KR20220030782A - Electronic Device and Method for Personal Data Protection - Google Patents

Abstract

An electronic device for protecting personal information and an operating method thereof are provided. An electronic device for protecting a user's personal information includes a communication unit, an output unit, a memory for storing one or more instructions, and a processor for executing one or more instructions stored in the memory, wherein the processor is provided by the electronic device Acquire policy data indicating the user's personal information processing policy related to the service being used, identify first personal information to be used to provide the service from the obtained policy data, and use the application from the executable file of the application providing the service Identifying second personal information set to be used, identifying third personal information used by the application while the application is running, first personal information identified from policy data, second personal information identified from executable file of application and third personal information used by the application is compared, and based on the comparison result, an operation of the electronic device for protecting the user's personal information is determined.

Description

Electronic device and method for protecting personal information {Electronic Device and Method for Personal Data Protection}

Various embodiments relate to an electronic device for protecting personal information data and an operating method thereof, and more particularly, to an electronic device that performs an operation for protecting a user's personal information data based on a result of analyzing a personal information processing policy and to a method of its operation.

Korea's Personal Information Protection Act or Europe's GDPR (General Data Protection Regulation), etc., asks the subject of personal information to be responsible for compliance and management of procedures ranging from creation, collection, storage, processing and destruction of personal information. Accordingly, when a user is provided with a service using an electronic device, the entity providing the service may collect or share personal information with the user's consent, but may collect or share personal information without compliance with these legal procedures. Sharing can be a problem.

On the other hand, the policy for collecting and sharing personal information by subjects who collect personal information to provide services is declared in the personal information processing policy (personal information processing policy), but it is difficult for users to understand it easily, and the There is no way to verify that the actual behavior of the electronic device matches this. Accordingly, there is a technology that can provide users with the content declared in the personal information processing policy in an intuitive form, identify the operation of electronic devices that do not match the personal information processing policy, and take measures to protect the user's personal information. is required

Various embodiments, in an electronic device for protecting personal information, analyze policy data indicating a privacy policy of a service, a code of an application that provides a service, and an actual operation of an application that provides a service, respectively It is possible to provide an electronic device capable of performing an operation for protecting user's personal information and an operation method thereof by comparing the analysis data of the .

According to an embodiment, a method for an electronic device to protect a user's personal information data related to an application includes: acquiring policy data indicating a user's personal information processing policy related to a service provided by the electronic device; identifying first personal information to be used to provide the service from the obtained policy data, and identifying second personal information set to be used by the application from an executable file of an application providing the service , while the application is running, identifying third personal information used by the application, the first personal information identified from the policy data, the second personal information identified from the executable file of the application, and the The method may include comparing the third personal information used by the application, and determining an operation of the electronic device to protect the user's personal information data based on the comparison result.

An electronic device for protecting a user's personal information data according to an embodiment includes a communication unit, an output unit, a memory for storing one or more instructions, and a processor for executing the one or more instructions stored in the memory, and , the processor obtains policy data indicating a user's personal information processing policy related to the service provided by the electronic device, and identifies first personal information to be used to provide the service from the obtained policy data, Identifies second personal information set to be used by the application from an executable file of an application that provides the service, identifies third personal information used by the application while the application is running, and the policy data Compare the first personal information identified from, the second personal information identified from the executable file of the application, and the third personal information used by the application, and based on the comparison result, the user's personal information An operation of the electronic device for protecting data may be determined.

The electronic device for protecting the user's personal information according to an embodiment may obtain policy data indicating the personal information processing policy, summarize the personal information processing policy, and provide it to the user in an intuitive form. In addition, the electronic device according to an embodiment may identify an operation of the electronic device that does not match the personal information processing policy and take measures to protect the user's personal information.

1 is a diagram illustrating an example in which an electronic device performs an operation for protecting personal information by analyzing policy data indicating a personal information processing policy related to the provision of a service, according to an embodiment.
2 is a block diagram illustrating a configuration of an electronic device according to an exemplary embodiment.
3 is a flowchart illustrating operations for an electronic device to analyze a personal information processing policy in order to protect a user's personal information and to determine an operation of the electronic device according to an exemplary embodiment.
4 is a diagram referenced to explain a user's personal information processing policy obtained by an electronic device according to an exemplary embodiment.
FIG. 5 is a diagram referenced to explain a method for an electronic device to identify first personal information from policy data indicating a personal information processing policy according to an exemplary embodiment.
6 is a diagram referenced to explain a method for an electronic device to identify first personal information from policy data indicating a personal information processing policy according to another embodiment.
7 is a diagram referenced to explain a method for an electronic device to identify second personal information set to be used by an application from an execution file of an application that provides a service, according to an exemplary embodiment.
8 is a diagram referenced to explain a method for an electronic device to identify third personal information used by an application while the application is being executed, according to an exemplary embodiment.
FIG. 9 is a diagram referenced to explain a method for an electronic device to compare first personal information, second personal information, and third personal information according to an exemplary embodiment.
10 is a diagram referenced to explain an operation performed by an electronic device to protect user's personal information according to an exemplary embodiment.
11 is a diagram referenced to explain an embodiment in which an electronic device provides summary information of a personal information processing policy to a user according to an embodiment.
12 is a diagram referenced for explaining a method of comparing a privacy policy of an application that an electronic device provides a service to with privacy policies of applications included in the same or similar category as the application, according to an embodiment; am.
FIG. 13 is a diagram referenced to explain how an electronic device identifies fourth personal information and fifth personal information from applications included in the same or similar category, according to an exemplary embodiment.
14 is a flowchart referenced to describe a method for an electronic device to identify and compare fourth personal information and fifth personal information from applications included in the same or similar category, according to an exemplary embodiment.

Terms used in this specification will be briefly described, and the present invention will be described in detail.

The terms used in the present disclosure have been selected as currently widely used general terms as possible while considering the functions in the present invention, which may vary depending on the intention or precedent of a person skilled in the art, the emergence of new technology, and the like. In addition, in a specific case, there is a term arbitrarily selected by the applicant, and in this case, the meaning will be described in detail in the description of the corresponding invention. Therefore, the terms used in the present disclosure should be defined based on the meaning of the term and the overall content of the present invention, rather than the simple name of the term.

In the entire specification, when a part "includes" a certain element, this means that other elements may be further included, rather than excluding other elements, unless otherwise stated. In addition, terms such as "...unit" and "module" described in the specification mean a unit that processes at least one function or operation, which may be implemented as hardware or software, or a combination of hardware and software. .

