CN104318156B - A kind of process access safety method and system - Google Patents
A kind of process access safety method and system Download PDFInfo
- Publication number
- CN104318156B CN104318156B CN201410566662.5A CN201410566662A CN104318156B CN 104318156 B CN104318156 B CN 104318156B CN 201410566662 A CN201410566662 A CN 201410566662A CN 104318156 B CN104318156 B CN 104318156B
- Authority
- CN
- China
- Prior art keywords
- access
- change
- changes
- strategy
- generation
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/55—Detecting local intrusion or implementing counter-measures
- G06F21/56—Computer malware detection or handling, e.g. anti-virus arrangements
- G06F21/566—Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices
Abstract
The present invention provides a kind of process access safety method and system.The process access safety method includes：Change to process ID is monitored；When the ID for the process that detects changes, the information for the process that the ID changes, including the ID and its access rights before change, the ID after change and its access rights are obtained；The progress information changed according to default access strategy and the generation ID, it is determined that the processing to the generation ID processes changed；The access strategy includes the scope for allowing access rights to change.Technical scheme can prevent and detect that the improper of process proposes power behavior; protect system not by rogue program by improve process access limit obtaining, change, the valuable source in leakage system and data, so as to substantially increase the security of system.
Description
Technical field
The present invention relates to a kind of computer security technique, more particularly to a kind of process access safety method and system.
Background technology
In computer systems, all application programs are run in the way of process, and process operationally can root
Corresponding resource is accessed the need for according to application program.Different application programs, which can operationally have different resources to access, to be needed
Ask, access rights, accordingly, process can operationally there are different access rights.Generally, the access rights of process are to enter
What journey was determined when creating, but when process is run, can also dynamically change the access rights of process.Rogue program can also lead to
The access rights of change process are crossed to obtain or operate more resources.
Due to obtained by changing the access rights of process the access rights higher to system rogue program it is continuous
Increase, the safety of computer system is by increasingly severe threat.It is existing when rogue program obtains enough access rights
System Security mechanism can not prevent the valuable source and data in malevolence program from accessing, modification, leakage system, the system
Safety belt carrys out huge threat.This threat is especially apparent in the mobile terminal using android system.Specific situation
Under, the leak that the rogue program such as virus or wooden horse is readily available in system obtains system superuser right, so as to control completely
Mobile terminal processed, so that stealing telephone expenses on mobile terminals, stealing the privacy of user such as short message, address list or even monitor call, endangers
Evil is very big.
In consideration of it, how to ensure the security of process access limit in the system of mobile terminal, so as to protect system to pacify
It is complete just to turn into those skilled in the art's urgent problem to be solved.
The content of the invention
The shortcoming of prior art in view of the above, it is an object of the invention to provide a kind of process access safety method and
System, for solving the problem of process access of computer operating system in the prior art limits safety precaution.
In order to achieve the above objects and other related objects, the present invention provides a kind of process access safety system, the process
Access safety system includes trusted module and process access control module, wherein：Trusted module, including trusted service unit；Institute
Stating trusted service unit is used to provide believable software service for the process access control module；Process access control module,
Including process detection control unit and access strategy administrative unit；The process detection control unit is used for the change to process ID
Monitored, when the ID for the process that detects changes, obtain the information for the process that the ID changes, including before change
ID and its access rights after ID and its access rights, change, the access is sent to by the information of the ID processes changed
Policy management element；The access strategy administrative unit, is connected with the trusted service unit, for according to default access plan
The progress information slightly changed with the generation ID, it is determined that the processing to the generation ID processes changed；The access strategy bag
Include the scope for allowing access rights to change.
Alternatively, the trusted module also includes integrity measurement unit, and the integrity measurement unit is used for described
Process access control module carries out integrity verification；
Alternatively, the ID includes any of UID or EUID.
Alternatively, the trusted module is realized based on TrustZone technologies.
