WO2022022346A1 - Secure interaction method and apparatus - Google Patents

Abstract

A secure interaction method and apparatus. The method is applied to an electronic device. The method comprises: the electronic device receives a first instruction issued by a user (S101), the first instruction being used for instructing the electronic device to perform a first operation on first personal data of a first user, and the first user being a user registered in the electronic device beforehand; the electronic device determines a user identity of the user (S102); the electronic device obtains an operation permission of the first personal data (S103), the operation permission of the first personal data being used for indicating that the operation on the user identity of the first personal data is allowed; and the electronic device determines, according to the user identity of the user and the operation permission of the first personal data, whether to perform the first operation on the first personal data (S104). The secure interaction method can ensure the privacy and the security of personal data of each user.

Description

A security interaction method and device

This application claims the priority of a Chinese patent application with an application number of 202010758901.2 and an invention titled "A Secure Interaction Method and Device" filed with the State Intellectual Property Office of China on July 31, 2020, the entire contents of which are incorporated herein by reference Applying.

technical field

The present application relates to the field of artificial intelligence, and more specifically, to a secure interaction method and device.

Background technique

With the continuous development of technology, intelligent devices such as intelligent robots have been gradually accepted by the public, and are widely used in scenarios such as homes, shopping malls, supermarkets, hospitals, subways, enterprises and schools. During the user's use of the intelligent robot, the robot will save a large amount of the user's personal data, such as the user's personal information, photos, videos, recordings, family member relationships, friend relationships, schedules, and memos.

At present, the mainstream intelligent robots on the market mainly include interactive modules and safety modules. When the user needs to store the personal data X, the user will input the instruction A1 to store the personal data X to the interactive module, the interactive module will send the personal data X to the security module according to the instruction A1, and the security module will encrypt the personal data X and store it. When the user needs to view the personal data X, the user will input the instruction A2 for viewing the personal data X to the interactive module, the interactive module will notify the security module to provide the personal data X according to the instruction A2, and the security module will decrypt the encrypted personal data X to obtain the personal data. X, the interactive module outputs personal data X through the display screen or speaker.

The above-mentioned intelligent robot encrypts the stored data, which can prevent hackers from the external network from illegally obtaining the data in the intelligent robot, thereby ensuring that the data in the intelligent robot is safe. However, in the process of multiple users using the same intelligent robot, each user can view, modify or delete other users' personal data, so the above intelligent robot cannot guarantee the privacy of each user's personal data and security.

SUMMARY OF THE INVENTION

Embodiments of the present application provide a secure interaction method and apparatus to ensure the privacy and security of each user's personal data.

In a first aspect, an embodiment of the present application provides a secure interaction method, the method is applied to an electronic device, the method includes: the electronic device receives a first instruction issued by a user, and the first instruction is used to instruct the electronic device to respond to the first The first personal data of the user performs the first operation, and the first user is a user registered on the electronic device in advance. The electronic device determines the user's user identity. The electronic device obtains the operation authority of the first personal data, and the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data. The electronic device determines whether to perform the first operation on the first personal data according to the user identity of the user and the operation authority of the first personal data.

In the first aspect, when the electronic device receives the first instruction issued by the user, it indicates that the user wants the electronic device to perform the first operation on the first personal data of the first user, and the electronic device will obtain the first personal data , and determine the user's user identity. Then, the electronic device determines whether the user has the authority to perform the first operation according to the user's user identity and the operation authority of the first personal data. The first operation is performed on the personal data, otherwise, the electronic device will not perform the first operation on the first personal data. Therefore, the secure interaction method provided by the embodiments of the present application can ensure the privacy and security of each user's personal data.

In a possible implementation manner of the first aspect, the electronic device determining whether to perform the first operation on the first personal data according to the user's user identity and the operation authority of the first personal data includes: the electronic device determining the first Whether the operation authority of personal data includes the user's user identity. When the operation authority of the first personal data includes the user identity of the user, the electronic device performs the first operation on the first personal data. When the operation authority of the first personal data does not include the user identity of the user, the electronic device prohibits performing the first operation on the first personal data.

The electronic device can quickly determine whether to perform the first operation on the first personal data by determining whether the operation authority of the first personal data includes the user identity of the user, so the execution efficiency of the electronic device will be higher.

In a possible implementation manner of the first aspect, the electronic device performing the first operation on the first personal data includes: the electronic device determines whether there is a second user within a preset range of the electronic device, and the second user is a preset user in the electronic device. Users registered on electronic devices. When the second user exists within the preset range of the electronic device, the electronic device determines whether the access authority of the first personal data includes the second user. When the access right of the first personal data includes the second user, the electronic device performs the first operation on the first personal data. When the access authority of the first personal data does not include the second user, the electronic device prohibits performing the first operation on the first personal data. When the second user does not exist within the preset range of the electronic device, the electronic device performs the first operation on the first personal data.

Wherein, if there is a second user within the preset range of the electronic device, it means that some private information of the user may be seen or heard by the second user during the process of the electronic device performing the first operation on the first personal data. . In order to prevent the user's private information from being leaked, the electronic device also needs to determine whether the access authority of the first personal data includes the second user. With regard to the access authority of the first personal data, the second user does not need to worry about the leakage of private information to the second user, then the electronic device can perform the first operation on the first personal data. If the access right of the first personal data does not include the second user, it means that the user has not given the second user the access right to the first personal data in advance, then the electronic device prohibits the first operation on the first personal data, In order to avoid leaking the first personal data to the second user during the process of performing the first operation on the first personal data by the electronic device.

In a possible implementation manner of the first aspect, the electronic device performing the first operation on the first personal data includes: the electronic device determines whether there is a third user within a preset range of the electronic device, and the third user is not in the Users registered on electronic devices. When a third user exists within a preset range of the electronic device, the electronic device prohibits the electronic device from performing the first operation on the first personal data. When the third user does not exist within the preset range of the electronic device, the electronic device performs the first operation on the first personal data.

Wherein, if there is a third user within the preset range of the electronic device, it means that some private information of the user may be seen or heard by the third user during the process of the electronic device performing the first operation on the first personal data . Moreover, when the third user is an unregistered user, it means that the user has not given the third user the right to operate on the first personal data in advance, then the electronic device prohibits the first operation on the first personal data to avoid During the process of performing the first operation on the first personal data by the electronic device, the first personal data is leaked to the third user.

In a possible implementation manner of the first aspect, when the user identity of the user is the first user, the electronic device performing the first operation on the first personal data includes: the electronic device determines a first confidence level, the first confidence The degree is the degree of similarity between the user's current human body feature and the first user's human body feature pre-stored in the electronic device. The electronic device acquires the first privacy level of the first personal data, where the first privacy level is used to indicate the degree of privacy of the first personal data. The electronic device acquires a pre-established first mapping relationship between the confidence level and the privacy level. The electronic device determines a privacy level set corresponding to the first confidence level according to the first mapping relationship, where the privacy level set includes at least one privacy level. The electronic device determines whether the set of privacy levels includes the first privacy level. When the set of privacy levels includes the first privacy level, the electronic device performs the first operation on the first personal data. When the set of privacy levels does not include the first privacy level, the electronic device prohibits performing the first operation on the first personal data.

Wherein, the electronic device determines the privacy level that can provide the user with personal data according to the first confidence level of the user. If the first confidence level is higher, it indicates that the user is very likely to be the first user, and the electronic device allows the user to operate personal data with a higher privacy level. If the first confidence level is lower, it means that the possibility of the user being the first user is very low, and the electronic device allows the user to operate personal data with a lower privacy level. Therefore, the embodiments of the present application can avoid leaking personal data with a higher privacy level to a user with a lower confidence level, thereby ensuring the security of the user's personal data.

