WO2015018052A1

WO2015018052A1 - Information presentation method and device

Info

Publication number: WO2015018052A1
Application number: PCT/CN2013/081144
Authority: WO
Inventors: 叶思海
Original assignee: 华为技术有限公司
Priority date: 2013-08-09
Filing date: 2013-08-09
Publication date: 2015-02-12
Also published as: CN103650459A

Abstract

Disclosed are an information presentation method and device, which relate to the field of electronic information, and can determine whether to present a watermark or not according to a practical situation, so as to avoid visual interference caused by the watermark. The present invention is applied to the process for a user accessing a cloud computing system to access target information stored in the cloud computing system. The method mainly comprises: acquiring access information about a user; determining an access manner of the user according to the access information; if the access manner is a secure access manner, presenting the target information in a manner which does not contain a watermark; and if the access manner is an unsecure access manner, presenting the target information in a manner which contains the watermark.

Description

Information presentation method and device

The present invention relates to the field of electronic information, and in particular, to an information presentation method and device. Background technique

With the development of electronic information technology, some privacy or confidential information in daily life or work can be spread and presented through various electronic devices. However, while the information is being disseminated and presented, the security of private or confidential information is also greatly threatened.

Especially after the emergence of the cloud computing system, since the user can access the cloud computing system at any time and any place, the information stored in the cloud computing system is acquired and presented, and the information is easily photographed or screenshotd after being presented, thereby causing Information disclosure.

In order to prevent the information from being illegally stolen after being presented, the prior art proposes an information presentation method for inserting a digital watermark, specifically: embedding the watermark into the target information, and when opening the target information, presenting the target information including the watermark . In this way, even if the stealer takes a picture or screenshot of the presented information, the watermark will be included in the result of the theft, which constitutes direct evidence of theft, thereby reducing the risk of information leakage.

However, in the process of implementing the above information presentation, the inventors have found that at least the following problems exist in the prior art: Since the watermark is always present in the information after the watermark is embedded in the target information, the target information is displayed at any time or place. The target information of the watermark is included, and the existence of the watermark has a certain influence on the visual effect, and thus causes great interference to the viewing and use of the target information itself. Summary of the invention

Embodiments of the present invention provide an information presentation method and device, which can determine whether to present a watermark according to actual conditions to avoid visual interference caused by a watermark.

A first aspect of the present invention provides an information presentation method, including:

Obtaining access information of the user;

Determining, according to the access information, an access mode of the user; If the access mode is a secure access mode, the target information is presented in a manner that does not include a watermark;

If the access mode is a non-secure access mode, the target information is presented in a manner including a watermark.

With reference to the first aspect, in a first possible implementation manner of the first aspect, when the access information includes at least one of: access location information, user identifier information, and device identifier information, The access information determines that the access mode of the user includes:

Querying a pre-configured secure access white list according to the access information;

If the access information belongs to the secure access whitelist, determine that the access mode of the user is a secure access mode;

If the access information does not belong to the secure access whitelist, it is determined that the access mode of the user is a non-secure access mode.

With reference to the first aspect, in a second possible implementation manner of the first aspect, when the access information includes at least one of: access location information, user identifier information, and device identifier information, The access information determines that the access mode of the user includes:

Querying a pre-configured secure access blacklist according to the access information;

If the access information does not belong to the security access blacklist, determine that the access mode of the user is a secure access mode;

If the access information belongs to the secure access blacklist, it is determined that the access mode of the user is a non-secure access mode.

With reference to the first aspect, in a third possible implementation manner of the first aspect, when the access information includes the access authentication information, the determining, by the access information, the access manner of the user includes:

If the access authentication information indicates that the access mode of the user is authenticated by the access authentication system, determining that the access mode of the user is a secure access mode;

If the access authentication information indicates that the access mode of the user does not pass the authentication of the access authentication system, the access mode of the user is determined to be a non-secure access mode.

In combination with the first aspect or any one of the first to third possible implementations of the first aspect, in a fourth possible implementation of the first aspect, the The way to present the target information includes:

Presenting target information and independent watermarks simultaneously;

Or, insert the watermark into the display graphic frame of the target information, and present the target information of the inserted watermark.

In combination with the first aspect or any one of the first to fourth possible implementations of the first aspect, in a fifth possible implementation of the first aspect, the target is presented in a manner including a watermark Before the information, it also includes:

Obtaining a security level of the target information, determining a watermark type according to the security level; and presenting the target information in a manner including a watermark: presenting the target information in a manner of including a watermark corresponding to the watermark type.