Alternatively, the processing to the generation ID processes changed includes：The process letter changed as the generation ID
Process access limit before the change in breath is less than the process access limit after the change and not in the access strategy
During allowed band, the process that the generation ID changes is removed.
Alternatively, the access control control module also includes access strategy modified module, and the access strategy changes mould
Block is used to receive policy control order, and the access strategy is changed according to the policy control order.
Alternatively, the policy control order includes the policy control order sent by the trusted service unit.
The present invention also provides a kind of process access safety method, and the process access safety method includes：To process ID
Change is monitored；When the ID for the process that detects changes, the information for the process that the ID changes is obtained, including change
ID and its access rights after preceding ID and its access rights, change；Changed according to default access strategy and the generation ID
Progress information, it is determined that to the generation ID change process processing；The access strategy includes allowing access rights to change
Scope.
Alternatively, the ID includes any of UID or EUID.
Alternatively, the processing to the generation ID processes changed includes：The process letter changed as the generation ID
Process access limit before the change in breath is less than the process access limit after the change and not in the access strategy
During allowed band, the process that the generation ID changes is removed.
Alternatively, methods described also includes：Policy control order is received, is visited according to policy control order modification is described
Ask strategy.
Alternatively, the process access safety method is what the trusted service based on TrustZone technique constructions was realized.
As described above, a kind of process access safety method and system of the present invention, have the advantages that：It can prevent
With detecting that the improper of process proposes power behavior, protect system not by rogue program by improve process access limit to obtain,
Modification, the valuable source in leakage system and data, so as to substantially increase the security of system.
Brief description of the drawings
Fig. 1 is shown as a kind of module diagram of an embodiment of process access safety system of the invention.
Fig. 2 is shown as a kind of method flow schematic diagram of an embodiment of process access safety method of the present invention.
Component label instructions
1 process access safety system
11 trusted modules
111 trusted service units
112 integrity measurement units
12 process access control modules
121 process detection control units
122 access strategy administrative units
123 access strategies change unit
S1~S3 steps
Embodiment
Illustrate embodiments of the present invention below by way of specific instantiation, those skilled in the art can be by this specification
Disclosed content understands other advantages and effect of the present invention easily.The present invention can also pass through specific realities different in addition
The mode of applying is embodied or practiced, the various details in this specification can also based on different viewpoints with application, without departing from
Various modifications or alterations are carried out under the spirit of the present invention.
It should be noted that the diagram provided in the present embodiment only illustrates the basic conception of the present invention in a schematic way,
Then only display is painted with relevant component in the present invention rather than according to component count, shape and the size during actual implementation in schema
System, it is actual when implementing, and kenel, quantity and the ratio of each component can be a kind of random change, and its assembly layout kenel also may be used
Can be increasingly complex.
The present invention provides a kind of process access safety system.As shown in figure 1, in one embodiment, the process is accessed
Security system 1 includes trusted module 11 and process detection control module 12.Wherein：
Trusted module 11, including trusted service unit 111；The trusted service unit 111 is used to access for the process
Control module 12 provides believable software service.In one embodiment, the trusted module 11 is built based on reliable hardware, institute
State reliable hardware and be based on TrustZone technologies.TrustZone (TM) technology appears in ARMv6KZ and relatively late application core
In heart framework.It provides a kind of inexpensive scheme, for adding exclusive security kernel in system single chip (SoC), by
The access control mode of hardware construction supports two virtual processors.This mode may be such that application core can be two
Switch (generally renaming as field (worlds) to avoid the title with other functional areas from obscuring) between individual state, in this framework
Under information can be avoided to leak to more unsafe field from more believable core realm.Switching between this kernel field is led to
Be often with other functions of processor entirely without relevance (orthogonal), therefore every field can each independent work but
Remain to using same kernel.Internal memory and peripheral device also can therefore learn the running of current kernel field why, and can be directed to
This mode carries out access control come the secret and coding provided to device.Typical TrustZone technology applications are will can be
Operating system is intactly performed in the environment of one shortage security, and there can be the volume of less security in a trustable environment
Code.
