WO2023065806A1

WO2023065806A1 - Method for generating privacy protocol family of application, and client device and server

Info

Publication number: WO2023065806A1
Application number: PCT/CN2022/114005
Authority: WO
Inventors: 张述; 孙靓; 麻俊波
Original assignee: 华为技术有限公司
Priority date: 2021-10-20
Filing date: 2022-08-22
Publication date: 2023-04-27
Also published as: CN115994379A

Abstract

Provided in the present application are a method for generating a privacy protocol family of an application, and a client device and a server. The method comprises: after running a target application, a client device acquiring first personal data of the target application in the client device; after determining that the first personal data is used in a first privacy behavior, the client device sending first information to a second server; the client device sending the first personal data to a first server, so that the first server determines second personal data of the target application in the first server on the basis of the first personal data, and sending second information to the second server after determining that the second personal data is used in a second privacy behavior; the client device receiving a target privacy protocol family from the second server; and the client device storing the target privacy protocol family in an installation package of the target application, so that the target application can present the target privacy protocol family to a user after the target application is started. Therefore, a target privacy protocol family is automatically generated, thereby reducing the generation time and invested costs.

Description

Applied privacy protocol suite generation method, client device and server

This application claims the priority of the Chinese patent application submitted to the State Intellectual Property Office on October 20, 2021, with the application number 202111223312.5, and the application name is "Applied Privacy Protocol Family Generation Method, Client Device and Server", the entire content of which Incorporated in this application by reference.

technical field

The present application relates to the field of privacy technology, and in particular to a method for generating an applied privacy protocol suite, a client device and a server.

Background technique

As users attach great importance to privacy rights and interests, many laws and regulations stipulate that applications need to display the application's privacy protocol suite to users, so as to fully protect users' privacy rights and interests when using various applications. Among them, the privacy protocol family provides the user's privacy rights and interests for the application, and the privacy protocol family may include content such as privacy statements, user agreements, and privacy requirements.

At present, developers often generate application privacy protocol suites by manual writing. Please refer to FIG. 1 . FIG. 1 shows a block flow diagram of generating a privacy protocol suite for an application in a related art. As shown in Figure 1, in related technologies, developers need to intervene in the early stage of the application development stage, and the specific process of writing and generating the privacy protocol suite of the application includes:

In the design stage of the application, the R&D personnel can distinguish user scenarios and obtain user data definitions corresponding to the user scenario distinctions. Based on the definition of user data, combined with the relevant requirements of laws and regulations, it is written by professional privacy representatives among the R&D personnel, and then confirmed by professional privacy legal personnel among the R&D personnel to obtain the privacy protocol suite of the application. Finally, the developer can integrate the privacy protocol suite of the application into the installation package (or release package) of the application, and during the release and launch phase of the application, the privacy protocol suite of the application can be oriented to users along with the version release of the application.

However, the solutions of related technologies run through the entire development stage of the application, requiring professional privacy analysis, resulting in long time, high investment cost and low accuracy of generating privacy protocol suites.

Contents of the invention

This application provides a method for generating an applied privacy protocol family, a client device and a server, which can automatically generate a target privacy protocol family, and can solve the problems of long time, high cost and poor accuracy caused by manually writing a privacy protocol family.

In a first aspect, the present application provides a method for generating an application privacy protocol suite, which is applied to a client device.

The method includes:

After running the target application, the client device obtains the first personal data of the target application in the client device;

After determining that the first privacy behavior uses the first personal data, the client device sends first information to the second server, the first information is used to describe the privacy situation of the first privacy behavior using the first personal data, and the first Privacy behavior includes all behaviors that all applications need to use personal data on the client device;

The client device sends the first personal data to the first server, so that the first server determines the second personal data of the target application in the first server based on the first personal data, and uses the second personal data when determining the second privacy behavior. After receiving the personal data, send the second information to the second server. The second information is used to describe the privacy of the second privacy behavior using the second personal data. The second privacy behavior includes all applications that need to use personal data in the first server. all acts;

The client device receives a target privacy protocol suite from the second server, where the target privacy protocol suite is generated by the second server based on the first information and the second information;

The client device stores the target privacy protocol suite into the installation package of the target application, so that the target application can display the target privacy protocol suite to the user after being started.

Through the application privacy protocol family generation method provided in the first aspect, based on the mutual cooperation between the client device, the first server and the second server, the client device and the first server adopt data flow analysis, data retention monitoring, SDK Detection and data cross-border detection can capture the privacy situation of all privacy behaviors using personal data during the operation of the target application, and the client device and the first server will transmit the information corresponding to the aforementioned privacy situation to the second server , so that the second server can accurately and quickly generate the target privacy protocol suite based on the user's privacy rights and interests in the target application represented by the aforementioned information. Thus, the automatic generation of the target privacy protocol family is realized, avoiding the cumbersome process of the development phase of the associated application and the development and launch phase of the bound application, shortening the time cost of generating the target privacy protocol family, and reducing the cost of generating the target privacy protocol family. The input cost improves the accuracy of generating the target privacy protocol family.

In one possible design, the client device runs target applications, including:

The client device receives the installation package of the target application;

When the client device determines that the installation package of the target application is not a new version, it runs the installation package of the target application.

In one possible design, the method also includes:

When the client device determines that the installation package of the target application is a new version, it sends the installation package of the target application to the second server;

The client device receives the target privacy protocol suite corresponding to the new version from the second server. The target privacy protocol suite corresponding to the new version is based on the installation package of the target application by the second server, determines the difference between the old and new versions, and based on the difference, the It is obtained by updating the target privacy protocol family corresponding to the old version;

The client device updates the target privacy protocol suite corresponding to the old version in the installation package of the target application to the target privacy protocol suite corresponding to the new version, so that the client device displays the target privacy protocol suite corresponding to the new version after the target application is started.

In one possible design, the method also includes:

The client device displays the entire content of the target privacy protocol family;

The client device receives the revised content of the target privacy protocol family;

The client device updates the target privacy protocol family in the installation package of the target application based on the correction content, and obtains the revised target privacy protocol family, so that the target application can display the revised target privacy protocol family to the user after it is started;

The client device sends the revised target privacy protocol family to the second server, so that the second server updates the target privacy protocol family to the revised target privacy protocol family.

In a possible design, when the first privacy behavior includes: sensitive behavior and control operation, after determining that the first privacy behavior uses the first personal data, the client device sends the first information to the second server, including :

After determining that the sensitive behavior uses the first personal data, the client device determines that the first information includes the identification of the sensitive behavior and the content and identification of the first personal data used by the sensitive behavior, and sends the sensitive behavior information to the second server. identification and the content and identification of the first personal data used in sensitive activities;

And/or, after the client device determines that the control operation uses the first personal data, it determines that the first information includes the identification of the control operation and the content and identification of the first personal data used by the control operation, and sends a report to the second The server sends the identification of the control operation and the content and identification of the first personal data used by the control operation.

In a possible design, when the first privacy behavior includes: a disclosure behavior, after determining that the first privacy behavior uses the first personal data, the client device sends the first information to the second server, including:

The client device determines the data disclosure situation of the target application in the client device based on the content and identification of the first personal data;

After the client device determines that the first personal data is used in the disclosure behavior based on the data disclosure situation of the target application in the client device, it determines that the first information includes the identification of the disclosure behavior and the identity of the first personal data used in the disclosure behavior. content and logos;

The client device sends the identification of the disclosure act and the content and identification of the first personal data used in the disclosure action to the second server.

In a possible design, when the first privacy behavior includes: cross-border behavior, the client device sends first information to the second server after determining that the first privacy behavior uses the first personal data, including:

Based on the content and identification of the first personal data, the client device determines the data cross-border status of the target application in the client device;

After the client device determines that the first personal data is used in the cross-border behavior based on the cross-border data of the target application in the client device, it determines that the first information includes the identification of the cross-border behavior and the first personal data used in the cross-border behavior. the content and identification of personal data;

The client device sends the identifier of the cross-border behavior and the content and identifier of the first personal data used by the cross-border behavior to the second server.

In a possible design, when the second privacy behavior includes: rights behavior and retention behavior, the second information includes: the identification of the rights behavior and the content and identification of the second personal data used by the rights behavior, and/or , the identification of the retention behavior and the content and identification of the second personal data used in the retention behavior;

Wherein, the identification of the right action and the content and identification of the second personal data used by the right action are sent by the first server after determining that the right action uses the second personal data based on the data retention status of the target application in the first server, The identification of the retention behavior and the content and identification of the second personal data used in the retention behavior are sent by the first server after determining that the retention behavior uses the second personal data based on the data retention status of the target application in the first server. The target application The data retention situation in the first server is determined by the first server based on the content and identification of the second personal data.

In a possible design, when the second privacy behavior includes: disclosure behavior, the method further includes:

The client device receives from the first server the identification of the disclosure act and the content and identification of the second personal data used in the disclosure act included in the second information, the identification of the disclosure act and the content and identification of the second personal data used in the disclosure act The identification is sent by the first server after determining that the disclosure behavior uses the second personal data based on the data disclosure of the target application in the first server. The data disclosure of the target application in the first server is based on the second personal data The content and identification of the data are determined;

The client device sends the identification of the disclosure behavior and the content and identification of the second personal data used in the disclosure behavior to the second server.

In a possible design, when the second privacy behavior includes: cross-border behavior, the method further includes:

The client device receives from the first server the identifier of the cross-border behavior included in the second information and the content and identifier of the second personal data used in the cross-border behavior, the identifier of the cross-border behavior and the second person used in the cross-border behavior The content and identification of the data are sent by the first server after determining that the cross-border behavior uses the second personal data based on the cross-border data of the target application in the first server. The cross-border data of the target application in the first server is determined by the first server based on the content and identification of the second personal data;

The client device sends the identifier of the cross-border behavior and the content and identifier of the second personal data used by the cross-border behavior to the second server.

In a second aspect, the present application provides a method for generating an application privacy protocol suite, which is applied to a first server.

The method includes:

The first server receives first personal data of the target application in the client device from the client device, and the first personal data is obtained by the client device after running the target application;

The first server determines the second personal data of the target application in the first server based on the first personal data;

After the first server determines that the second privacy behavior uses the second personal data, it sends the second information to the second server. The second information is used to describe the privacy situation that the second privacy behavior uses the second personal data. The second privacy behavior Including all the behaviors that all applications need to use personal data in the first server, so that the second server generates the target privacy protocol suite based on the first information and the second information, and sends the target privacy protocol suite to the client device, the target privacy protocol suite It is used to store the client device in the installation package of the target application, so that the target application can display the target privacy protocol suite to the user after the target application is started. The first information is that the client device uses the first personal data when determining the first privacy behavior Later sent to the second server, the first information is used to describe the privacy situation that the first privacy behavior uses the first personal data, and the first privacy behavior includes all behaviors that all applications need to use personal data on the client device.

In a possible design, when the second privacy behavior includes: rights behavior and retention behavior, the first server sends second information to the second server after determining that the second privacy behavior uses the second personal data, including:

The first server determines the data retention status of the target application in the first server based on the content and identification of the second personal data;

After the first server determines that the second personal data is used in the right action based on the data retention status, it determines that the second information includes the identification of the right action and the content and identification of the second personal data used in the right action, and sends the second information to the second server Identification of the right action and the content and identification of the second personal data used by the right action;

And/or, after the first server determines that the second personal data is used in the retention behavior based on the data retention situation, it determines that the second information includes the identification of the retention behavior and the content and identification of the second personal data used in the retention behavior, and sends The second server sends the identification of the retention behavior and the content and identification of the second personal data used in the retention behavior.