In a possible implementation manner of the first aspect, the electronic device receives a second instruction sent by the user, where the second instruction is used to instruct the electronic device to delete all personal data of the first user. The electronic device determines the user's user identity. When the user's user identity is the first user or the administrator, the electronic device determines a first storage area for storing the first key, which is a key for encrypting the personal data of the first user. The electronic device deletes the first key in the first storage area by using a secure deletion method, and the secure deletion method is a deletion method that can prevent the recovery of the first key after the first key is deleted. The electronic device deletes all personal data of the first user encrypted by the first key.

Among them, all personal data of the first user encrypted by the first key are stored in the electronic device, in order to prevent the personal data in the electronic device from being leaked to other people in the scenario of selling out, borrowing, repairing or losing the electronic device , the electronic device avoids illegal users from obtaining the first key by eliminating the first key. Even if the illegal user restores all the deleted personal data of the first user encrypted by the first key to the storage area of the electronic device by illegal means, since the illegal user cannot obtain the first key, he cannot All personal data of the first user encrypted by the first key is decrypted. Therefore, the embodiment of the present application can prevent the user's privacy from being leaked.

In a possible implementation manner of the first aspect, the first operation is an input operation, the operation authority of the first personal data is the input authority, and the user identity of the user is the first user. The electronic device determining whether to perform the first operation on the first personal data according to the user identity of the user and the operation authority of the first personal data includes: the electronic device determining that the input authority of the first personal data includes the first user. The electronic device acquires a first key corresponding to the first user, where the first key is a key for encrypting personal data of the first user. The electronic device encrypts the first personal data with the first key to obtain encrypted first personal data. The electronic device establishes a second mapping relationship between the first user, the second privacy level, and the encrypted first personal data, where the second privacy level is a privacy level corresponding to the first personal data. The electronic device stores the second mapping relationship.

Among them, in the process of storing personal data, the embodiment of this application not only encrypts the personal data, but also stores the privacy level and user identity corresponding to the personal data, so that when reading personal data, the user identity can be read Personal data is found, and the privacy level corresponding to the personal data can be determined when the personal data is read.

In a possible implementation manner of the first aspect, the first operation is an input operation, an output operation, a modification operation or a deletion operation.

In a possible implementation manner of the first aspect, the electronic device receives a third instruction sent by the user, where the third instruction is used to instruct the electronic device to configure the access authority of the user set to the personal data set, and the personal data set includes the first user At least one personal data of the user set includes at least one user registered in the electronic device in advance. The electronic device determines the user identity of the user as the first user. The electronic device configures the access rights of each user in the user set to each personal data in the personal data set.

The first user can configure whether his personal data can be accessed by other registered users on the electronic device. If the first user allows other registered users to access his own personal data, then the first user can add the access rights of other registered users to his own personal data. If the first user does not allow other registered users to access his own personal data, the first user can delete the access rights of other registered users to his own personal data. Therefore, the embodiment of the present application can enable the first user to flexibly configure the access rights of other registered users to his own personal data.

In a possible implementation manner of the first aspect, configuring the access rights of the user set to each personal data in the personal data set by the electronic device includes: adding the electronic device to each user in the user set to each personal data in the personal data set access rights. Alternatively, the electronic device deletes the access rights of each user in the user set to each personal data in the personal data set.

In a second aspect, an embodiment of the present application provides an electronic device, the electronic device includes: a receiving module configured to receive a first instruction sent by a user, where the first instruction is used to instruct the electronic device to respond to the first user's first The first operation is performed on the personal data, and the first user is a user registered on the electronic device in advance. The processing module is used to determine the user identity of the user. The operation authority of the first personal data is obtained, and the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data. Whether to perform the first operation on the first personal data is determined according to the user identity of the user and the operation authority of the first personal data.

In a possible implementation manner of the second aspect, the processing module is specifically configured to determine whether the operation authority of the first personal data includes the user identity of the user. When the operation authority of the first personal data includes the user identity of the user, the electronic device performs the first operation on the first personal data. When the operation authority of the first personal data does not include the user identity of the user, the electronic device prohibits performing the first operation on the first personal data.

In a possible implementation manner of the second aspect, the processing module is specifically configured to determine whether there is a second user within a preset range of the electronic device, where the second user is a user registered on the electronic device in advance. When the second user exists within the preset range of the electronic device, the electronic device determines whether the access authority of the first personal data includes the second user. When the access right of the first personal data includes the second user, the electronic device performs the first operation on the first personal data. When the access authority of the first personal data does not include the second user, the electronic device prohibits performing the first operation on the first personal data. When the second user does not exist within the preset range of the electronic device, the electronic device performs the first operation on the first personal data.

In a possible implementation manner of the second aspect, the processing module is specifically configured to determine whether there is a third user within a preset range of the electronic device, where the third user is a user who has not been registered on the electronic device. When a third user exists within a preset range of the electronic device, the electronic device prohibits the electronic device from performing the first operation on the first personal data. When the third user does not exist within the preset range of the electronic device, the electronic device performs the first operation on the first personal data.

In a possible implementation manner of the second aspect, the processing module is specifically configured to determine a first confidence level, where the first confidence level is the difference between the user's current human body feature and the first user's human body feature pre-stored in the electronic device similarity between. The first privacy level of the first personal data is obtained, where the first privacy level is used to indicate the privacy degree of the first personal data. A pre-established first mapping relationship between confidence levels and privacy levels is acquired. A privacy level set corresponding to the first confidence level is determined according to the first mapping relationship, where the privacy level set includes at least one privacy level. It is judged whether the set of privacy levels includes the first privacy level. When the set of privacy levels includes the first privacy level, the electronic device performs the first operation on the first personal data. When the set of privacy levels does not contain the first privacy level, the electronic device prohibits performing the first operation on the first personal data.

In a possible implementation manner of the second aspect, the processing module is further configured to receive a second instruction sent by the user, where the second instruction is used to instruct the electronic device to delete all personal data of the first user. Determine the user's user identity. When the user's user identity is the first user or the administrator, the electronic device determines a first storage area for storing the first key, which is a key for encrypting the personal data of the first user. The electronic device deletes the first key in the first storage area by using a secure deletion method, and the secure deletion method is a deletion method that can prevent the recovery of the first key after the first key is deleted. Delete all personal data of the first user encrypted by the first key.

In a possible implementation manner of the second aspect, the processing module is specifically configured to determine that the input authority of the first personal data includes the first user. A first key corresponding to the first user is obtained, where the first key is a key for encrypting personal data of the first user. The first personal data is encrypted by using the first key to obtain encrypted first personal data. A second mapping relationship between the first user, the second privacy level, and the encrypted first personal data is established, where the second privacy level is a privacy level corresponding to the first personal data. The second mapping relationship is stored.

In a possible implementation manner of the second aspect, the first operation is an input operation, an output operation, a modification operation or a deletion operation.

In a possible implementation manner of the second aspect, the processing module is further configured to receive a third instruction sent by the user, where the third instruction is used to instruct the electronic device to configure the access authority of the user set to the personal data set, and the personal data set At least one personal data of the first user is included, and the user set includes at least one user registered in the electronic device in advance. The user identity of the user is determined as the first user. Configure the access rights of each user in the user collection to each personal data in the personal data collection.

In a possible implementation manner of the second aspect, the processing module is specifically configured to add the access authority of each user in the user set to each personal data in the personal data set. Or, the processing module is specifically configured to delete the access rights of each user in the user set to each personal data in the personal data set.

In a third aspect, an embodiment of the present application provides an electronic device, the electronic device includes a memory and a processor connected to the memory, and the memory is used for storing instructions. The processor is used for executing the instruction, so that the computer device performs the following operations: receiving the first instruction issued by the user, the first instruction is used for instructing the electronic device to perform the first operation on the first personal data of the first user, and the first user is Users pre-registered on electronic devices. Determine the user's user identity. The operation authority of the first personal data is obtained, and the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data. Whether to perform the first operation on the first personal data is determined according to the user identity of the user and the operation authority of the first personal data.