With reference to the fifth possible implementation manner of the first aspect, in a sixth possible implementation manner of the first aspect, the factor affecting the watermark type includes at least one of the following: a watermark location, a watermark size, a watermark color, and a watermark content.

With reference to the first aspect, or any one of the first to the sixth possible implementation manners of the first aspect, in a possible implementation manner of the seventh aspect of the first aspect, the method further includes:

In the non-secure access mode, if the target information cannot be presented in a manner including a watermark, an alarm is issued or the service is stopped to be provided to the user.

A second aspect of the present invention provides an information presentation device, which is applied to a process in which a user accesses a cloud computing system and accesses target information stored in the cloud computing system, and includes: an acquiring unit, configured to acquire User access information;

a determining unit, configured to determine, according to the access information acquired by the acquiring unit, an access mode of the user;

a first presentation unit, configured to: when the determining unit determines that the access mode is a secure access mode, present the target information in a manner that does not include a watermark;

And a second rendering unit, configured to: when the determining unit determines that the access mode is a non-secure access mode, present the target information in a manner including a watermark.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the access information acquired by the acquiring unit includes at least one of: access location information, user identifier information, and device identifier information, where the determining The unit includes: Querying a sub-unit, configured to query a pre-configured secure access white list according to the access information obtained by the obtaining unit;

Determining a sub-unit, wherein when the query result obtained by the query sub-unit indicates that the access information belongs to the secure access white list, determining that the access mode of the user is a secure access mode; The query result obtained by the subunit indicates that the access information does not belong to the secure access whitelist, and determines that the access mode of the user is a non-secure access mode.

With reference to the second aspect, in a second possible implementation manner of the second aspect, the access information acquired by the acquiring unit includes at least one of the following: when accessing location information, user identifier information, and device identifier information, The determining unit includes:

Querying a sub-unit, configured to query a pre-configured blacklist of security access according to the access information obtained by the acquiring unit;

Determining a subunit, where the query result obtained by the query subunit indicates that the access information does not belong to the security access blacklist, determining that the access mode of the user is a secure access mode; The query result obtained by the query subunit indicates that the access information belongs to the secure access blacklist, and determines that the access mode of the user is a non-secure access mode.

With reference to the second aspect, in a third possible implementation manner of the second aspect, the access information acquired by the acquiring unit includes access authentication information, and the determining unit is further configured to:

If the access authentication information obtained by the acquiring unit indicates that the access mode of the user is authenticated by the access authentication system, determining that the access mode of the user is a secure access mode; The authentication information indicates that the access mode of the user does not pass the authentication of the access authentication system, and the access mode of the user is determined to be a non-secure access mode.

With reference to the second aspect, or any one of the first to the third possible implementation manners of the second aspect, in a fourth possible implementation manner of the second aspect, the second presentation unit is used :

Presenting target information and independent watermarks simultaneously;

With reference to the second aspect, or any one of the first to the fourth possible implementation manners of the second aspect, in a fifth possible implementation manner of the second aspect, the method further includes: a watermark determining unit, configured to acquire a security level of the target information, and determine a watermark type according to the security level, before the second rendering unit presents the target information in a manner including a watermark;

The second rendering unit is further configured to: present the target information in a manner that includes a watermark corresponding to the watermark type determined by the watermark determining unit.

With reference to the fifth possible implementation manner of the second aspect, in a sixth possible implementation manner of the second aspect, the factor affecting the watermark type determined by the watermark determining unit includes at least one of the following: a watermark location, a watermark size , watermark color and watermark content.

With reference to the second aspect, or any one of the first to the sixth possible implementation manners of the second aspect, in a possible implementation manner of the seventh aspect, the method further includes:

And a monitoring unit, configured to: in the non-secure access mode, when detecting that the second rendering unit cannot present the target information in a manner including a watermark, performing an alarm or stopping providing the service to the user.

A third aspect of the present invention provides a novel presentation device, which is applied to a process in which a user accesses a cloud computing system and accesses target information stored in the cloud computing system, and includes: a receiver, configured to acquire User access information;

a processor, configured to determine, according to the access information acquired by the receiver, an access mode of the user; if the access mode is a secure access mode, control the display to present the target information in a manner that does not include a watermark; The access mode is a non-secure access mode, and the control display device presents the target information in a manner including a watermark;

A display for presenting target information in a manner with or without a watermark under the control of the processor.

