TWI767548B - Methods and systems for operating user devices having multiple operating systems - Google Patents

Abstract

The embodiments of the present invention relate to a method and system for operating user devices having multiple operating systems. In some embodiments, the method comprises: accessing operating system booting rules set up by a configuration module based on the using location of the user device; detecting the using location of the user device by a monitoring module; based on the operating system booting rules, loading a corresponding operating system in response to the monitoring module detecting in which restricted zone the user devise is being used. In some embodiments, the system comprises: a configuration module, which sets up operating system booting rules based on the using location of the user device; and a monitoring module configured to detect the using location of the user device.

Description

Method and system for operating a user device having multiple operating systems

Embodiments of the present invention relate to methods and systems for operating user devices having a plurality of operating systems.

For many individuals and corporate employees, personal devices are essential for carrying and processing data. The personal device is installed with an operating system, which is responsible for managing the hardware and software resources of the personal device and providing software services to users. For enterprises, the personal devices of enterprise employees must be securely controlled through the information technology (IT) system of the enterprise to ensure that the confidential information of the enterprise is not accessed by unauthorized users. The operating system is controlled. However, existing security controls may cause inconvenience to users of personal devices or unduly increase business costs. Therefore, there is a need for an improved security control measure.

Some embodiments of the present invention relate to a method for operating a user device having a plurality of operating systems, the method comprising: accessing an operating system activation rule set by a configuration module based on a usage location of the user device; The use position of the user device is detected by the monitoring module; based on the operating system activation rule, the user device is loaded into the first operating system in response to the monitoring module detecting that the use position is located in the first work area.

Some embodiments of the present invention relate to a method for operating a user device having a plurality of operating systems, the method comprising: accessing an operating system activation rule set by a configuration module based on a usage location of the user device; The use position of the user device is detected by the monitoring module; based on the operating system activation rule, the user is automatically switched in response to the monitoring module detecting that the use position is changed from the first work area to the second work area The operating system of the device, wherein the automatic switching of the operating system of the user device comprises: maintaining the power-on state of the user device; storing and encrypting the data of the first operating system; closing the first operating system; and loading the second operation system.

Some embodiments of the present invention relate to a system for operating a user device having a plurality of operating systems, comprising: an ambient signal source; a communication medium sent from the ambient signal source; and a user device having a plurality of operating systems , which includes: a configuration module that sets operating system startup rules based on the usage location of the user device; and a monitoring module that receives the communication medium and is configured to detect the usage location of the user device ; wherein the user device performs the following steps based on the operating system activation rule: in response to the monitoring module detecting that the user device is located in the first work area, start the first operating system; or in response to the monitoring module detecting The user equipment is changed from the first working area to the second working area, and the operating system of the user equipment is automatically switched, wherein the automatic switching of the operating system of the user equipment includes: maintaining the power-on state of the user equipment; saving and encrypting the data of the first operating system; shutting down the first operating system; and loading the second operating system.

The following disclosure provides many different embodiments or examples for implementing different features of the provided subject matter. Specific examples of components and arrangements are described below to simplify embodiments of the invention. Of course, these are merely examples and are not intended to be limiting. Additionally, the present embodiments may repeat reference numerals and/or letters in various instances. This repetition is for the purpose of simplicity and clarity, and does not in itself represent a relationship between the various embodiments and/or configurations discussed.

The term "coupled" as used throughout the present embodiments describes a direct or indirect connection between two or more devices or elements. In some cases, coupling between at least two devices or elements refers to only electrical or conductive connections therebetween, and intervening features may be present between the coupled devices and elements. In some other cases, the coupling between at least two devices or elements may involve body contact and/or electrical connection.

In an enterprise or company, different work areas, such as offices, laboratories or production lines, may have different security regulations or allow different permissions for employees' computers or mobile devices, and need to use different operating systems. On the other hand, in different work situations, for example, information technology (IT) system administrators may need to use different operating systems during document processing or IT system management. In response to the above requirements, some companies or enterprises will set up computers with different security specifications in different work areas. However, this will result in employees having more than one computer in different work areas, thereby increasing the cost of the company or enterprise. The existing dual-booting system allows users to run different operating systems on the same computer or mobile device; however, the user must select the operating system to be turned on when booting, which causes inconvenience in use. .

