WO2018099342A1

WO2018099342A1 - Method and device for saving power of terminal on the basis of network access control

Info

Publication number: WO2018099342A1
Application number: PCT/CN2017/113065
Authority: WO
Inventors: 孔令坤; 余红波
Original assignee: 腾讯科技（深圳）有限公司
Priority date: 2016-12-01
Filing date: 2017-11-27
Publication date: 2018-06-07
Also published as: CN106714287A; CN106714287B

Abstract

A method and a device for saving the power of a terminal on the basis of network access control. The method in one embodiment comprises the steps: when receiving a power-saving application starting instruction, creating a virtual network interface, and routing, to the virtual network interface, a first network data packet of an application satisfying a preset condition, so that the first network data packet of the application satisfying the preset condition cannot arrive at the physical network interface of the terminal.

Description

Method and device for saving power of terminal based on network access control

This application claims the priority of the Chinese Patent Application filed on Dec. 1, 2016, the Chinese Patent Office, the application No. 201611091417.9, and the title of the method and device for saving power based on the network access control terminal, the entire contents of which are incorporated by reference. Combined in this application.

Technical field

The present application relates to the field of computer technologies, and in particular, to a method for saving power by a terminal based on network access control and a device for saving power by a terminal based on network access control.

Background technique

Take terminal devices such as mobile phones and smart tablets as examples. The largest power consumption applications include CPU (Central Processing Unit), screen and data traffic. The increase in power consumption of various types of applications of terminal equipment may not only directly reduce the standby time of the terminal equipment, but also may cause the terminal equipment to be charged and discharged repeatedly, which may affect the terminal to a certain extent. The service life of the device, therefore, the power saving of the terminal application has become a direction of terminal application development.

Summary of the invention

The embodiment of the present application provides a method for saving power by a terminal based on network access control and a device for saving power based on network access control, so as to achieve power saving and extend the service life of the terminal.

The embodiments of the present application provide the following technical solutions:

A method for saving power by a terminal based on network access control, comprising the steps of:

Creating a virtual network interface when receiving a power saving application open command;

Routing a first network data packet of an application that meets a preset condition to the virtual network interface, such that The first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal.

A device for saving power based on network access control, comprising:

a virtual interface creation module, configured to receive a power-saving application opening instruction, and create a virtual network interface;

a terminal data routing module, configured to route the first network data packet of the application that meets the preset condition to the virtual network interface, so that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal .

A method for saving power by a terminal based on network access control is used on a terminal, the terminal includes a processor and a memory, and the method includes the steps of:

The first network data packet of the application that meets the preset condition is routed to the virtual network interface, such that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal.

A non-volatile storage medium having stored therein computer readable instructions executable by a processor to perform the following operations:

BRIEF DESCRIPTION OF THE DRAWINGS

1 is a schematic diagram of an application environment of an embodiment of the present application in an embodiment;

2 is a schematic structural diagram of a terminal in an embodiment;

3 is a schematic flowchart of a method for saving power of a terminal based on network access control in an embodiment;

4 is a schematic flowchart of a method for saving power of a terminal based on network access control in a specific application example;

5 is a block diagram showing a transmission of a data stream of the method of the specific application example shown in FIG. 3;

6 is a schematic flowchart of a method for saving power of a terminal based on network access control in another specific application example;

7 is a block diagram showing a transmission of a data stream of the method of the specific application example shown in FIG. 6;

FIG. 8 is a schematic structural diagram of an apparatus for saving power according to a network access control in an embodiment; FIG.

9 is a schematic structural diagram of an apparatus for saving power of a terminal based on network access control in a specific application example;

10 is a schematic diagram showing the logical relationship between modules of the apparatus of the specific application example shown in FIG. 9;

11 is a schematic structural diagram of an apparatus for saving power based on a network access control in another specific application example;

FIG. 12 is a schematic diagram showing the logical relationship between modules of the apparatus of the specific application example shown in FIG.

Mode for carrying out the invention

The present application will be further described in detail below with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are merely illustrative of the application and are not intended to limit the scope of the application.

At present, the power-saving application for the terminal device basically lists the system setting items related to power saving (such as sound size, Wifi switch, mobile network switch, screen brightness, automatic screen-off time, etc.) for the user to set. . When it is implemented, the corresponding setting items are mainly changed by calling the provided interface of the system. For example, in the case of the Android system, the setWifiEnabled() function provided by the WifiManager is called when the Wifi is closed/opened; the setMobileDataEnabled() function in the ConnectivityManager is called when the mobile data is closed/opened.

