WO2015180427A1

WO2015180427A1 - Method and apparatus for processing user data

Info

Publication number: WO2015180427A1
Application number: PCT/CN2014/091678
Authority: WO
Inventors: 和诚凯; 孔涛
Original assignee: 华为技术有限公司
Priority date: 2014-05-30
Filing date: 2014-11-19
Publication date: 2015-12-03
Also published as: CN103986728A; CN103986728B

Abstract

Embodiments of the present invention provide a method and an apparatus for processing user data. The apparatus for processing user data provided by the present invention comprises: a receiving unit, used for receiving a wireless information acquisition request sent by a network element device, the wireless information acquisition request being used for requesting acquisition of user data corresponding to a service application; a policy determining unit, used for determining a privacy protection policy corresponding to the service application according to the service application and the correspondence between the service application and the privacy protection policy; and a privacy processing unit, used for conducting privacy processing on the user data according to the privacy protection policy when the privacy protection policy is an instruction for privacy processing. The apparatus provided by the embodiments of the present invention can improve security of the user data.

Description

User data processing method and device

Technical field

The embodiments of the present invention relate to communication technologies, and in particular, to a method and an apparatus for processing user data.

Background technique

With the rapid development of Mobile Broadband (MBB) services, wireless network devices store rich data resources. Data analysts can use this data to mine user behavior. Operators also want to make effective use of their own data resources and open wireless information through a wireless network information open system.

In wireless information open systems, certain data, such as some data related to user privacy, need to be protected. However, existing wireless information open systems lack technology to protect these data, resulting in low security of these data. .

Summary of the invention

Embodiments of the present invention provide a method and apparatus for processing user data to improve data security.

In a first aspect, an embodiment of the present invention provides a user data processing apparatus, including:

a receiving unit, configured to receive a wireless information acquisition request sent by the network element device, where the wireless information acquisition request is used to request to acquire user data corresponding to the service application;

a policy determining unit, configured to determine, according to the service application, a correspondence between the service application and the privacy protection policy, a privacy protection policy corresponding to the service application;

a privacy processing unit, configured to perform the privacy processing on the user data according to the privacy protection policy when the privacy protection policy is used to indicate privacy processing.

In conjunction with the first aspect, in a first possible implementation manner of the first aspect, the privacy processing unit includes:

a negotiation result obtaining unit, configured to: when the privacy protection policy is used to indicate that the privacy negotiation is performed, perform the privacy negotiation according to the user equipment corresponding to the user data according to the privacy protection policy to obtain a privacy negotiation result;

a negotiation result processing unit, configured to provide the user data to the service application when the privacy negotiation result is used to indicate that the user data is opened to the service application; or when the privacy negotiation result is used to indicate When the user data is not opened to the service application, the indication information is sent to the network element device, and the indication information is used to indicate that the user data cannot be obtained.

With reference to the first aspect, in a second possible implementation manner of the first aspect, the negotiation result obtaining unit is further configured to: when the privacy protection policy is used to indicate that the pre-stored privacy negotiation result is adopted, according to the privacy The protection policy directly obtains the pre-existing privacy negotiation result;

The negotiation result processing unit is configured to: when the privacy negotiation result is used to indicate that the user data is opened to the service application, provide the user data to the service application; or, when the privacy negotiation result is used When the user data is not opened to the service application, the indication information is sent to the network element device, where the indication information is used to indicate that the user data cannot be obtained.

With reference to the first aspect, any one of the first to the second possible implementation manners of the first aspect, in a third possible implementation manner of the first aspect, the privacy processing unit is further used to The privacy protection policy is used to indicate that the user data is provided to the service application when privacy processing is not performed.

In a second aspect, an embodiment of the present invention provides a method for processing user data, including:

The user data processing device receives a wireless information acquisition request sent by the network element device, where the wireless information acquisition request is used to request to acquire user data corresponding to the service application;

Determining, by the user data processing device, a privacy protection policy corresponding to the service application according to the service application and a correspondence between the service application and a privacy protection policy;

When the privacy protection policy is used to indicate privacy processing, the user data processing apparatus performs the privacy processing on the user data according to the privacy protection policy.

With reference to the second aspect, in a first possible implementation manner of the second aspect, the privacy protection policy is used to indicate that the privacy process is performed: the privacy protection policy is used to indicate that the privacy negotiation is performed;

The user data processing apparatus performs the privacy processing on the user data according to the privacy protection policy, including:

The user data processing apparatus performs the privacy negotiation according to the user equipment corresponding to the user data according to the privacy protection policy to obtain a privacy negotiation result;

When the privacy negotiation result is used to indicate that the user data is opened to the service application, Said user data processing device providing said user data to said service application; or

When the result of the privacy negotiation is used to indicate that the user data is not to be opened to the service application, the user data processing apparatus sends the indication information to the network element device, where the indication information is used to indicate that the user cannot be obtained. data.

With reference to the second aspect, in a second possible implementation manner of the second aspect, the privacy protection policy is used to indicate that the privacy process is performed: the privacy protection policy is used to indicate that the pre-stored privacy negotiation result is used;

The user data processing device directly obtains a pre-stored privacy negotiation result according to the privacy protection policy;

When the privacy negotiation result is used to indicate that the user data is opened to the service application, the user data processing apparatus provides the user data to the service application; or

With reference to the second aspect, the first possible implementation of the first to the second aspect, the third possible implementation of the second aspect, further includes:

The user data processing apparatus provides the user data to the business application when the privacy protection policy is used to indicate that privacy processing is not performed.

The method and device for processing user data according to the embodiment of the present invention determine the privacy protection policy corresponding to different service applications, and perform privacy processing on the user data according to the privacy protection policy, and improve the user data while reasonably opening the user data. safety.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, a brief description of the drawings used in the embodiments or the prior art description will be briefly described below. Obviously, the drawings in the following description It is a certain embodiment of the present invention, and other drawings can be obtained from those skilled in the art without any inventive labor.

