabling privacy protection actions provided in an exemplary embodiment.
[0018] Figure 4 This is an exemplary embodiment of a privacy protection scenario diagram.
[0019] Figure 5 This is a schematic diagram of the structure of a device provided in an exemplary embodiment.
[0020] Figure 6 This is a block diagram of an exemplary embodiment of a privacy protection implementation device. Detailed Implementation
[0021] The user information (including but not limited to user device information, user personal information, etc.) and data (including but not limited to data used for analysis, data stored, data displayed, etc.) involved in this manual are all information and data authorized by the user or fully authorized by all parties. The collection, use and processing of related data shall comply with the relevant laws, regulations and standards of the relevant countries and regions, and corresponding operation portals shall be provided for users to choose to authorize or refuse.
[0022] Smart door locks, security monitoring systems, smart doorbells and other electronic devices generally integrate functions such as facial recognition, wide-angle cameras, remote monitoring, and human body sensing. While these technologies improve security efficiency, they may also cover the entry and exit paths or indoor spaces of neighbors, visitors, etc., leading to the risk of privacy leaks.
[0023] Taking smart door locks as an example, smart door locks are usually equipped with cameras that capture images of the area around the door for security monitoring. During this process, the camera may capture facial images of neighbors, and may also capture images of their homes when they open their doors, leading to a risk of privacy breaches.
[0024] Taking indoor cameras as an example, the cameras will capture users' private information, and users will want the indoor cameras to stop capturing them when they return home.
[0025] This specification provides a privacy protection implementation scheme that can perform privacy protection actions on specific target objects to avoid collecting the privacy information of specific target objects, thereby avoiding the risk of privacy leakage.
[0026] Figure 1 This is a flowchart illustrating an exemplary embodiment of a method for implementing privacy protection.
[0027] In this specification, the privacy protection implementation method can be applied to electronic devices with biometric information collection modules. The electronic devices can be smart door locks or other monitoring devices, such as camera systems.
[0028] The bio-information acquisition module may include an image acquisition module, a bio-behavioral information acquisition module, and a bio-physiological information acquisition module. The image acquisition module may be a camera or other video recording module; the bio-behavioral information acquisition module may be a speed sensor capable of capturing bio-movement speed, a tracking module capable of tracking the bio-organism, etc.; the bio-physiological information acquisition module may be a palmprint acquisition module, a human subcutaneous vein information acquisition module, a voiceprint acquisition module, a gait information acquisition module, etc., and this specification does not impose any special limitations on these.
[0029] Please refer to Figure 1 The method for implementing privacy protection may include the following steps: Step 102: Identify whether a specific target object appears within the detection range of the electronic device.
[0030] In this specification, the detection range can be understood as the actual range that the electronic device can detect, such as the range that the Bluetooth module in the electronic device can cover, the range that the Wi-Fi module in the electronic device can cover, etc.
[0031] The target object can be a biological object or a network device.
[0032] For example, the target object can be a person, such as a person appearing within the detection range of a smart door lock.
[0033] For example, the target object is a network device, such as a mobile phone or other terminal device carried by a person appearing within the detection range of a smart door lock.
[0034] In this specification, after the electronic device detects a target object, it can identify whether the target object is a specific target object. If it is a specific target object, step 104 can be executed. If it is not a specific target object, the detection and identification of other target objects can continue.
[0035] The specific target object mentioned above is usually the target object that needs to be protected by privacy.
[0036] For example, in a doorway monitoring scenario, the specific target object can be a neighbor, or a network device, smart wearable device, etc. carried by the neighbor.
[0037] For example, in a home indoor monitoring scenario, the specific target object is a family member, or it could be a network device carried by a family member, etc.
[0038] Step 104: When the specific target object appears, perform privacy protection actions for the specific target object.
[0039] Based on the aforementioned step 102, if the target object appearing in the detection range is identified as a specific target object, the biometric information acquisition module can be controlled to perform privacy protection actions for that specific target object.
[0040] The privacy protection actions include one or more of the following: The biological information acquisition module is turned off; the angle of the biological information acquisition module is adjusted so that it is not aligned with the specific target object; the resolution of the biological information acquisition module is reduced; and the image acquired by the biological information acquisition module is blurred.
[0041] For example, turning off the camera, adjusting the camera angle so it's not aimed at a specific target, reducing the resolution of the images captured by the camera, or blurring the images captured by the camera to obscure private information.
[0042] For example, turning off the audio acquisition module or the palmprint acquisition module.
