CN102523593A - Method for prevent self program from being uninstalled - Google Patents

Method for prevent self program from being uninstalled Download PDF

Info

Publication number
CN102523593A
CN102523593A CN201110431248XA CN201110431248A CN102523593A CN 102523593 A CN102523593 A CN 102523593A CN 201110431248X A CN201110431248X A CN 201110431248XA CN 201110431248 A CN201110431248 A CN 201110431248A CN 102523593 A CN102523593 A CN 102523593A
Authority
CN
China
Prior art keywords
program
mobile phone
unloaded
security protection
uninstalling
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201110431248XA
Other languages
Chinese (zh)
Other versions
CN102523593B (en
Inventor
虞忠辉
董琳
包亮
罗文坤
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd
Original Assignee
CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd filed Critical CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd
Priority to CN201110431248.XA priority Critical patent/CN102523593B/en
Publication of CN102523593A publication Critical patent/CN102523593A/en
Application granted granted Critical
Publication of CN102523593B publication Critical patent/CN102523593B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Images

Abstract

The invention belongs to the mobile phone information security technology field and discloses a method for preventing a self program from being uninstalled. The method concretely comprises the following steps: monitoring a mobile phone system log in real time, if the mobile phone system log is a system uninstalling log, discriminating a mobile phone uninstalling prevention state, and if the mobile phone uninstalling prevention state is started, killing a program uninstalling process. According to register power on broadcast in power on, the mobile phone system log is monitored in real time. If the mobile phone log is the system uninstalling log and an uninstalling program is operated in a condition that a mobile phone user starts the mobile phone uninstalling prevention state, the program uninstalling process is killed directly, and an illegal user is avoided from uninstalling a security protection self program. A system regular trigger inspection mechanism is added in the invention, a system regular trigger event (such as a call, a short message and the like) is employed to check whether the security protection self program is uninstalled or not, once the program is uninstalled, a remedy scheme is started, and background restart software starts to function.

