Privacy policy generation method, electronic device, and computer-readable storage medium

Abstract

A privacy policy generation method, an electronic device, and a computer-readable storage medium, relating to the technical field of terminal privacy security. The privacy policy generation method comprises: performing sensitive behavior scanning on a component object, and recording a target program interface where a sensitive behavior is detected (S10); performing sensitive behavior recognition on the target program interface on the basis of a preset sensitive behavior set, and recording a recognition result (S20); on the basis of the recognition result, determining a privacy policy statement corresponding to the sensitive behavior in the preset sensitive behavior set (S30); and assembling the privacy policy statement on the basis of a preset rule, so as to generate a privacy policy text (S40).

Description

Privacy policy generation method, electronic device and computer readable storage medium

[0001] Related applications

[0002] The present application claims priority to Chinese Patent Application No. 202410810390.2, filed on June 21, 2024, the entire contents of which are incorporated herein by reference. TECHNICAL FIELD

[0003] Embodiments of the present application relate to the technical field of terminal privacy security, and in particular to a privacy policy generation method, an electronic device and a computer readable storage medium. BACKGROUND

[0004] With the deepening of mobile intelligent devices into all aspects of our work and life, privacy protection is increasingly valued by the general public. At present, most applications will pop up a privacy policy at the first run due to compliance requirements, and clearly show the user the permissions required by the application, and the sensitive data that needs to be accessed, saved or transmitted.

[0005] However, most applications in the related art involve the problems of illegal collection of personal information, incomplete privacy policy publicity information, excessive request for permissions, etc., therefore, it is necessary to comprehensively identify potential sensitive behaviors in the product to effectively ensure the privacy security of users. SUMMARY

[0006] The main purpose of the embodiments of the present application is to provide a privacy policy generation method, an electronic device and a computer readable storage medium.

[0007] To achieve the above purpose, the embodiments of the present application provide a privacy policy generation method, which comprises: performing sensitive behavior scanning on a component object, recording a target program interface scanned to a sensitive behavior; performing sensitive behavior identification on the target program interface based on a preset sensitive behavior set, and recording an identification result; determining a privacy policy statement corresponding to the sensitive behavior in the preset sensitive behavior set according to the identification result; and assembling the privacy policy statement according to a preset rule to generate a privacy policy text.

[0008] In addition, to achieve the above purpose, the embodiments of the present application also provide an electronic device, which comprises a memory, a processor and a computer program stored on the memory and executable on the processor, and the computer program is executed by the processor to implement the privacy policy generation method as described above.

[0009] In addition, to achieve the above object, the embodiment of the present application further provides a computer readable storage medium, wherein the computer readable storage medium stores a computer program, and the computer program is executed by a processor to realize the privacy policy generation method. BRIEF DESCRIPTION OF DRAWINGS

[0010] In order to more clearly illustrate the technical solutions in the embodiments of the present application or the related art, the drawings needed to be used in the embodiments or the related art description will be briefly introduced. Obviously, the drawings in the following description only constitute a part of the embodiments of the present application, and for those skilled in the art, other drawings can also be obtained without creative labor on the basis of these drawings.

[0011] Fig. 1 is a flow diagram of a privacy policy generation method provided by the embodiment of the present application;

[0012] Fig. 2 is a detailed flow diagram of part of the steps in a privacy policy generation method provided by the embodiment of the present application;

[0013] Fig. 3 is another detailed flow diagram of part of the steps in a privacy policy generation method provided by the embodiment of the present application;

[0014] Fig. 4 is a structural diagram of a privacy policy generation device provided by the embodiment of the present application;

[0015] Fig. 5 is a structural diagram of an added module of a privacy policy generation device provided by the embodiment of the present application;

[0016] Fig. 6 is a structural diagram of an electronic device provided by the embodiment of the present application. DETAILED DESCRIPTION

[0017] In the following description, specific details are set forth in order to provide a thorough understanding of the embodiments of the present application. However, persons skilled in the art should understand that the embodiments of the present application can also be implemented in other embodiments without these specific details. In other cases, detailed descriptions of well-known systems, devices, circuits, and methods are omitted so as not to obscure the description of the embodiments of the present application with unnecessary details.

[0018] Although the logical order is shown in the flowchart, in some cases, the steps shown or described in the flowchart can be performed in an order different from that in the flowchart. The terms "first", "second", and the like in the specification and claims and the above drawings are used to distinguish similar objects, and do not necessarily describe a specific order or sequence.