With reference to the third aspect, in a first possible implementation manner of the third aspect, the access information includes at least one of the following: access location information, user identifier information, and device identifier information, where the device further includes:

a memory for storing a pre-configured secure access whitelist;

The processor is further configured to: query, according to the access information acquired by the receiver, a secure access white list stored in the memory;

If the query result indicates that the access information belongs to the secure access white list, determine the The user access mode is a secure access mode.

If the query result indicates that the access information does not belong to the secure access whitelist, it is determined that the access mode of the user is a non-secure access mode.

With reference to the third aspect, in a second possible implementation manner of the third aspect, the access information includes at least one of the following: access location information, user identification information, and device identification information, where the device further includes:

a memory for storing a pre-configured secure access blacklist;

The processor is further configured to: query the secure access blacklist stored in the memory according to the access information acquired by the receiver;

If the query result indicates that the access information does not belong to the security access blacklist, determine that the access mode of the user is a secure access mode;

If the query result indicates that the access information does not belong to the secure access blacklist, it is determined that the access mode of the user is a non-secure access mode.

With reference to the third aspect, in a third possible implementation manner of the third aspect, the access information includes access authentication information, and the processor is further configured to:

With reference to the third aspect, or any one of the first to the third possible implementation manners of the third aspect, in a fourth possible implementation manner of the third aspect, the processor is further configured to:

Controlling the display to simultaneously present target information and an independent watermark;

Or, inserting a watermark into the display graphic frame of the target information, and controlling the display to present the target information of the inserted watermark.

With reference to the third aspect, or any one of the first to the fourth possible implementation manners of the third aspect, in a fifth possible implementation manner of the third aspect, the receiver is further configured to: Obtaining a security level of the target information before the processor controls the display to present target information in a manner including a watermark; The processor is further configured to: determine a watermark type according to a security level acquired by the receiver; and present target information in a manner of including a watermark corresponding to the watermark type.

With reference to the fifth possible implementation manner of the third aspect, in a sixth possible implementation manner of the third aspect, a factor that affects a watermark type determined by the processor includes at least one of: a watermark location, a watermark size, Watermark color and watermark content.

With reference to the third aspect, or any one of the first to the sixth possible implementation manners of the third aspect, in a possible implementation manner of the seventh aspect, the processor is further configured to: In the non-secure access mode, if the target information cannot be presented in a manner including a watermark, an alarm is issued or the service is stopped to be provided to the user.

The information presentation method and device provided by the embodiment of the present invention, compared with the technology in the prior art that the watermark is always present in the target information, determine whether the user is securely connected by obtaining access information of the user accessing the cloud computing system. Into, the target information can be presented in a watermark-free manner when the user accesses the security, so as to avoid visual interference caused by the watermark in the secure access mode, which is beneficial to the viewing and use of the target information. BRIEF DESCRIPTION OF THE DRAWINGS The accompanying drawings, which are to be regarded as Other drawings may also be obtained from these drawings without the use of creative labor.

FIG. 1 is a flowchart of an information presentation method according to an embodiment of the present invention;

2 is a flowchart of a method for presenting information according to another embodiment of the present invention;

3 is a diagram showing an example of a system architecture in another embodiment of the present invention;

4 is a diagram showing another example of a system architecture in another embodiment of the present invention;

5 is a schematic diagram of a composition of an information presentation device according to another embodiment of the present invention; FIG. 6 is a schematic diagram of a composition of a determining unit according to another embodiment of the present invention;

FIG. 7 is a schematic diagram of a composition of an information presentation device according to another embodiment of the present invention; FIG. 8 is a schematic diagram of a composition of an information presentation device according to another embodiment of the present invention; FIG. 9 is a schematic diagram of a composition of an information presentation device according to another embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

In addition, the term "and/or" in this context is merely an association describing the associated object, indicating that there may be three relationships, for example, A and / or B, which may indicate that A exists separately, and A and B exist simultaneously. There are three cases of B alone. In addition, the character " /" in this article generally means that the contextual object is an "or" relationship.

An embodiment of the present invention provides an information presentation method, as shown in FIG. 1 , including:

1 01. Obtain the access information of the user.

It should be noted that the method provided by the present invention can be applied to a process in which a user accesses a target letter, I., wherein the target information is stored in a cloud computing system.

The access mode of the user is determined according to the access information, where the access mode includes a secure access mode and a non-secure access mode.

The access information includes at least one of the following: access location information, access authentication information, user identification information, and device identification information.

1 03. If the access mode is a secure access mode, the target information is presented in a manner that does not include a watermark.