Hereinafter, with reference to the accompanying drawings, the embodiments of the present invention will be described in detail so that those of ordinary skill in the art can easily implement them. However, the present invention may be embodied in several different forms and is not limited to the embodiments described herein. And in order to clearly explain the present invention in the drawings, parts irrelevant to the description are omitted.

In the present disclosure, the privacy policy means a policy regarding processing standards and protection measures related to personal information to users used to provide services, detailed description of the provided services, and providing services It may include a list of rights related to functions of the electronic device required for this purpose.

In the present disclosure, policy data means data representing the above-described personal information processing policy. When the application is an application that uses the user's personal information when providing the service, policy data indicating the user's personal information processing policy may be associated with the application. The policy data indicating the personal information processing policy may be a URL (Uniform Resource Locator) of a document in which the personal information processing policy is written or a personal information processing policy document file in the form of html, but is not limited thereto.

In the present disclosure, personal information data (Personal Data) is data included in personal information, and means data elements included in each category constituting personal information. Personal information data may include, for example, items of personal information to be collected, methods of collecting personal information, purpose of use of personal information, etc., but is not limited thereto, and personal information of users used in providing services It can mean any data related to

In the present disclosure, personal information means a set of individual personal information data, and may be identified in various ways. In addition, the “first”, “second”, … , the term “fifth” does not mean the order of personal information, but means that personal information obtained from different sources in different ways is distinguished.

In the present disclosure, the first personal information identified from policy data indicating the personal information processing policy means personal information required by the service to provide the service.

In the present disclosure, the second personal information identified from the code of the application means personal information set to be collected or shared by an application, web, or electronic device that provides a service. The second personal information may be identified based on whether the application is programmed to collect or share personal information by analyzing a code of an application, web, or electronic device that provides a service.

In the present disclosure, the third personal information identified from an event occurring during operation of an application means personal information that is actually collected or shared while an application, web, or electronic device that provides a service operates. The third personal information may be identified based on an operation of providing an electronic device service by monitoring an operation of providing the electronic device service, and collection or sharing of personal information identified while providing the service.

In the present disclosure, the fourth personal information identified from policy data indicating the privacy policy of another application means personal information identified from policy data such as the application providing the service, the web or other applications such as the electronic device, etc. do. The fourth personal information may be identified in the same way as the first personal information.

In the present disclosure, the fifth personal information identified from codes of other applications means personal information identified from codes of other applications such as the application, the web, or the electronic device that provide services. The fifth personal information may be identified in the same way as the second personal information.

In the present disclosure, a natural language understanding (NLU) model is an artificial intelligence model trained to interpret text and acquire semantic elements within the text. In this case, the artificial intelligence model may be composed of a plurality of neural network layers. Each of the plurality of neural network layers has a plurality of weight values, and a neural network operation may be performed through an operation between an operation result of a previous layer and a plurality of weight values.

1 is a diagram illustrating an example in which an electronic device 200 performs an operation for protecting personal information by analyzing policy data indicating a personal information processing policy related to the provision of a service, according to an embodiment.

The electronic device 200 obtains policy data indicating a personal information processing policy from an application, web, or device that provides a service, performs analysis of the obtained policy data, and operates the electronic device 200 based on the analysis result can be controlled.

The electronic device 200 according to an embodiment may be a device capable of performing various functions by executing the application 101 , the web 102 , and the like. For example, the electronic device 200 may be a mobile device such as a smart phone or a tablet PC that a user moves and can carry. In another example, the electronic device 200 may be a wearable device such as a wireless earphone or a smart watch that a user can wear. In another example, the electronic device 200 may include various devices capable of executing applications, web, and the like, such as a desktop PC, a notebook PC and a TV, a refrigerator, an air conditioner, a smart home appliance including a robot cleaner, etc., but is limited thereto. doesn't happen

The electronic device 200 according to an embodiment may obtain policy data indicating a personal information processing policy related to a service provided by the electronic device from various sources. For example, the electronic device 200 includes policy data including personal information data such as information collected or shared in order to execute the application and perform a function from the application 101 executed in the electronic device, and the right to acquire. can be obtained. In another example, the electronic device 200 may obtain policy data including personal information data collected or shared by the corresponding website from the web 102 accessed by the electronic device. In another example, the electronic device 200 may obtain policy data including personal information data collected or shared by the electronic device 200 from the corresponding electronic device 200 . In another example, the electronic device 200 may obtain, from another electronic device (not shown), policy data indicating personal information data collected or shared by the other electronic device. The electronic device 200 analyzes the obtained policy data, and performs a static analysis of the code of the application 101 , the web 102 , the corresponding electronic device 200 or another electronic device (not shown) and a dynamic analysis of the operation. can be performed. Also, the electronic device 200 may determine an operation of the electronic device 200 to protect the user's personal information based on the results of policy data analysis, static analysis, and dynamic analysis. Hereinafter, for convenience of explanation, when the electronic device 200 is a 'smartphone', policy data indicating a personal information processing policy is obtained from an application executed on the smartphone, and as a result of the analysis of the policy data, the static information for the application is obtained. An embodiment of controlling the operation of the smart phone based on the analysis and dynamic analysis results will be described. However, the present invention is not limited thereto, and as described above, various types of electronic devices may be applied to embodiments in which policy data indicating a personal information processing policy are obtained from various types of sources.

Referring to FIG. 1 , an electronic device 200 may include a plurality of applications 100 installed in the electronic device 200 . If any one application 101 among applications installed in the electronic device 200 is an application 101 using the user's personal information, policy data indicating a personal information processing policy for processing the user's personal information is associated with the application. may have been In order to analyze the personal information processing policy, the electronic device 200 may acquire policy data indicating the user's personal information processing policy related to the service provided by the corresponding application 101 . The policy data obtained by the electronic device 200 may be a document in the form of an html file, but is not limited thereto.

The electronic device 200 according to an embodiment may identify the first personal information described in the personal information processing policy in order to provide a service from the obtained policy data. For example, the first personal information identified by the electronic device 200 may include personal information data such as items of personal information to be collected, collection method, purpose of use, retention and use period, destruction procedure and destruction method. . A detailed method for the electronic device 200 to identify the first personal information from the policy data will be described in detail with reference to FIGS. 5 to 6 .

The electronic device 200 according to an embodiment may identify the second personal information set to be used by the application 101 from the execution file of the application 101 that provides the service. For example, the electronic device 200 may obtain an executable file of the application 101 and perform static analysis on a code related to a personal information processing policy. Specifically, the electronic device 200 determines whether the application 101 is programmed to collect any user's personal information data from the code included in the obtained application's executable file, and the collected user's personal information data. It is possible to identify the second personal information including whether it is programmed to transmit to the destination and whether it is programmed to perform any operation using the collected personal information data of the user.