In some embodiments of the present invention, a method for operating a user device having a plurality of operating systems is provided, and the method can automatically turn on or switch the corresponding operating system according to different usage positions of the user device, wherein by monitoring The module is used to detect which control area the user device is used in (for example: office, laboratory, production line, or outside the company/enterprise, etc.), and configure the module to set up the operating system of the user device to start Rules, the operating system startup rules are set based on different control areas, for example: in the office, the office operating system such as enterprise version Windows is allowed to be executed; in the production line, the production line operating system such as Linux is allowed to be executed; outside the company/enterprise It allows the execution of external operating systems such as home edition Windows; when in a risky state, it enters encryption mode, etc.

According to the method provided by some embodiments of the present invention, a user device having a plurality of operating systems will automatically load the operating system when booting, so the user does not need to select the operating system to be executed when booting, thus improving the convenience of use security; on the other hand, may reduce or eliminate the user's attempts or opportunities to log into an operating system that is not allowed, thereby increasing security. For example, a user turns on the power of the user device in the office, the system of the user device sets up operating system startup rules through the configuration module, and responds to the monitoring module detecting the user device It is located in the office, and automatically starts the office operating system such as enterprise version Windows, the user does not need to click to enter the office operating system, the production line operating system or the external operating system.

According to the method provided by some embodiments of the present invention, after the user device having a plurality of operating systems executes the operating system, the monitoring module continues to detect the use position of the user device. When a change in the location of use is detected, such as changing from an office area to a production line, the user device will automatically save and encrypt the programs executed by the original operating system, and close the original operating system, thereby enhancing security control. , Improve data security; at the same time, in response to the detected new location, automatically switch to the corresponding operating system, thereby improving the convenience of use. For example, after the user device in the office automatically starts the office operating system, the monitoring module continues to detect the use position of the user device, if the use position of the user device leaves the office, for example: the user device When it is carried from the office to the production line, the monitoring module will detect that the use position is moved from the office to the production line. At this time, the user device will automatically store the program data of the office operating system, encrypt it, and close it. In the office operating system, the data of the office operating system cannot be accessed, and at the same time, the production line operating system is automatically activated in response to detecting that the new use position is located in the production line.

FIG. 1 is a schematic diagram of an application scenario 10 for operating a user device having a plurality of operating systems according to some embodiments. An organization (eg, company/enterprise 100 ) may be divided into different work areas, such as a first work area 101 and a second work area 102 , and the different work areas may be offices, laboratories, or production lines. In some embodiments, the first work area 101 and the second work area 102 have different information security specifications, or allow the use of different operating systems. In some embodiments, the first work area 101 and the second work area 102 have different work contexts. For example, the first work area 101 may be an office for document processing, and the second work area 102 may be a production line for operating production machines. In addition, company/enterprise 100 sets up and operates information technology (IT) systems that are distributed in offices, laboratories, and/or production lines, etc. and are used by at least one server and several including exemplary user devices 104, 105, 106 device composition. The IT system also includes wireless networks 111, 112 and/or wired networks 121, 122 connected to one or more of the servers and user devices in the IT system, wherein the wireless network 111 and/or the wired network 121 are configured In the first work area 101 , the wireless network 112 and/or the wired network 122 are arranged in the second work area 102 . In some embodiments, the location of use of the user devices 104 , 105 is within the company/enterprise 100 . In some embodiments, the user device 104 is located in the first work area 101 and is connected to the wireless network 111 and/or the wired network 121 provided in the first work area 101 . In some embodiments, the use location of the user device 105 is located in the second work area 102 inside the company/enterprise 100 , which is connected to the wireless network 112 and/or the wired network 122 set in the second work area 102 . In some embodiments, the user device 106 is used at a location outside the company/enterprise 100, which is connected to an external wireless or wired network. In some embodiments, wireless networks 111, 112 and/or wired networks 121, 122 include network interface equipment, cables, wired/wireless transceivers, and other network components. In some embodiments, the servers include at least a domain name server, a key server, a domain controller and a data server. In some embodiments, confidential data of the company/enterprise 100 (eg, product design and manufacturing data, employee statistics, and marketing and customer information) is stored on the server and can be qualified by one or more of the company/enterprise 100 employees based on their personal access level and data security level.