In a possible design, when the second privacy behavior includes: a disclosure behavior, the first server sends second information to the second server after determining that the second privacy behavior uses the second personal data, including:

The first server determines the data disclosure situation of the target application in the first server based on the content and identification of the second personal data;

After the first server determines that the second personal data is used in the disclosure based on the data disclosure of the target application in the first server, it determines that the second information includes the identification of the disclosure and the content and content of the second personal data used in the disclosure. logo;

The first server sends the identification of the disclosure act and the content and identification of the second personal data used for the disclosure to the second server;

Alternatively, the first server sends the identification of the disclosure behavior and the content and identification of the second personal data used in the disclosure behavior to the second server through the client device.

In a possible design, when the second privacy behavior includes: cross-border behavior, the first server sends second information to the second server after determining that the second privacy behavior uses the second personal data, including:

Based on the content and identification of the second personal data, the first server determines the data cross-border status of the target application in the first server;

After the first server determines that the second personal data is used in the cross-border behavior based on the cross-border data of the target application in the first server, it determines that the second information includes the identification of the cross-border behavior and the second person used in the cross-border behavior the content and identification of the data;

The first server sends the identification of the cross-border behavior and the content and identification of the second personal data used by the cross-border behavior to the second server;

Alternatively, the first server sends the identifier of the cross-border behavior and the content and identifier of the second personal data used by the cross-border behavior to the second server through the client device.

The above-mentioned second aspect and the method for generating an applied privacy protocol suite provided in each possible design of the above-mentioned second aspect, its beneficial effect can refer to the above-mentioned first aspect and the benefits brought by each possible implementation of the first aspect effect, which will not be repeated here.

In a third aspect, the present application provides a method for generating an application privacy protocol suite, which is applied to the second server.

The method includes:

The second server receives first information from the client device, the first information is sent by the client device after determining that the first privacy behavior uses the first personal data, and the first information is used to describe that the first privacy behavior uses the target application The privacy of the first personal data in the client device, the first privacy behavior includes all the behaviors that all applications need to use personal data in the client device, the first personal data is obtained by the client device after running the target application Arrived;

The second server receives the second information from the first server. The second information is sent by the first server after determining that the second privacy behavior uses the second personal data of the target application in the first server. The second information is used to describe the first The second privacy behavior uses the privacy of the second personal data, the second privacy behavior includes all the behaviors that require the use of personal data in all applications in the first server, and the second personal data is determined by the first server based on the first personal data;

The second server generates a target privacy protocol family based on the first information and the second information;

The second server sends the target protocol suite to the client device, and the target privacy protocol suite is used for the client device to store in the installation package of the target application, so that the target application can display the target protocol suite to the user after being started.

In one possible design, the method also includes:

The second server receives the installation package of the target application from the client device, and the installation package of the target application is sent when the client device determines that the installation package of the target application is a new version;

The second server determines the differences between the old and new versions based on the installation package of the target application;

Based on the difference part, the second server updates the target privacy protocol family corresponding to the old version to obtain the target privacy protocol family of the new version;

The second server sends the target privacy protocol family corresponding to the new version to the client device, and the target privacy protocol family corresponding to the new version is used for the client device to update the target privacy protocol family corresponding to the old version in the installation package of the target application to a new version The corresponding target privacy protocol suite, so that the target application can display the target privacy protocol suite corresponding to the new version to the user after it is launched.

In one possible design, the method also includes:

The second server receives the revised target privacy protocol family from the client device. The revised target privacy protocol family is the target privacy protocol in the installation package of the target application based on the revised content of the received target privacy protocol family by the client device. family, the correction content is received by the client device after displaying all the contents of the target privacy protocol family;

The second server updates the target privacy protocol family to the revised target privacy protocol family.

In a possible design, when the first privacy behavior includes: sensitive behavior and control operation, the second server receives the first information from the client device, including:

The second server receives from the client device the identification of the sensitive behavior included in the first information and the content and identification of the first personal data used by the sensitive behavior, the identification of the sensitive behavior and the content of the first personal data used by the sensitive behavior The content and identification are sent by the client device after determining that the first personal data was used by the sensitive behavior;

And/or, the second server receives the identification of the control operation included in the first information and the content and identification of the first personal data used for the control operation, the identification of the control operation and the first personal data used for the control operation from the client device. The content and identification of the personal data is sent by the client device after determining that the first personal data was used for the operation of the control.

In a possible design, when the first privacy behavior includes: a disclosure behavior, the second server receives first information from the client device, including:

The second server receives from the client device the identification of the disclosure act and the content and identification of the first personal data used in the disclosure act included in the first information, the identification of the disclosure act and the content of the first personal data used in the disclosure act The content and identification are sent by the client device after it is determined that the first personal data is used in the disclosure based on the data disclosure of the target application on the client device. The data disclosure of the target application on the client device is determined by the client device based on The content and identification of the first personal data is determined.

In a possible design, when the first privacy behavior includes: a cross-border behavior, the second server receives the first information from the client device, including:

The second server receives from the client device the identifier of the cross-border behavior included in the first information and the content and identifier of the first personal data used in the cross-border behavior, the identifier of the cross-border behavior and the first personal data used in the cross-border behavior The content and identification of personal data are sent by the client device after determining that the cross-border behavior uses the first personal data based on the cross-border data of the target application in the client device. The cross-border data of the target application in the client device The context is determined by the client device based on the content and identification of the first personal data.

In a possible design, when the second privacy behavior includes: rights behavior and retention behavior, the second server receives the second information from the first server, including:

The second server receives from the first server the identification of the right action and the content and identification of the second personal data used in the right action included in the second information, the identification of the right action and the content and identification of the second personal data used in the right action The identification is sent by the first server after determining that the second personal data is used in the right action based on the data retention;

And/or, the second server receives from the first server the identification of the retention behavior included in the second information and the content and identification of the second personal data used in the retention behavior, the identification of the retention behavior and the second personal data used in the retention behavior The content and identification of the data are sent by the first server after determining that the second personal data is used in the retention behavior based on the data retention situation;

Wherein, the data retention status of the target application in the first server is determined by the first server based on the content and identification of the second personal data.

In a possible design, when the second privacy behavior includes: a disclosure behavior, the second server receives second information from the first server, including:

The second server receives from the first server the identification of the disclosure act included in the second information and the content and identification of the second personal data used by the disclosure act;

Or, the second server receives from the first server, through the client device, the identification of the disclosure act included in the second information and the content and identification of the second personal data used in the disclosure act;

Wherein, the identification of the disclosure behavior and the content and identification of the second personal data used in the disclosure behavior are sent by the first server after determining that the disclosure behavior uses the second personal data based on the data disclosure situation of the target application in the first server, The data disclosure situation of the target application in the first server is determined by the first server based on the content and identification of the second personal data.

In a possible design, when the second privacy behavior includes: a cross-border behavior, the second server receives the second information from the first server, including:

The second server receives from the first server the identification of the cross-border behavior included in the second information and the content and identification of the second personal data used by the cross-border behavior;

Or, the second server receives from the first server the identification of the cross-border behavior included in the second information and the content and identification of the second personal data used by the cross-border behavior from the first server through the client device;

Among them, the identification of the cross-border behavior and the content and identification of the second personal data used in the cross-border behavior is that the first server determines that the cross-border behavior uses the second personal data based on the cross-border data of the target application in the first server. The cross-border status of the data sent by the target application in the first server is determined by the first server based on the content and identification of the second personal data.

For the beneficial effects of the method for generating privacy protocol suites for applications provided in the above-mentioned third aspect and each possible design of the above-mentioned third aspect, please refer to the benefits brought by the above-mentioned first aspect and each possible implementation of the first aspect effect, which will not be repeated here.

In a fourth aspect, the present application provides a client device, including: a memory and a processor; the memory is used to store program instructions; the processor is used to call the program instructions in the memory so that the client device executes any one of the first aspect and the first aspect. A method for generating privacy protocol suites for applications in a possible design.

In a fifth aspect, the present application provides a server, including: a memory and a processor; the memory is used to store program instructions; the processor is used to call the program instructions in the memory so that the server executes any possible design of the second aspect and the second aspect A method for generating a privacy protocol suite for an application, and/or, the processor is used to invoke program instructions in the memory to make the server execute the third aspect and any one of the third aspect and the method for generating a privacy protocol suite for an application in a possible design.

In the sixth aspect, the present application provides a computer-readable storage medium, on which a computer program is stored, and the computer program is executed by the processor to enable the client device to implement the first aspect and any possible application in the design of the first aspect The generation method of privacy protocol family.

In the seventh aspect, the present application provides a computer-readable storage medium, on which a computer program is stored, and when the computer program is executed by a processor, the server realizes the privacy of the application in the second aspect and any possible design of the second aspect. A method for generating a protocol suite, and/or, a method for generating a privacy protocol suite that implements the third aspect and any possible design of the third aspect.

In an eighth aspect, the present application provides a computer program product, including: execution instructions, the execution instructions are stored in a readable storage medium, at least one processor of the client device can read the execution instructions from the readable storage medium, and at least one processing The device executes the execution instruction so that the client device implements the privacy protocol suite generation method of the application in any possible design of the first aspect and the first aspect.

In a ninth aspect, the present application provides a computer program product, including: an execution instruction, the execution instruction is stored in a readable storage medium, at least one processor of the server can read the execution instruction from the readable storage medium, and at least one processor executes the Executing instructions to enable the server to implement the second aspect and a method for generating a privacy protocol suite in any possible design of the second aspect, and/or, to realize the third aspect and any of the third aspect and any possible design of the application in the third aspect A method for generating a privacy protocol family.

Description of drawings

FIG. 1 is a flow diagram of a privacy protocol family for generating applications in a related technology;

FIG. 2 is a schematic diagram of the system architecture of a method for generating an applied privacy protocol suite provided by an embodiment of the present application;

FIG. 3 is a block diagram of the respective software structures of a client device, an application server, and a hosting server provided by an embodiment of the present application;

FIG. 4 is a block diagram of the respective software structures of an application body, an application sandbox, a service plug-in set, and a hosting service provided by an embodiment of the present application;

FIG. 5 is a signaling interaction diagram of a method for generating an applied privacy protocol suite provided by an embodiment of the present application;

Fig. 6 is a flowchart of a method for generating an applied privacy protocol suite provided by an embodiment of the present application;

FIG. 7 is a flowchart of a method for generating an applied privacy protocol suite provided by an embodiment of the present application;

FIG. 8 is a signaling interaction diagram of a method for generating an applied privacy protocol suite provided by an embodiment of the present application;

FIG. 9 is a signaling interaction diagram of a method for generating an applied privacy protocol suite provided by an embodiment of the present application;

FIG. 10 is a signaling interaction diagram of a method for generating an applied privacy protocol suite provided by an embodiment of the present application.

Detailed ways

In this application, "at least one" means one or more, and "multiple" means two or more. "And/or" describes the association relationship of associated objects, indicating that there may be three types of relationships, for example, A and/or B, which can mean: A exists alone, A and B exist simultaneously, and B exists alone, where A, B can be singular or plural. The character "/" generally indicates that the contextual objects are an "or" relationship. "At least one of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one item (unit) of a alone, a b alone or a c alone can mean: a alone, b alone, c alone, a combination of a and b, a combination of a and c, a combination of b and c, or a combination of a, b and c, where a, b, c can be single or multiple. In addition, the terms "first" and "second" are used for descriptive purposes only, and should not be understood as indicating or implying relative importance.