The electronic device 200 according to an embodiment may identify the third personal information used by the application 101 while the application 101 is running. For example, the electronic device 200 may perform dynamic analysis for monitoring the operation of the application. Specifically, when the application 101 is executed and operated, the electronic device 200 determines whether the application 101 actually collects the user's personal information data, and transmits the collected user's personal information data to a destination. It is possible to identify third personal information including whether or not to perform an operation using the collected personal information data of the user, and the like. A specific embodiment of a method for the electronic device 200 to statically analyze an application code and a method to dynamically analyze an application operation will be described in detail with reference to FIGS. 7 to 8 .

The electronic device 200 according to an embodiment compares the first personal information identified from the policy data, the second personal information identified from the execution file of the application, and the third personal information used by the application, and based on the comparison result Thus, it is possible to determine the operation of the electronic device for protecting the user's personal information data.

For example, the electronic device 200 compares the first personal information with the second personal information, and the personal information data included in the second personal information set to be used by an application that provides a service to the user is an individual related to the service. When there is personal information data different from the personal information data included in the first personal information described in the information processing policy, the operation of the electronic device for protecting the user's personal information data may be determined.

In another example, the electronic device 200 compares the first personal information with the third personal information, and the personal information data included in the third personal information used while the application providing the service to the user is executed is transmitted to the service. When there is personal information data different from the personal information data included in the first personal information described in the related personal information processing policy, the operation of the electronic device for protecting the user's personal information data may be determined. A description of how the electronic device 200 compares the first personal information to the third personal information is based on a result of the electronic device 200 comparing the first personal information to the third personal information in the description of FIG. 9 . A description of the method of determining the operation of the electronic device for protecting the user's personal information data based on the description will be described in detail with reference to FIG. 10 .

2 is a block diagram illustrating a configuration of an electronic device 200 according to an exemplary embodiment.

The electronic device 200 according to an embodiment may be configured to include at least a communication unit 210 , an output unit 220 , a processor 230 , and a memory 240 .

The communication unit 210 may transmit and receive data or signals to and from an external device (eg, another electronic device (not shown), a recognition server (not shown), and a service providing server (not shown)) under the control of the processor 230 . there is.

The communication unit 210 according to an embodiment may include, but is not limited to, a short-range wireless communication unit, a mobile communication unit, and the like, in response to the performance and structure of the electronic device 200 .

Short-range wireless communication unit, Bluetooth communication unit, BLE (Bluetooth Low Energy) communication unit, near field communication unit (Near Field Communication unit), WLAN (Wi-Fi) communication unit, Zigbee communication unit, infrared (IrDA, infrared) A data association) communication unit, a Wi-Fi Direct (WFD) communication unit, an ultra wideband (UWB) communication unit, an Ant+ communication unit, a microwave (uWave) communication unit, etc. may be included, but is not limited thereto.

The mobile communication unit may transmit/receive a radio signal to/from at least one of a base station, an external terminal, and a server on a mobile communication network. Here, the wireless signal may include various types of data according to transmission and reception of a voice signal, a video call signal, or a text/multimedia message.

The communication unit 210 according to an embodiment may transmit/receive data necessary for the user of the electronic device 200 to receive a service with a service providing server (not shown). In addition, when an application providing a service uses personal information data that is not described in the personal information processing policy, the communication unit 210 according to an embodiment provides a service providing server (not shown) to protect the user's personal information data. It can be transmitted by obfuscation of data transmitted to . In addition, the communication unit 210 according to an embodiment receives policy data indicating a personal information processing policy from another electronic device (not shown) and data on personal information used by another electronic device (not shown), and Control information for protecting personal information data may be transmitted to another electronic device (not shown). The processor 230 may control the communication unit 210 to transmit and receive the information.

The output unit 220 is for outputting an audio signal or a video signal, and may include a speaker, a display, and the like, but is not limited thereto.

The speaker of the output unit 220 according to an embodiment may output audio data received from the communication unit 210 or stored in the memory 240 . Also, an acoustic signal related to a function performed by the electronic device may be output.

The display of the output unit 220 according to an embodiment may display information processed by the electronic device 200 . For example, the display may display visual information about a service provided by the electronic device 200, display a result of analyzing a personal information processing policy related to a service provided by the electronic device, or protect personal information data. For this purpose, notification information provided to the user may be displayed, but the present invention is not limited thereto. Also, the display may display a user interface (UI) or a graphic user interface (GUI) related to settings of the electronic device 200 .

Meanwhile, when the display of the output unit 220 and the touch pad form a layer structure to form a touch screen, the display may be used as an input device in addition to the output device. The display includes a liquid crystal display, a thin film transistor-liquid crystal display, an organic light-emitting diode, a flexible display, a three-dimensional display, At least one of an electrophoretic display may be included. Also, depending on the implementation form of the electronic device 200 , the electronic device 200 may include two or more displays.

The processor 230 may perform overall operations of the electronic device 200 . The processor 230 may execute one or more instructions of a program stored in a memory.

The processor 230 according to an embodiment is designed as a hardware structure specialized for processing an application processor (AP), a central processing unit (CPU), a graphic processing unit (GPU), a neural processing unit, or an artificial intelligence model. It may include a processor dedicated to artificial intelligence, and the like.

The processor 230 according to an embodiment may obtain policy data indicating the personal information processing policy and analyze the personal information processing policy. The processor 230 uses the policy analysis module 241 to obtain policy data indicating a user's personal information processing policy related to the service provided by the electronic device 200, and to provide a service from the obtained policy data The first personal information used may be identified. Also, when the processor 230 identifies the first personal information using the policy analysis module 241 , the natural language understanding model 245 stored in the memory 240 may be used.

The processor 230 according to an embodiment may perform static analysis on an executable file of an application providing a service. The processor 230 may identify the second personal information set to be used by the application by analyzing the code of the application providing the service using the static analysis module 242 . For example, the processor 230 may identify a part programmed to collect or share personal information data in the code and store it as second personal information. Specifically, the processor 230 according to an embodiment detects a variable, a function name, an operation, etc. in the code through static analysis of the execution file of the application, and any personal information data (eg, the electronic device 200) of specific data, user data), and whether the collected personal information data is to be transmitted to a destination (eg, an advertisement platform), the identified data may be stored as second personal information.

The processor 230 according to an embodiment may perform dynamic analysis on the operation of the electronic device while an application providing a service is being executed. The processor 230 may identify the third personal information actually used by the application providing the service by using the dynamic analysis module 243 . For example, the processor 230 may monitor the operation of the application to identify the operation of the application to collect or share personal information data and store it as the third personal information. Specifically, the processor 230 according to an embodiment identifies which personal information data the application actually collects through operation monitoring and to which destination the personal information data collected through network monitoring is actually sent, The identified data may be stored as third personal information.

