WO2016107024A1

WO2016107024A1 - Information protection and display method, device and terminal

Info

Publication number: WO2016107024A1
Application number: PCT/CN2015/077417
Authority: WO
Inventors: 万强新
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-12-31
Filing date: 2015-04-24
Publication date: 2016-07-07
Also published as: CN105809042A

Abstract

An information protection and display method, device and terminal, the protection method comprising: identifying sensitive content included in information; hiding the sensitive content to obtain hidden state content; encrypting the sensitive content to obtain encrypted state content; performing association storage for the encrypted state content and the hidden state content; and when the encrypted state content is not decrypted, and when displaying the information, displaying the sensitive content as the hidden state content. By means of the method in an embodiment of the present invention, the sensitive content is at least partially hidden, and other portions are normally displayed, thus facilitating a user to preview, look up and manage. Compared to the related art, the embodiment of the present invention enhances security of user information, and improves user experience.

Description

Information protection, display method, information protection, display device and terminal

Technical field

The present invention relates to the field of information security of mobile terminals, and in particular, to a protection information protection, display method, information protection, display device and terminal.

Background technique

At present, it is very common to send or receive information related to an individual's ID number, courier number, bank account number, transaction voucher number, etc. through the mobile terminal network. After the information is used, the user tends to keep it in the phone, and this part of the information is likely to be leaked. Therefore, mobile phones are required to provide some functions to protect information containing such sensitive content.

The existing information protection function often adopts a method of directly selecting the entire information for protection, so that after a certain period of protection, when a plurality of pieces of information are protected, it is inconvenient to query and read. At the same time, existing protection methods rely on the user to manually select the information that needs to be protected.

Summary of the invention

Based on the above background, the present invention provides an information protection, a display method, an information protection, a display device, and a terminal, so as to protect the information containing sensitive content and facilitate the user to view.

In order to achieve the above objectives, the following technical solutions are adopted:

An information protection method, including:

Identify sensitive content contained in the information;

Hiding the sensitive content to obtain hidden state content;

Encrypting the sensitive content to obtain an encrypted state content;

Associating the encrypted state content with the hidden state content;

In the case where the encrypted state content is not decrypted, the sensitive content is displayed as the hidden state content when the information is displayed.

Optionally, the sensitive content included in the identification information includes:

Extracting digital information in the information and acquiring features of the digital information, matching the feature with a preset digital feature database, and determining that the digital information is sensitive content if the matching is successful;

or,

Extracting the digital information in the information and determining whether the digital information includes a keyword according to a preset keyword database, and if included, determining that the digital information is sensitive content.

Optionally, hiding the sensitive content to obtain a hidden state content includes one of the following:

Hiding all of the sensitive content to obtain the hidden state content;

Hiding a part of the sensitive content, keeping the other parts of the sensitive content unchanged, and obtaining the hidden state content;

Based on the user selection, the specified portion of the sensitive content is hidden, and the other portions of the sensitive content are kept unchanged, and the hidden state content is obtained.

Optionally, the hiding process includes:

The portion of the sensitive content to be hidden from being processed is processed in one of the following ways: hidden, deleted, and replaced with other content.

Optionally, performing encryption processing on the sensitive content to obtain an encrypted status content includes:

Expanding a cryptographic hash value storage field in the sensitive content or in the information;

Receiving an encryption key input by the user, calculating a hash value of the encryption key by using a preset algorithm and storing the hash value in the password hash value storage field.

Optionally, before calculating the hash value of the encryption key by using a preset algorithm, the method further includes: performing encryption processing on the sensitive content content according to an encryption key input by the user, to obtain the encrypted state content.

An information display method includes:

Displaying information containing sensitive content according to the above information protection method;

Receiving a decryption password input by the user, and according to the decryption password pair, the hidden state information is closed The encrypted state content is decrypted, and the hidden content is hidden and processed before being hidden.

