Data processing method, electronic device, and readable medium
By detecting and restricting clipboard operations in smart terminal devices, only copy content is sent to authorized applications, and private information is desensitized, the problem of copy content leakage is solved, ensuring the security of user information and the smoothness of application.
Patent Information
- Application Number
- PCT/CN2024/079364
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2023-06-16
- Filing Date
- 2024-02-29
- Publication Date
- 2024-12-19
AI Technical Summary
In smart terminal devices, the problem of copy content leakage caused by the clipboard mechanism, especially the user's personal information is read and utilized by non-target applications without authorization, affecting the user's privacy and security.
By detecting the user's copy and paste operations, copy data is only sent to the user-authorized applications or target applications, ensuring that only the user-initiated paste operations or authorized applications can obtain the copied content and remove it when private information is identified in the data Responsive processing and associated storage, restricting access to unauthorized applications.
It effectively avoids non-user authorized applications to obtain copied content, protects users' personal information, ensures information security and application fluency, and improves users' control and management of private information.
Smart Images

Figure CN2024079364_19122024_PF_FP_ABST
Abstract
Description
Data processing method, electronic device and readable medium
[0001] This application claims priority to the Chinese patent application filed with the China Patent Office on June 16, 2023, with application number 202310725353.7 and application name “Data processing method, electronic device and readable medium”. The entire contents of the above application are incorporated into this application by reference. Technical Field
[0002] The present application relates to the field of information security technology, and in particular to a data processing method, an electronic device, and a readable medium. Background Art
[0003] The clipboard is a common tool in smart terminals such as mobile phones and tablets. It is used to transfer and share information between documents or applications, such as transferring user-copied data between documents or applications.
[0004] When users use the clipboard, there's a risk of leaking copied content. For example, if a user copies text in app A and then pastes it into app B, when the user opens app C, app C automatically reads the copied text. However, app C isn't the intended app for the copied content, so its reading of the copied content leaks user information. Furthermore, if the copied content contains the user's personal information, and app C improperly exploits it, it could impact the user's daily life.
[0005] Summary of the Invention
[0006] In order to solve the problem of leakage of copied content, embodiments of the present application provide a data processing method, an electronic device, and a readable medium.
[0007] In a first aspect, an embodiment of the present application provides a data processing method, which is applied to an electronic device. The data processing method includes: detecting a copy operation on first data of a first application, and storing the first data; detecting a paste request for the first data by a second application; and sending the stored first data to the second application in response to the second application satisfying a first condition, the first condition including: the second application is an application pre-authorized by the user.
[0008] It can be understood that the first application can be the copy application or copy source application in the embodiment of the present application; the second application can be the paste application in the embodiment of the present application. The copy operation can be a copy operation in which the user selects the copy content on the touch screen of the electronic device, a copy operation initiated by voice, a copy operation initiated by a cursor (such as a mouse), a copy operation initiated by a gesture, a copy operation controlled by a key, etc. The paste request can be a paste request initiated by the second application when it detects the user's paste operation, or it can be a paste request spontaneously initiated by the second application. The paste operation can be a paste operation in which the user selects the paste content on the touch screen of the electronic device, a paste operation initiated by voice, a paste operation initiated by a cursor (such as a mouse), a paste operation initiated by a gesture, a paste operation controlled by a key, etc.
[0009] It can be understood that the second application can be a paste target application, that is, an application authorized by the user to access the copied content, or an application that detects the paste operation performed by the user; it can also be a paste non-target application, that is, an application that has not been authorized by the user and has not detected the paste operation performed by the user, but requests access to the copied content.
[0010] The embodiment of the present application ensures that only the paste target application or the user-authorized application that detects the user-initiated paste operation can obtain the first data, thereby avoiding the problem of non-user-authorized applications obtaining the first data and causing the leakage of the first data.
[0011] In a possible implementation, corresponding to the second application not satisfying the first condition, the stored first data is not sent to the second application, where the first condition includes: the second application is the application corresponding to the user's paste operation.
[0012] The embodiments of the present application avoid the problem of first data being leaked due to an application not authorized by the user or an application not detecting a paste operation initiated by the user obtaining the first data.
[0013] In a possible implementation, corresponding to the second application not satisfying the first condition and determining that the first data includes private information, the stored first data is not sent to the second application.
[0014] It is understandable that private information may include the user's personal information, such as the user's ID number, bank card number, bank card password, salary and other information.
[0015] The embodiments of the present application avoid the problem of non-user-authorized applications or applications that do not detect the user-initiated paste operation obtaining the user's personal information, thereby causing the user's personal information to be leaked.
[0016] In a possible implementation, corresponding to the second application not satisfying the first condition and the first data not including private information, the stored first data is sent to the second application.
[0017] In some embodiments, when a paste request is received, if the first data does not include private information, the first data is returned regardless of whether the second application meets the first condition, thereby ensuring the security of the user's personal information while ensuring the smoothness of the application.
[0018] In one possible implementation, storing the first data includes: generating a desensitized identifier of the private information in the first data in response to determining that the first data includes private information; and storing the first data in association with the desensitized identifier of the first data.
[0019] For example, if it is determined that the first data includes an ID number, such as Bxxxxxxxxxxxxxxxxx, or that the field of the first data includes an ID number, such as Bxxxxxxxxxxxxxxxxx, a desensitized identifier "ID number" is generated, and the first data is associated with the "ID number" and stored, so that when a request to paste the user's ID number is received, the user's ID number can be sent to the second application in a timely manner.
[0020] In one possible implementation, generating a desensitized identifier for private information in the first data includes: corresponding to the first data including N1 types of private information, generating N2 desensitized identifiers, where N2 is greater than or equal to N1; wherein, if N1 is equal to 1, the N2 desensitized identifiers include the desensitized identifiers corresponding to the N1 types of private information; if N1 is greater than 1, the N2 desensitized identifiers include the desensitized identifiers corresponding to the N1 types of private information and the summarized desensitized identifier of the first data.
[0021] For example, if it is identified that the first data only includes the identity card number "Bxxxxxxxxxxxxxxxxx" or the field of the first data only includes the identity card number "Bxxxxxxxxxxxxxxxxx", a desensitized identifier "identity card number" is generated.
[0022] For example, if it is recognized that the first data includes the identity card number "Bxxxxxxxxxxxxxxxxx" and the bank card number "Cxxxxxxxxxxxxxxx", the desensitized identifiers "identity card number" and "bank card number" are generated, and a summarized desensitized identifier "PII" is generated for the first data.
[0023] In one possible implementation, the first data is associated with the desensitizing identifier of the first data and stored, including: if N2 is equal to 1, the first data is associated with the desensitizing identifier of the first data and stored; if N2 is greater than 1, each type of private information in the first data is associated with the corresponding desensitizing identifier and stored, and the summary desensitizing identifier is associated with the first data and stored.
[0024] For example, the first data only includes the ID number "Bxxxxxxxxxxxxxxxxx", and the desensitized identifier only includes the ID number, then the first data is stored in association with the ID number.
[0025] For example, the first data includes the ID number "Bxxxxxxxxxxxxxxxxx" and the bank card number "Cxxxxxxxxxxxxxxx", the desensitized identifier includes "ID number" and "bank card number", and the summarized desensitized identifier includes "PII", then "Bxxxxxxxxxxxxxxxxx" is stored in association with the "ID number", "Cxxxxxxxxxxxxxxx" is stored in association with the "bank card number", and the first data is stored in association with "PII".
[0026] In one possible implementation, a desensitizing identifier of the first data is displayed; a user's selection operation on the desensitizing identifier of the first data is detected; and the stored first data is sent to the second application, including: sending data corresponding to the desensitizing identifier selected in the selection operation in the stored first data to the second application.
[0027] For example, if it is detected that the user clicks on the ID number option on the interface of the electronic device, the information corresponding to the stored ID number is sent to the second application.
[0028] In a possible implementation, corresponding to the first data satisfying the second condition, the first data and the associated storage information of the first data are deleted.
[0029] In an embodiment of the present application, by deleting the first data and the associated storage information of the first data, the memory space occupied by the first data can be reduced, and the first data can be prevented from being tracked.
[0030] For example, when the first data meets the second condition, "Bxxxxxxxxxxxxxxxxx" and "ID number" are deleted.
[0031] In a possible implementation, the second condition includes at least one of the following: a deletion operation of the user on the first data is detected; and a storage time of the first data meets a time threshold.
[0032] In one possible implementation, the electronic device includes a third application, which includes a write module, a storage module, a detection module, and a read module; wherein the write module sends the first data to the storage module after detecting a copy operation on the first data of the first application; the storage module is used to store the first data; the detection module is used to determine whether the second application meets the first condition in response to a paste request, and obtain the first data from the storage module if the second application meets the first condition, and send the first data to the read module; the read module is used to send the first data to the second application.
[0033] It can be understood that the third application can be the clipboard of the embodiment of the present application.
[0034] In the embodiment of the present application, a detection module in a third application is used to determine the type of the second application that sends the paste request, thereby ensuring that only the paste target application or the user-authorized application that detects the paste operation initiated by the user can obtain the first data. This avoids the problem of non-user-authorized applications or applications that have not detected the paste operation initiated by the user obtaining the first data, thereby preventing the leakage of the first data.
[0035] In a second aspect, an embodiment of the present application provides an electronic device, comprising: a memory for storing instructions executed by one or more processors of the electronic device, and a processor, which is one of the one or more processors of the electronic device, for implementing any data processing method provided by the above-mentioned first aspect and various possible implementations of the above-mentioned first aspect.
[0036] In a third aspect, an embodiment of the present application provides a readable medium having instructions stored thereon. When the instructions are executed on an electronic device, the electronic device implements any one of the data processing methods provided by the first aspect and various possible implementations of the first aspect. BRIEF DESCRIPTION OF THE DRAWINGS
[0037] FIG1 is a schematic diagram showing a clipboard framework according to an embodiment of the present application;
[0038] FIG2 shows a schematic diagram of a data identifier according to an embodiment of the present application;
[0039] FIG3 shows a schematic diagram of a system module of a clipboard according to an embodiment of the present application;
[0040] FIG4 shows an interactive schematic diagram of a data processing method according to an embodiment of the present application;
[0041] FIG5 is a schematic diagram showing changes in the mobile phone interface when a user initiates a copy operation in the mobile phone memo interface 101 but does not initiate a paste operation in the browser application interface 102 according to an embodiment of the present application;
[0042] FIG6 is a diagram illustrating changes in the mobile phone interface when a user initiates a copy operation in the mobile phone's memo interface 101 but does not initiate a paste operation in the browser application interface 102 when the clipboard is in security protection mode, according to an embodiment of the present application;
[0043] FIG7 is a schematic diagram showing a display interface of a browser interface 103 displaying an immediate deletion option 404 according to an embodiment of the present application;
[0044] FIG8 shows a schematic diagram of a display interface for pasting and copying data according to an embodiment of the present application;
[0045] FIG9a is a schematic diagram showing a display interface for pasting an ID card number according to an embodiment of the present application;
[0046] FIG9 b shows a schematic diagram of a display interface for pasting a communication address according to an embodiment of the present application;
[0047] FIG10 is a schematic diagram showing system modules of a clipboard with a security protection mode according to an embodiment of the present application;
[0048] FIG11 is a flow chart showing a method for processing data when a clipboard has security protection mode enabled, according to an embodiment of the present application;
[0049] FIG12 is a flow chart illustrating a method for processing data in which a clipboard has security protection mode enabled and the copied content does not include private information, according to an embodiment of the present application;
[0050] FIG13 is an interactive diagram illustrating a method for processing clipboard data in a security protection mode according to an embodiment of the present application;
[0051] FIG14 is a schematic diagram illustrating an interaction method for processing data when a clipboard is in two states: a security protection mode is enabled and a security protection mode is disabled, according to an embodiment of the present application;
[0052] FIG15 is an interactive diagram illustrating a method for processing data in which a clipboard security protection mode is enabled according to an embodiment of the present application;
[0053] FIG16 is an interactive diagram illustrating a data processing method for storing copied content in association with a desensitized identifier according to an embodiment of the present application;
[0054] FIG17 is an interactive diagram illustrating a data processing method for instantly deleting copied content and corresponding desensitization identifiers stored in a clipboard according to an embodiment of the present application;
[0055] FIG18 is an interactive diagram illustrating a data processing method for selectively pasting and copying content based on multiple desensitization identifiers according to an embodiment of the present application;
[0056] FIG19 is an interactive diagram illustrating a data processing method for selecting and pasting corresponding entire or segmented copied content based on multiple desensitization identifiers according to an embodiment of the present application;
[0057] FIG20 shows a schematic structural diagram of an electronic device 10 according to an embodiment of the present application. DETAILED DESCRIPTION
[0058] The illustrative embodiments of the present application include, but are not limited to, a data processing method, an electronic device, and a readable medium.