In some embodiments, the user devices 104 , 105 , 106 belong to and are managed by the IT system of the company/enterprise 100 . User devices 104, 105, 106 can be fixed or mobile devices that can store data, such as desktop computers, cellular phones, notebook computers, tablet computers, personal digital assistants (PDAs), portable storage devices, video/ Audio signal transceiver or similar. In some alternative embodiments, the user devices 104, 105, 106 are stationary devices such as desktop computers, wired communication devices, server terminals, or the like. In some embodiments, the user devices 104, 105, 106 are mobile devices, such as PDAs, smart phones, cell phone tablets, notebook computers, tablet computers, wearable devices, or the like. In some embodiments, the user devices 104, 105, 106 are equipped with a wired or wireless interface for communicating with a management entity (eg, a server) of the company/enterprise 100 via the host line or wirelessly. In some embodiments, the user devices 104 , 105 , 106 may be carried to different work areas (eg, the first work area 101 , the second work area 102 ), or even outside the company/enterprise 100 .

In some embodiments, the first work area 101, the second work area 102 may be defined by physical boundaries or virtual boundaries. In some embodiments, the first work area 101 is defined by the range within the signal coverage of the wireless network 111 , or by the range reached by the wired network 121 . In some embodiments, the second work area 102 is defined by the range within the signal coverage of the wireless network 112 or by the range reached by the wired network 122 . In some embodiments, the first work area 101 and the second work area 102 are defined by the communication medium 206 emitted by the environmental signal source 204 described below, such as GPS signals, Wi-Fi signals, cellular network signals (such as GSM signals) ), an RFID signal, an NFC signal, a Bluetooth signal, an ultrasonic signal, a combination thereof, or the like.

In some embodiments, the user device 104 is connected to the wireless network 111 or the wired network 121 set up in the first work area 101, so it is determined that the user device is located in the first work area 101; the user device 105 is connected to the first work area 101. The second work area 102 has the wireless network 112 or wired network 122, so it is determined that the user device is located in the second work area 102; the user device 106 is carried outside the company/enterprise 100 and cannot be connected to any company/enterprise 100's wireless network or wired network, so it is determined that the user device 106 is outside the company/enterprise.

FIG. 2 schematically shows a system 20 for operating a user device having a plurality of operating systems, according to some embodiments. The system 20 includes a user device 202 , an environmental signal source 204 and a communication medium 206 , wherein the user device includes a processor 210 , a memory 212 , a basic input output system (BIOS) 230 , a storage device 214 , and a configuration module 216 , the monitoring module 218 and the encryption module 220 , wherein the storage device 214 stores a plurality of operating systems, such as a first operating system 240 , a second operating system 242 , and a third operating system 244 . The user device may also include an input device, an output device, a power supply, a network interface unit, a power control unit, a bus bar, etc. (not shown). The monitoring module 218 can be used to receive the communication medium 206 sent by the environmental signal source 204 , or the monitoring module 218 can be connected to the environmental signal source 204 via the communication medium 206 . In some embodiments, the user device 202 is the user device 104, 105, 106 described above.

The environmental signal source 204 is used to send out the communication medium 206, which may be managed by the IT system of the organization (eg, the company/enterprise 100). In some embodiments, there are a plurality of environmental signal sources 204 within an organization (eg, company/enterprise 100 ), which are installed in different work areas such as the first work area 101 and the second work area 102; the environment The signal source 204 in different work areas sends out a communication medium 206 that implies the location information of the work area. In some embodiments, the ambient signal source 204 is a network server of a wireless network or a wired network. For example, the ambient signal source 204 may be the network server of the aforementioned wireless networks 111, 112 or the wired networks 121, 122. In some embodiments, the ambient signal source 204 is, for example, a GPS signal source, a Wi-Fi signal source, a cellular network signal (eg, GSM) source, an RFID signal source, an NFC signal source, a Bluetooth signal source, an ultrasonic signal source, etc. combination or similar. In some embodiments, the communication medium 206 is a GPS signal, a Wi-Fi signal, a cellular network signal (eg, GSM), an RFID signal, an NFC signal, a Bluetooth signal, an ultrasonic signal, a combination thereof, or the like. For example, the communication medium 206 may be the wireless network signal of the aforementioned wireless networks 111, 112. In some alternative embodiments, the communication medium 206 may be a signal of a wired network, such as the signals of the wired networks 121, 122 described above. In some embodiments, ambient signal source 204 is authorized by an organization (eg, company/enterprise 100) and is configured to give communication medium 206 an authenticating identification, or is configured to encrypt communication medium 206, such as The communication medium 206 is encrypted with an authorized key.