[0019] It should also be appreciated that a reference to "one embodiment" or "some embodiments" etc. in the embodiments description of the application implies a celebration of particular features, structures, or characteristics described in connection with at least one embodiment of the application. Thus, the appearance of the phrases "in one embodiment", "in some embodiments", "in other embodiments", "in yet other embodiments" etc. in various places throughout the specification are not necessarily all referring to the same embodiment, unless otherwise specifically so stated. The terms "including", "containing", "having" and variations thereof mean "including but not limited to", unless expressly specified otherwise.

[0020] With the mobile intelligent devices penetrating into all aspects of our work and life, privacy protection is also paid more and more attention by the majority of users. At present, most applications will pop up a privacy policy at the first time of running due to compliance requirements, and clearly show the user the permissions required by the application, and the sensitive data required to be accessed, saved or transmitted.

[0021] However, most applications in the related art involve the problems of illegal collection of personal information, incomplete privacy policy publicity information, excessive demand for permissions, etc. Generally speaking, the content contained in the privacy policy is closely related to the functions implemented in the application, for example, the application implements the function of initiating positioning behavior, and calls the program interface of positioning, so the privacy policy needs to explicitly show that the application will perform positioning, read positioning information, etc. Therefore, in order to effectively guarantee the privacy safety of the user, it is necessary to comprehensively identify the potential sensitive behaviors in the product.

[0022] Based on this, the embodiments of the application provide a privacy policy generation method, device, equipment and computer readable storage medium, in the privacy policy generation method, first, the component object is scanned, and the target program interface scanned to the sensitive behavior is recorded; then, the target program interface is identified based on a preset sensitive behavior set, and the identification result is recorded, so that it can be known that the scanned sensitive behavior belongs to which specific sensitive behavior in the preset sensitive behavior set; then, the privacy policy sentence corresponding to the sensitive behavior is determined in the preset sensitive behavior set according to the identification result; finally, the privacy policy sentence is assembled according to a preset rule, so as to generate a privacy policy text. The privacy policy generation method provided by the embodiments of the application can identify the sensitive program interface and sensitive behavior in the component object completely and without omission; in addition, the mapping of the sensitive program interface to the sensitive behavior and the corresponding privacy policy sentence can realize compliance self-checking and leakage and omission of the privacy policy, improve the privacy safety degree of the product and the safety experience of the user, and expand the market competitiveness of the product.

[0023] The privacy policy generation method, device, equipment and computer readable storage medium provided by the embodiments of the present application are described in detail through the following embodiments. First, the privacy policy generation method in the embodiments of the present application is described.

[0024] Referring to FIG. 1, FIG. 1 is a flowchart of a privacy policy generation method provided by the embodiments of the present application. The privacy policy generation method can be applied to a privacy policy generation device. As shown in FIG. 1, the privacy policy generation method provided by the embodiments of the present application includes steps S10 to S40.

[0025] In step S10, sensitive behavior scanning is performed on a component object, and a target program interface scanned to sensitive behavior is recorded.

[0026] In the embodiments, the component object includes, but is not limited to, an executable file of an application and / or SDK (Software Development Kit), source code, a configuration file of the application and / or SDK, and an intermediate file generated in a compilation process of the application and / or SDK. The purpose of performing sensitive behavior scanning is to learn the target program interface involving sensitive behavior in the component object. The sensitive behavior scanning method includes, but is not limited to, static scanning and dynamic scanning. For static scanning, all code paths of the scanning object are covered, so that more comprehensive scanning results can be obtained. The static scanning can be automatically performed, has high efficiency and scalability, and can be more accurate because it can be analyzed before the scanning object is run. Therefore, the static scanning can be used as a preferred scanning method. For dynamic scanning, the scanning object is analyzed when it is running. The comprehensiveness and accuracy of the dynamic scanning are relatively low compared with the static scanning, and the dynamic scanning can be used as an alternative method.

[0027] In the embodiments, the sensitive behavior scanning can be performed on various possible sensitive behaviors. Therefore, after a certain sensitive behavior is scanned, the name of the sensitive behavior is not directly learned, but the target program interface scanned to the sensitive behavior is recorded first. Then, the target program interface is identified through subsequent steps, so that the specific sensitive behavior can be accurately learned.