[0059] It is understood that the technical solution of the present application is applicable to electronic devices that can provide a clipboard application software operating environment, including, but not limited to, mobile phones, smart watches, tablet computers, in-vehicle devices, laptop computers, ultra-mobile personal computers (UMPCs), netbooks, personal digital assistants (PDAs), etc. The embodiments of the present invention do not impose any restrictions on the specific type of electronic device. The clipboard can be the system clipboard, input method clipboard, or other application software that can provide copy and paste functions of the electronic device.
[0060] The following describes the clipboard framework within the electronic device system framework. As shown in Figure 1, for an Android device, the clipboard framework includes a copying application, a clipboard, and a pasting application. The following describes the copying application, clipboard, and pasting application separately.
[0061] The copy application is used to write copied data to the clipboard. The copy application includes a content provider, which is an interface for sharing data between applications and is used to parse complex data. The copy application can be any application in the electronic device's application software that can use the clipboard, such as a memo application, a chat application, a conferencing application, a shopping application, a music application, etc.
[0062] The clipboard includes a clipboard manager, which is used to perform cut operations, obtain copied data, and write the copied data to the pasting application. The clipboard manager includes a clip description and clipdata.item.
[0063] It's understood that when a copy application copies data, it needs to store the copied data, namely a clipdata object, in the clipboard manager's clip object. Clipdata consists of one or more clipdata.item objects and a clip description object. When a paste application pastes the copied data, it needs to obtain its applicable Multipurpose Internet Mail Extensions (MIME) type from the clip description and obtain the copied data from the clipdata.item or the content provider referenced by the clipdata.item.
[0064] The clip description includes clip metadata, which can be a MIME type array. A clip data item is a data item, which includes test data, uniform resource identifier (URI) data, and intent data. Test data is a text string; URI data is data copied from the content provider to the clipboard; and intent data is data that supports copying application shortcuts.
[0065] The paste application retrieves copied data from the clipboard. The paste application's memory area can store the MIME type and URI of the copied data. The paste application can be any application on the electronic device that can use the clipboard, such as a memo application, chat application, conferencing application, shopping application, music application, and so on.
[0066] In the clipboard framework shown in Figure 1, simple text data can be directly stored in the stack, that is, stored in the clipboard. However, complex data requires both the stack and the heap. The stack stores an address that points to the corresponding data in the heap memory, that is, stored as a reference (such as URI data). This allows the content provider to find the data to be pasted based on the reference and parse the complex data. Simple text data has a relatively simple data structure, such as text strings and text; complex data has a relatively complex data structure, such as arrays, binary stream data, and application resources.
[0067] For the clipboard framework shown in FIG1 , the method for copying data from a copy application to the clipboard may include the following process:
[0068] Get the system clipboard.
[0069] It can be understood that the copy application first obtains a handle to the clipboard manager object to create a clip object.
[0070] Copies data to a new clip object (clip).
[0071] It can be understood that the copy application copies the copied data, ie, the clip data, into the created clip object.
[0072] (3) Place the new clip object (clip) on the clipboard (clipboard).
[0073] It can be understood that the copy application stores the created clip object in the clipboard.
[0074] (4) Add personal content to the clipboard (settings allow copying of personal content).
[0075] It is understandable that the copy application can set sensitive data, such as personal content, to be accessible, and store the information that the personal content can be accessed in the clip description, and then store the clip description in the clipboard.
[0076] The copied data that does not include personal content can be identified by the identifier a in Figure 2. The copied data that includes personal content, such as "my password", can be identified by the identifier b in Figure 2.
[0077] For the clipboard framework shown in FIG1 , the method for pasting copied data from the clipboard by a pasting application may include the following process:
[0078] (5) Get the system clipboard.
[0079] It can be understood that the pasting application can obtain the clipboard manager object through corresponding code.
[0080] (6) Copy data from the clipboard (generally only the most recently copied data is obtained).
[0081] It can be understood that the pasting application can obtain the clipping data.item to obtain the copied data through the clipping data.item.
[0082] (7) Get the clipboard as text.
[0083] It is understandable that the paste application can paste the obtained copied data as text.
[0084] The following describes the system modules of the clipboard (ie, the clipboard shown in FIG. 1 ) in conjunction with FIG. 3 .
[0085] As shown in Figure 3, the clipboard includes a writing module, a storage module, a reading module and a display module. The functions of the writing module, the storage module, the reading module and the display module are first introduced below.
[0086] The writing module is used to obtain the copied or clipped content copied by the user in the copy source application window (such as the application window of the chat application) of the copy source application, that is, to obtain the input information of the data source window.
[0087] The storage module is used to store the input information of the data source window sent by the write module, and send the input information of the data source window to the display module or the read module.
[0088] The readout module is used to output information corresponding to the paste operation to the paste target application window corresponding to the paste operation when detecting that the user initiates a paste operation in the paste target application window (such as the application window of the shopping application).
[0089] The display module is used to receive the user's operation on the clipboard and display the copied or cut content stored in the storage module.
[0090] The following describes the processing process of detecting a copy operation or a paste operation on the clipboard based on the above modules.
[0091] As shown in Figure 3, it can be understood that when a user initiates a copy operation in the copy source application window of the electronic device, the clipboard write module obtains the copy or cut content entered by the user in the copy source application window and stores the copied or cut content in the clipboard storage module. When the read module receives a paste operation initiated by the paste target application window of the paste target application, it outputs the copy or cut content corresponding to the paste operation to the paste target application window. When the storage module receives a paste request sent by the paste non-target application window of the paste non-target application without user authorization to access the clipboard, it outputs the copy or cut content corresponding to the paste operation. That is, even without user authorization or without user initiation of the paste operation, the paste non-target application can obtain the copy or cut content stored in the clipboard through the storage module.
[0092] Taking Figure 4 as an example, the following describes in detail the method for a user to copy data from a copy source application (i.e., a copy application) of an electronic device to a paste target application (i.e., a paste application). The electronic device includes an operating system and an application layer; the operating system includes a clipboard, and the application layer includes a copy source application, a paste target application, and a paste non-target application. The copy source application is an application that detects a copy operation initiated by the user (such as a chat application); the paste target application is an application that detects a paste operation initiated by the user (such as a shopping application); and the paste non-target application is an application that is not opened or authorized by the user, or an application that does not detect a paste operation initiated by the user. In some embodiments, the application layer can be incorporated into the operating system, that is, the operating system also includes an application layer, which is not limited here.
[0093] 401: The user initiates a copy operation to the copy source application.
[0094] It is understandable that the copy source application can be any application in the application software that can use the clipboard, such as a memo application, a chat application, a conference application, a shopping application, a music application, etc.
[0095] In an embodiment of the present application, the copy operation initiated by the user can be a copy operation selected by the user on the touch screen of the electronic device, a copy operation initiated by voice, a copy operation initiated by a cursor (such as a mouse), a copy operation initiated by a gesture, a copy operation controlled by a button, etc.
[0096] 402: The source application writes the copied content to the clipboard.
[0097] For example, if the copy source application is a memo application, the memo application writes the copied content (such as the ID card number "Bxxxxxxxxxxxxxxxxx") to the clipboard.
[0098] 403: The clipboard stores the copied content.
[0099] 404: The user initiates a paste operation on the target application.
[0100] In an embodiment of the present application, the paste operation initiated by the user can be a paste operation in which the user selects the paste content on the touch screen of the electronic device, a paste operation initiated by voice, a paste operation initiated by a cursor (such as a mouse), a paste operation initiated by a gesture, a paste operation controlled by a button, etc.
[0101] For example, a user initiates a paste operation in the search bar of a browser application, such as long pressing the search bar, to paste the copied content in the clipboard.
[0102] The method for pasting the copied content on the clipboard is described below through steps 405 to 410. The method for pasting when the user initiates a paste operation in the paste target application is described below first in conjunction with steps 405 to 407.
[0103] 405: The target application reads the copied content from the clipboard under user triggering.
[0104] It is understood that a user trigger may refer to a user's paste operation. The user paste operation detected by the paste target application may be a paste operation in which the user selects to paste content on the touch screen of the electronic device, a paste operation initiated by voice, a paste operation initiated by a cursor (such as a mouse), a paste operation initiated by a gesture, a paste operation controlled by a key, etc. When the paste target application detects the user trigger, it may send a request to the clipboard to read the copied content.
[0105] 406: The clipboard returns the copied content to the paste target application.
[0106] 407: The target application pastes the copied content into the input box.
[0107] The following describes a method for initiating a paste operation by a non-target application without user triggering, in conjunction with steps 408 - 410 .
[0108] 408: Paste Non-target application reads copied content from the clipboard without user triggering.
[0109] 409: The clipboard returns the copied content to the non-target application.
[0110] 410: Paste non-target application to obtain copied content.
[0111] For example, as shown in interface a in FIG5 , after the user selects the ID number "Bxxxxxxxxxxxxxxxxx" in the memo interface 101 of the mobile phone and clicks the copy option 201, the clipboard obtains and stores "Bxxxxxxxxxxxxxxxxx". As shown in interface b in FIG5 , when the user opens the browser application and there is no user operation (including paste operation), the browser application interface 102 of the mobile phone will pop up a window to prompt that the browser application has read the clipboard information 202. When the user clicks the input box 203 of the browser application interface 102, the browser application interface 103 is displayed as shown in interface c in FIG5 . The browser application interface 103 displays the "Bxxxxxxxxxxxxxxxxx" read from the clipboard by the browser application by searching the Bxxxxxxxxxxxxxxxxx control 204; and displays the "Bxxxxxxxxxxxxxxxxx" stored in the clipboard by clicking to paste the Bxxxxxxxxxxxxxxxxx control 205. The user can paste Bxxxxxxxxxxxxxxxxx by clicking the search Bxxxxxxxxxxxxxxxxx control 204 or clicking the paste Bxxxxxxxxxxxxxxxxx control 205. However, the browser application is not the paste target application for the user to paste Bxxxxxxxxxxxxxxxxxxxx.
[0112] The above analysis shows that the content copied by users to the clipboard can be freely accessed by all applications, posing a high risk of data misuse. Furthermore, because the clipboard records the user's purely local input behavior, private information, such as personal information, frequently appears there, posing a high risk of information leakage.
[0113] In order to solve the problem of leakage of copied content, an embodiment of the present application provides a data processing method, which includes: the user can customize the settings to allow applications to access the copied data (or copied content) stored in the clipboard, such as authorizing applications that can access the copied data stored in the clipboard in the system's settings application. When the clipboard obtains a paste request, it is determined whether the pasting application that sends the paste request is a user-authorized application or whether it is the paste target application corresponding to the paste operation performed by the user. If it is determined that the pasting application is neither a user-authorized application nor a paste target application, the copied data corresponding to the paste request is not returned to the pasting application. If it is determined that the pasting application is a user-authorized application or a paste target application, the copied data corresponding to the paste request is returned to the pasting application.
