The rapid development of the digital economy has increased the value of data, but at the same time, the gap and contradiction between data value and data security have intensified. "Just after chatting with a friend on my phone, the relevant advertisement came"; "I don't understand why an app that listens to a song or reads has to get my location information"... In daily life, many people will encounter the above mobile phone privacy leakage situation.
Not only that, there is also a risk of personal privacy leakage being "killed by big data". In order to solve the problem of user privacy leakage, in addition to legal supervision and industry self-discipline, more and more mobile phone manufacturers have also begun to pay attention to data and privacy protection issues. At the 2021 Vivo Developer Conference held on December 16, Vivo officially released the OriginOS Security White Paper to the world, showing vivo's thinking on security and privacy protection to users and the industry more transparently.
Shen Wei, founder, president and CEO of vivo, believes that "data security and privacy protection are the basic rights of consumers and the cornerstone for enterprises to gain consumer trust, and we must take data security, privacy protection and compliance as the red line and basic bottom line that enterprises must never touch in their R&D and business activities to guide the development of various work." These 80 words clarify Vivo's attitude towards security and privacy protection, and put forward Vivo's overall security strategy.
In fact, Vivo's investment in security has penetrated into every detail of product development, design and operation, and has played the role of "privacy gatekeeper" for mobile phone users.
Clarify the three principles of privacy protection
Data is a basic factor of production in the digital age, whether it is society, business or individuals, the dependence on data has led to increasing privacy challenges at all levels.
In view of the user's data security problems, since the beginning of this year, the Ministry of Industry and Information Technology has repeatedly increased the efforts of App rectification. On December 9, the official public account of The Industrial Information Micro-news said that on November 3, for the App beyond the scope, high frequency of permission, non-service scenarios necessary to collect user personal information, deception and misleading users to download and other violations of the inspection, as of now, a total of 106 Apps have been removed due to failure to rectify according to the requirements.
In the era of mobile Internet, user information protection and privacy security have never been a single link and a single supervision problem, which requires the joint participation and efforts of the whole industry. As a mobile phone manufacturer with high shipments in the domestic market, vivo has summarized and clarified the three basic principles of privacy protection after in-depth analysis and insight into the industry and combined with internal practices: transparency and controllability, privacy-side processing, and data minimization.
Specifically, transparency and controllability means that the use of private data of each application service on the device can be viewed and controlled; privacy-side processing means that private data provides various customized services without leaving the device; and data minimization, whether it is data collection, or data processing and sharing, must meet the minimum necessary principle under the premise of compliance.
It is reported that the three principles of privacy protection have been integrated into the whole process of design, implementation and operation of vivo products and services. In the full link of data flow and the whole scenario of user experience, the privacy of users is fully protected.
Make every effort to protect the privacy and security of users
The core of vivo's corporate culture is "duty", corresponding to the protection of user privacy, that is, vivo regards privacy and security as the basic right of users. All departments and employees must proactively see it as a "red line" and incorporate it into the product design and development process.
From the current actual situation, the user's privacy and information acquisition and infringement are from many aspects, which requires mobile phone companies to have complete technology and innovation capabilities to comprehensively protect the privacy of users. In order to realize vivo's security and privacy protection strategy and practice the three principles of privacy protection, vivo has created a complete privacy protection system from basic security management and process, to hardcore security technology, to PROTECT security strategy, from security strategy awareness to security capacity building.
In addition, under the security strategy, Vivo has also incubated the Thousand Mirrors security architecture. It is based on privacy protection defaults and design-driven principles and is built into vivo devices. These devices are protected by Thousand Mirrors, which build a complete privacy protection matrix by protecting users' data security and privacy through trusted multi-layered hardware and software functions.
On the chip, vivo has a built-in hardware trust root to protect user privacy from the most basic hardware; at the kernel layer, vivo provides a trusted execution environment to improve the level of privacy protection; at the framework layer, vivo uses trusted measurements to sense the device security level at any time; in the application layer, vivo protects the input of sensitive data through trusted interaction.
As Vice President of Vivo and President of Vivo AI Global Research Institute said earlier, "We need hard-core technology, and we need humanistic care." In addition to using technology to protect user privacy, users also need more transparent and controllable security design, more elegant and easy-to-use security experience, and more attention to the privacy protection needs of special human rights.
Based on this, vivo put forward three specific measures, namely the atomic privacy system, based on independent hardware encryption and fine particles of permission management construction, tap the fingerprint, you can switch to the private mobile phone space; "application searchlight" not only realizes the visibility of application behavior, but also realizes the identification and prompting of application risk behavior, so that "your application is your master". In addition, when users share pictures, vivo also provides a picture to privacy function, which can remove data such as photo time and photo location to prevent privacy leakage.
It is understood that Vivo's efforts in security and privacy protection have been recognized by many authoritative institutions around the world, and have obtained a number of strict security and privacy protection certifications. This means that Vivo has reached an industry-leading level of security.
It is worth mentioning that as of now, vivo has participated in the formulation of more than 100 national standards, industry standards and group standards related to security and privacy protection, in order to work with other manufacturers in the industry to jointly improve the overall security and privacy protection level of the industry. On the road of science and technology, information security is an important link that cannot be ignored under any circumstances. "Using the latest and best technology to protect user privacy is vivo's unremitting pursuit."
Under the leadership of vivo and other enterprises, a complete network security system has gradually taken shape, and a new and more secure digital life may be coming. Looking forward to the future, Vivo said that it will continue to use the world's strictest safety standards to demand itself, and constantly test and improve its security capabilities. At the same time, vivo will also actively participate in the formulation of security and privacy protection standards with an open attitude.