The processor 230 according to an embodiment compares the identified first personal information, the second personal information, and the third personal information, and performs the operation of the electronic device 200 for protecting personal information data based on the comparison result. can decide The processor 230 compares the first personal information to the third personal information by using the information protection module 244, and the application providing the service collects or shares personal information data not described in the personal information processing policy. In this case, a notification may be provided to protect the user's personal information data. In addition, when collecting or sharing personal information data that is not described in the personal information processing policy, obfuscation of collected or shared personal information data may be performed or the operation of collecting or sharing the personal information data may be restricted.

The memory 240 may store various data, programs, or applications for driving and controlling the electronic device 200 . A program stored in the memory 240 may include one or more instructions. A program (one or more instructions) or an application stored in the memory 240 may be executed by the processor 230 .

The memory 240 according to an embodiment may include a flash memory type, a hard disk type, a multimedia card micro type, and a card type memory (eg, SD or XD). memory, etc.), RAM (Random Access Memory) SRAM (Static Random Access Memory), ROM (Read-Only Memory), EEPROM (Electrically Erasable Programmable Read-Only Memory), PROM (Programmable Read-Only Memory), It may include at least one type of storage medium among a magnetic memory, a magnetic disk, and an optical disk. Also, the electronic device 200 may operate a web storage or a cloud server that performs a storage function on the Internet.

The memory 240 according to an embodiment may include a policy analysis module 241 , a static analysis module 242 , a dynamic analysis module 243 , and an information protection module 244 . The memory 240 according to an embodiment may store the natural language understanding model 245 for extracting semantic roles by performing semantic role labeling on data representing the personal information processing policy.

3 is a diagram illustrating operations for explaining a method in which the electronic device 200 analyzes a personal information processing policy in order to protect a user's personal information data and determines an operation of the electronic device 200 according to an embodiment. It is a flow chart.

In step S310 , the electronic device 200 may obtain policy data indicating a user's personal information processing policy related to a service provided by the electronic device. The service provided by the electronic device includes a service provided through an application executed on the electronic device 200 , a service provided through a web accessed by the electronic device 200 , a service provided by the electronic device 200 itself, etc. may include When the service provided by the electronic device is a service using the user's personal information, the electronic device 200 may obtain policy data indicating the user's personal information processing policy related to the service. The policy data indicating the personal information processing policy may be a URL (Uniform Resource Locator) of a document in which the personal information processing policy is written or a personal information processing policy document file in the form of html, but is not limited thereto.

In operation S320 , the electronic device 200 may identify first personal information used to provide a service from the obtained policy data. For example, the electronic device 200 may identify texts representing the personal information processing policy from the policy data and store them as the first personal information. In this case, the first personal information identified by the electronic device 200 may include, for example, personal information data such as items of personal information to be collected, collection method, purpose of use, retention and use period, destruction procedure and destruction method. can Also, when the electronic device 200 identifies the first personal information, the first personal information may be identified by applying a natural language understanding model for determining the meaning.

The electronic device 200 may compare the identified first personal information with the second personal information or the third personal information to detect whether the service collects or shares personal information data not described in the personal information processing policy, etc. .

In step S330, the electronic device 200 may identify the second personal information set to be used by the application from the execution file of the application providing the service. The executable file may be, for example, an application program file in an EXE format or an APK format, but is not limited thereto. The electronic device 200 acquires the code of the application from the executable file of the application, and performs static analysis on the obtained code to determine which personal information data of the application is programmed to collect or share of the user or The second personal information including whether the user's personal information data is programmed to be sent may be identified.

In operation S340 , the electronic device 200 may identify third personal information used by the application while the application providing the service is running. The electronic device 200 may perform dynamic analysis for monitoring the operation of the application on each event occurring in the application according to a user input or a predetermined condition. For example, the third personal information including which personal information data of the user is collected or shared while the application is executed or which destination the user's personal information data is sent to may be identified.

In step S350 , the electronic device 200 may compare the first personal information, the second personal information, and the third personal information. For example, the electronic device 200 compares the first personal information identified from the policy data indicating the personal information processing policy with the second personal information identified from the execution file of the application, so that the application is not described in the personal information processing policy. You can check whether it is programmed to collect personal information data that has not been processed or whether it is programmed to send personal information data to a destination different from the destination specified in the privacy policy. In another example, the electronic device 200 compares the first personal information identified from the policy data indicating the personal information processing policy with the third personal information used while the application is executed, and the application is not described in the personal information processing policy. You can check whether personal information data is collected or whether personal information data is sent to a destination different from the destination described in the personal information processing policy. In another example, the electronic device 200 compares the first personal information with the second personal information and the third personal information to determine whether the application is set to collect or share personal information data that is not described in the privacy policy or not. You can check whether an operation different from the operation of collecting or sharing personal information data described in the information processing policy is performed.

In operation S360, the electronic device 200 may determine an operation of the electronic device to protect the user's personal information based on the comparison result in operation S350. For example, when an operation not described in the personal information processing policy is identified among the operation of the application, the electronic device 200 may output notification information informing that the application violates the personal information processing policy and provide it to the user. there is. As another example, when an operation not described in the personal information processing policy is identified among the operation of the application, the electronic device 200 may obfuscate personal information data collected or shared in the operation. In another example, when an operation not described in the personal information processing policy is identified among the operation of the application, the electronic device 200 may control the operation not to be performed.

In the above, the case of an application providing a service has been described as an embodiment, but the present invention is not limited thereto. It is possible to analyze the personal information processing policy and control the operation of the electronic device 200 .

4 is a diagram referenced to explain policy data indicating a personal information processing policy obtained by the electronic device 200 according to an exemplary embodiment.

Referring to FIG. 4 , the electronic device 200 according to an embodiment may provide various services 410 to the user, and in this case, a personal information processing policy for personal information used for each service may be described. can The various services 410 provided to the user through the electronic device 200 include a service provided by a first party, such as a manufacturer of the electronic device 200 , and a subsidiary or affiliate (eg, a subsidiary of the electronic device 200 ) manufacturer. For example, in the case of a smartphone, a service provided by a second party, such as a telecommunication company, etc., may include a service provided by a third party, such as other external companies.

The electronic device 200 according to an embodiment transmits a personal information processing policy from an application, web or electronic device that provides a service in order to analyze a personal information processing policy in which personal information used to provide a service to a user is described. indicating policy data can be obtained. For example, if the service provided to the user by the electronic device 200 is Bixby 415 which is an artificial intelligence voice assistant service, the privacy policy of the Bixby service may be the same as 420 of FIG. 4 , and the electronic device 200 ) may acquire policy data indicating the personal information processing policy 420 of the Bixby service. The obtained policy data may be a URL (Uniform Resource Locator) of a personal information processing policy document or a personal information processing policy document file in the form of html, but is not limited thereto.