[0114] The following describes a scenario in which a browser application (paste application) requests to read the clipboard, taking the case where the browser application is neither a user-authorized application nor a paste target application as an example.
[0115] For example, as shown in interface a of FIG6 , after a user selects the ID number "Bxxxxxxxxxxxxxxxxx" in the mobile phone's memo interface 101 and clicks the copy option 401, the clipboard stores "Bxxxxxxxxxxxxxxxxx". As shown in interface b of FIG6 , when the user enters the browser application interface 102, the browser application cannot read Bxxxxxxxxxxxxxxxxx stored in the clipboard, and therefore the browser application reading the clipboard information 202 shown in interface b of FIG5 is not displayed.
[0116] In this way, only the paste target application where the user initiates the paste operation or the user-authorized application can obtain the copied data, avoiding the problem of unauthorized applications or applications that do not detect the user-initiated paste operation obtaining the copied data, causing the leakage of copied data, such as user personal information.
[0117] In some embodiments, it is possible to first determine whether the copied data stored in the clipboard includes private information. If the copied data does not include the user's private information, there is no need to determine the type of pasting application. That is, regardless of the type of pasting application, the copied data corresponding to the paste request is returned. If the copied data does include the user's private information, the copied data corresponding to the paste request is returned only to the pasting application if the pasting application is a user-authorized application or the paste target application. Thus, when the clipboard receives a paste request, the type of pasting application is only determined if the copied data includes private information. This avoids determining the type of pasting application for every paste request, ensuring the security of the user's personal information while ensuring the smooth operation of the application.
[0118] For example, when the clipboard receives a paste request, if it is determined that the most recently copied data stored on the clipboard includes private information (such as an ID number), the type of the paste application that sent the paste request is determined, and based on the type of the paste application, a decision is made as to whether to send the copied data corresponding to the paste request. If it is determined that the most recently copied data stored on the clipboard does not include private information, the copied data corresponding to the paste request is returned to the paste application.
[0119] In some embodiments, the type of pasting application may be determined first, and then whether the copied data stored in the clipboard includes private information. Specifically, the type of pasting application is determined first. If the pasting application is determined to be a user-authorized application or a paste target application, the copied data corresponding to the paste request is returned to the pasting application. If the pasting application is determined to be neither a user-authorized application nor a paste target application, the copied data stored in the clipboard is determined to include private information. Based on whether the copied data stored in the clipboard includes private information, a determination is made as to whether the copied data corresponding to the paste request is sent.
[0120] For example, when the clipboard receives a paste request, if it is determined that the pasting application is a user-authorized application or a paste target application, the copied data corresponding to the paste request is returned to the pasting application. If it is determined that the pasting application is neither a user-authorized application nor a paste target application, it is determined whether the copied data stored in the clipboard includes private information. If it is determined that the copied data corresponding to the paste request includes the user's private information, such as the user's ID number or bank card number, the copied data corresponding to the paste request is not returned to the pasting application. If it is determined that the copied data corresponding to the paste request does not include the user's private information, the copied data corresponding to the paste request is returned to the pasting application.
[0121] In some embodiments, after the copied data is pasted into the input box corresponding to the paste request, the user can click the immediate delete option to delete the corresponding copied data stored in the clipboard, thereby reducing the memory space occupied by the clipboard and preventing historical data from being tracked.
[0122] 7 , after the copied data “Bxxxxxxxxxxxxxxxxx” is pasted into the input box 403, the browser interface 103 displays a delete option 404. When it is detected that the user clicks the yes option 405, the ID card number “Bxxxxxxxxxxxxxxxxx” stored in the clipboard is deleted.
[0123] In some embodiments, when the time taken for the copied data to be pasted into the input box corresponding to the paste request meets a time threshold, the corresponding copied data stored in the clipboard is deleted.
[0124] In some embodiments, when the time for which the copied data is stored in the clipboard meets a time threshold, the copied data stored in the clipboard is deleted.
[0125] In an embodiment of the present application, when the clipboard receives a copy request, the copy data corresponding to the copy request is obtained and the copy data is identified. When it is identified that the copied data includes private information, such as when the user's ID number or bank card number is identified, a desensitization identifier corresponding to the private information in the copied data is generated, and the copied data is associated with the desensitization identifier and stored. The desensitization identifier can be represented in the form of metadata, data type, copy sequence number, desensitization mask, identifier, etc., either alone or in combination.
[0126] It is understood that the number of desensitized identifiers for the copied data depends on the number of types of private information in the copied data. For example, if it is recognized that the copied data contains only one piece of private information, such as the user's ID card number, a desensitized identifier "ID card number" is generated, and the copied data is associated with "ID card number" and stored so that when a request to paste the user's ID card number is received, the user's ID card number can be promptly returned.
[0127] In some embodiments, when the copied data is identified as one or more paragraphs of text and the copied data includes multiple private messages, a corresponding desensitizing identifier is generated for each private message in the copied data, and each private message in the copied data is associated with the corresponding desensitizing identifier and stored.
[0128] For example, if it is recognized that the copied data includes the ID card number "Bxxxxxxxxxxxxxxxxx" or the ID card number "Bxxxxxxxxxxxxxxxxx" is included in a field of the copied data, a desensitized identifier "ID card number" is generated. If it is recognized that the copied data also includes the bank card number "Cxxxxxxxxxxxxxxx" or the bank card number "Cxxxxxxxxxxxxxxx" is included in a field of the copied data, a desensitized identifier "Bank card number (Bank card)" is generated. The ID card number "Bxxxxxxxxxxxxxxxxx" is associated with the "ID card number" and the bank card number "Cxxxxxxxxxxxxxxx" is associated with the "Bank card number".
[0129] In some embodiments, when the copied data is identified as one or more paragraphs of text and includes multiple pieces of private information, a corresponding desensitization identifier can be generated for each piece of private information in the copied data, and a summary desensitization identifier can be generated for the copied data. The copied data is stored in association with the summary desensitization identifier, and each piece of private information in the copied data is stored in association with the corresponding desensitization identifier.
[0130] For example, if the copied data is identified as including the ID card number "Bxxxxxxxxxxxxxxxxx" or a field in the copied data includes the ID card number "Bxxxxxxxxxxxxxxxxx", a desensitized identifier "ID card number" is generated. If the copied data is identified as also including the bank card number "Cxxxxxxxxxxxxxxx" or a field in the copied data includes the bank card number "Cxxxxxxxxxxxxxxx", a desensitized identifier "Bank card number" is generated, and a summarized desensitized identifier "PII" is generated for the copied data. The ID card number "Bxxxxxxxxxxxxxxxxx" is associated with "ID card number" for storage, the bank card number "Cxxxxxxxxxxxxxxx" is associated with "bank card number", and the copied data is associated with "PII" for storage.
[0131] In an embodiment of the present application, when a user initiates a paste request in the paste application interface of an electronic device, the paste application interface can also display at least one desensitizing identifier of the copied data stored in the clipboard, so that the user can paste the corresponding copied data based on the desensitizing identifier.
[0132] The following takes the pasting application as the pasting target application, and the copied data stored in the clipboard has a desensitizing identifier. For example, if the copied data is the ID number "Bxxxxxxxxxxxxxxxxx", and the desensitizing identifier is "ID number", as an example, the method of returning the copied data corresponding to the paste request to the pasting application is introduced.
[0133] As shown in FIG8 , when a user initiates a paste operation in input box 402 of browser application interface 103 (e.g., long pressing input box 402), browser application interface 103 displays a search ID number option 403 generated by the browser application and a click-to-paste ID number option 404 generated by the clipboard. The user can click the search ID number option 403 or the paste ID number option 404 to paste "Bxxxxxxxxxxxxxxxxx" stored in the clipboard into input box 402.
[0134] The following describes a method for returning the copied data corresponding to the paste request to the pasting application, taking the case where the copied data stored in the clipboard has multiple content identifiers and the pasting application is the pasting target application as an example.
[0135] For example, the copied data stored in the clipboard is a paragraph of text, and the copied data includes the user's name, ID number, mobile phone number, email address, etc. The desensitized identifier corresponding to the text content includes name, ID number, mobile phone number, email address, etc. As shown in Figure 9a, when the user clicks the input box 161 corresponding to the ID number* on the mobile phone information filling page 160 and initiates a paste operation (such as long pressing the input box 161), the mobile phone information filling page 160 can display a paste option 162 for the user to select the paste content. When the user clicks the ID number option 163, the ID number stored in the clipboard is written to the input box 161 corresponding to the ID number*.
[0136] For example, the copied data stored in the clipboard is a paragraph of text, including the user's name, mobile phone number, mailing address, company name, etc. The desensitized identifier corresponding to the text content includes the name, mobile phone number, mailing address, company name, etc. As shown in Figure 9b, after the user clicks the input box 171 corresponding to the detailed address on the mobile phone's express information filling page 170 and initiates a paste operation (such as long pressing the input box 171), the mobile phone's express information filling page 170 may display a "Paste after selection" option 172. When the user clicks the mailing address option 173, the mailing address stored in the clipboard is written to the input box 171 corresponding to the detailed address.
[0137] In this way, users can paste the corresponding copied data to the target location according to actual needs, which improves the user experience.
[0138] As shown in Figure 10, Figure 10 shows a schematic diagram of the architecture of the clipboard in the electronic device provided by an embodiment of the present application. The system architecture shown in Figure 10 includes multiple functional units. The difference from the system architecture shown in Figure 3 above is that a configuration module, an identification module, a desensitization module, and a detection module are newly added. The connection relationship between the modules is shown in Figure 10. The functions of the newly added modules are first introduced below.
[0139] The configuration module is used to receive user personalized settings. For example, it receives a user's switch instruction and determines whether the clipboard runs in a security protection mode according to the switch instruction; receives a user's trust instruction and determines which applications the user authorizes to access copied content according to the trust instruction; and receives a user's scheduled deletion instruction and deletes the copied content stored in the clipboard according to the scheduled deletion instruction.
[0140] The identification module is used to identify the sensitive key fields of the copied content sent by the storage module, and divide the copied content sent by the storage module according to the sensitive key fields.
[0141] The desensitizing module is used to desensitize the sensitive key fields of the copied content sent by the identification module, generate a corresponding desensitizing identifier, and send the desensitizing identifier and the copied content to the storage module.
[0142] The detection module is used to detect whether the paste request is sent by a user-authorized application or a paste target application; detect the copy source application of the copied content obtained by the writing module; detect whether the pasting application is the paste target application; or detect whether the pasting application is a paste non-target application.
[0143] In the embodiment of the present application, when the detection module determines that the pasting application is a non-target application, the reading module does not output the copied content, that is, the non-target application window of the non-target application cannot obtain the copied content.
[0144] It can be understood that since the clipboard provided in the embodiment of the present application can desensitize the copied content (i.e., data stream), thereby enhancing the security of the data stream, the data stream in the embodiment of the present application is recorded as a security-protected data stream.
[0145] It can be understood that, corresponding to the system architecture shown in Figure 10, when the user initiates a copy operation in the copy source application window of the copy source application of the electronic device, the writing module of the clipboard obtains the copied or cut content of the copy source application window of the copy source application, and stores the copied or cut content in the storage module of the clipboard. The storage module sends the obtained copy or cut content to the recognition module to identify the sensitive keywords in the copy or cut content through the recognition module, and divides the copy or cut content, and then sends the divided copy or cut content to the desensitization module. The desensitization module desensitizes the divided copy or cut content and generates a corresponding desensitization identifier, which is then associated and stored in the storage module.
[0146] When the reader module receives a paste request, if the detection module determines that the pasting application is the target application or a user-authorized application, the copied content is returned. If the detection module determines that the pasting application is a non-target application, the copied content is not returned. This ensures that non-target applications cannot access the copied content stored in the clipboard through the reader module.