However, reducing screen brightness, lowering ring volume, turning off Wifi and moving data, etc., can achieve the purpose of power saving, but at the expense of the user experience of using the terminal device, and some settings do not have a power saving effect. Big. When the wifi and mobile data are turned off, the WiFi module or the mobile network module is directly closed, so that all applications cannot access the network, and the usage performance of the mobile terminal is also restricted to some extent.

FIG. 1 is a schematic diagram of a working environment in an embodiment of the present application. As shown in FIG. 1 , the working environment relates to the terminal 101 and the network server 100. The terminal 101 and the network server 100 can enter through the network. Line communication. When the terminal 101 communicates with the network server 100 via the network, the terminal 101 needs to transmit its data packet to the network through its own physical network interface, thereby reaching each network server 100 or other terminal 101. In the embodiment of the present application, by creating a virtual network interface in the terminal 101, the network data packet of the application that meets the condition is routed to the virtual network interface, so that the physical network interface of the terminal 101 cannot be reached, and the network server 100 or other network cannot be reached. The terminal 101 implements control of the application access network, that is, filters out unnecessary network traffic through the virtual network interface, and restricts unnecessary network access, thereby achieving the purpose of saving power and extending the service life of the terminal.

A schematic structural diagram of the terminal 101 in one embodiment is shown in FIG. 2. The terminal 101 includes a processor, a storage medium, a communication interface, a power interface, and a memory connected through a system bus. The storage medium of the terminal 101 stores a device for saving power based on the network access control, and the device is used to implement a method for saving power by the terminal based on the network access control. The communication interface of the terminal 101 is used to connect and communicate with the network server 100 or other network terminal 101, and the power interface of the terminal 101 is used for connection with an external power source through which the external power source supplies power to the terminal 101. The terminal 101 can be any device capable of implementing intelligent input and output, such as a mobile terminal, such as a mobile phone, a tablet computer, etc., or other devices having the above structure.

FIG. 3 is a schematic flowchart of a method for saving power by a network access control based terminal in an embodiment. As shown in FIG. 3, the method in this embodiment includes:

Step S301: Create a virtual network interface when receiving a power-saving application open command;

Step S302: The network data packet of the application that meets the preset condition is used. (In order to distinguish the data packet that is received from the network, the network data packet that needs to be sent to the network in the embodiment of the present application is referred to as the first network data. The packet is routed to the virtual network interface such that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal.

Therefore, when receiving the power-saving application open command, the terminal creates a virtual network interface, and routes the first network data packet of the application that meets the preset condition to the virtual network interface, because the network virtual interface does not correspond to any real The physical network card, so the operation of the virtual network interface does not generate data transmission in the real physical network, so that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal, thereby passing through the virtual network. Interface filters out unnecessary network flows The amount, limit non-essential network access, achieves the purpose of saving power and extending the life of the terminal.

The first network data packet of the application that meets the preset condition is routed to the pre-created virtual network interface, so that when the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal, It can be done in any way possible. In one of the application examples, the first network data packet of the application satisfying the preset condition described above may be routed to the virtual network interface, and the first network data packet of other applications is directly routed to the physical network interface. In another application example, the first network data packet of all applications may be routed to the virtual network interface, and when the application is an application that meets the preset condition, the first network data packet is not further processed or directly If the application is not an application that meets the preset condition, the first network data packet that is routed to the virtual network interface is forwarded to the physical network interface to implement network access of the normal application. The following is a detailed illustration of the two application examples.

FIG. 4 is a schematic flowchart diagram of a method for saving power of a network access control-based terminal in a specific application example, where the first network packet of the application satisfying the preset condition is routed to a virtual network. The interface, while the network packets of other applications are directly routed to the physical network interface of the terminal as an example.

As shown in FIG. 4, the method for saving power of a network access control based terminal in the specific application example includes the following steps:

Step S401: Receive a power-saving application open command, and create a virtual network interface of the terminal;

Step S402: setting an application of a preset condition;

Step S403: When detecting that the application has the first network data packet sent to the network, analyzing whether the application to which the first network data packet belongs is an application of the preset condition, if not, proceeding to step S404, and if yes, proceeding to the step S405;

Step S404: Routing the first network data packet of the application to the physical network interface of the terminal, so that the first network data packet can be sent to the network through the physical network interface;

Step S405: Routing the first network data packet of the application to the created virtual network interface, so that the first network data packet cannot reach the physical network interface and cannot be sent to the network.

Therefore, based on the method in this embodiment, the terminal will use the first network number of the application that meets the preset condition. According to the packet routing to the created virtual network interface, the traffic interception is realized, thereby achieving the effect of saving power and extending the duration of the terminal, and the first network packet for the application that does not meet the preset condition can be normally routed to Physical network interface for normal network access.