FIG. 5 is a diagram referenced to explain a method for the electronic device 200 to identify first personal information from policy data indicating a personal information processing policy according to an exemplary embodiment.

Referring to FIG. 5 , the electronic device 200 according to an embodiment may identify first personal information from policy data (eg, an html file) indicating a personal information processing policy. The electronic device 200 may identify the first personal information by a method of identifying a word or phrase corresponding to the personal information data based on a preset condition from the policy data representing the personal information processing policy.

For example, an application providing a health care service may use the user's personal information to provide the health care service. In this case, the electronic device 200 may acquire policy data 500 indicating a personal information processing policy for personal information used to provide a health care service. The electronic device 200 receives from the policy data 500, the preset condition “… The first personal information 510 may be identified by identifying words such as “information”.

The first personal information 510 collected by the electronic device 200 according to an embodiment to provide a health care service includes user profile information, account information, health and wellness information, fitness and nutrition information, terminal information, and interlocking accessories. It may include personal information data such as information and social network service (SNS) information. In addition, the personal information data included in the first personal information may further include detailed data included in each personal information data category. For example, the user profile information 520 among the personal information data may include detailed data such as a user's nickname, profile picture, gender, date of birth, height, and weight. In another example, among the personal information data, the health and wellness information 530 may include detailed data such as a user's heart rate, stress level, oxygen saturation, blood sugar, sleep-related information, and UV index. In addition, the first personal information may include a list of collected personal information data. The electronic device 200 compares the first personal information identified from the personal information processing policy with at least one of the second personal information and the third personal information, and the application providing the service is an individual whose personal information processing policy is not described in the personal information processing policy. It can detect whether an action is being performed to collect or share informational data.

In addition, the first personal information collected by the electronic device 200 to provide a health care service according to an embodiment includes a method for a health care application to collect a user's personal information, a purpose of using personal information, and personal information In order to do so, it may further include personal information data such as access rights obtained by the application. In this case, the electronic device 200 further uses personal information data such as a personal information collection method, purpose of use, and access right of the application, and the application collects or shares personal information data not described in the personal information processing policy. action can be detected.

6 is a diagram referenced to explain a method for the electronic device 200 to identify first personal information from policy data indicating a personal information processing policy according to another embodiment.

Referring to FIG. 6 , the electronic device 200 according to an embodiment may identify first personal information from policy data (eg, an html file) indicating a personal information processing policy. The electronic device 200 applies the policy data 600 representing the personal information processing policy to the Natural Language Understanding (NLU) model 610, and receives the first personal information based on the data output from the natural language understanding model. can be identified.

The electronic device 200 according to an embodiment may analyze the policy data 600 representing the personal information processing policy using a natural language understanding model that performs semantic role labeling. For example, the electronic device 200 extracts a text component from the data 600 representing the personal information processing policy in order to identify the first personal information collected to provide a health care service, and a natural language understanding model ( The first personal information 620 may be identified by determining the semantic range of the sentence component using 610 , and extracting personal information data included in the text. Through this, the electronic device 200 receives the text representing the personal information processing policy of various forms regardless of the order in which the list of collected personal information is listed and the structure in which each sentence component of the sentences describing the personal information processing policy is arranged. Personal information data (first personal information) collected by the personal information processing policy can be identified.

In the above description, the case where the electronic device 200 applies the semantic domain determination technique using the self-language understanding model 610 has been described as an example, but the present invention is not limited thereto, and the electronic device 200 uses the natural language understanding model 610 ), using various natural language processing techniques that can be applied, the first personal information can be identified from the text representing the personal information processing policy.

The first personal information 620 that the electronic device 200 collects to provide a health care service according to an embodiment includes user profile information, account information, health and wellness information, fitness and nutrition information, terminal information, and interlocking accessories. It may include personal information data such as information and social network service (SNS) information. In addition, the personal information data included in the first personal information may further include detailed data included in each personal information data category. Since the detailed data has been described in the description of FIG. 5 , a description thereof will be omitted herein.

7 is a diagram referenced to explain a method for the electronic device 200 to identify second personal information set to be used by an application from an execution file of an application that provides a service, according to an exemplary embodiment.

Referring to FIG. 7 , the electronic device 200 may obtain executable files 700 of various applications executed in the electronic device to provide a service. In this case, the executable files 700 of the applications acquired by the electronic device 200 may be an EXE format or an APK format application file, but is not limited thereto.

For example, the electronic device 200 may acquire the health care application execution file 705 from among the application execution files 700 . The electronic device 200 may obtain the code 710 of the application from the obtained executable file 705 of the health care application. As a method for the electronic device 200 to obtain the code 710 of the application, for example, the code may be obtained by decompiling an execution file of the application, but is not limited thereto, and the electronic device 200 may be You can also obtain the source code of the application from the source.

The electronic device 200 according to an embodiment acquires the code of the application from the executable file of the application, performs static analysis on the obtained code, and determines which personal information data of the user the application is programmed to collect or share. Alternatively, the second personal information including whether the user's personal information data is programmed to be sent may be identified.

For example, the electronic device 200 performs static analysis on the code of the application obtained from the executable file 705 of the health care application, so that the health care application can provide user profile information, account information, health and wellness information, and fitness and personal information data such as nutrition information, terminal information, interlocking accessory information, and SNS information. In addition, the electronic device 200 performs a personal information data collection operation (eg, input by a user, measurement from a device when using a service, automatic collection when executing a service, partner collection from apps, etc.), personal information data usage behavior of whether personal information data is used in which case, personal information data transmission destination of whether personal information data is sent to which destination and the application obtained in order to run and perform functions It is possible to identify the second personal information including personal information data such as authority set to do so. In addition, the personal information data included in the second personal information may further include detailed data included in each personal information data category. Since the detailed data has been described in the description of FIG. 5 , a description thereof will be omitted herein.

FIG. 8 is a diagram referenced to explain a method for the electronic device 200 to identify third personal information used by an application while the application is being executed, according to an exemplary embodiment.

Referring to FIG. 8 , the electronic device 200 may perform dynamic analysis for monitoring the operation of the application corresponding to each event occurring in the application according to a user input or a predetermined condition.