FIG. 1 is a flowchart of a method for processing user data according to an embodiment of the present invention;

2 is a schematic structural diagram of a system for user data processing according to an embodiment of the present invention;

FIG. 3 is a signaling flowchart of a privacy configuration method according to an embodiment of the present invention;

FIG. 4 is a signaling flowchart of a privacy negotiation method according to an embodiment of the present invention;

FIG. 5 is a signaling flowchart of another privacy negotiation according to an embodiment of the present invention;

FIG. 6 is a signaling flowchart of still another privacy negotiation according to an embodiment of the present invention;

FIG. 7 is a flowchart of another method for processing user data according to an embodiment of the present invention;

FIG. 8 is a flowchart of still another method for processing user data according to an embodiment of the present invention;

FIG. 9 is a flowchart of still another method for processing user data according to an embodiment of the present invention;

FIG. 10 is a schematic structural diagram of a user data processing apparatus according to an embodiment of the present disclosure;

FIG. 11 is a schematic structural diagram of another user data processing apparatus according to an embodiment of the present disclosure;

FIG. 12 is a schematic structural diagram of a user data processing device according to an embodiment of the present disclosure;

FIG. 13 is a schematic structural diagram of another user data processing device according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention will be clearly and completely described in conjunction with the drawings in the embodiments of the present invention. It is a partial embodiment of the invention, and not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

FIG. 1 is a flowchart of a method for processing user data according to an embodiment of the present invention. As shown in FIG. 1 , the method includes:

Step 101: The user data processing apparatus receives a wireless information acquisition request sent by the network element device, where the wireless information acquisition request is used to request to acquire user data corresponding to the service application.

The execution entity of the method is a user data processing device, and the device can be integrated with a data warehouse, a core network device, or a network element having user data collection and analysis functions, or can be used as an independent network element device. The network element device in the method may be an application server that is installed inside the wireless communication network, or an application server that is installed in the Internet or an enterprise network, or may be a core network element in the wireless communication network. In this method, the business application may be an application that needs to use user data, such as a disaster warning application, a traffic planning application, a precision marketing application, and the like. Among them, no The same business application has different requirements for user data. For example, the disaster warning application is to request the attribute information of the user list around the accident site to facilitate the disaster warning to these users; the traffic planning application requests the acquisition of the population attribute statistics and analysis results. The attribute information of the traffic planning information is convenient for traffic planning; the precision marketing application requests to obtain wireless information such as personal location information and wireless signal receiving quality for marketing analysis. In the method, the wireless information acquisition request may include an identifier of the service application, and the identifier of the service application may identify a service application requesting user data.

Step 102: The user data processing apparatus determines, according to the service application, a correspondence between the service application and the privacy protection policy, a privacy protection policy corresponding to the service application.

In this method, the correspondence between the service application and the privacy protection policy may be saved on the user data processing device, or may be stored on other network elements. For example, a correspondence relationship table may be set, where the identifier of the service application and the identifier of the privacy protection policy corresponding to the service application are stored. In this method, the privacy protection policies can be divided into two categories, one is a policy that requires privacy processing, and the other is a policy that does not require privacy processing. For example, the policy that requires privacy processing may be a policy indicating privacy processing through privacy negotiation, or a policy indicating privacy processing using pre-stored privacy negotiation results. The privacy negotiation result is used to indicate whether the user data is open to the service application; the privacy negotiation may be a negotiation between the user data processing device and the user equipment, or may be a negotiation between the user data processing device, the user equipment, and other network elements. The privacy negotiation result can be obtained through privacy negotiation.

In this method, different service applications can correspond to different privacy protection policies. For example, for a disaster warning application, since the business application is suitable for an emergency, a privacy protection policy that does not require privacy processing may be set; for a traffic planning application, since the business application belongs to a public interest-based mass analysis application, the default may be All user equipments (User Equipments, hereinafter referred to as UEs) accept the data collection of the service application, and consider giving the UE the right to choose whether to provide user data. Therefore, the user's opinion can be consulted in advance, for example, when the user signs the contract, that is, in advance Conduct privacy negotiation and save the privacy negotiation result. When the traffic planning application needs to request user data, it can directly judge whether to provide user data according to the pre-stored privacy negotiation result. In view of this, the traffic planning application setting indication can be used to pre-store privacy negotiation. The result of the privacy protection strategy; for the precision marketing application, since the business application is a commercial application, it may consider giving the user the right to select each time the user data is requested, that is, each time the user data is requested, the user equipment is required to be hidden Negotiations to obtain privacy consultations, privacy and judged according to whether the results obtained provide consultations User data, in view of this, can set a privacy protection policy for privacy negotiation to indicate privacy negotiation.

Step 103: When the privacy protection policy is used to indicate privacy processing, the user data processing apparatus performs the privacy processing on the user data according to the privacy protection policy.

For example, for the privacy protection policy indicating privacy negotiation, the user data processing device may initiate privacy negotiation with the user equipment according to the privacy protection policy, obtain privacy negotiation result through privacy negotiation, and perform user data according to the privacy negotiation result. For example, for the privacy protection policy indicating that the pre-stored privacy negotiation result is used, the user data processing apparatus may obtain the pre-stored privacy negotiation result according to the privacy protection policy, and process the user data according to the pre-stored privacy negotiation result.

Optionally, in the method, when the privacy protection policy is used to indicate that privacy processing is not performed, the user data processing apparatus may directly provide user data to the service application.

The user data processing method shown in FIG. 1 determines the privacy protection policy corresponding to different service applications, and performs privacy processing on the user data according to the privacy protection policy, thereby improving user data security while reasonably opening user data. Sex.

In order to apply the processing method of the user data shown in FIG. 1, as shown in FIG. 2, an embodiment of the present invention provides a system for user data processing. It should be understood by those skilled in the art that the system shown in FIG. 2 is an example and does not constitute a limitation on the application scenario of the method shown in FIG. 1.

The system includes: a data analysis open device 11, a privacy negotiation server 12, a UE 13, an application server 14, a configuration and management device 15, and a wireless network device 16.