[0028] As an example, the implementation of a sensitive behavior can need to involve the calling of multiple program interfaces. Therefore, the target program interface can be a certain specific program interface, or a set of multiple program interfaces related to the sensitive behavior.

[0029] In step S20, sensitive behavior identification is performed on the target program interface based on a preset sensitive behavior set, and the identification result is recorded.

[0030] In the embodiment, the preset sensitive behavior set at least includes various specified sensitive behaviors and specified program interfaces that have corresponding relationships, so that, in the case that the target program interface is learned based on the foregoing steps, the specified sensitive behavior involved by the target program interface can be learned by querying the specified program interface consistent with the target program interface in the preset sensitive behavior set, and thus the identification result in the embodiment can be the specified program interface or the specified sensitive behavior in the preset sensitive behavior set.

[0031] In step S30, a privacy policy statement corresponding to the sensitive behavior is determined in the preset sensitive behavior set according to the identification result.

[0032] In the embodiment, the preset sensitive behavior set can also include specified templated texts corresponding to the specified sensitive behavior and the specified program interface; in the case that the identification result is the specified program interface or the specified sensitive behavior in the preset sensitive behavior set, the specified templated text corresponding to the specified sensitive behavior and the specified program interface can be mapped from the preset sensitive behavior set according to the identification result, and used as the privacy policy statement corresponding to the scanned sensitive behavior.

[0033] In step S40, the privacy policy statement is assembled according to a preset rule to generate a privacy policy text.

[0034] In the embodiment, the preset rule can be a specific way of instantiating the privacy policy statement, and in the case that the privacy policy statement is the specified templated text, the instantiation way is different according to different templated ways; and the finally generated privacy policy text can be used to disclose to the user that the scanned component object involves what kind of sensitive behavior.

[0035] As an example, in the case that the privacy policy statement is “A application needs to access C data when performing B function”, the preset rule can be to fill A, B and C to complete instantiation, and the assembled privacy policy text can be “WeChat application needs to access location information data when performing sharing location function”.

[0036] The embodiment provides a privacy policy generation method, which can completely and without omission identify sensitive program interfaces involved by sensitive behaviors in an application, and even for an SDK that is a black box to an application developer, the sensitive program interfaces and sensitive behaviors contained in the SDK can be identified; in addition, the mapping of the sensitive program interfaces to the sensitive behaviors and the corresponding privacy policy statements can realize compliance self-checking and leakage and omission supplement of the privacy policy, and improve the privacy security level of the electronic device using the method and the safety experience of the user, and expand the market competitiveness.

[0037] In some feasible embodiments, before step S20, the privacy policy generation method can further include:

[0038] In step S11, the specified sensitive behavior that needs to be disclosed in the privacy policy is persisted, and a preset sensitive behavior set is obtained; the preset sensitive behavior set includes the specified sensitive behavior, the specified program interface, and the specified templated text that correspond to each other.

[0039] The premise of performing the sensitive behavior identification is that the preset sensitive behavior set as the data warehouse is set in advance; in this embodiment, persistence is a mechanism for converting program data between a persistent state and a transient state; in a general way, it is to persist the transient data (such as data in the memory, which cannot be permanently saved) into the persistent data (such as being persisted into the database, which can be saved for a long time); the mutual correspondence of the specified sensitive behavior, the specified program interface, and the specified templated text is not limited in quantity, because the implementation of a sensitive behavior may involve the calling of multiple program interfaces, that is, the specified program interface is not limited to a specific program interface, and it can be a set of multiple program interfaces.

[0040] As an example, the specified sensitive behavior that needs to be disclosed in the privacy policy can include all behaviors of an application regulated by a regulatory department in the functional execution process that involve user sensitive information, and can also include behaviors that are not within the regulatory scope of the regulatory department but within the general scope of the industry; such specified sensitive behaviors include but are not limited to: reading short messages; writing short messages; initiating positioning; reading positioning information; reading user local data such as multimedia data, files, and local application installation information; and recording in the background.

[0041] In some possible embodiments, the specified program interface described above can include all program interfaces that need to be called to implement the specified sensitive behavior.

[0042] In this embodiment, the specified program interface (program interface set) corresponding to each specified sensitive behavior includes all program interfaces that need to be implemented and called by the application program in the operating system to implement the specified sensitive behavior.

[0043] As an example, the specified sensitive behavior of recording in the background involves the program interface of making the application program run in the background and the program interface of making the application program execute the recording function.

