Privacy protection system for open group chat
The privacy protection system, which combines automatic sensitive area identification with manual review, solves the problem of document information leakage in open group chats, realizes end-to-end privacy protection and traceable management, and ensures the security and controllability of document information.
Patent Information
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- JIANGSU QUN YINGLI CULTURE MEDIA CO LTD
- Filing Date
- 2025-12-31
- Publication Date
- 2026-04-17
AI Technical Summary
Existing open group chat systems lack effective privacy desensitization mechanisms, resulting in key information being fully exposed to group members when users upload images of identification documents, posing a high risk of leakage.
It employs a user terminal interaction module, an image acquisition and encrypted upload module, an image privacy processing module, an image security verification module, a group chat administrator review module, and a server storage and management module. Through automatic sensitive area identification, manual selection and supplementation, and mosaic intensity adjustment, combined with manual review, it achieves end-to-end privacy protection.
It achieves complete and irreversible desensitization of key information on documents, reduces transmission risks, builds a full-lifecycle security barrier, supports traceable management of privacy content, and improves system credibility and efficiency in defining responsibilities.
Smart Images
Figure CN121881402A_ABST
Abstract
Description
Technical Field
[0001] This invention belongs to the field of group chat privacy protection technology, specifically referring to an open group chat privacy protection system. Background Technology
[0002] With the rapid development of internet technology, instant messaging platforms and open group chats have been widely used in social networking, recruitment, training, transactions, and various information exchange scenarios. Users often need to upload images of documents containing sensitive personal information, such as ID cards, academic certificates, and professional skill certificates, in group chats for identity verification, qualification certification, or business review. Privacy protection refers to the necessary technical and management safeguards for data that can identify a natural person or reflect important personal information, preventing its illegal acquisition, leakage, alteration, or misuse during collection, transmission, storage, and display.
[0003] However, most existing open group chat systems only have basic image upload and display functions. When users upload images of documents, they usually publish them directly to the group chat in their original form without an effective privacy desensitization mechanism. This results in key information such as document numbers, images, and addresses being completely exposed to unspecified group members, posing a high risk of leakage. Summary of the Invention
[0004] In order to overcome the shortcomings of the prior art, the present invention provides a privacy protection system for open group chat.
[0005] The technical solution adopted in this invention is as follows: including: a user terminal interaction module, an image acquisition and encrypted upload module, an image privacy processing module, an image security verification module, a group chat administrator review module, a server storage and management module, and a group chat display and access control module; The user terminal interaction module is used for group chat users to select and upload images of their ID cards, academic certificates, and professional skills certificates. The image acquisition and encrypted upload module is used to convert the original image into a unified format supported by the system, and compress it while ensuring recognizability, so as to reduce the network transmission load. The image privacy processing module is used to perform mosaic or blurring processing on sensitive information areas in the image to generate a desensitized image; The image security verification module is used to perform compliance checks on the de-identified images; The group chat administrator review module is used to allow users with group chat administrator privileges to manually review de-identified images after the image security verification module has detected and approved them. The server storage and management module is used to encrypt and store approved anonymized images, and prohibits the storage of unanonymized original document images.
[0006] Furthermore, the user and identity management module includes: The user login and identity recognition unit is used to register, log in, and verify the legitimacy of user accounts, and to bind user identity with subsequent upload behavior to ensure that upload behavior is traceable. The image selection unit is used to call up the terminal's photo album, allowing the user to select an existing ID photo as the object to be processed. The document type selection unit is used to mark the document type before uploading the image, so that the system can call the corresponding privacy recognition and review rules according to different document types; The privacy processing preview unit is used to visually preview the desensitization effect after blurring. The upload application submission unit is used to send the de-identified image to the server for review after the user completes privacy processing and preview confirmation, and the image enters the state of awaiting administrator review.
[0007] Furthermore, the image acquisition and encrypted upload module includes: The image format conversion and compression unit is used to convert the original image into a unified format supported by the system, and to compress it while ensuring recognizability, so as to reduce the network transmission load. The image chunking upload unit is used to split large images into multiple data chunks for upload. The transmission encryption unit is used to encrypt data during the image upload process.
[0008] The upload integrity verification unit is used to perform hash comparison on the image data before and after the upload.