1 04. If the access mode is a non-secure access mode, the target information is presented in a manner including a watermark.

The method for presenting the target information in a manner including a watermark includes: simultaneously presenting the target information and the independent watermark; or, inserting the watermark into the display graphic frame of the target information, and presenting the target information of the inserted watermark.

The information presentation method provided in this embodiment is compared with the method in the prior art in which the watermark is always present in the target information, and the access information of the user accessing the cloud computing system is obtained. Whether the user is a secure access, the target information can be presented in a watermark-free manner when the user accesses the security, to avoid visual interference caused by the watermark in the secure access mode, and is beneficial to the viewing and use of the target information. Another embodiment of the present invention provides an information presentation method, as shown in FIG. 2, including:

201. Acquire access information of the user.

In an implementation manner of this embodiment, the access information may include at least one of the following: the access location information, the user identifier information, and the device identifier information. In another implementation manner, the access information may be Includes access authentication information.

When the access information includes at least one of the access location information, the user identification information, and the device identification information, the following step 202 is performed by using a scenario in which the secure access whitelist is pre-configured as an example to determine the access mode of the user:

202. Query, according to the access information, a pre-configured secure access whitelist. If the query result indicates that the access information belongs to the secure access whitelist, determine that the access mode of the user is a secure access mode. Step 203: If the query result indicates that the access information does not belong to the secure access whitelist, determine that the access mode of the user is a non-secure access mode, and perform step 204.

Specifically, in the architecture shown in FIG. 3, the secure access whitelist may be queried according to the user's access location information, the user identification information, or the device identification information, or the secure access in the whitelist; or, according to the user's The blacklist is queried for access location information, user identification information, or device identification information, and is not securely accessed in the blacklist. For example, in Figure 3, the access IP address in the office area is in the whitelist, which is a secure access mode. The access IP address of the hotel is not in the whitelist, and is regarded as a non-secure access mode. The access location identification module is used to identify the access mode of the user. Further, the information security level identification module can identify the security level of the target information. The security policy control module determines whether to present the watermark, the style, type or size of the watermark according to the user access mode and the security level, and sends the policy information to the digital watermark processing module, and the digital watermark processing module generates and presents the watermark.

When the access information includes at least one of the access location information, the user identification information, and the device identification information, the following step 202' is performed by using a scenario in which the security access blacklist is pre-configured. Determine the user's access method:

And determining, according to the access information, a pre-configured secure access blacklist; if the query result indicates that the access information does not belong to the secure access blacklist, determining that the user access mode is securely connected If the query result indicates that the access information belongs to the security access blacklist, the access mode of the user is determined to be a non-secure access mode, and step 204 is performed.

When the access information includes the access authentication information, the user access method may be determined by the following step 202:

202: determining, according to the access authentication information of the access authentication system, the access mode of the user; if the access authentication information indicates that the access mode of the user passes the authentication of the access authentication system, determining the user The access mode is a secure access mode, and step 203 is performed. If the access authentication information indicates that the access mode of the user does not pass the authentication of the access authentication system, it is determined that the access mode of the user is not secure. In the access mode, step 204 is performed. For example, in the architecture shown in Figure 4, the user's access may also be authenticated by the access authentication system. The access authentication system may access the user's access location information, user identification information, or device identifier. The information is authenticated, and the authentication may be performed by using an account password or the like. This embodiment of the present invention does not limit this.

It should be noted that, in this embodiment, the steps 202, 202 ′ and 202 〃 are three specific implementation manners for determining the access mode of the user, and may be selected in the above three specific implementation manners in practical applications. One. The functions and the connection modes of the internal units of the user virtual machine in FIG. 3 and FIG. 4 are described in the embodiment of the information presentation device corresponding to FIG. 5-7, which is not described in detail in this embodiment.

203. Present the target information in a manner that does not include a watermark.

Wherein, the target information is presented in a manner that does not contain a watermark, that is, the target information is presented, and there is no watermark interference in the target information, which is convenient for the user to view, thereby not affecting the visual effect of the information itself.

204. Insert a watermark into the display graphic frame of the target information, and present the target information of the inserted watermark.

Wherein, when it is determined that the user accesses the cloud computing system in a non-secure access manner to open the target information in the cloud computing system, the watermark insertion operation is performed on the present presentation, instead of generating the file in the cloud computing system. That is, insert an intrinsic watermark in each file to ensure target information. Can have a flexible presentation. The watermark and the target information are mixed and presented, and the digital watermark information is inserted into the graphic frame displayed when the target information is presented. This way of presentation, the processing is complex, but the visual effect is good. The adjustment can be made according to the surrounding graphic information of the position to be inserted. If the periphery is red, a graphic close to red can be inserted to smooth the transition.

