WO2017024633A1

WO2017024633A1 - Identity authentication-based space switching method and device and terminal

Info

Publication number: WO2017024633A1
Application number: PCT/CN2015/088506
Authority: WO
Inventors: 李小辉
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-08-12
Filing date: 2015-08-30
Publication date: 2017-02-16
Also published as: CN105630592A

Abstract

An identity authentication-based space switching method, identity authentication-based space switching device and terminal. The identity authentication-based space switching method comprises: receiving an identity authentication key in a current user space (102); searching, according to the identity authentication key, a predetermined key database for a predetermined key consistent with the identity authentication key (104); and determining, according to the search result, whether to perform a space switch according to the identity authentication key (106). Via the method, whether a space switch is allowed is directly determined by a received identity authentication key, such that identity authentication is performed for the space switch, and in addition, a user does not have to activate a specific space switching interface or a space switching authentication interface each time the user performs a space switch. In particular, the present invention realizes, for a terminal having a screen locked, direct identity authentication and user space switching while the terminal is in the locked screen state.

Description

Identity-based space switching method, device and terminal

Technical field

The present invention relates to the field of terminal technologies, and in particular, to an identity-based space switching method, an identity-based space switching device, and a terminal.

Background technique

At present, system terminals of multiple operating systems have entered daily life, but multiple operating systems occupy resources of mobile terminals, such as CPU (Central Processing Unit) or large memory. In response to this problem, because users have higher and higher requirements on the performance and security of mobile terminals, multi-domain operation on mobile terminals is a good solution, which provides a lightweight system virtualization solution. Allow multiple users to run on one operating system, so each user can have their own user space, and the resources of each user space are isolated from each other.

However, users often need to switch to different user spaces under different circumstances. For example, when performing shopping, payment, etc., they need to enter a safe space operation. When the mobile terminal is played to children, it is necessary to enter the child space operation. In the middle, it is necessary to use the space switching method for user space switching. In the related art, most of the related art is to switch the user space through the switching entrance provided by the pull-down tray.

However, if the terminal is in standby, the screen is not lit, or the screen is locked, the above switching mode needs to sequentially light up the screen, unlock the screen, and click the switch to switch to the specified user space after the identity authentication succeeds, so that User space switching operations are cumbersome and inconvenient for users.

Therefore, a new technical solution is needed, which can simplify the operation of switching user space and improve the security of each user space.

Summary of the invention

The invention is based on the above problems, and proposes a new technical solution, which can simplify the user. The operation of switching the space improves the security of each user space.

In view of this, an aspect of the present invention provides an identity-based space switching method for a terminal having multiple user spaces, including: receiving an identity verification key in a current user space; and verifying a key according to the identity Retrieving, in the preset key database, whether there is a preset key consistent with the identity verification key; determining, according to the retrieval result, whether to perform space switching according to the identity verification key.

In this technical solution, multiple user spaces in the terminal share an operating system, which can reduce the requirements on the performance of the terminal. Resources sharing can be performed between multiple user spaces, and resource isolation can also be performed by using Namespace (namespace) technology. To ensure the privacy and security of each user space. On the basis of this, the technical solution of the present invention can be used to verify whether space switching can be performed directly according to the received identity verification key in the unlocked state of the terminal, or by receiving the identity authentication secret in the lock screen state of the terminal. The key performs the dual functions of identity authentication and user space switching at the same time, so that the authentication is provided for the space switching, and the user does not need to open the specific space switching interface or the space switching verification interface every time the space switch is performed, for example, The dual function of identity authentication and user space switching is directly completed in the lock screen state of the terminal, which not only simplifies the user operation, but also improves the security of each user space and improves the user experience.

In the above technical solution, preferably, determining, according to the retrieval result, whether to perform spatial switching according to the identity verification key, specifically: when determining that the preset key database has the identity verification key When the preset key is used, the current user space is switched to the target user space corresponding to the preset key. Otherwise, space switching is prohibited.