In the embodiment of the present application, the physical network interface is an abstraction of the real physical network card, and the terminal can read and send data in the network by performing read and write operations on the physical network interface, and the virtual network interface is an abstraction of the virtual network card, and is not Corresponding to any real physical network card, the terminal's read and write operations on this virtual network interface will not generate data transmission in the real physical network. Based on this performance of the virtual network interface, any of the possible ways can be used when creating the virtual network interface as described above.

Take Android (Android, a comprehensive operating system) system as an example, you can use the VPNService provided by Android (a base class provided by the Android SDK, which inherits the services of this base class, will gain the ability to create and read and write virtual interfaces) Create a virtual network interface for the terminal.

The application of setting the preset condition may be performed in any possible manner. For example, the application running in the background may be determined to be an application that meets the preset condition, and only the first network packet of the foreground application can be routed to Physical network interface. The foreground application can be an application to which the content displayed on the current user interface of the terminal belongs. The background application can be an application that is not displayed but still working on the current interface. Of course, it can be understood that other methods can be used to determine the application of the preset condition.

In the actual use of the end user, it is still necessary to have some applications running in the background to access the network, such as some instant messenger applications, some office applications, and the like. Therefore, in a specific example, when the application of the preset condition is set, the whitelist may be set, that is, when the application of the preset condition is set, the actually included in the whitelist may be set. application. At this time, the foregoing application that meets the preset condition includes: an application that does not belong to the preset white list. The first network packet of the application in the whitelist can be directly routed to the physical network interface of the terminal.

On the other hand, in the solution of the embodiment, in order not to affect the use of the non-white list application by the terminal user, a global mode (Aggressive Mode ()) may be set, and in the global mode, the foreground application of the terminal may be performed. Monitoring, and automatically allowing network access to the foreground application, ie the first network packet of the foreground application will be routed to the physical network interface of the terminal, regardless of whether the foreground application is not in the whitelist. That is, the above application that satisfies the preset condition includes: not the current foreground application of the terminal. Thus, when used by the terminal When a user opens a non-whitelist application, the non-whitelist application will become a foreground application and be allowed to access the network, so that the impact on the user's use of the mobile phone is minimized, and the power saving effect can be maximized. It can be understood that the global mode can be determined by the end user whether to open, for example, a global mode control can be set, and the terminal user can issue an instruction to open the global mode through the global mode control. For convenience of explanation, in the following description of the specific examples, the global mode is turned on as an example.

Take the Android system as an example. Android 5.0 and above can use the addDisallowedApplication() method in the VpnService.Builder class to set the data packets that do not allow whitelists and foreground applications to enter the virtual network interface, so the whitelist and foreground application data will enter. Real network interface, which enables sub-applications to intercept. Therefore, for Android 5.0 and above of the Android system, for example, in the process of creating a virtual network interface, setting a data packet that does not allow the whitelist and the foreground application to enter the virtual network interface may be set. The specific process of creating a virtual network interface can be as follows:

Create a VPNService.Builder object mBuilder, mBuilder will be used for interface configuration and creation;

Call the mAddresser object's addAddress() method to configure the network address of the virtual network interface. The network address can be an arbitrary legal IP address.

Call the setRoute() method of the mBuilder object to set the routing address of the virtual network interface. The routing IP address is set to 0.0.0.0/0, so that packets destined for any address will be sent to the virtual network interface.

Call the addDisallowedApplication() method of the mBuilder object to set the data packet that does not allow the whitelist application and the foreground application to be sent to the virtual network interface.

Create a virtual network interface by calling the establish() method of the mBuilder object.

Taking the above method of creating a virtual network interface as an example, setting a whitelist application and a foreground application is completed in the process of creating a virtual network interface. Therefore, in a specific application example, when a whitelist setting information is monitored (ie, when the whitelist changes), or when the current foreground application of the terminal is changed, a new virtual network interface is created, and the new virtual network interface is used. A new virtual network interface covers the virtual network interface.

FIG. 5 is a block diagram showing the transmission of data streams based on the method of the specific application example shown in FIG. 4. As can be seen from FIG. 5, for whitelist applications and foreground applications, network packets are directly routed to the physical network interface. Thereby sent to the network, and for non-whitelisted applications and non-foreground applications, their network data The packet is routed to the virtual network interface to enable interception of the first network packet for non-whitelisted applications and non-foreground applications.

FIG. 6 is a schematic flowchart diagram of a method for saving power of a network access control-based terminal in another specific application example, where the specific example is to route the first network data packet of all applications to the virtual network interface. Be explained.