The data analysis open device 11 is a network element device having an analysis of user data and externally outputting user data or user data analysis results, and the function of the user data processing device in the method of FIG. 1 is integrated on the device. In order to implement the functions of the user data processing apparatus, the apparatus may include: a receiving unit, a policy determining unit, and a negotiation result processing unit. a receiving unit, configured to receive a wireless information acquiring request sent by the network element device, where the wireless information obtaining request is used to request to obtain user data corresponding to the service application, and the policy determining unit is configured to use, according to the service application, the service application Corresponding relationship with the privacy protection policy determines a privacy protection policy corresponding to the service application; the negotiation result processing unit is configured to: when the privacy protection policy is used to indicate privacy processing, the user data according to the privacy protection policy Perform the privacy process. Further, the negotiation result processing unit is further configured to: when the privacy protection policy is used to indicate that privacy processing is not performed, The business application provides the user data.

The privacy negotiation server 12 may be an operator's portal (Web Portal) website, or may be an operator's short message center or the like. The main function is to forward the privacy negotiation request sent by the data analysis open device 11 to the UE, and then select whether the user selects the open user data for the privacy negotiation request, and notifies the data analysis open device 11 of the result of the user selection. . Further, the privacy negotiation server 12 may further send a privacy negotiation request to the single UE according to the prompt of the data analysis open device 11, for example, the user makes a selection for agreeing that the service application uses its own data for a certain privacy negotiation request, but the The use of the data is time-limited, so when the usage period of the user data is fast, the data analysis open device 11 prompts the privacy negotiation server 12 to transmit the privacy negotiation request to the UE again.

Alternatively, the function of the privacy negotiation server 12 may also be integrated in the data analysis open device 11 as a functional unit of the data analysis open device 11.

The UE 13 can be a mobile device such as a mobile phone or a tablet. The UE 13 may include a privacy negotiation module and a privacy selection module, wherein the privacy negotiation module is responsible for interacting with the privacy negotiation server 12, receiving the privacy negotiation request sent by the privacy negotiation server 12, and feeding back the negotiation result to the privacy negotiation server according to the user's selection. 12. The privacy negotiation request may include: information about the purpose, time, location, and the like of the data application, so that the user may be prompted to agree to user data collection, data analysis, and data opening through the wireless network device. The function of the privacy selection module is responsible for providing the user with a selectable human-computer interaction interface, which allows the user to select whether to open his or her own data through the mobile phone software or on the operator's Web Portal webpage, that is, the user inputs his/her own user identification, such as the user's media. Access Control (Media Access Control, MAC address) or International Mobile Subscriber Identification Number (IMSI) number, telling operators that they cannot use/use their own user data, and users The application range, time range, and area range of the data.

The application server 14 is responsible for supporting various service applications in a network such as a wireless communication network, an Internet, and an enterprise network. The service application may be an application that needs to use user data, such as a disaster warning application, a traffic planning application, a precision marketing application, and the like. The application server 14 sends a wireless information acquisition request to the data analysis open system 11 for requesting acquisition of user data corresponding to the business application.

The configuration and management device 15 is used to manage privacy configuration information. Privacy configuration information includes: whitelist Or a blacklist, the whitelist is used to indicate a range of user data that is allowed to be open to the service application, and the blacklist is used to indicate a range of user data that is not allowed to be open to the service application. The range of the whitelist and the blacklist may be the user range, the time range, the geographical range, and the like to which the user data belongs. The user data allowed to be collected and analyzed may be determined according to the whitelist or the blacklist. The configuration and management device 15 transmits the privacy configuration information to the data analysis open system 11 or the wireless network device 16, so that the data analysis open system 11 transmits the user data belonging to the range indicated by the whitelist or the range not indicated by the blacklist to the application server. 14. Or cause the wireless network device 16 to collect only user data that falls within the scope of the whitelist indication or that does not belong to the blacklist indication.

Optionally, the configuration and management device 15 can also be responsible for functions such as log management and privacy configuration information maintenance query. The configuration and management device 15 needs to perform special rights management on these operation and maintenance functions.

Wireless network device 16 is used to collect user data. Further, the wireless network management device 16 may selectively collect the user data according to the configuration and the privacy configuration information sent by the management device 15, and may further analyze the privacy protection policy after the privacy negotiation between the open device 11 and the UE 13 according to the data. The selected user data is collected. The wireless network device 16 may be, for example, a base station controller (hereinafter referred to as: BSC), a radio network controller (Radio Network Controller, hereinafter referred to as RNC), and an evolved Node B (hereinafter referred to as eNodeB). Wait. The wireless network device 16 can interact with the data analysis open device 11, receive the privacy negotiation result sent by the data analysis open device 11, and collect user data according to the privacy negotiation result; the wireless network device 16 can also interact with the configuration and management device 15, according to Privacy configuration information collects user data.

In the system shown in FIG. 2, privacy configuration can be performed between the data analysis open device 11, the configuration and management device 15, and the wireless network device. The privacy configuration is a global configuration. It is mainly used to pre-configure the default whitelist or blacklist. It can also include other privacy configuration information. FIG. 3 is a signaling flowchart of a privacy configuration method according to an embodiment of the present invention, and exemplarily shows a method for configuring a privacy, the method includes:

S301, the configuration and management device 15 delivers a blacklist or whitelist filtered by the user to the data analysis open device 11;

S301', the configuration and management device 15 delivers a blacklist or whitelist filtered by the user to the wireless network device 16.

The user filtering may be set based on the MAC address of the UE 13, the IMSI, the Mobile Subscriber ISDN Number (MSISDN), etc.; the data analysis open device 11 receives the black of the user filtering sent by the configuration and management device 15. After the list or the whitelist, the analysis and opening of the user data of the users will not be performed or performed (ie, the user data is sent to the application server 14); after receiving the blacklist or whitelist filtered by the user, the wireless network device 16 will not perform the operation. Or collect the user data of these users.

S302, the configuration and management device 15 sends a blacklist or whitelist of time filtering to the data analysis open device 11;

S302', the configuration and management device 15 delivers a blacklist or whitelist of time filtering to the wireless network device 16.