In the technical solution, the preset key database of the terminal has a preset key corresponding to each user space, and only the received identity verification key is consistent with a preset key stored in the preset key database. In the case of the authentication, the user can switch to the user space corresponding to the preset key. Through the technical solution, the dual functions of identity authentication and user space switching are realized, which simplifies user operations and improves the security of each user space.

In the foregoing technical solution, preferably, before the receiving the identity verification key in the current user space, the method further includes: setting, according to the received setting command, at least one pre-preparation for each user space in the multiple user spaces. Set the key.

In this technical solution, a preset preset key may be set for each user space in advance, and the preset key corresponding to each user space setting may be one or more, and the user space with multiple preset keys has Higher security. For example, the user can set a password type preset key for the user space for work, and set the iris and password preset keys for the user space for storing the private contact.

In the above technical solution, preferably, before the receiving the identity verification key in the current user space, the method further includes: saving the at least one preset key corresponding to each of the set user spaces to the pre And setting a key database for retrieving whether the preset key database has the preset key that is consistent with the identity verification key received in the current user space.

In this technical solution, each user space and at least one preset key set for it are required to be stored in a preset key database, thereby facilitating identity verification and space switching according to the association relationship thereof. The implementation of the identity authentication keystore can be various, and can be a database or a file. In addition, the data organization mode of the identity authentication keystore can also be various, as long as each user can be guaranteed. The space may be associated with at least one of its corresponding preset keys.

In the above technical solution, preferably, the at least one preset key comprises at least one of the following or a combination thereof: fingerprint information, iris image information, face image information, text information, audio information, reference object information, color information .

In this technical solution, the at least one preset key corresponding to each user space includes but is not limited to at least one of the following or a combination thereof: fingerprint information, iris image information, face image information, text information, audio information, reference objects Information, color information. The security of different types of preset keys is different. A plurality of preset keys may be used separately or in combination. For example, the user may set a password type preset key for the user space used for work. The user space for storing private contacts sets two preset keys, iris and password.

Another aspect of the present invention provides an identity-based space switching apparatus for a terminal having a plurality of user spaces, including: a receiving unit that receives an identity verification key in a current user space; and a retrieval unit according to the identity Verifying the key, retrieving in the preset key database whether there is a preset key consistent with the identity verification key; determining unit, according to the retrieval result, Whether to perform space switching according to the authentication key.

In the technical solution, multiple user spaces in the terminal share an operating system, which can reduce the performance requirements of the terminal. Resources can be shared between multiple user spaces, and resource isolation can be performed through Namespace technology to ensure each user. Space privacy and security. On the basis of this, the technical solution of the present invention can be used to verify whether space switching can be performed directly according to the received identity verification key in the unlocked state of the terminal, or by receiving the identity authentication secret in the lock screen state of the terminal. The key performs the dual functions of identity authentication and user space switching at the same time, so that the authentication is provided for the space switching, and the user does not need to open the specific space switching interface or the space switching verification interface every time the space switch is performed, for example, The dual function of identity authentication and user space switching is directly completed in the lock screen state of the terminal, which not only simplifies the user operation, but also improves the security of each user space and improves the user experience.

In the above technical solution, preferably, the determining unit is specifically configured to: when determining, in the preset key database, the preset key that is consistent with the identity verification key, from the current user The space is switched to the target user space corresponding to the preset key. Otherwise, space switching is prohibited.

In the above technical solution, preferably, the method further includes: setting, before the receiving the identity verification key in the current user space, setting, for each user space in the multiple user spaces, according to the received setting command At least one default key.

In the above technical solution, preferably, the method further includes: a storage unit, in the current user Before receiving the authentication key, the at least one preset key corresponding to each user space is saved in the preset key database for searching whether the preset key database is used Having the preset key that is consistent with the identity verification key received in the current user space.