As shown in FIG. 6, the method for saving power of a network access control based terminal in the specific application example includes the following steps:

Step S601: Receive a power-saving application open command, and create a virtual network interface of the terminal;

Step S602: setting an application of a preset condition;

Step S603: When the application has the first network data packet sent to the network, routing the application to the created virtual network interface;

Step S604: Parsing a first network data packet that is routed to the virtual network interface, and determining an application to which the first network data packet belongs;

Step S605: Combining the application of the preset condition set above, determining whether the application to which the first network data packet belongs is the application of the preset condition, if not, proceeding to step S606, and if yes, proceeding to step S607;

Step S606: Forwarding the first network data packet routed to the virtual network interface to the physical network interface of the terminal, so that the first network data packet can be sent to the network through the physical network interface;

Step S607: No further processing is performed on the first network data packet routed to the virtual network interface, or the first network data packet is directly discarded, so that the first network data packet cannot reach the physical network interface, and cannot be sent to the network. .

Therefore, based on the method in the embodiment, after receiving the power-saving application opening instruction, the terminal, after creating the virtual network interface, routes the first network data packet of all applications to the created virtual network interface, and then the first The network data packet is analyzed, and when the application to which the first network data packet belongs belongs to the foregoing preset condition, the first network data packet is not further processed to implement traffic interception, thereby achieving power saving and extending terminal use. The effect of the duration, and for the first network packet of the application that does not meet the preset condition, can be forwarded to the physical network interface to achieve normal network access.

According to this, it is clear that:

The foregoing manner of routing the first network data packet of the application that meets the preset condition to the pre-created virtual network interface includes: routing the first network data packet of each application of the terminal to the virtual network interface, the application of the terminal Including the application that meets the preset condition;

The method for making the first network data packet of the application that meets the preset condition fail to reach the physical network interface of the terminal includes: analyzing the first network data packet, and determining an application to which the first network data packet belongs. When the application to which the first network data packet belongs is an application that meets the preset condition, the first network data packet is not further processed or the first network data packet is discarded, so that the first network data packet is Unable to reach the physical network interface of the terminal.

In addition, when the application to which the first network data packet belongs is not an application that meets the preset condition, the first network data packet may be forwarded to a physical network interface of the terminal.

The application of setting the preset condition may be performed in any possible manner. For example, the application running in the background may be determined to be an application that meets the preset condition, and only the first network packet of the foreground application can be routed to Physical network interface. Of course, it can be understood that other methods can be used to determine the application of the preset condition.

In the actual use of the end user, it is still necessary to have some applications running in the background to access the network, such as some instant messenger applications, some office applications, and the like. Therefore, in a specific example, when the application of the preset condition is set, the whitelist may be set, that is, when the application of the preset condition is set, the actually included in the whitelist may be set. application. at this time, The above applications that meet the preset conditions include: applications that are not in the preset white list. The first network packet of the application in the whitelist can be directly routed to the physical network interface of the terminal.

On the other hand, in the solution of the embodiment, in order not to affect the use of the non-white list application by the terminal user, a global mode (Aggressive Mode ()) may be set, and in the global mode, the foreground application of the terminal may be performed. Monitoring, and automatically allowing network access to the foreground application, ie the first network packet of the foreground application will be routed to the physical network interface of the terminal, regardless of whether the foreground application is not in the whitelist. That is, the above application that satisfies the preset condition includes: not the current foreground application of the terminal. Thus, when the end user opens the non-whitelist application, the non-whitelist application will become the foreground application and be allowed to access the network, so that the impact on the user's use of the mobile phone is minimized. It can be understood that the global mode can be determined by the end user whether to open, for example, a global mode control can be set, and the terminal user can issue an instruction to open the global mode through the global mode control. For convenience of explanation, in the following description of the specific examples, the global mode is turned on as an example.

Take the Android system as an example. There is no addDisallowedApplication() function in the VpnService.Builder class in the Android 5.0 or later system. Therefore, you can receive the first network packet of all applications by setting a unified virtual network interface. The process of creating a virtual network interface can be as follows:

As described above, since the first application data packet of the application that can access the network is routed to the virtual network interface, the virtual network interface is forwarded to the physical network interface to implement network access. Therefore, for the network data packet received from the network (in order to distinguish from the data packet sent to the network, the network data packet received from the network in the embodiment of the present application is referred to as a second network data packet), It is given to a specific application via the virtual network interface. According to this, in a specific example, the terminal can also be from the object The network interface reads the second network data packet received by the physical network interface, and forwards the second network data packet to the application corresponding to the second network data packet.