The monitoring module 218 is configured to detect the usage location of the user device 202 . In some embodiments, the monitoring module 218 is a hardware device. In some embodiments, the monitoring module 218 is a receiver of the communication medium 206 that receives the communication medium 206 from the environmental signal source 204 . In some embodiments, the monitoring module 218 reads location information implicit in the communication medium 206 . In some embodiments, the monitoring module 218 uses the location information in the communication medium 206 to determine which control area the user device 202 is located in (for example, the first work area 101, the second work area 102 or the company/ external to enterprise 100), these control zones allow users to start different operating systems. In some embodiments, the monitoring module 218 is a coordinate locator, such as a GPS coordinate receiver or transceiver, which obtains the use position coordinates of the use device 202 from the communication medium 206 and interprets which control area the use position coordinates are located in ( For example: the aforementioned first work area 101, second work area 102, or outside the company/enterprise 100). In some embodiments, the communication medium 206 is a signal of a wireless network (eg, the aforementioned wireless networks 111 , 112 ) or a signal of a wired network (eg, the aforementioned wired network 121 , 122 ), and the monitoring module 218 The IP address of the wireless network or the wired network can be read to determine which control area the user device 202 is located in (for example, the first work area 101, the second work area 102 or the company mentioned above) /enterprise 100 external). In some embodiments, the monitoring module 218 is configured to authenticate the communication medium 206 to determine whether the communication medium 206 is issued by an environmental signal source 204 authorized by an organization (eg, company/enterprise 100 ), the authentication This may be accomplished by one or more of the following: (1) the monitoring module 218 is configured to read the authentication identification information of the communication medium 206; or (2) the monitoring module 218 is configured to read the encrypted communication medium 206 Decryption is performed, such as decrypting the communication medium 206 using a key, which may be the same as or different from the key used to encrypt the communication medium 206 described above. In some embodiments, the monitoring module 218 performs detection of the usage location of the user device 202 before the user device 202 executes the boot command or starts the operating system. In some embodiments, after the user device 202 executes the boot command or starts the operating system, the monitoring module 218 performs detection of the usage location of the user device 202 . In some embodiments, the detection operations of the monitoring module 218 are performed in a periodic manner, such as at intervals having a period of 10 seconds, 15 seconds, or other suitable period. In some embodiments, the predetermined interval may be set to be greater than or equal to zero, eg, an event-triggered monitoring scheme may be employed concurrently with periodic monitoring.

The storage device 214 is configured to store program instructions executable by the processor 210 and data accessed by the program instructions. In some embodiments, storage device 214 includes a non-transitory computer-readable storage medium, such as a hard disk, solid state disk, flash memory, magnetic tape, optical disk, pen drive, or the like. In some embodiments, the storage device 214 stores instructions and data for the operating system of the user device 202 . In some embodiments, the storage device 214 stores instructions and data of a plurality of operating systems, such as the first operating system 240 , the second operating system 242 , and the third operating system 244 . In some embodiments, the first operating system 240, the second operating system 242, and the third operating system 244 are each independently Microsoft Windows, Apple Mac OS, Linux, UNIX, or different versions thereof. In some embodiments, the first operating system 240, the second operating system 242, and the third operating system 244 are each independently Android, iOS, Symbian, Microsoft Mobile, Microsoft Phone, or different versions thereof. In some embodiments, the storage device 214 is divided into different storage areas, and the first operating system 240 , the second operating system 242 , and the third operating system 244 are respectively stored in different partitions of the storage device 214 ; in some alternative embodiments , the user device 202 includes a plurality of storage devices (not shown), and the first operating system 240 , the second operating system 242 , and the third operating system 244 are respectively stored in different storage devices. In some embodiments, the storage device 214 is a hard disk device, which includes a master boot record (MBR; also known as a master boot volume), where the master boot record stores a magic number, a partition table (partition table) table) and boot loader (boot loader), wherein the magic number is used as the identification code of the master boot record, which allows other programs (such as: basic input output system (BIOS)) to identify the location of the master boot record; the The partition table records the information of each partition in the hard disk device, such as the format, size and location of each partition in the hard disk device; the boot loader is used as the boot program to start the operating system, when the boot loader After being loaded into the memory 212 and executed by the processor 210, it will load the first operating system 240, the second operating system 242 or the third operating system 244 into the memory 212 to start the corresponding operating system.