According to still another aspect of the present invention, a terminal includes a plurality of user spaces and the identity verification based space switching device according to any one of the foregoing technical solutions, and therefore, the terminal has any one of the foregoing technical solutions. The same technical effects of the identity-based space switching device described in the section are not described herein.

Through the above technical solution, it is possible to directly verify whether space switching can be performed according to the received identity verification key, which provides identity verification for space switching, and does not require the user to open a specific space switching interface or space switching verification every time space switching is performed. The interface, especially for the terminal in the lock screen state, can directly perform the dual functions of identity authentication and user space switching in the lock screen state of the terminal, which not only simplifies the user operation, but also improves the security of each user space and improves the security. user experience.

DRAWINGS

1 shows a flow chart of an identity-based spatial switching method in accordance with one embodiment of the present invention;

2 shows a block diagram of an identity-based spatial switching device in accordance with one embodiment of the present invention;

Figure 3 shows a block diagram of a terminal in accordance with one embodiment of the present invention;

4 is a schematic diagram showing correspondence between a user space and a keystore in a lock screen state according to an embodiment of the present invention;

FIG. 5 is a schematic diagram showing correspondence between a user space and a keystore in a screen unlock state according to an embodiment of the present invention; FIG.

FIG. 6 shows a schematic diagram of a terminal in accordance with another embodiment of the present invention.

detailed description

The present invention will be further described in detail below with reference to the drawings and specific embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In the following description, numerous specific details are set forth in order to provide a full understanding of the invention, but the invention may be practiced otherwise than as described herein. Limitations of the embodiments.

As shown in FIG. 1, an identity-based space switching method according to an embodiment of the present invention is used for a terminal having multiple user spaces, including:

Step 102: Receive an authentication key in the current user space.

Step 104: Retrieve, in the preset key database, whether there is a preset key that is consistent with the identity verification key according to the identity verification key.

Step 106: Determine, according to the retrieval result, whether to perform space switching according to the identity verification key.

In the technical solution, multiple user spaces in the terminal share an operating system, which can be lowered. Low requirements on terminal performance, resource sharing between multiple user spaces, and resource isolation through Namespace technology to ensure the privacy and security of each user space. On the basis of this, the technical solution of the present invention can be used to verify whether space switching can be performed directly according to the received identity verification key in the unlocked state of the terminal, or by receiving the identity authentication secret in the lock screen state of the terminal. The key performs the dual functions of identity authentication and user space switching at the same time, so that the authentication is provided for the space switching, and the user does not need to open the specific space switching interface or the space switching verification interface every time the space switch is performed, for example, The dual function of identity authentication and user space switching is directly completed in the lock screen state of the terminal, which not only simplifies the user operation, but also improves the security of each user space and improves the user experience.

In the above technical solution, preferably, the step 106 specifically includes: when determining that the preset key database has a preset key that is consistent with the identity verification key, switching from the current user space to the target user corresponding to the preset key Space, otherwise, space switching is prohibited.

In the above technical solution, preferably, before step 102, the method further includes: setting, according to the received setting command, at least one preset key for each user space in the plurality of user spaces.

In the foregoing technical solution, preferably, before step 102, the method further includes: saving at least one preset key corresponding to each user space that is set to a preset key database for searching in a preset key database. Whether there is a preset key that is consistent with the authentication key received in the current user space.

In this technical solution, each user space and at least one preset secret set for it are required. The key associations are stored in a preset key database to facilitate authentication and space switching based on their associations. The implementation of the identity authentication keystore can be various, and can be a database or a file. In addition, the data organization mode of the identity authentication keystore can also be various, as long as each user can be guaranteed. The space may be associated with at least one of its corresponding preset keys.

In the above technical solution, preferably, the at least one preset key comprises at least one of the following or a combination thereof: fingerprint information, iris image information, face image information, text information, audio information, reference object information, and color information.

2 shows a block diagram of an identity-based spatial switching device in accordance with one embodiment of the present invention.