The electronic device 200 according to an embodiment may identify the third personal information by monitoring the operation of the application while the health care application 810 is being executed. For example, when the user is exercising, such as walking or running, the electronic device 200 may collect personal information data such as location information, acceleration information, and exercise time information of the user. In another example, when the user inputs food information after eating, the electronic device 200 may collect the input food information as personal information data. The electronic device 200 provides personal information such as personal information data collected while the application is running, an operation for the application to collect personal information data, an operation for the application to use personal information data, and a destination where the application transmits personal information data. Third personal information including data may be identified. In addition, the personal information data included in the third personal information may further include detailed data included in each personal information data category. Since the detailed data has been described in the description of FIG. 5 , a description thereof will be omitted herein.

FIG. 9 is a diagram referenced to explain a method for the electronic device 200 to compare first personal information, second personal information, and third personal information according to an exemplary embodiment.

The electronic device 200 according to an embodiment may compare the first personal information, the second personal information, and the third personal information with each other to determine whether there is inconsistent personal information data.

For example, the electronic device 200 compares the first personal information with the second personal information so that the application providing the service collects or shares personal information data other than the personal information described in the service's privacy policy. Check if it is programmed. In addition, the operation of the electronic device 200 comparing the first personal information with the second personal information may be performed even when the application is not running, and while the application described in step S340 of FIG. 3 is running, the second personal information 3 It can be performed before the step of identifying personal information.

In another example, the electronic device 200 compares the first personal information with the third personal information, and while the application providing the service is running, the application is different from the personal information data described in the privacy policy of the service. You can check whether the action of collecting or sharing data is performed.

In another example, the electronic device 200 compares the second personal information with the third personal information, collects personal information data programmed to be collected or shared in the application providing the service, and the application providing the service while the application is running. Alternatively, you can check whether the shared personal information data is different.

In another example, the electronic device 200 may simultaneously compare any one of the first personal information to the third personal information with the other personal information, and may compare the first personal information to the third personal information at the same time. In addition, when the electronic device 200 compares the first personal information to the third personal information, whether personal information data not described in the personal information processing policy is collected or shared, as well as the purpose of collecting and using personal information data; By further using information such as the destination to which the personal information data is transmitted, even if the personal information data described in the personal information processing policy is collected, it is possible to determine whether or not to collect and use it for other purposes and whether to transmit the personal information data to another destination. can

The electronic device 200 according to an embodiment compares the first personal information to the third personal information, confirms whether the personal information processing policy and the application actually programmed content and the actual operation of the application are different from each other, If there is, an operation of the electronic device for protecting personal information data may be determined.

10 is a diagram referenced to explain an operation performed by the electronic device 200 to protect user's personal information data according to an exemplary embodiment.

After step S350 of FIG. 3 is performed, the electronic device 200 according to an embodiment may perform the operations of steps S1010 to S1050.

In step S1010, the electronic device 200 identifies third personal information used while the application is operating while the application is running, compares at least two pieces of information among the first personal information to the third personal information, so that the application is personal information It can be identified whether an operation not described in the processing policy is performed. Since the description of the method for the electronic device 200 to compare the first personal information to the third personal information has been described with reference to FIG. 9 , a description thereof will be omitted herein. When the electronic device 200 is identified as performing an operation such as collecting or sharing personal information data that is not described in the personal information processing policy while the application is running in step S1010, any one of steps S1020 to S1040 is performed can do.

In step S1020, the electronic device 200 may output notification information informing that the running application violates the privacy policy and provide it to the user. For example, when the identified second personal information or third personal information includes personal information data that is not included in the first personal information, notification information of violation of the privacy policy may be output. In this case, the output notification information may be output in the form of an audio signal or a video signal, but is not limited thereto.

In operation S1030, the electronic device 200 may obfuscate information collected by the running application. For example, when the identified second personal information or third personal information includes personal information data that is not included in the first personal information, the electronic device 200 may obfuscate the corresponding data. In this case, various obfuscation techniques including a method of converting a code of the corresponding data may be adopted as the performed obfuscation method.

In operation S1040, the electronic device 200 may restrict the operation of the running application from being performed. For example, when the identified second personal information or third personal information includes personal information data that is not included in the first personal information, the electronic device 200 includes the corresponding personal information data not included in the first personal information. You can restrict the operation using .

After performing any one of steps S1020 to S1040, the electronic device 200 according to an embodiment may perform step S1050. In addition, even when the electronic device 200 is identified as operating normally, not when it is identified as performing an operation not described in the personal information processing policy in step S1010, monitoring for other operations is performed by performing step S1050. can

In step S1050 , the electronic device 200 identifies third personal information used by the application in the corresponding operation with respect to another operation of the application, compares the identified third personal information with the first personal information and the second personal information, It is possible to identify whether the operation violates the privacy policy.

11 is a diagram referenced to explain an embodiment in which the electronic device 200 provides summary information of a personal information processing policy to a user according to an embodiment.

The electronic device 200 according to an embodiment may provide information summarizing the personal information processing policy to the user. For example, the electronic device 200 may generate summary information and provide it to the user by using the first personal information identified from policy data representing the personal information processing policy. Specifically, summary information may be generated by identifying preset key words or key phrases in the personal information processing policy. In addition, summary information can be generated based on the semantic domain identified in the personal information processing policy using the natural language understanding model. The summary information generated by the electronic device 200 may be in the form of an image, a keyword, or a combination thereof, and may be in the form of an infographic, but is not limited thereto. For example, in the case of an application that provides service A, the summary information provided to the user may be provided in the form of 'service A's personal information processing policy 1100' shown in FIG. 11 . In this case, the electronic device 200 uses the policy data indicating the personal information processing policy of the service A, or the first personal information identified in the policy data, location-related information, which is personal information data collected to provide the service A (1105), detailed device location information, IP address, user's SNS usage information, event in which the user is participating, and information stored by the service provider may be generated as summary information and provided to the user.

Also, the electronic device 200 may provide information about an operation performed on the collected personal information data together with summary information. For example, the personal information data collected by the service provider may be displayed as a circle-shaped mark, the personal information data shared by the service provider will be displayed as a triangle-shaped mark, and the personal information data collected and shared by the service provider may be displayed as a rectangular mark. can

Also, the electronic device 200 may further provide detailed information for each piece of personal information included in the summary information. For example, when the location-related information 1105, which is personal information data included in the summary information, is selected, the location information 1150 collected by the service provider to provide the service may be provided in a map-mapped form. .

However, the method of providing summary information, the method of providing information on the operation performed on personal information data, and the method of providing detailed information of personal information data are not limited to the above method, and images, keywords, information It may be provided in various forms capable of providing intuitive form information to the user using graphics or the like.

12 is a diagram for explaining a method of comparing the privacy information processing policy of an application that the electronic device 200 provides a service to with personal information processing policies of applications included in the same or similar category as the application, according to an exemplary embodiment; It is a reference drawing.