This application provides a method for generating a privacy protocol suite for an application, a client device, a server, a chip system, a computer-readable storage medium, and a computer program product. It can automatically generate the privacy protocol suite of the application, avoiding the cumbersome process of the development phase of the associated application and the release and launch phase of the bound application, shortening the time cost of generating the privacy protocol suite of the application, and reducing the privacy protocol suite of the generated application The input cost ensures the accuracy of the generated application privacy protocol suite.

In addition, it can also provide developers with a channel for secondary confirmation and manual correction of the privacy protocol suite of the application, so that through the secondary confirmation and manual correction of the privacy protocol suite of the application by the research and development personnel, it is beneficial to improve the privacy protocol suite of the application. accuracy.

In addition, differentiated privacy analysis can be performed on the old and new versions of the application, and the privacy protocol suite of the application corresponding to the new version can be quickly and accurately generated without requiring a lot of human investment for privacy analysis, and there is no need to tie it to the version release of the application It solves the pain points of slow application version release and poor accuracy of the application privacy protocol suite due to frequent version iterations.

In the following, some terms used in this application are explained to facilitate the understanding of those skilled in the art.

1. Personal data

Personal data refers to: relevant data related to the user's privacy rights and interests.

Among them, the personal data may include attribute parameters such as content and category. The data content of personal data refers to the specific data of personal data. Personal data identifiers are used to indicate specific categories of personal data.

In some embodiments, categories of personal data may include: user data and device information. The types of user data may include but are not limited to: name, identity information (such as ID number or photo, etc.), location data (such as latitude and longitude or room number, etc.), psychological state, genetic information, and social identity, etc. Types of device information may include but not limited to: network identifier, device model, and physical address (physical address, MAC).

2. Privacy behavior

Privacy behavior refers to all behaviors that applications need to use personal data, which can fully involve the data life cycle of the client device 0 analyzing the user's privacy rights and the data life cycle of the application server 2 analyzing the user's privacy rights, etc.

In addition, the identifier of the privacy behavior may indicate the type of the privacy behavior. Wherein, the identifier of the privacy behavior may be represented by letters, numbers, binary, characters, and the like.

In some embodiments, the types of privacy behaviors may include: sensitive behaviors (such as command execution, file upload, audio and video download, information storage, location information acquisition, etc.), control operations (such as user selection to agree to controls and other operations), right behaviors (that is, the user actively conducts behaviors such as accessing, deleting, and retaining), retention behavior (that is, the target application actively conducts behaviors such as accessing, deleting, and retaining), and disclosure behavior (such as transferring data to other applications/official accounts/webpages) behavior) and cross-border behavior (such as the behavior of transmitting data to servers in other countries), etc.

Please refer to FIG. 2 . FIG. 2 shows a schematic diagram of a system architecture of a method for generating an applied privacy protocol suite provided by the present application.

As shown in FIG. 2 , the system architecture of the application privacy protocol suite generation method of the present application may include: a client device 0 , an application server 2 and a hosting server 3 .

The client device 0 communicates with the application server 2 and the hosting server 3 respectively, and the application server 2 also communicates with the hosting server 3 . The communication connection mentioned in this application may include wireless connection and/or wired connection, which is not limited in this application.

Wherein, both the client device 0 and the application server 2 can install and run the installation package of the target application. Correspondingly, the client device 0 is provided with the application client 1 of the target application, and the application server 2 can be the application server of the target application 2, so that the client device 0 and the application server 2 can cooperate with each other to realize all services of the target application. The hosting server 3 can be a server that generates the target privacy protocol suite.

Wherein, the target application mentioned in this application is an application program (application, APP). This application does not limit parameters such as type, function, user interface, and display position of the target application. The target privacy protocol suite mentioned in this application is the privacy protocol suite of the target application. The target privacy protocol family provides the user's privacy rights and interests for the target application. The target privacy protocol family may include content such as privacy statements, user agreements, and privacy requirements.

Wherein, the client device 0 may be a terminal device, may also be a server, and may also include a terminal device and a server, which is not limited in this application. For example, the terminal device can be a mobile phone (such as a folding screen mobile phone, a large-screen mobile phone, a smart phone, etc.), a tablet computer, a notebook computer, a wearable device, a vehicle-mounted device, an augmented reality (augmented reality, AR)/virtual reality (virtual reality, VR) equipment, ultra-mobile personal computer (UMPC), netbook, personal digital assistant (PDA), smart TV, smart screen, high-definition TV, 4K TV, smart speaker, smart projector, etc. .

Wherein, the present application does not limit parameters such as type, quantity and the like of the application server 2 . For example, the application server 2 can be a cloud server.

Wherein, the present application does not limit parameters such as type, quantity, and the like of the hosting server 3 . In some embodiments, the hosting server 3 can be the application server 2, or a server different from the application server 2.

Based on the foregoing description, the implementation of respective functions of the client device 0, the application server 2, and the hosting server 3 in FIG. 2 will be introduced in detail.

For ease of description, the personal data 1 mentioned in this application is the personal data of the target application in the client device 0 , and the personal data 2 is the personal data of the target application in the application server 2 . In addition, personal data 1 and personal data 2 may have the same content and type, or different content and type, which is not limited in this application.

For ease of description, the privacy behavior 1 mentioned in this application may include all behaviors that all applications need to use personal data on the client device 0, such as sensitive behaviors, control operations, disclosure behaviors, and cross-border behaviors. The privacy behavior 2 mentioned in this application may include all behaviors that all applications need to use personal data in the application server 2, such as rights behavior, retention behavior, disclosure behavior, and cross-border behavior.

In this application, the application client 1 in the client device 0 is used to provide the installation package carrying the target application, run the installation package of the target application, identify personal data 1, trigger the application server 2 to identify personal data 2, and analyze privacy behavior 1 Whether to use personal data 1, push privacy behavior 1 uses the privacy status of personal data 1 and the ability to store target privacy protocol suites.

In addition, the client device 0 is also used to provide capabilities such as displaying the target privacy protocol family, modifying the target privacy protocol family, determining whether the installation package of the target application is a new version, and updating the target privacy protocol family corresponding to the old version.

The application server 2 is used to provide the ability to carry the installation package of the target application, run the installation package of the target application, identify personal data 2, analyze whether the privacy behavior 2 uses the personal data 2, and push the privacy status of the privacy behavior 2 using the personal data 2, etc. .

Hosting server 3 is used to provide the ability to receive the privacy situation of personal data 1 used in privacy behavior 1, receive the privacy situation of personal data 2 used in privacy behavior 2, analyze the aforementioned various privacy situations, and generate target privacy protocol suites.

In addition, the hosting server 3 is also used to provide capabilities such as storing the target privacy protocol suite, analyzing differences between new and old versions of the target application, and updating the target privacy protocol suite.

Based on the above description, with reference to FIG. 3 , specific implementations of the client device 0 , the application server 2 and the hosting server 3 in FIG. 2 are respectively introduced.

Please refer to FIG. 3 . FIG. 3 shows a software structural block diagram of a client device 0 , an application server 2 and a hosting server 3 provided in the present application.

As shown in FIG. 3 , the application client 1 in the client device 0 of the present application may include: an application body 11 and an application sandbox 12 . The application server 2 of the present application may include: a service plug-in set 20 . The hosting server 3 of the present application may include: hosting service 30 .

Wherein, the application body 11 communicates with the application sandbox 12 and the hosting service 30 respectively, the application sandbox 12 communicates with the service plug-in set 20 and the hosting service 30 respectively, and the service plug-in set 20 also communicates with the hosting service 30 .

The application body 11 can be regarded as a container, which is used to provide the ability to carry the installation package of the target application and store the target privacy protocol suite.

In addition, the application body 11 is also used to provide capabilities such as displaying target privacy protocol suites.

The application sandbox 12 is used to provide the installation package for running the target application, identify personal data 1, trigger the application server 2 to identify personal data 2, analyze whether the privacy behavior 1 uses the personal data 1, and push the privacy of the privacy behavior 1 using the personal data 1 situational abilities.

In addition, the application sandbox 12 is also used to provide capabilities such as revising the target privacy protocol suite, determining whether the installation package of the target application is a new version, and updating the target privacy protocol suite corresponding to the old version.

The service plug-in set 20 is used to provide the ability to run the installation package of the target application, identify the personal data 2 , analyze whether the privacy behavior 2 uses the personal data 2 , and push the privacy status of the privacy behavior 2 using the personal data 2 .

Escrow service 30, used to provide the privacy situation of receiving privacy behavior 1 using personal data 1, receiving the privacy situation of privacy behavior 2 using personal data 2, analyzing the aforementioned various privacy situations, generating the target privacy protocol family, and storing the target privacy protocol ethnic ability.

In addition, the hosting service 30 is also used to provide capabilities such as analyzing differences between old and new versions of the target application and updating the target privacy protocol suite.

Based on the description of each software module above, with reference to FIG. 4 , specific implementations of the application body 11 , application sandbox 12 , service plug-in set 20 and hosting service 30 in FIG. 3 are respectively introduced.

Please refer to FIG. 4 . FIG. 4 respectively shows a software structure diagram of an application body 11 , an application sandbox 12 , a service plug-in set 20 and a hosting service 30 provided in the present application.

As shown in FIG. 4 , the application body 11 may include: a privacy protocol SDK (software development kit, software development kit) 105 . The application sandbox 12 may include: a data identification module 101 , a behavior detection module 102 , an SDK detection module 103 and a data cross-border module 104 . The service plug-in set 20 may include: a data identification stub 201 , a data processing stub 202 and an SDK detection stub 203 . The hosting service 30 may include: a privacy statement/protocol generation service 301 , a semantic analysis service 302 , a version difference service 303 and an associated application service 304 .

The privacy protocol SDK105 is used to provide the ability to store the target privacy protocol family and display the target privacy protocol family. It can realize the integration of the target privacy protocol family in the installation package of the target application, and can also realize the display of the target privacy protocol family.

The data identification module 101 is used to provide the capability of identifying personal data 1 and synchronizing personal data 1 , which can realize the identification of the personal data 1 of the target application in the client device 0 , and can also realize the synchronization of the personal data 1 to the application server 2 .

The behavior detection module 102 is used to provide the ability to monitor the sensitive behavior of the target application in the client device 0, analyze whether the sensitive behavior uses personal data 1, and push the privacy status of the personal data 1 used by the sensitive behavior, so as to realize the monitoring of sensitive behaviors. Real-time monitoring can also realize the push of privacy information that uses personal data1 for sensitive behaviors.

The behavior detection module 102 is also used to monitor the control operation of the target application in the client device 0, such as the underlying details of the control, binding events, operation types, etc., and analyze whether the control operation uses personal data 1 and whether the push control operation uses The privacy status of personal data 1 and other capabilities can realize real-time monitoring of control operations, and can also realize the push of privacy status of personal data 1 used in control operations.

The SDK detection module 103 is used to monitor the disclosure behavior of the target application in the client device 0 by detecting whether the client device 0 is integrated with an SDK that communicates with other applications, other web pages, or other servers, etc., The ability to analyze whether the disclosure behavior uses personal data 1 and push the privacy situation of personal data 1 used in the disclosure behavior can realize the determination of whether the target application performs the disclosure behavior on the client device 0, and can also realize the use of personal data in the disclosure behavior. The push of the privacy status of data 1.

The data cross-border module 104 is used to monitor the cross-border behavior of the target application in the client device 0, such as data or traffic, analyze whether the cross-border behavior uses personal data 1, and push the privacy situation of cross-border behavior using personal data 1 and other capabilities, can realize the determination of whether the target application performs cross-border behavior on the client device 0, and can also realize the push of the privacy status of the cross-border behavior using personal data 1.