Description

The method that a kind of anti-self program is unloaded
Technical field
The present invention relates to mobile phone safe practice field, relate in particular to the method that a kind of anti-self program is unloaded.
Background technology
Along with increasing substantially of smart mobile phone popularity rate, smart mobile phone is when bringing convenience to us, and its safe and secret problem also highlights day by day, if smart mobile phone is mounted eavesdropping software, can cause Content of Communication and sensitive data to leak.The eavesdropping class software that relatively spreads unchecked at present in case after installing on the target mobile phones, can download phone directory, message registration, is had access to short message content like " X planted agent " software at any time, can also realize remote monitoring through specific telephone number, has very big harmfulness.
Though most mobile phone security protection software can effectively stop installing and using of known eavesdropping class Malware and wooden horse at present.But himself program can arbitrarily unload, and its function is had a greatly reduced quality.These wooden horses and Malware have plenty of through manual work is illegal to be installed, and has plenty of the user and is not intended to that operation installs.To illegal installation situation, setter can artificial unload it as finding that mobile phone has security protection class software in advance, carries out the installation of malice eavesdropping software again; The user is not intended to operate installation situation, and when mounted, wooden horse and Malware can detect whether security protection software is arranged on the target mobile phones, as existing, also can realize the installation of wooden horse and Malware is carried out in the unloading earlier of security protection software again.
Because existing Android platform safety securing software on the market; All there is not to realize to prevent the function that self program is unloaded; Therefore be necessary to study a kind of method that prevents the illegal unloading of self program quilt, prevent illegally to install after eavesdropping type Malware and trojan horse from unloading securing software.
Summary of the invention
Unloaded the harm that back eavesdropping type Malware and trojan horse can arbitrarily be installed to above-mentioned guard process self, the invention discloses the method that a kind of anti-self program is unloaded.
The object of the invention is realized through following technical proposals:
The method that a kind of anti-self program is unloaded, it specifically comprises following steps:
Monitoring cell phone system daily record in real time if the cell phone system daily record is system's unloading daily record, is then differentiated mobile phone anti-uninstall state, if mobile phone anti-uninstall state is opened, then kills the program unloading process.
Preferably, when mobile phone power-on, the registration start is broadcasted, and monitors the system journal of mobile phone in real time.
Preferably, said mobile phone anti-uninstall state comprises two kinds of opening and closing, sets through user's configuration management.
Preferably, the method that unloaded of said anti-self program comprises that also system regularly triggers checking mechanism and detects the security protection program and whether be downloaded.
Preferably; Said regular triggering checking mechanism detects its concrete grammar of security protection program: the system triggers incident makes monitoring facilities open; Whether fixing security protection self program of said monitoring facilities monitoring is unloaded; Unloaded if monitor security protection self program, then the backstage is restarted this security protection self program safety protection function is opened; Do not unloaded if monitor security protection self program, then withdrawed from; Trigger mechanism restarts in system after one period set time.
Preferably, said system triggers incident is phone or note.
Beneficial effect of the present invention: according to registration start broadcasting when starting shooting; Monitoring cell phone system daily record in real time; If the mobile phone daily record is system's unloading daily record; And this Uninstaller operates in the cellphone subscriber and is set under the situation that mobile phone anti-uninstall state opens, and then directly kills the program unloading process, avoids the disabled user to unload security protection self program.In addition; In order to prevent that thoroughly security protection self software from being unloaded, the present invention has added system and has regularly triggered checking mechanism, and the regular trigger event of employing system is (like phone; Notes etc.) whether inspection security protection self program is unloaded; In case find to be started remedial by after the unloading, the backstage is restarted program function is opened.
Description of drawings
Accompanying drawing 1 is the method flow diagram that anti-self program of the present invention is unloaded.
Accompanying drawing 2 is detection trigger mechanism flow charts of the present invention.
Embodiment
The method flow diagram that anti-self program of the present invention as shown in Figure 1 is unloaded.The invention discloses the method that a kind of anti-self program is unloaded; It specifically comprises following steps: monitor the cell phone system daily record in real time; If the cell phone system daily record is system's unloading daily record; Then mobile phone anti-uninstall state is differentiated,, then killed the program unloading process if mobile phone anti-uninstall state is opened.Wherein monitor the cell phone system daily record in real time and can realize the system journal real time scan, kill the program unloading process and can kill program unloading process APPLICATION.UNINSTALL through calling killBackgroundProcesses through system class LogcatScanner and method AndroidLogcatScanner.According to registration start broadcasting when starting shooting; Monitoring cell phone system daily record in real time; If the mobile phone daily record is system unloading daily record, and this Uninstaller operates in the cellphone subscriber and is set under the situation that mobile phone anti-uninstall state opens and promptly do not allow the unloading process, then directly kills the program unloading process; Avoid the disabled user to unload security protection self program, leak cellphone subscriber's information.
Preferably, the registration start is broadcasted when mobile phone power-on, and monitors the system journal of mobile phone in real time.In the system journal monitoring that mobile phone carries out mobile phone once starting shooting, guarantee the effect of monitoring better.
Preferably, above-mentioned mobile phone anti-uninstall state comprises two kinds of opening and closing, sets through user's configuration management., forbid self program is unloaded when opening at the anti-uninstall state, when closing, can unload self program at the anti-uninstall state.The setting of said mobile phone anti-uninstall state needs the user to import correct password just can to carry out.The present invention provides a user UI password inputting interface; The user imports correct password, just can be set to close or open two states by the anti-uninstall state, if the security protection state is set to open; When being system unloading daily record, the cell phone system daily record kills the program unloading process monitoring; If the anti-uninstall state is set to close, need not carry out any processing for unloading in the daily record monitoring the cell phone system daily record to process, be convenient to normal Uninstaller.Set through user's configuration management, just can realize the opening and closing of mobile phone anti-uninstall state, handled easily is realized simple.
Preferably, unloaded in order further to avoid security protection self program better, whether this method also discloses system and has regularly triggered checking mechanism and detect the security protection program and be downloaded.Whether the regular trigger event of employing system (like phone, note etc.) inspection security protection self program is unloaded, in case find to be started remedial by after the unloading, the backstage is restarted security protection self program safety protection function is opened.Through said method,, security protection self program can in time find after being unloaded, can adopt remedial measures more efficiently, farthest avoid the cellphone subscriber to be mounted the risk of X planted agent or trojan horse program.
Detection trigger mechanism flow chart of the present invention as shown in Figure 2.Its concrete grammar is: the system triggers incident is (like phone; Note etc.) make monitoring facilities open; Whether fixing security protection self program of said monitoring facilities monitoring is unloaded, and is unloaded if monitor security protection self program, and then the backstage is restarted this security protection self program safety protection function is opened; Do not unloaded if monitor security protection self program, then withdrawed from; Trigger mechanism restarts in system after one period set time.The setting of time period can be set according to monitoring time length at interval flexibly in above-mentioned a period of time.Through said method, unloaded the back system and restarted this security protection self program automatically monitoring security protection self program, safety protection function is opened, guarantee cellphone subscriber's information security, the very first time eliminates because the risk that security protection self program is caused by unloading.
Given coefficient and parameter in the above embodiments; Provide to those skilled in the art and realize or use of the present invention; The present invention does not limit and only gets aforementioned disclosed numerical value, and under the situation that does not break away from invention thought of the present invention, those skilled in the art can make various modifications or adjustment to the foregoing description; Thereby protection scope of the present invention do not limit by the foregoing description, and should be the maximum magnitude that meets the inventive features that claims mention.

