CN102523593B - A kind of method that self program anti-is unloaded - Google Patents

A kind of method that self program anti-is unloaded Download PDF

Info

Publication number
CN102523593B
CN102523593B CN201110431248.XA CN201110431248A CN102523593B CN 102523593 B CN102523593 B CN 102523593B CN 201110431248 A CN201110431248 A CN 201110431248A CN 102523593 B CN102523593 B CN 102523593B
Authority
CN
China
Prior art keywords
unloaded
program
mobile phone
daily record
security protection
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CN201110431248.XA
Other languages
Chinese (zh)
Other versions
CN102523593A (en
Inventor
虞忠辉
董琳
包亮
罗文坤
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd
Original Assignee
CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd filed Critical CHENGDU 30RUITONG MOBILE COMMUNICATION Co Ltd
Priority to CN201110431248.XA priority Critical patent/CN102523593B/en
Publication of CN102523593A publication Critical patent/CN102523593A/en
Application granted granted Critical
Publication of CN102523593B publication Critical patent/CN102523593B/en
Expired - Fee Related legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Abstract

The invention belongs to mobile phone information safety technical field, the invention discloses a kind of method that self program anti-is unloaded, it specifically comprises following steps: the daily record of Real-Time Monitoring cell phone system, if cell phone system daily record is system uninstallation daily record, then mobile phone anti-uninstall state is differentiated, if preventing mobile phone unloaded state is opened, then kill program unloading process.According to the registration start broadcast when starting shooting, the daily record of Real-Time Monitoring cell phone system, if mobile phone daily record is system uninstallation daily record, and this Uninstaller operates in cellphone subscriber when being set as that preventing mobile phone unloaded state is opened, then directly kill program unloading process, avoid disabled user to unload security protection self program.The present invention also adds system at regular intervals and triggers checking mechanism, and whether security protection self program unloaded to adopt system at regular intervals trigger event (as phone, note etc.) to check, once find unloaded after, start and remedy scheme, backstage is restarted software and function is opened.