The data identification stub 201 is used to cooperate with the data identification module 101 to provide the ability to identify the personal data 2 and synchronize the personal data 2, so as to realize the identification of the personal data of the target application in the application server 2.

The data processing stub 202 is used to cooperate with the data identification stub 201 to provide the ability to monitor the retention behavior of the target application in the application server 2, analyze whether the retention behavior uses personal data 2, and push the privacy status of the retention behavior using personal data 2, etc. , which can realize the real-time monitoring of the retention behavior, and also realize the push of the privacy status of the personal data 2 used in the retention behavior.

The data processing stub 202 is also used to cooperate with the data identification stub 201 to monitor the cross-border behavior of the target application in the application server 2 such as data or traffic, analyze whether the cross-border behavior uses personal data 2, and push the use of cross-border behavior. The ability to monitor the privacy of personal data 2 can realize real-time monitoring of cross-border behaviors and push the privacy status of personal data 2 used in cross-border behaviors.

The SDK detection stub 203 is used to cooperate with the SDK detection module 103 to detect whether the SDK is integrated in the application server 2, determine which SDKs are integrated in the application server 2, and monitor the disclosure of the target application in the application server 2 Behavior, the ability to analyze whether the disclosure behavior uses personal data 2 and push the privacy status of personal data 2 used in the disclosure behavior can realize the determination of whether the target application performs the disclosure behavior in the application server 2, and can also realize the use of the disclosure behavior The push of the privacy situation of personal data 2.

Hosting service 30, used to analyze privacy statement/protocol generation service 301, semantic analysis service 302, version difference service 303, and associated application service 304, etc., to analyze privacy behavior 1 using personal data 1 and privacy behavior 2 using personal data 2 generate the target privacy protocol suite, and provide the application subject 11 with capabilities such as the target privacy protocol suite.

In addition, the hosting service 30 is also used to provide capabilities such as storing the target privacy protocol suite, analyzing differences between new and old versions of the target application, and updating the target privacy protocol suite.

Based on the mutual cooperation of the above software modules, the automatic generation of the target privacy protocol family can be realized, which solves the pain point of high cost and poor accuracy due to tedious version iteration and a large amount of manpower input.

Next, with reference to FIG. 5 , the detailed process of generating the target privacy protocol suite by each software module in FIG. 4 is introduced.

Please refer to FIG. 5 . FIG. 5 respectively shows a signaling interaction diagram of a method for generating an applied privacy protocol suite provided by the present application. For ease of description, in FIG. 5 , the target application is illustrated by taking Application 1 as an example.

As shown in FIG. 5, the method for generating a privacy protocol suite applied in the present application may include the following steps:

S0. The research and development personnel provide the installation package of the application 1 to the application subject 11. Therefore, the application body 11 can determine whether the installation package of the application 1 is a new version.

When it is determined that the installation package of application 1 is not a new version, the application body 11 can determine that the version of application 1 is not updated, and the application body 11 can determine that application 1 needs to generate a new privacy protocol suite of application 1, and then execute S1. When it is determined that the installation package of Application 1 is a new version, the application body 11 can determine that Application 1 is updating the version, and the application body 11 can determine that Application 1 needs to generate the privacy protocol suite of Application 1 for the new version, and then execute S30.

S1. When the application body 11 determines that the installation package of the application 1 is not a new version, the application body 11 can send an instruction 1 to the data identification module 101 and send an instruction 2 to the behavior detection module 102 . After the instruction 1 and instruction 2 are transmitted, the application body 11 can run the installation package of the application 1, so as to complete the service implementation of the application 1.

Among them, instruction 1 is used to instruct the data identification module 101 to identify personal data 1, and instruction 2 is used to instruct the behavior detection module 102 to monitor sensitive behaviors and control operations. Instruction 1 or instruction 2 can be expressed in letters, binary, characters, etc. In addition, the present application does not limit the order in which the application body 11 transmits the instruction 1 and the instruction 2 in terms of time sequence, which may be executed simultaneously or sequentially.

S2. After the application body 11 runs the installation package of the application 1, the data identification module 101 can identify the personal data 1 of the application 1 in the client device 0 in response to the instruction 1.

S3. After the application body 11 runs the installation package of the application 1, the behavior detection module 102 can monitor the sensitive behavior and control operation of the application 1 in response to the instruction 2.

After the data identification module 101 identifies the personal data 1, the data identification module 101 can execute S4, S6, S11 and S17 respectively to realize data synchronization between the application client 1 and the application server 2 in the client device 0. Wherein, the present application does not limit the sequential order of S4, S6, S11 and S17 in terms of time sequence, and may be executed simultaneously or sequentially.

S4. The data identification module 101 can send the content and identification of the personal data 1 to the behavior detection module 102 .

S5. After receiving the personal data 1, the behavior detection module 102 can determine whether the personal data 1 is used in sensitive behaviors and control operations based on the content and identification of the personal data 1.

After determining that the personal data 1 is used in the sensitive behavior, the behavior detection module 102 may send the identifier of the sensitive behavior and the content and identifier of the personal data 1 used in the sensitive behavior to the hosting service 30 .

And/or, after determining that the control operation uses the personal data 1 , the behavior detection module 102 may send the identification of the control operation and the content and identification of the personal data 1 used in the control operation to the hosting service 30 .

Based on the description of S4-S5, after the application client 1 in the client device 0 runs the installation package of the application 1, by analyzing the business implementation of the application 1, it can capture the privacy of the sensitive behavior and control operation using the personal data 1 .

S6. The data identification module 101 can send the content and identification of the personal data 1 to the data identification post 201 to realize data synchronization between the data identification module 101 and the data identification post 201 .

S7. The data identification stub 201 can identify the personal data 2 of the application 1 in the application server 2 based on the content and identification of the personal data 1 .

After the data identification post 201 identifies the personal data 2, the data identification post 201 can execute S8 and S13 respectively. Wherein, the present application does not limit the sequence of S8 and S13 in terms of time sequence, which may be executed simultaneously or sequentially.

S8. The data identification post 201 can send the content and identification of the personal data 2 to the data processing post 202 .

S9. After receiving the personal data 2, the data processing stub 202 can determine the data storage status of the personal data 2 in the application server 2 based on the content and identification of the personal data 2.

S10, the data processing post 202 can determine whether the personal data 2 is used in the right behavior and the retention behavior based on the data retention situation.

After determining that the personal data 2 is used in the right action, the data processing stub 202 may send the identification of the right action and the content and identification of the personal data 2 used in the right action to the escrow service 30 .

And/or, after determining that the personal data 2 is used in the retention behavior, the data processing stub 202 may send the identification of the retention behavior and the content and identification of the personal data 2 used in the retention behavior to the escrow service 30 .

Based on the description of S6-S10, after the application client 1 and the application server 2 in the client device 0 run the installation package of the application 1, by analyzing the business implementation of the application 1, it is possible to capture the use of personal data in the right behavior and retention behavior 2 Privacy situation.

S11 , the data identification module 101 can send the content and identification of the personal data 1 to the SDK detection module 103 .

S12. After receiving the personal data 1, the SDK detection module 103 can determine the data disclosure situation 1 of the personal data 1 in the client device 0 based on the content and identification of the personal data 1.

S13. The data identification post 201 can send the content and identification of the personal data 2 to the SDK detection post 203 .

S14. After receiving the personal data 2, the SDK detection stub 203 can determine the data disclosure situation 2 of the personal data 2 in the application server 2 based on the content and identification of the personal data 2.

S15 , the SDK detection stub 203 sends the data disclosure situation 2 to the SDK detection module 103 , realizing data synchronization between the SDK detection module 103 and the SDK detection stub 203 .

S16. The SDK detection module 103 can determine whether personal data 1 and/or personal data 2 are used in the disclosure behavior based on data disclosure situation 1 and data disclosure situation 2.

After determining that the disclosure behavior uses personal data 1 and/or personal data 2, the SDK detection module 103 can send the identification of the disclosure behavior and the content and identification of personal data 1 and/or personal data 2 used in the disclosure behavior to the hosting service 30 .

It should be noted that, in addition to the implementation of S15-S16, the SDK detection module 103 and the SDK detection stub 203 can respectively perform the following steps:

The SDK detection module 103 can determine whether the disclosure behavior uses personal data 1 based on the data disclosure situation 1 . After determining that the personal data 1 is used in the disclosure, the SDK detection module 103 may send the identification of the disclosure and the content and identification of the personal data 1 used in the disclosure to the hosting service 30 .

Moreover, the SDK detection stub 203 can determine whether the disclosure behavior uses the personal data 2 based on the data disclosure situation 2 . After determining that the personal data 2 is used in the disclosure, the SDK detection stub 203 may send the identification of the disclosure and the content and identification of the personal data 2 used in the disclosure to the hosting service 30 .

Based on the description of S11-S16, after the application client 1 and the application server 2 in the client device 0 run the installation package of the application 1, by analyzing the business implementation of the application 1, it can be captured that the disclosure behavior uses the personal data 1 and/or or the privacy situation of personal data2.

S17. The data identification module 101 can send the content and identification of the personal data 1 to the data cross-border module 104.

S18. After receiving the personal data 1, the data cross-border module 104 can determine the data cross-border situation 1 of the personal data 1 in the client device 0 based on the content and identification of the personal data 1.

S19. After receiving the personal data 2, the data processing post 202 can determine the data cross-border situation 2 of the personal data 2 in the application server 2 based on the content and identification of the personal data 2.

Wherein, the present application does not limit the sequence of S9 and S19 in terms of time sequence, which may be executed simultaneously or sequentially.

S20, the data processing stub 202 can send the data cross-border situation 2 to the data cross-border module 104 .

S21. The data cross-border module 104 can determine whether the cross-border behavior uses personal data 1 and/or personal data 2 based on data cross-border situation 1 and data cross-border situation 2.

After determining that the cross-border behavior uses personal data 1 and/or personal data 2, the cross-border data module 104 can send the identification of the cross-border behavior and the ID of the personal data 1 and/or personal data 2 used in the cross-border behavior to the hosting service 30. Content and Identity.

It should be noted that, in addition to the implementation of S20-S21, the data cross-border module 104 and the data processing pile 202 can respectively perform the following steps:

The data cross-border module 104 can determine whether personal data 1 is used in the cross-border behavior based on the data cross-border situation 1. After determining that the personal data 1 is used in the cross-border behavior, the cross-border data module 104 may send the identifier of the cross-border behavior and the content and identifier of the personal data 1 used in the cross-border behavior to the escrow service 30 .

Moreover, the data processing post 202 can determine whether personal data 2 is used in the cross-border behavior based on the data cross-border situation 2 . After determining that the personal data 2 is used in the cross-border behavior, the cross-border data module 104 may send the identifier of the cross-border behavior and the content and identifier of the personal data 2 used in the cross-border behavior to the escrow service 30 .

Based on the description of S17-S21, after the application client 1 and the application server 2 in the client device 0 run the installation package of the application 1, by analyzing the business implementation of the application 1, it can be captured that the cross-border behavior uses personal data 1 and / or the privacy situation of personal data 2.

It should be noted that sensitive behaviors and control operations, rights behaviors and retention behaviors, disclosure behaviors, and cross-border behaviors use various privacy conditions corresponding to personal data, which can be executed simultaneously or sequentially. Do limited.

S22. The hosting service 30 can respectively obtain corresponding privacy agreement information based on receiving the aforementioned various privacy situations. Therefore, the hosting service 30 can generate the privacy protocol suite of the application 1 based on the foregoing privacy protocol information. In addition, the hosting service 30 can also store the privacy protocol suite of the application 1 .