As shown in FIG. 2, an authentication-based spatial switching apparatus 200 according to an embodiment of the present invention is used for a terminal having a plurality of user spaces, including: a receiving unit 202, which receives an identity verification key in a current user space; The unit 204 retrieves, according to the identity verification key, whether the preset key is consistent with the identity verification key in the preset key database. The determining unit 206 determines whether to perform space switching according to the identity verification key according to the retrieval result.

In the technical solution, multiple user spaces in the terminal share an operating system, which can reduce the performance requirements of the terminal. Resources can be shared between multiple user spaces, and resource isolation can be performed through Namespace technology to ensure each user. Space privacy and security. On the basis of this, the technical solution of the present invention can be used to verify whether space switching can be performed directly according to the received identity verification key in the unlocked state of the terminal, or by receiving the identity authentication secret in the lock screen state of the terminal. The key performs the dual functions of identity authentication and user space switching at the same time, so that the authentication is provided for the space switching, and the user does not need to open the specific space switching interface or the space switching verification interface every time the space switch is performed, for example, Terminal In the lock screen state, the dual functions of identity authentication and user space switching are directly completed, which not only simplifies user operations, but also improves the security of each user space and improves the user experience.

In the above technical solution, preferably, the determining unit 206 is specifically configured to: when determining that the preset key database has a preset key that is consistent with the identity verification key, switch from the current user space to the preset key corresponding to the preset key Target user space, otherwise, space switching is prohibited.

In the above technical solution, preferably, the method further includes: a setting unit 208, configured to set at least one preset for each user space in the plurality of user spaces according to the received setting command before receiving the identity verification key in the current user space. Key.

In the above technical solution, preferably, the storage unit 210 further saves the set at least one preset key corresponding to each user space to the preset key database before the current user space receives the identity verification key. For retrieving whether the preset key database has a preset key that is consistent with the authentication key received in the current user space.

In the above technical solution, preferably, the at least one preset key includes at least one of the following or The combination: fingerprint information, iris image information, face image information, text information, audio information, reference object information, color information.

Figure 3 shows a block diagram of a terminal in accordance with one embodiment of the present invention.

As shown in FIG. 3, a terminal 300 includes a plurality of user spaces 302 and an identity-based space switching device 200 shown in FIG. 2 according to an embodiment of the present invention. Therefore, the terminal 300 has FIG. 2 The same technical effects of the illustrated identity-based spatial switching device 200 are not described herein.

4 and 5 illustrate corresponding diagrams of user space and keystores in accordance with one embodiment of the present invention.

As shown in FIG. 4, in the mobile terminal, n spaces share an Android OS (Android Operating System), each space corresponds to one user, and the n user spaces can use the isolation technology to implement data. The isolation of each other allows each user to run in their own space. If the terminal resource is not isolated by using isolation technology, the resource is shared resources will be shared by all users. For example, the camera is a shared resource, and users in n spaces can call the camera to take photos.

In this embodiment, the Namespace (namespace) is used to isolate the global resources of the system, so that each user space is isolated from each other. The Namespace is a kind of isolation provided by the kernel of Linux (a free operating system on a personal computer) for isolation. The system global resource mechanism is mainly used in the operating system-level virtualization solution based on container technology, which can isolate different containers that use global system resources.

In this embodiment, the terminal includes: an identity authentication module, a user space switching module, and an identity authentication keystore, wherein the identity authentication keystore is used for identity authentication.

Specifically, the identity authentication module, the user space switching module, and the identity authentication keystore are n. User space is shared, that is, in any user space, the user can call the identity authentication module and the user space switching module to enter the identity authentication key pool.

The identity authentication module mainly performs the following functions: setting the user's identity authentication mode and binding with the corresponding user space; completing the user identity authentication when the screen is unlocked, specifically including:

(1) User-set authentication methods are various, such as fingerprint recognition, pattern unlocking, and numeric passwords. After the user selects an authentication method, the unlocking key can be set for each user space. For example, the fingerprint authentication mode unlocking mode is set for the user space, the unlocking fingerprint of the user space 1 is set as the right thumb, and the unlocking fingerprint of the user space 2 is set as the right index finger.

