CN105320893A - Data protection method and system for mobile terminal - Google Patents

Data protection method and system for mobile terminal Download PDF

Info

Publication number
CN105320893A
CN105320893A CN201410367254.7A CN201410367254A CN105320893A CN 105320893 A CN105320893 A CN 105320893A CN 201410367254 A CN201410367254 A CN 201410367254A CN 105320893 A CN105320893 A CN 105320893A
Authority
CN
China
Prior art keywords
carry
application program
application information
file
protection
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201410367254.7A
Other languages
Chinese (zh)
Other versions
CN105320893B (en
Inventor
姜为祥
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Huzhou YingLie Intellectual Property Operation Co.,Ltd.
Original Assignee
Shanghai Feixun Data Communication Technology Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Shanghai Feixun Data Communication Technology Co Ltd filed Critical Shanghai Feixun Data Communication Technology Co Ltd
Priority to CN201410367254.7A priority Critical patent/CN105320893B/en
Publication of CN105320893A publication Critical patent/CN105320893A/en
Application granted granted Critical
Publication of CN105320893B publication Critical patent/CN105320893B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Abstract

The invention provides a data protection method and system for a mobile terminal. The method comprises steps as follows: a protection process comprising a protection application program list is created; a service port is added to the protection process; a starting instruction of the protection process is added to an init.rc file; when the mobile terminal is started and the init.rc file is scanned, the protection process is started; when application program information data are obtained at the service port, whether an application program which the application program information data is involved with is an application program required to be protected; if the answer is positive, the application program required to the protected is mounted. The application program required to be protected in the mobile terminal is mounted through operation of the protection process, accordingly, data of the mobile terminal can be protected and can be read and written as well.