FIG. 7 is a block diagram showing the transmission of a data stream based on the method of the specific application example shown in FIG. 6. As can be seen from FIG. 7, the virtual network interface of the terminal receives the first network data packet of all applications, in order to implement the application. After filtering, the first network data packet of each application is routed to the virtual network interface, and the first network data packet is read, and the application to which the first network data packet belongs is analyzed from the first network data packet, and the specific analysis is performed. The method can be performed in any possible manner, for example, analyzing the application to which the packet belongs from the source port number of the TCP/IP header of the IP packet, and then forwarding the first network packet of the whitelist application and the foreground application to the physical network interface. When the second network data packet is read from the physical network interface, the second network data packet is written to the virtual network interface (the data packet written to the virtual network interface is transmitted to the corresponding application of the upper layer).

Based on the foregoing method for saving power by a network access control based terminal, the embodiment of the present application further provides a device for saving power based on a network access control.

FIG. 8 is a schematic structural diagram of an apparatus for saving power based on a network access control in an embodiment. As shown in FIG. 8, the apparatus in this embodiment includes:

a virtual interface creation module 801, configured to receive a power-saving application open command, and create a virtual network interface;

The terminal data routing module 802 is configured to route the first network data packet of the application that meets the preset condition to the virtual network interface, so that the first network data packet of the application that meets the preset condition cannot reach the physical network of the terminal. interface.

Thus, by receiving a power-saving application open command, a virtual network interface is created, and the first network data packet of the application meeting the preset condition is routed to the virtual network interface, since the network virtual interface does not correspond to any real physics. The network card, therefore, the operation of the virtual network interface does not generate data transmission in the real physical network, so that the first network data packet of the application satisfying the preset condition cannot reach the physical network interface of the terminal, thereby passing the virtual network interface Filter out unnecessary network traffic, limit non-essential network access, and achieve power saving and extended terminal life.

Wherein, the first network data packet of the application that meets the preset condition is routed to the pre-created The virtual network interface may be performed in any possible manner when the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal. In one of the application examples, the first network data packet of the application satisfying the preset condition described above may be routed to the virtual network interface, and the first network data packet of other applications is directly routed to the physical network interface. In another application example, the first network data packet of all applications may be routed to the virtual network interface, and when the application is an application that meets the preset condition, the first network data packet is not further processed or directly If the application is not an application that meets the preset condition, the first network data packet that is routed to the virtual network interface is forwarded to the physical network interface to implement network access of the normal application. The following is a detailed illustration of the two application examples.

FIG. 9 is a schematic structural diagram of a device for saving power based on a network access control in a specific application example, where the first network packet of the application satisfying the preset condition is routed to a virtual network. The interface, while the network packets of other applications are directly routed to the physical network interface of the terminal as an example.

As shown in FIG. 9, the device for saving power based on the network access control in the specific application example includes:

a virtual interface creation module 901, configured to receive a power-saving application open command, and create a virtual network interface;

The terminal data routing module 902 is configured to route the first network data packet of the application that meets the preset condition to the virtual network interface, so that the first network data packet of the application that meets the preset condition cannot reach the physical network of the terminal. The interface may also be used to route the first network data packet of the application that does not meet the preset condition to the physical network interface of the terminal.

Based on the device in this embodiment, the first network data packet of the application that meets the preset condition is routed to the created virtual network interface to implement traffic interception, thereby achieving the effect of saving power and extending the duration of the terminal, and The first network data packet of the application that does not meet the preset condition can be normally routed to the physical network interface to achieve normal network access.

The application of the foregoing preset conditions may be set in any possible manner. For example, an application running in the background may be determined to be an application that satisfies a preset condition, and only the first network data packet of the foreground application can be routed to the physical Network Interface. Of course, it can be understood that other parties can also be used. To determine the application of the preset condition.

In the actual use of the end user, it is still necessary to have some applications running in the background to access the network, such as some instant messenger applications, some office applications, and the like. Therefore, in a specific example, when the application of the preset condition is set, the whitelist may be set, that is, when the application of the preset condition is set, the actually included in the whitelist may be set. application.

Accordingly, as shown in FIG. 9, the apparatus in the specific example further includes:

The whitelist setting module 903 is configured to receive a whitelist setting instruction, and set an application of the whitelist of the virtual network interface.

At this time, the foregoing application that meets the preset condition includes: an application that is not in the white list set by the whitelist setting module 903. The first network packet of the application in the whitelist can be directly routed to the physical network interface of the terminal.

On the other hand, as shown in FIG. 9, the apparatus in this specific example may further include:

The foreground application monitoring module 904 is configured to monitor the current application of the terminal.

At this time, the foregoing application that meets the preset condition includes: the current foreground application of the terminal that is not monitored by the foreground application monitoring module 904.

Therefore, when used in conjunction with the whitelist setting module 903, when the terminal user opens the non-whitelist application, the non-whitelist application will become the foreground application and be allowed to access the network, so that the impact on the user's use of the mobile phone is minimized. .