S23. The hosting service 30 may send the privacy protocol suite of the application 1 to the application subject 11.

S24. After the application subject 11 receives the privacy protocol suite of application 1, it can store the privacy protocol suite of application 1 in the privacy protocol SDK 105, so that the application 1 can call the privacy protocol SDK 105 to implement the privacy protocol suite of application 1 after startup. show.

Based on the description of S22-S24, the hosting server 3 can automatically generate the privacy protocol suite of the application 1 through the cooperation of the application client 1 and the application server 2 in the client device 0.

S25. The application subject 11 can use the privacy protocol SDK 105 to display the privacy protocol family of the application 1, so that the research and development personnel can clearly understand the privacy protocol family of the application 1.

S26. Based on the actual situation of the application 1, the research and development personnel can modify the privacy protocol suite of the application 1, and provide the amendment content of the privacy protocol suite of the application 1 to the application subject 11.

S27. Based on the revised content, the application subject 11 may update the privacy protocol suite of the application 1 in the privacy protocol SDK 105 to obtain the revised privacy protocol suite of the application 1.

S28 , the application body 11 may send the revised privacy protocol suite of the application 1 to the escrow service 30 .

S29. The hosting service 30 may update the stored privacy protocol suite of the application 1 based on the revised privacy protocol suite of the application 1 . In addition, the hosting service 30 may also store the modified privacy protocol suite of the application 1 .

It should be noted that S25-S29 are optional steps.

Based on the descriptions in S25-S29, the application client 1 in the client device 0 can provide developers with a channel to manually correct the privacy protocol suite of the application 1 by displaying the privacy protocol suite of the application 1, and carry out the modification of the privacy protocol suite of the application 1. A timely and accurate correction is made, and the accuracy of generating the privacy protocol suite of application 1 is improved.

S30. The application body 11 may send the installation package of the application 1 to the hosting service 30 when the installation package of the application 1 is a new version.

S31. Based on the installation package of the application 1, the hosting service 30 may perform a privacy analysis on the difference between the old and new versions of the installation package, and obtain the difference between the old and new versions of the application 1. Wherein, the difference part refers to the different software codes in the installation package and the software codes for completing the necessary services of the application 1 (such as the software codes corresponding to the user interface displayed by the application 1 after it is started).

S32. The hosting service 30 adopts a static and/or dynamic analysis method to generate a privacy protocol suite of the application 1 corresponding to the new version based on the difference part and the privacy protocol suite of the application 1 corresponding to the old version. In addition, the hosting service 30 may also store the privacy protocol suite of the application 1 corresponding to the new version.

Among them, the static analysis method refers to that the hosting service 30 analyzes the privacy behavior of the personal data used in the application client 1 and the application server 2 through the software code of the difference part, and can determine the privacy of the application 1 corresponding to the old version. Whether there is deletion and/or addition of privacy protocol information in the protocol family.

Among them, the dynamic analysis means that the hosting service 30 uses the application body 11 and the application sandbox 12 to run the software code of the difference part, and can determine whether there is deletion and/or addition in the privacy protocol suite of the application 1 corresponding to the old version. Privacy Agreement Information.

After the hosting service 30 generates the privacy protocol suite of the application 1 corresponding to the new version, the hosting service 30 can execute S23 to transmit the privacy protocol suite of the application 1 corresponding to the new version to the application subject 11. For the specific implementation process, please refer to the description of S23 , which will not be described here.

Based on the descriptions of S30-S32, the hosting service 30 can quickly and accurately generate the privacy protocol of the new version of the application 1 by comparing and analyzing the differences between the new and old versions of the application 1 and combining the privacy protocol suite of the application 1 corresponding to the old version family, which solves the problem that the privacy protocol family of application 1 needs to be updated due to version iteration of application 1.

It should be noted that when the application body 11 determines that the installation package of application 1 is a new version, in addition to executing S30-S32 and S23-S24 to generate the privacy protocol suite of application 1, this application can also execute S1-S24 to generate application 1 privacy protocol family, without the need for the application body 11 to determine whether the installation package of the application 1 is a new version. Therefore, the step of determining whether the installation package of the application 1 corresponds to a new version by the application body 11 is optional.

In a specific embodiment, with reference to FIG. 6 and FIG. 7 , a specific implementation manner of generating the privacy protocol suite of application 1 by using each software module in FIG. 2-FIG. 5 is introduced in detail. For the convenience of description, in Fig. 6 and Fig. 7, application 1 is illustrated by taking XX map APP as an example.

On the basis of the software structure diagrams shown in Fig. 2-Fig. 4, please refer to Fig. 6 and Fig. 7. Fig. 6 and Fig. 7 respectively show a block flow diagram of a method for generating an application privacy protocol suite provided by the present application.

As shown in FIG. 6 , the method for generating a privacy protocol suite for the application of the present application may include: Step 0 - Step 25 .

Step 0. The R&D personnel send the installation package of XX Map APP to the application subject 11. The application subject 11 determines that the installation package of XX Map APP is not a new version, and the application subject 11 runs the installation package of XX Map APP.

Step 1, the data identification module 101 can identify that the personal data 1 includes: international mobile equipment identity (international mobile equipment Identity, IMEI) and location information.

Step 2. The behavior detection module 102 can detect that the privacy behavior 1 includes: the sensitive behavior of uploading IMEI and location information on the network.

Step 3, behavior detection module 102 is based on personal data 1 and privacy behavior 1 in step 1 and step 2, can obtain the sensitive behavior of network uploading IMEI and location information using the privacy situation of IMEI and location information. Therefore, the behavior detection module 102 can push the aforementioned relevant information to the escrow service 30, so that the escrow service 30 generates the privacy agreement information of “collect and upload IMEI and location information”.

Step 4, the data identification module 101 can transmit the personal data 1 to the data identification post 201 including: IMEI and location information.

Step 5. The data identification post 201 can identify that the personal data 2 includes: IMEI.

Step 6. The data identification stub 201 can transmit personal data to the data processing stub 202. 2 includes: IMEI.

Step 7, data processing pile 202 can be deleted after detecting IMEI t months. Therefore, the data processing stub 202 may determine that the data retention includes: the retention period of the IMEI is t months.

Step 8. Based on the data retention status in step 7, the data processing stub 202 can obtain the privacy status of using the IMEI in the retention behavior. Therefore, the data processing stub 202 can push the aforementioned relevant information to the escrow service 30, so that the escrow service 30 generates the privacy agreement information of “IMEI storage for t months”.

Step 9, the data identification module 101 can transmit the personal data 1 to the SDK detection module 103 including: IMEI and location information.

Step 10, the SDK detection module 103 can recognize that the SDK marked as aaa is integrated in the XX map APP, and simultaneously disclose the IMEI to the YY mall APP through the SDK marked as aaa. Therefore, the SDK detection module 103 can obtain the data disclosure situation 1 .

Step 11, the data identification stub 201 can transmit personal data to the SDK detection stub 203 2 including: IMEI.

Step 12. The SDK detection post 203 can identify that the SDK of the YY mall APP is integrated in the XX map APP, and simultaneously disclose the IMEI to the YY mall APP through the SDK of the YY mall APP. Therefore, the SDK detection stub 203 can determine the data disclosure situation 2, and then send the data disclosure situation 2 to the SDK detection module 103 .

In step 13, the SDK detection module 103 can determine the privacy situation of personal data 1 and personal data 2 used in the disclosure behavior based on data disclosure situation 1 and data disclosure situation 2 in steps 10 and 12. Therefore, the SDK detection module 103 can push the aforementioned privacy information to the escrow service 30, so that the escrow service 30 generates the privacy agreement information of "disclose the IMEI to the YY mall APP".

Step 14, the data identification module 101 can transmit the personal data 1 to the cross-border data module 104, including: IMEI and location information.

Step 15, the data cross-border module 104 can identify that data cross-border situation 1 includes: transmitting location information to country m.

Step 16. The data processing stub 202 can detect that the IMEI has not cross-border data, and obtain data cross-border situation 2.

Step 17, the data processing stub 202 can transmit data cross-border situation 2 to the data cross-border module 104 .

Step 18, the data cross-border module 104 can determine the privacy situation of personal data 1 used in cross-border behavior based on the data cross-border situation 1 and data cross-border situation 2 in steps 15 and 17. Therefore, the data cross-border module 104 can push the aforementioned privacy information to the escrow service 30, so that the escrow service 30 generates the privacy agreement information of "transfer location information to country m".

Step 19, based on the privacy protocol information in step 3, step 8, step 13 and step 18, the hosting service 30 can generate the privacy protocol family of XX Map APP, which can specifically include: 1. Collect and upload IMEI and location information; 2. IMEI Store for t months; 3. Disclose the IMEI to the YY mall APP; 4. Transmit the location information to country m.

Therefore, the hosting service 30 can use the privacy protocol suite of the XX map APP sent by the main body 11 .

Step 20, the application body 11 can store the privacy protocol suite of XX map APP in the privacy protocol SDK 105, so that the privacy protocol suite of XX map APP can be displayed after the XX map APP is started.

Step 21, the application body 11 can display the privacy protocol family of XX map APP through the privacy protocol SDK105.

Step 22. The R&D personnel manually update and correct the privacy protocol family of the XX Map APP according to the actual situation of the XX Map APP. Therefore, the application body 11 can transmit the revised privacy protocol suite of XX Map APP to the hosting service 30 .

On the basis of the embodiment shown in FIG. 6 , as shown in FIG. 7 , the method for generating a privacy protocol suite applied in this application may include the following steps:

Step 23, the research and development personnel provide the installation package of XX Map APP to the application subject 11, and the installation package of XX Map APP is a new version.

Step 24, the application body 11 sends the installation package of XX map APP to the hosting service 30 .

Step 25. Based on the installation package of the XX map APP, the hosting service 30 can conduct privacy analysis on the difference between the old and new versions of the installation package, and obtain the difference between the old and new versions of the XX map APP.

Therefore, the hosting service 30 can generate the privacy protocol suite of the application 1 corresponding to the new version based on the difference part and the privacy protocol suite of the application 1 corresponding to the old version, specifically including: 1. collecting and uploading IMEI, location information and bank card number; 2. , IMEI is stored for t months, and bank card number is stored for r months; 3. Disclose the IMEI to the YY mall APP; 4. Transmit location information to country m.

In addition, as shown in Figure 7, based on the privacy protocol family of application 1 corresponding to the new version, it can be seen that:

The data identification module 101 can identify that the personal data 1 includes: IMEI, location information and bank card number.

The behavior detection module 102 can detect that the privacy behavior 1 includes: the sensitive behavior of uploading IMEI, location information and bank card number through the network.

The data identification pile 201 can identify that the personal data 2 includes: IMEI and bank card number.

The data processing pile 202 can detect that the IMEI is deleted after t months, and the bank card number is deleted after r months.

It should be noted that, the specific implementation process of each software module may refer to the description in FIG. 6 , which will not be repeated here.

Based on the foregoing embodiments, the method for generating a privacy protocol suite for an application provided by this application is introduced below.

Exemplarily, the present application provides a method for generating an application privacy protocol suite.

Please refer to FIG. 8 . FIG. 8 is a signaling interaction diagram of a method for generating an application privacy protocol suite provided by an embodiment of the present application. As shown in FIG. 8 , the method for generating a privacy protocol suite in the application of the present application may include: S101-S108.

S101. After running the target application, the client device acquires first personal data of the target application in the client device.