[0147] The data processing method provided in the embodiment of the present application is described in detail below. The data processing method of the embodiment of the present application is applied to an electronic device. FIG11 shows a schematic diagram of a data processing method of the embodiment of the present application. The data processing method includes:
[0148] 1101: A copy operation was detected.
[0149] In an embodiment of the present application, the copy operation detected by the clipboard can be a copy operation in which the user selects to copy content on the touch screen of the electronic device, a copy operation initiated by voice, a copy operation initiated by a cursor (such as a mouse), a copy operation initiated by a gesture, a copy operation controlled by a button, etc.
[0150] 1102: Identify whether the copied content corresponding to the copy operation contains private information. If the judgment result is yes, go to 1103: Generate a desensitized identifier for the copied content and store the copied content in association with the desensitized identifier; if the judgment result is no, go to 1104: Detect a paste request.
[0151] In an embodiment of the present application, the clipboard writing module obtains the copied content corresponding to the copy operation and stores the copied content in the clipboard storage module. The storage module sends the obtained copied content to the recognition module, which uses the recognition module to identify whether the copied content contains private information (i.e., sensitive keywords), such as ID card number, bank card number, bank card password, salary, etc.
[0152] 1103: Generate a desensitized identifier for the copied content, and store the copied content in association with the desensitized identifier.
[0153] In an embodiment of the present application, if the recognition module identifies private information (i.e., sensitive keywords) in the copied content, the copied content is divided and then sent to the desensitization module. The desensitization module desensitizes the divided copied content and generates a corresponding desensitization identifier, which is then associated and stored in the storage module.
[0154] For example, when it is recognized that the copied content includes private information, such as the user's ID number or bank card number, a desensitizing identifier corresponding to the private information in the copied content is generated, and the copied content is associated with the desensitizing identifier and stored.
[0155] For example, if it is recognized that the copied content includes the user's ID number, a desensitized identifier "ID number" is generated, and the copied content is associated with the "ID number" and stored, so that when a request to paste the user's ID number is received, the user's ID number can be returned in a timely manner.
[0156] In some embodiments, when the copied content is identified as one or more paragraphs of text, and the copied content includes multiple private messages, a corresponding desensitizing identifier is generated for each private message in the copied content, and each private message in the copied content is associated with the corresponding desensitizing identifier and stored.
[0157] For example, if the copied content is identified as including the ID card number "Bxxxxxxxxxxxxxxxxx" or the ID card number "Bxxxxxxxxxxxxxxxxx" is included in a field of the copied content, a desensitized identifier "ID card number" is generated. If the copied content is identified as also including the bank card number "Cxxxxxxxxxxxxxxx" or the bank card number "Cxxxxxxxxxxxxxxx" is included in a field of the copied content, a desensitized identifier "Bank card number" is generated. The ID card number "Bxxxxxxxxxxxxxxxxx" is associated and stored with the "ID card number", and the bank card number "Cxxxxxxxxxxxxxxx" is associated and stored with the "Bank card number".
[0158] In some embodiments, when the copied content is identified as one or more paragraphs of text and includes multiple pieces of private information, a corresponding desensitization identifier is generated for each piece of private information in the copied content, and a summary desensitization identifier is generated for the copied content. The copied content is stored in association with the summary desensitization identifier, and each piece of private information in the copied content is stored in association with the corresponding desensitization identifier.
[0159] For example, if the copied content is identified as including the ID card number "Bxxxxxxxxxxxxxxxxx" or the ID card number "Bxxxxxxxxxxxxxxxxx" is included in a field of the copied content, a desensitized identifier "ID card number" is generated. If the copied content is identified as also including the bank card number "Cxxxxxxxxxxxxxxx" or the bank card number "Cxxxxxxxxxxxxxxx" is included in a field of the copied content, a desensitized identifier "Bank card number" is generated, and a summarized desensitized identifier "PII" is generated for the copied content. The ID card number "Bxxxxxxxxxxxxxxxxx" is associated with "ID card number" for storage, the bank card number "Cxxxxxxxxxxxxxxx" is associated with "bank card number" for storage, and the copied content is associated with "PII" for storage.
[0160] In an embodiment of the present application, when it is identified that the copied content written to the clipboard contains private information, a desensitizing identifier corresponding to the private information contained in the copied content is generated, and the copied content is associated with the desensitizing identifier and stored, so that the copied content has controlled paste protection.
[0161] 1104: A paste request was detected.
[0162] In an embodiment of the present application, the paste request detected by the clipboard may include a paste request initiated by the paste target application detecting a paste operation initiated by the user. The paste operation may be a paste operation in which the user selects the paste content on the touch screen of the electronic device, a paste operation initiated by voice, a paste operation initiated by a cursor (such as a mouse), a paste operation initiated by a gesture, a paste operation controlled by a key, etc.
[0163] In an embodiment of the present application, when a user initiates a paste operation in an application interface of an electronic device, the user can select a desensitizing identifier in the application interface of the electronic device to paste the copied content corresponding to the desensitizing identifier. The desensitizing identifier can be represented in the form of metadata, data type, copy sequence number, desensitizing mask, identifier, etc., either singly or in combination.
[0164] The following takes the case where the copied data stored in the clipboard has a desensitized label, such as the copied data is the ID number "Bxxxxxxxxxxxxxxxxx" and the desensitized label is "ID number" as an example to introduce the method for the user to paste the ID number.
[0165] For example, as shown in FIG8 , when a user clicks on input box 402 of browser application interface 103, browser application interface 103 displays a search ID number option 403 generated by the browser application and a click-to-paste ID number option 404 generated by the clipboard. The user can click on search ID number option 403 or click on paste ID number option 404 to paste "Bxxxxxxxxxxxxxxxxx" stored in the clipboard into input box 402.
[0166] The following describes a method for determining that a paste request is sent by a paste application in response to a paste operation performed by a user and sending the copied data corresponding to the paste request to the paste application, taking the case where the copied data stored in the clipboard has multiple content identifiers and the paste application is the paste target application as an example.
[0167] For example, the copied data stored in the clipboard is a paragraph of text, and the copied data includes the user's name, ID number, mobile phone number, email address, etc. The desensitized identifier corresponding to the text content includes name, ID number, mobile phone number, email address, etc. As shown in Figure 9a, when the user clicks the input box 161 corresponding to the ID number* on the mobile phone information filling page 160 and initiates a paste operation (such as long pressing the input box 161), the mobile phone information filling page 160 can display a paste option 162 for the user to select the paste content. When the user clicks the ID number option 163, the ID number stored in the clipboard is written to the input box 161 corresponding to the ID number*.
[0168] For example, the copied data stored in the clipboard is a paragraph of text, including the user's name, mobile phone number, mailing address, company name, etc. The desensitized identifier corresponding to the text content includes the name, mobile phone number, mailing address, company name, etc. As shown in Figure 9b, after the user clicks the input box 171 corresponding to the detailed address on the mobile phone's express information filling page 170 and initiates a paste operation (such as long pressing the input box 171), the mobile phone's express information filling page 170 may display a "Paste after selection" option 172. When the user clicks the mailing address option 173, the mailing address stored in the clipboard is written to the input box 171 corresponding to the detailed address.
[0169] In an embodiment of the present application, the paste request detected by the clipboard can be sent by the paste target application, that is, the application authorized by the user to access the copied content, or the application that detects the paste operation performed by the user; it can also be sent by the paste non-target application, that is, the application that has not been authorized by the user and has not detected the paste operation performed by the user, but requests access to the copied content.
[0170] The user authorizes the application to access the copied content in a manner that includes: the user authorizing application A to access the copied content in a clipboard settings interface (or a system settings interface). When the clipboard configuration module receives the user authorization for application A to access the copied content, it stores the access permission for application A.
[0171] 1105: Determine whether the pasting application that sent the paste request is a user-authorized application or a paste target application. If so, proceed to 1106: Send the copied content corresponding to the paste request to the pasting application; if not, proceed to 1107: Do not send the copied content corresponding to the paste request.
[0172] In some embodiments, when the clipboard receives a paste request, if the pasting application is neither a user-authorized application nor a paste target application, a determination is made as to whether the content copied in response to the paste request includes private information of the user, such as personal information. If the content copied in response to the paste request includes private information of the user, such as the user's ID number or bank card number, the process proceeds to step 1107: the copied content corresponding to the paste request is not sent. If it is determined that the content copied in response to the paste request does not include private information of the user, the process proceeds to step 1106: the copied content corresponding to the paste request is sent to the pasting application.
[0173] 1106: Send the copied content corresponding to the paste request to the paste application.
[0174] 1107: The copied content corresponding to the paste request is not sent.
[0175] In some embodiments, after the copied content is pasted into the input box corresponding to the paste request, the user can click an immediate delete option to delete the corresponding copied content stored in the clipboard.
[0176] 7 , after the copied content “Bxxxxxxxxxxxxxxxxx” is pasted into the input box 403, the browser interface 102 displays an immediate delete option 404. When the user clicks on the yes option 405, the “Bxxxxxxxxxxxxxxxxx” stored in the clipboard is deleted.
[0177] In some embodiments, when the time taken for the copied content to be pasted into the input box corresponding to the paste request meets a time threshold, the corresponding copied content stored in the clipboard is deleted.
[0178] In the embodiment of the present application, only applications initiated or authorized by the user can obtain the copied content, avoiding the problem of unauthorized applications or applications that do not detect the paste request initiated by the user obtaining the copied content, causing leakage of the copied content.
[0179] The following is a detailed description of the data processing method provided in the embodiment of the present application. The difference from the embodiment shown in FIG11 is that the data processing method of the embodiment of the present application introduces a method for processing the copied content that does not include private information. FIG12 shows a schematic diagram of a data processing method of the embodiment of the present application, which includes:
[0180] 1201: A copy operation was detected.
[0181] In an embodiment of the present application, the copy operation detected by the clipboard can be a copy operation in which the user selects to copy content on the touch screen of the electronic device, a copy operation initiated by voice, a copy operation initiated by a cursor (such as a mouse), a copy operation initiated by a gesture, a copy operation controlled by a button, etc.
[0182] 1202: It is recognized that the copied content corresponding to the copy operation does not include private information.
[0183] For example, the copied content is: The four heat treatment steps are annealing, normalizing, quenching, and tempering. The recognition module recognizes that the copied content does not contain private information, so the desensitization module does not generate a desensitization mark for the copied content. In other words, the copied content does not have a desensitization mark.
[0184] It can be understood that when it is recognized that the copied content corresponding to the copy operation includes private information, the above steps 1103-1107 are executed and will not be repeated here.
[0185] 1203: A paste request was detected.
[0186] In an embodiment of the present application, the paste request detected by the clipboard may include a paste request sent by a paste target application when it detects a paste operation initiated by a user. The paste operation may be a paste operation in which the user selects the paste content on the touch screen of the electronic device, a paste operation initiated by voice, a paste operation initiated by a cursor (such as a mouse), a paste operation initiated by a gesture, a paste operation controlled by a key, etc. The paste request may also be sent by a non-target application.
[0187] It can be understood that the copied content requested by the paste request is the most recently copied content stored in the clipboard, i.e., the four heat treatment steps are annealing, normalizing, quenching, and tempering. Since the copied content does not have an anonymized label, the anonymized label will not be displayed on the paste application interface.
[0188] 1204: Send the copied content corresponding to the paste request to the paste application.
[0189] In an embodiment of the present application, since the copied content corresponding to the paste request does not include private information, such as the user's personal information, regardless of whether the paste request is a user-authorized application or a paste target application corresponding to a paste operation performed by the user, the copied content corresponding to the paste request is returned to the pasting application, thereby ensuring the security of the copied content while ensuring the smoothness of the application.
[0190] The data processing method provided in the embodiment of the present application is described in detail below. The data processing method of the embodiment of the present application is applied to electronic devices, and a mobile phone is used as an example for description below. Figure 13 shows an interactive schematic diagram of a data processing method of the embodiment of the present application. The data processing method includes:
[0191] 1301: The user initiates a copy operation to the copy source application.