Description

A kind of method that self program anti-is unloaded
Technical field
The present invention relates to mobile phone safe technical field, particularly relate to a kind of method that self program anti-is unloaded.
Background technology
Along with increasing substantially of smart mobile phone popularity rate, smart mobile phone is while bringing convenience to us, and its safe and secret problem also highlights day by day, if smart mobile phone mounted eavesdropping software, Content of Communication and sensitive data can be caused to leak.Compare the wiretapping type software that spreads unchecked at present as " X planted agent " software, once after installing in target mobile phones, phone directory, message registration can be downloaded, has access to short message content at any time, also realize remote monitoring by specific telephone number, there is very large harmfulness.
Although at present most mobile phone safe securing software effectively can stop installing and using of known wiretapping type Malware and wooden horse.But himself program can arbitrarily unload, its function is had a greatly reduced quality.These wooden horses and Malware have plenty of to be installed by artificial illegal, has plenty of user and is not intended to that operation installs.To illegal installation situation, as found, mobile phone has security protection class software to setter in advance, can manually unload it, then carries out the installation of malice eavesdropping software; Be not intended to operate installation situation to user, when mounted, wooden horse and Malware can detect in target mobile phones whether have protection capacity of safety protection software, as existed, also can realize first unloading protection capacity of safety protection software, then carrying out the installation of wooden horse and Malware.
Due to existing Android platform protection capacity of safety protection software on the market, all do not realize the function preventing self program unloaded, therefore be necessary that a kind of self program that prevents of research is by the method illegally unloaded, illegally install after preventing wiretapping type Malware and trojan horse unloading securing software.
Summary of the invention
For the harm that the unloaded rear wiretapping type Malware of above-mentioned guard process self and trojan horse can arbitrarily be installed, the invention discloses a kind of method that self program anti-is unloaded.
Object of the present invention is realized by following technical proposals:
The method that self program anti-is unloaded, it specifically comprises following steps:
The daily record of Real-Time Monitoring cell phone system, if cell phone system daily record is system uninstallation daily record, then differentiates mobile phone anti-uninstall state, if preventing mobile phone unloaded state is opened, then kills program unloading process.
Preferably, when mobile phone power-on, registration start broadcast, and the system journal of Real-Time Monitoring mobile phone.
Preferably, described preventing mobile phone unloaded state comprises opening and closing two kinds, is set by user's configuration management.
Preferably, whether the method that described self program anti-is unloaded also comprises system at regular intervals triggering checking mechanism detection security protection program and is downloaded.
Preferably, described regular triggering checking mechanism detects its concrete grammar of security protection program: system triggers event makes monitoring facilities open, whether security protection self program that described monitoring facilities monitoring is fixed is unloaded, if it is unloaded to monitor security protection self program, then backstage is restarted self program of this security protection and is opened by safety protection function; If it is unloaded not monitor security protection self program, then exit; After one period of set time, system restarts trigger mechanism.
Preferably, described system triggers event is phone or note.
Beneficial effect of the present invention: according to the registration start broadcast when starting shooting, the daily record of Real-Time Monitoring cell phone system, if mobile phone daily record is system uninstallation daily record, and this Uninstaller operates in cellphone subscriber when being set as that preventing mobile phone unloaded state is opened, then directly kill program unloading process, avoid disabled user to unload security protection self program.In addition, in order to thoroughly prevent security protection self software unloaded, present invention adds system at regular intervals and trigger checking mechanism, adopt system at regular intervals trigger event (as phone, note etc.) check that whether security protection self program is unloaded, once find unloaded after, start remedy scheme, function is opened by backstage reset routine.
Accompanying drawing explanation
Accompanying drawing 1 is the method flow diagram that self program is unloaded of preventing of the present invention.
Accompanying drawing 2 is detection trigger of the present invention mechanism flow charts.
Embodiment
The method flow diagram that self program anti-of the present invention is unloaded as shown in Figure 1.The invention discloses a kind of method that self program anti-is unloaded, it specifically comprises following steps: the daily record of Real-Time Monitoring cell phone system, if cell phone system daily record is system uninstallation daily record, then mobile phone anti-uninstall state is differentiated, if preventing mobile phone unloaded state is opened, then kill program unloading process.Wherein the daily record of Real-Time Monitoring cell phone system can realize system journal real time scan by system class LogcatScanner and method AndroidLogcatScanner, kills program unloading process and can kill program unloading process APPLICATION.UNINSTALL by calling killBackgroundProcesses.According to the registration start broadcast when starting shooting, the daily record of Real-Time Monitoring cell phone system, if mobile phone daily record is system uninstallation daily record, and this Uninstaller operates in when cellphone subscriber is set as that preventing mobile phone unloaded state is opened and does not namely allow unloading process, then directly kill program unloading process, avoid disabled user to unload security protection self program, leak the information of cellphone subscriber.
Preferably, the registration start broadcast when mobile phone power-on, and the system journal of Real-Time Monitoring mobile phone.In the system journal monitoring that mobile phone carries out mobile phone once starting shooting, ensure the effect of monitoring better.
Preferably, above-mentioned preventing mobile phone unloaded state comprises opening and closing two kinds, is set by user's configuration management.When anti-uninstall state is for opening, forbidding unloading self program, when anti-uninstall state is for closing, can unload self program.The setting of described preventing mobile phone unloaded state needs user to input correct password just can to perform.The invention provides a user UI password entry interface, user inputs correct password, just anti-uninstall state can be set to close or open two states, if security protection state is set to open, program unloading process is killed when monitoring cell phone system daily record and being system uninstallation daily record, if anti-uninstall state is set to close, does not need to carry out any process to process when monitoring cell phone system daily record and being unloading daily record, be convenient to normal Uninstaller.Set by user's configuration management, just can realize the opening and closing of preventing mobile phone unloaded state, handled easily, realize simple.
Preferably, in order to avoid security protection self program unloaded further better, whether this method also discloses system at regular intervals triggering checking mechanism detection security protection program and is downloaded.Whether security protection self program unloaded to adopt system at regular intervals trigger event (as phone, note etc.) to check, once find unloaded after, start and remedy scheme, backstage is restarted security protection self program and is opened by safety protection function.By said method, after security protection self program is unloaded, energy Timeliness coverage, can adopt remedial measures more efficiently, farthest avoids cellphone subscriber to be mounted the risk of X planted agent or trojan horse program.
Detection trigger mechanism flow chart of the present invention as shown in Figure 2.Its concrete grammar is: system triggers event is (as phone, note etc.) monitoring facilities is opened, whether fixing security protection self program of described monitoring facilities monitoring is unloaded, if it is unloaded to monitor security protection self program, then backstage is restarted self program of this security protection and opened by safety protection function; If it is unloaded not monitor security protection self program, then exit; After one period of set time, system restarts trigger mechanism.In above-mentioned a period of time, the setting of time period can set flexibly according to the length at monitoring time interval.By said method, monitoring unloaded rear self program of this security protection of system autoboot of security protection self program, opened by safety protection function, ensureing the information security of cellphone subscriber, the very first time eliminates because the unloaded risk caused of security protection self program.
Coefficient given in the above embodiments and parameter; be available to those skilled in the art to realize or use of the present invention; the present invention does not limit and only gets aforementioned disclosed numerical value; without departing from the present invention in the case of the inventive idea; those skilled in the art can make various modifications or adjustment to above-described embodiment; thus protection scope of the present invention not limit by above-described embodiment, and should be the maximum magnitude meeting the inventive features that claims are mentioned.