Referring to FIG. 12 , the electronic device 200 according to an embodiment may obtain policy data indicating a personal information processing policy from applications included in the same or similar category as an application providing a service.

For example, the electronic device 200 according to an embodiment may determine a category in which the corresponding application is included with respect to the health care application 1210 that provides the health care service. Specifically, among the plurality of application categories, the category of the health care application 1210 may be determined as the health/exercise category 1220 . In this case, the electronic device 200 may obtain policy data indicating a personal information processing policy from a plurality of applications 1230 included in the health/exercise category.

In the electronic device 200 according to an embodiment, each application included in the plurality of applications 1230 provides a service by using policy data indicating a personal information processing policy obtained from the plurality of applications 1230 . You can identify each of the fourth personal information described as being used for Since the method for the electronic device to identify the fourth personal information from each of the plurality of applications 1230 is the same as the method for identifying the first personal information described with reference to FIGS. 5 to 6 , a description thereof will be omitted herein.

The electronic device 200 according to an embodiment may compare the fourth personal information to be used in the plurality of applications 1230 included in the same or similar category with the first personal information to the third personal information. Specifically, based on the fourth personal information, a plurality of applications 1230 included in the health/exercise category 1220 identify personal information data that is to be collected or shared on average in order to provide a service related to the corresponding category. and, it may be determined whether the health care application 1210 collects or shares personal information data that is not collected or shared on average in the services included in the health/exercise category 1220 .

For example, by comparing the fourth personal information with the first personal information, the personal information processing policy of the health care application 1210 collects or shares on average in the services included in the health / exercise category 1220 personal information You can check whether it is stated that data and other personal information data are collected or shared.

In another example, by comparing the fourth personal information with the second personal information, the personal information data that the health care application 1210 collects or shares on average in the services included in the health/exercise category 1220 is different from the personal information data You can check whether it is programmed to collect or share informational data.

In another example, by comparing the fourth personal information with the third personal information, the personal information data collected or shared on average in the services included in the health/exercise category 1220 while the health care application 1210 is running You can check whether the operation of collecting or sharing other personal information data is performed.

The electronic device 200 according to an embodiment identifies, based on the comparison result, whether the health care application 1210 collects information different from the application included in the same or similar category, and determines whether the health care application 1210 . When it is determined that unnecessary personal information data is collected compared to applications included in the same or similar category, the operation of the electronic device for protecting the user's personal information data may be determined.

In addition, the electronic device 200 according to an embodiment may obtain execution files of the plurality of applications 1230 , perform static analysis, and identify fifth personal information set to be used by each application. Since the method for the electronic device to obtain executable files from each of the plurality of applications 1230 and to identify the fifth personal information is the same as the method for identifying the second personal information described with reference to FIG. 7 , a description thereof will be omitted herein. do.

The electronic device 200 according to an embodiment may compare fifth personal information set to be used in a plurality of applications 1230 included in the same or similar category with the first personal information to third personal information. Specifically, based on the fifth personal information, a plurality of applications included in the health/exercise category 1220 identify personal information data programmed to collect or share on average in order to provide a service, and the health care application 1210 ) may determine whether it is programmed to collect or share personal information data that is not collected or shared on average in the services included in the health/exercise category 1220 .

FIG. 13 is a diagram referenced to explain how the electronic device 200 identifies fourth personal information and fifth personal information from applications included in the same or similar category, according to an exemplary embodiment.

Referring to FIG. 13 , the electronic device 200 according to an embodiment is identical/similar on average based on the frequency of appearance of personal information data included in fourth personal information and fifth personal information from a plurality of applications. Personal information data frequently used in services of a category may be identified and compared with personal information data included in the first personal information to the third personal information. For example, the electronic device 200 includes an application A 1310 , an application B 1320 , an application C 1330 , and an application D that are included in the same or similar category as the health care application 1300 that provides a health care service. (1340), … , it is possible to identify the fourth personal information A to the fourth personal information N for the application N (1350). The electronic device 200 identifies personal information data generally collected by applications included in the same or similar category and personal information data exceptionally collected based on the identified fourth personal information, and the first personal information to It is possible to identify whether the personal information data included in the third personal information is generally collected personal information data or exceptionally collected personal information data. Also, the electronic device 200 may identify the fifth personal information A to the fifth personal information N. On the basis of the identified fifth personal information, the electronic device 200 collects personal information data normally collected by applications included in the health/exercise category and applications included in the same or similar category and exceptionally collected personal information data based on the identified fifth personal information. can be identified.

14 is a diagram to help understanding of FIGS. 12 to 13 , wherein the electronic device 200 according to an embodiment identifies and compares fourth personal information and fifth personal information from applications included in the same or similar category. It is a flowchart referenced to explain the method.

Although not shown in the drawings, the electronic device 200 may perform the operation of identifying the first to third personal information of FIG. 3 and the operation of identifying the fourth to fifth personal information of FIG. 14 sequentially or in parallel. can When the electronic device 200 determines an operation for protecting personal information data based on a result of comparing the first to third personal information, the determination may be made by further using the fourth personal information and the fifth personal information.

In operation S1410, the electronic device 200 may obtain policy data indicating a user's personal information processing policy related to a plurality of other services included in the same or similar category to the service provided by the electronic device.

In operation S1420, the electronic device 200 may identify fourth personal information, which is personal information used by each other service to provide a service, from the obtained policy data. In this case, the obtained policy data may be a URL (Uniform Resource Locator) of a personal information processing policy document of each other service or a personal information processing policy document file in the form of html, but is not limited thereto.

In operation S1430 , the electronic device 200 may obtain executable files of applications that provide the plurality of different services, and may acquire application codes from each of the obtained executable files. The executable files may be application program files in EXE format or APK format, but are not limited thereto, and the method of obtaining the code of the application may decompile the executable file to obtain the code, but is not limited thereto.

In step S1440, the electronic device 200 performs static analysis on the obtained codes to determine which personal information data of a plurality of other applications are programmed to collect or share of the user or the user's personal information A fifth personal information may be identified, including whether the data is programmed to be sent to.

In operation S1450, the electronic device 200 may compare at least one of the first personal information, the second personal information, and the third personal information with at least one of the fourth personal information and the fifth personal information. Through this, in the method for the electronic device 200 to compare the first to third personal information to protect the user's personal information data, by further using at least one of the fourth personal information and the fifth personal information, the electronic device It is possible to determine whether the application providing the service collects or shares personal information data that is different from the personal information data collected or shared by other applications on average.