[0043] In an exemplary doorway monitoring scenario, after a smart door lock detects a person in its detection range, it can identify whether the detected person is a neighbor. If it is a neighbor, it can determine that the person is a specific target and then turn off the external camera to avoid collecting images of the neighbor, thereby avoiding the collection of privacy information such as the neighbor's face and indoor images.
[0044] In an exemplary home indoor monitoring scenario, after a smart door lock detects a person in its detection range, it can identify whether the detected person is a family member. If it is a family member, it can determine that the person is a specific target and then turn off the indoor camera to avoid collecting indoor images, thereby preventing the collection of private information such as facial images of family members.
[0045] As can be seen from the above description, by adopting the above-described solution provided in this specification, the electronic device can identify whether a specific target object appears in the detection range, and when a specific target object appears, it can control the biometric information collection module to perform privacy protection actions for that specific target object, thereby avoiding the collection of the biometric information of the specific target object, or avoiding the collection of privacy information of the specific target object for the vaguely collected biometric information, thereby avoiding the risk of privacy leakage.
[0046] The implementation process of this specification will be described in detail below from three aspects: determining the specific target object, executing privacy protection actions, and disabling privacy protection actions.
[0047] I. Determination of Specific Target Objects In this manual, after the electronic device detects the presence of a target object within its detection range, it can determine whether the target object is a specific target object. Please refer to [the manual for further details]. Figure 2 This includes the following steps: Step 202: Obtain the fingerprint of the network device within the detection range in the disconnected state to determine the identity of the target object.
[0048] In this specification, when the target object is a person, the network device is typically carried by the target object, such as a mobile phone, wearable device, or tablet computer carried by the target object. When the target object is a network device, the network device is typically the target object itself.
[0049] In this specification, the term "disconnected state" refers to a situation where no valid communication link is established between the electronic device and the network device within the detection range. For example, no Bluetooth communication link or Wi-Fi communication link is established between the electronic device and the network device.
[0050] The network device fingerprint can be information about the network device detected by the electronic device within its detection range. This information can identify the network device. This information can be actively sent by the network device and intercepted by the electronic device, or it can be actively detected and obtained by the electronic device.
[0051] For example, electronic devices can use the BLE (Bluetooth Low Energy) sniffing function of a Bluetooth device to capture data packets transmitted by network devices within the detection range via BLE technology, thereby obtaining the network device's fingerprint. This includes capturing the device identifier (Hashed MAC), signal strength (RSSI, Received Signal Strength Indicator), service UUID (Universally Unique Identifier), and transmit power from broadcast packets. Random MAC tracking technology can be used to establish an RF fingerprint based on the broadcast packet length and carrier frequency offset (CFO) of the same device.
[0052] For example, electronic devices can use the deep analysis function of the Wi-Fi module to analyze nearby Wi-Fi signals to obtain the network device fingerprint. For example, they can extract the SSID (Service Set Identifier), Vendor OUI (Organizationally Unique Identifier), supported rates, etc. from the Probe Request frame.
[0053] In this specification, electronic devices may acquire the fingerprint of network devices within the detection range through a non-connection-free method, or through a variety of non-connection-free methods. This specification does not impose any special limitations on this.
[0054] This manual describes a connectionless method for obtaining network device fingerprints to identify a target object. Throughout the process, no effective connection needs to be established between the electronic device and the network device. This approach has a wider range of applications, allowing for the acquisition of network device fingerprints to identify unfamiliar individuals. Furthermore, it effectively avoids the risk of information leakage from electronic devices that would otherwise result from establishing a connection with the network device.
[0055] In this specification, after obtaining the fingerprint of a network device, the identity of a target object can be determined based on that fingerprint, or the identity of the target object can be determined based on the network device fingerprint combined with biometric behavioral information. The biometric behavioral information may include: movement speed, movement direction, stride length, stride frequency, movement range, and duration of stay in different spatial areas, and may also be obtained within the detection range. Of course, in other examples, the identity of the target object may be determined solely based on biometric behavioral information; this specification does not impose any special limitations on this.
[0056] In one embodiment, when identifying a device based on a network device fingerprint, at least one feature index value of at least one dimension of device features can be extracted from the network device fingerprint, and the device identity of the corresponding network device can be determined based on the at least one feature index value.
[0057] In one embodiment, the dimensions of the device features can be divided into physical dimensions, protocol dimensions, and behavioral dimensions, wherein: the physical features of the physical dimension include, but are not limited to, carrier frequency offset, modulation error, and standard deviation of signal strength fluctuation; the protocol features of the protocol dimension include, but are not limited to, BLE service and Wi-Fi probes; and the behavioral features of the behavioral dimension include, but are not limited to, time-of-day activity, dwell time, and movement trajectory.