Memory 212 is configured to store program instructions to be executed by processor 210 and data accessed by the program instructions. In some embodiments, memory 212 includes volatile memory devices, non-volatile memory devices, or combinations thereof. In some embodiments, memory 212 includes read only memory (ROM) devices, random access memory (RAM) devices, flash memory devices, or combinations thereof. In some embodiments, memory 212 stores a basic input output system (BIOS) 2023 of user device 202 that is configured to perform hardware initialization and hardware testing during the boot process of user device 202 . In some embodiments, BIOS 230 is stored in a ROM device or a flash memory device of memory 212 . In some embodiments, the BIOS 230 performs a search for the master boot record in the storage device 214 described above, and loads the master boot record into the memory 212, such as a RAM device of the memory 212, and then executes the main boot record described above. The boot loader in the boot record is used to load the first operating system 240 , the second operating system 242 and the third operating system 244 into the memory 212 through the boot loader. In some embodiments, the aforementioned first OS 240 , second OS 242 , and third OS 244 are RAM devices loaded into memory 212 .

Processor 210 is configured to execute program instructions stored in memory 212 or storage device 214 . The processor 210 may be a central processing unit (CPU), a microprocessor, or an application specific integrated circuit (ASIC). In some embodiments, when user device 202 is turned on, processor 210 is configured to load BIOS 230 from memory 212 to perform hardware and firmware initialization and testing. In some embodiments, the processor 210 is configured to load program instructions from the operating system stored in the storage device 214 during or after the execution of the startup procedure of the user device 202 . In some embodiments, the processor 210 is configured to execute the operating system startup rules set by the configuration module 216 and the instructions of the monitoring module 218 .

The configuration module 216 is configured to set operating system startup rules for the user device 202 based on where the user device 202 is used. In some embodiments, the usage location is detected by the monitoring module 2024 described above. In some embodiments, the configuration module is a software program, which may be stored in, for example, but not limited to, memory 212, storage device 214, or the like. In some embodiments, the configuration module 216 is limited by a system administrator (such as the IT system administrator of the company/enterprise 100) to modify the authority, and the configuration module can be modified only with the authorization of the system administrator, For example, the configuration module 216 can be modified only by obtaining a specific key issued by the system administrator for unlocking, or only by the system administrator. In some embodiments, the operating system startup rule is to allow the corresponding operating system to be started or to enter the encryption mode according to the detected usage location. For example, the operating system startup rule may be, but not limited to: when the monitoring module 218 detects that the user device 202 is located in the first work area 101, the first operating system 240 is executed; when the monitoring module 218 When it is detected that the user device 202 is located in the second work area 102, the second operating system 242 is executed; when the monitoring module 218 detects that the user device 202 is located outside the company/enterprise 100, the second operating system 242 is executed. Three operating system 244 or enter encryption mode. In some embodiments, the operating system startup rule is to shut down the running operating system and start another operating system or enter an encrypted mode according to the detected change of the usage location. For example, the operating system startup rule may be, but is not limited to: when the monitoring module 218 detects that the user device 202 is changed from the first work area 101 to the second work area 102, the execution of the first work area 102 is closed. An operating system 240 is opened, and the second operating system 242 is turned on; when the monitoring module 218 detects that the use position of the user device 202 is changed from the second work area 102 to the outside of the company/enterprise 100, the second operation being executed is closed system 242, and start the third operating system 244 or enter the encryption mode. In some embodiments, the operating system startup rule further includes storing data of the operating system before shutting down the operating system. In some embodiments, the operating system startup rule further includes encrypting data on the operating system before shutting down the operating system. In some embodiments, the BIOS 230/boot loader reads the usage location detected by the monitoring module 218 based on the operating system startup rules set by the configuration module 216, and starts the corresponding operating system accordingly . In some embodiments, starting the corresponding operating system includes loading the corresponding operating system from the storage device 214 to the memory 212, and transferring control of the processor 210 to the corresponding operating system.

In some embodiments, encryption module 220 includes encryption/decryption circuits or programs that are configured to perform encryption and decryption tasks for storage device 214 . In some embodiments, the encryption module 220 is implemented as a separate semiconductor chip (eg, a Trusted Platform Module (TPM) chip) that uses specific hardware structures to perform encryption and decryption to save power and time. In some embodiments, encryption and decryption are accomplished based on highly developed cryptography theory. For example, encryption module 220 performs encryption and decryption tasks based on keys known only to eligible users. Without the key, it is difficult or impossible for a malicious attacker to hack the storage device 214 and steal the data in the storage device 214 within a limited time. In some embodiments, the storage device 214 is encrypted by the encryption module 220 each time the user enters sleep mode or shuts down. In some embodiments, the power supply to the storage device 218 is turned off or reduced when the storage device 214 is in hibernate mode or sleep mode. When the user device 202 is powered on or woken up from hibernate mode or sleep mode, the user device 202 needs to access the key in order to decrypt the storage device 214 . In some embodiments, the encryption module 220 key is provided only by the company/enterprise 100 , eg, via a key server, and is the only way to boot the operating system from the storage device 214 . The user device 202 needs to be connected to the key server of the company's IT system to receive the key. In some embodiments, the encryption module 220 key is stored in a specific location in the storage device 214 or in the memory 212 and can only be accessed by an independent key protection scheme. In some embodiments, the key received from the key server is used to authenticate the user's access token and thus enable another encryption/decryption key to perform encryption/decryption tasks. In such cases, the encryption/decryption key may be a private key selected from an asymmetric encryption framework, and may be implemented in equivalent circuits, minimizing the possibility of key theft.