[0009] The kernel status marker unit is used to add a pending review status marker to an image after it has been successfully uploaded, in order to distinguish between unreviewed and reviewed images.
[0010] Furthermore, the image privacy processing module includes: The privacy area manual selection unit allows users to manually specify sensitive areas that need privacy protection by smearing or drawing with a box. The sensitive information automatic identification unit is used to automatically identify sensitive information areas such as names, document numbers, images, and dates of birth in documents through image recognition algorithms; The mosaic generation unit is used to perform pixelation and blurring on selected sensitive areas to generate visually unrecognizable desensitized images. The privacy processing intensity adjustment unit is used to adjust the mosaic granularity according to user-preset rules in order to balance privacy and security with image readability. The processing result confirmation and rollback unit is used to support users in confirming, canceling, redoing, or restoring the original image of the privacy processing results to prevent accidental processing.
[0011] Furthermore, the image security verification module includes: The sensitive area omission detection unit is used to detect cases where key sensitive areas of documents are blurred. The original image residual risk detection unit is used to detect the original pixel information in the desensitized image that can be restored by technical means; The privacy irreversible processing verification unit is used to verify that the image privacy processing results meet the security requirements of irreversible recovery. The non-compliant image automatic blocking unit is used to automatically prevent images from entering the administrator review process when they are detected to be non-compliant with privacy protection rules; The violation upload reminder unit is used to provide feedback to the uploading user on the reasons for non-compliance and to prompt them to resubmit after re-processing the privacy settings.
[0012] Furthermore, the group chat administrator approval module includes: The administrator authentication unit is used to verify the group owner's permissions of the current operator, preventing ordinary members from exceeding their authority to perform audits. The "Pending Image Display Unit" is used to centrally display all images in the pending review status according to group chat, uploader, and document type. The desensitization integrity verification unit is used by administrators to manually verify and confirm the desensitized images; The audit operation control unit is used to provide the administrator with an entry point for audit operations; The audit result feedback unit is used to send the administrator's audit results back to the server and user terminals; The audit log recording unit is used to record administrator ID, audit time, and audit conclusion information to achieve accountability and audit management.
[0013] Furthermore, the server storage and management module includes: The image encryption storage unit is used to encrypt and store approved de-identified images, and it is prohibited to store any un-de-identified original document images. The review status associated storage unit is used to associate and store each image with its review status, marking it as pending review, approved, or rejected; The document category label management unit is used to classify and label images of different types of documents for easy retrieval and management later. The image access log unit is used to record the time, user, and terminal information when images are accessed, viewed, or displayed. The image lifecycle management unit is used to automatically delete or manually destroy images according to a preset storage period, reducing the risk of long-term privacy leaks. The data backup and disaster recovery unit is used to perform off-site backup of critical image data and audit logs, and to achieve data recovery in the event of system failure.
[0014] Step A1: After completing account login and identity verification through the user terminal interaction module, the user calls the terminal album to select the ID card and academic certificate images to be uploaded, marks the document type through the document type selection unit, triggers the image acquisition and encrypted upload module, performs format conversion, compression processing and segmented encrypted transmission of the image, uploads it to the server and marks it as pending review, and simultaneously generates a hash value to verify the integrity of the upload; Step A2: The image privacy processing module starts the sensitive information automatic identification unit, which uses image algorithms to locate sensitive areas such as names and ID numbers; it supports users to manually select unidentified areas through the privacy area selection unit, performs mosaic generation and privacy processing intensity adjustment, and after generating a desensitized image, it displays the processing effect to the user through the privacy processing preview unit. The user can confirm, cancel or restore the original image operation, and submit it after confirmation to enter the security verification stage. Step A3: The image security verification module performs triple checks on the desensitized image: the sensitive area omission detection unit scans whether the key areas are complete and blurred; the original image residual risk detection unit checks for recoverable original pixel information; and the privacy irreversible processing verification unit verifies whether the processing result meets the irrecoverable standard. If the detection fails, the violation upload reminder unit provides the specific reason and guides the user to reprocess; if it passes, it enters the administrator review queue. Step A4: The group chat administrator review module first verifies the administrator's identity and permissions to prevent unauthorized operations. The image display unit categorizes the images to be reviewed by group chat, uploader, and document type. The administrator checks the processing effect of sensitive areas frame by frame through the desensitization integrity review unit. After the review operation is performed, the review result is sent back to the server and user terminal. At the same time, the review log recording unit records the administrator ID, time, and conclusion, forming a traceable audit chain. Step A5: The server storage and management module encrypts and stores the approved de-identified images, prohibits the retention of the original un-de-identified images, marks the images as approved by the storage unit associated with the approval status, archives them by document category tag management unit, enables the image lifecycle management unit, automatically deletes expired images according to the preset period, and completes off-site backup through the data backup and disaster recovery unit to ensure data recoverability in failure scenarios; Step A6: The group chat display and access control module displays anonymized images in open group chats based on the administrator's review results and user permission settings. The image access log unit records the viewing time, user, and terminal information to achieve full tracking of access behavior. Step A7: When the system detects unauthorized access or abnormal operation, it automatically triggers the automatic interception function of the image security verification module. At the same time, it sends a violation reminder to the user and guides them to resubmit the image for compliant processing. Administrators can conduct a review and analysis based on the review logs and access logs to optimize the privacy recognition algorithm and review rules, forming a closed-loop optimization mechanism for the entire process of "processing-verification-review-storage-display".