An information protection device includes: an information recognition module, a hidden module, an encryption module, a storage operation module, and a display control module;

The information identification module is configured to identify sensitive content included in the information;

The hiding module is configured to perform hidden processing on the sensitive content to obtain a hidden state content;

The encryption module is configured to perform encryption processing on the sensitive content to obtain an encrypted state content;

The storage operation module is configured to associate the encrypted state content with the hidden state content;

The display control module is configured to display the sensitive content as the hidden state content without decrypting the encrypted state content.

Optionally, the information identification module includes a first extraction submodule and a matching submodule, and the first extraction submodule is configured to extract digital information in the information and acquire a feature of the digital information; the matching sub The module is configured to match the feature of the digital information with a preset digital feature library, and if the matching is successful, determine that the digital information is sensitive content;

or,

The information identification module includes a second extraction sub-module and a determination sub-module, and the second extraction sub-module is configured to extract digital information in the information; the determination sub-module is configured to determine the location according to a preset keyword library. Whether the keyword contains a keyword, if included, determines that the digital information is sensitive content.

Optionally, the hiding module hides the sensitive content to obtain a hidden state content, which refers to one of the following:

The hiding module performs hidden processing on all the sensitive content to obtain the hidden state content;

Optionally, the hidden module includes one of the following: a hidden processing submodule, a deletion processing submodule, and a replacement submodule;

The hiding processing submodule is configured to hide a portion of the sensitive content to be hidden from being processed;

The deletion processing sub-module is configured to directly delete the part of the sensitive content to be hidden and processed;

The replacement sub-module is arranged to replace a portion of the sensitive content to be hidden from processing into other content.

Optionally, the encryption module includes an expansion submodule and a calculation submodule;

The extension submodule is configured to expand a cryptographic hash value storage field in the sensitive content or in the information;

The calculation submodule is configured to calculate a hash value of the encryption key according to an encryption key input by the user by using a preset algorithm and store the hash value in the password hash value storage field.

Optionally, the encryption module further includes an encryption submodule, configured to be sensitive to the encryption key input by the user before the calculation submodule calculates the hash value of the encryption key by using a preset algorithm. The content is encrypted to obtain the encrypted state content.

An information display device includes: a first display processing module and a second display processing module;

The first display processing module includes the information protection device described in the above item;

The second display processing module is configured to receive a decryption password input by the user, and perform decryption processing on the encrypted state content associated with the hidden state content according to the decryption password to obtain the sensitive content before the hidden state content is hidden and processed. Display.

A terminal includes a processor, a memory, and a display, the processor is configured to identify sensitive information in the information, and hide the sensitive information to obtain hidden state information. Encrypting the original information content of the information to obtain encrypted state information, and storing the encrypted state information in association with the hidden state information in the memory; and in a case where the encrypted state information is not decrypted, The sensitive information is displayed on the display as the hidden state information.

The embodiment of the invention can be applied to any system with information sending, receiving and displaying, and automatically recognizes and protects some sensitive content (such as ID number, courier number, bank account number, password, etc.) when new information is generated. A key part of the information; compared with the related art, the embodiment of the invention enhances the security of the user information and improves the user experience.

BRIEF abstract

1 is a schematic flow chart of an information protection method according to Embodiment 1 of the present invention;

2 is a schematic diagram of an information protection apparatus according to Embodiment 2 of the present invention;

3 is a flow chart of information processing in an embodiment of the present invention;

4 is a flow chart for identifying sensitive content in an implementation example;

5 is a flow chart of processing information containing sensitive content in an implementation example;

Fig. 6 is a flow chart showing information displayed in the embodiment.

Preferred embodiment of the invention

The embodiments of the present invention are further described below in conjunction with the accompanying drawings, and are not intended to limit the scope of the embodiments of the present invention. It should be noted that the embodiments in the present application and the various manners in the embodiments may be combined with each other without conflict.

The steps illustrated in the flowchart of the figures may be executed in a computer system such as a set of computer executable instructions. Also, although logical sequences are shown in the flowcharts, in some cases the steps shown or described may be performed in a different order than the ones described herein.