[0044] Therefore, in order to make the program interface set cover as comprehensively as possible, and considering the accuracy and consistency of detection, the specified program interface can include but is not limited to all interfaces of the operating system level implementation related function: all interfaces of the operating system level implementation related function are provided by the platform or the operating system framework, have a unified naming specification and function definition, and therefore the calling mode and use method are more consistent; in addition, the system level program interface covers widely applicable functions and operations, and the inclusion of such interfaces into the program interface set can cover more sensitive behavior types, ensure that the subsequent step execution results are more comprehensive, improve accuracy and reliability, and reduce the risk of false positives and omissions.

[0045] In the embodiment, the specified templated text described above is a privacy policy description templated for a specified sensitive behavior, and such a description includes but is not limited to: a description of the timing and manner of the occurrence of the privacy behavior, the data related to the privacy of the user involved in the behavior, the data processing manner, whether to transfer outside the local machine, etc.

[0046] In some possible embodiments, after the step S20 described above, the privacy policy generation method can further include: judging whether the recognition result is empty; if yes, returning to the step S10; and if no, executing the step S30.

[0047] In the embodiment, there can be a case where a specified program interface consistent with the target program interface cannot be queried from the preset sensitive behavior set, in which case the recognition result is considered empty, that is, the component object does not exist for the call involving sensitive behavior, the privacy policy does not have to be disclosed, and therefore the subsequent step S30 does not need to be executed, and the step S10 described above can be returned to for re-scan of sensitive behavior.

[0048] Referring to FIG. 2, in some possible embodiments, the step S20 can specifically include:

[0049] In the step S21, the target program interface is matched with the specified program interface, and in the case of successful matching, the specified program interface is taken as the recognition result.

[0050] In the embodiment, the matching process can be to query a specified program interface consistent with the target program interface in the preset sensitive behavior set, and after successful matching, the specified program interface consistent with the target program interface in the preset sensitive behavior set can be directly identified and recorded, and taken as the recognition result.

[0051] On the basis of the step S21 described above, the step S30 can specifically include:

[0052] In the step S31, the specified program interface is taken as a keyword, and a specified templated text corresponding to the keyword is queried in the preset sensitive behavior set;

[0053] Step S32, the specified templated text corresponding to the keyword is taken as the privacy policy statement corresponding to the sensitive behavior.

[0054] In the embodiment, in the case that the identification result is the specified program interface, the specified program interface can be taken as the keyword, the preset sensitive behavior set is queried, the specified templated text corresponding to the specified program interface is obtained, and the specified templated text is taken as the privacy policy statement corresponding to the target program interface and the scanned sensitive behavior.

[0055] Referring to FIG. 3, in some possible embodiments, the step S20 can further include:

[0056] Step S22, the target program interface is matched with the specified program interface, and in the case that the matching succeeds, the specified sensitive behavior corresponding to the specified program interface is taken as the identification result.

[0057] In the embodiment, the matching process can be that the specified program interface consistent with the target program interface is queried in the preset sensitive behavior set, after the matching succeeds, the specified program interface consistent with the target program interface in the preset sensitive behavior set is identified and recorded, and then the specified program interface identified and recorded is mapped to the preset sensitive behavior set, and the specified sensitive behavior corresponding to the specified program interface is determined again by matching, and the specified sensitive behavior matched is taken as the identification result.

[0058] On the basis of the step S22, the step S30 can further include:

[0059] Step S33, the specified sensitive behavior is taken as the keyword, and the specified templated text corresponding to the keyword is queried in the preset sensitive behavior set;

[0060] Step S34, the specified templated text corresponding to the keyword is taken as the privacy policy statement corresponding to the sensitive behavior.

[0061] In the embodiment, in the case that the identification result is the specified sensitive behavior, the specified sensitive behavior can be taken as the keyword, the preset sensitive behavior set is queried, the specified templated text corresponding to the specified sensitive behavior is obtained, and the specified templated text is taken as the privacy policy statement corresponding to the scanned sensitive behavior.

[0062] In some possible embodiments, the privacy policy statement is a templated text, and the templated text includes fixed text and variable text; the step S40 can specifically include:

[0063] Step S41, the variable text is instantiated based on the component object and the specified sensitive behavior, and the instantiated text is obtained;

[0064] Step S42, assembling the fixed text and the instantiated text to generate the privacy policy text.