[0015] The beneficial effects achieved by the present invention using the above structure are as follows: The present invention provides a privacy protection system for open group chats, achieving the following beneficial effects: (1) Through a three-level privacy processing mechanism of “automatic sensitive area identification + manual selection and supplementation + mosaic intensity adjustment”, combined with manual review and double verification, the privacy protection of the entire chain from uploading to display is realized, ensuring that the key information of the certificate is completely desensitized and irreversibly restored.
[0016] (2) The image is uploaded in segments, encrypted during transmission and hash integrity verification technology is adopted to reduce the risk of large-size image transmission; the server only stores encrypted and desensitized images and prohibits the retention of original undesensitized images. With the help of lifecycle management, expired data is automatically deleted. Combined with off-site backup and disaster recovery mechanism, a full-cycle security barrier of "transmission-storage-destruction" is constructed.
[0017] (3) Dynamic permission management is achieved through the group chat display and access control module. Combined with the image access log, the viewing time, user and terminal information are recorded to prevent unauthorized dissemination of private content and meet the audit and traceability requirements.
[0018] (4) The user terminal supports privacy processing preview, confirmation and rollback operations, and the process is transparent and controllable; the administrator review module ensures that the review behavior is traceable by identity verification, centralized display of images to be reviewed, review operation records and logs are retained, avoids unauthorized operations, and improves the credibility of the system and the efficiency of responsibility definition. Attached Figure Description
[0019] Figure 1 This is a flowchart of an open group chat privacy protection system proposed in this invention.
[0020] The accompanying drawings are provided to further illustrate the invention and form part of the specification. They are used together with the embodiments of the invention to explain the invention and do not constitute a limitation thereof. Detailed Implementation
[0021] The technical solutions of the present invention will be clearly and completely described below with reference to the embodiments of the present invention. Obviously, the described embodiments are only some embodiments of the present invention, and not all embodiments. Based on the embodiments of the present invention, all other embodiments obtained by those of ordinary skill in the art without creative effort are within the scope of protection of the present invention.
[0022] Example 1: Please see Figure 1 As shown, this embodiment is a privacy protection system for open group chat, comprising a user terminal interaction module, an image acquisition and encrypted upload module, an image privacy processing module, an image security verification module, a group chat administrator review module, a server storage and management module, and a group chat display and access control module; The user terminal interaction module is used for group chat users to select and upload images of their ID cards, academic certificates, and professional skills certificates. The image acquisition and encrypted upload module is used to convert the original image into a unified format supported by the system, and compress it while ensuring recognizability, so as to reduce the network transmission load. The image privacy processing module is used to perform mosaic or blurring processing on sensitive information areas in the image to generate a desensitized image; The image security verification module is used to perform compliance checks on the de-identified images; The group chat administrator review module is used to allow users with group chat administrator privileges to manually review de-identified images after the image security verification module has detected and approved them. The server storage and management module is used to encrypt and store approved anonymized images, and prohibits the storage of unanonymized original document images.