The time filtering support is set according to the year, month, day, minute, etc.; after the data analysis open device 11 receives the blacklist or white list of the time filtering sent by the configuration and management device 15, the user data in these time ranges will not be analyzed or analyzed. And open; after receiving the blacklist or whitelist of time filtering, the wireless network device will not perform or collect user data in these time ranges.

S303. The configuration and management device 15 sends a blacklist or a whitelist for area filtering to the data analysis open device 11.

S303', the configuration and management device 15 delivers a blacklist or whitelist for area filtering to the wireless network device 16.

The area identifier may be a cell identity number (hereinafter referred to as ID), or may be a plurality of latitude and longitude points to form an area identifier, etc.; the data analysis open device 11 receives the blacklist or white of the area filtering sent by the configuration and management device 15. After the list, the user data in these geographical areas will not be analyzed or opened. After receiving the blacklist or whitelist filtered by the user, the wireless network device will not perform or collect the user data in these geographical areas.

S304, the configuration and management device 15 sends a blacklist or a whitelist used by the service application to the data analysis open device 11;

S304', the configuration and management device 15 delivers a blacklist or whitelist used by the service application to the wireless network device 16.

The business application may be configured to set a blacklist or a whitelist for some rogue mobile applications, billing software, etc., for an application with good reputation and high score, the user data may be opened to the whitelist, and some background consumes traffic, Applications such as advertisements can be strictly prohibited from opening user data to blacklists. The data analysis open device 11 and the wireless network device 16 can perform corresponding processing according to the whitelist or the blacklist.

It can be understood that the above S301 (S301') to S304 (S304') are optional steps, and need not be all configured.

Moreover, the configuration and management device 15 can also configure only the data analysis open device 11 so that the data analysis open device 11 can perform privacy protection of the user data based on the privacy configuration information.

In addition, the correspondence between the service application and the privacy protection policy in the method shown in FIG. 1 can also be pre-configured by the configuration and management device 15 on the data analysis open device 11.

Table 1 gives an example of a privacy protection policy in which different classifications of business applications correspond to different privacy protection policies.

Table 1

Among them, privacy negotiation refers to different devices to determine privacy issues through negotiation. In the embodiment of the present invention, a privacy negotiation result may be obtained through privacy negotiation, and the privacy negotiation result is used to indicate whether to open user data to the business application.

Exemplarily, in the system shown in FIG. 2, the data analysis open device 11 and the UE 13 Privacy negotiation can be performed through the privacy negotiation server 12. FIG. 4 is a signaling flowchart of a privacy negotiation method according to an embodiment of the present invention. Steps S402-S408 show a process in which the data analysis open device 11 performs privacy negotiation with the UE 13 through the privacy negotiation server 12, and step S401 can trigger the data analysis open device 11 to initiate privacy negotiation. As shown in Figure 4:

S401. The data analysis open device 11 receives the wireless information acquisition request sent by the application server 14;

The wireless information acquisition request is used to request to acquire user data corresponding to the service application. After receiving the wireless information acquisition request, the data analysis open device 11 can obtain a corresponding privacy protection policy according to the correspondence between the pre-configured service application and the privacy protection policy. Exemplarily, according to the content of Table 1, if the wireless information acquisition request is the user data required to obtain the accurate marketing service, the privacy protection policy obtained by the data analysis open device 11 is a privacy protection policy indicating privacy negotiation.

S402. The data analysis open device 11 sends a privacy negotiation request to the privacy negotiation server 12 according to the privacy protection policy.

The privacy negotiation request is used to request an indication of whether to open user data for the service application.

Illustratively, after the data analysis open device 11 obtains the privacy protection policy for instructing the privacy negotiation, the data analysis open device 11 may actively send a privacy negotiation request through the privacy negotiation server 12, where the privacy negotiation request may include the user identifier. Whether the information of the service application requesting the user data agrees to collect and analyze the prompt information of the user data, whether to agree to the prompt information of the open user data for the service application, the geographical scope of the requested user data, and the time of the requested user data. The scope, use of user data, etc.

S403. The privacy negotiation server 12 forwards the privacy negotiation request to the UE 13;

After receiving the privacy negotiation request of the data analysis open device 11, the privacy negotiation server 12 may send the privacy negotiation request to the UE 13 in the manner of a short message or a webpage (Web) operation.

S404. The UE 13 performs privacy selection.

The user can choose whether to open user data for the business application, allow the use of the geographical scope of the user data, and allow the use of the time limit of the user data and the like.

S405. The UE 13 sends a privacy negotiation result to the privacy negotiation server 12;

The UE 13 may send the privacy negotiation result to the privacy negotiation server 12 in the form of a short message or a web page (Web) operation. The privacy negotiation result is mainly used to indicate whether to open user data to the business application, and may also include other information for privacy processing.

S406. The privacy negotiation server 12 sends a privacy negotiation result to the data analysis open device 11;

Exemplarily, the result of the privacy negotiation may include user identification, whether to allow user data collection, analysis, whether to allow open user data to the business application, the geographical scope of the user data to be allowed, the time limit for allowing the use of the user data, and whether the period is required. Sex and users re-private privacy and other content.

S407. The data analysis open device 11 obtains a privacy negotiation result.

In addition, after obtaining the privacy negotiation result, the data analysis open device 11 may save the privacy negotiation result, or may respond to the wireless information acquisition request according to the privacy negotiation result.

So far, the data analysis open device 11 successfully acquired the privacy negotiation result of the privacy negotiation with the UE 13.

Alternatively, the privacy negotiation server 12 may send an acknowledgement message to the UE 13 to inform the UE 13 that the privacy negotiation is complete. E.g:

S408. The privacy negotiation server 12 sends an acknowledgement message to the UE 13.

FIG. 4 shows a procedure of privacy negotiation triggered by a wireless information acquisition request. Unlike FIG. 4, the privacy negotiation method shown in FIG. 5 is initiated by the privacy negotiation server 12 to initiate privacy negotiation.

As shown in Figure 5:

S501. The privacy negotiation server 12 performs a privacy statement.

In this method, the privacy negotiation server can actively send a privacy statement to the UE 13 when the user enters the network or subscribes to the new service application. For the role and content of the privacy statement, refer to the related content of the privacy negotiation request in FIG. 4, and details are not described herein.