[0058] There are no restrictions on the extraction methods for carrier frequency offset, modulation error, and standard deviation of signal strength fluctuation. For example, BLE service can extract UUID, and Wi-Fi probe can extract WiFi channel width or OUI.
[0059] Activity level during a given time period, dwell time, and movement trajectory are indicators that can be comprehensively calculated based on the detection results and used to analyze the behavioral information of the target object.
[0060] For example, time-based activity can be calculated using -Σ(p*log2(p)) to determine the active interval of a target object within 24 hours, thus capturing patterns in the target object's appearance time. Here, P represents the probability of appearance within a specific time interval. A lower time-based activity level indicates a more consistent time period for the target object's appearance.
[0061] For example, the coefficient of variation of dwell time can be expressed as the ratio of the standard deviation to the mean of the dwell time for the same network device over a week. This metric can be used to analyze the regularity of dwell time for a target object.
[0062] For example, the smoothness of a movement trajectory can be measured by the ratio of the straight-line distance to the actual path length of the target object. A ratio closer to 1 indicates that the movement path of the target object is closer to a straight line, while a ratio closer to 0 indicates that the movement path of the target object is more circuitous.
[0063] In one embodiment, when determining the device identity of a corresponding network device based on feature index values, at least one feature index value can be fused to obtain a first fused index value for the corresponding dimension, and the device identity of the corresponding network device can be determined based on the first fused index value for the corresponding dimension.
[0064] For example, if device characteristics are divided into a dimension, and there is only one characteristic index value under that dimension, then the device identity of the corresponding network device can be determined based on that characteristic index value.
[0065] For example, if the device features are divided into a dimension and there are multiple feature index values under that dimension, the multiple feature index values can be fused to obtain a first fused index value, and the device identity of the corresponding network device can be determined based on the first fused index value.
[0066] For example, if the device features are divided into multiple dimensions, and each dimension has at least one feature index value, then at least some feature index values of at least some dimensions can be selected for fusion processing to obtain the first fusion index value of the corresponding dimension, and the device identity of the corresponding network device can be determined based on the first fusion index value of the corresponding dimension.
[0067] For example, dimension A includes a1, a2, and a3; dimension B includes b1 and b2; and dimension C includes c1, c2, and c3. The first fusion index value for dimension A can be determined based on a1 and a2; the first fusion index value for dimension B can be determined based on b1 and b2; and the first fusion index value for dimension C can be determined based on c1, c2, and c3. The device identity of the corresponding network device can then be determined based on the first fusion index values for each dimension.
[0068] In one embodiment, when determining the device identity of a corresponding network device based on a first fusion index value of a corresponding dimension, the current environment scenario category can be determined, and a first weight of each first fusion index value corresponding to the current environment scenario category can be obtained, or the first weight of each first fusion index value can be adaptively determined. The first fusion index values are then fused according to the first weights to obtain a second fusion index value, and the device identity of the corresponding network device is determined based on the second fusion index value.
[0069] For example, environmental scenarios can be categorized into nighttime mode, strong interference environment mode, and long-term monitoring mode. For nighttime mode, the physical layer weight is greater than the behavioral layer weight, which is greater than the protocol layer weight. For strong interference environment mode, the physical layer weight is greater than or equal to the protocol layer weight, which is greater than the behavioral layer weight. For long-term monitoring mode, the physical layer weight is less than the protocol layer weight, which is less than the behavioral layer weight. The environmental scenario category can be set by the user on the terminal. The electronic device can then use the weights corresponding to the user-defined environmental scenario category to fuse the first fusion index values of each dimension to obtain the second fusion index value.
[0070] In one embodiment, confidence levels can also be used for weighting, as shown in the following formula:
[0071] Wherein, Ω represents the second fusion index value. Let be the weight of the k-th layer dimension in the fusion process. The confidence level of the first fusion index value in the k-th dimension. is the first fusion index value of the k-th dimension.
[0072] In one embodiment, when determining the device identity of a corresponding network device based on feature index values, an identification result can be generated based on the feature index values, and the device identity of the corresponding network device can be determined based on the identification result.
[0073] The identification result can be represented by any feature index value. For example, the magnitude of the feature index value of any dimension of the device feature can be used as the identification result.
[0074] The recognition result can also be represented by a first fusion index value or a second fusion index value. For example, multiple feature index values in any dimension are fused to obtain a first fusion index value, and the magnitude of this first fusion index value can be used as the recognition result. Alternatively, first fusion index values from different dimensions are fused to obtain a second fusion index value, and the magnitude of this second fusion index value can be used as the recognition result.