[0023] Example 2: Please see Figure 1 As shown, this embodiment illustrates a method for using an open group chat privacy protection system, including the following steps: Step A1: After completing account login and identity verification through the user terminal interaction module, the user calls the terminal album to select the ID card and academic certificate images to be uploaded, marks the document type through the document type selection unit, triggers the image acquisition and encrypted upload module, performs format conversion, compression processing and segmented encrypted transmission of the image, uploads it to the server and marks it as pending review, and simultaneously generates a hash value to verify the integrity of the upload; Step A2: The image privacy processing module starts the sensitive information automatic identification unit, which uses image algorithms to locate sensitive areas such as names and ID numbers; it supports users to manually select unidentified areas through the privacy area selection unit, performs mosaic generation and privacy processing intensity adjustment, and after generating a desensitized image, it displays the processing effect to the user through the privacy processing preview unit. The user can confirm, cancel or restore the original image operation, and submit it after confirmation to enter the security verification stage. Step A3: The image security verification module performs triple checks on the desensitized image: the sensitive area omission detection unit scans whether the key areas are complete and blurred; the original image residual risk detection unit checks for recoverable original pixel information; and the privacy irreversible processing verification unit verifies whether the processing result meets the irrecoverable standard. If the detection fails, the violation upload reminder unit provides the specific reason and guides the user to reprocess; if it passes, it enters the administrator review queue. Step A4: The group chat administrator review module first verifies the administrator's identity and permissions to prevent unauthorized operations. The image display unit categorizes the images to be reviewed by group chat, uploader, and document type. The administrator checks the processing effect of sensitive areas frame by frame through the desensitization integrity review unit. After the review operation is performed, the review result is sent back to the server and user terminal. At the same time, the review log recording unit records the administrator ID, time, and conclusion, forming a traceable audit chain. Step A5: The server storage and management module encrypts and stores the approved de-identified images, prohibits the retention of the original un-de-identified images, marks the images as approved by the storage unit associated with the approval status, archives them by document category tag management unit, enables the image lifecycle management unit, automatically deletes expired images according to the preset period, and completes off-site backup through the data backup and disaster recovery unit to ensure data recoverability in failure scenarios; Step A6: The group chat display and access control module displays anonymized images in open group chats based on the administrator's review results and user permission settings. The image access log unit records the viewing time, user, and terminal information to achieve full tracking of access behavior. Step A7: When the system detects unauthorized access or abnormal operation, it automatically triggers the automatic interception function of the image security verification module. At the same time, it sends a violation reminder to the user and guides them to resubmit the image for compliant processing. Administrators can conduct a review and analysis based on the review logs and access logs to optimize the privacy recognition algorithm and review rules, forming a closed-loop optimization mechanism for the entire process of "processing-verification-review-storage-display".
[0024] The content display and group chat modules utilize multiple algorithms to enhance the system's intelligence and user experience: 1. The automatic sensitive information identification unit adopts a CNN convolutional neural network + OCR recognition algorithm: (1) Formula for two-dimensional convolution: ; Input image; : Convolution kernel; Feature map output.
[0025] (2) OCR character recognition probability model: (3) ; Used for identification: name, ID number, date of birth.
[0026] 2. Mosaic generation unit pixel block averaging algorithm: Let the size of the mosaic block be... : ; in: : Original pixel value; Each block is uniformly assigned a value. .
[0027] 3. The privacy processing strength adjustment unit adopts a mosaic granularity adaptive algorithm: ; in: : Mosaic tile size; Privacy sensitivity score; : Adjustment coefficient.
[0028] 4. The original image residual risk detection unit adopts the peak signal-to-noise ratio (PSNR) algorithm: ; in: The peak pixel value of the image; This represents the mean square error.
[0029] 5. The privacy-irreversible processing verification unit employs the SSIM algorithm based on structural similarity: ; At that time, it was determined to be irreversible desensitization.
[0030] 6. The sensitive area omission detection unit adopts the target detection IOU comparison algorithm: ; An omission was determined.
[0031] 7. The transmission encryption unit uses the AES symmetric encryption algorithm: ; ; in: Plain text images; : Ciphertext; : Key.
[0032] 8. The upload integrity verification unit uses the SHA-256 hash algorithm: ; Comparison rules: .