Claims (6)

1. method that anti-self program is unloaded, it specifically comprises following steps:
Monitoring cell phone system daily record in real time if the cell phone system daily record is system's unloading daily record, is then differentiated mobile phone anti-uninstall state, if mobile phone anti-uninstall state is opened, then kills the program unloading process.
2. the method that anti-self program as claimed in claim 1 is unloaded is characterized in that when mobile phone power-on, registration start broadcasting, and monitor the system journal of mobile phone in real time.
3. the method that anti-self program as claimed in claim 1 is unloaded is characterized in that said mobile phone anti-uninstall state comprises two kinds of opening and closing, sets through user's configuration management.
4. the method that is unloaded like described anti-self program of any claim of claim 1-3 is characterized in that method that said anti-self program is unloaded comprises that also system regularly triggers checking mechanism and detects the security protection program and whether be downloaded.
5. the method that anti-self program as claimed in claim 4 is unloaded; It is characterized in that said regular triggering checking mechanism detects its concrete grammar of security protection program and is: the system triggers incident makes monitoring facilities open; Whether fixing security protection self program of said monitoring facilities monitoring is unloaded; Unloaded if monitor security protection self program, then the backstage is restarted this security protection self program safety protection function is opened; Do not unloaded if monitor security protection self program, then withdrawed from; Trigger mechanism restarts in system after one period set time.
6. the method that anti-self program as claimed in claim 5 is unloaded is characterized in that said system triggers incident is phone or note.
CN201110431248.XA 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded Expired - Fee Related CN102523593B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110431248.XA CN102523593B (en) 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110431248.XA CN102523593B (en) 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded

Publications (2)

Publication Number Publication Date
CN102523593A true CN102523593A (en) 2012-06-27
CN102523593B CN102523593B (en) 2015-08-19

Family

ID=46294361

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110431248.XA Expired - Fee Related CN102523593B (en) 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded

Country Status (1)

Country Link
CN (1) CN102523593B (en)

Cited By (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN102831035A (en) * 2012-08-20 2012-12-19 腾讯科技(深圳)有限公司 Information backup method and device
WO2013189273A1 (en) * 2012-06-18 2013-12-27 腾讯科技(深圳)有限公司 Method and device for monitoring preconfigured operation in mobile terminal
CN103810419A (en) * 2014-02-13 2014-05-21 北京宝利明威软件技术有限公司 Application uninstall preventing method and equipment
CN103971056A (en) * 2013-01-31 2014-08-06 腾讯科技(深圳)有限公司 Method and device for preventing application program in operating system from being uninstalled
WO2014206295A1 (en) * 2013-06-25 2014-12-31 Tencent Technology (Shenzhen) Company Limited Method, device and computer-readable storage medium for monitoring uninstallation event in operation platform
CN105930247A (en) * 2016-04-14 2016-09-07 北京小米移动软件有限公司 Method, device and mobile terminal for processing problem of system restart
CN106778173A (en) * 2016-12-15 2017-05-31 北京数字天域科技有限责任公司 The method and device that a kind of application lock based on intelligent operating system is set
CN108229109A (en) * 2017-12-27 2018-06-29 中国地质大学(武汉) A kind of android system securing software anti-uninstall method, equipment and storage device

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101071459A (en) * 2006-05-10 2007-11-14 乐金电子(昆山)电脑有限公司 Computer system safety protection setting method and its device
WO2008040223A1 (en) * 2006-09-18 2008-04-10 Jie Bai Method for filtering harmfulness data transferred between terminal and destination host in network
CN102279912A (en) * 2011-06-03 2011-12-14 奇智软件(北京)有限公司 Client program monitoring method and device and client

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101071459A (en) * 2006-05-10 2007-11-14 乐金电子(昆山)电脑有限公司 Computer system safety protection setting method and its device
WO2008040223A1 (en) * 2006-09-18 2008-04-10 Jie Bai Method for filtering harmfulness data transferred between terminal and destination host in network
CN102279912A (en) * 2011-06-03 2011-12-14 奇智软件(北京)有限公司 Client program monitoring method and device and client