3 is a flowchart of a method of operating a user device having a plurality of operating systems in accordance with some embodiments. In some embodiments, the method 30 shown in FIG. 3 may be used in the system 20 shown in FIG. 2 . It should be understood that additional operations/steps may be provided before, during, and after the various steps shown in FIG. 3, and in additional embodiments of method 30, portions of the operations described below may be replaced or removed; operations and The order of processing may also be interchanged; in addition, the same or similar configurations, structures, materials, or operations of one embodiment may also be used in other embodiments, and detailed explanations thereof may be omitted. In some embodiments, the user device is the user device 104, 105, 106 or 202 described above.

In step 302, the user device is powered on. In step 306, the user device accesses the operating system startup rules set by the configuration module. In some embodiments, the configuration module is the configuration module 216 described above. In some embodiments, the configuration module is a software program and is stored in memory (eg, memory 212), and step 306 includes direct access to the configuration module by the processor of the user device; in some alternatives In an embodiment, the configuration module is a software program and is stored in a storage device (eg, storage device 214 ), and the step 306 includes loading the configuration module into the memory of the user device and then storing the configuration module in the user device. The processor accesses the configuration module.

In step 308, the user device receives the communication medium sent by the environmental signal source through the monitoring module. In some embodiments, the monitoring module is the monitoring module 218 described above. In some embodiments, the ambient signal source is the ambient signal source 204 described above. In some embodiments, the communication medium is the communication medium 206 described above. In some alternative embodiments, step 308 includes connecting the user device to the ambient signal source 204 via the communication medium 206 . In some embodiments, in step 308, the user device 202 receives the communication medium 206 from the environmental signal source 204 via the monitoring module 218, and further verifies whether the communication medium 206 is organized by an organization (eg, company/enterprise 100). Sent by the authorized environmental signal source 204, wherein the communication medium 206 sent by the authorized environmental signal source 204 may have authentication identification information, and the system administrator (such as the IT system administrator of the company/enterprise 100 mentioned above) can use the The key is encrypted or a combination of the two, the authentication can be achieved by one or more of the following: (1) the monitoring module 218 is configured to read the authentication identification information of the communication medium 206; or (2) monitoring Module 218 is configured to decrypt encrypted communication medium 206 using the key. If the monitoring module 218 can successfully read the authentication identification information of the communication medium 206, the authentication is passed, and the process goes to step 310; or, if the monitoring module 218 can successfully decrypt the encrypted communication medium 206 with the key, pass the authentication Authenticate, and go to step 310.

In step 310, use the monitoring module to detect the usage position of the user device. In some embodiments, the monitoring module is the monitoring module 218 described above. In some embodiments, the monitoring module detects which control area the use location of the user device is located in by reading the location information implicit in the communication medium (for example, the first work area 101 and the second work area 102 ). or outside of Company/Enterprise 100). In some embodiments, the location information includes location coordinates, IP addresses, combinations thereof, or the like.