In operation S1460, the electronic device 200 may determine an operation of the electronic device to protect the user's personal information based on the comparison result in operation S1450. Since the operation of the electronic device has been described with reference to FIG. 10 , a description thereof will be omitted herein.

The method for the electronic device to analyze the personal information processing policy according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention, or may be known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like.

In addition, the cooking information providing method according to the disclosed embodiments may be provided by being included in a computer program product. Computer program products may be traded between sellers and buyers as commodities.

The computer program product may include a S/W program and a computer-readable storage medium in which the S/W program is stored. For example, computer program products may include products (eg, downloadable apps) in the form of S/W programs distributed electronically through manufacturers of electronic devices or electronic markets (eg, Google Play Store, App Store). there is. For electronic distribution, at least a portion of the S/W program may be stored in a storage medium or may be temporarily generated. In this case, the storage medium may be a server of a manufacturer, a server of an electronic market, or a storage medium of a relay server temporarily storing a SW program.

The computer program product, in a system consisting of a server and a client device, may include a storage medium of the server or a storage medium of the client device. Alternatively, if there is a third device (eg, a smart phone) that is communicatively connected to the server or the client device, the computer program product may include a storage medium of the third device. Alternatively, the computer program product may include the S/W program itself transmitted from the server to the client device or the third device, or transmitted from the third device to the client device.

In this case, one of the server, the client device and the third device may execute the computer program product to perform the method according to the disclosed embodiments. Alternatively, two or more of a server, a client device, and a third device may execute a computer program product to distribute the method according to the disclosed embodiments.

For example, a server (eg, a cloud server or an artificial intelligence server) may execute a computer program product stored in the server to control a client device communicatively connected with the server to perform the method according to the disclosed embodiments.

Although the embodiments have been described in detail above, the scope of the present invention is not limited thereto, and various modifications and improvements by those skilled in the art using the basic concept of the present invention as defined in the following claims are also included in the scope of the present invention. belongs to

Claims (19)

In a method for an electronic device to protect a user's personal data related to an application,
acquiring policy data indicating a user's personal information processing policy related to the service provided by the electronic device;
identifying first personal information to be used to provide the service from the obtained policy data;
identifying second personal information set to be used by the application from the executable file of the application providing the service;
identifying third personal information used by the application while the application is running;
comparing the first personal information identified from the policy data, the second personal information identified from an executable file of the application, and the third personal information used by the application; and
and determining an operation of the electronic device to protect the user's personal information data based on the comparison result. According to claim 1,
The step of determining the operation of the electronic device includes:
When the second personal information or the third personal information includes personal information data that is not included in the first personal information, outputting notification information notifying that the application violates the privacy policy; How to. According to claim 1,
The step of determining the operation of the electronic device includes:
When the second personal information or the third personal information includes personal information data not included in the first personal information,
and obfuscation of the personal information data included in the second personal information or the third personal information and not included in the first personal information. According to claim 1,
The step of determining the operation of the electronic device includes:
When the second personal information or the third personal information includes personal information data not included in the first personal information,
and restricting an operation of the application using the personal information data included in the second personal information or the third personal information and not included in the first personal information. According to claim 1,
The step of identifying the first personal information,
Identifies the first personal information based on the data output by applying the policy data representing the obtained personal information processing policy to a Natural Language Understanding (NLU) model that performs semantic role labeling How to. 6. The method of claim 5,
generating summary information of the personal information processing policy based on the first personal information; and
The method further comprising outputting the generated summary information. According to claim 1,
The first personal information is,
A method that includes a list of the user's personal information data that is collected and the purpose for which the personal information data is collected. According to claim 1,
determining a category of the service;
acquiring a plurality of policy data indicating the user's personal information processing policies related to a plurality of other services included in the same category as the determined category of the service;
Further comprising the step of identifying, from each of the plurality of policy data, fourth personal information to be used for the plurality of different services,
The comparing step is
and comparing the first personal information, the second personal information, the third personal information, and the fourth personal information. 9. The method of claim 8,
Further comprising the step of identifying fifth personal information set to be used by the plurality of other applications from each of the executable files of the plurality of other applications that provide the plurality of different services,
The comparing step is
and comparing the first personal information, the second personal information, the third personal information, the fourth personal information, and the fifth personal information. In the electronic device for protecting the user's personal information data related to the application,
communication department;
output unit;
a memory that stores one or more instructions; and
a processor that executes the one or more instructions stored in the memory;
including,
The processor is
acquiring policy data indicating a user's personal information processing policy related to the service provided by the electronic device;
Identifies first personal information to be used to provide the service from the obtained policy data,
Identifies second personal information set to be used by the application from the executable file of the application providing the service,
identify third personal information used by the application while the application is running;
comparing the first personal information identified from the policy data, the second personal information identified from an executable file of the application, and the third personal information used by the application;
An electronic device that determines an operation of the electronic device for protecting the user's personal information data based on the comparison result. 11. The method of claim 10,
The processor is
When the second personal information or the third personal information includes personal information data not included in the first personal information, the output unit to output notification information informing that the application violates the privacy policy Controlling electronics. 11. The method of claim 10,
The processor is
When the second personal information or the third personal information includes personal information data not included in the first personal information,
An electronic device for obfuscation of the personal information data included in the second personal information or the third personal information and not included in the first personal information. 11. The method of claim 10,
The processor is
When the second personal information or the third personal information includes personal information data not included in the first personal information,
An electronic device for restricting an operation of the application using the personal information data included in the second personal information or the third personal information and not included in the first personal information. 11. The method of claim 10,
The processor is
Identifies the first personal information based on the data output by applying the policy data representing the obtained personal information processing policy to a Natural Language Understanding (NLU) model that performs semantic role labeling electronic device. 15. The method of claim 14,
The processor is
Based on the first personal information, generate summary information of the personal information processing policy,
An electronic device for outputting the generated summary information. 11. The method of claim 10,
The first personal information is,
An electronic device containing a list of the user's personal information data that is collected and the purpose for which the personal information is collected. 11. The method of claim 10,
The processor is
Obtaining a plurality of policy data indicating the user's personal information processing policies related to a plurality of other services included in the same category as the determined category of the service,
from each of the plurality of policy data, identify fourth personal information to be used for the plurality of other services,
When comparing the first personal information, the second personal information, and the third personal information, the electronic device further uses the fourth personal information for comparison. 18. The method of claim 17,
The processor is
Identifies fifth personal information set to be used by the plurality of other applications from each of the executable files of the plurality of other applications that provide the plurality of different services,
When comparing the first personal information, the second personal information, the third personal information, and the fourth personal information, the electronic device further uses the fifth personal information for comparison. A computer-readable recording medium in which a program for executing the method of claim 1 in a computer is recorded.

Images