[0075] For example, in a typical home security monitoring scenario, the identification result can be normalized to [0, 1]. Assuming [0, 0.3] corresponds to the resident's identity, (0.3, 0.6] corresponds to the neighbor's identity, and (0.6, 1] corresponds to other people's identities, the identity of the target object can be determined based on the interval where the identification result falls. For example, if the identification result is 0.45, the target object's identity can be determined to be a neighbor. The range of this value is closely related to the application scenario, and those skilled in the art can reset the identity type corresponding to different numerical intervals of the identification result according to actual needs.
[0076] Specifically, suppose at least one feature value is extracted from the network device fingerprint, encompassing physical, protocol, and behavioral dimensions. Any one of these feature values can be used independently as an identification result. For example, if the physical dimension feature value 1 is 0.45, the target object can be identified as a neighbor.
[0077] Fusing multiple feature values from any dimension yields a first fusion index value. Any single fusion index value can be used independently for identity recognition. For example, a first fusion index value of 0.45 for the physical dimension can independently identify the target object as a neighbor. Similarly, a first fusion index value of 0.45 for the protocol dimension can also independently identify the target object as a neighbor. During fusion processing, multiple feature values can be weighted, assigning higher weights to more important features and lower weights to less important features.
[0078] Multiple first fusion index values can be fused to obtain a second fusion index value. This second fusion index value can be used as the identification result for identity verification. For example, a second fusion index value of 0.45 can identify the target object as a neighbor. During the fusion process, multiple first fusion index values can be weighted, assigning higher weights to more important first fusion index values and lower weights to less important ones.
[0079] Optionally, in another embodiment of this specification, after obtaining the fingerprint of a network device, the identity of the corresponding network device can also be searched in a preset identity list. The identity list can be manually set in advance, or it can be updated after determining the identity of a network device based on the device fingerprints of network devices that have appeared historically. The identity list may include a neighbor list, a family member list, etc., or alternatively, a combination of neighbor lists, family member lists, etc., can be integrated into a single identity list.
[0080] Optionally, in another embodiment of this specification, after obtaining the fingerprint of the network device, historical detection information obtained from historical detection of the network device can also be obtained based on the fingerprint of the network device. The historical detection information may also include physical layer information, protocol layer information and behavioral layer information, and then the identity of the network device can be determined by combining the historical detection information.
[0081] Step 204: In response to the target object's identity satisfying the first preset condition, determine that the target object is a specific target object.
[0082] Based on the confirmation result of the target object's identity in the aforementioned step 202, if the target object's identity meets the first preset condition, it can be determined that the target object is an object that needs privacy protection, and thus it can be identified as a specific target object.
[0083] The first preset condition can be set in advance, such as neighbors, family members, etc.
[0084] As described above, this manual can identify network devices within the detection range in a disconnected state to determine the identity of a target object. Furthermore, when the target object's identity meets a first preset condition, it can be identified as a specific target object, thereby executing privacy protection actions. Executing privacy protection actions for specific target objects effectively ensures their privacy and security. Simultaneously, the absence of privacy protection actions for non-specific target objects ensures monitoring effectiveness, achieving a balance between security monitoring and privacy protection.
[0085] II. Implementation of Privacy Protection Measures In one embodiment, when a specific target object appears within the detection range of the electronic device, privacy protection actions can be performed immediately on that specific target object. For example, turning off the camera or reducing the camera's resolution.
[0086] In another implementation, when a specific target object appears within the detection range of the electronic device, it can be further determined whether the execution conditions for a privacy protection action are met. If the execution conditions are met, the privacy protection action can be performed on the specific target object. If the execution conditions are not met, the privacy protection action on the specific target object can be temporarily suspended.
[0087] For example, the execution condition may be that the actual distance between a specific target object and an electronic device is less than or equal to a first distance threshold, which is preset. For instance, after determining that the target object is a specific target object, the electronic device can detect the actual distance between itself and the specific target object, determine the relationship between the actual distance and the first distance threshold, and perform a privacy protection action for the specific target object when the actual distance is less than or equal to the first distance threshold.
[0088] The actual distance can be detected by a distance sensor or determined by the signal strength between network devices and electronic devices; this specification does not impose any special limitations on this.