Description of drawings

FIG. 1 is a schematic diagram of a scenario provided by an embodiment of the present application;

FIG. 2 is a flowchart of a security interaction method provided by an embodiment of the present application;

FIG. 3 is a flowchart of another security interaction method provided by an embodiment of the present application;

FIG. 4 is a flowchart of another security interaction method provided by an embodiment of the present application;

FIG. 5 is a flowchart of another security interaction method provided by an embodiment of the present application;

FIG. 6 is a flowchart of another security interaction method provided by an embodiment of the present application;

FIG. 7 is a flowchart of another security interaction method provided by an embodiment of the present application;

FIG. 8 is a flowchart of another security interaction method provided by an embodiment of the present application;

FIG. 9 is a flowchart of another security interaction method provided by an embodiment of the present application;

FIG. 10 is a schematic diagram of an electronic device provided by an embodiment of the present application;

FIG. 11 is a schematic diagram of another electronic device provided by an embodiment of the present application;

FIG. 12 is a schematic diagram of yet another electronic device according to an embodiment of the present application.

detailed description

Please refer to FIG. 1 , which is a schematic diagram of a scenario provided by an embodiment of the present application. The scenario diagram shown in FIG. 1 shows an intelligent robot 100, a smartphone 200, a cloud server 300, a user 400, and a network 500, wherein the intelligent robot 100 shown in FIG. 1 can execute the secure interaction method provided by the embodiment of the present application. Specifically, a communication connection can be established between the intelligent robot 100 , the smartphone 200 and the cloud server 300 through the network 500 . Of course, the intelligent robot 100 and the smart phone 200 can also establish a communication connection by means of Bluetooth or the like.

In the example shown in FIG. 1, the intelligent robot 100 may include a processor, a microphone, a camera, a touch display screen, a speaker, a sensor, and various communication interfaces, among others. The intelligent robot 100 may be capable of speech recognition and face recognition, for example, speech synthesis (text to speech, TTS), automatic speech recognition (automatic speech recognition, ASR), voice print recognition (voice print recognition, VPR), natural language Processing (natural language processing, NLP), face recognition, sound source localization and face tracking capabilities.

The cloud server 300 includes an artificial intelligence server and a business server. The artificial intelligence server may provide capabilities such as speech recognition and face recognition, and the service server may provide related services for the application software on the intelligent robot 100 and the application software on the smart phone 200 .

The smartphone 200 is installed with application software for controlling the intelligent robot 100 , so that the user 400 can send control commands to the intelligent robot 100 through the smartphone 200 , and can also input personal information of the user 400 to the intelligent robot 100 through the smartphone 200 .

During the process of using the intelligent robot 100 by the user 400 , a large amount of personal data will be stored in the intelligent robot 100 . When multiple users use the intelligent robot 100 at the same time, how to ensure the privacy and security of each user's personal data is particularly important. The following will introduce a security interaction method, which can ensure the privacy and security of each user's personal data when multiple users use one intelligent robot 100 at the same time.

Please refer to FIG. 2, which is a flowchart of a secure interaction method provided by an embodiment of the present application. The security interaction method shown in FIG. 2 can be applied to electronic devices, and the electronic devices can be devices such as smart robots, smart screens, smart speakers, and smart security products. The method shown in FIG. 2 includes the following steps S101 to S104.

S101. The electronic device receives a first instruction sent by a user.

The first instruction is used to instruct the electronic device to perform a first operation on the first personal data of the first user, the first user is a user who has been registered on the electronic device in advance, and the first operation may be an input operation, an output operation, For modification operation or deletion operation, the user can be the first user, other registered users or unregistered users.

For example, referring to FIG. 1 , assuming that the user 400 is a user who has registered on the intelligent robot 100 in advance, and the user 400 wants to check his schedule for the week on the intelligent robot 100, the user 400 can send the information to the intelligent robot 100 A voice command, the voice command may specifically be "please display the schedule within a week".

For another example, please refer to FIG. 1 , assuming that the user 400 is a user who has registered on the intelligent robot 100 in advance, and the user 400 wants to check the date of birth of the first user on the intelligent robot 100 , then the user 400 can ask the intelligent robot 100 Send a voice command, the voice command may specifically be "please display the date of birth of the first user".

For another example, please refer to FIG. 1 , assuming that the user 400 is a user who has not registered on the intelligent robot 100 , and the user 400 wants to check the phone number of the first user on the intelligent robot 100 , then the user 400 can ask the intelligent robot 100 Send a voice command, the voice command may specifically be "please display the phone number of the first user".

S102, the electronic device determines the user identity of the user.

The user identity of the user refers to a user who is pre-registered in the electronic device or a user who has not been registered in the electronic device.

There are various ways to determine the user identity of the user in this embodiment of the present application. For example, the electronic device can determine the user identity of the user by verifying the account and password input by the user. For another example, the electronic device can also determine the user identity of the user by recognizing the fingerprint of the user's finger. For another example, the electronic device can also determine the user identity of the user through face recognition, voiceprint recognition, or face recognition combined with voiceprint recognition.

The electronic device can use its own hardware to determine the user identity of the user, and can also use the cloud server to determine the user identity of the user. For example, after the electronic device obtains the user's face image and the user's voiceprint features, if the electronic device has the recognition capability of the face image and voiceprint features, the electronic device will preferentially use its own recognition capability to determine the user user identity. If the electronic device does not have the ability to recognize face images and voiceprint features, the electronic device will send the acquired user's face image and user's voiceprint features to the cloud server, and the cloud server will use its own recognition capabilities. The user's face image and the user's voiceprint feature are correspondingly recognized, and the cloud server will feed back the recognition result to the electronic device, so that the electronic device can determine the user's user identity according to the recognition result.

The following introduces a specific method for the electronic device to determine the user identity of the user, and the method includes A1021 to A1023.

A1021. The electronic device acquires the first voice sent by the user.

Wherein, the first voice is the voice made by the user when speaking.

A1022. The electronic device extracts the sound feature of the first speech.

The sound features of the first speech specifically include acoustic features, lexical features, prosody features, language types, dialect features, accent features, and the like.

A1023. The electronic device uses a pre-generated voiceprint recognition model to determine the user identity of the user corresponding to the sound feature of the first voice.

Wherein, the voiceprint recognition model mentioned in A1023 can be generated according to the following method. The method includes: first, the electronic device acquires the voice made by the user through a microphone. Then, the electronic device extracts the sound features in the voice uttered by the user. Secondly, the electronic device uses a preset training method to train the sound features in the speech to obtain a voiceprint recognition model.

The preset training method may be a Markov model method, a clustering method, a neural network method, a nearest neighbor method, or a polynomial classifier method. Each user using the electronic device needs to train the voiceprint recognition model according to the above method for training the voiceprint recognition model, so that the trained voiceprint recognition model can recognize the voice features of each user.

The following introduces another specific method for the electronic device to determine the user identity of the user, and the method includes B1021 to B1023.

B1021. The electronic device acquires a first face image of the user.

Wherein, the electronic device can collect the first face image of the user through a camera, and the first face image needs to have an image of the user's facial features.

B1022. The electronic device extracts the first face feature in the first face image.

The first face features include but are not limited to histogram features, color features, template features, structural features, Haar-like features, and the like.

B1023. The electronic device uses a pre-generated face recognition model to determine the user identity of the user corresponding to the first face feature.

Wherein, the face recognition model mentioned in B1023 can be generated according to the following method, and the method includes: first, the electronic device obtains the face image of the user through a camera. Then, the electronic device extracts the facial features in the facial image. Secondly, the electronic device uses a preset learning method to train the face features in the face image to obtain a face recognition model.