In this embodiment, step 205 may present the target information in a manner including a watermark. Alternatively, step 204 may be replaced by: simultaneously presenting the target information and the independent watermark. This display mode can be called a screen watermark, that is, the watermark has nothing to do with the content of the target information, but is displayed on the display screen, so that the file content is not changed, and at the same time, the image is prevented from being taken out and leakproof. A separate digital watermark rendering process presents a corresponding type of digital watermark on the user's screen. In this way, the watermark and the target information are presented independently, and the processing is simple, but the effect of the two displays may not be very smooth. Of course, in this embodiment, the target information may be presented in a manner that includes a watermark in other manners, which is not described in this embodiment.

Further optionally, the method of the embodiment of the present invention may further include: prior to step 204, identifying a security level of the target information used by the user, and generating a watermark according to the security level information. Among them, the identification method of the security level of the target information is the existing technology in the industry, and this article does not expand. Therefore, the specific implementation method of step 224 may be: forming a security policy according to the access location of the user and the security level of the document information used by the user, and performing watermark processing according to the security policy.

For example, a specific security policy control method may be: when a user accesses from a non-secure area, using a top secret document, the digital watermark type is 1; when the user accesses from a non-secure area, using a confidential document, The digital watermark type presented is 2; when the user accesses from the non-secure area and uses the secret level document, the digital watermark type presented is 3. Further, the watermark type may be pre-edited, and the factors affecting the watermark type include at least one of the following: presentation at different positions of the screen, occupying the screen size, watermark color, and watermark content, and the like. The watermark content may include: user-related information such as name, job number, IP address, time, and the like. Further, in order to further ensure the security of the target information presentation process, and to prevent the user from tampering or stopping the process of watermark generation and display, the embodiment may further include:

205. In the non-secure access mode, if the target information cannot be presented in a manner including a watermark, perform an alarm or stop providing the service to the user.

The information presentation method provided in this embodiment is compared with the method in which the watermark is always present in the target information in the prior art, and the access information of the user accessing the cloud computing system is obtained, thereby determining whether the user is securely accessing. The target information can be presented in a watermark-free manner when the user accesses the security to avoid visual interference caused by the watermark in the secure access mode, which is beneficial to the viewing and use of the target information. Another embodiment of the present invention provides an information presentation device, which is applied to a user accessing a cloud computing system and accessing target information stored in the cloud computing system, as shown in FIG. 5, including:

The obtaining unit 5 1 is configured to acquire access information of the user;

a determining unit 52, configured to determine, according to the access information acquired by the acquiring unit 51, an access mode of the user;

The first presentation unit 5 3 is configured to: when the determining unit 52 determines that the access mode is a secure access mode, present the target information in a manner that does not include a watermark;

The second rendering unit 54 is configured to: when the determining unit 52 determines that the access mode is a non-secure access mode, present the target information in a manner including a watermark.

The access information acquired by the obtaining unit 51 includes at least one of the following: access location information, access authentication information, user identification information, and device identification information.

In a possible implementation manner, the access information acquired by the acquiring unit 51 includes at least one of the following: the access location information, the user identifier information, and the device identifier information. As shown in FIG. 6, the determining unit 52 includes:

The query sub-unit 521 is configured to query the pre-configured secure access white list according to the access information obtained by the obtaining unit 51;

a determining sub-unit 522, configured to determine, when the query result obtained by the query sub-unit 52 1 indicates that the access information belongs to the secure access white list, determine that the access mode of the user is secure The access mode is determined when the query result obtained by the query sub-unit 52 1 indicates that the access information does not belong to the secure access whitelist, and the access mode of the user is determined to be a non-secure access mode.

Alternatively, when the access information acquired by the obtaining unit 51 includes at least one of the following: access location information, user identification information, and device identification information, as shown in FIG. 6, the determining unit 52 includes:

The query sub-unit 521 is configured to query the pre-configured secure access blacklist according to the access information obtained by the obtaining unit 51;

a determining sub-unit 522, configured to determine, when the query result obtained by the query sub-unit 52 1 indicates that the access information does not belong to the security access blacklist, determine that the access mode of the user is a secure access mode; When the query result obtained by the query sub-unit 521 indicates that the access information belongs to the secure access blacklist, the access mode of the user is determined to be a non-secure access mode.