Embodiment 1 An information protection method, as shown in FIG. 1, includes:

S10. Identify sensitive content included in the information;

S20: hiding the sensitive content to obtain a hidden state content;

S30. Perform encryption processing on the sensitive content to obtain an encrypted state content.

S40. Associate the encrypted state content with the hidden state content.

S50. When the encrypted state content is not decrypted, the sensitive content is displayed as the hidden state content when the information is displayed.

or,

Hiding all of the sensitive content to obtain the hidden state content;

Optionally, the hiding process includes:

Optionally, before calculating the hash value of the encryption key by using a preset algorithm, the method further includes: performing encryption processing on the sensitive content content according to an encryption key input by the user, to obtain the encryption. Status content.

Embodiment 2: An information display method includes:

The information protection method according to the first embodiment displays information including sensitive content;

Receiving a decryption password input by the user, decrypting the encrypted state content associated with the hidden state information according to the decryption password, and obtaining the sensitive content before the hidden state content is hidden and displayed.

Embodiment 3, an information protection device, as shown in Figure 2, comprising: information identification module 21, hidden module 22, encryption module 23, storage operation module 24 and display control module 25;

The information identification module 21 is configured to identify sensitive content included in the information;

The hiding module 22 is configured to perform hidden processing on the sensitive content to obtain hidden state content;

The encryption module 23 is configured to perform encryption processing on the sensitive content to obtain an encrypted state content;

The storage operation module 24 is configured to associate the encrypted state content with the hidden state content;

The display control module 25 is configured to display the sensitive content as the hidden state content without decrypting the encrypted state content.

or,

The information identification module includes a second extraction sub-module and a determination sub-module, and the second extraction sub-module is configured to extract digital information in the information; the determination sub-module is configured to determine the location according to a preset keyword library. Whether the digital information contains a keyword, if included, the digital signal is determined Interest is sensitive content.

Embodiment 4: An information display device includes: a first display processing module and a second display Management module

The first display processing module includes the information protection device described in Embodiment 3;

Embodiment 5: A terminal, including a processor, a memory, and a display, the processor is configured to identify sensitive information in the information, and hide the sensitive information to obtain hidden state information, and the original information of the sensitive information. Encrypting the content to obtain encrypted state information, and storing the encrypted state information in association with the hidden state information in the memory; and for using the sensitive information without decrypting the encrypted state information The hidden state information is displayed on the display.

The solution described in the embodiments of the present invention is further illustrated by the following implementation examples.

FIG. 3 is a general process flowchart of the present embodiment, including steps 102-106. The monitoring information (step 102) and the information storage (in step 104) are general processing flows.

Based on this implementation example, the process of adding or expanding is as follows:

A process of identifying sensitive content is added after step 102 (step 103).

Modifying the information storage process (step 104), adding the following processing information before the information storage: the encryption flag bit marks whether the information is sensitive content, encrypts the sensitive content as a whole and encrypts the content, and stores the sensitive content. The state content is hidden and stored in association with the encrypted state content.

The stored procedure further includes an information display process: in the process of displaying the information, the sensitive content is displayed as the hidden state content without decrypting the encrypted state content (step 105).

4 is a flow chart of identifying sensitive content in the present embodiment. For each new piece of information The following processing is performed:

Step 201 detects whether the sub-text in the text of the information contains sensitive content (identification information such as ID number, courier number, bank account number, password, etc.). The specific implementation includes two steps: 2011. Extracting the numeric string in the sub-text using the method of regular matching; 2012. judging whether the digital string is sensitive content according to the characteristics of the digital string, for example, for the ID number, the general feature is 18 consecutive digit strings or 17 digit strings +1 digits; for express delivery numbers, generally 10-12 is a numeric string; for bank accounts, generally 19 is a digit string; for transaction voucher numbers, for The voucher number of a common online transaction website establishes a feature library to judge. In addition, 2012 can also be changed to: according to the established keywords (ID card, transfer, express, ticket collection, etc.) library, find out whether the above-mentioned keywords are included in the digital string to determine whether it is sensitive content, and further enhance information content sensitivity. Sexual judgment. According to the above method for judging sensitive content, if there is sensitive content, the process proceeds to step 202 to remind the user to process the sensitive content; if not, the process ends.