Cited By (19)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
WO2013189273A1 (en) * 2012-06-18 2013-12-27 腾讯科技(深圳)有限公司 Method and device for monitoring preconfigured operation in mobile terminal
US9164748B2 (en) 2012-08-20 2015-10-20 Tencent Technology (Shenzhen) Company Limited Information backup method and apparatus
WO2014029299A1 (en) * 2012-08-20 2014-02-27 Tencent Technology (Shenzhen) Company Limited Information backup method and apparatus
CN102831035B (en) * 2012-08-20 2015-11-18 腾讯科技(深圳)有限公司 The method of backup information and device
CN102831035A (en) * 2012-08-20 2012-12-19 腾讯科技(深圳)有限公司 Information backup method and device
CN103971056A (en) * 2013-01-31 2014-08-06 腾讯科技(深圳)有限公司 Method and device for preventing application program in operating system from being uninstalled
US9747449B2 (en) 2013-01-31 2017-08-29 Tencent Technology (Shenzhen) Company Limited Method and device for preventing application in an operating system from being uninstalled
WO2014117652A1 (en) * 2013-01-31 2014-08-07 Tencent Technology (Shenzhen) Company Limited Method and device for preventing application in an operating system from being uninstalled
US10176327B2 (en) 2013-01-31 2019-01-08 Tencent Technology (Shenzhen) Company Limited Method and device for preventing application in an operating system from being uninstalled
CN103971056B (en) * 2013-01-31 2016-05-11 腾讯科技(深圳)有限公司 A kind ofly prevent the unloaded method and apparatus of application program in operating system
US20170316209A1 (en) * 2013-01-31 2017-11-02 Tencent Technology (Shenzhen) Company Limited (2p) Method and device for preventing application in an operating system from being uninstalled
WO2014206295A1 (en) * 2013-06-25 2014-12-31 Tencent Technology (Shenzhen) Company Limited Method, device and computer-readable storage medium for monitoring uninstallation event in operation platform
CN103810419B (en) * 2014-02-13 2018-01-05 北京宝利明威软件股份有限公司 One kind applies anti-uninstall method and apparatus
CN103810419A (en) * 2014-02-13 2014-05-21 北京宝利明威软件技术有限公司 Application uninstall preventing method and equipment
CN105930247A (en) * 2016-04-14 2016-09-07 北京小米移动软件有限公司 Method, device and mobile terminal for processing problem of system restart
CN105930247B (en) * 2016-04-14 2018-09-04 北京小米移动软件有限公司 Processing method, device and the mobile terminal of system reboot problem
CN106778173A (en) * 2016-12-15 2017-05-31 北京数字天域科技有限责任公司 The method and device that a kind of application lock based on intelligent operating system is set
CN106778173B (en) * 2016-12-15 2021-02-23 北京数字天域科技有限责任公司 Method and device for setting application lock based on intelligent operating system
CN108229109A (en) * 2017-12-27 2018-06-29 中国地质大学(武汉) A kind of android system securing software anti-uninstall method, equipment and storage device

Also Published As

Publication number Publication date
CN102523593B (en) 2015-08-19

Similar Documents

Publication Publication Date Title
CN102523593B (en) A kind of method that self program anti-is unloaded
CN104462978B (en) A kind of method and apparatus of application program rights management
EP1907901B1 (en) System and method for remotely controlling device functionality
US9826093B2 (en) Mobile terminal calling request message processing method, device and system
EP2115953B1 (en) Apparatus and methods for locating, tracking and/or recovering a wireless communication device
US8701195B2 (en) Method for antivirus in a mobile device by using a mobile storage and a system thereof
CN111931166B (en) Application program anti-attack method and system based on code injection and behavior analysis
CN104573435A (en) Method for terminal authority management and terminal
CN102104679A (en) Method and device for preventing mobile terminal from being used by invalid user
CN103971056A (en) Method and device for preventing application program in operating system from being uninstalled
CN104270763A (en) Message protection method and system
CN104298915A (en) Installation package tampering preventing method
CN103984576A (en) Method and terminal for preventing application from being uninstalled
CN106778089A (en) A kind of system and method that security management and control is carried out to software authority and behavior
US8626121B2 (en) Tracking mobile communication devices
CN102509054A (en) Mobile terminal and application program control method for mobile terminal
CN103679028A (en) Software behavior monitoring method and terminal
CN102946604A (en) Method and device for version protection of mobile terminal
US11140129B2 (en) Distributed firewall system
CN106778173B (en) Method and device for setting application lock based on intelligent operating system
WO2009145730A1 (en) Method and system for disabling camera feature of a mobile device
CN102547713A (en) Anti-activating method aiming at X undercover software
CN109474924A (en) A kind of restoration methods, device, computer equipment and the storage medium of lock network file
CN102567684A (en) Anti-installation method of X-undercover wiretapping type software
CN104298924A (en) Method and device for ensuring system safety and terminal

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20150819

Termination date: 20211221