Taking the Android system as an example, Android 5.0 and above can use the addDisallowedApplication() method in the VpnService.Builder class to set a packet that does not allow the whitelist and the foreground application to enter the virtual network interface. Accordingly, based on the figure, FIG. A schematic diagram of the logical relationship between the modules of the device of the specific application example shown in FIG.

As shown in FIG. 10, when a virtual interface creation block is created, a process in a specific example may be as follows:

Taking the above method of creating a virtual network interface as an example, setting a whitelist application and a foreground application is completed in the process of creating a virtual network interface. Therefore, in a specific application example, the virtual interface creation module 901 is further configured to: when the whitelist setting module 903 receives the whitelist setting instruction, or when the foreground application monitoring module 904 detects that the current foreground application of the terminal changes. Create a new virtual network interface and overwrite the virtual network interface with the new virtual network interface.

FIG. 11 is a schematic structural diagram of an apparatus for saving power of a network access control based terminal in another specific application example, which is an example of routing a first network data packet of all applications to a virtual network interface. Be explained.

As shown in FIG. 11, the device for saving power based on the network access control in the specific application example includes:

a virtual interface creation module 1101, configured to receive a power-saving application open command, and create a virtual network interface;

The terminal data routing module 1102 is configured to route the first network data packet of each application of the terminal to the virtual network interface, where the application of the terminal includes the application that meets a preset condition.

As shown in FIG. 11, the device for saving power based on the network access control in the specific application example may further include:

The packet forwarding module 1103 is configured to analyze the first network data packet, and determine an application to which the first network data packet belongs, where the application to which the first network data packet belongs is an application that meets the preset condition When the first network data packet is not further processed or the first network data packet is discarded, the first network data packet cannot reach the physical network interface of the terminal.

Thus, in this specific example, the terminal data routing module 1102 routes the first network data packet of all applications of the terminal to the virtual network interface, thereby necessarily routing the first network data packet of the application satisfying the preset condition to the virtual network. Network interface, if these first network packets are not forwarded or For further processing, these first network data packets must not reach the physical network interface of the terminal, thereby implementing interception of the first network data packet of these applications. In combination with the packet forwarding module 1103, the packet forwarding module 1103 may analyze the first network data packet to determine an application to which the first network data packet belongs, when the application to which the first network data packet belongs is satisfied. When the preset condition is applied, it is determined that the first network data packet is not further processed or the first network data packet is discarded, so that only the first network data packet of the application that meets the predetermined condition cannot reach the physical network interface of the terminal. .

It is to be understood that the packet forwarding module 1103 may be further configured to: when the application to which the first network data packet belongs is not an application that meets the preset condition, forward the first network data packet to a physical entity of the terminal. Network Interface.

That is, in the specific example, the first network data packet of all applications is routed to the created virtual network interface, and then the first network data packet is analyzed, and the application belonging to the first network data packet belongs to the preset. When the condition is applied, the first network data packet is not further processed to implement traffic interception, thereby achieving the effect of saving power and extending the duration of the terminal, and the first network data packet for the application that does not meet the preset condition. , can be forwarded to the physical network interface to achieve normal network access.

As described above, since the first application data packet of the application that can access the network is routed to the virtual network interface, it is forwarded to the physical network interface to implement network access. Therefore, for the network data packet received from the network (in order to distinguish from the data packet sent to the network, the network data packet received from the network in the embodiment of the present application is referred to as a second network data packet), It is given to a specific application via the virtual network interface.

According to this, in a specific example, the packet forwarding module 1103 is further configured to: read, by the physical network interface, the second network data packet received by the physical network interface, and forward the second network data packet to the second network. The application corresponding to the packet.

The application of the foregoing preset conditions may be set in any possible manner. For example, an application running in the background may be determined to be an application that satisfies a preset condition, and only the first network data packet of the foreground application can be routed to the physical Network Interface. Of course, it can be understood that other methods can be used to determine the application of the preset condition.

In the actual use of the end user, usually still need some applications running in the background can Access the network, such as some instant messenger apps, some office apps, and more. Therefore, in a specific example, when the application of the preset condition is set, the whitelist may be set, that is, when the application of the preset condition is set, the actually included in the whitelist may be set. application.

Accordingly, as shown in FIG. 11, the apparatus in the specific example further includes:

The whitelist setting module 1104 is configured to receive a whitelist setting instruction, and set an application of the whitelist of the virtual network interface.

At this time, the foregoing application that meets the preset condition includes: an application that is not in the white list set by the whitelist setting module 1104. The first network packet of the application in the whitelist can be directly routed to the physical network interface of the terminal.

On the other hand, as shown in FIG. 11, the apparatus in this specific example may further include:

The foreground application monitoring module 1105 is configured to monitor the current application of the terminal.