The preset learning method can be a deep learning algorithm, a neural network algorithm, or a support vector machine (support vector machine, SVM) algorithm, or the like. Each user using the electronic device needs to train the face recognition model according to the above method for training the face recognition model, so that the trained face recognition model can recognize the face image of each user.

The following introduces another specific method for the electronic device to determine the user identity of the user, and the method includes C1021 to C1027.

C1021. The electronic device acquires the first face image of the user and the first voice uttered by the user.

C1022. The electronic device extracts the sound feature of the first voice.

C1023. The electronic device extracts the first face feature in the first face image.

C1024. The electronic device uses the pre-generated voiceprint recognition model to calculate the voiceprint confidence of the sound feature of the first speech.

The voiceprint confidence level is used to indicate the degree of similarity between the voice feature of the first voice and the voice feature of the first user.

C1025. The electronic device uses the pre-generated face recognition model to calculate the face confidence of the first face feature.

The face confidence level is used to indicate the degree of similarity between the first face feature and the face feature of the first user.

C1026. The electronic device calculates a comprehensive confidence level according to the voiceprint confidence level and the face confidence level.

C1027. When the comprehensive confidence level is greater than the threshold, the electronic device determines that the user identity of the user is the first user.

Specifically, the comprehensive confidence level=(V×S)÷{1-[V×(1-S)+S×(1-V)]}, where V is the face confidence level, and S is the voiceprint confidence level.

For example, assuming V=0.7 and S=0.6, then the overall confidence level=V×S÷{1-[V×(1-S)+S×(1-V)]}=0.77.

S103, the electronic device obtains the operation authority of the first personal data.

Among them, the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data. The operation authority can be input authority, access authority, modification authority or deletion authority, etc. Each operation corresponds to an operation permissions.

For example, please refer to Table 1, which is the correspondence table between personal data and various operation permissions.

user ID	personal data	Enter permissions	access permission	edit permission	remove permission
User A	bank card information	User A	User A	User A	User A
User A	telephone number	User A	User A, User B	User A	User A
User A	Birth place	User A	User A, User B, User C	User A	User A
…	…	…	…	…	…

Table 1

For example, with reference to the examples in Table 1, assuming that the first personal data is bank card information, and the first operation is to output the bank card information of user A, if the user is user A, then the electronic device can output user A according to the first instruction bank card information. If the user is user B, user C or an unregistered user, the electronic device will not output user A's bank card information according to the first instruction, and the electronic device will remind the user that the access authority is insufficient to output user A's bank card information .

For another example, in combination with the examples in Table 1, it can be seen that, assuming that the first personal data is a phone number, and the first operation is to output the phone number of user A, if the user is user A or user B, then the electronic device can output the phone number according to the first instruction. User A's phone number. If the user is user C or an unregistered user, the electronic device will not output user A's phone number according to the first instruction, and the electronic device will remind the user that the access authority is insufficient to output user A's phone number.

For another example, combined with the examples in Table 1, it can be seen that, assuming that the first personal data is the place of birth, and the first operation is to modify the place of birth of user A, if the user is user A, then the electronic device allows the user to modify the place of birth of user A. . If the user is user B, user C, or an unregistered user, the electronic device does not allow the user to modify the birthplace of user A, and the electronic device will remind the user that the modification authority is insufficient to modify the birthplace of user A.

S104, the electronic device determines whether to perform the first operation on the first personal data according to the user identity of the user and the operation authority of the first personal data.

Wherein, according to the example in Table 1 above, it can be known that after obtaining the user identity of the user and the operation authority of the first personal data, the electronic device can determine whether to perform the first operation on the first personal data.

In the embodiment shown in FIG. 2 , when the electronic device receives the first instruction sent by the user, it indicates that the user wants the electronic device to perform the first operation on the first personal data of the first user, and the electronic device will obtain the first command. The authority to operate on a person's data and determine the user identity of the user. Then, the electronic device determines whether the user has the authority to perform the first operation according to the user's user identity and the operation authority of the first personal data. The first operation is performed on the personal data, otherwise, the electronic device will not perform the first operation on the first personal data. Therefore, the secure interaction method provided by the embodiments of the present application can ensure the privacy and security of each user's personal data.

In the embodiment shown in FIG. 2 , when the first operation is an output manipulation, if the electronic device determines that the output operation can be performed on the first personal data according to the user's user identity and the operation authority of the first personal data, then The electronic device first obtains a first key corresponding to the first user, and the first key is a key for encrypting the personal data of the first user. Then, the electronic device will obtain the first personal data encrypted in advance by the first key. Secondly, the electronic device decrypts the encrypted first personal data by using the first key to obtain the first personal data. Finally, the electronic device can output the first personal data.

Please refer to FIG. 3 , which is a flowchart of another security interaction method provided by an embodiment of the present application. The method shown in FIG. 3 is the refinement step of S104 in FIG. 2 , and is specifically the step of “the electronic device determines whether to perform the first operation on the first personal data according to the user’s user identity and the operation authority of the first personal data”. refinement steps. The method shown in FIG. 3 includes the following steps S201 to S203.

S201. The electronic device determines whether the operation authority of the first personal data includes the user identity of the user. If the operation authority of the first personal data includes the user identity of the user, step S202 is performed; otherwise, step S203 is performed.

S202, the electronic device performs a first operation on the first personal data.

S203, the electronic device prohibits performing the first operation on the first personal data.

For example, please refer to Table 1. If the first personal data is bank card information, the operation authority of the first personal data is access authority, and the user's user identity is User A. In Table 1, you can see that the bank User A is included in the access authority of the card information, then the electronic device performs an output operation on the bank card information.

For example, please refer to Table 1. If the first personal data is bank card information, the operation authority of the first personal data is access authority, and the user's user identity is User B. In Table 1, you can see that the bank If user B is not included in the access authority of the card information, the electronic device will prohibit the output operation of the bank card information.

In the embodiment shown in FIG. 3, the electronic device can quickly determine whether to perform the first operation on the first personal data by determining whether the operation authority of the first personal data includes the user identity of the user, so the electronic device can quickly determine whether to perform the first operation on the first personal data. The device will perform more efficiently.

Please refer to FIG. 4 , which is a flowchart of another security interaction method provided by an embodiment of the present application. The method shown in FIG. 4 is the refinement step of S202 in FIG. 3 , and is specifically the refinement step of “the electronic device performs the first operation on the first personal data”. The method shown in FIG. 4 includes the following steps S301 to S304.

S301. The electronic device determines whether there is a second user within the preset range of the electronic device, and when the second user exists within the preset range of the electronic device, perform step S302; otherwise, perform step S303.

The second user is a user registered on the electronic device in advance, and the electronic device can detect whether there is a second user within a preset range of the electronic device through hardware such as a camera, a microphone array, or a sensor. The preset range of the electronic device can be defined by the user according to the actual situation. For example, the user can set the preset range of the electronic device to be within 3 meters with the electronic device as the center.

S302. The electronic device determines whether the access authority of the first personal data includes the second user, and when the access authority of the first personal data includes the second user, execute step S303; otherwise, execute step S304.

Wherein, if there is a second user within the preset range of the electronic device, it means that some private information of the user may be seen or heard by the second user during the process of the electronic device performing the first operation on the first personal data. . In order to prevent the user's private information from being leaked, the electronic device also needs to determine whether the access authority of the first personal data includes the second user. With regard to the access authority of the first personal data, the second user does not need to worry about the leakage of private information to the second user, then the electronic device can perform the first operation on the first personal data. If the access right of the first personal data does not include the second user, it means that the user has not given the second user the access right to the first personal data in advance, then the electronic device prohibits the first operation on the first personal data, In order to avoid leaking the first personal data to the second user during the process of performing the first operation on the first personal data by the electronic device.