[0192] It is understandable that the copy source application can be any application in the application software that can use the clipboard, such as a memo application, a chat application, a conference application, a shopping application, a music application, etc.
[0193] In an embodiment of the present application, the copy operation initiated by the user can be a copy operation in which the user selects the copy content on the touch screen of the electronic device, a copy operation initiated by voice, a copy operation initiated by a cursor (such as a mouse), a copy operation initiated by a gesture, a copy operation controlled by a button, etc.
[0194] 1302: The source application writes the copied content to the clipboard.
[0195] For example, if the copy source application is a memo application, the memo application writes the copied content (such as the ID card number "Bxxxxxxxxxxxxxxxxx") to the clipboard.
[0196] 1303: The clipboard recognizes private information in copied content.
[0197] It is understandable that private information can be the user's personal information, such as ID number, bank card number, bank card password, salary and other information.
[0198] 1304: The clipboard generates a desensitized identifier for private information.
[0199] For example, when the copied content is the ID number "Bxxxxxxxxxxxxxxxxx", when the clipboard recognizes that the copied content includes private information, a desensitized identifier for the copied content is generated, such as a desensitized identifier "ID number".
[0200] 1305: The clipboard stores the copied content in association with the identifier.
[0201] For example, the clipboard associates and stores the copied content "Bxxxxxxxxxxxxxxxxx" with the desensitized identifier "ID number".
[0202] 1306: The user initiates a paste operation to the paste target application.
[0203] In an embodiment of the present application, the paste operation initiated by the user can be a paste operation in which the user selects the paste content on the touch screen of the electronic device, a paste operation initiated by voice, a paste operation initiated by a cursor (such as a mouse), a paste operation initiated by a gesture, a paste operation controlled by a button, etc.
[0204] For example, a user initiates a paste operation in a search bar of a browser application to paste the copied content in the clipboard.
[0205] 1307: The target application pastes the copied content according to the identifier.
[0206] It can be understood that the above-mentioned paste target application pastes the copied content according to the identifier, which is equivalent to the paste target application detecting the paste operation initiated by the user or detecting the desensitized identifier selected by the user.
[0207] 1308: The target application requests the clipboard to read the copied content out of the clipboard.
[0208] It can be understood that when the paste target application obtains the paste operation initiated by the user, it requests the clipboard to read the copied content corresponding to the paste operation initiated by the user out of the clipboard.
[0209] 1309: The clipboard allows pasting and returns the specified copied content to the paste target application.
[0210] It can be understood that since the paste operation is initiated by the user, the clipboard permits the paste and returns the requested copied content to the paste target application.
[0211] 1310: The target application pastes the copied content into the input box.
[0212] 1311: The non-target application requests the clipboard to read the copied content out of the clipboard.
[0213] In some embodiments, when the paste non-target application recognizes that the clipboard includes copied content, it requests the clipboard to read the copied content out of the clipboard.
[0214] For example, when the shopping application recognizes that the content copied to the clipboard includes the user's height and weight information, it requests the clipboard to read the copied content out of the clipboard.
[0215] 1312: The clipboard does not allow pasting and returns null or an identifier or error code to the non-target application for pasting.
[0216] For example, the clipboard returns an empty or desensitized identifier "ID number" or "Paste failed" to the non-target application.
[0217] 1313: Paste to non-target application cannot be pasted or can only read the logo.
[0218] In some embodiments, when a non-target application requests that copied content include private information, the non-target application cannot retrieve the requested copied content and can only retrieve an empty or desensitized identifier or error code. When a non-target application requests that copied content include no private information, the requested copied content is returned, thereby ensuring the security of the copied content while maintaining the smoothness of the application.
[0219] In an embodiment of the present application, when the clipboard obtains copied content, it first identifies, desensitizes, and labels the copied content before storing it in an associated manner. When the clipboard receives a paste request, access to the copied content is restricted based on the copied content accessed by the paste request and the type of the initiator of the paste request, ensuring that only applications that detect the user's paste operation or applications authorized by the user can access the copied content.
[0220] The following is a detailed description of the data processing method provided in the embodiment of the present application. The difference from the embodiment shown in Figure 13 is that the data processing method of the embodiment of the present application introduces the data processing method for the clipboard in two states: the security protection mode is turned on and the security protection mode is turned off. Figure 14 shows an interactive schematic diagram of a data processing method in the embodiment of the present application. The data processing method includes:
[0221] 1401: The user initiates a copy operation to the copy source application.
[0222] The method for the user to initiate a copy operation to the copy source application is described in step 1301 of the embodiment shown in FIG. 13 , and will not be described in detail here.
[0223] 1402: The copy source application selects the copy content.
[0224] It can be understood that the copy source application can select corresponding copy content in response to the user's copy operation.
[0225] 1403: The source application writes the copied content to the clipboard.
[0226] The method for the copy source application to write the copied content into the clipboard is described in step 1302 of the embodiment shown in FIG. 13 , which will not be described in detail here.
[0227] The following describes the method of switching (alt) security protection mode in conjunction with steps 1404-1405.
[0228] 1404: The copied contents of the clipboard are controlled for pasting.
[0229] It is understood that when security protection mode is enabled, the copying of content stored in the clipboard is controlled. That is, if the copied content is identified as containing private information, only the target application that detected the user-initiated paste operation or the application authorized by the user can access the corresponding copied content.
[0230] Among them, users can customize whether to enable security protection mode, for example, whether to enable security protection mode in the system's settings application.
[0231] For example, when the security protection mode is turned on, after the user copies data, such as an ID card, bank card, mailing address, or other data containing the user's personal information, when the clipboard recognizes that the copied content includes private information (i.e., the user's personal information), the copied content will be pasted in a controlled manner, that is, the application will be allowed to access and paste the copied data only after authorization or confirmation by the user. In the controlled paste process, the copied content is detected, desensitized, marked, and then stored, and access to the copied content is strictly controlled, such as limiting the ability of only users to trigger paste. The method for detecting, desensitizing, marking, and storing copied content is introduced in the embodiments shown in Figures 15-19 and will not be repeated here.
[0232] 1405: The copied content of the clipboard is pasted without control.
[0233] It is understood that when security protection mode is disabled, the copied content stored in the clipboard is not pasted in a controlled manner. That is, when a paste target application or a paste non-target application requests to read the copied content stored in the clipboard, the copied content is returned regardless of whether the copied content contains private information.
[0234] 1406: The user initiates a paste operation to the target application.
[0235] The method for the user to initiate a paste operation to the paste target application is described in step 1306 of the embodiment shown in FIG13 , and will not be described in detail here.
[0236] The following describes the data processing method when the clipboard switches to controlled paste of copied content, that is, when the clipboard opens the security protection mode, in conjunction with steps 1407-1413.
[0237] 1407: The target application confirms the paste.
[0238] It can be understood that the above-mentioned confirmation of the paste by the paste target application is equivalent to the paste target application receiving a paste operation initiated by the user or detecting a desensitizing identifier selected by the user.
[0239] 1408: The target application requests to read the clipboard.
[0240] It can be understood that when the paste target application detects the paste operation initiated by the user, it requests the clipboard to read the copied content corresponding to the paste operation out of the clipboard.
[0241] 1409: The clipboard allows pasting and returns the copied content to the paste target application.
[0242] It can be understood that since the paste operation is initiated by the user, the clipboard permits the paste and returns the copied content requested by the paste target application to the paste target application.
[0243] 1410: The target application pastes the copied content into the input box.
[0244] 1411: Paste non-target application sends a request to read the clipboard.
[0245] In some embodiments, when the paste non-target application recognizes that there is copied content in the clipboard, the application requests the clipboard to read the copied content out of the clipboard.
[0246] For example, when the financial management application recognizes that there is copied content in the clipboard, such as when the copied content includes the user's salary information, it requests the clipboard to read the copied content out of the clipboard.
[0247] 1412: The clipboard sends a "no paste allowed" message to the non-target application and does not return the copied content.
[0248] For example, the clipboard returns a message to the non-target application indicating that the paste is not allowed and a desensitized label "ID number" or "Paste failed".
[0249] 1413: Paste to non-target application cannot be pasted.
[0250] 1414: The user initiates a paste operation.
[0251] The following describes the pasting method when the clipboard is switched to uncontrolled pasting of copied content, that is, when the clipboard security protection mode is turned off, in conjunction with steps 1415-1421.
[0252] 1415: The target application confirms the paste.
[0253] 1416: The target application requests to read the clipboard.
[0254] 1417: The clipboard returns the copied content to the paste target application.
[0255] It is understood that when security protection mode is turned off, the copied content stored in the clipboard is not pasted in a controlled manner. That is, when the paste target application requests the clipboard to read the copied content stored in the clipboard, the copied content is returned regardless of whether the copied content includes private information.
[0256] 1418: The target application pastes the copied content into the input box.
[0257] 1419: Paste non-target application sends a request to read the clipboard.
[0258] 1420: The clipboard returns the copied content to the non-target application.
[0259] It is understood that when security protection mode is turned off, the copied content stored in the clipboard is not pasted in a controlled manner. That is, when a non-paste target application requests the clipboard to read the copied content stored in the clipboard, the copied content is returned regardless of whether the copied content contains private information.
[0260] 1421: Paste the copied content to a non-target application.
[0261] In an embodiment of the present application, when the clipboard obtains the copied content, it determines whether the copied content is controlled to be pasted based on whether the security protection mode is turned on or not. When the security protection mode is turned on, the copied content stored in the clipboard is controlled to be pasted, and the clipboard restricts access to the copied content based on the copied content accessed by the paste request and the type of pasting application, so that only applications that detect the paste operation performed by the user or the user's authorization can obtain the copied content. When the security protection mode is turned off, the copied content stored in the clipboard is not controlled to be pasted. That is, when a pasting application (such as a paste target application or a paste non-target application) requests the clipboard to read the copied content stored in the clipboard, the copied content is sent to the pasting application regardless of whether the copied content includes private information.
[0262] The following takes the electronic device as a mobile phone and the copied content as an ID card number as an example to explain in detail the data processing method when the copied content is controlled and pasted in the embodiment shown in FIG14. FIG15 shows an interactive schematic diagram of the corresponding data processing method, which includes:
[0263] 1501: The user initiates a copy operation (such as copying an ID number).
[0264] For example, the user copies the ID number "Bxxxxxxxxxxxxxxxxx" in the copy source application (such as a chat application) on the mobile phone.
[0265] 1502: The source application writes the ID number to the clipboard.
[0266] For example, the copy source application (such as a chat application) writes the ID number "Bxxxxxxxxxxxxxxxxx" to the clipboard.
[0267] 1503: The clipboard recognizes the ID number.
[0268] It is understood that when the clipboard is in security protection mode, after obtaining the copied content, such as an ID number, the clipboard writes the copied content and the application identifier of the copy source application into the timestamp association record, and identifies whether the copied content includes private information (i.e., the user's personal information), such as identifying whether the copied content is an ID number or whether the ID number is included in a field of the copied content. If it is detected that the copied content includes private information (i.e., the user's personal information), the copied content will be securely stored, such as encrypted storage.
[0269] 1504: The clipboard stores the ID number securely.
[0270] 1505: The clipboard's ID number is protected from controlled pasting.
[0271] It can be understood that when the clipboard is in security protection mode, if it is recognized that the copied content includes private information (ie, the user's personal information), the copied content will be securely stored and the copied content will be protected by controlled pasting.
[0272] 1506: The user initiates a paste operation (such as pasting an ID number).
[0273] For example, the user opens a target application (such as a shopping application) and initiates an operation to paste the ID card number.
[0274] The following describes a method for switching the clipboard to copy content authorized by the user or pasting the content in conjunction with steps 1507-1510.
[0275] 1507: The target application confirms the paste.