[0089] Optionally, when the actual distance between a specific target object and an electronic device is less than or equal to a second distance threshold, the duration for which the actual distance between the specific target object and the electronic device is less than or equal to the second distance threshold can also be recorded. If the duration is greater than a first duration threshold, it indicates that the specific target object has been staying near the electronic device for a relatively long time. To ensure security, it can be determined that the switching conditions are met, and the electronic device can be restored to the state before the privacy protection action was performed, or the privacy protection action for the specific target object can be stopped.
[0090] Wherein, the second distance threshold is less than or equal to the first distance threshold.
[0091] For example, suppose the actual distance between a specific target object and an electronic device is less than or equal to a first distance threshold, and the electronic device turns off its camera to stop capturing images. However, if the duration for which the actual distance between the specific target object and the electronic device is less than or equal to a second distance threshold is too long and exceeds or equal to the first duration threshold, then the camera can be turned on to resume image capture.
[0092] For example, the execution condition may be that the signal strength of the network device detected by the electronic device is greater than or equal to a first strength threshold, which is preset. For instance, after determining that the target object is a specific target object, the electronic device may continue to detect the signal strength of the network device, determine the relationship between the signal strength and the first strength threshold, and perform a privacy protection action for the specific target object when the detected signal strength is greater than or equal to the first strength threshold.
[0093] Optionally, when the signal strength of the network device is greater than or equal to the second strength threshold, the duration of the signal strength being greater than or equal to the second strength threshold can also be recorded. If the duration is greater than the second duration threshold, it indicates that the specific network device has been staying near the electronic device for a long time. To ensure security, it can be determined that the switching conditions are met, and the electronic device can be restored to the state before the privacy protection action was performed, or the privacy protection action for the specific target can be stopped.
[0094] Wherein, the second intensity threshold is greater than or equal to the first intensity threshold. The second duration threshold may be equal to or different from the first duration threshold.
[0095] For example, suppose the signal strength of the network device is greater than or equal to a first strength threshold, and the electronic device turns off the camera to stop capturing images. However, if the signal strength of the network device is greater than or equal to a second distance threshold for too long, exceeding or equal to a second duration threshold, then the camera can be turned on to resume image capture.
[0096] As can be seen from the above description, when a specific target object appears in the detection range, this embodiment determines whether the execution conditions for privacy protection actions are met. If the execution conditions are met, privacy protection actions are performed on the specific target object, thereby more accurately controlling the timing of the execution of privacy protection actions, avoiding monitoring gaps caused by premature execution of privacy protection actions, and thus ensuring monitoring security.
[0097] III. Disabling Privacy Protection Actions In one embodiment, to ensure the effectiveness of electronic device monitoring, after a specific target object appears within the detection range of the electronic device and a privacy protection action is performed on the specific target object, it is also necessary to disable the privacy protection action. Please refer to [reference needed]. Figure 3 This may include the following steps: Step 302: Determine whether the switching conditions are met.
[0098] In this specification, after an electronic device performs a privacy protection action targeting a specific object, it can determine whether the switching conditions are met, and the switching conditions can be preset.
[0099] For example, the switching condition includes: the duration of performing privacy protection actions on the specific target object reaches a preset duration. The preset duration can represent the duration for which the specific target object leaves the detection range, and can be preset based on experience, such as 5 seconds, 10 seconds, etc.
[0100] Specifically, after performing privacy protection actions targeting a specific object, a timer can be started to count down. When the countdown reaches the preset duration, it can be determined that the switching condition is met.
[0101] For example, the switching condition includes: no specific target object is detected within the detection range. For an electronic device, target objects appearing within the detection range can be continuously detected, and when it is determined that no specific target object appears within the detection range, the switching condition can be considered met.
[0102] The absence of a specific target object within the detection range could mean that no target object was present in the detection range, or that a target object was present but identified as not being the specific target object. Both scenarios indicate that the specific target object requiring privacy protection has left the detection range.
[0103] For example, the switching condition includes sensing a state change of other electronic devices within a preset range. The type of these other electronic devices can be the same as or different from this electronic device. Assuming this electronic device is a smart door lock, the other electronic devices could also be smart door locks (e.g., a neighbor's smart door lock), door monitoring devices (e.g., a smart peephole), hallway devices, etc.
[0104] The state change may include changes in information interaction state and / or changes in operational state. In other words, an electronic device can determine that the switching conditions are met when it senses a change in the information interaction state of another electronic device; it can determine that the switching conditions are met when it senses a change in the operational state of another electronic device; and it can determine that the switching conditions are met when it senses both a change in the information interaction state and a change in the operational state of another electronic device.
[0105] The changes in information interaction status may include disconnection, stabilization after changes in network signal strength, and / or switching of scheduling signals.