[0065] In the present embodiment, the templated text can include fixed parts and variable parts. The key words therein can be regarded as variable parts, which are information determined according to the specific component to be scanned and are instantiated in specific steps according to the scanned application and specific sensitive behaviors.

[0066] As an example, such variable parts include but are not limited to: information of the application name and the developer, the scope and purpose of data collection, the data processing method and security measures, the user rights and choices, the effective date of the privacy policy and the updating method.

[0067] In some possible embodiments, the above-mentioned variable text is a placeholder to be filled with key words; and the above-mentioned step S41 can specifically include:

[0068] Step S411, filling the placeholders with the name of the component object and the specified sensitive behavior as key words.

[0069] In the present embodiment, as an example, the variable parts in the templated text can be occupied by using the XLIFF exchange file format, or other possible ways. When the XLIFF file format is used for occupation, the instantiation process is the process of filling the XLIFF placeholders, and the specific method includes but is not limited to: using artificial means to fill the placeholders for the assembled privacy policy; using the application name, the program interface name of the privacy behavior, the permission name of the privacy behavior, and the information of whether the application is connected to the network to fill the placeholders for the assembled privacy policy.

[0070] In some possible embodiments, after the above-mentioned step S40, the privacy policy generation method can further include:

[0071] Step S50, comparing the privacy policy text with the existing privacy policy text of the component object to obtain a comparison result.

[0072] Step S51, in the case that the comparison result is that the privacy policy text is different from the existing privacy policy text, outputting a privacy policy text updating prompt.

[0073] In the present embodiment, the newly generated privacy policy text can also be compared with the existing privacy policy of the scanned component object. In the case that the comparison result is that the newly generated privacy policy text is different from the existing privacy policy text, the new sensitive behavior is displayed in the form of visual elements or other forms to notify the developer or the user; and in the case that the comparison result is that the newly generated privacy policy text is the same as the existing privacy policy text, no updating prompt is outputted.

[0074] Further, the application also provides a privacy policy generation device. Referring to FIG. 4, FIG. 4 is a structural schematic diagram of the privacy policy generation device according to an embodiment of the application. As shown in FIG. 4, in the embodiment, the privacy policy generation device comprises a sensitive behavior scanning module 101, a sensitive behavior identifying module 102, a privacy policy matching module 103 and a privacy policy assembling module 104.

[0075] The sensitive behavior scanning module 101 is configured to scan sensitive behaviors of a component object, and record target program interfaces of the scanned sensitive behaviors.

[0076] The sensitive behavior identifying module 102 is configured to identify sensitive behaviors of the target program interfaces based on a preset sensitive behavior set, and record an identifying result.

[0077] The privacy policy matching module 103 is configured to determine a privacy policy statement corresponding to the sensitive behavior in the preset sensitive behavior set according to the identifying result.

[0078] The privacy policy assembling module 104 is configured to assemble the privacy policy statement according to a preset rule, so as to generate a privacy policy text.

[0079] In some possible embodiments, the privacy policy generation device can further comprise:

[0080] A data warehouse module 105 is configured to persist specified sensitive behaviors which need to be disclosed in a privacy policy, so as to obtain a preset sensitive behavior set. The preset sensitive behavior set comprises specified sensitive behaviors, specified program interfaces and specified template texts which correspond to each other.

[0081] Referring to FIG. 5, in some possible embodiments, the privacy policy generation device can further comprise:

[0082] A scanning component receiving module 106 is configured to provide an interactive interface for receiving a component object which needs to be scanned.

[0083] A scanning result displaying module 107 is configured to display a scanning result, and display the privacy behavior program interfaces identified by scanning and the generated privacy policy text on an interface.

[0084] In the embodiment, the privacy policy generation device provided in the foregoing embodiment is added with an interactive interface for the user to view the privacy policy more intuitively. The interface can display one of the scanned and recognized sensitive behavior program interface and the generated privacy policy text, or display both of them. In addition to the content shown in FIG. 5, the specific display content can include but is not limited to the following content: 1) using charts, icons, colors and other visual elements to make the user more easily understand and focus on the sensitive behavior; 2) classifying the sensitive behavior program interface and displaying it in various visual elements from the perspective of categories; 3) interactive functions such as search, filtering, sorting, etc. to let the developer or user customize the display content according to their own needs and preferences; 4) comparing the generated privacy policy with the existing privacy policy of the scanned component object and displaying it in visual elements or other forms to inform the developer or user of the new sensitive behavior found; and 5) other forms or interactive interfaces for the same purpose.