In another possible implementation manner, the access information acquired by the acquiring unit 51 includes the access authentication information, and the determining unit 52 is further configured to:

Determining the access mode of the user according to the access authentication information acquired by the acquiring unit 51; if the access authentication information acquired by the acquiring unit 51 indicates that the access mode of the user is authenticated by the access authentication system Determining that the access mode of the user is a secure access mode; if the access authentication information acquired by the acquiring unit 51 indicates that the access mode of the user does not pass the authentication of the access authentication system, determining the The user access mode is non-secure access mode.

Further, the second presentation unit 54 is configured to: simultaneously present the target information and the independent watermark; or insert the watermark into the display graphic frame of the target information to present the target information of the inserted watermark.

Further, as shown in FIG. 7, a watermark determining unit 55 is further configured to acquire a security level of the target information before the second rendering unit 54 presents the target information in a manner including a watermark, according to the security level. Determine the type of watermark;

The second rendering unit 54 is further configured to present the target information in a manner including a watermark corresponding to the watermark type determined by the watermark determining unit 55.

Factors affecting the type of watermark include at least one of: watermark location, watermark size, watermark color, and watermark content.

The information presentation device further includes: The monitoring unit 56 is configured to: in the non-secure access mode, when detecting that the second rendering unit 54 cannot present the target information in a manner including a watermark, perform an alarm or stop providing the service to the user.

On the other hand, an embodiment of the present invention further provides an information presentation device, which is applied to a process in which a user accesses a cloud computing system and accesses target information stored in the cloud computing system, as shown in FIG. , including:

The receiver 81 is configured to acquire access information of the user.

The processor 82 is configured to determine, according to the access information acquired by the receiver 81, the access mode of the user, where the access mode includes a secure access mode and a non-secure access mode; The secure access mode is used to control the display to present the target information in a manner that does not include a watermark; if the access mode is a non-secure access mode, the control display presents the target information in a manner including a watermark;

A display 83 is configured to present the target information in a manner with or without a watermark under the control of the processor 82.

The access information received by the receiver 81 includes at least one of the following: access location information, access authentication information, user identification information, and device identification information.

Further, when the access information includes at least one of the following: access location information, user identification information, and device identification information, the device further includes:

The memory 84 is configured to store a pre-configured secure access white list.

The processor 82 is further configured to: query, according to the access information acquired by the receiver 81, the secure access white list stored in the memory;

If the query result indicates that the access information belongs to the secure access whitelist, the access mode of the user is determined to be a secure access mode.

Or, when the access information includes at least one of the following: access location information, user identification information, and device identification information, the device further includes:

The memory 84 is configured to store a pre-configured secure access blacklist.

The processor 82 is further configured to: query, according to the access information acquired by the receiver 81, a secure access blacklist stored in the memory;

If the query result indicates that the access information does not belong to the security access blacklist, it is determined that the access mode of the user is a secure access mode.

If the query result indicates that the access information belongs to the security access blacklist, the access mode of the user is determined to be a non-secure access mode.

Further, when the access information includes the access authentication information, the processor 82 is further configured to: determine, according to the access authentication information received by the receiver 81, the access mode of the user; if the access authentication information indicates If the access mode of the user is authenticated by the access authentication system, the access mode of the user is determined to be a secure access mode; and the access authentication information indicates that the access mode of the user does not pass the access authentication. The authentication of the system determines that the access mode of the user is a non-secure access mode.

In addition, the processor 82 is further configured to control the display to simultaneously present target information and a separate watermark;

The receiver 81 is further configured to: acquire a security level of the target information before the processor 82 controls the display 83 to present target information in a manner including a watermark;

The processor 82 is further configured to determine a watermark type according to a security level received by the receiver 81; and present the target information in a manner of including a watermark corresponding to the watermark type.

Factors affecting the type of watermark determined by the processor 82 include at least one of: watermark location, watermark size, watermark color, and watermark content.

The processor is further configured to: in the non-secure access mode, if the target information cannot be presented in a manner including a watermark, perform an alarm or stop providing the service to the user.

The information presentation device provided in this embodiment determines whether the user is securely accessing by obtaining the access information of the user accessing the cloud computing system, compared with the method in the prior art that the watermark is always present in the target information. The target information can be presented in a watermark-free manner when the user accesses the security to avoid visual interference caused by the watermark in the secure access mode, which is beneficial to the viewing and use of the target information.