FIG. 5 is a process of hiding the identified information containing sensitive content according to an embodiment of the present invention. For each piece of information that contains sensitive content:

Step 301: hiding the sensitive content in the information (replaced in this example) to obtain the hidden processing content, and retaining the part of the non-sensitive content as it is, and recording the password provided by the user; this step may have the following three implementation manners to obtain the hidden processing content. : 1. Automatically replace the characters of the last 25% of sensitive content (if 25% is not an integer, round up or down) to the same character (such as "*"), and the other parts of the sensitive content are unchanged; The editing area is provided, the user-defined selection needs to hide the processed part, the part selected by the user in the sensitive content is replaced, and the other parts of the sensitive content are unchanged; 3. The sensitive content is completely replaced.

Step 302 stores hidden state content;

Step 303: encrypting the sensitive content to obtain an encrypted state content and storing the content in association with the hidden state content, and adding an encryption flag bit to mark whether the information includes sensitive content. The specific implementation manner is: extending a field of the information database, adding an encryption flag field and a password hash value storage field; and encrypting the sensitive content according to a password provided by the user (the encryption algorithm is not limited, such as a sequence or a logical shift), and Set the encryption flag field to a valid value, and calculate the hash value of the password (the calculation method is not limited, such as md5) and save it in the password hash value storage field.

Fig. 6 is a flow chart showing information displayed in the embodiment.

When the user views the information, the present embodiment can display the information content for the user according to the encrypted flag bit.

Step 401: When reading non-encrypted information, the information is normally displayed;

Step 402, when reading the encrypted information, the sensitive content in the information is displayed as the hidden state content that has been hidden and processed; at this time, if the user chooses to further view the entire content, proceed to step 403;

Step 403: Enter a password to decrypt to display sensitive content. Corresponding to the encryption implementation in step 303, the specific decryption implementation manner is as follows: the hash value is calculated according to the password input by the user, and compared with the stored password hash value, if the same, the encrypted password content is decrypted to obtain the sensitive content. And display (can be displayed in the information or displayed separately), if different, prompt the user password input error.

Industrial applicability

Claims

An information protection method, including:

Identify sensitive content contained in the information;

Hiding the sensitive content to obtain hidden state content;

Encrypting the sensitive content to obtain an encrypted state content;

Associating the encrypted state content with the hidden state content;

In the case where the encrypted state content is not decrypted, the sensitive content is displayed as the hidden state content when the information is displayed.
The information protection method according to claim 1, wherein the sensitive content included in the identification information comprises:

Extracting digital information in the information and acquiring features of the digital information, matching the feature with a preset digital feature database, and determining that the digital information is sensitive content if the matching is successful;

or,

Extracting the digital information in the information and determining whether the digital information includes a keyword according to a preset keyword database, and if included, determining that the digital information is sensitive content.
The information protection method according to claim 1, wherein the hiding the sensitive content to obtain the hidden state content comprises one of the following:

Hiding all of the sensitive content to obtain the hidden state content;

Hiding a part of the sensitive content, keeping the other parts of the sensitive content unchanged, and obtaining the hidden state content;

Based on the user selection, the specified portion of the sensitive content is hidden, and the other portions of the sensitive content are kept unchanged, and the hidden state content is obtained.
The information protection method according to claim 3, wherein said concealing processing comprises:

The portion of the sensitive content to be hidden from being processed is processed in one of the following ways: hidden, deleted, and replaced with other content.
The information protection method according to any one of claims 1 to 4, wherein the encrypting the encrypted content to obtain the encrypted state content comprises:

Expanding a cryptographic hash value storage field in the sensitive content or in the information;