S303, the electronic device performs a first operation on the first personal data.

S304, the electronic device prohibits performing the first operation on the first personal data.

For example, please refer to Table 1. If the first personal data is bank card information, the operation authority of the first personal data is access authority, and the user's user identity is User A. In Table 1, you can see that the bank User A is included in the access authority of the card information. At this time, the electronic device determines whether there is a second user within the preset range of the electronic device, and if there is a second user within the preset range of the electronic device and the second user is user B, then the electronic device determines the first personal data Whether the operation authority of user B is included. In Table 1, it can be seen that user B is not included in the access authority of bank card information, and the electronic device prohibits the output operation of bank card information to avoid leaking user A's bank card information to user B.

For example, please refer to Table 1. If the first personal data is a phone number, the operation authority of the first personal data is access authority, and the user's user identity is User A, the phone number can be seen in Table 1. User A is included in the access rights of . At this time, the electronic device determines whether there is a second user within the preset range of the electronic device, and if there is a second user within the preset range of the electronic device and the second user is user B, then the electronic device determines the first personal data Whether the access rights of user B are included. In Table 1, it can be seen that user B is included in the access authority of the phone number, and the electronic device performs an output operation on the phone number.

For example, please refer to Table 1. If the first personal data is a phone number, the operation authority of the first personal data is access authority, and the user's user identity is User A, the phone number can be seen in Table 1. User A is included in the access rights of . At this time, the electronic device determines whether the second user exists within the preset range of the electronic device, and if the second user does not exist within the preset range of the electronic device, the electronic device performs an output operation on the phone number.

Please refer to FIG. 5 , which is a flowchart of another security interaction method provided by an embodiment of the present application. The method shown in FIG. 5 is the refinement step of S202 in FIG. 3 , and specifically is the refinement step of “the electronic device performs the first operation on the first personal data”. The method shown in FIG. 5 includes the following steps S401 to S403.

S401. The electronic device determines whether a third user exists within a preset range of the electronic device, and when a third user exists within the preset range of the electronic device, perform step S402; otherwise, perform step S403.

The third user is a user who has not registered on the electronic device, and the electronic device can detect whether there is a third user within a preset range of the electronic device through hardware such as a camera, a microphone array, or a sensor. The preset range of the electronic device can be defined by the user according to the actual situation. For example, the user can set the preset range of the electronic device to be within 3 meters with the electronic device as the center.

S402, the electronic device prohibits performing the first operation on the first personal data.

S403, the electronic device performs a first operation on the first personal data.

Wherein, if there is a third user within the preset range of the electronic device, it means that some private information of the user may be seen or heard by the third user during the process of the electronic device performing the first operation on the first personal data . Moreover, when the third user is an unregistered user, it means that the user has not given the third user the right to operate on the first personal data in advance, then the electronic device prohibits the first operation on the first personal data to avoid During the process of performing the first operation on the first personal data by the electronic device, the first personal data is leaked to the third user.

For example, please refer to Table 1. If the first personal data is bank card information, the operation authority of the first personal data is access authority, and the user's user identity is User A. In Table 1, you can see that the bank User A is included in the access authority of the card information. At this time, the electronic device determines whether there is a third user within the preset range of the electronic device, and if there is a third user within the preset range of the electronic device and the third user is an unregistered user, the electronic device prohibits the bank card information Execute the output operation to avoid leaking user A's bank card information to unregistered users.

Please refer to FIG. 6 , which is a flowchart of another security interaction method provided by an embodiment of the present application. The method shown in FIG. 6 is the refinement step of S202 in FIG. 3 , specifically the refinement step of “the electronic device performs the first operation on the first personal data”, and the scenario of the embodiment of the present application is the user of the user The identity is the first user. The method shown in FIG. 6 includes the following steps S501 to S507.

S501. The electronic device determines a first confidence level.

The first confidence level is the degree of similarity between the current human body feature of the user and the human body feature of the first user pre-stored in the electronic device.

The current human body feature of the user refers to the human body features such as the user's face image, voiceprint feature, or eyeball iris feature, which are collected on-site by the electronic device when the user inputs the first instruction to the electronic device.

The human body feature of the first user refers to a face image, voiceprint feature or eye iris feature, etc. previously input by the first user to the electronic device, and the human body feature of the first user is used as a reference standard for identifying the user identity of the first user .

Specifically, for the calculation method of the first confidence level, reference may be made to the calculation method of the comprehensive confidence level in the embodiment corresponding to FIG. 2 . The calculation method of the first confidence level is the same as the calculation method of the comprehensive confidence level.

S502, the electronic device acquires the first privacy level of the first personal data.

Wherein, the first privacy level is used to indicate the privacy degree of the first personal data.

When each personal data is input to the electronic device, the electronic device can automatically assign the corresponding privacy level to the personal data according to the mapping relationship between the personal data and the privacy level, or the user can send an instruction to the electronic device to determine the corresponding privacy level of the personal data. privacy level.

As an example, please refer to Table 2, which is a correspondence table between personal data and privacy levels pre-stored by the electronic device.

personal data	privacy level
bank card information	high risk
telephone number	medium risk
Birth place	low risk
…	…

Table 2

For example, in conjunction with Table 2, assuming that the electronic device pre-stores the mapping relationship table between personal data and privacy level as shown in Table 2, when the electronic device stores the bank card information of user A, the electronic device will be user A according to Table 2. 's bank card information is assigned a privacy level of high risk.

S503, the electronic device acquires a pre-established first mapping relationship between the confidence level and the privacy level.

By way of example, please refer to Table 3, which is the correspondence table between confidence levels and privacy levels pre-established by the electronic device.

confidence M	privacy level
M≥0.8	high risk, medium risk, low risk
0.7≤M＜0.8	medium risk, low risk
0.6≤M＜0.7	low risk
…	…

table 3

It can be known from Table 3 that the higher the confidence value M, the higher the privacy level of the personal data that can be accessed. The lower the value of the confidence level M, the lower the privacy level corresponding to the personal data that can be accessed.

S504. The electronic device determines a privacy level set corresponding to the first confidence level according to the first mapping relationship.

Wherein, the privacy level set includes at least one privacy level.

As an example, please refer to Table 3, assuming that the first confidence level is 0.9, then the privacy level set corresponding to the first confidence level includes 3 privacy levels, namely high risk, medium risk and low risk.

As an example, please refer to Table 3, assuming that the first confidence level is 0.75, then the privacy level set corresponding to the first confidence level includes two privacy levels, which are medium risk and low risk.

S505. The electronic device determines whether the privacy level set includes the first privacy level. When the privacy level set includes the first privacy level, step S506 is performed; when the privacy level set does not include the first privacy level, step S507 is performed.

For example, please combine Table 2 and Table 3, assuming that the first personal data is bank card information, and the first confidence level is 0.9, combined with Table 2, it can be determined that the first privacy level corresponding to the bank card information is high risk, With reference to Table 3, it can be determined that the set of privacy levels corresponding to the first confidence level of 0.9 includes high risk, medium risk and low risk. The electronic device may determine that the set of privacy levels includes the first privacy level, and finally the electronic device performs the first operation on the first personal data.

For example, please combine Table 2 and Table 3, assuming that the first personal data is bank card information, and the first confidence level is 0.75, combined with Table 2, it can be determined that the first privacy level corresponding to the bank card information is high risk, With reference to Table 3, it can be determined that the set of privacy levels corresponding to the first confidence level of 0.75 includes medium risk and low risk. The electronic device may determine that the set of privacy levels does not contain the first privacy level, and finally the electronic device prohibits performing the first operation on the first personal data.

S506, the electronic device performs a first operation on the first personal data.

S507, the electronic device prohibits performing the first operation on the first personal data.