In addition, in this embodiment, the unlocked fingerprint, pattern or password is collectively referred to as the identity authentication key K, and the K of each user space is different. In the lock screen state, each user space corresponds to an identity authentication key. K, user space i and K _{i are} bound one by one (as shown in Figure 4).

As shown in FIG. 5, when the screen is unlocked, the user can be in a certain user space by default, and needs to switch to another user space. If the user space is to be switched, any identity authentication key K ( K ₁ , K ₂ , . . . , K _n ) can be successfully authenticated, that is, the user space i at this time corresponds to n keys K(K ₁ , K ₂ , . . . , K _n ).

(2) When the identity authentication is performed, the screen is in the locked state. If the user provides the identity authentication key Ki for identity authentication, the screen is unlocked successfully, and the user space switching module is started to enter the user space i; otherwise, Screen unlock failed.

(3) In the identity authentication, if the screen is already in the unlocked state, the correct identity authentication key K _i (i=1, 2, ..., n) provided by the user can be successfully authenticated and completed. User space switching.

2. The user space switching module is used to complete the function of user space switching, including switching of the user space in the screen unlocking state and switching of the user space in the screen lock screen state.

The user space switching in the unlock state of the screen means that the user has completed the screen unlocking, and is normally in the space i, and then switches to the space j; the user space switching in the screen lock screen state means that the current screen is in the locked state. According to the identity authentication key K _i provided by the user, the identity authentication is completed and the screen is unlocked, and directly enters the space i.

3. The identity authentication keystore is used to store the user identity authentication data. In the embodiment, not only the identity authentication key K for screen unlocking but also the user space i corresponding to the identity authentication key K _{i is} stored. In order to ensure that the space i is associated with the K _i , the implementation of the identity authentication key pool may be various, and may be a database or a file.

As shown in FIG. 6, a terminal according to another embodiment of the present invention includes an Android OS (Android Operating System), apps (multiple applications), and data (data of user space).

In this embodiment, the Namespace technology is used to isolate the global resources of the system, and the permissions of the user processes in each user space are reasonably planned. For example, an app (application) that can be run in each user space and a function module that can be called are set, each of which The data of the user space is isolated from each other, and the shared resources of the system can be called by related applications in each user space.

In addition, the specific implementation manner of the inter-user handover in the multi-user space terminal may be as follows:

First, when the screen is in the locked state, the user wants to enter the user space i of the n user spaces, the steps are as follows:

In step 1, the user provides an identification key (verification fingerprint/pattern/password, etc.), and the user identity authentication module is invoked by the identity identification key.

Step 2: Retrieve the identity authentication keystore K(K ₁ , K ₂ , . . . , K _n ) from the identity authentication keystore.

Step 1-3: If the identity key matches the K _i in the identity authentication keystore K(K ₁ , K ₂ , . . . , K _n ), the identity authentication succeeds, and the user space switching module is started, and step 4 is performed. And if the identification key does not match any of the authentication keystores K(K ₁ , K ₂ , . . . , K _n ), step 5 is performed.

In step 4, the screen is unlocked, and the user space switching module controls to enter the space i.

Step 5. The identity authentication fails and the screen is not unlocked.

Second, when the screen is in the unlocked state, the user is now in the user space i, and wants to enter the user space j in the n user spaces, the steps are as follows:

In step 1, the user switches the entry through the space provided by the system, and selects to switch to the space j to enable the identity authentication module.

In step 2, the identity authentication keystore K(K ₁ , K ₂ , . . . , K _n ) is retrieved.

Step 3: If the identity authentication key provided by the user matches one of the keys K _j of the identity authentication keystore K(K ₁ , K ₂ , . . . , K _n ), the identity authentication succeeds and the user space is enabled. The switching module performs step 4; if the identification key does not match any of the authentication keystores K(K ₁ , K ₂ , . . . , K _n ), step 5 is performed.