S502. The UE 13 performs privacy selection.

For related content of this step, reference may be made to the related content of S404 in FIG.

S503. The UE 13 sends a privacy negotiation result to the privacy negotiation server 12;

For related content of this step, reference may be made to the related content of S405 in FIG.

S504. The privacy negotiation server 12 sends a privacy negotiation result to the data analysis open device 11;

For related content of this step, reference may be made to the related content of S406 in FIG.

S505. The data analysis open device 11 saves a privacy negotiation result.

After the data analysis open device 11 saves the privacy negotiation result, when the privacy protection policy is a pre-stored privacy negotiation result, the user data may be directly processed using the saved privacy negotiation result.

S506. The privacy negotiation server 12 sends an acknowledgement message to the UE 13.

This step is an optional step, and reference may be made to the related content of S408 in FIG.

FIG. 5 shows a process of actively initiating privacy negotiation by the privacy negotiation server 12. Different from FIG. 5, the privacy negotiation process shown in FIG. 6 is actively initiated by the data analysis open device 11, wherein the data analysis open device can be cycled. The privacy negotiation is initiated to the UE 13 to reacquire the privacy negotiation result with the UE 13.

As shown in Figure 6:

S601. The data analysis open device 11 sends a privacy negotiation request to the privacy negotiation server 12;

The data analysis open device 11 can periodically initiate privacy negotiation to the UE 13 according to the periodic privacy negotiation indication information. The periodic privacy negotiation indication information may be included in the privacy protection policy corresponding to the service application, the privacy configuration delivered by the configuration and management device 15, or the privacy negotiation result fed back by the UE 13. In addition, the privacy negotiation result may be set with an expiration date, and when the expiration date is reached, the data analysis open device 11 may also initiate privacy negotiation.

For related content of the privacy negotiation request, reference may be made to the related content of S402 in FIG.

S602. The privacy negotiation server 12 forwards the privacy negotiation request to the UE 13;

For related content of this step, reference may be made to the related content of S403 in FIG.

S603. The UE 13 performs privacy selection.

S604. The UE 13 sends a privacy negotiation result to the privacy negotiation server 12;

S605. The privacy negotiation server 12 sends a privacy negotiation node to the data analysis open device 11. fruit;

S606. The data analysis open device 11 obtains a privacy negotiation result.

For related content of this step, reference may be made to the related content of S407 in FIG.

S607. The privacy negotiation server 12 sends an acknowledgement message to the UE 13.

This step is an optional step. For related content, refer to related content of S408 in FIG. 4.

Those skilled in the art should be aware that privacy negotiation can also be initiated by the UE 13. For example, the UE 13 initiates a privacy negotiation trigger request to the privacy negotiation server 12, and triggers the privacy negotiation server 12 to send a privacy negotiation request to the UE 13, which is not described herein.

In order to more clearly describe the user data processing method provided by the embodiment of the present invention, the following uses the system shown in FIG. 2 to illustrate the precise marketing application, the traffic planning application, and the disaster warning application respectively.

FIG. 7 is a flowchart of a method for processing user data according to an embodiment of the present invention, taking an example of obtaining a user data by a precision marketing application. The precision marketing application is a business application for commercial use, which mainly acquires user data such as user location information for accurate advertisement recommendation. For such services, the privacy protection policy indicated in Table 1 for privacy negotiation can be used. The correspondence between the precision marketing application and the privacy protection policy can be pre-configured on the data analysis open device 11 by the configuration and management device 15.

As shown in Figure 7:

S701. The application server 14 sends a wireless information acquisition request to the data analysis open device 11;

The wireless information acquisition request may include an application identifier of the precision marketing application, a user identifier of the user UE 13 to which the requested user data belongs, and a type of the requested user data (eg, location information, wireless signal quality).

S702. The data analysis open device 11 obtains a privacy protection policy corresponding to the precision marketing application.

The privacy protection policy is used to indicate privacy negotiation;

S703. The data analysis open device 11 performs privacy negotiation with the UE 13 through the privacy negotiation server 12 to obtain a privacy negotiation result.

For the process of privacy negotiation, refer to the related content of the privacy negotiation process shown in FIG. 4.

S704. The data analysis open device 11 determines that the privacy negotiation result is used to indicate that the user data is opened to the precision marketing application.

After determining to open user data to the precision marketing application, the data analytics open device 11 can provide the user data to the precision marketing application. Here, the data analysis open device 11 can directly transmit the user data to the application server 14.

S705. The data analysis open device 11 sends the user data of the UE 13 to the application server 14;

The user data may carry information such as the identifier of the UE 13, the location information of the UE 13, and the quality of the wireless signal.

In addition, if the data analysis open device 11 does not have the requested user data or the user data stored on the data analysis open device 11 is relatively old, the data analysis open device may also send data collection indication information to the wireless network device 16, the wireless network. After receiving the data collection indication information, the device 16 collects the user data required for the precise marketing application, and sends the collected user data to the data analysis open device 11.

At this point, the precision marketing application successfully obtained the user data of the UE 13.

Optionally, when the data analysis open device 11 determines that the privacy negotiation result is used to indicate that the user data is not to be opened to the precision marketing application, the data analysis open device 11 does not send the user data of the UE 13 to the service application. At this time, S706 can be performed.

S706. The data analysis open device 11 sends the indication information to the application server 14, where the indication information is used to indicate that the user data cannot be obtained.

Through the processing method of the user data shown in FIG. 7, when the precision marketing application requests to acquire the user data of the UE 13, the UE 13 can be confirmed, and when the UE 13 allows the user data to be opened to the precision marketing application, the accurate marketing is performed. The application provides user data of the UE 13 to improve the security of the user data of the UE 13.

FIG. 8 is a flowchart of a method for processing user data provided by an embodiment of the present invention, taking a traffic planning application request for acquiring user data as an example. The traffic planning application is a business application for a public utility, and the business application mainly acquires user data such as statistical analysis information of the user's motion trajectory to make a traffic planning decision. For such service applications, the privacy protection policy indicated in Table 1 indicating the use of pre-stored privacy negotiation results may be used. The correspondence between the traffic planning application and the privacy protection policy may be pre-configured by the configuration and management device 15 in the data analysis open device 11 on.