In step 312 , the monitoring module determines which control area the user device is located in (eg, the first work area 101 , the second work area 102 or outside the company/enterprise 100 ). Next, the user device responds to the determination result to activate the corresponding operating system based on the aforementioned operating system startup rule. If it is determined that the use position is located in the first work area (for example, the first work area 101 ), then go to step 314 to start the first operating system; if it is determined that the use position is located in the second work area (for example, the second work area 102 ), then Go to step 316, start the second operating system; if it is determined that the use location is located in a non-work area (for example, outside the company/enterprise 100), then go to step 318 to further determine whether the user device is authorized to be used in the non-work area; if If it is determined that the user device has been authorized to be used in the non-work area, then go to step 324 to start the third operating system; if it is determined that the user device has not been authorized to use in the non-work area, then go to step 322 to enable the use of the user device. The user device enters encryption mode. In some embodiments, the first operating system, the second operating system and the third operating system are the aforementioned first operating system 240 , the second operating system 242 and the third operating system 244 , respectively. In some embodiments, steps 314 , 316 , and 324 respectively include accessing the storage device or storage device partition where the first operating system, the second operating system, and the third operating system are located. In some embodiments, steps 314 , 316 , and 324 include loading the first operating system, the second operating system, and the third operating system into memory via a boot loader, respectively. In some embodiments, the encryption mode is achieved by the aforementioned encryption module 220 . In some embodiments, the encryption mode includes encrypting a storage device (eg, a hard disk) of the user device, locking an output device (eg, a display) of the user device, and hibernation of the user device or power off the user device, a combination thereof, or the like.

In step 320, the monitoring module continuously detects the use position of the user device, and the detection method is as described in step 310 above. In some embodiments, the detection operation of the monitoring module is performed in a periodic manner, such as at intervals of 10 seconds, 15 seconds, or other suitable periods. In step 326 , the monitoring module determines whether the use location of the user device has changed to another control area (eg, the first work area 101 , the second work area 102 , or outside the company/enterprise 100 ). If it is determined that the use location has not been changed to another control area, go to step 328 to maintain the operation of the operating system being executed; if it is determined that the use location has been changed to another control area, go to step 330 to store and encrypt the operation being executed system information. In some embodiments, after entering step 328, return to step 320 to continuously detect whether the use position of the user device is changed to another control area. In some embodiments, at step 330 , the running operating system data is stored in memory or a storage device, such as memory 212 or storage device 214 . In some embodiments, in step 330, the data of the running operating system is encrypted by the encryption module 220 described above.

In step 332, the operating system executed before the usage location change is shut down or put into a dormant state. In some embodiments, step 332 further includes maintaining the power-on state of the user device. After step 332, the process returns to step 312 to determine which control area the use position of the user device is located in, and then start the corresponding operating system according to the new use position.

According to one embodiment, a method of operating a user device having a plurality of operating systems includes: accessing an operating system activation rule set by a configuration module based on a usage location of the user device; The group detects the use position of the user device; based on the operating system activation rule, in response to the monitoring module detecting that the use position is located in the first work area, the user device is loaded into the first operating system.

According to one embodiment, a method of operating a user device having a plurality of operating systems includes: accessing an operating system startup rule set by a configuration module based on a usage location of the user device; The group detects the use position of the user device; based on the operating system activation rule, in response to the monitoring module detecting that the use position is changed from the first work area to the second work area, the operation of the user device is automatically switched The system, wherein the automatic switching of the operating system of the user device comprises: maintaining the power-on state of the user device; storing and encrypting data of the first operating system; shutting down the first operating system or making it hibernate; and loading Second operating system.

According to one embodiment, a system for operating a user device having a plurality of operating systems, comprising: an ambient signal source; a communication medium sent from the ambient signal source; and a user device having a plurality of operating systems, comprising: : a configuration module that sets operating system startup rules based on the usage location of the user device; and a monitoring module that receives the communication medium and is configured to detect the usage location of the user device; wherein the The user device performs the following steps based on the operating system activation rule: in response to the monitoring module detecting that the user device is located in the first work area, loading the first operating system; or in response to the monitoring module detecting the use The user device is changed from the first working area to the second working area, and the operating system of the user device is automatically switched, wherein the automatic switching of the operating system of the user device includes: maintaining the power-on state of the user device; storing and encrypting the first information of an operating system; shutting down the first operating system or putting it into hibernation; and loading the second operating system.

The foregoing outlines features of several embodiments so that those skilled in the art may better understand aspects of the embodiments of the invention. Those skilled in the art should appreciate that they may readily use the present embodiments as a basis for designing or modifying other processes and structures for carrying out the same purposes and/or achieving the same advantages of the embodiments described herein. Those skilled in the art should also realize that such equivalent constructions do not depart from the spirit and scope of the embodiments of the present invention, and that various modifications may be made herein without departing from the spirit and scope of the embodiments of the present invention. Alterations, substitutions and alterations. The various embodiments of the present invention can be combined with each other without departing from the spirit and scope of the present invention.