Claims (2)

1. the method that self program anti-is unloaded, it specifically comprises following steps: the daily record of Real-Time Monitoring cell phone system, if cell phone system daily record is system uninstallation daily record, then differentiates mobile phone anti-uninstall state, if preventing mobile phone unloaded state is opened, then kill program unloading process; When mobile phone power-on, registration start broadcast, and the system journal of Real-Time Monitoring mobile phone;
Wherein, whether system at regular intervals triggers checking mechanism detection security protection program and is downloaded, described regular triggering checking mechanism detects its concrete grammar of security protection program: system triggers event makes monitoring facilities open, whether security protection self program that described monitoring facilities monitoring is fixed is unloaded, if it is unloaded to monitor security protection self program, then backstage is restarted self program of this security protection and is opened by safety protection function; If it is unloaded not monitor security protection self program, then exit; After one period of set time, system restarts trigger mechanism, and described system triggers event is phone or note.
2. the method that self program anti-as claimed in claim 1 is unloaded, it is characterized in that the method for preventing that self program is unloaded as claimed in claim 1, it is characterized in that described preventing mobile phone unloaded state comprises opening and closing two kinds, set by user's configuration management.
CN201110431248.XA 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded Expired - Fee Related CN102523593B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201110431248.XA CN102523593B (en) 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201110431248.XA CN102523593B (en) 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded

Publications (2)

Publication Number Publication Date
CN102523593A CN102523593A (en) 2012-06-27
CN102523593B true CN102523593B (en) 2015-08-19

Family

ID=46294361

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201110431248.XA Expired - Fee Related CN102523593B (en) 2011-12-21 2011-12-21 A kind of method that self program anti-is unloaded

Country Status (1)

Country Link
CN (1) CN102523593B (en)

Families Citing this family (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN103516864B (en) * 2012-06-18 2015-11-11 腾讯科技(深圳)有限公司 Monitor the method and apparatus of predetermined registration operation in the terminal
CN102831035B (en) * 2012-08-20 2015-11-18 腾讯科技(深圳)有限公司 The method of backup information and device
CN103971056B (en) * 2013-01-31 2016-05-11 腾讯科技(深圳)有限公司 A kind ofly prevent the unloaded method and apparatus of application program in operating system
CN104133752B (en) * 2013-06-25 2015-07-29 腾讯科技(深圳)有限公司 The method for supervising of operating platform and device
CN103810419B (en) * 2014-02-13 2018-01-05 北京宝利明威软件股份有限公司 One kind applies anti-uninstall method and apparatus
CN105930247B (en) * 2016-04-14 2018-09-04 北京小米移动软件有限公司 Processing method, device and the mobile terminal of system reboot problem
CN106778173B (en) * 2016-12-15 2021-02-23 北京数字天域科技有限责任公司 Method and device for setting application lock based on intelligent operating system
CN108229109A (en) * 2017-12-27 2018-06-29 中国地质大学(武汉) A kind of android system securing software anti-uninstall method, equipment and storage device

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101071459A (en) * 2006-05-10 2007-11-14 乐金电子(昆山)电脑有限公司 Computer system safety protection setting method and its device
WO2008040223A1 (en) * 2006-09-18 2008-04-10 Jie Bai Method for filtering harmfulness data transferred between terminal and destination host in network
CN102279912A (en) * 2011-06-03 2011-12-14 奇智软件(北京)有限公司 Client program monitoring method and device and client

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101071459A (en) * 2006-05-10 2007-11-14 乐金电子(昆山)电脑有限公司 Computer system safety protection setting method and its device
WO2008040223A1 (en) * 2006-09-18 2008-04-10 Jie Bai Method for filtering harmfulness data transferred between terminal and destination host in network
CN102279912A (en) * 2011-06-03 2011-12-14 奇智软件(北京)有限公司 Client program monitoring method and device and client

Also Published As

Publication number Publication date
CN102523593A (en) 2012-06-27

Similar Documents

Publication Publication Date Title
CN102523593B (en) A kind of method that self program anti-is unloaded
CN104462978B (en) A kind of method and apparatus of application program rights management
US9826093B2 (en) Mobile terminal calling request message processing method, device and system
US8943554B2 (en) Managing tethered data traffic over a hotspot network
CN104317626B (en) The methods, devices and systems of application software control of authority in terminal device
CN102186167B (en) A kind of to applying the method and system monitored
CN102104679A (en) Method and device for preventing mobile terminal from being used by invalid user
EP4093074A1 (en) Remote secure unlock
US8701195B2 (en) Method for antivirus in a mobile device by using a mobile storage and a system thereof
KR20090109126A (en) Apparatus and methods for locating, tracking and/or recovering a wireless communication device
CN102572123B (en) Method for monitoring call record uploading of eavesdropping software X undercover
CN103905641B (en) A kind of method preventing mobile phone flow from escaping
CN104573435A (en) Method for terminal authority management and terminal
CN104598831B (en) A kind of guard method of data safety and terminal
CN104270763A (en) Message protection method and system
CN103971056A (en) Method and device for preventing application program in operating system from being uninstalled
CN102509054A (en) Mobile terminal and application program control method for mobile terminal
CN101198121A (en) Authentication method for limiting mobile phone without using by others
WO2012129851A1 (en) Mobile terminal and network locking method therefor
EP2040497A1 (en) Tracking mobile communication devices
CN104992116A (en) Monitoring method and system based on intent sniffer
CN104125223A (en) Security defending system for private data of mobile device
CN106778173B (en) Method and device for setting application lock based on intelligent operating system
WO2009145730A1 (en) Method and system for disabling camera feature of a mobile device
CN102968588B (en) Intelligent terminal system

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20150819

Termination date: 20211221