[0085] The privacy policy generation device provided in the embodiment belongs to the same technical concept as the privacy policy generation method provided in the foregoing embodiment. The technical details not described in detail in the embodiment can be referred to the foregoing embodiments, and the embodiment has the same beneficial effects as the privacy policy generation method.

[0086] The device embodiments described above are only schematic and the units described as separate components can or can not be physically separate, that is, they can be located in one place or distributed on multiple network units. Part or all of the modules can be selected according to actual needs to achieve the purpose of the embodiment.

[0087] In addition, the embodiment of the application further provides an electronic device, and the privacy policy generation method applied to the electronic device can be executed by a privacy policy generation device. The privacy policy generation device can be implemented in software and / or hardware and integrated in the electronic device. The electronic device can be a PC (personal computer), a mobile phone, a notebook, a tablet computer or other terminal device that can communicate with the network side.

[0088] Referring to FIG. 6, FIG. 6 is a schematic diagram of a hardware structure of an electronic device according to an embodiment of the present application. As shown in FIG. 6, the electronic device can include a processor 1001, for example, a central processing unit (CPU), a communication bus 1002, a user interface 1003, a network interface 1004, and a memory 1005. The communication bus 1002 is configured to realize the connection and communication among the components. The user interface 1003 can include a display and an input unit such as a keyboard. The user interface 1003 can also include a standard wired interface and a wireless interface. The network interface 1004 can include a standard wired interface and a wireless interface (for example, a WIreless-FIdelity (WI-FI) interface). The memory 1005 can be a high-speed random access memory (RAM) or a stable non-volatile memory (NVM), for example, a disk memory. The memory 1005 can also be a storage device independent of the processor 1001.

[0089] Those skilled in the art can understand that the structure shown in FIG. 6 does not constitute a limitation on the electronic device, and can include more or fewer components than those shown, or combine certain components, or arrange different components. As shown in FIG. 6, the memory 1005 as a storage medium can include an operating system, a data storage module, a network communication module, a user interface module, and a computer program.

[0090] In the electronic device shown in FIG. 6, the network interface 1004 is mainly used for data communication with other devices; the user interface 1003 is mainly used for data interaction with the user; the processor 1001 and the memory 1005 in the embodiment can be arranged in the electronic device. The electronic device calls the computer program stored in the memory 1005 through the processor 1001, and executes the privacy policy generation method applied to the electronic device provided in any of the above embodiments.

[0091] The electronic device provided in the embodiment and the privacy policy generation method applied to the electronic device provided in the above embodiments belong to the same technical concept. The technical details not described in detail in the embodiment can be referred to the above embodiments, and the embodiment has the same beneficial effects as the privacy policy generation method.

[0092] In addition, the present application also provides a computer readable storage medium, which can be a non-volatile computer readable storage medium, and a computer program is stored on the computer readable storage medium. The computer program is executed by the processor to implement the privacy policy generation method provided in any of the above embodiments.

[0093] Furthermore, the present application also provides a computer program product comprising a computer program which, when executed by a processor, implements the privacy policy generation method provided by any of the above embodiments.

[0094] The computer program product provided by the present application and the privacy policy generation method applied to an electronic device provided by the above embodiments belong to the same technical concept. Compared with the related art, the computer program product provided by the present application has the same beneficial effects as the privacy policy generation method provided by the above embodiments, which will not be repeated here.

[0095] Those skilled in the art can understand that all or some of the steps in the method disclosed above can be implemented as software, firmware, hardware, and appropriate combinations thereof. Some or all of the physical components can be implemented as software executed by a processor, such as a central processing unit, a digital signal processor, or a microprocessor, or as hardware, or as an integrated circuit, such as an application-specific integrated circuit. Such software can be distributed on a computer-readable medium, which can include computer storage media (or non-transitory media) and communication media (or transitory media). As is well known to those skilled in the art, the term computer storage media includes volatile and non-volatile, removable and non-removable media implemented in any method or technology for storage of information such as computer readable instructions, data structures, program modules, or other data. Computer storage media includes, but is not limited to, RAM, ROM, EEPROM, flash memory or other memory technology, CD-ROM, digital versatile disks (DVD) or other optical disk storage, magnetic cassettes, magnetic tapes, magnetic disk storage, or other magnetic storage devices, or any other medium that can be used to store the desired information and can be accessed by a computer. Furthermore, as is well known to those skilled in the art, communication media typically includes computer readable instructions, data structures, program modules, or other data in modulated data signals such as carrier waves or other transport mechanisms, and can include any information delivery medium.