Wherein, for the specific implementation of the target application, please refer to the description of the above-mentioned application 1, and for the client device, please refer to the description of the above-mentioned client device 0 and the application client 1 in the client device 0, the first person For the data, please refer to the description of the personal data 1 mentioned above. For the specific implementation of S101, please refer to the installation package of the application body 11 running the application 1 in S0 and the identification of the personal data 1 by the data identification module 101 in S2 shown in FIG. 5 description, and will not be repeated here.

S102. After determining that the first privacy behavior uses the first personal data, the client device sends first information to the second server, where the first information is used to describe the privacy situation that the first privacy behavior uses the first personal data, The first privacy behavior includes all behaviors in which all applications need to use personal data in the client device.

Among them, the specific implementation of the first privacy behavior can refer to the description of the aforementioned privacy behavior 1, and the second server can refer to the description of the aforementioned hosting server 3. The first privacy behavior uses the privacy of the first personal data. For the situation, please refer to the above-mentioned sensitive behavior, control operation, disclosure behavior and the description of the privacy situation of whether personal data is used in cross-border behavior. For the first information, please refer to the aforementioned sensitive behavior identification and sensitive behavior. The content and identification of data1, the identification of control operations and the content and identification of personal data1 used in control operations, the identification of disclosure behaviors and the content and identification of personal data1 used in disclosure activities, and the identification of cross-border behaviors and cross-border For the description of the content and identification of personal data 1 used in the behavior, the specific implementation of S102 can be found in the sensitive behaviors, control operations, disclosure behaviors and cross-border behaviors involved in S5, S16, and S21 shown in Figure 5. Use of personal data 1 description, which will not be repeated here.

S103. The client device sends the first personal data to the first server.

For the first server, refer to the description of the application server 2 mentioned above. For the specific implementation of S103, refer to the data identification module 101 in S6 shown in FIG. description, and will not be repeated here.

S104. Based on the first personal data, the first server determines the second personal data of the target application in the first server.

For the second personal data, please refer to the description of personal data 2 mentioned above. For the specific implementation of S104, please refer to the description of determining personal data 2 by the data identification post 201 in S7 shown in FIG. 5 , which will not be repeated here.

S105. After determining that the second privacy behavior uses the second personal data, the first server sends second information to the second server. The second information is used to describe the privacy situation that the second privacy behavior uses the second personal data. The second The privacy behavior includes all behaviors that all applications need to use personal data in the first server.

Among them, the specific implementation of the second privacy behavior can refer to the description of the privacy behavior 2 mentioned above, and the privacy situation of the second privacy behavior using the second personal data can refer to the rights behavior, retention behavior, disclosure behavior and Whether the cross-border behavior uses personal data 2 corresponds to a description of various privacy situations. For the second information, please refer to the identification of the right behavior mentioned above, the content and identification of the personal data 2 used in the right behavior, the identification of the retention behavior, and the retention The content and identification of the personal data2 used in the conduct, the identification of the disclosure and the content and identification of the personal data2 used in the disclosure, as well as the identification of the cross-border conduct and the description of the content and identification of the personal data2 used in the cross-border conduct, For the specific implementation of S105, please refer to the description of the use of personal data 2 in S10, S16, and S21 shown in FIG. 5, which involves rights behaviors, retention behaviors, disclosure behaviors, and cross-border behaviors, and will not be repeated here.

S106. The second server generates a target privacy protocol suite based on the first information and the second information.

Wherein, the target privacy protocol suite can refer to the description of the privacy protocol suite of application 1 mentioned above, and the specific implementation of S106 can refer to the description of the privacy protocol suite of application 1 generated by the custody service 30 in S22 shown in FIG. 5 . I won't go into details here.

S107. The second server sends the target protocol suite to the client device.

Wherein, for the specific implementation manner of S107, reference may be made to the description of S23 shown in FIG. 5 , which will not be repeated here.

S108. The client device stores the target privacy protocol suite in the installation package of the target application, so that the target application can display the target privacy protocol suite to the user after being started.

Wherein, the specific implementation manner of S108 may refer to the description of S24 shown in FIG. 5 , which will not be repeated here.

Compared with the related technology shown in Figure 1, the privacy protocol family generation method applied in this application can automatically generate the target privacy protocol family, without the need for professionals to write the target privacy protocol family, without the development stage of associated applications, without the need to bind applications The version is released online, and the time to generate the target privacy protocol family is short, the investment cost is low, and the accuracy is high.

The application privacy protocol family generation method provided by this application, through the mutual cooperation between the client device, the first server and the second server, the client device and the first server adopt data flow analysis, data retention monitoring, SDK detection, etc. and data cross-border detection, etc., can capture the privacy situation of all privacy behaviors using personal data during the operation of the target application, and the client device and the first server transmit the information corresponding to the aforementioned privacy situation to the second server, so that The second server can accurately and quickly generate the target privacy protocol suite based on the user's privacy rights in the target application represented by the aforementioned information. Thus, the automatic generation of the target privacy protocol family is realized, avoiding the cumbersome process of the development phase of the associated application and the development and launch phase of the bound application, shortening the time cost of generating the target privacy protocol family, and reducing the cost of generating the target privacy protocol family. The input cost improves the accuracy of generating the target privacy protocol family.

Based on the description of the above embodiments, the second server has the ability to analyze the privacy difference between the old and new versions of the application when it is iterating. Therefore, this application can also use the method of version difference comparison to analyze the privacy behavior of the target application in the full process of business implementation, and can quickly and accurately generate the target privacy protocol family corresponding to the new version, which solves the problem of frequent The version iteration of the target application leads to slow release of the version of the target application and poor accuracy of the target privacy protocol suite.

Please refer to FIG. 9 . FIG. 9 is a signaling interaction diagram of a method for generating an application privacy protocol suite provided by an embodiment of the present application. As shown in FIG. 9 , the method for generating a privacy protocol suite in the application of the present application may include: S201-S208.

S201. The client device receives the installation package of the target application.

Wherein, the specific implementation of S201 may refer to the description of the R&D personnel in S0 providing the installation package of the application 1 to the application subject 11 shown in FIG. 5 , which will not be repeated here.

S202. The client device determines whether the installation package of the target application is a new version.

When it is determined that the installation package of the target application is not a new version, the client device may perform S203; when it is determined that the installation package of the target application is a new version, the client device may perform S204.

Wherein, the specific implementation of S202 can refer to the description of the application body 11 in S0 shown in FIG. 5 judging whether the installation package of the application 1 is a new version, and will not be repeated here.

S203. The client device runs the installation package of the target application. After S203 is executed, the present application may continue to execute S101-S108 in FIG. 8 (S101-S108 are not shown in FIG. 9).

Wherein, the specific implementation of S203 may refer to the description of the installation package of the application 1 run by the application body 11 in S0 shown in FIG. 5 , which will not be repeated here.

S204. The client device sends the installation package of the target application to the second server.

Wherein, the specific implementation manner of S204 may refer to the description of S30 shown in FIG. 5 , which will not be repeated here.

S205. The second server determines a difference between the old and new versions based on the installation package of the target application.

Wherein, the specific implementation manner of S205 may refer to the description of S31 shown in FIG. 5 , which will not be repeated here.

S206. Based on the difference part, the second server updates the target privacy protocol suite corresponding to the old version to obtain a new version of the target privacy protocol suite.

Wherein, the specific implementation manner of S206 may refer to the description of S32 shown in FIG. 5 , which will not be repeated here.

S207. The second server sends the target privacy protocol suite corresponding to the new version to the client device.

Wherein, for the specific implementation manner of S207, reference may be made to the description of S23 shown in FIG. 5 , which will not be repeated here.

S208. The client device updates the target privacy protocol family corresponding to the old version in the installation package of the target application to the target privacy protocol family corresponding to the new version, so that the client device displays the target privacy protocol family corresponding to the new version after the target application is started. family.

Wherein, for the specific implementation manner of S208, reference may be made to the description of S24 shown in FIG. 5 , which will not be repeated here.

Based on the description of the above embodiments, the generated target privacy protocol family does not need to be written by professionals, and this application can also provide developers with channels for secondary confirmation and manual correction of the target privacy protocol family, which is conducive to improving the accuracy of the target privacy protocol family , which also enables the generation of the target privacy protocol family to take into account both automatic writing and manual correction.

Please refer to FIG. 10 . FIG. 10 is a signaling interaction diagram of a method for generating an application privacy protocol suite provided by an embodiment of the present application. As shown in FIG. 10 , the method for generating a privacy protocol suite in the application of the present application may include: S301-S305.

S301. The client device displays all content of the target privacy protocol suite.

Wherein, the specific implementation manner of S301 may refer to the description of S25 shown in FIG. 5 , which will not be repeated here.

S302. The client device receives the modification content of the target privacy protocol suite.

For the specific implementation of the amendment content, please refer to the above-mentioned description of the amendment content of the privacy protocol family of application 1. For the specific implementation of S302, please refer to the description of S26 shown in FIG. 5 , which will not be repeated here.

S303. The client device updates the target privacy protocol family in the installation package of the target application based on the correction content, and obtains the revised target privacy protocol family, so that the target application can display the revised target privacy protocol family to the user after it is started. family.

For the specific implementation of the revised target privacy protocol family, please refer to the description of the privacy protocol family of the revised application 1 mentioned above. For the specific implementation of S303, please refer to the description of S27 shown in FIG. Do repeat.

S304. The client device sends the revised target privacy protocol suite to the second server.

Wherein, the specific implementation manner of S304 may refer to the description of S28 shown in FIG. 5 , which will not be repeated here.

S305. The second server updates the target privacy protocol suite to the revised target privacy protocol suite.

Wherein, the specific implementation manner of S305 may refer to the description of S29 shown in FIG. 5 , which will not be repeated here.

In S102, since there are many types of privacy behaviors of the target application in the client device. Therefore, the client device determines first information respectively corresponding to each privacy behavior based on each privacy behavior in the first privacy behavior.

In some embodiments, when the first privacy behavior includes: sensitive behavior and control operation, the client device may determine whether the first personal data is used in the sensitive behavior and control operation.

After the client device determines that the sensitive behavior uses the first personal data, it can determine that the first information includes the identification of the sensitive behavior and the content and identification of the first personal data used by the sensitive behavior, and sends the sensitive behavior to the second server. The identification of the behavior and the content and identification of the first personal data used by the sensitive behavior.

And/or, after the client device determines that the control operation uses the first personal data, it can determine that the first information includes the identification of the control operation and the content and identification of the first personal data used by the control operation, and send a report to the second The second server sends the identification of the control operation and the content and identification of the first personal data used by the control operation.

Wherein, for the specific implementation manner of the above process, refer to the description of S4-S5 shown in FIG. 5 , which will not be repeated here.

In some embodiments, when the first privacy behavior includes: a disclosure behavior, the client device may determine the data disclosure situation of the target application in the client device based on the content and identification of the first personal data. Based on the data disclosure situation of the target application in the client device, the client device can determine whether the disclosure behavior uses the first personal data.

Therefore, after the client device determines that the first personal data is used in the disclosure, it can determine that the first information includes the identification of the disclosure and the content and identification of the first personal data used in the disclosure, and send the information to the second server Send the identification of the disclosure and the content and identification of the first personal data used for the disclosure.

Wherein, the specific implementation of the above process can refer to the description of using personal data 1 in the disclosure behavior in S11-S16 shown in FIG. 5 , which will not be repeated here.

In some embodiments, when the first privacy behavior includes: cross-border behavior, the client device can determine the data cross-border situation of the target application in the client device based on the content and identification of the first personal data. The client device can determine whether the first personal data is used in the cross-border behavior based on the cross-border data of the target application in the client device.