In step 4, the user space switching module controls to enter the user space j.

In step 5, the identity authentication fails, the space switch fails, and the user is still in the user space i.

The technical solution of the present invention is described in detail above with reference to the accompanying drawings. With the above technical solution, it is possible to directly verify whether space switching can be performed according to the received identity verification key, providing identity verification for space switching, and no need for the user each time. When a space switch is performed, a specific space switching interface or a space switching verification interface is opened, especially for a terminal in a lock screen state, which can directly perform the dual functions of identity authentication and user space switching in the lock screen state of the terminal, which not only simplifies user operations. It also enhances the security of each user space and enhances the user experience.

In the present invention, the term "plurality" means two or more. For those skilled in the art, the specific meanings of the above terms in the present invention can be understood on a case-by-case basis.

In the description of the present specification, the description of the terms "one embodiment", "another embodiment" or the like means that a specific feature, structure, material or characteristic described in connection with the embodiment or example is included in at least one implementation of the present invention. In the example or example. In the present specification, the schematic representation of the above terms does not necessarily refer to the same embodiment or example. Furthermore, the particular features, structures, materials, or characteristics described may be combined in a suitable manner in any one or more embodiments or examples.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

An authentication-based space switching method for a terminal having multiple user spaces, comprising:

Receiving an authentication key in the current user space;

Determining, according to the identity verification key, whether a preset key that is consistent with the identity verification key is retrieved in a preset key database;

Based on the retrieval result, it is determined whether or not to perform spatial switching according to the authentication key.
The method according to claim 1, wherein the determining whether to perform the space switching according to the identity verification key according to the retrieval result includes:

When it is determined that the preset key database has the preset key that is consistent with the identity verification key, switching from the current user space to a target user space corresponding to the preset key, otherwise, Space switching is prohibited.
The method of claim 2, wherein before the receiving the identity verification key in the current user space, the method further includes:

At least one preset key is set for each of the plurality of user spaces according to the received setting command.
The method of claim 3, wherein before the receiving the identity verification key in the current user space, the method further includes:

And saving the set at least one preset key corresponding to each user space to the preset key database, so as to retrieve whether the preset key database has a space in the current user Receiving the preset key that is consistent with the authentication key.
The identity verification based space switching method according to claim 3 or 4, wherein the at least one preset key comprises at least one of the following or a combination thereof:

Fingerprint information, iris image information, face image information, text information, audio information, reference object information, color information.
An authentication-based space switching device for a terminal having multiple user spaces, comprising:

Receiving unit, receiving an authentication key in the current user space;

Retrieving unit, according to the identity verification key, retrieving in the preset key database whether there is a preset key consistent with the identity verification key;

The determining unit determines, according to the retrieval result, whether to perform space switching according to the identity verification key.
The identity-based spatial switching device according to claim 6, wherein the determining unit is specifically configured to:

When it is determined that the preset key database has the preset key that is consistent with the identity verification key, switching from the current user space to a target user space corresponding to the preset key, otherwise, Space switching is prohibited.
The authentication-based spatial switching device of claim 7, further comprising:

And a setting unit, configured to set at least one preset key for each of the plurality of user spaces according to the received setting command before receiving the authentication key in the current user space.
The authentication-based spatial switching device according to claim 8, further comprising:

a storage unit, configured to save the set at least one preset key corresponding to each user space to the preset key database for retrieval after receiving the authentication key in the current user space Whether the preset key database has the preset key that is consistent with the identity verification key received in the current user space.
The identity verification based space switching device according to claim 8 or 9, wherein the at least one preset key comprises at least one of the following or a combination thereof:

Fingerprint information, iris image information, face image information, text information, audio information, reference object information, color information.
A terminal having a plurality of user spaces, characterized by comprising the identity verification based space switching device according to any one of claims 6 to 10.