At this time, the foregoing application that meets the preset condition includes: the current foreground application of the terminal that is not monitored by the foreground application monitoring module 1105.

Therefore, when used in conjunction with the whitelist setting module 1104, when the terminal user opens the non-whitelist application, the non-whitelist application will become the foreground application and be allowed to access the network, so that the impact on the user's use of the mobile phone is minimized. .

Take the Android system as an example. There is no addDisallowedApplication() function in the VpnService.Builder class in the Android 5.0 or later system. Therefore, you can receive the first network packet of all applications by setting a unified virtual network interface. Accordingly, a schematic diagram of the logical relationship between the modules of the apparatus based on the specific application example shown in FIG. 11 is shown in FIG.

As shown in FIG. 12, when a virtual interface creation block is created, a process in a specific example may be as follows:

It can be seen that, in the device shown in FIG. 11, the packet forwarding module 1103 needs to analyze whether the first network data packet routed to the virtual network interface needs to be forwarded to the physical network interface of the terminal, and the addDisallowApplication is not called when the virtual network interface is created. () method, when the application in the whitelist or the current foreground application of the terminal, only need to notify the packet forwarding module 1103, no need to create a new network virtual interface by the virtual interface creation module, and the packet forwarding module 1103 is based on the new whitelist And the current foreground application determines whether the newly received first network data packet needs to be forwarded to the physical network interface of the terminal.

The solution in each embodiment as described above may be run in the terminal device in an application manner, and the application may create a virtual network interface in the background based on the granted VPN permission (only once granted), thereby organizing other applications. Non-essential network access to save power.

One of ordinary skill in the art can understand that all or part of the process of implementing the above embodiment method can be completed by a computer program to instruct related hardware, and the program can be stored in a non-volatile computer readable storage. In the medium, as in the embodiment of the present application, the program may be stored in a storage medium of the computer system and executed by at least one processor in the computer system to implement a flow including an embodiment of the methods as described above. The storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

The technical features of the above-described embodiments may be arbitrarily combined. For the sake of brevity of description, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction between the combinations of these technical features, All should be considered as the scope of this manual.

The above-mentioned embodiments are merely illustrative of several embodiments of the present application, and the description thereof is more specific and detailed, but is not to be construed as limiting the scope of the claims. It should be noted that a number of variations and modifications may be made by those skilled in the art without departing from the spirit and scope of the present application. Therefore, the scope of the invention should be determined by the appended claims.

Claims

A method for saving power by a terminal based on network access control, characterized in that the method comprises the steps of:

Creating a virtual network interface when receiving a power saving application open command;

The first network data packet of the application that meets the preset condition is routed to the virtual network interface, such that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal.
The method for saving power of a terminal based on network access control according to claim 1, wherein:

The application that meets the preset condition includes: an application that does not belong to the preset whitelist, and/or is not the current foreground application of the terminal.
The method for saving power by a network access control based terminal according to claim 1 or 2, characterized in that:

The method of routing the first network data packet of the application that meets the preset condition to the pre-created virtual network interface includes: routing the first network data packet of each application of the terminal to the virtual network interface, where the application of the terminal includes The application that meets the preset condition;

The method for the first network data packet of the application that meets the preset condition to be inaccessible to the physical network interface of the terminal includes: analyzing the first network data packet, determining an application to which the first network data packet belongs, and determining When the application to which the first network data packet belongs is an application that meets the preset condition, the first network data packet is not further processed or the first network data packet is discarded, so that the first network data packet is Unable to reach the physical network interface of the terminal.
The method for saving power by a network access control based terminal according to claim 3, further comprising the steps of:

And when the application to which the first network data packet belongs is not an application that meets the preset condition, forwarding the first network data packet to a physical network interface of the terminal;

Reading, by the physical network interface, the second network data packet received by the physical network interface, and forwarding the second network data packet to the application corresponding to the second network data packet.
The method for saving power by a network access control based terminal according to claim 2, wherein when the whitelist setting information is monitored, or the current foreground application of the terminal is detected When changing, a new virtual network interface is created and the virtual network interface is overwritten with the new virtual network interface.
A device for saving power based on a network access control, comprising: a processor and a memory, wherein the memory stores computer readable instructions, the computer readable instructions being executed by the processor to complete The following operations of the account screening method:

Creating a virtual network interface when receiving a power saving application open command;

The first network data packet of the application that meets the preset condition is routed to the virtual network interface, such that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal.
The apparatus for saving power of a network access control based terminal according to claim 6, wherein:

The application that meets the preset condition includes: an application that does not belong to the preset whitelist, and/or is not the current foreground application of the terminal.
The device for saving power based on a network access control according to claim 6 or 7, wherein:

The method of routing the first network data packet of the application that meets the preset condition to the pre-created virtual network interface includes: routing the first network data packet of each application of the terminal to the virtual network interface, where the application of the terminal includes The application that meets the preset condition;

The method for the first network data packet of the application that meets the preset condition to be inaccessible to the physical network interface of the terminal includes: analyzing the first network data packet, determining an application to which the first network data packet belongs, and determining When the application to which the first network data packet belongs is an application that meets the preset condition, the first network data packet is not further processed or the first network data packet is discarded, so that the first network data packet is Unable to reach the physical network interface of the terminal.
The apparatus for saving power of a network access control based terminal according to claim 8, wherein the computer readable instructions further cause the processor to:

And when the application to which the first network data packet belongs is not an application that meets the preset condition, forwarding the first network data packet to a physical network interface of the terminal;

Reading a second network packet received by the physical network interface from the physical network interface, and the second The network data packet is forwarded to the application corresponding to the second network data packet.
The apparatus for saving power of a network access control based terminal according to claim 7, wherein the computer readable instructions further cause the processor to:

When the whitelist setting information is monitored, or when the current foreground application of the terminal is changed, a new virtual network interface is created, and the virtual network interface is overwritten with the new virtual network interface.
A method for saving power by a terminal based on network access control is used on a terminal, the terminal includes a processor and a memory, and the method includes the steps of:

Creating a virtual network interface when receiving a power saving application open command;

The first network data packet of the application that meets the preset condition is routed to the virtual network interface, such that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal.
The method for saving power of a network access control based terminal according to claim 11, wherein:

The application that meets the preset condition includes: an application that does not belong to the preset whitelist, and/or is not the current foreground application of the terminal.
The method for saving power by a network access control based terminal according to claim 11 or 12, characterized in that:

The method of routing the first network data packet of the application that meets the preset condition to the pre-created virtual network interface includes: routing the first network data packet of each application of the terminal to the virtual network interface, where the application of the terminal includes The application that meets the preset condition;

The method for the first network data packet of the application that meets the preset condition to be inaccessible to the physical network interface of the terminal includes: analyzing the first network data packet, determining an application to which the first network data packet belongs, and determining When the application to which the first network data packet belongs is an application that meets the preset condition, the first network data packet is not further processed or the first network data packet is discarded, so that the first network data packet is Unable to reach the physical network interface of the terminal.
The method for saving power by a network access control based terminal according to claim 13, further comprising the steps of:

When the application to which the first network data packet belongs is not an application that satisfies the preset condition, Transmitting the first network data packet to the physical network interface of the terminal;

Reading, by the physical network interface, the second network data packet received by the physical network interface, and forwarding the second network data packet to the application corresponding to the second network data packet.
The method for saving power by a network access control based terminal according to claim 12, wherein when a whitelist setting information is monitored, or when a current foreground application of the terminal is changed, a new virtual network interface is created. And overwriting the virtual network interface with the new virtual network interface.
A non-volatile storage medium, wherein computer readable instructions are stored, the computer readable instructions being executable by a processor to perform the following operations:

Creating a virtual network interface when receiving a power saving application open command;

The first network data packet of the application that meets the preset condition is routed to the virtual network interface, such that the first network data packet of the application that meets the preset condition cannot reach the physical network interface of the terminal.
A nonvolatile storage medium according to claim 16, wherein:

The application that meets the preset condition includes: an application that does not belong to the preset whitelist, and/or is not the current foreground application of the terminal.
A nonvolatile storage medium according to claim 16 or 17, wherein:

The method of routing the first network data packet of the application that meets the preset condition to the pre-created virtual network interface includes: routing the first network data packet of each application of the terminal to the virtual network interface, where the application of the terminal includes The application that meets the preset condition;

The method for the first network data packet of the application that meets the preset condition to be inaccessible to the physical network interface of the terminal includes: analyzing the first network data packet, determining an application to which the first network data packet belongs, and determining When the application to which the first network data packet belongs is an application that meets the preset condition, the first network data packet is not further processed or the first network data packet is discarded, so that the first network data packet is Unable to reach the physical network interface of the terminal.
The non-volatile storage medium of claim 18, wherein the computer readable instructions further cause the processor to:

When the application to which the first network data packet belongs is not an application that satisfies the preset condition, Transmitting the first network data packet to the physical network interface of the terminal;

Reading, by the physical network interface, the second network data packet received by the physical network interface, and forwarding the second network data packet to the application corresponding to the second network data packet.
The non-volatile storage medium of claim 17, wherein the computer readable instructions further cause the processor to:

When the whitelist setting information is monitored, or when the current foreground application of the terminal is changed, a new virtual network interface is created, and the virtual network interface is overwritten with the new virtual network interface.