10: Application scenarios 20: System 30: Method 100: Company/Enterprise 101: The first work area 102: Second work area 104: User device 105: User device 106: User device 111: Wireless Network 112: Wireless Network 121: wired network 122: wired network 202: User device 204: Ambient signal source 206: Communication Medium 210: Processor 212: Memory 214: Storage Device 216: Configuration module 218: Monitoring module 220: Encryption Module 230: Basic Input Output System (BIOS) 240: First Operating System 242: Second Operating System 244: Third Operating System 302: Step 306: Steps 308: Steps 310: Steps 312: Steps 314: Steps 316: Steps 318: Steps 320: Steps 322: Steps 324: Steps 326: Steps 328: Steps 330: Steps 332: Steps

Aspects of embodiments of the invention are better understood from the following description when read in conjunction with the accompanying drawings. It should be noted that in accordance with standard practice in the industry, the various features are not drawn to scale. In fact, the dimensions of the various features may be arbitrarily increased or decreased for clarity of discussion.

FIG. 1 shows a schematic diagram of an application scenario for operating a user device with multiple operating systems according to some embodiments of the present invention.

2 shows a system for operating a user device having a plurality of operating systems in accordance with some embodiments of the present invention.

3 shows a flowchart of a method for operating a user device having a plurality of operating systems in accordance with some embodiments of the present invention.

20: System

202: User device

204: Ambient signal source

206: Communication Medium

210: Processor

212: Memory

214: Storage Device

216: Configuration module

218: Monitoring module

220: Encryption Module

230: Basic Input Output System (BIOS)

240: First Operating System

242: Second Operating System

244: Third Operating System

Claims (10)

A method of operating a user device having a plurality of operating systems, the method comprising: Access the operating system startup rules set by the configuration module based on the usage location of the user device; Detect the use position of the user device by the monitoring module; Based on the operating system activation rule, in response to the monitoring module detecting that the use position is located in the first working area, the first operating system of the user device is loaded into the first operating system. The method of claim 1, wherein the method further comprises receiving, by the monitoring module, a communication medium sent by an environmental signal source, wherein the environmental signal source is configured to assign an authentication identification information to the communication medium, and the method further Including reading the authentication identification information by the monitoring module. The method of claim 1, wherein the method further comprises receiving, by the monitoring module, a communication medium from an ambient signal source, wherein the ambient signal source is configured to encrypt the communication medium with a first key, and the The method further includes decrypting, by the monitoring module, the communication medium with a second key, wherein the first key and the second key are the same or different. The method of claim 1, wherein the configuration module is stored in memory of the user device and the user device directly accesses the configuration module, or the configuration module is stored in the storage of the user device and the user device loads the configuration module into the memory and then accesses the configuration module. The method of claim 1, wherein detecting the usage location of the user device comprises reading location information implicit in the communication medium, the location information including location coordinates, IP addresses, or a combination thereof. A method of operating a user device having a plurality of operating systems, the method comprising: Access the operating system startup rules set by the configuration module based on the usage location of the user device; Detect the use position of the user device by the monitoring module; Based on the operating system activation rule, in response to the monitoring module detecting that the use position is changed from the first work area to the second work area, the operating system of the user device is automatically switched, The operating system for automatically switching the user device includes: maintaining the power-on state of the user equipment; Store and encrypt the data of the first operating system; shut down or hibernate the primary operating system; and Load the second operating system. The method of claim 6, wherein the monitoring module periodically detects the usage position of the user device. 6. The method of claim 6, wherein the method further comprises receiving, by the monitoring module, a communication medium from an ambient signal source, wherein the ambient signal source is configured to give the communication medium an authentication identification, and the method further Including reading the authentication identification information by the monitoring module. A system for operating a user device having a plurality of operating systems, comprising: environmental signal source; the communication medium from the environmental signal source; and A user device having a plurality of operating systems, including: a configuration module that sets operating system startup rules based on the location of use of the user device; and a monitoring module that receives the communication medium and is configured to detect the usage location of the user device; The user device performs the following steps based on the operating system startup rule: in response to the monitoring module detecting that the user device is located in the first work area to load the first operating system of the user device; or In response to the monitoring module detecting that the user equipment is changed from the first working area to the second working area, the operating system of the user equipment is automatically switched, wherein the automatic switching of the operating system of the user equipment includes: maintaining the power-on state of the user equipment; Store and encrypt the data of the first operating system; shut down or hibernate the primary operating system; and Load the second operating system. As claimed in the system of item 9, wherein the modification authority of the configuration module is locked and must be unlocked with a key to modify it.

Images