As shown in Figure 8:

S801, the UE 13, the privacy negotiation server 12, and the data analysis open device 11 perform privacy negotiation;

The privacy selection process can refer to the process of privacy negotiation shown in FIG. 5. Exemplarily, the privacy negotiation process of the S801 may be performed when the user subscribes to the network, or after the application server 14 deploys the traffic planning application.

After the UE 13 signs up for the network, when the traffic planning application needs to request the user, the data analysis open device 11 may request to obtain the user data, as follows:

S802. The application server 14 sends a wireless information acquisition request to the data analysis open device 11;

The request may include an application identifier of the traffic planning application, a type of user data (for example, statistical analysis information of the user's movement trajectory), a user range to which the user data belongs (for example, a user in the administrative area), and the like;

S803. The data analysis open device 11 obtains a privacy protection policy corresponding to the traffic planning application.

Wherein, the policy indicates that the pre-stored privacy negotiation result is adopted;

When the privacy negotiation result is used to indicate that user data is provided to the traffic planning application,

S804. The data analysis open device 11 determines that the user data of the UE 13 participates in statistical analysis of the user movement track.

After determining the statistical analysis of the user data of the UE 13 participating in the user's movement trajectory, the user data of the UE 13 may be provided to the traffic planning application, that is, the user data of the UE 13 participates in the statistical analysis of the user's movement trajectory.

S805, the data analysis open device 11 performs statistical analysis of the user movement trajectory according to the participating user data, and obtains a statistical analysis result;

S806. The data analysis open device 11 returns a statistical analysis result to the application server 14.

Optionally, when the privacy negotiation result is used to indicate that the user data is not provided to the traffic planning application, the data analysis open device 11 determines that the user data of the UE 13 does not participate in the statistical analysis of the user movement trajectory, and therefore performs statistics on the user movement trajectory. In the analysis, the user data of the UE 13 is not taken as a sample, and the obtained statistical analysis result does not include the number of users of the UE 13. according to.

The user data processing method shown in FIG. 8 is, before the traffic planning application requests to acquire user data, the UE 13 and the data analysis open device 11 perform privacy negotiation in advance and save the privacy negotiation result, when the traffic planning application needs to call the user data. The pre-stored privacy negotiation result can be directly obtained, and according to the privacy negotiation result, whether to provide the user data of the UE 13 to the traffic planning application can provide the security of the user data while reasonably opening the user data.

FIG. 9 is a flowchart of a method for processing user data according to an embodiment of the present invention. The disaster warning application is an application for emergency situations. The application is mainly used to obtain user data of users around the disaster site for disaster warning. Corresponding to such a business application, a privacy protection policy that does not require privacy processing in Table 1 can be used. The correspondence between the disaster warning application and the privacy protection policy may be pre-configured by the configuration and management device 15 on the data analysis open device 11.

As shown in Figure 9:

S901, the disaster warning application learned that a disaster occurred at the A site;

S902. The application server 14 sends a wireless information acquisition request to the data analysis open device 11;

The request may carry the application identifier of the disaster warning application, the user range described by the user data (for example, the user within 10 km of the A location), the type of the user data (for example, the distance of the user from the A location), and the like;

S903. The data analysis open device 11 obtains a privacy protection policy corresponding to the disaster warning application.

Wherein, the privacy protection policy indicates that privacy processing is not required;

S904. The data analysis open device 11 sends user data to the application server 14;

Since the privacy protection policy indicates that privacy processing is not required, the data analysis open device 11 can directly provide the user data of the UE 13 to the disaster warning application.

S905. The disaster warning application performs subsequent processing according to the received user data.

The user data processing method shown in FIG. 9 can facilitate the disaster warning application to quickly obtain the required user data by setting a privacy protection policy for the disaster warning application that does not require privacy processing, and embodies the reasonable opening of the user data.

In order to implement the method shown in FIG. 1 and FIG. 2, the embodiment of the present invention further provides a user data processing apparatus, which can be integrated on the data analysis open device 11.

As shown in FIG. 10, the apparatus includes: a receiving unit 11, a policy determining unit 12, and a privacy processing unit 13, wherein the receiving unit 11 is configured to receive a wireless information acquiring request sent by the network element device, where the wireless information acquiring request is used. Requesting the user data corresponding to the service application; the policy determining unit 12 is configured to determine a privacy protection policy corresponding to the service application according to the service application and the corresponding relationship between the service application and the privacy protection policy; the privacy processing unit 13 And performing, when the privacy protection policy is used to indicate privacy processing, performing the privacy processing on the user data according to the privacy protection policy.

The mechanism for performing the user data processing of the device may refer to the methods shown in FIG. 1 and FIG. 2 to FIG. 9. The implementation principle and technical effects are similar, and details are not described herein again.

The user data processing apparatus shown in FIG. 10 can determine a privacy protection policy corresponding to different service applications, and perform privacy processing on user data according to the privacy protection policy, and can improve user data security while reasonably opening user data. Sex.

As an optional implementation manner, on the basis of the apparatus shown in FIG. 10, the embodiment of the present invention further provides another user data processing apparatus. The user data processing apparatus shown in FIG. 11 also includes a receiving unit 11, a policy determining unit 12, and a privacy processing unit 13. Further, the privacy processing unit of the user processing apparatus shown in FIG. 11 includes a negotiation result acquisition unit 131 and a negotiation result processing unit 132. The negotiation result obtaining unit 131 is configured to: when the privacy protection policy is used to indicate the privacy negotiation, perform the privacy negotiation according to the user equipment corresponding to the user data according to the privacy protection policy to obtain a privacy negotiation result; The negotiation result processing unit 132 is configured to: when the privacy negotiation result is used to indicate that the user data is opened to the service application, provide the user data to the service application; or when the privacy negotiation result is used When the user data is not opened to the service application, the indication information is sent to the network element device, where the indication information is used to indicate that the user data cannot be obtained.