[0276] It can be understood that the above-mentioned confirmation of the paste by the paste target application is equivalent to the paste target application detecting the paste operation initiated by the user or detecting the desensitization mark selected by the user.
[0277] 1508: The target application requests to read the clipboard.
[0278] It can be understood that when the paste target application detects the paste operation initiated by the user, it requests the clipboard to read the copied content corresponding to the paste operation out of the clipboard.
[0279] 1509: The clipboard allows pasting and returns the copied content (ID number) to the paste target application.
[0280] It can be understood that since the paste operation is initiated by the user, the clipboard allows the paste and returns the ID number to the paste target application.
[0281] 1510: The target application pastes the ID card number into the input box.
[0282] The following describes a method for processing data when the paste request is not authorized by the user or the paste request is made in conjunction with steps 1511-1513.
[0283] 1511: Paste non-target application sends a request to read the clipboard.
[0284] In some embodiments, when the paste non-target application recognizes that the clipboard includes copied content, it requests the clipboard to read the copied content out of the clipboard.
[0285] For example, when the financial management application recognizes that there is copied content in the clipboard, it requests the clipboard to read the copied content out of the clipboard.
[0286] 1512: The clipboard sends a "no paste allowed" message to the non-target application and does not return the copied content.
[0287] For example, the clipboard returns a message indicating that the paste is not allowed and a desensitized label "ID number" or "Paste failed" to the non-target application.
[0288] 1513: Pasting to non-target applications cannot be performed.
[0289] In an embodiment of the present application, when the user turns on security protection mode and the clipboard obtains the copied content, the private information in the copied content (i.e., the user's personal information) is identified and pasting permissions are set. That is, the private information can only be read by the paste target application or the application authorized by the user. The copied content read by the non-target application is blank, thereby protecting the security of the copied content and the smooth operation of the application. As a result, the embodiment of the present application avoids the abuse of copied content, cuts off the path for non-target applications to steal the clipboard private information, protects the user's private information from being leaked to applications or objects that the user does not intend to disclose, and safeguards the interests of the user.
[0290] The following takes the electronic device as a mobile phone and the copied content as an ID number as an example to describe in detail the method in which the clipboard stores the copied content in association with the identifier in the embodiment shown in FIG13. The difference between the embodiment shown in FIG16 and the embodiment shown in FIG15 is that, in the process of storing the copied content containing private information, a corresponding desensitizing identifier is generated, and the desensitizing identifier is stored in association with the copied content. FIG16 shows a schematic diagram of a data processing method in an embodiment of the present application, and the data processing method includes:
[0291] 1601: The user initiates a copy operation (such as copying an ID number).
[0292] For example, the user copies the ID number "Bxxxxxxxxxxxxxxxxx" in the copy source application (such as a chat application) on the mobile phone.
[0293] 1602: The source application writes the ID number to the clipboard.
[0294] 1603: The clipboard recognizes the ID number.
[0295] In an embodiment of the present application, when the clipboard is in security protection mode, after obtaining copied content, such as an ID number, the copied content and the application identifier of the copy source application are written into a timestamp association record. Furthermore, it is determined whether the copied content contains private information, such as whether the copied content is an ID number or whether a field in the copied content contains an ID number.
[0296] 1604: The clipboard generates the identifier "ID number".
[0297] In an embodiment of the present application, if it is detected that the copied content includes private information, a desensitizing mark corresponding to the private information is generated.
[0298] For example, if the clipboard recognizes that the copied content includes an ID number, it generates a desensitized identifier "ID number".
[0299] 1605: The clipboard stores the ID number in association with the identifier “ID number”.
[0300] In an embodiment of the present application, when the clipboard is running in security protection mode, when it is recognized that the copied content written to the clipboard contains private information (such as the user's personal information), a desensitizing identifier corresponding to the copied content is generated, and the copied content is associated with the corresponding desensitizing identifier and stored, so that the copied content has controlled paste protection.
[0301] 1606: The user initiates a paste operation (such as pasting an ID number).
[0302] In an embodiment of the present application, when the user opens the paste target application (such as a shopping application) and initiates the paste operation, the user can select the desensitized identifier "ID number" to confirm the pasted content and authorize the paste target application to request to read the clipboard.
[0303] It can be seen from this that the embodiments of the present application provide explicit protection of privacy visualization, and users can perceive private information, operate private information, and experience private information.
[0304] The following describes the method of pasting the ID card number into the pasted target application in conjunction with steps 1607-1610.
[0305] 1607: The target application should select the identifier "ID number" to confirm the paste.
[0306] It can be understood that the above-mentioned paste target application selects the identifier "ID number" to confirm the paste, which is equivalent to the paste target application detecting the user-initiated paste operation with the selected desensitized identifier "ID number".
[0307] 1608: The paste target application requests the clipboard to read the copied content associated with the identifier "ID number" out of the clipboard.
[0308] It can be understood that when the paste target application obtains the user-initiated paste operation with the selected desensitized identifier being "ID number", it requests the clipboard to read the copied content associated with the identifier "ID number" out of the clipboard.
[0309] 1609: The clipboard allows pasting and returns the ID number associated with the identifier "ID number" to the paste target application.
[0310] It can be understood that since the paste operation is initiated by the user, the clipboard allows the paste and returns the ID number associated with the "ID number" to the paste target application.
[0311] 1610: The target application pastes the ID card number into the input box.
[0312] The following describes a method for a non-target application to request the clipboard to read data, in conjunction with steps 1611 - 1613 .
[0313] 1611: Paste non-target application sends a request to read the clipboard.
[0314] In some embodiments, when the paste non-target application recognizes that the clipboard includes copied content, it requests the clipboard to read the copied content out of the clipboard.
[0315] For example, when the shopping application recognizes that the content copied to the clipboard includes the user's salary information, it requests the clipboard to read the copied content out of the clipboard.
[0316] 1612: The clipboard sends a message to the non-target application that the paste is not allowed and returns empty or an identifier or error code.
[0317] For example, the clipboard returns a message indicating that the paste is not allowed and "Paste failed" or a desensitized identifier "ID number" to the non-target application.
[0318] 1613: Pasting to non-target applications fails or only reads the "ID number".
[0319] Based on the embodiment shown in FIG15 , the present embodiment generates a desensitized identifier based on the identification results of the copied content, associates the copied content with the desensitized identifier, and securely stores it, allowing users to access the corresponding copied content based on the desensitized identifier link. Furthermore, the present embodiment implements permission control over access to the copied content, preventing the leakage of the copied content.
[0320] The following describes a data processing method using a mobile phone as an electronic device and an ID card number as the copied content as an example. FIG17 shows a schematic diagram of a data processing method according to an embodiment of the present application. The difference between the embodiment shown in FIG17 and the embodiments shown in FIG15 and FIG16 is that when the user performs a delete operation, the copied content and the corresponding desensitization mark stored in the clipboard are immediately deleted. The data processing method shown in FIG17 includes:
[0321] It can be understood that steps 1701-1713 of the embodiment of the present application correspond one-to-one to steps 1601-1613 of the embodiment shown in Figure 16, and will not be repeated here.
[0322] 1701: The user initiates a copy operation (such as copying an ID number).
[0323] 1702: The source application writes the ID number to the clipboard.
[0324] 1703: The clipboard recognizes the ID number.
[0325] 1704: The clipboard generates the identifier "ID number".
[0326] 1705: The clipboard stores the ID number in association with the identifier “ID number”.
[0327] 1706: The user initiates a paste operation (such as pasting an ID number).
[0328] 1707: The paste target application selects the identifier "ID number" to confirm the paste.
[0329] 1708: The paste target application requests the clipboard to read the copied content associated with the identifier "ID number" out of the clipboard.
[0330] 1709: The clipboard allows pasting and returns the ID number associated with the identifier "ID number" to the paste target application.
[0331] 1710: The target application pastes the ID card number into the input box.
[0332] 1711: Paste non-target application sends a request to read the clipboard.
[0333] 1712: The clipboard sends a message to the non-target application that the paste is not allowed and returns empty or an identifier or error code.
[0334] 1713: Pasting to non-target applications fails or only reads the "ID number".
[0335] 1714: The user initiates a deletion operation (such as deleting an ID number).
[0336] For example, the user clicks on the target application (such as Notepad) on the mobile phone to delete the ID number "Bxxxxxxxxxxxxxxxxx".
[0337] 1715: Paste the target application and select the identifier "ID number" to confirm deletion.
[0338] The above-mentioned paste target application selects the identifier "ID number" to confirm deletion, which is equivalent to the paste target application detecting that the user selects the identifier "ID number" to confirm deletion.
[0339] 1716: The target application requests the clipboard to delete the copied content associated with the identifier "ID number".
[0340] 1717: The clipboard detected that the ID number has been pasted.
[0341] 1718: The clipboard deletes the ID number and the identifier "ID number".
[0342] In some embodiments, when the time taken for the copied data to be pasted into the input box corresponding to the paste request meets a time threshold, the corresponding copied data stored in the clipboard is deleted.
[0343] In some embodiments, when the storage time of the copied content in the clipboard meets a time threshold, the copied content is deleted to reduce system memory and prevent the user's personal information from being leaked.
[0344] In an embodiment of the present application, based on the embodiment shown in FIG16 , a function is provided for instantly deleting copied content on the clipboard. When the clipboard detects that the copied content corresponding to the desensitizing identifier corresponding to the user's deletion operation has been pasted, the copied content corresponding to the desensitizing identifier is deleted together with the desensitizing identifier to avoid the problem of the user forgetting to delete the copied content and causing the copied content to be leaked. This achieves the immediate destruction of the copied content (such as the user's personal information) after use, preventing it from being tracked by non-paste target applications and safeguarding the interests of the user.
[0345] FIG18 is a schematic diagram of a data processing method according to an embodiment of the present application. The difference between the embodiment shown in FIG18 and the above embodiment is that, when the clipboard is in security protection mode, when the embodiment of the present application recognizes that the copied content written to the clipboard contains multiple private information, such as the user's personal information, multiple desensitizing identifiers corresponding to the copied content are generated, and the copied content is associated with the corresponding desensitizing identifiers and stored, so that the copied content has controlled paste protection, and the embodiment of the present application supports selective pasting of multiple desensitizing identifiers. The data processing method shown in FIG18 includes:
[0346] 1801: The user initiates a copy operation (such as copying an ID card number or a bank card number).
[0347] For example, a user copies the ID number "Bxxxxxxxxxxxxxxxxx" and the bank card number "Cxxxxxxxxxxxxxxx" in the copy source application (such as a chat application) on the mobile phone.
[0348] 1802: The source application writes the ID card number and bank card number to the clipboard.
[0349] In an embodiment of the present application, when a user initiates a copy operation, the copy source application will write multiple copy contents (such as ID card number, bank card number) into the clipboard in sequence.
[0350] 1803: The clipboard recognizes the ID card number and bank card number.
[0351] In an embodiment of the present application, when the clipboard is in security protection mode, after obtaining copied content, such as an ID card number and a bank card number, the copied content and the application identifier of the copy source application are written into a timestamp association record. Furthermore, the system identifies whether the copied content contains private information, such as identifying whether the copied content is an ID card number or whether a field in the copied content includes an ID card number; identifying whether the copied content is a bank card number or whether a field in the copied content includes a bank card number.
[0352] 1804: The clipboard generates the identifiers "ID number" and "bank card number".
[0353] In an embodiment of the present application, if it is detected that the copied content includes private information, a desensitizing mark corresponding to the private information is generated.
[0354] For example, if the copied content contains the ID card number "Bxxxxxxxxxxxxxxxxx" or the copied content contains the ID card number "Bxxxxxxxxxxxxxxxxx", a desensitized identifier "ID card number" is generated. If the copied content also contains the bank card number "Cxxxxxxxxxxxxxxx" or the copied content contains the bank card number "Cxxxxxxxxxxxxxxx", a desensitized identifier "Bank card number" is generated. The ID card number "Bxxxxxxxxxxxxxxxxx" is associated and stored with the "ID card number", and the bank card number "Cxxxxxxxxxxxxxxx" is associated and stored with the "Bank card number".