[0106] The disconnection of a connection can occur when another electronic device loses its connection to a network device it was previously connected to. This disconnection indicates that the network device previously connected to that other electronic device has moved out of its coverage area. For example, if the other electronic device is a neighbor's door lock, the disconnection could mean that the neighbor's door lock has lost its connection to network devices such as mobile phones or computers previously connected to it. Again using a smart door lock as an example, the neighbor's door lock (the other electronic device) can establish a connection with the network devices (mobile phones, computers, wearable devices, etc.) of the neighbor's family members (i.e., the neighbor). For instance, after the neighbor returns home, their mobile phone can connect to the neighbor's door lock. When the neighbor's door lock and the neighbor's mobile phone disconnect, it usually indicates that the neighbor has left home. In this case, the neighbor has typically also left the detection range of the smart door lock, thus confirming that the switching conditions are met.
[0107] It's important to note that the aforementioned connection states typically refer to direct connections, such as the direct communication connection between the smart lock and the network device. The disconnection of this connection usually refers to the breakage of that direct communication connection; for example, the smart lock disconnecting its direct communication connection with the network device. Disconnections through indirect connections, such as those via a server, are not included in this definition. For instance, a neighbor's lock might connect to a server via their Wi-Fi network, and the server might connect to the neighbor's phone via a wireless network. The disconnection of such an indirect connection does not necessarily mean the neighbor has left the smart lock's detection range; it could be due to other reasons, such as a Wi-Fi network malfunction. Therefore, the disconnections used to indicate the fulfillment of switching conditions generally do not include disconnections of indirect connections.
[0108] The stabilization of network signal strength after fluctuations typically reflects changes in the network signal strength of other electronic devices detected by this electronic device. These fluctuations can represent changes in the distance between this and other electronic devices. A stable network signal after a fluctuation could indicate either a decrease in distance followed by a period of stabilization, or a decrease in distance followed by an increase in distance followed by a period of stabilization. This fluctuation in network signal strength can reflect the behavior of users of other electronic devices, thus establishing a stable network signal after a fluctuation as a switching condition.
[0109] Taking a neighbor's door lock as an example, the stability of the neighbor's door lock's network signal strength after fluctuations can indicate changes in the door's opening and closing. For instance, opening the neighbor's door outwards might cause the network signal to strengthen, while closing it might cause it to weaken. When the door remains closed, the network signal strength remains stable. In this example, the network signal strength changes as follows: stronger – weaker – stable. For the neighbor, possible actions include opening the door, entering the house, and closing the door. Therefore, by sensing these network signal changes, the neighbor can determine if the switching conditions are met.
[0110] The switching of the dispatch signal can be initiated by other electronic devices receiving a dispatch instruction. These other electronic devices can be elevators, unit access control systems, community access control systems, etc. The switching of the dispatch signal can indicate that a specific target object within the detection range is about to leave or has already left the detection range, thus confirming that the switching conditions are met.
[0111] Assuming the other electronic devices are elevators, the switching of dispatch signals could be the elevator receiving a dispatch request. Taking a neighbor as an example, it could be that the neighbor presses the elevator button to request the elevator to go to their current floor, or it could be that the neighbor has already entered the elevator and pressed the button to go to the floor they want to go to.
[0112] Furthermore, assuming other electronic devices are unit access control systems, the switching of dispatch signals could be due to the unit access control system receiving an opening request. Taking a neighbor as an example, it could be that the neighbor is opening the unit access control system to leave the building.
[0113] In this example, the change in the information interaction state of other electronic devices can be determined when one of the following three conditions is met: disconnection, stability after changes in network signal strength, or switching of scheduling signals. Alternatively, the change in the information interaction state of other electronic devices can be determined when two or all three conditions are met. This specification does not impose any special restrictions on this.
[0114] The changes in the operating status include: equipment shutdown and equipment moving away.
[0115] In this context, "device shutdown" can refer to the shutdown of other electronic devices, such as a neighbor's door lock, elevator shutdown, or hallway light shutdown. Taking a neighbor as an example, the shutdown of these devices indicates that the neighbor has left the detection range of this electronic device, thus confirming that the switching conditions have been met. Examples include a neighbor closing their door upon returning home, a neighbor leaving via elevator, or a neighbor walking away from the building and the hallway lights turning off.
[0116] Device distancing can refer to other electronic devices moving away from this electronic device, such as a neighbor's door lock moving away or an elevator moving away. Taking a neighbor as an example, this distancing indicates that the neighbor has left the detection range of this electronic device, thus confirming that the switching conditions are met. For example, when a neighbor returns home and their door lock is closed, the door lock will move away; when a neighbor takes an elevator, the elevator car will move away from the floor where this device is located.