Process access control module 12, including process detection control unit 121, access strategy administrative unit 122.It is described enter
The change that journey detection control unit 121 is used for process ID is monitored, when the ID for the process that detects changes, and is obtained
The information for the process that the ID changes, including the ID and its access rights before change, the ID after change and its access rights, by institute
The information for stating the process of ID changes is sent to the access strategy administrative unit 122.In one embodiment, the process ID
(Identity, identification number) is the UID (ID) of process, in another embodiment, and the process ID is process
EUID (valid user-id).When process ID changes, the access rights of process also can usually change, now, process detection
Control unit 121 obtains the information for occurring the process that process ID changes, including occurs the process ID before process ID changes and enter
Journey access rights, occur the process ID after process ID changes and process access limit.
Monitoring of the Programmable detection control unit 121 to process is that all processes of system operation are carried out with certain cycle
ID, user profile of scanning, and all information of record the process, including process etc..When next cycle arrives, Programmable detection
Control unit 121 may proceed to scan whole progress informations, and be compared with the process scanning result of last time.Now, if than
Relatively result has newly-increased root consumer process, then Programmable detection control unit 121 can be further processed to the process.If compared
As a result the ID for having a certain process changes, and the user of the process has turned into root user, then Programmable detection control unit 121
The process can be further processed.It is without any processing if result is without exception.
Above-mentioned record the process information is not limited only to the startup order of the ID of process, user, in addition to the process, during startup
Between, the details such as parent process.Front and rear 2 scanning results, are ranked up with process ID, find newly-increased process ID and disappearance
Process ID.If not provided, result is without exception.If so, continuing.Newly-increased process and disappearance progress information are compared, such as
Unchanged before and after the information such as startup order, startup time, the parent process of really a certain process, only process ID has change, then is designated as
The process ID changes.Further, if the user profile of the process also changes, and it is changed into root user, then to this
Process is further processed.Remaining newly-increased process, if user profile is not root user, is not processed.If root
User, then be further processed to the process.
Access strategy administrative unit 122, is connected with the process detection control unit 121, for being accessed according to default
The progress information that tactful and described generation ID changes, it is determined that the processing to the generation ID processes changed；The access strategy
Including the scope for allowing access rights to change.Specifically, the access strategy includes the model that system allows access rights to change
Enclose, the situation that such as system allows：Process access before change is limited to which resource be able to access that, the process access after change
Which it is limited to that resource be able to access that.In one embodiment, the processing to the generation ID processes changed includes：Work as institute
State the process access limit before the change in the progress information for occurring ID changes and be less than the process access after the change
Limit and not in the access strategy allowed band, remove the process that the generation ID changes.If what the generation ID changed
Process access limit before changing described in progress information is less than the process access limit after the change, when the change is being accessed
In tactful allowed band, i.e., system allows such case, now, and the process that the generation ID changes is not removed.If institute
The process access limit occurred described in the progress information that ID changes before change is stated to visit more than or equal to the process after the change
Authority is asked, the process that the generation ID changes is not removed.
The access strategy that access strategy administrative unit 122 is performed is when system starts, according to default system convention, often
The corresponding authority access list of one process, this list is preset, and the resource for limiting system process is accessed.Such as：A enters
Journey can only access bluetooth equipment, it is not possible to access wifi equipment in system design.So, meeting in the permissions list of A processes
There is this access rule.If A processes have the scope for having surmounted permissions list defined, this process is regarded as the process of going beyond one's commission.Authority
List scope is not limited only to the access to device resource, also the limitation including accessing user's sensitive data.
In one embodiment, the trusted module 11 also includes integrity measurement unit 112, the integrity measurement list
Member 112 is used to carry out integrity verification to the process access control module 12.In one embodiment, the integrity measurement
The integrality that program 112 is mainly when system starts to process access control module 12 is verified, including uses hash algorithm
Or other algorithms, i.e., the process access control module that will be loaded is verified.When using hash algorithm when, if hash with
Initial value is inconsistent, then illustrates that system is likely to be broken and serious problems occurs, now system will be out of service.If consistent
Continue.