[0096] The above is a specific description of some embodiments of the present application, but the present application is not limited to the above embodiments. Those skilled in the art can make various equivalent modifications or replacements without departing from the spirit of the present application, and these equivalent modifications or replacements are all included in the scope defined by the claims of the present application.

Claims

1. A method of generating a privacy policy, wherein, The privacy policy generation method comprises: Performing sensitive behavior scanning on a component object, recording a target program interface scanned for sensitive behavior; Performing sensitive behavior identification on the target program interface based on a preset sensitive behavior set, and recording an identification result; Determining a privacy policy statement corresponding to the sensitive behavior in the preset sensitive behavior set according to the identification result; Assembling the privacy policy statement according to a preset rule to generate a privacy policy text.

2. The privacy policy generation method of claim 1, wherein, Before the step of performing sensitive behavior identification on the target program interface based on the preset sensitive behavior set, the privacy policy generation method further comprises: Persisting a specified sensitive behavior that needs to be disclosed in a privacy policy to obtain the preset sensitive behavior set; the preset sensitive behavior set comprises the specified sensitive behavior, a specified program interface and a specified templated text corresponding to each other.

3. The privacy policy generation method of claim 2, wherein, The specified program interface comprises all program interfaces that need to be called to implement the specified sensitive behavior.

4. The privacy policy generation method of claim 2, wherein, The step of performing sensitive behavior identification on the target program interface based on the preset sensitive behavior set and recording an identification result comprises: Matching the target program interface with the specified program interface, and in the case of successful matching, taking the specified program interface as the identification result.

5. The privacy policy generation method of claim 4, wherein, The step of determining a privacy policy statement corresponding to the sensitive behavior in the preset sensitive behavior set according to the identification result comprises: Taking the specified program interface as a keyword, and querying the specified templated text corresponding to the keyword in the preset sensitive behavior set; Taking the specified templated text corresponding to the keyword as the privacy policy statement corresponding to the sensitive behavior.

6. The privacy policy generation method of claim 2, wherein, The step of performing sensitive behavior identification on the target program interface based on the preset sensitive behavior set and recording an identification result comprises: Matching the target program interface with the specified program interface, and in the case of successful matching, taking the specified sensitive behavior corresponding to the specified program interface as the identification result.

7. The privacy policy generation method of claim 6, wherein, The step of determining a privacy policy statement corresponding to the sensitive behavior in the preset sensitive behavior set according to the identification result comprises: Taking the specified sensitive behavior as a keyword, and querying the specified templated text corresponding to the keyword in the preset sensitive behavior set; Taking the specified templated text corresponding to the keyword as the privacy policy statement corresponding to the sensitive behavior.

8. The privacy policy generation method of claim 2, wherein, The privacy policy statement is a templated text, and the templated text comprises a fixed text and a variable text; The step of assembling the privacy policy statement according to a preset rule to generate a privacy policy text comprises: Instantiating the variable text based on the component object and the specified sensitive behavior to obtain an instantiated text; Assembling the fixed text and the instantiated text to generate a privacy policy text.

9. The privacy policy generation method of claim 8, wherein, The variable text is a placeholder of a keyword to be filled; The step of instantiating the variable text based on the component object and the specified sensitive behavior comprises: Taking the name of the component object and the specified sensitive behavior as a keyword to fill the placeholder.

10. The privacy policy generation method of claim 1, wherein, After the step of assembling the privacy policy sentences according to the preset rules to generate a privacy policy text, the method further comprises: comparing the privacy policy text with an existing privacy policy text of the component object to obtain a comparison result; in a case where the comparison result is that the privacy policy text is different from the existing privacy policy text, outputting a privacy policy text update prompt.

11. An electronic device, comprising: The electronic device comprises a memory, a processor, and a computer program stored on the memory and executable on the processor, and the computer program, when executed by the processor, implements the privacy policy generation method according to any one of claims 1 to 10.

12. A computer readable storage medium, wherein, The computer readable storage medium stores a computer program, and the computer program, when executed by a processor, implements the privacy policy generation method according to any one of claims 1 to 10.

Images