Instant Messaging Group Information Screening for Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing instant messaging software poses an information security risk by allowing temporary employees or contractors to view sensitive information about the enterprise's organizational structure and personal details of other users, which is not intended for their access.
Innovation Solution
Implementing a method where users can be added to groups with a specific status, allowing them to receive screened group information based on predefined permissions, ensuring they cannot view inappropriate data while enabling secure instant messaging within the group.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If temporary employees or contractors are added to enterprise groups to enable instant messaging communication, then communication needs are met, but information security deteriorates as they can view sensitive organizational structure and personal information
Solution Approach 1:
The patent segments group information into different types (sensitive information like organizational structure and personal details versus non-sensitive information) and applies different permission settings to each segment. Users with specific statuses can access only the non-sensitive segments, while sensitive segments remain restricted. This segmentation allows temporary employees to communicate effectively while preventing exposure to confidential information.
Solution Approach 2:
The patent implements local quality by assigning different permission attributes to different pieces of group information based on their sensitivity levels. Each information element can have its own access control policy, allowing temporary employees to view certain information (like general group announcements) while blocking access to specific sensitive elements (like organizational charts or personal contact details).
2Loss of information
If all group information is made visible to all users, then information accessibility is improved, but information security deteriorates due to exposure of sensitive data
Solution Approach 1:
The patent implements dynamic information visibility based on user status and information sensitivity. The system automatically adjusts what information is visible to each user in real-time based on their assigned status (e.g., temporary employee, regular member, administrator). This dynamic control ensures that information accessibility is optimized for each user's needs while automatically preventing information leakage through status-based permission filtering.
3Object-affected harmful factors
If user status and permission screening are implemented, then information security is improved, but system complexity increases due to additional assessment and screening mechanisms
Solution Approach 1:
The patent applies preliminary action by pre-defining user statuses and their associated permission sets before users join groups. Common statuses (such as temporary employee, contractor, full member) are configured in advance with predetermined access rights to different information types. When a user joins a group, their status-based permissions are automatically applied without requiring real-time complex assessments, thereby improving information security while minimizing system complexity.
Data Source
AI summary
The present application provides an instant messaging-based method and means for processing information. The method comprises: receiving a group add request, said group add request being for requesting the addition of a first user to a first group; assessing whether the first user needs to be added to the first group with a specific status; if the assessment result is yes, then subjecting the group information of the first group to screening in accordance with the group permissions corresponding to the specific status in order to obtain screened group information and issuing the screened group information to the instant messaging client of the first user. The present application can solve information security problems while meeting instant messaging needs.