In the embodiment shown in FIG. 6 , the electronic device determines, through the first confidence level of the user, the privacy level that can provide the user with personal data. If the first confidence level is higher, it indicates that the user is very likely to be the first user, and the electronic device allows the user to operate personal data with a higher privacy level. If the first confidence level is lower, it means that the possibility of the user being the first user is very low, and the electronic device allows the user to operate personal data with a lower privacy level. Therefore, the embodiments of the present application can avoid leaking personal data with a higher privacy level to a user with a lower confidence level, thereby ensuring the security of the user's personal data.

Please refer to FIG. 7 , which is a flowchart of another security interaction method provided by an embodiment of the present application. The method shown in FIG. 7 is an extension of FIG. 2 , that is, the steps shown in FIG. 7 are further included on the basis of FIG. 2 . The method shown in FIG. 7 includes the following steps S601 to S605.

S601. The electronic device receives a second instruction sent by a user.

The second instruction is used to instruct the electronic device to delete all personal data of the first user.

In the case of the electronic device being sold, borrowed, repaired or lost, in order to avoid leakage of personal data in the electronic device to others, the user can send a second instruction to the electronic device through a communication device such as a smartphone, so that the electronic device can send a second instruction to the electronic device. All personal data of the first user is deleted. Of course, if the user can use the electronic device, the user can also directly input the second instruction on the electronic device.

S602, the electronic device determines the user identity of the user.

Wherein, S602 in FIG. 7 is the same step as S102 in FIG. 2 . For details on S602 in FIG. 7 , please refer to the detailed description of S102 in FIG. 2 .

S603. When the user identity of the user is the first user or the administrator, the electronic device determines a first storage area for storing the first key.

The first key is a key for encrypting the personal data of the first user. Each user registered on the electronic device corresponds to a key, and each user's key can be generated based on a secure random number generator, so each user's key is unique, and the password between users is unique. The keys are not the same.

After the electronic device receives the second instruction sent by the user, the electronic device will confirm the user identity of the user. When the user identity of the user is the first user or the administrator, it means that the user has the authority to delete all personal data of the first user, then the electronic device will determine the first storage area for storing the first key, so that the electronic device The first key may be destroyed within the first storage area.

S604, the electronic device deletes the first key in the first storage area by using a secure deletion method.

The safe deletion method is a deletion method that can prevent the recovery of the first key after the first key is deleted. Specifically, the electronic device may write target data for a preset number of times in the first storage area, so as to prevent the recovery of the first key after the electronic device deletes the first key. The preset number of times is a preset number of times, for example, 3 times, 5 times, and the like. The target data can be pre-generated random numbers. The purpose of repeatedly writing the target data in the first storage area is to completely delete the first key in the first storage area, so as to prevent an illegal user from recovering the first key from the first storage area through some technical means.

S605, the electronic device deletes all personal data of the first user encrypted by the first key.

In the embodiment shown in FIG. 7 , all personal data of the first user encrypted by the first key are stored in the electronic device. If the personal data in the device is leaked to others, the electronic device avoids illegal users from obtaining the first key by eliminating the first key. Even if the illegal user restores all the deleted personal data of the first user encrypted by the first key to the storage area of the electronic device by illegal means, since the illegal user cannot obtain the first key, he cannot All personal data of the first user encrypted by the first key is decrypted. Therefore, the embodiment of the present application can prevent the user's privacy from being leaked.

Please refer to FIG. 8 , which is a flowchart of another security interaction method provided by an embodiment of the present application. The method shown in FIG. 8 is the refinement step of S104 in FIG. 2 , and is specifically the step of “the electronic device determines whether to perform the first operation on the first personal data according to the user’s user identity and the operation authority of the first personal data”. refinement steps. The method shown in FIG. 8 includes the following steps S701 to S705.

S701. The electronic device determines that the input authority of the first personal data includes the first user.

S702. The electronic device acquires the first key corresponding to the first user.

The first key is a key for encrypting the personal data of the first user. Each user registered on the electronic device corresponds to a key, and each user's key can be generated based on a secure random number generator, so each user's key is unique, and the password between users is unique. The keys are not the same.

In S702, in order to improve the security of the first key, the root key may be used to encrypt the first key, and the encrypted first key may be stored in the electronic device. Furthermore, the root key can be stored in the on-chip non-volatile memory of a central processing unit (CPU), system on chip (SOC), or cryptographic coprocessor, and is not exposed to the outside for reading The physical interface or logical interface of the root key to ensure the security of the root key.

In S702, in order to improve the security of the first key, the key encryption key may also be used to encrypt the first key, and the encrypted first key may be stored in the electronic device. The key encryption key is encrypted by using the root key, and the encrypted key encryption key is stored in the electronic device. Moreover, the root key can be stored in the on-chip non-volatile memory of the central processing unit, the system-on-chip or the encryption coprocessor, and the physical interface or logical interface for reading the root key is not exposed to the outside, so as to ensure the root key key security.

S703, the electronic device encrypts the first personal data with the first key to obtain encrypted first personal data.

S704. The electronic device establishes a second mapping relationship between the first user, the second privacy level, and the encrypted first personal data.

The second privacy level is the privacy level corresponding to the first personal data. Each personal data corresponds to a privacy level, as shown in Table 2, if the first personal data is a phone number, then the second privacy level corresponding to the first personal data is medium risk.

S705. The electronic device stores the second mapping relationship.

In the embodiment shown in FIG. 8 , in the process of storing personal data, the embodiment of the present application not only encrypts the personal data, but also stores the privacy level and user identity corresponding to the personal data, so as to facilitate the reading of the personal data. When personal data is used, the personal data can be found through the identity of the user, and the privacy level corresponding to the personal data can be determined when the personal data is read.

Please refer to FIG. 9 , which is a flowchart of another security interaction method provided by an embodiment of the present application. The method shown in FIG. 9 is an extension of FIG. 2 , that is, the steps shown in FIG. 9 are further included on the basis of FIG. 2 . The method shown in FIG. 9 includes the following steps S801 to S803.

S801. The electronic device receives a third instruction sent by a user.

The third instruction is used to instruct the electronic device to configure the access authority of the user set to the personal data set, the personal data set includes at least one personal data of the first user, and the user set includes at least one user registered in the electronic device in advance.

S802, the electronic device determines that the user identity of the user is the first user.

S803, the electronic device configures the access authority of each user in the user set to each personal data in the personal data set.

Optionally, in S803, it may specifically include the following steps: the electronic device adds the access authority of each user in the user set to each personal data in the personal data set.

For example, assuming that the user is the first user, the user set includes the second user, the first user and the second user are both registered users of the electronic device, and the personal data set includes the first personal data and the second personal data of the first user , the second user does not have access to the first personal data and the second personal data. In order to increase the access rights of the second user to the first personal data and the second personal data, the user may send a third instruction to the electronic device. When the electronic device receives the third instruction from the user, the electronic device determines that the user's user identity is the first user, and the electronic device adds the second user in the user set to the first personal data and the second personal data in the personal data set. data access rights. At this point, the second user has access rights to the first personal data and the second personal data of the first user.

Optionally, in S803, it may specifically include the following steps: the electronic device deletes the access authority of each user in the user set to each personal data in the personal data set

For example, assuming that the user is the first user, the user set includes the second user, the first user and the second user are both registered users of the electronic device, and the personal data set includes the first personal data and the second personal data of the first user , the second user has access rights to the first personal data and the second personal data. In order to delete the access authority of the second user to the first personal data and the second personal data, the user may send a third instruction to the electronic device. When the electronic device receives the third instruction from the user, the electronic device determines that the user's user identity is the first user, and the electronic device deletes the second user in the user set to the first personal data and the second personal data in the personal data set. data access rights. At this time, the second user does not have access rights to the first personal data and the second personal data of the first user.