In one embodiment, the access control control module 12 also includes access strategy modified module 123, described to visit
Ask that strategy modification module 123 is used to receive policy control order, the access strategy is changed according to the policy control order.
In one embodiment, the policy control order includes the policy control order sent by the trusted service unit 112.Institute
The interface that stating policy control order can be provided including user or application program by trusted service unit 112 is sent.When described
When access strategy modified module 123 receives the policy control order, it will be visited according to policy control order modification is described
Ask strategy.The process access that i.e. modification system allows limits the scope changed.
The present invention also provides a kind of process access safety method.In one embodiment, the process access safety method
It is what the trusted service based on TrustZone technique constructions was realized.As shown in Fig. 2 in one embodiment, the process is accessed
Safety method includes：
Step S1, the change to process ID is monitored.Specifically, the process ID include process UID (ID) and
One kind in EUID (valid user-id).In one embodiment, it is to be based on that the change to process ID, which carries out monitoring,
What the trusted service of TrustZone technique constructions was realized.
Step S2, when the ID for the process that detects changes, obtains the information for the process that the ID changes, including change
ID after ID and its access rights, change and its access rights before change.Specifically, when the ID for the process that detects changes
When, obtain the information for the process that the ID changes, including the ID and its access rights before change, the ID and its access right after change
Limit.In one embodiment, the process ID (Identity, identification number) is the UID (ID) of process, in another reality
Apply in example, the process ID is the EUID (valid user-id) of process.When process ID changes, the access rights of process are also usually
It can change, now, process detection control unit 121 obtains the information for occurring the process that process ID changes, including enters
Process ID and process access limit before journey ID changes, occur the process ID after process ID changes and process access limit.
Step S3, the progress information changed according to default access strategy and the generation ID, it is determined that to the generation ID
The processing of the process of change；The access strategy includes the scope for allowing access rights to change.Specifically, the access strategy bag
The scope that system allows access rights to change, the situation that such as system allows are included：Process access before change is limited to visit
Which resource is asked, the process access after change is limited to which resource be able to access that.In one embodiment, it is described to the hair
The processing for the process that raw ID changes includes：Process access before the change in the progress information that the generation ID changes
Limit is less than the process access limit after the change and not in the access strategy allowed band, removes the generation ID and changes
Process.If the process access limit before changing described in the progress information that the generation ID changes is less than after the change
Process access is limited, and when the change is in access strategy allowed band, i.e., system allows such case, now, do not remove
The process that the generation ID changes.If the process access limit before changing described in the progress information that the generation ID changes is big
Process access after the change is limited, and the process that the generation ID changes is not removed.
In one embodiment, methods described also includes：Policy control order is received, is repaiied according to the policy control order
Change the access strategy.In one embodiment, the policy control order includes sending by the trusted service interface.When
When receiving the policy control order, the access strategy will be changed according to the policy control order.That is modification system permits
Perhaps the scope that process access limit changes.
In summary, a kind of process access safety method and system of the invention, can prevent and detect process not just
When proposing power behavior, protect system not by rogue program by improve process access limit obtaining, change, the weight in leakage system
Resource and data are wanted, so as to substantially increase the security of system.So, the present invention effectively overcomes of the prior art a variety of
Shortcoming and have high industrial utilization.
The above-described embodiments merely illustrate the principles and effects of the present invention, not for the limitation present invention.It is any ripe
Know the personage of this technology all can carry out modifications and changes under the spirit and scope without prejudice to the present invention to above-described embodiment.Cause
This, those of ordinary skill in the art is complete without departing from disclosed spirit and institute under technological thought such as
Into all equivalent modifications or change, should by the present invention claim be covered.