[0033] Although embodiments of the invention have been shown and described, it will be understood by those skilled in the art that various changes, modifications, substitutions and alterations can be made to these embodiments without departing from the principles and spirit of the invention, the scope of which is defined by the appended claims and their equivalents.
[0034] The present invention and its embodiments have been described above. This description is not restrictive, and the accompanying drawings are only one embodiment of the present invention; the actual structure is not limited thereto. In conclusion, if those skilled in the art are inspired by this description and design similar structures and embodiments without departing from the spirit of the invention, such designs should fall within the protection scope of the present invention.
Claims
1. A privacy protection system for open group chats, characterized in that, include: The module includes a user terminal interaction module, an image acquisition and encrypted upload module, an image privacy processing module, an image security verification module, a group chat administrator approval module, and a server storage and management module. The user terminal interaction module is used for group chat users to select and upload images of their ID cards, academic certificates, and professional skills certificates. The image acquisition and encrypted upload module is used to convert the original image into a unified format supported by the system, and compress it while ensuring recognizability, so as to reduce the network transmission load. The image privacy processing module is used to perform mosaic or blurring processing on sensitive information areas in the image to generate a desensitized image; The image security verification module is used to perform compliance checks on the de-identified images; The group chat administrator review module is used to allow users with group chat administrator privileges to manually review de-identified images after the image security verification module has detected and approved them. The server storage and management module is used to encrypt and store approved anonymized images, and prohibits the storage of unanonymized original document images.
2. The privacy protection system for open group chat according to claim 1, characterized in that: The user and identity management module includes: The user login and identity recognition unit is used to register, log in, and verify the legitimacy of user accounts, and to bind user identity with subsequent upload behavior to ensure that upload behavior is traceable. The image selection unit is used to call up the terminal's photo album, allowing the user to select an existing ID photo as the object to be processed. The document type selection unit is used to mark the document type before uploading the image, so that the system can call the corresponding privacy recognition and review rules according to different document types; The privacy processing preview unit is used to visually preview the desensitization effect after blurring. The upload application submission unit is used to send the de-identified image to the server for review after the user completes privacy processing and preview confirmation, and the image enters the state of awaiting administrator review.
3. The privacy protection system for open group chat according to claim 2, characterized in that: The image acquisition and encrypted upload module includes: The image format conversion and compression unit is used to convert the original image into a unified format supported by the system, and to compress it while ensuring recognizability, so as to reduce the network transmission load. The image chunking upload unit is used to split large images into multiple data chunks for upload. The transmission encryption unit is used to encrypt data during image upload. The upload integrity verification unit is used to perform hash comparison on the image data before and after the upload. The kernel status marker unit is used to add a pending review status marker to an image after it has been successfully uploaded, in order to distinguish between unreviewed and reviewed images.
4. The privacy protection system for open group chat according to claim 3, characterized in that: The image privacy processing module includes: The privacy area manual selection unit allows users to manually specify sensitive areas that need privacy protection by smearing or drawing with a box. The sensitive information automatic identification unit is used to automatically identify sensitive information areas such as names, document numbers, images, and dates of birth in documents through image recognition algorithms; The mosaic generation unit is used to perform pixelation and blurring on selected sensitive areas to generate visually unrecognizable desensitized images. The privacy processing intensity adjustment unit is used to adjust the mosaic granularity according to user-preset rules in order to balance privacy and security with image readability. The processing result confirmation and rollback unit is used to support users in confirming, canceling, redoing, or restoring the original image of the privacy processing results to prevent accidental processing.
5. The privacy protection system for open group chat according to claim 4, characterized in that: The image security verification module includes: The sensitive area omission detection unit is used to detect cases where key sensitive areas of documents are blurred. The original image residual risk detection unit is used to detect the original pixel information in the desensitized image that can be restored by technical means; The privacy irreversible processing verification unit is used to verify that the image privacy processing results meet the security requirements of irreversible recovery. The non-compliant image automatic blocking unit is used to automatically prevent images from entering the administrator review process when they are detected to be non-compliant with privacy protection rules; The violation upload reminder unit is used to provide feedback to the uploading user on the reasons for non-compliance and to prompt them to resubmit after re-processing the privacy settings.