Further, the negotiation result obtaining unit 131 is specifically configured to send a privacy negotiation request to the user equipment, where the privacy negotiation request is used to request an indication of whether to open the user data to the service application; and receive the user equipment. The sent privacy negotiation request response, the privacy negotiation request response includes the privacy negotiation result.

Further, the negotiation result obtaining unit 131 is further configured to use when the privacy protection policy is used When the pre-stored privacy negotiation result is used, the pre-stored privacy negotiation result is directly obtained according to the privacy protection policy; the negotiation result processing unit 132 is configured to: when the privacy negotiation result is used to indicate to open the user data to the service application Providing the user data to the service application; or sending the indication information to the network element device when the privacy negotiation result is used to indicate that the user data is not to be opened to the service application, the indication The information is used to indicate that the user data cannot be obtained.

Further, the negotiation result obtaining unit 131 is further configured to: before the receiving unit 11 receives the wireless information acquisition request sent by the network element device, receive the privacy negotiation result sent by the user equipment, and save the privacy negotiation. result.

Further, the privacy processing unit 13 is further configured to: when the privacy protection policy is used to indicate that privacy processing is not performed, provide the user data to the service application.

Further, the receiving unit 11 is further configured to receive the privacy configuration information, where the privacy configuration information includes: a whitelist or a blacklist, where the whitelist is used to indicate a range of user data that is allowed to be open to the service application, The blacklist is used to indicate a range of user data that is not allowed to be open to the service application; when the negotiation result processing unit is configured to provide the user data to the service application, the privacy processing unit 13 is specifically configured to serve The service application provides the user data, where the user data belongs to a range indicated by the whitelist or does not belong to a range indicated by the blacklist.

The user data processing device shown in FIG. 11 can be used to execute the method shown in FIG. 1 and FIG. 2 to FIG. 9. The implementation principle and the generated technical effect are similar, and details are not described herein again.

The user data processing device shown in FIG. 11 can determine a privacy protection policy corresponding to different service applications, and perform privacy processing on the user data according to the privacy protection policy, and can improve user data while reasonably opening user data. safety.

As an alternative embodiment, the user data processing apparatus shown in Figures 10 and 11 can be implemented in hardware. For example, the user data processing device shown in Figures 12 and 13 can also be integrated with the data analysis open device.

As shown in FIG. 12, the user data processing may include: a receiver 11 and a processor 12, wherein the receiver 11 is configured to receive a wireless information acquisition request sent by the network element device, where the wireless information acquisition request is used to request to acquire a service. Applying corresponding user data; the processor 12 is configured to determine, according to the service application, a correspondence between the service application and a privacy protection policy And the privacy protection policy corresponding to the service application; when the privacy protection policy is used to indicate privacy processing, performing the privacy processing on the user data according to the privacy protection policy.

The mechanism for processing the user data by the user data processing device shown in FIG. 12 can be referred to the method shown in FIG. 1 and FIG. 2 to FIG. 9. The implementation principle and technical effects are similar, and details are not described herein again.

FIG. 13 is a schematic structural diagram of another user data processing device according to an embodiment of the present invention. As shown in FIG. 13, on the basis of the user data processing device shown in FIG. 12, a transmitter 13 is further included.

When the privacy protection policy is used to indicate that the privacy process is performed, specifically: when the privacy protection policy is used to indicate that the privacy negotiation is performed, the sender 13 is configured to send a privacy negotiation request to the user equipment, where the privacy negotiation request is used for And the receiver 11 is configured to receive an indication of whether the user data is opened for the service application; the receiver 11 is configured to receive a privacy negotiation request response sent by the user equipment, where the privacy negotiation request response includes the privacy negotiation result; and the sender 13 further When the privacy negotiation result is used to indicate that the user data is opened to the service application, the user data is provided to the service application; or when the privacy negotiation result is used to indicate that the service is not When the user data is opened, the indication information is sent to the network element device, and the indication information is used to indicate that the user data cannot be obtained.

Or, when the privacy protection policy is used to indicate that the privacy process is performed, where the privacy protection policy is used to indicate that the pre-stored privacy negotiation result is used, the sender 13 is configured to use the pre-stored privacy negotiation result to indicate the direction. When the service application opens the user data, the user data is provided to the service application; or when the pre-stored privacy negotiation result is used to indicate that the user data is not to be opened to the service application, the indication information is sent. To the network element device, the indication information is used to indicate that the user data cannot be obtained.

Further, the sender 13 is further configured to: when the privacy protection policy is used to indicate that privacy processing is not performed, provide the user data to the service application.

Further, the receiver 11 is further configured to receive privacy configuration information, where the privacy configuration information includes: a whitelist or a blacklist, where the whitelist is used to indicate a range of user data that is allowed to be open to the service application, the black The list is used to indicate a range of user data that is not allowed to be open to the service application; when the sender 13 provides the user data to the service application, the sender 13 is specifically configured to provide the user data to the service application. Where the number of users The range according to the whitelist indication or the range that does not belong to the blacklist indication.

The user data processing device shown in FIG. 13 can be used to perform the method shown in FIG. 1 and FIG. 2 to FIG. 9. The implementation principle and the generated technical effect are similar, and details are not described herein again.

The user data processing device shown in FIG. 13 can determine a privacy protection policy corresponding to different service applications, and perform privacy processing on user data according to the privacy protection policy, and can improve user data while reasonably opening user data. safety.

One of ordinary skill in the art will appreciate that all or part of the steps to implement the various method embodiments described above may be accomplished by hardware associated with the program instructions. The aforementioned program can be stored in a computer readable storage medium. The program, when executed, performs the steps including the foregoing method embodiments; and the foregoing storage medium includes various media that can store program codes, such as a ROM, a RAM, a magnetic disk, or an optical disk.

Finally, it should be noted that the above embodiments are merely illustrative of the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the foregoing embodiments may be modified, or some or all of the technical features may be equivalently replaced; and the modifications or substitutions do not deviate from the technical solutions of the embodiments of the present invention. range.