Through the description of the above embodiments, those skilled in the art can clearly understand The invention can be implemented by means of software plus the necessary general hardware, and of course also by hardware, but in many cases the former is a better implementation. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, may be embodied in the form of a software product stored in a readable storage medium, such as a floppy disk of a computer. A hard disk or optical disk or the like includes instructions for causing a computer device (which may be a personal computer, a server, or a network device, etc.) to perform the methods described in various embodiments of the present invention. The above is only the specific embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or substitutions within the technical scope of the present invention. It should be covered by the scope of the present invention. Therefore, the scope of the invention should be determined by the scope of the appended claims.

Claims

claims

1. An information presentation method, applied to the process of users accessing the cloud computing system to access target information stored in the cloud computing system, characterized in that the method includes:

Obtain the access information of the user;

Determine the access mode of the user according to the access information;

If the access method is a secure access method, the target information is presented without a watermark;

If the access method is a non-secure access method, the target information is presented in a manner including a watermark.

2. The method according to claim 1, characterized in that,

3. The method according to claim 1 or 2, characterized in that when the access information includes at least one of the following: access location information, user identification information and device identification information, The information determining the user's access method includes:

Query the pre-configured secure access whitelist according to the access information;

If the access information belongs to the secure access whitelist, it is determined that the user's access method is a secure access method;

If the access information does not belong to the secure access whitelist, it is determined that the user's access mode is a non-secure access mode.

4. The method according to claim 1 or 2, characterized in that when the access information includes at least one of the following: access location information, user identification information and device identification information, The information determining the user's access method includes:

Query a preconfigured secure access blacklist according to the access information;

If the access information does not belong to the secure access blacklist, determine that the user's access method is a secure access method;

If the access information belongs to the secure access blacklist, it is determined that the user's access mode is a non-secure access mode.

5. The method according to claim 1 or 2, characterized in that, when the access information includes access authentication information, determining the access mode of the user according to the access information includes: if If the access authentication information indicates that the user's access method has passed the authentication of the access authentication system, it is determined that the user's access method is a secure access method;

If the access authentication information indicates that the user's access mode has not passed the authentication of the access authentication system, it is determined that the user's access mode is a non-secure access mode.

6. The method according to any one of claims 1 to 5, characterized in that: presenting the target information in a manner including a watermark includes:

Present the target information and an independent watermark simultaneously; or,

The watermark is inserted into the display graphic frame of the target information, and the target information into which the watermark has been inserted is presented.

7. The method according to any one of claims 1 to 6, characterized in that, before presenting the target information in a manner including a watermark, it further includes:

Obtain the security level of the target information, and determine the watermark type according to the security level; Presenting the target information in a manner that includes a watermark is: Presenting the target information in a manner that includes a watermark corresponding to the watermark type.

8. The method according to claim 7, wherein factors affecting the watermark type include at least one of the following: watermark position, watermark size, watermark color, and watermark content.

9. The method according to any one of claims 1 to 8, further comprising: in a non-secure access mode, if the target information cannot be presented in a manner containing a watermark, alarm or stop Provide services to said users.

10. An information presentation device, used in the process of users accessing a cloud computing system and accessing target information stored in the cloud computing system, characterized in that it includes:

An acquisition unit, configured to acquire access information of the user;

Determining unit, configured to determine the access mode of the user according to the access information obtained by the obtaining unit;

The first presentation unit is configured to present the target information in a watermark-free manner when the determining unit determines that the access method is a secure access method;

The second presentation unit is used when the determining unit determines that the access method is non-secure access. mode, the target information is presented in a manner including a watermark.

11. The device according to claim 10, wherein the access information obtained by the acquisition unit includes at least one of the following: access location information, access authentication information, user identification information and device identification information.

12. The device according to claim 10 or 11, characterized in that, the access information obtained by the obtaining unit includes at least one of the following: when accessing location information, user identification information and device identification information, the determination Units include:

Query subunit, used to query the preconfigured secure access whitelist based on the access information obtained by the acquisition unit;

Determining subunit, configured to determine that the user's access mode is a safe access mode when the query result obtained by the query subunit indicates that the access information belongs to the secure access whitelist; When the query result obtained by the subunit indicates that the access information does not belong to the secure access whitelist, it is determined that the user's access mode is a non-secure access mode.