6. The privacy protection system for open group chat according to claim 5, characterized in that: The group chat administrator approval module includes: The administrator authentication unit is used to verify the group owner's permissions of the current operator, preventing ordinary members from exceeding their authority to perform audits. The "Pending Image Display Unit" is used to centrally display all images in the pending review status according to group chat, uploader, and document type. The desensitization integrity verification unit is used by administrators to manually verify and confirm the desensitized images; The audit operation control unit is used to provide the administrator with an entry point for audit operations; The audit result feedback unit is used to send the administrator's audit results back to the server and user terminals; The audit log recording unit is used to record administrator ID, audit time, and audit conclusion information to achieve accountability and audit management.
7. The privacy protection system for open group chat according to claim 6, characterized in that: The server storage and management module includes: The image encryption storage unit is used to encrypt and store approved de-identified images, and it is prohibited to store any un-de-identified original document images. The review status associated storage unit is used to associate and store each image with its review status, marking it as pending review, approved, or rejected; The document category label management unit is used to classify and label images of different types of documents for easy retrieval and management later. The image access log unit is used to record the time, user, and terminal information when images are accessed, viewed, or displayed. The image lifecycle management unit is used to automatically delete or manually destroy images according to a preset storage period, reducing the risk of long-term privacy leaks. The data backup and disaster recovery unit is used to perform off-site backup of critical image data and audit logs, and to achieve data recovery in the event of system failure.
8. A method for operating an open group chat privacy protection system, characterized in that; Operating the privacy protection system for an open group chat as described in claim 7 mainly includes the following steps: Step A1: After completing account login and identity verification through the user terminal interaction module, the user calls the terminal album to select the ID card and academic certificate images to be uploaded, marks the document type through the document type selection unit, triggers the image acquisition and encrypted upload module, performs format conversion, compression processing and segmented encrypted transmission of the image, uploads it to the server and marks it as pending review, and simultaneously generates a hash value to verify the integrity of the upload; Step A2: The image privacy processing module starts the sensitive information automatic identification unit, which uses image algorithms to locate sensitive areas such as names and ID numbers; it supports users to manually select unidentified areas through the privacy area selection unit, performs mosaic generation and privacy processing intensity adjustment, and after generating a desensitized image, it displays the processing effect to the user through the privacy processing preview unit. The user can confirm, cancel or restore the original image operation, and submit it after confirmation to enter the security verification stage. Step A3: The image security verification module performs triple detection on the desensitized image: the sensitive area omission detection unit scans whether the key area is complete or blurred; The original image residual risk detection unit checks for recoverable original pixel information; the privacy irreversible processing verification unit verifies whether the processing result meets the irrecoverable standard. If the detection fails, the violation upload reminder unit provides the specific reason and guides the user to reprocess; if it passes, it enters the administrator review queue. Step A4: The group chat administrator review module first verifies the administrator's identity and permissions to prevent unauthorized operations. The image display unit categorizes the images to be reviewed by group chat, uploader, and document type. The administrator checks the processing effect of sensitive areas frame by frame through the desensitization integrity review unit. After the review operation is performed, the review result is sent back to the server and user terminal. At the same time, the review log recording unit records the administrator ID, time, and conclusion, forming a traceable audit chain. Step A5: The server storage and management module encrypts and stores the approved de-identified images, prohibits the retention of the original un-de-identified images, marks the images as approved by the storage unit associated with the approval status, archives them by document category tag management unit, enables the image lifecycle management unit, automatically deletes expired images according to the preset period, and completes off-site backup through the data backup and disaster recovery unit to ensure data recoverability in failure scenarios; Step A6: The group chat display and access control module displays anonymized images in open group chats based on the administrator's review results and user permission settings. The image access log unit records the viewing time, user, and terminal information to achieve full tracking of access behavior. Step A7: When the system detects unauthorized access or abnormal operation, it automatically triggers the automatic interception function of the image security verification module. At the same time, it sends a violation reminder to the user and guides them to resubmit the image for compliant processing. Administrators can conduct a review and analysis based on the review logs and access logs to optimize the privacy recognition algorithm and review rules, forming a closed-loop optimization mechanism for the entire process of "processing-verification-review-storage-display".