[0117] In this example, the change in the operating status of other electronic devices can be determined when either the device is turned off or the device is moved away from the device, or when both conditions are met. This specification does not impose any special restrictions on this.
[0118] It should be noted that the state changes of the other electronic devices sensed by the electronic device have been authorized and permitted.
[0119] Step 304: In response to the fulfillment of the switching condition, restore the electronic device to the state before the privacy protection action was performed, or stop the privacy protection action for the specific target object.
[0120] In one example, if the switching conditions are met, the privacy protection action targeting the specific object can be stopped, and the operating state of the electronic device can be determined according to the actual situation. For example, after stopping the privacy protection action, the electronic device can be restored to the state before the privacy protection action was performed, or the electronic device can be switched to other states after stopping the privacy protection action (such as when a dangerous target object appears in the network detection range, or when the tracking and monitoring operation mode is executed after stopping the privacy protection action, etc.), and the specific choice can be made according to the actual situation.
[0121] In another example, if the switching conditions are met, the electronic device can be directly restored to the state before the privacy protection action was performed, for example, turning on a closed camera to restore normal monitoring.
[0122] As can be seen from the above description, after the electronic device performs a privacy protection action on the specific target object, it can stop the privacy protection action on the specific target object when the switching conditions are met, so as to restore the monitoring state in a timely manner and prevent the security risks caused by the lack of monitoring due to the long-term execution of privacy protection actions.
[0123] Figure 4 This is an exemplary embodiment of a privacy protection scenario diagram.
[0124] Please refer to Figure 4In this privacy protection scenario, the electronic device executing the privacy protection logic is a smart lock 40. When a person 41 appears within the detection range of the smart lock 40, the smart lock 40 can acquire the device fingerprint of the mobile phone (not shown) carried by the person 41 in a disconnected state, and then determine the identity of the person 41 based on the device fingerprint. Assuming that the person 41 is a neighbor, then the person 41 can be identified as a specific target, and privacy protection actions can be performed on the person 41, such as turning off the smart lock's external camera to avoid collecting images containing the neighbor's privacy, such as their face. When the camera has been off for a preset duration, it can be assumed that the neighbor has returned home or left the detection range, and then the smart lock's external camera can be turned back on to restore the monitoring state.
[0125] Figure 5 This is a schematic structural diagram of a device provided in an exemplary embodiment. Please refer to... Figure 5 At the hardware level, the device includes a processor 502, an internal bus 504, a network interface 506, memory 508, and non-volatile memory 510, and may also include other hardware required for its functions. One or more embodiments of this specification can be implemented in software, for example, the processor 502 reads the corresponding computer program from the non-volatile memory 510 into memory 508 and then runs it. Of course, in addition to software implementation, one or more embodiments of this specification do not exclude other implementation methods, such as logic devices or a combination of hardware and software, etc. That is to say, the execution subject of the following processing flow is not limited to each logic unit, but can also be hardware or logic devices.
[0126] Please refer to Figure 6 The privacy protection device 600 can be applied to, for example... Figure 5 The device shown implements the technical solution described in this specification. The privacy protection implementation device 600 may include: The identification unit 601 identifies whether a specific target object appears within the detection range of the electronic device; The execution unit 602 performs privacy protection actions for the specific target object when the specific target object is detected; and restores the previous state or stops the current privacy protection actions for the specific target object when no specific target object is detected.
[0127] Optionally, the process of determining the specific target object includes: In a disconnected state, the fingerprint of the network device within the detection range is acquired to determine the identity of the target object; or the identity of the target object is determined based on the fingerprint of the network device combined with biometric behavioral information. In response to the target object's identity satisfying a first preset condition, the target object is determined to be a specific target object; The disconnected state refers to the absence of any valid communication link between the electronic device and the network device.
[0128] Optionally, after performing a privacy protection action on the specific target object, the execution unit 602 may, in response to the fulfillment of a switching condition, restore the electronic device to the state before performing the privacy protection action; or stop the privacy protection action on the specific target object.
[0129] Optionally, the switching condition includes: the duration of the privacy protection action performed on the specific target object reaches a preset duration.
[0130] Optionally, the switching condition includes: no specific target object is detected within the detection range.
[0131] Optionally, the switching condition includes: sensing a state change of other electronic devices within a preset range; The state changes include: information interaction state changes and / or operation action state changes; The changes in information interaction status include: disconnection of connection status, stabilization after changes in network signal strength, and / or switching of scheduling signals. The changes in the operating status include: equipment shutdown and equipment moving away.