Receiving an encryption key input by the user, calculating a hash value of the encryption key by using a preset algorithm and storing the hash value in the password hash value storage field.
The information protection method according to claim 5, wherein before the hash value of the encryption key is calculated by using a preset algorithm, the method further comprises: encrypting the sensitive content according to an encryption key input by the user, The encrypted state content is obtained.
An information display method includes:

Displaying information containing sensitive content according to the information protection method according to any one of claims 1 to 6;

Receiving a decryption password input by the user, decrypting the encrypted state content associated with the hidden state information according to the decryption password, and obtaining the sensitive content before the hidden state content is hidden and displayed.
An information protection device includes: an information recognition module, a hidden module, an encryption module, a storage operation module, and a display control module;

The information identification module is configured to identify sensitive content included in the information;

The hiding module is configured to perform hidden processing on the sensitive content to obtain a hidden state content;

The encryption module is configured to perform encryption processing on the sensitive content to obtain an encrypted state content;

The storage operation module is configured to associate the encrypted state content with the hidden state content;

The display control module is configured to display the sensitive content as the hidden state content without decrypting the encrypted state content.
The information protection device of claim 8 wherein:

The information identification module includes a first extraction submodule and a matching submodule, the first extraction submodule being configured to extract digital information in the information and acquire features of the digital information; the matching submodule is configured to The feature of the digital information is matched with a preset digital feature database, and if the matching is successful, the digital information is determined to be sensitive content;

or,

The information identification module includes a second extraction sub-module and a determination sub-module, and the second extraction sub-module is configured to extract digital information in the information; the determination sub-module is configured to determine the location according to a preset keyword library. Whether the keyword contains a keyword, if included, determines that the digital information is sensitive content.
The information protection device according to claim 8, wherein the hiding module performs hidden processing on the sensitive content to obtain a hidden state content, which is one of the following:

The hiding module performs hidden processing on all the sensitive content to obtain the hidden state content;

Hiding a part of the sensitive content, keeping the other parts of the sensitive content unchanged, and obtaining the hidden state content;

Based on the user selection, the specified portion of the sensitive content is hidden, and the other portions of the sensitive content are kept unchanged, and the hidden state content is obtained.
The information protection device according to claim 10, wherein the hiding module comprises one of: a hidden processing sub-module, a deletion processing sub-module, and a replacement sub-module;

The hiding processing submodule is configured to hide a portion of the sensitive content to be hidden from being processed;

The deletion processing sub-module is configured to directly delete the part of the sensitive content to be hidden and processed;

The replacement sub-module is arranged to replace a portion of the sensitive content to be hidden from processing into other content.
The information protection device according to any one of claims 8 to 11, wherein the encryption module comprises an extension submodule and a calculation submodule;

The extension submodule is configured to expand a cryptographic hash value storage field in the sensitive content or in the information;

The calculation submodule is configured to calculate a hash value of the encryption key according to an encryption key input by the user by using a preset algorithm and store the hash value in the password hash value storage field.
The information protection apparatus according to claim 11, wherein said encryption module further comprises an encryption sub-module, configured to: before said calculation sub-module calculates a hash value of said encryption key using a preset algorithm, according to the user The input encryption key encrypts the sensitive content to obtain the encrypted status content.
An information display device includes: a first display processing module and a second display processing module;

The first display processing module includes the information protection device according to any one of claims 8-13;

The second display processing module is configured to receive a decryption password input by the user, and perform decryption processing on the encrypted state content associated with the hidden state content according to the decryption password to obtain the sensitive content before the hidden state content is hidden and processed. Display.
A terminal includes a processor, a memory, and a display, the processor is configured to identify sensitive information in the information, hide the sensitive information to obtain hidden state information, and encrypt the original information content of the sensitive information. Obtaining encrypted state information, and storing the encrypted state information in association with the hidden state information in the memory; and for using the sensitive information on the display without decrypting the encrypted state information The above is displayed as the hidden state information.