[0355] In some embodiments, the first desensitizing identifier of the copied content may be associated with the copied content, so that the copied content and each desensitizing identifier corresponding to the copied content have controlled paste protection.
[0356] For example, if the copied content includes "Bxxxxxxxxxxxxxxxxx" and "Cxxxxxxxxxxxxxxx", the corresponding desensitized identifiers include "ID number" and "bank card number". Associate the copied content with the "ID number".
[0357] In some embodiments, the copied content may be associated with all desensitized identifiers of the copied content, so that the copied content and each desensitized identifier corresponding to the copied content have controlled paste protection.
[0358] For example, if the copied content includes "Bxxxxxxxxxxxxxxxxx and Cxxxxxxxxxxxxxxx", the corresponding desensitized identifiers of the copied content include "ID number" and "bank card number". Associate the copied content with the "ID number" and "bank card number".
[0359] 1805: The clipboard stores the ID card number in association with the identifier “ID card number” and stores the bank card number in association with the identifier “bank card number”.
[0360] In an embodiment of the present application, when the clipboard is running in security protection mode, when it is recognized that the copied content written to the clipboard contains private information (such as the user's personal information), a desensitizing identifier corresponding to the copied content is generated, and the copied content is associated with the corresponding desensitizing identifier and stored, so that the copied content has controlled paste protection.
[0361] For example, the clipboard stores the identity card number in association with the identifier "identity card number" and stores the bank card number in association with "bank card number".
[0362] 1806: The user initiates a paste operation (such as pasting an ID number).
[0363] The method for the above-mentioned user to initiate a paste operation (such as pasting an ID number) is shown in step 1606 of the embodiment shown in Figure 16, and will not be repeated here.
[0364] In an embodiment of the present application, when the user initiates a paste operation, there are multiple optional paste identifiers (i.e., desensitized identifier items), each paste identifier is associated with the copied content of the corresponding segment, and the corresponding copied content can be pasted by selecting the paste identifier, such as selecting the paste identifier "ID number" to confirm pasting the ID number, thereby authorizing the paste target application to request to read the clipboard.
[0365] The following describes the method for the target application to request to read the ID card number in conjunction with steps 1807-1810.
[0366] 1807: The paste target application selects the identifier "ID number" to confirm the paste.
[0367] It can be understood that the above-mentioned paste target application selects the identifier "ID number" to confirm the paste, which is equivalent to the paste target application receiving the user-initiated paste operation with the selected desensitized identifier "ID number".
[0368] 1808: The paste target application requests the clipboard to read the copied content associated with the identifier "ID number" out of the clipboard.
[0369] It can be understood that when the paste target application obtains the user-initiated paste operation with the selected desensitized identifier being "ID number", it requests the clipboard to read the copied content associated with the identifier "ID number" out of the clipboard.
[0370] 1809: The clipboard allows pasting and returns the ID number associated with the identifier "ID number" to the paste target application.
[0371] It can be understood that since the paste operation is initiated by the user, the clipboard allows the paste and returns the ID number associated with the "ID number" to the paste target application.
[0372] 1810: The target application pastes the ID card number into the input box.
[0373] The following describes a method for pasting a non-target application request to read the clipboard in conjunction with steps 1811-1813.
[0374] 1811: Paste non-target application sends a request to read the clipboard.
[0375] In some embodiments, when the paste non-target application recognizes that the clipboard includes copied content, it requests the clipboard to read the copied content out of the clipboard.
[0376] For example, when the shopping application recognizes that the content copied to the clipboard includes the user's salary information, it requests the clipboard to read the copied content out of the clipboard.
[0377] 1812: The clipboard sends a message to the non-target application that the paste is not allowed and returns empty or an identifier or error code.
[0378] For example, the clipboard returns "Paste failed" and the desensitized identifier "ID number" or null to the non-target application.
[0379] 1813: Pasting to non-target applications fails or only reads the "ID number" or "bank card number".
[0380] Based on the embodiment shown in Figure 16, the embodiment of the present application realizes the identification of multiple copied contents and generates corresponding desensitization identifiers, and can maintain the order of the copied contents and the association between the copied contents and the desensitization identifiers, so that the user can select the copied content that is expected to be pasted from multiple copied contents according to the paste identifier (i.e., the desensitization identifier), thereby improving the user experience. Among them, the embodiment shown in Figure 18 is adapted to the actual application scenarios of copying and pasting such as single-category single-field, multiple fields of the same type optional, multiple categories and multiple fields optional, and multiple copy and merge.
[0381] Figure 19 shows a schematic diagram of a data processing method according to an embodiment of the present application. The difference between the embodiment shown in Figure 19 and the above embodiments is that, when the clipboard is in security protection mode, when it is recognized that the copied content written to the clipboard contains multiple private information, multiple desensitizing identifiers corresponding to the multiple private information contained in the copied content are generated, and a summary desensitizing identifier corresponding to the entire copied content is generated. The copied content is associated with the desensitizing identifier and the summary desensitizing identifier and is stored, so that the copied content has controlled paste protection, and the embodiment of the present application supports the selection and pasting of the corresponding entire or segmented copied content according to multiple desensitizing identifiers. The data processing method shown in Figure 19 includes:
[0382] 1901: The user initiates a copy operation (such as copying an entire paragraph of text).
[0383] For example, a user copies an entire text in a copy source application (such as a chat application) on a mobile phone. For example, a user copies an entire text including an ID card number "Bxxxxxxxxxxxxxxxxx" and a bank card number "Cxxxxxxxxxxxxxxx" in a chat application on a mobile phone.
[0384] 1902: The copy source app writes the text content to the clipboard.
[0385] In an embodiment of the present application, when a user initiates a copy operation, the copy source application will write multiple copy contents (such as ID card number, bank card number) into the clipboard in sequence.
[0386] 1903: The clipboard recognizes that the text contains ID card number and bank card number, and divides the text into whole paragraphs and segments.
[0387] 1904: The clipboard generates the identifiers "PII", "ID number", and "bank card number".
[0388] It can be understood that the identifier "PII" is a summarized desensitized identifier corresponding to the text content, the identifier "ID number" is a desensitized identifier corresponding to the ID number, and the identifier "bank card number" is a desensitized identifier corresponding to the bank card number.
[0389] In an embodiment of the present application, when the clipboard obtains the copied content, the clipboard will perform private information identification (also known as personal information identification) on the copied content and generate a summary desensitization mark and a desensitization mark. For example, if it is identified that the copied content includes private information such as an ID card number or a bank card number, or there are multiple private information such as an ID card number, a bank card number, etc. in the field of the copied content, a desensitization mark "ID card number" and "bank card number" associated with the ID card number and the bank card number are generated, and the ID card number and "ID card number", the bank card number and the "bank card number" are automatically segmented and securely associated and stored in the clipboard, and a summary desensitization mark table "PII" is generated and associated with the entire copied content, so that the entire copied content, ID card number, bank card number and other private information are all protected by controlled paste.
[0390] 1905: The clipboard associates and stores the text with the identifier "PII", the ID number with the identifier "ID number", and the bank card number with the identifier "bank card number".
[0391] 1906: The user initiates a paste operation (such as pasting a whole paragraph of text or an ID number).
[0392] In an embodiment of the present application, when the user opens the paste target application (such as a shopping application) and initiates the paste operation, the user can select the desensitized identifier "PII" or "ID number" to confirm the pasted content and authorize the paste target application to request to read the clipboard.
[0393] It can be seen from this that the embodiments of the present application provide explicit protection of privacy visualization, and users can perceive private information, operate private information, and experience private information.
[0394] The following describes the method for the target application to request to read the clipboard in conjunction with steps 197-1910.
[0395] 1907: The target application selects the identifier "PII" or "ID number" to confirm the paste.
[0396] It can be understood that the above-mentioned paste target application selects the identifier "PII" or "ID number" to confirm the paste, which is equivalent to the paste target application detecting the user-initiated paste operation with the selected identifier being "PII" or "ID number".
[0397] 1908: The paste target application requests the clipboard to read the copied content associated with the identifier "PII" or "ID number" out of the clipboard.
[0398] It can be understood that when the paste target application detects a paste operation initiated by the user with the selected identifier being "PII", it requests that the copied content associated with the identifier "PII" be read out of the clipboard; when the paste target application detects a paste operation initiated by the user with the selected identifier being "ID number", it requests that the copied content associated with the identifier "ID number" be read out of the clipboard.
[0399] 1909: The clipboard allows pasting and returns the text associated with the identifier "PII" or the social security number associated with the identifier "social security number" to the paste target application.
[0400] It can be understood that since the paste operation is initiated by the user, the clipboard allows the paste and returns the text associated with the identifier "PII" or the ID number associated with the identifier "ID number" to the paste target application.
[0401] It is understood that when the target application requests that the copied content associated with the identifier "PII" be read out of the clipboard, the clipboard allows the pasting and returns the text associated with the identifier "PII" to the target application. When the target application requests that the copied content associated with the identifier "ID number" be read out of the clipboard, the clipboard allows the pasting and returns the ID number associated with the identifier "ID number" to the target application.
[0402] 1910: Paste the target application to paste the text or ID number into the input box.
[0403] In some embodiments, after the paste target application obtains the text, it can paste the corresponding data in the text to the corresponding location according to the identifier in the paste target application interface.
[0404] The following describes a method for pasting a non-target application request to read the clipboard in conjunction with steps 1911-1913.
[0405] 1911: Paste non-target application sends a request to read the clipboard.
[0406] In some embodiments, when the paste non-target application recognizes that the clipboard includes copied content, it requests the clipboard to read the copied content out of the clipboard.
[0407] For example, when the shopping application recognizes that the content copied to the clipboard includes the user's salary information, it requests the clipboard to read the copied content out of the clipboard.
[0408] 1912: The clipboard sends a message to the non-target application that paste is not allowed and returns empty or an identifier or error code.
[0409] For example, the clipboard returns "Paste failed" and the desensitized identifier "ID number" or null to the non-target application.
[0410] 1913: Pasting to non-target applications fails or only reads the "ID number" or "bank card number".
[0411] Based on the embodiment shown in FIG15 , this embodiment of the present application adds a new feature of generalized identification of copied content and generates a generalized desensitization identifier. Furthermore, this embodiment of the present application can perform field-based identification on copied content, allowing users to paste the copied content in whole or in sections based on the generalized desensitization identifier and the desensitization identifier, thereby improving the user experience.
[0412] In summary, based on the above solution of this application, the clipboard implements access control on the paste request of the pasting application, avoiding the abuse of user data. In addition, when pasting data, the user can paste the copied content into the corresponding input box according to the desensitization mark, which improves the user experience.
[0413] The hardware structure of each electronic device mentioned in this application is described below using electronic device 10 as an example. As shown in Figure 20, electronic device 10 may include a processor 110, a power module 140, a memory 180, a mobile communication module 130, a wireless communication module 120, a sensor module 190, an audio module 150, a camera 170, an interface module 160, a button 104, and a display screen 105.
[0414] It should be understood that the structure illustrated in the embodiment of the present invention does not constitute a specific limitation on the electronic device 10. In other embodiments of the present application, the electronic device 10 may include more or fewer components than shown, or may combine or separate certain components, or arrange the components differently. The illustrated components may be implemented in hardware, software, or a combination of software and hardware.
[0415] The processor 110 may include one or more processing units, for example, a processing module or processing circuit including a central processing unit (CPU), a graphics processing unit (GPU), a digital signal processing (DSP), a microprocessor (MCU), an artificial intelligence (AI) processor, or a programmable logic device (FPGA). Different processing units may be independent devices or integrated into one or more processors. A storage unit may be provided in the processor 110 for storing instructions and data. In some embodiments, the storage unit in the processor 110 is a cache memory 180.