Therefore, after the client device determines that the first personal data is used in the cross-border behavior, it can determine that the first information includes the identification of the cross-border behavior and the content and identification of the first personal data used in the cross-border behavior, and send The second server sends the identifier of the cross-border behavior and the content and identifier of the first personal data used in the cross-border behavior.

Wherein, the specific implementation of the above process can refer to the description of the use of personal data 1 in the cross-border behavior in S17-S21 shown in Figure 5, and will not be repeated here.

In S105, since there are many kinds of privacy behaviors of the target application in the first server. Therefore, based on each privacy behavior in the second privacy behavior, the client device determines the second information corresponding to each privacy behavior.

In some embodiments, when the second privacy behavior includes: rights behavior and retention behavior, the first server may determine the data retention status of the target application in the first server based on the content and identification of the second personal data. Based on the data retention status, the first server can determine whether the second personal data is used in the right action and retention action.

Therefore, after the first server determines that the right action uses the second personal data, it can determine that the second information includes the identification of the right action and the content and identification of the second personal data used by the right action, and sends the right action to the second server. Identification of the action and the content and identification of the second personal data used by the right action.

And/or, after the first server determines that the second personal data is used in the retention behavior, it can determine that the second information includes the identification of the retention behavior and the content and identification of the second personal data used in the retention behavior, and report to the second server Send the identification of the retention behavior and the content and identification of the second personal data used by the retention behavior.

Wherein, for the specific implementation manner of the above process, refer to the description of S6-S10 shown in FIG. 5 , which will not be repeated here.

In some embodiments, when the second privacy behavior includes: a disclosure behavior, the first server may determine the data disclosure situation of the target application in the first server based on the content and identification of the second personal data. Based on the data disclosure situation of the target application in the first server, the first server may determine whether the disclosure behavior uses the second personal data.

Therefore, after the first server determines that the second personal data is used in the disclosure, it can determine that the second information includes the identification of the disclosure and the content and identification of the second personal data used in the disclosure, and send the disclosure to the second server. Identification of the act and the content and identification of the second personal data used by the disclosure act.

Alternatively, the first server may send the identification of the disclosure behavior and the content and identification of the second personal data used in the disclosure behavior to the second server through the client device.

Wherein, for the specific implementation of the above process, please refer to the description of using personal data 2 in S11-S16 shown in FIG. 5 , which will not be repeated here.

In some embodiments, when the second privacy behavior includes: cross-border behavior, the first server can determine the data cross-border situation of the target application in the first server based on the content and identification of the second personal data. The first server can determine whether the second personal data is used in the cross-border behavior based on the data cross-border status of the target application in the first server.

Therefore, after the first server determines that the second personal data is used in the cross-border behavior, it can determine that the second information includes the identification of the cross-border behavior and the content and identification of the second personal data used in the cross-border behavior, and send a report to the second The server sends the identifier of the cross-border behavior and the content and identifier of the second personal data used in the cross-border behavior.

Alternatively, the first server may send the identifier of the cross-border behavior and the content and identifier of the second personal data used by the cross-border behavior to the second server through the client device.

Wherein, the specific implementation of the above process can refer to the description of the use of personal data 2 in the cross-border behavior in S17-S21 shown in Figure 5, and will not be repeated here.

Based on the description of the above embodiments, the target privacy protocol suite can be displayed to users in various ways.

In some embodiments, after receiving the first operation, the electronic device may start the target application and display a first user interface of the target application, where the first user interface includes all content of the target privacy protocol suite.

Wherein, the first operation may include but not limited to: operations such as clicking, double-clicking, or long-pressing. The present application does not limit parameters such as size, shape, color or position of the first user interface.

For example, after receiving the user's first operation such as clicking on the icon of the target application, the electronic device may display the first user interface on the main page of the target application in the form of a pop-up window. Therefore, the user can browse the privacy rights and interests of the user in the target application in a timely manner.

In some other embodiments, after receiving the second operation, the electronic device may display a second user interface of the target application, where the second user interface includes adjustable content of the target privacy protocol suite. Therefore, the user can adjust the user's privacy rights in the target application according to his own wishes.

Wherein, the second operation may include but not limited to: operations such as clicking, double-clicking, or long-pressing. The present application does not limit parameters such as size, shape, color or position of the second user interface.

For example, after receiving a second operation, such as clicking, performed by the user on a control on the main page of the target application, the electronic device switches from displaying the main page of the target application to the second user interface, and the electronic device may adopt the option/ In the manner of a switch button, the adjustable content of the target privacy protocol family is displayed in the second user interface.

It should be noted that the electronic device mentioned above may be the client device 0 mentioned above, or other terminal devices, which is not limited in this application.

Exemplarily, the present application provides a client device, including: a memory and a processor; the memory is used to store program instructions; and the processor is used to call the program instructions in the memory so that the client device executes the privacy protocol of the application in the foregoing embodiments family generation method.

Exemplarily, the present application provides a server, including: a memory and a processor; the memory is used to store program instructions; and the processor is used to call the program instructions in the memory to make the server execute the privacy protocol suite generation method of the application in the foregoing embodiments.

Exemplarily, the present application provides a chip system, which is applied to an electronic device including a memory, a display screen, and a sensor; the chip system includes: a processor; when the processor executes the computer instructions stored in the memory, the client device or The server executes the method for generating a privacy protocol suite applied in the foregoing embodiments.

Exemplarily, the present application provides a computer-readable storage medium on which a computer program is stored, and the computer program is executed by a processor to enable a client device or a server to implement the method for generating a privacy protocol suite applied in the foregoing embodiments.

Exemplarily, the present application provides a computer program product, including: execution instructions, the execution instructions are stored in a readable storage medium, at least one processor of the client device or server can read the execution instructions from the readable storage medium, at least A processor executes the execution instruction so that the client device or the server implements the method for generating a privacy protocol suite applied in the foregoing embodiments.

In the above embodiments, all or part of the functions may be implemented by software, hardware, or a combination of software and hardware. When implemented using software, it may be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on the computer, the processes or functions according to the present application will be generated in whole or in part. The computer can be a general purpose computer, a special purpose computer, a computer network, or other programmable devices. The computer instructions may be stored on a computer readable storage medium. The computer-readable storage medium may be any available medium that can be accessed by a computer, or a data storage device such as a server or a data center integrated with one or more available media. The available medium may be a magnetic medium (for example, a floppy disk, a hard disk, a magnetic tape), an optical medium (for example, a DVD (, or a semiconductor medium (for example, a solid state disk, SSD)) and the like.

Those of ordinary skill in the art can understand that all or part of the processes in the methods of the above embodiments are realized. The processes can be completed by computer programs to instruct related hardware. The programs can be stored in computer-readable storage media. When the programs are executed , may include the processes of the foregoing method embodiments. The aforementioned storage medium includes: ROM or random access memory RAM, magnetic disk or optical disk, and other various media that can store program codes.

Claims

A method for generating an applied privacy protocol suite, characterized in that it is applied to a client device; the method includes:

After the client device runs the target application, acquiring the first personal data of the target application in the client device;

After the client device determines that the first privacy behavior uses the first personal data, it sends first information to the second server, where the first information is used to describe that the first privacy behavior uses the first personal data. The privacy situation of a personal data, the first privacy behavior includes all behaviors that all applications need to use personal data in the client device;

The client device sends the first personal data to a first server, so that the first server determines second personal data of the target application in the first server based on the first personal data , and after determining that the second privacy behavior uses the second personal data, send second information to the second server, the second information is used to describe that the second privacy behavior uses the second personal data Data privacy situation, the second privacy behavior includes all behaviors that all applications need to use personal data in the first server;

The client device receives a target privacy protocol suite from the second server, the target privacy protocol suite is generated by the second server based on the first information and the second information;

The client device stores the target privacy protocol suite into the installation package of the target application, so that the target application can display the target privacy protocol suite to the user after being started.
The method according to claim 1, wherein the client device running the target application comprises:

The client device receives the installation package of the target application;

When the client device determines that the installation package of the target application is not a new version, it runs the installation package of the target application.
The method according to claim 2, further comprising:

When the client device determines that the installation package of the target application is a new version, sending the installation package of the target application to the second server;

The client device receives the target privacy protocol suite corresponding to the new version from the second server, and the target privacy protocol suite corresponding to the new version is determined by the second server based on the installation package of the target application. The differences between versions are obtained by updating the target privacy protocol suite corresponding to the old version based on the differences;

The client device updates the target privacy protocol suite corresponding to the old version in the installation package of the target application to the target privacy protocol suite corresponding to the new version, so that the client device After startup, the target privacy protocol family corresponding to the new version is displayed.
The method according to any one of claims 1-3, wherein the method further comprises:

The client device displays all content of the target privacy protocol suite;

The client device receives the revised content of the target privacy protocol suite;

The client device updates the target privacy protocol suite in the installation package of the target application based on the correction content, and obtains the revised target privacy protocol suite, so that the target application The modified target privacy protocol family can be displayed to the user;

The client device sends the revised target privacy protocol suite to the second server, so that the second server updates the target privacy protocol suite to the revised target privacy protocol suite.
The method according to any one of claims 1-4, wherein when the first privacy behavior includes: sensitive behavior and control operation, the client device uses the first privacy behavior when determining the first privacy behavior After one personal data, send the first information to the second server, including:

After determining that the sensitive behavior uses the first personal data, the client device determines that the first information includes the identification of the sensitive behavior and the first personal data used by the sensitive behavior the content and identification of the data, and send the identification of the sensitive behavior and the content and identification of the first personal data used by the sensitive behavior to the second server;

And/or, after determining that the control operation uses the first personal data, the client device determines that the first information includes the identifier of the control operation and the The content and identification of the first personal data, and sending the identification of the control operation and the content and identification of the first personal data used by the control operation to the second server.
The method according to any one of claims 1-5, wherein when the first privacy behavior includes: a disclosure behavior, when the client device determines that the first privacy behavior uses the first person After the data, send the first information to the second server, including:

The client device determines the data disclosure situation of the target application in the client device based on the content and identification of the first personal data;

After the client device determines that the first personal data is used in the disclosure behavior based on the data disclosure situation of the target application in the client device, determine that the disclosure behavior is included in the first information and the content and identification of the first personal data used in the disclosure;

The client device sends the identification of the disclosure act and the content and identification of the first personal data used in the disclosure action to the second server.
The method according to any one of claims 1-6, wherein when the first privacy behavior includes: cross-border behavior, the client device uses the first After personal data, send the first information to the second server, including:

The client device determines the data cross-border situation of the target application in the client device based on the content and identification of the first personal data;

After the client device determines that the cross-border behavior uses the first personal data based on the cross-border data of the target application in the client device, it determines that the first information includes the The identification of the cross-border behavior and the content and identification of the first personal data used by the cross-border behavior;

The client device sends the identifier of the cross-border behavior and the content and identifier of the first personal data used by the cross-border behavior to the second server.
The method according to any one of claims 1-7, wherein when the second privacy behavior includes: rights behavior and retention behavior, the second information includes: the identification of the rights behavior and the The content and identification of the second personal data used in the above-mentioned right behavior, and/or, the identification of the retention behavior and the content and identification of the second personal data used in the retention behavior;

Wherein, the identification of the right action and the content and identification of the second personal data used by the right action are determined by the first server based on the data retention status of the target application in the first server The second personal data is sent after the right act uses the second personal data. The identification of the retention behavior and the content and identification of the second personal data used in the retention behavior are based on the first server’s The data retention status of the target application in the first server is sent after determining that the retention behavior uses the second personal data, and the data retention status of the target application in the first server is the first determined by the server based on the content and identification of the second personal data.
The method according to any one of claims 1-8, wherein when the second privacy behavior includes: a disclosure behavior, the method further includes:

The client device receives from the first server the identifier of the disclosure act included in the second information and the content and identifier of the second personal data used by the disclosure act, and the disclosure behavior The identity and the content and identity of the second personal data used in the disclosure behavior are determined by the first server based on the data disclosure situation of the target application in the first server. The data disclosure of the target application in the first server is determined by the first server based on the content and identification of the second personal data;

The client device sends the identification of the disclosure act and the content and identification of the second personal data used in the disclosure action to the second server.
The method according to any one of claims 1-9, wherein when the second privacy behavior includes: cross-border behavior, the method further includes:

The client device receives from the first server the identifier of the cross-border behavior included in the second information and the content and identifier of the second personal data used by the cross-border behavior, the cross-border behavior The identity of the cross-border behavior and the content and identity of the second personal data used by the cross-border behavior are determined by the first server based on the cross-border data of the target application in the first server. The cross-border behavior is sent after using the second personal data, and the data cross-border situation of the target application in the first server is determined by the first server based on the content and identification of the second personal data ;

The client device sends the identifier of the cross-border behavior and the content and identifier of the second personal data used by the cross-border behavior to the second server.
A method for generating an applied privacy protocol suite, characterized in that it is applied to a first server; the method includes:

The first server receives first personal data of a target application in the client device from the client device, the first personal data is obtained by the client device after running the target application;

The first server determines second personal data of the target application in the first server based on the first personal data;

After the first server determines that the second privacy behavior uses the second personal data, it sends second information to the second server, and the second information is used to describe that the second privacy behavior uses the second personal data. The privacy situation of personal data, the second privacy behavior includes all the behaviors that all applications need to use personal data in the first server, so that the second server generates a target privacy policy based on the first information and the second information Protocol family, and send the target privacy protocol family to the client device, the target privacy protocol family is used for the client device to store in the installation package of the target application, so that the target application is started Afterwards, the target privacy protocol suite may be displayed to the user, the first information is sent to the second server by the client device after determining that the first privacy behavior uses the first personal data, and the The first information is used to describe a privacy situation in which the first privacy behavior uses the first personal data, and the first privacy behavior includes all behaviors of all applications that need to use the personal data in the client device.
The method according to claim 11, wherein when the second privacy behavior includes: rights behavior and retention behavior, after the first server determines that the second privacy behavior uses the second personal data, Send the second information to the second server, including:

The first server determines the data retention status of the target application in the first server based on the content and identification of the second personal data;

After the first server determines that the right behavior uses the second personal data based on the data retention status, it determines that the second information includes the identifier of the right behavior and all the information used by the right behavior. the content and identification of the second personal data, and send the identification of the right action and the content and identification of the second personal data used by the right action to the second server;

And/or, after the first server determines that the retained behavior uses the second personal data based on the data retention situation, it determines that the second information includes the identifier of the retained behavior and the retention behavior The content and identification of the second personal data used, and sending the identification of the retention behavior and the content and identification of the second personal data used in the retention behavior to the second server.
The method according to claim 11 or 12, wherein when the second privacy behavior includes: disclosure behavior, after the first server determines that the second privacy behavior uses the second personal data, it sends The second server sends second information, including:

The first server determines the data disclosure situation of the target application in the first server based on the content and identification of the second personal data;

After the first server determines that the second personal data is used in the disclosure behavior based on the data disclosure situation of the target application in the first server, it determines that the second information includes information about the disclosure behavior. identification and the content and identification of said second personal data used by said disclosure;

The first server sends the identification of the disclosure act and the content and identification of the second personal data used in the disclosure act to the second server;

Alternatively, the first server sends the identification of the disclosure act and the content and identification of the second personal data used in the disclosure action to the second server through the client device.
The method according to any one of claims 11-13, wherein when the second privacy behavior includes: cross-border behavior, the first server uses the second personal information when determining the second privacy behavior After receiving the data, send the second information to the second server, including:

The first server determines the data cross-border situation of the target application in the first server based on the content and identification of the second personal data;

After the first server determines that the cross-border behavior uses the second personal data based on the cross-border data of the target application in the first server, it determines that the second information includes the cross-border The identification of the cross-border behavior and the content and identification of the second personal data used by the cross-border behavior;

The first server sends the identification of the cross-border behavior and the content and identification of the second personal data used by the cross-border behavior to the second server;

Alternatively, the first server sends the identifier of the cross-border behavior and the content and identifier of the second personal data used by the cross-border behavior to the second server through the client device.
A method for generating an applied privacy protocol suite, characterized in that it is applied to a second server; the method includes:

The second server receives first information from the client device, the first information is sent by the client device after determining that the first privacy behavior uses the first personal data, and the first information is used to describe The first privacy behavior uses the privacy situation of the first personal data of the target application in the client device, and the first privacy behavior includes all behaviors that all applications need to use personal data in the client device , the first personal data is obtained by the client device after running the target application;

The second server receives second information from the first server, and the second information is after the first server determines that the second privacy behavior uses the second personal data of the target application in the first server sent, the second information is used to describe the privacy of the second privacy behavior using the second personal data, and the second privacy behavior includes all applications that need to use personal data in the first server All acts, the second personal data is determined by the first server based on the first personal data;

The second server generates a target privacy protocol family based on the first information and the second information;

The second server sends the target protocol suite to the client device, the target privacy protocol suite is used for the client device to store in the installation package of the target application, so that the target application Afterwards, the target protocol family can be displayed to the user.
The method according to claim 15, further comprising:

The second server receives the installation package of the target application from the client device, and the installation package of the target application is sent by the client device when determining that the installation package of the target application is a new version;

The second server determines the difference between the old and new versions based on the installation package of the target application;

The second server updates the target privacy protocol suite corresponding to the old version based on the difference part to obtain a new version of the target privacy protocol suite;

The second server sends the target privacy protocol suite corresponding to the new version to the client device, and the target privacy protocol suite corresponding to the new version is used by the client device to install the The target privacy protocol suite corresponding to the old version is updated to the target privacy protocol suite corresponding to the new version, so that the target application can display the target privacy protocol suite corresponding to the new version to the user after being started.
The method according to claim 15 or 16, wherein the method further comprises:

The second server receives the revised target privacy protocol family from the client device, and the revised target privacy protocol family is the modified content of the client device based on the received target privacy protocol family , obtained by updating the target privacy protocol suite in the installation package of the target application, where the revised content is received by the client device after displaying all content of the target privacy protocol suite;

The second server updates the target privacy protocol suite to the revised target privacy protocol suite.
The method according to any one of claims 15-17, wherein when the first privacy behavior includes: sensitive behavior and control operation, the second server receives first information from the client device, including:

The second server receives from the client device the identification of the sensitive behavior included in the first information and the content and identification of the first personal data used by the sensitive behavior, and the sensitive behavior and the content and identification of the first personal data used by the sensitive behavior are sent by the client device after determining that the sensitive behavior uses the first personal data;

And/or, the second server receives from the client device the identifier of the control operation included in the first information and the content and identifier of the first personal data used by the control operation, The identification of the control operation and the content and identification of the first personal data used in the control operation are sent by the client device after determining that the control operation uses the first personal data.
The method according to any one of claims 15-18, wherein when the first privacy behavior includes: a disclosure behavior, the second server receives first information from the client device, including:

The second server receives from the client device the identification of the disclosure behavior included in the first information and the content and identification of the first personal data used by the disclosure behavior, and the disclosure behavior The identity of the identity and the content and identity of the first personal data used in the disclosure behavior are determined by the client device based on the data disclosure situation of the target application in the client device. The data disclosure situation of the target application in the client device is determined by the client device based on the content and identification of the first personal data.
The method according to any one of claims 15-19, wherein when the first privacy behavior includes: a cross-border behavior, the second server receives the first information from the client device, including:

The second server receives from the client device the identifier of the cross-border behavior included in the first information and the content and identifier of the first personal data used by the cross-border behavior, the The identity of the cross-border behavior and the content and identity of the first personal data used by the cross-border behavior are determined by the client device based on the cross-border data of the target application in the client device The cross-border behavior is sent after using the first personal data, and the cross-border situation of the data of the target application in the client device is the content of the client device based on the first personal data and identified.
The method according to any one of claims 15-20, wherein when the second privacy behavior includes: rights behavior and retention behavior, the second server receives second information from the first server, including:

The second server receives from the first server the identification of the right action included in the second information and the content and identification of the second personal data used by the right action, and the right action The identification and the content and identification of the second personal data used by the right action are sent by the first server after determining that the right action uses the second personal data based on the data retention situation;

And/or, the second server receives from the first server the identification of the retention behavior included in the second information and the content and identification of the second personal data used by the retention behavior, The identification of the retention behavior and the content and identification of the second personal data used in the retention behavior are after the first server determines that the retention behavior uses the second personal data based on the data retention situation sent;

Wherein, the data retention status of the target application in the first server is determined by the first server based on the content and identification of the second personal data.
The method according to any one of claims 15-21, wherein when the second privacy behavior includes: a disclosure behavior, the second server receives second information from the first server, including:

The second server receives from the first server the identifier of the disclosure act included in the second information and the content and identifier of the second personal data used by the disclosure act;

Alternatively, the second server receives from the first server, through the client device, the identifier of the disclosure act included in the second information and the identity of the second personal data used in the disclosure act content and logos;

Wherein, the identification of the disclosure behavior and the content and identification of the second personal data used in the disclosure behavior are determined by the first server based on the data disclosure situation of the target application in the first server The disclosure behavior is sent after using the second personal data, and the data disclosure situation of the target application in the first server is determined by the first server based on the content and identification of the second personal data .
The method according to any one of claims 15-22, wherein when the second privacy behavior includes: cross-border behavior, the second server receives second information from the first server, including:

The second server receives from the first server the identification of the cross-border behavior included in the second information and the content and identification of the second personal data used by the cross-border behavior;

Alternatively, the second server receives from the first server the identifier of the cross-border behavior included in the second information and the second person used in the cross-border behavior from the first server through the client device. the content and identification of the data;

Wherein, the identification of the cross-border behavior and the content and identification of the second personal data used by the cross-border behavior are the data cross-border data of the first server based on the target application in the first server. It is determined that the cross-border behavior uses the second personal data, and the cross-border data of the target application in the first server is based on the second personal data by the first server Content and logo are determined.
A client device, characterized by comprising: a memory and a processor;

The memory is used to store program instructions;

The processor is configured to invoke program instructions in the memory to enable the client device to execute the method for generating a privacy protocol suite for an application according to any one of claims 1-10.
A server, characterized in that it includes: a memory and a processor;

The memory is used to store program instructions;

The processor is configured to call the program instructions in the memory so that the server executes the method for generating a privacy protocol suite for an application according to any one of claims 11-14 and/or any one of claims 15-23.
A computer-readable storage medium, characterized in that it includes computer instructions, and when the computer instructions are run on the client device, the client device is executed as described in any one of claims 1-10. A method for generating a privacy protocol suite, or, when the computer instructions run on the server, the server executes the privacy protocol suite for the application according to any one of claims 11-14 and/or any one of 15-23 generate method.
A computer program product, characterized in that, when the computer program product is run on a computer, the computer is made to execute the method for generating a privacy protocol suite according to any one of claims 1-10, or, to make The computer executes the method for generating a privacy protocol suite for an application according to any one of claims 11-14 and/or 15-23.