Claims (10)
1. a kind of process access safety system, it is characterised in that the process access safety system includes trusted module and process
Access control module, wherein：
Trusted module, including trusted service unit；The trusted service unit is used to provide for the process access control module
Believable software service；
Process access control module, including process detection control unit and access strategy administrative unit；
The change that the process detection control unit is used for process ID is monitored, when the ID for the process that detects changes
When, obtain the information for the process that the ID changes, including the ID and its access rights before change, the ID and its access right after change
Limit, the access strategy administrative unit is sent to by the information of the ID processes changed；The ID is included in UID or EUID
It is any；
The access strategy administrative unit, is connected with the trusted service unit, for according to default access strategy and described
Occurs the progress information that ID changes, it is determined that the processing to the generation ID processes changed；The access strategy includes allowing to visit
Ask the scope that authority changes.
2. process access safety system according to claim 1, it is characterised in that：The trusted module also includes integrality
Metric element, the integrity measurement unit is used to carry out integrity verification to the process access control module.
3. process access safety system according to claim 1, it is characterised in that：The trusted module is based on
TrustZone technologies are realized.
4. process access safety system according to claim 1, it is characterised in that：It is described that the generation ID changes are entered
The processing of journey includes：When the process access limit before the change in the progress information that the generation ID changes is less than described change
Process access after change is limited and not in the access strategy allowed band, removes the process that the generation ID changes.
5. process access safety system according to claim 1, it is characterised in that：The access control control module is also wrapped
Access strategy modified module is included, the access strategy modified module is used to receive policy control order, according to the policy control
The order modification access strategy.
6. process access safety system according to claim 5, it is characterised in that：The policy control order includes passing through
The policy control order that the trusted service unit is sent.
7. a kind of process access safety method, it is characterised in that：The process access safety method includes：
Change to process ID is monitored；
When the ID for the process that detects changes, obtain the information for the process that the ID changes, including ID before change and
ID and its access rights after its access rights, change；The ID includes any of UID or EUID；
The progress information changed according to default access strategy and the generation ID, it is determined that to the generation ID processes changed
Processing；The access strategy includes the scope for allowing access rights to change.
8. process access safety method according to claim 7, it is characterised in that：It is described that the generation ID changes are entered
The processing of journey includes：When the process access limit before the change in the progress information that the generation ID changes is less than described change
Process access after change is limited and not in the access strategy allowed band, removes the process that the generation ID changes.
9. process access safety method according to claim 7, it is characterised in that：Methods described also includes：Receive strategy
Control command, the access strategy is changed according to the policy control order.
10. process access safety method according to claim 7, it is characterised in that：The process access safety method is
What the trusted service based on TrustZone technique constructions was realized.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410566662.5A CN104318156B (en) | 2014-10-22 | 2014-10-22 | A kind of process access safety method and system |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201410566662.5A CN104318156B (en) | 2014-10-22 | 2014-10-22 | A kind of process access safety method and system |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN104318156A CN104318156A (en) | 2015-01-28 |
| CN104318156B true CN104318156B (en) | 2017-07-25 |
Family
ID=52373387
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201410566662.5A Active CN104318156B (en) | 2014-10-22 | 2014-10-22 | A kind of process access safety method and system |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN104318156B (en) |
Families Citing this family (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN106650438A (en) * | 2015-11-04 | 2017-05-10 | 阿里巴巴集团控股有限公司 | Method and device for detecting baleful programs |