[0416] It can be understood that the data processing method in the embodiment of the present application can be executed by the processor 110 of the corresponding electronic device. The power module 140 may include a power supply, a power management component, etc. The power supply may be a battery. The power management component is used to manage the charging of the power supply and the supply of power to other modules. In some embodiments, the power management component includes a charging management module and a power management module. The charging management module is used to receive charging input from the charger; the power management module is used to connect the power supply, the charging management module and the processor 110. The power management module receives input from the power supply and / or the charging management module to power the processor 110, the display screen 105, the camera 170, and the wireless communication module 120.
[0417] The mobile communication module 130 may include but is not limited to an antenna, a power amplifier, a filter, a low noise amplifier (LNA), etc. The mobile communication module 130 can provide solutions for wireless communications including 2G / 3G / 4G / 5G applied to the electronic device 10. The mobile communication module 130 can receive electromagnetic waves through the antenna, filter, amplify and other processing on the received electromagnetic waves, and transmit them to the modulation and demodulation processor for demodulation. The mobile communication module 130 can also amplify the signal modulated by the modulation and demodulation processor, and convert it into electromagnetic waves for radiation through the antenna. In some embodiments, at least some functional modules of the mobile communication module 130 can be set in the processor 110. In some embodiments, at least some functional modules of the mobile communication module 130 can be set in the same device as at least some modules of the processor 110.
[0418] The wireless communication module 120 may include an antenna and transmit and receive electromagnetic waves via the antenna. The wireless communication module 120 may provide wireless communication solutions for the electronic device 10, including wireless local area networks (WLAN) (such as wireless fidelity (Wi-Fi) networks), Bluetooth (BT), global navigation satellite system (GNSS), frequency modulation (FM), near field communication (NFC), infrared technology (IR), etc. The electronic device 10 may communicate with the network and other devices through wireless communication technologies.
[0419] It is understood that in the embodiments of the present application, when the electronic device is a receiving device, it can receive video data and audio data from other electronic devices in the recording group, as well as the corresponding recording content tags and time stamp information of each data, through the wireless communication module. Furthermore, when the electronic device is a sending device, it can send video data and audio data, as well as the corresponding recording content tags and time stamp information of each data, to other electronic devices in the recording group through the wireless communication module.
[0420] In some embodiments, the mobile communication module 130 and the wireless communication module 120 of the electronic device 10 may also be located in the same module.
[0421] Display screen 105 is used to display human-computer interaction interfaces, images, videos, etc. Display screen 105 includes a display panel. The display panel can be a liquid crystal display (LCD), an organic light-emitting diode (OLED), an active-matrix organic light-emitting diode (AMOLED), a flexible light-emitting diode (FLED), or a quantum dot light-emitting diode (QLED).
[0422] The sensor module 190 may include a proximity sensor, a pressure sensor, a gyro sensor, an air pressure sensor, a magnetic sensor, an acceleration sensor, a distance sensor, a fingerprint sensor, a temperature sensor, a touch sensor, an ambient light sensor, a bone conduction sensor, and the like.
[0423] The audio module 150 is used to convert digital audio information into an analog audio signal output, or to convert an analog audio input into a digital audio signal. The audio module 150 can also be used to encode and decode audio signals. In some embodiments, the audio module 150 can be set in the processor 110, or some functional modules of the audio module 150 can be set in the processor 110. In some embodiments, the audio module 150 may include a speaker, an earpiece, a microphone, and a headphone jack. The camera 170 is used to capture still images or videos. The object generates an optical image through the lens and projects it onto the photosensitive element. The photosensitive element converts the light signal into an electrical signal, and then passes the electrical signal to the image signal processing (ISP) to be converted into a digital image signal. The electronic device 10 can implement the shooting function through the ISP, camera 170, video codec, graphics processing unit (GPU), display screen 105, and application processor.
[0424] The interface module 160 includes an external memory interface, a USB interface, and a subscriber identification module (SIM) card interface. The external memory interface can be used to connect an external memory card, such as a Micro SD card, to expand the storage capacity of the electronic device 10. The external memory card communicates with the processor 110 via the external memory interface to implement data storage. The universal serial bus interface is used for communication between the electronic device 10 and other electronic devices. The subscriber identification module card interface is used to communicate with a SIM card installed in the electronic device 10, for example, to read a phone number stored in the SIM card or write a phone number to the SIM card.
[0425] In some embodiments, the electronic device 10 further includes buttons 104, a motor, and an indicator. The buttons 104 may include a volume button, an on / off button, and the like. The motor is used to vibrate the electronic device 10, for example, when the user's electronic device 10 is called, to prompt the user to answer the call. The indicator may include a laser pointer, a radio frequency indicator, an LED indicator, and the like.
[0426] The various embodiments of the mechanisms disclosed in this application can be implemented in hardware, software, firmware, or a combination of these implementation methods. The embodiments of the present application can be implemented as a computer program or program code executed on a programmable system, which includes at least one processor, a storage system (including volatile and non-volatile memory and / or storage elements), at least one input device, and at least one output device.
[0427] Program code can be applied to input instructions to perform the functions described herein and generate output information. The output information can be applied to one or more output devices in a known manner. For purposes of this application, a processing system includes any system having a processor such as, for example, a digital signal processor (DSP), a microcontroller, an application specific integrated circuit (ASIC), or a microprocessor.
[0428] Program code can be implemented with a high-level programming language or an object-oriented programming language to communicate with the processing system. Where necessary, program code can also be implemented in assembly language or machine language. In fact, the mechanism described in this application is not limited to the scope of any particular programming language. In either case, the language can be a compiled language or an interpreted language.
[0429] In some cases, the disclosed embodiments may be implemented in hardware, firmware, software, or any combination thereof. The disclosed embodiments may also be implemented as instructions carried or stored on one or more temporary or non-temporary machine-readable (e.g., computer-readable) storage media, which may be read and executed by one or more processors. For example, instructions may be distributed over a network or through other computer-readable media. Therefore, a machine-readable medium may include any mechanism for storing or transmitting information in a machine (e.g., computer) readable form, including but not limited to floppy disks, optical disks, optical discs, read-only memories (compact disc-read only memories, CD-ROMs), magneto-optical disks, read-only memories (ROMs), random access memories (RAMs), erasable programmable read-only memories (EPROMs), electrically erasable programmable read-only memories (EEPROMs), magnetic or optical cards, flash memory, or a tangible machine-readable memory for transmitting information (e.g., carrier waves, infrared signals, digital signals, etc.) using the Internet in electrical, optical, acoustic, or other forms of propagation signals. Accordingly, machine-readable media includes any type of machine-readable media suitable for storing or transmitting electronic instructions or information in a form readable by a machine (eg, a computer).
[0430] In the accompanying drawings, some structural or method features may be shown in a particular arrangement and / or order. However, it should be understood that such a particular arrangement and / or order may not be required. Rather, in some embodiments, these features may be arranged in a manner and / or order different from that shown in the illustrative drawings. In addition, the inclusion of a structural or method feature in a particular figure does not imply that such feature is required in all embodiments, and in some embodiments, such features may not be included or may be combined with other features.
[0431] It should be noted that the units / modules mentioned in the various device embodiments of the present application are all logical units / modules. Physically, a logical unit / module can be a physical unit / module, or a part of a physical unit / module, or can be implemented as a combination of multiple physical units / modules. The physical implementation of these logical units / modules themselves is not the most important. The combination of functions implemented by these logical units / modules is the key to solving the technical problems raised by this application. In addition, in order to highlight the innovative part of this application, the above-mentioned device embodiments of this application do not introduce units / modules that are not closely related to solving the technical problems raised by this application. This does not mean that other units / modules do not exist in the above-mentioned device embodiments.
[0432] It should be noted that in the examples and description of this patent, the terms "comprises", "includes" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device comprising a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. Without further restriction, an element defined by the phrase "comprising a" does not exclude the presence of other identical elements in the process, method, article or device comprising the element. Although the present application has been illustrated and described with reference to certain preferred embodiments of the present application, it should be understood by those skilled in the art that various changes may be made thereto in form and detail without departing from the spirit and scope of the present application.
Claims
1. A data processing method, applied to electronic equipment, It is characterized in that The data processing method comprises: detecting a copy operation on first data of a first application, and storing the first data; detecting a paste request of the second application for the first data; Corresponding to the second application satisfying a first condition, the stored first data is sent to the second application, where the first condition includes: the second application is an application pre-authorized by a user.
2. The data processing method according to claim 1, It is characterized in that Also includes: Corresponding to the second application not satisfying the first condition, the stored first data is not sent to the second application, and the first condition includes: the second application is the application corresponding to the user's paste operation.
3. The data processing method according to claim 1, It is characterized in that Also includes: Corresponding to the second application not satisfying the first condition and determining that the first data includes private information, the stored first data is not sent to the second application.
4. The data processing method according to claim 1, It is characterized in that Also includes: Corresponding to the second application not satisfying the first condition and the first data not including private information, the stored first data is sent to the second application.
5. The data processing method according to claim 1, It is characterized in that The storing the first data comprises: Corresponding to determining that the first data includes private information, generating a desensitized identifier of the private information in the first data; The first data is stored in association with a desensitized identifier of the first data.
6. The data processing method according to claim 5, It is characterized in that The generating a desensitized identifier of the private information in the first data includes: Corresponding to the first data including N1 types of private information, N2 desensitized identifiers are generated, where N2 is greater than or equal to N1; Wherein, if the N1 is equal to 1, the N2 desensitization identifiers include the desensitization identifiers corresponding to the N1 types of private information; If the N1 is greater than 1, the N2 desensitization identifiers include the desensitization identifiers corresponding to the N1 types of private information and the summary desensitization identifier of the first data.
7. The data processing method according to claim 5, It is characterized in that The storing the first data in association with the desensitized identifier of the first data includes: If N2 is equal to 1, the first data is associated with the desensitized identifier of the first data and stored; If N2 is greater than 1, each type of private information in the first data is associated with the corresponding desensitizing identifier and stored, and the generalized desensitizing identifier is associated with the first data and stored.
8. The data processing method according to claim 1, It is characterized in that include: Displaying a desensitized mark of the first data; Detecting a user's selection operation on a desensitized identifier of the first data; and The sending the first stored data to the second application includes: Send data corresponding to the desensitized identifier selected by the selection operation in the first data stored to the second application.
9. The data processing method according to claim 1, It is characterized in that include: Corresponding to the first data satisfying the second condition, the first data and the associated storage information of the first data are deleted.
10. The data processing method according to claim 9, It is characterized in that The second condition includes at least one of the following: Detecting a deletion operation of the first data by a user; The storage time of the first data meets a time threshold.
11. The data processing method according to claim 1, It is characterized in that The electronic device includes a third application, and the third application includes a writing module, a storage module, a detection module, and a reading module; wherein, after detecting a copy operation on the first data of the first application, the writing module sends the first data to the storage module; The storage module is used to store the first data; The detection module is used to determine whether the second application satisfies the first condition in response to the paste request, and obtain the first data from the storage module if the second application satisfies the first condition, and send the first data to the reading module; The reading module is used to send the first data to the second application.
12. An electronic device, It is characterized in that The device comprises: a memory for storing instructions executed by one or more processors of the electronic device, and the processor, which is one of the one or more processors of the electronic device, for executing the data processing method according to any one of claims 1 to 11.
13. A readable medium, It is characterized in that The readable medium stores instructions, which, when executed on an electronic device, enable the electronic device to execute the data processing method according to any one of claims 1 to 11.
Citation Information
Patent Citations
Information processing device, method, and program which administer secret information
CN103518196A
Private data protection method and device
CN113901508A
Shearing plate access control method, electronic equipment and storage medium
CN114945176A
Smart clipboard for secure data transfer
US20190227857A1