1 3. The device according to claim 10 or 1 1, characterized in that the access information obtained by the obtaining unit includes at least one of the following: access location information, user identification information and device identification information, the determination Units include:

Query subunit, used to query the preconfigured secure access blacklist based on the access information obtained by the acquisition unit;

Determining subunit, configured to determine that the user's access mode is a safe access mode when the query result obtained by the query subunit indicates that the access information does not belong to the secure access blacklist; When the query result obtained by the query subunit indicates that the access information belongs to the secure access blacklist, it is determined that the user's access mode is a non-secure access mode.

14. The device according to claim 10 or 11, characterized in that the access information obtained by the obtaining unit includes access authentication information, and the determining unit is also used to:

If the access authentication information obtained by the acquisition unit indicates that the user's access method has passed the authentication of the access authentication system, it is determined that the user's access method is a secure access method; if the access method obtained by the acquisition unit If the access authentication information indicates that the user's access mode has not passed the authentication of the access authentication system, it is determined that the user's access mode is a non-secure access mode.

15. The device according to any one of claims 10-14, characterized in that, the first Two presentation units are used for:

Present the target information and an independent watermark simultaneously;

Or, insert the watermark into the display graphics frame of the target information, and present the target information with the watermark inserted.

16. The device according to any one of claims 10-15, further comprising: a watermark determination unit, configured to present the target information in a manner including a watermark before the second presentation unit, Obtain the security level of the target information, and determine the watermark type according to the security level;

The second presentation unit is further configured to: present the target information in a manner that includes a watermark corresponding to the watermark type determined by the watermark determination unit.

17. The device according to claim 16, characterized in that factors affecting the watermark type include at least one of the following: watermark position, watermark size, watermark color and watermark content.

18. The device according to any one of claims 10-17, further comprising: a monitoring unit, configured to detect that the second presentation unit cannot When the target information is presented in a manner including a watermark, an alarm is issued or services are stopped for the user.

19. An information presentation device, used in the process of users accessing a cloud computing system and accessing target information stored in the cloud computing system, which is characterized by including:

A receiver, used to obtain access information of the user;

A processor, configured to determine the access mode of the user based on the access information obtained by the receiver; if the access mode is a secure access mode, control the display to present the target information in a manner that does not contain a watermark; if If the access method is a non-secure access method, the display is controlled to present the target information in a manner including a watermark;

A display configured to present target information with or without a watermark under the control of the processor.

20. The device according to claim 19, wherein the access information obtained by the receiver includes at least one of the following: access location information, access authentication information, user identification information and device identification information.

21. The device according to claim 19 or 20, characterized in that, the access information Including at least one of the following: access location information, user identification information and device identification information. The device also includes:

Memory, used to store a pre-configured security access whitelist;

The processor is also configured to: query the secure access whitelist stored in the memory according to the access information obtained by the receiver;

If the query result indicates that the access information belongs to the secure access whitelist, it is determined that the user's access method is a secure access method;

If the query result indicates that the access information does not belong to the secure access whitelist, it is determined that the user's access method is a non-secure access method.

22. The device according to claim 19 or 20, characterized in that the access information includes at least one of the following: access location information, user identification information and device identification information, and the device further includes:

Memory, used to store a pre-configured security access blacklist;

The processor is also configured to: query the secure access blacklist stored in the memory according to the access information obtained by the receiver;

If the query result indicates that the access information does not belong to the secure access blacklist, it is determined that the user's access method is a secure access method;

If the query result indicates that the access information belongs to the secure access blacklist, it is determined that the user's access mode is a non-secure access mode.

23. The device according to claim 19 or 20, wherein the access information includes access authentication information, and the processor is further configured to:

If the access authentication information indicates that the user's access method has passed the authentication of the access authentication system, then it is determined that the user's access method is a secure access method;

24. The device according to any one of claims 19-23, characterized in that the processor is also used for:

Controlling the display to simultaneously present the target information and the independent watermark;

Or, insert the watermark into the display graphic frame of the target information to control the display The processor renders the target information with inserted watermark.

25. The device according to any one of claims 19 to 24, wherein the receiver is further configured to: before the processor controls the display to present the target information in a manner including a watermark, obtain the Describe the security level of the target information;

The processor is further configured to determine a watermark type according to the security level obtained by the receiver; and present the target information in a manner that includes a watermark corresponding to the watermark type.

26. The device according to any one of claims 19-25, characterized in that factors affecting the watermark type include at least one of the following: watermark position, watermark size, watermark color and watermark content.

27. The device according to any one of claims 19 to 26, characterized in that the processor is further configured to: in a non-secure access mode, if the target information cannot be presented in a manner containing a watermark, Then issue an alarm or stop providing services to the user.