In the embodiment shown in FIG. 9 , the first user can configure on the electronic device whether his personal data can be accessed by other registered users. If the first user allows other registered users to access his own personal data, then the first user can add the access rights of other registered users to his own personal data. If the first user does not allow other registered users to access his own personal data, the first user can delete the access rights of other registered users to his own personal data. Therefore, the embodiment of the present application can enable the first user to flexibly configure the access rights of other registered users to his own personal data.

Please refer to FIG. 10 , which is a schematic diagram of an electronic device according to an embodiment of the present application. The electronic device shown in Figure 10 includes the following modules:

The receiving module 11 is used to receive the first instruction issued by the user, the first instruction is used to instruct the electronic device to perform the first operation on the first personal data of the first user, and the first user is pre-registered on the electronic device. user.

The processing module 12 is used to determine the user identity of the user. The operation authority of the first personal data is obtained, and the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data. Whether to perform the first operation on the first personal data is determined according to the user identity of the user and the operation authority of the first personal data.

The additional functions that can be implemented by the receiving module 11 and the processing module 12, and more details of implementing the above functions, please refer to the descriptions in the foregoing method embodiments, which will not be repeated here.

The apparatus embodiment described in FIG. 10 is only illustrative. For example, the division of modules is only a logical function division. In actual implementation, there may be other division methods. For example, multiple modules or components may be combined or integrated into Another system, or some features can be ignored, or not implemented. Each functional module in each embodiment of the present application may be integrated into one processing module, or each module may exist physically alone, or two or more modules may be integrated into one module.

Please refer to FIG. 11 , which is a schematic diagram of another electronic device provided in an embodiment of the present application. The electronic device shown in Figure 11 includes the following modules:

The receiving module 21 is used for receiving the input of the user. The receiving module 21 may specifically include components such as a touch screen, a microphone, a camera, and a sensor, wherein the touch screen is used to receive user's touch input, the microphone is used to receive user's voice input, and the camera is used to collect the user's face image.

The output module 22 is used to feed back the output to the user. The output module 22 may specifically include a touch screen, a speaker, etc., wherein the touch screen is used for displaying output in the form of images, and the speaker is used for outputting in the form of sound. Of course, the output module 22 may also include a vibration motor for providing haptic feedback. When the electronic device is an intelligent robot, the output module 22 may further include the limbs of the intelligent robot, and the limbs of the intelligent robot are used to provide motion feedback, such as tapping, stroking and hugging the user.

The user identity identification module 23 is used to identify the user identity. The user identity recognition module 23 may include a face recognition system, a voiceprint recognition system, a fingerprint recognition system, a password system, and the like. When there are multiple identification systems in the user identification module 23, the user identification module 23 can perform a fusion determination on the results of the identification of the multiple identification systems through the fusion determination system, and finally determine the user's identity.

The face recognition system includes multiple functions such as face detection and analysis, facial features positioning, face search, face comparison, face verification, and liveness detection.

The voiceprint recognition system is a system that performs identification based on the characteristics of the speaker's voice. The main tasks of the voiceprint recognition system include voice signal processing, voiceprint feature extraction, voiceprint modeling, voiceprint comparison, and discriminative decision-making.

The fingerprint identification system is to classify and compare the fingerprints of the identified users to identify the identity.

The fusion judgment system obtains the final identity judgment result by merging and judging the recognition results of the face recognition system, the voiceprint recognition system and the fingerprint recognition system.

The privacy level determination module 24 may determine the privacy level of the personal data according to the pre-established mapping relationship between the personal data and the privacy level.

The encryption and decryption module 25 includes functions in charge of key management, encrypted data and decrypted data. For example, the encryption algorithm used for encrypting data may specifically be an advanced encryption standard (AES).

The storage module 26 may store the user's personal data.

The application module 27 is used to provide the user with functions for daily use, including functions such as daily dialogue and chat, games, entertainment, learning, and reminders.

Please refer to FIG. 12 , which is a schematic diagram of another electronic device provided by an embodiment of the present application. The electronic device shown in FIG. 12 includes a processor 31 and a memory 32 .

In the embodiment shown in FIG. 12 , the processor 31 is configured to execute the instructions stored in the memory 32, so that the electronic device performs the following operations: receiving a first instruction issued by the user, and the first instruction is used to instruct the electronic device to The first operation is performed on the first personal data of a user, and the first user is a user registered on the electronic device in advance. Determine the user's user identity. The operation authority of the first personal data is obtained, and the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data. Whether to perform the first operation on the first personal data is determined according to the user identity of the user and the operation authority of the first personal data.

The processor 31 is one or more CPUs. Optionally, the CPU is a single-core CPU or a multi-core CPU.

The memory 32 includes, but is not limited to, random access memory (RAM), read only memory (Read only Memory, ROM), erasable programmable read-only memory (erasable programmable read-only memory, EPROM or flash memory) memory), flash memory, or optical memory, etc. The code of the operating system is stored in the memory 32 .

Optionally, the electronic device further includes a bus 33, and the above-mentioned processor 31 and the memory 32 are connected to each other through the bus 33, and may also be connected to each other in other ways.

Each embodiment in this specification is described in a progressive manner, and the same and similar parts between the various embodiments may be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, as for the system embodiments, since they are basically similar to the method embodiments, the description is relatively simple, and for related parts, please refer to the partial descriptions of the method embodiments.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the scope of the present invention. Thus, provided that these modifications and variations of the present application fall within the scope of the claims of the present invention, the present invention is also intended to include such modifications and variations.

Claims (21)

1. A security interaction method, characterized in that the method is applied to an electronic device, and the method comprises:

   The electronic device receives a first instruction issued by the user, the first instruction is used to instruct the electronic device to perform a first operation on the first personal data of the first user registered users on electronic devices;

   the electronic device determines the user identity of the user;

   The electronic device obtains the operation authority of the first personal data, and the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data;

   The electronic device determines whether to perform a first operation on the first personal data according to the user identity of the user and the operation authority of the first personal data.
2. The secure interaction method according to claim 1, wherein the electronic device determines whether to execute the first personal data on the first personal data according to the user identity of the user and the operation authority of the first personal data. An operation includes:

   The electronic device determines whether the operation authority of the first personal data includes the user identity of the user;

   When the operation authority of the first personal data includes the user identity of the user, the electronic device performs a first operation on the first personal data;

   When the operation authority of the first personal data does not include the user identity of the user, the electronic device prohibits performing the first operation on the first personal data.
3. The secure interaction method according to claim 2, wherein the electronic device performing the first operation on the first personal data comprises:

   The electronic device determines whether there is a second user within a preset range of the electronic device, where the second user is a user registered on the electronic device in advance;

   When the second user exists within the preset range of the electronic device, the electronic device determines whether the access authority of the first personal data includes the second user; When the access right includes the second user, the electronic device performs the first operation on the first personal data; when the access right of the first personal data does not include the second user, the electronic device The device prohibits performing the first operation on the first personal data;

   When the second user does not exist within a preset range of the electronic device, the electronic device performs a first operation on the first personal data.
4. The secure interaction method according to claim 2, wherein the electronic device performing the first operation on the first personal data comprises:

   The electronic device determines whether there is a third user within a preset range of the electronic device, where the third user is a user who has not been registered on the electronic device;

   When the third user exists within the preset range of the electronic device, the electronic device prohibits the electronic device from performing a first operation on the first personal data;

   When the third user does not exist within a preset range of the electronic device, the electronic device performs a first operation on the first personal data.
5. The secure interaction method according to claim 2, wherein when the user identity of the user is the first user, the electronic device performing the first operation on the first personal data comprises:

   The electronic device determines a first confidence level, and the first confidence level is the similarity between the current human body feature of the user and the human body feature of the first user pre-stored in the electronic device;

   obtaining, by the electronic device, a first privacy level of the first personal data, where the first privacy level is used to indicate a privacy degree of the first personal data;

   obtaining, by the electronic device, a pre-established first mapping relationship between the confidence level and the privacy level;

   The electronic device determines, according to the first mapping relationship, a privacy level set corresponding to the first confidence level, where the privacy level set includes at least one privacy level;

   The electronic device determines whether the set of privacy levels includes the first privacy level;

   When the set of privacy levels includes the first privacy level, the electronic device performs a first operation on the first personal data;

   The electronic device prohibits performing a first operation on the first personal data when the set of privacy levels does not include the first privacy level.
6. The secure interaction method according to claim 1, wherein the method further comprises:

   The electronic device receives a second instruction sent by the user, where the second instruction is used to instruct the electronic device to delete all personal data of the first user;

   the electronic device determines the user identity of the user;

   When the user identity of the user is the first user or the administrator, the electronic device determines a first storage area for storing a first key, and the first key is for the first user the key to encrypt your personal data;

   The electronic device deletes the first key in the first storage area by using a secure deletion method, and the secure deletion method is a deletion method that can prevent recovery of the first key after deleting the first key ;

   The electronic device deletes all personal data of the first user encrypted by the first key.
7. The secure interaction method according to claim 1, wherein the first operation is an input operation, the operation authority of the first personal data is an input authority, and the user identity of the user is the first user;

   The electronic device determining whether to perform the first operation on the first personal data according to the user identity of the user and the operation authority of the first personal data includes:

   The electronic device determines that the input authority of the first personal data includes the first user;

   obtaining, by the electronic device, a first key corresponding to the first user, where the first key is a key for encrypting personal data of the first user;

   The electronic device encrypts the first personal data with the first key to obtain the encrypted first personal data;

   The electronic device establishes a second mapping relationship between the first user, the second privacy level, and the encrypted first personal data, where the second privacy level corresponds to the first personal data the level of privacy;

   The electronic device stores the second mapping relationship.
8. The secure interaction method according to claim 1, wherein the first operation is an input operation, an output operation, a modification operation or a deletion operation.
9. The secure interaction method according to claim 1, wherein the method further comprises:

   The electronic device receives a third instruction issued by the user, and the third instruction is used to instruct the electronic device to configure the access authority of the user set to the personal data set, the personal data set including at least one of the first user. Personal data, the user set includes at least one user registered in the electronic device in advance;

   The electronic device determines that the user identity of the user is the first user;

   The electronic device configures the access rights of each user in the set of users to each personal data in the set of personal data.
10. The secure interaction method according to claim 9, wherein configuring, by the electronic device, the access authority of the user set to each personal data in the personal data set comprises:

    The electronic device adds the access authority of each user in the user set to each personal data in the personal data set;

    or,

    The electronic device deletes the access rights of each user in the user set to each personal data in the personal data set.
11. An electronic device, comprising:

    A receiving module, configured to receive a first instruction sent by a user, the first instruction is used to instruct the electronic device to perform a first operation on the first personal data of the first user, the first user is a users who have registered on the aforementioned electronic device;

    a processing module, configured to determine the user identity of the user; obtain the operation authority of the first personal data, the operation authority of the first personal data is used to indicate the user who is allowed to operate the first personal data identity; determining whether to perform a first operation on the first personal data according to the user identity of the user and the operation authority of the first personal data.
12. The electronic device according to claim 11, wherein:

    The processing module is specifically configured to determine whether the operation authority of the first personal data includes the user identity of the user; when the operation authority of the first personal data includes the user identity of the user, The electronic device performs a first operation on the first personal data; when the operation authority of the first personal data does not include the user identity of the user, the electronic device prohibits the first operation on the first personal data. Person data performs the first operation.
13. The electronic device according to claim 12, wherein:

    The processing module is specifically configured to determine whether there is a second user within the preset range of the electronic device, where the second user is a user registered on the electronic device in advance; When the second user exists within the scope, the electronic device determines whether the access right of the first personal data includes the second user; if the access right of the first personal data includes the second user user, the electronic device performs the first operation on the first personal data; when the access authority of the first personal data does not include the second user, the electronic device prohibits the first operation on the first personal data. The personal data performs a first operation; when the second user does not exist within a preset range of the electronic device, the electronic device performs a first operation on the first personal data.
14. The electronic device according to claim 12, wherein:

    The processing module is specifically configured to determine whether there is a third user within the preset range of the electronic device, where the third user is a user who has not been registered on the electronic device; When the third user exists within the preset range, the electronic device prohibits the first operation on the first personal data; when the third user does not exist within the preset range of the electronic device, the electronic device The electronic device performs a first operation on the first personal data.
15. The electronic device according to claim 12, wherein:

    The processing module is specifically configured to determine a first confidence level, where the first confidence level is the similarity between the current human body feature of the user and the human body feature of the first user pre-stored in the electronic device obtaining the first privacy level of the first personal data, where the first privacy level is used to indicate the privacy level of the first personal data; obtaining a pre-established first mapping relationship between the confidence level and the privacy level ; Determine a privacy level set corresponding to the first confidence level according to the first mapping relationship, where the privacy level set includes at least one privacy level; determine whether the privacy level set includes the first privacy level; When the privacy level set includes the first privacy level, the electronic device performs the first operation on the first personal data; when the privacy level set does not include the first privacy level, the electronic device prohibits A first operation is performed on the first personal data.
16. The electronic device according to claim 11, wherein:

    The processing module is further configured to receive a second instruction sent by the user, where the second instruction is used to instruct the electronic device to delete all personal data of the first user; determine the user identity of the user; When the user identity of the user is the first user or the administrator, the electronic device determines a first storage area for storing a first key, and the first key is a key to the first user. The key for encrypting personal data; the electronic device deletes the first key in the first storage area by using a secure deletion method, and the secure deletion method is to delete the first key to prevent the A method for deleting the first key recovery; deleting all personal data of the first user encrypted by the first key.
17. The electronic device according to claim 11, wherein:

    The processing module is specifically configured to determine that the input authority of the first personal data includes the first user; obtain a first key corresponding to the first user, and the first key is for the first user. A key for encrypting personal data of a user; encrypting the first personal data with the first key to obtain the encrypted first personal data; establishing the first user and second privacy A second mapping relationship between the level and the encrypted first personal data, where the second privacy level is a privacy level corresponding to the first personal data; and the second mapping relationship is stored.
18. The electronic device according to claim 11, wherein the first operation is an input operation, an output operation, a modification operation or a deletion operation.
19. The electronic device according to claim 11, wherein:

    The processing module is further configured to receive a third instruction issued by the user, where the third instruction is used to instruct the electronic device to configure the access authority of the user set to the personal data set, the personal data set including the first At least one personal data of a user, the user set includes at least one user registered in the electronic device in advance; determine the user identity of the user as the first user; configure each user in the user set to Access rights for each personal data in the set of personal data.
20. The electronic device according to claim 19, wherein:

    The processing module is specifically configured to add the access authority of each user in the user set to each personal data in the personal data set; or,

    The processing module is specifically configured to delete the access authority of each user in the user set to each personal data in the personal data set.
21. An electronic device, characterized in that it comprises a memory and a processor connected to the memory, and the memory is used for storing instructions;

    The processor is configured to execute the instructions to cause the computing device to:

    Receive a first instruction sent by a user, where the first instruction is used to instruct the electronic device to perform a first operation on the first personal data of a first user who is pre-registered on the electronic device determine the user identity of the user; obtain the operation authority of the first personal data, the operation authority of the first personal data is used to indicate the identity of the user who is allowed to operate the first personal data ; Determine whether to perform a first operation on the first personal data according to the user identity of the user and the operation authority of the first personal data.

Images