Claims

A user data processing device, comprising:

a receiving unit, configured to receive a wireless information acquisition request sent by the network element device, where the wireless information acquisition request is used to request to acquire user data corresponding to the service application;

a policy determining unit, configured to determine, according to the service application, a correspondence between the service application and the privacy protection policy, a privacy protection policy corresponding to the service application;

a privacy processing unit, configured to perform the privacy processing on the user data according to the privacy protection policy when the privacy protection policy is used to indicate privacy processing.
The device according to claim 1, wherein the privacy processing unit comprises:

a negotiation result obtaining unit, configured to: when the privacy protection policy is used to indicate that the privacy negotiation is performed, perform the privacy negotiation according to the user equipment corresponding to the user data according to the privacy protection policy to obtain a privacy negotiation result;

a negotiation result processing unit, configured to provide the user data to the service application when the privacy negotiation result is used to indicate that the user data is opened to the service application; or when the privacy negotiation result is used to indicate When the user data is not opened to the service application, the indication information is sent to the network element device, and the indication information is used to indicate that the user data cannot be obtained.
The device according to claim 2, wherein the negotiation result obtaining unit is configured to send a privacy negotiation request to the user equipment, where the privacy negotiation request is used to request whether the application is open to the service application. Determining an indication of user data; receiving a privacy negotiation request response sent by the user equipment, where the privacy negotiation request response includes the privacy negotiation result.
The apparatus according to claim 1, wherein the negotiation result obtaining unit is configured to directly obtain the pre-stored privacy according to the privacy protection policy when the privacy protection policy is used to indicate that the pre-stored privacy negotiation result is adopted. Negotiation result;

The negotiation result processing unit is configured to: when the privacy negotiation result is used to indicate that the user data is opened to the service application, provide the user data to the service application; or, when the privacy negotiation result is used When the user data is not opened to the service application, the indication information is sent to the network element device, where the indication information is used to indicate that the user information cannot be obtained. User data.
The device according to claim 4, wherein the negotiation result obtaining unit is further configured to receive, according to the wireless information acquiring request sent by the network element device, the receiving unit, Privacy negotiation results and save the privacy negotiation results.
The device according to any one of claims 1 to 5, wherein the negotiation result processing unit is further configured to provide the service application when the privacy protection policy is used to indicate that privacy processing is not performed. The user data.
The device according to any one of claims 2-6, wherein the receiving unit is further configured to receive privacy configuration information, where the privacy configuration information comprises: a whitelist or a blacklist, and the whitelist is used by the whitelist or the blacklist. And indicating a range of user data that is allowed to be open to the service application, where the blacklist is used to indicate a range of user data that is not allowed to be open to the service application;

When the negotiation result processing unit is configured to provide the user data to the service application, the negotiation result processing unit is specifically configured to provide the user data to the service application, where the user data belongs to the The range indicated by the whitelist does not belong to the range indicated by the blacklist.
A method for processing user data, comprising:

The user data processing device receives a wireless information acquisition request sent by the network element device, where the wireless information acquisition request is used to request to acquire user data corresponding to the service application;

Determining, by the user data processing device, a privacy protection policy corresponding to the service application according to the service application and a correspondence between the service application and a privacy protection policy;

When the privacy protection policy is used to indicate privacy processing, the user data processing apparatus performs the privacy processing on the user data according to the privacy protection policy.
The method according to claim 8, wherein the privacy protection policy is used to indicate that the privacy process is performed: the privacy protection policy is used to indicate that the privacy negotiation is performed;

The user data processing apparatus performs the privacy processing on the user data according to the privacy protection policy, including:

The user data processing apparatus corresponds to the user data according to the privacy protection policy User equipment performs the privacy negotiation to obtain a privacy negotiation result;

When the privacy negotiation result is used to indicate that the user data is opened to the service application, the user data processing apparatus provides the user data to the service application; or

When the result of the privacy negotiation is used to indicate that the user data is not to be opened to the service application, the user data processing apparatus sends the indication information to the network element device, where the indication information is used to indicate that the user cannot be obtained. data.
The method according to claim 9, wherein the user data processing apparatus performs the privacy negotiation according to the user equipment corresponding to the user data according to the privacy protection policy to obtain a privacy negotiation result, including:

The user data processing device sends a privacy negotiation request to the user equipment, where the privacy negotiation request is used to request an indication of whether to open the user data to the service application;

The user data processing apparatus receives a privacy negotiation request response sent by the user equipment, where the privacy negotiation request response includes the privacy negotiation result.
The method according to claim 8, wherein the privacy protection policy is used to indicate that the privacy process is performed: the privacy protection policy is used to indicate that the pre-stored privacy negotiation result is adopted;

The user data processing apparatus performs the privacy processing on the user data according to the privacy protection policy, including:

The user data processing device directly obtains a pre-stored privacy negotiation result according to the privacy protection policy;

When the privacy negotiation result is used to indicate that the user data is opened to the service application, the user data processing apparatus provides the user data to the service application; or

When the result of the privacy negotiation is used to indicate that the user data is not to be opened to the service application, the user data processing apparatus sends the indication information to the network element device, where the indication information is used to indicate that the user cannot be obtained. data.
The method according to claim 11, wherein before the user data processing device receives the wireless information acquisition request sent by the network element device, the method further includes:

Receiving, by the user data processing device, the privacy negotiation result sent by the user equipment;

The user data processing device saves the privacy negotiation result.
The method of any of claims 8-12, further comprising:

The user data processing apparatus provides the user data to the business application when the privacy protection policy is used to indicate that privacy processing is not performed.
The method of any of claims 9-13, further comprising:

The user data processing apparatus receives the privacy configuration information, where the privacy configuration information includes: a whitelist or a blacklist, where the whitelist is used to indicate a range of user data that is allowed to be open to the service application, and the blacklist is used for Indicating a range of user data that is not allowed to be open to the business application;

The user data processing apparatus provides the user data to the service application, including:

The user data processing apparatus provides the user data to the service application, wherein the user data belongs to a range indicated by the whitelist or does not belong to a range indicated by the blacklist.