[0132] Optionally, the privacy protection actions include one or more of the following: The biological information acquisition module is turned off; the angle of the biological information acquisition module is adjusted so that it is not aligned with the specific target object; the resolution of the biological information acquisition module is reduced; and the image acquired by the biological information acquisition module is blurred.
[0133] Based on the same concept as the methods described above, this specification also provides an electronic device, including: a processor; a memory for storing processor-executable instructions; wherein the processor performs the steps of the method as described in any of the above embodiments by executing the executable instructions.
[0134] Based on the same concept as the methods described above, this specification also provides a computer-readable storage medium having computer instructions stored thereon that, when executed by a processor, implement the steps of the methods as described in any of the above embodiments.
[0135] Based on the same concept as the methods described above, this specification also provides a computer program product, including a computer program / instructions that, when executed by a processor, implement the steps of the methods as described in any of the above embodiments.
Claims
1. A method for implementing privacy protection, characterized in that, The method is applied to electronic devices equipped with a bioinformatics acquisition module, including: To identify whether a specific target object appears within the detection range of the electronic device; In the event of the presence of the specific target object, privacy protection actions will be performed on the specific target object; The process of determining the specific target object includes: In a disconnected state, obtain the fingerprint of the network device within the detection range to determine the identity of the target object; Alternatively, the identity of the target object can be determined based on the fingerprint of the network device combined with biometric behavioral information; In response to the target object's identity satisfying a first preset condition, the target object is determined to be a specific target object; The disconnected state refers to the absence of any valid communication link between the electronic device and the network device. After performing privacy protection actions on the specific target object, the method further includes: In response to the fulfillment of the switching conditions, the electronic device is restored to the state before the privacy protection action was performed; Or cease privacy protection actions targeting the specific object; The switching conditions include: The duration for which the privacy protection action is performed on the specific target object reaches a preset duration; or, No specific target object was detected within the detection range; or, Sensing changes in the status of other electronic devices within a preset range; The state changes include: information interaction state changes and / or operation action state changes; The changes in information interaction status include: disconnection of connection status, stabilization after changes in network signal strength, and / or switching of scheduling signals. The changes in the operating status include: equipment shutdown and equipment moving away.
2. The method according to claim 1, wherein the privacy protection action includes one or more of the following: The biological information acquisition module is turned off; the angle of the biological information acquisition module is adjusted so that it is not aligned with the specific target object; the resolution of the biological information acquisition module is reduced; and the image acquired by the biological information acquisition module is blurred.
3. A device for implementing privacy protection, characterized in that, The device is applied to an electronic device with a bio-information acquisition module, and includes: The identification unit identifies whether a specific target object appears within the detection range of the electronic device; The execution unit performs privacy protection actions for the specific target object when the specific target object is detected; if no specific target object is detected, it restores the previous state or stops the current privacy protection actions for the specific target object. The process of determining the specific target object includes: In a disconnected state, the fingerprint of the network device within the detection range is acquired to determine the identity of the target object; or the identity of the target object is determined based on the fingerprint of the network device combined with biometric behavioral information. In response to the target object's identity satisfying a first preset condition, the target object is determined to be a specific target object; The disconnected state refers to the absence of any valid communication link between the electronic device and the network device. After performing a privacy protection action on the specific target object, the execution unit, in response to the fulfillment of the switching condition, restores the electronic device to the state before the privacy protection action was performed; or stops the privacy protection action on the specific target object. The switching conditions include: the duration of the privacy protection action performed on the specific target object reaches a preset duration; or, No specific target object was detected within the detection range, or Sensing changes in the status of other electronic devices within a preset range; The state changes include: information interaction state changes and / or operation action state changes; The changes in information interaction status include: disconnection of connection status, stabilization after changes in network signal strength, and / or switching of scheduling signals. The changes in the operating status include: equipment shutdown and equipment moving away.
4. An electronic device, characterized in that, include: processor; A memory for storing processor-executable instructions; wherein the processor implements the steps of the method as described in any one of claims 1-2 by executing the executable instructions.
5. A computer-readable storage medium, characterized in that, It stores computer instructions that, when executed by a processor, implement the steps of the method as described in any one of claims 1-2.
Citation Information
Patent Citations
Method and system for real-time protection of privacy
CN108197507A
Privacy protection method, terminal and computer readable storage medium
CN110990902A
Distributed terminal entity identity identification method and system based on multi-dimensional attributes
CN118827141A