| CN105468976B (en) * | 2015-12-08 | 2019-11-12 | 北京元心科技有限公司 | A kind of method for monitoring instruction and device of the multisystem based on container |
| CN106022128B (en) * | 2016-05-13 | 2019-03-08 | 北京奇虎科技有限公司 | Method, device and mobile terminal for detection procedure access authority |
| CN106778284B (en) * | 2016-11-28 | 2021-03-26 | 北京奇虎科技有限公司 | Method and device for detecting kernel vulnerability back end |
| CN109409087B (en) * | 2017-08-18 | 2022-06-03 | 阿里巴巴集团控股有限公司 | Anti-privilege-raising detection method and device |
| CN111783082A (en) * | 2020-06-08 | 2020-10-16 | Oppo广东移动通信有限公司 | Process tracing method, device, terminal and computer readable storage medium |
| CN112199673A (en) * | 2020-10-10 | 2021-01-08 | 北京微步在线科技有限公司 | Method and device for detecting authority lifting behavior and readable storage medium |
Family Cites Families (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101739361A (en) * | 2008-11-12 | 2010-06-16 | 联想(北京)有限公司 | Access control method, access control device and terminal device |
| KR101044274B1 (en) * | 2009-11-03 | 2011-06-28 | 주식회사 안철수연구소 | Exploit site filtering APPARATUS, METHOD, AND RECORDING MEDIUM HAVING COMPUTER PROGRAM RECORDED |
| WO2013189008A1 (en) * | 2012-06-18 | 2013-12-27 | Honeywell International Inc. | Design pattern for secure store |
| CN103294940A (en) * | 2013-05-23 | 2013-09-11 | 广东欧珀移动通信有限公司 | Android system authority control method and intelligent mobile terminal |
| CN103455756B (en) * | 2013-08-02 | 2016-12-28 | 国家电网公司 | A kind of course control method based on trust computing |
| CN103826215B (en) * | 2014-02-11 | 2018-03-02 | 北京奇虎科技有限公司 | A kind of method and apparatus for carrying out Root authority management on the terminal device |
-
2014
- 2014-10-22 CN CN201410566662.5A patent/CN104318156B/en active Active
Also Published As
| Publication number | Publication date |
|---|---|
| CN104318156A (en) | 2015-01-28 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN104318156B (en) | A kind of process access safety method and system | |
| US8726386B1 (en) | Systems and methods for detecting malware | |
| CN102542208B (en) | security sandbox | |
| CN104866762B (en) | Security management program function | |
| Tang et al. | Extending Android security enforcement with a security distance model | |
| EP3089068A1 (en) | Application program management method, device, terminal, and computer storage medium | |
| CN102722672B (en) | A kind of method and device detecting running environment authenticity | |
| CN107111511B (en) | Access control method, device and system | |
| CN105468980A (en) | Security control method, device and system | |
| CN106462508A (en) | Access control and code scheduling | |
| CN104809397A (en) | Android malicious software detection method and system based on dynamic monitoring | |
| CN104751052A (en) | Dynamic behavior analysis method for mobile intelligent terminal software based on support vector machine algorithm | |
| CN103617389A (en) | Terminal rights management method and terminal device | |
| CN110245495A (en) | BIOS method of calibration, configuration method, equipment and system | |
| CN103780592B (en) | Method and apparatus for determining being stolen of user account | |
| CN106909309B (en) | Data information processing method and data storage system | |
| McDaniel | Bloatware comes to the smartphone | |
| CN108776633B (en) | Method for monitoring process operation, terminal equipment and computer readable storage medium | |
| CN107066872B (en) | Plug-in right control method and device and plug-in system | |
| EP3646216B1 (en) | Methods and devices for executing trusted applications on processor with support for protected execution environments | |
| CN102930222B (en) | Antibonding disc recording method and system | |
| CN103530555B (en) | Prevent the method and apparatus that program performs malicious operation | |
| US20230239296A1 (en) | Preventing malicious processes by validating the command authority of commands between network equipment | |
| CN110505216A (en) | A kind of Internet of Things risk prevention system method, apparatus, system and electronic equipment | |
| CN112948824B (en) | Program communication method, device and equipment based on privacy protection |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| EXSB | Decision made by sipo to initiate substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant | ||
| PP01 | Preservation of patent right | ||
| PP01 | Preservation of patent right |
Effective date of registration: 20180313 Granted publication date: 20170725 |
|
| PD01 | Discharge of preservation of patent | ||
| PD01 | Discharge of preservation of patent |
Date of cancellation: 20210313 Granted publication date: 20170725 |
|
| PP01 | Preservation of patent right | ||
| PP01 | Preservation of patent right |
Effective date of registration: 20210313 Granted publication date: 20170725 |