Description

A kind of data prevention method and system being applied to mobile terminal
Technical field
The present invention relates to technical field of data security, be specifically related to a kind of file data method and system being applied to mobile terminal.
Background technology
Along with popularizing of intelligent mobile terminal, from strength to strength, it is not only for personal consumption, also more and more for the treatment of public affair for the function of mobile terminal.The safety problem of mobile terminal is also no longer only individual privacy, and also more and more information security relating to tissue, has become the problem received much concern now to the protection of the data of mobile terminal.
In the prior art, have many methods to information of mobile terminal protection, generally all selected file or folder is encrypted, but the party's rule needs will input password password when a use file, inconvenience can be produced to the normal running of user.
How both the data of mobile terminal can be protected, can easily the data in mobile terminal to be read and write again, become the problem that current needs urgently solve.
Summary of the invention
Cannot both protect the data of mobile terminal to solve in prior art, the problem can easily read and write the data in mobile terminal again.
The invention provides a kind of data prevention method being applied to mobile terminal, it is characterized in that, said method comprising the steps of:
Create a protection process, in described protection process, comprise a security application program listing;
Add in a service port to described protection process;
The enabled instruction of protecting process described in one is increased in init.rc file;
When starting init.rc file described in mobile scanning terminal, open described protection process;
When described service port obtains application information data, whether be the application program that need protect according to the application program that described security application program listing judges in described application information data;
If so, will the described application program of protection be needed to carry out carry operation.
Preferably, the interpolation step of described service port is: servicemanager system call native function adds in a service port to described protection process.
Preferably, described method also comprises:
Scan all program process by packagemanagerservice process, all described program process that scanning obtains is generated an application information packet;
Piling operation is carried out to described application information packet;
The described application information data life of having driven piles is bundled into described application information data and is sent to described service port.
Preferably, described protection process also comprises a carry table, and described carry table is for preserving carry operation, and the step of described carry operation is:
Judge that whether the described application program that need protect is by carry by described carry table;
When described application program is not by carry, then in described application program carry to the preset security catalogue of the need of non-carry being protected, described carry operation is saved in described carry table;
When described application program is by carry, terminate the operation of described carry.
Present invention also offers a kind of data protection system being applied to mobile terminal, it is characterized in that, described system comprises:
One adds module, for adding service port in protection process;
One editor module, for increasing the enabled instruction of protecting process described in init.rc file;
One processing module, for when starting init.rc file described in mobile scanning terminal, opens described protection process; And for when described service port obtains application information data, whether be the application program that need protect according to the application program that described security application program listing judges in described application information data; And the application program in application information data is when being the application program that need protect, carry out carry operation by needing the described application program of protection.
Preferably, described interpolation module is also for calling the native function in described servicemanager system, and wherein, described native function is used for adding described service port in described protection process.
Preferably, all described program process that scanning obtains, also for scanning all program process by packagemanagerservice process, is generated an application information packet by described processing module; Piling operation is carried out to described application information packet; The described application information packet of having driven piles is generated described application information data and is sent to described service port.
Preferably, described protection process also comprises a carry table, and described carry table is for preserving carry operation, and described processing module is also for judging that by described carry table whether the described application program that need protect is by carry; When described application program is not by carry, then in described application program carry to the preset security catalogue of the need of non-carry being protected, described carry operation is saved in described carry table; When described application program is by carry, terminate the operation of described carry.
As mentioned above, a kind of data prevention method and system being applied to mobile terminal provided by the invention, has following beneficial effect:
1) by increasing the enabled instruction of protecting process described in init.rc file, mobile terminal is made to open protection process when starting shooting scanning init.rc file, also can automatic opening protection function process when making user without the need to having a Root authority.
2) by carrying out piling operation to described application information packet, the program process in described application information packet cannot be changed in operation afterwards, in the rear mount process decreased, occur the probability of carry failure.
3) judge to need the application program of protection whether by carry by the carry table in protection process, avoid and carry is repeated to the application program of carry; After the application program that the need of non-carry protect being done carry operation, the operation of this carry is kept in carry table, avoids and next time carry operation is done to this application program, accelerate processing speed.
Accompanying drawing explanation
Fig. 1 is a kind of schematic flow sheet being applied to an embodiment of the data prevention method of mobile terminal provided by the invention;
Fig. 2 is the concrete steps process flow diagram of step S6 in Fig. 1;
Fig. 3 is a kind of structural representation being applied to data protection system one embodiment of mobile terminal provided by the invention.
Embodiment
Technical scheme of the present invention is understood better in order to make relevant technical staff in the field, below in conjunction with the accompanying drawing of embodiment of the present invention, technical scheme in embodiment of the present invention is clearly and completely described, obviously, described embodiment is only the present invention's part embodiment, instead of whole embodiments.
The invention provides a kind of data prevention method being applied to mobile terminal, as shown in Figure 1, said method comprising the steps of:
Step S1: create a protection process, comprise a security application program listing in protection process.
Security application program listing is enrolled by needing the application program of protection, application program in described security application program listing can for the application program contained in mobile terminal, also can comprise do not have in mobile terminal but perhaps need protect application program, so that mobile terminal is when installing this type of application program, do not need again to make an amendment security application program listing, can protect this application program yet.
Step S2: add a service port in protection process.
Preferably, the interpolation step of described service port is: servicemanager system call native function adds in a service port to described protection process.
Step S3: the enabled instruction increasing by a protection process in init.rc file.
In the startup file init.rc file of mobile terminal, increasing the enabled instruction of protecting process described in, for scanning init.rc file by mobile terminal in the start moment, opening protection process by the enabled instruction of the protection process increased.
Step S4: when starting init.rc file described in mobile scanning terminal, open protection process.
The present invention, by init.rc file described in mobile scanning terminal, according to the enabled instruction of the protection process in described init.rc file, opens protection process, also can automatic opening protection function process when making user without the need to having a Root authority by this step.
Step S5: when service port obtains application information data, whether be the application program that need protect according to the application program that security application program listing judges in application information data.
Wherein, judge that application program in application information data be whether the executive condition of the application program that need protect is that service port obtains application information data.
Preferably, method provided by the invention also comprises: the step of described application information data acquisition: (not shown in FIG.):
Step S71: scan all program process by packagemanagerservice process, generates an application information packet by all described program process that scanning obtains.
Step S72: piling operation is carried out to described application information packet.
Step S73: the described application information packet of having driven piles is generated described application information data and is sent to described service port.
The present invention, by application information data being packed, accelerates the speed of process data.
Program process in described application information packet, by carrying out piling operation to described application information packet, cannot be changed by the present invention in operation afterwards, occurs the probability of carry failure in the rear mount process decreased.
When the application program in described application information data is the application program that need protect, perform step S6: carry out carry operation by needing the described application program of protection.
Wherein, carry table is the list for preserving carry operation comprised in described protection process.
Fig. 2 is the concrete steps process flow diagram of step S6 in Fig. 1, and as shown in Figure 2, step S6 comprises:
Step S61: judge that whether the application program that need protect is by carry by carry table.
When described application program is not by carry, perform step S62: in application program carry to the preset security catalogue of protect by the need of non-carry from, carry operation is saved in carry table;
When described application program is by carry, perform step S63: terminate carry operation.
Whether the present invention judges to need the application program of protection by carry by the carry table in protection process, avoids the application program repetition carry to carry; After the application program that the need of non-carry protect being done carry operation, the operation of this carry is kept in carry table, avoids and next time carry operation is done to this application program, increased processing speed.
Present invention also offers the file guard system that is applied to mobile terminal, as shown in Figure 3, described system comprises: add module 1, editor module 2 and processing module 3.
Add module 1, for adding service port in protection process;
Editor module 2, is electrically connected described interpolation module 1, for increasing the enabled instruction of protecting process described in init.rc file;
Processing module 3, is electrically connected described editor module 2, for when starting init.rc file described in mobile scanning terminal, opens described protection process; And for when described service port obtains application information data, whether be the application program that need protect according to the application program that described security application program listing judges in described application information data; And the application program in application information data is when being the application program that need protect, carry out carry operation by needing the described application program of protection.
Preferably, described interpolation module 1 is also for calling the native function in described servicemanager system, and wherein, described native function is used for adding described service port in described protection process.
Preferably, all described program process that scanning obtains, also for scanning all program process by packagemanagerservice process, is generated an application information packet by described processing module 3; Piling operation is carried out to described application information packet; The described application information packet of having driven piles is generated described application information data and is sent to described service port.
Preferably, described protection process also comprises a carry table, and described carry table is for preserving carry operation, and described processing module 3 is also for judging that by described carry table whether the described application program that need protect is by carry; When described application program is not by carry, then in described application program carry to the preset security catalogue of the need of non-carry being protected, described carry operation is saved in described carry table; When described application program is by carry, terminate the operation of described carry.
As mentioned above, a kind of data prevention method and system being applied to mobile terminal provided by the invention, has following beneficial effect:
1) by increasing the enabled instruction of protecting process described in init.rc file, mobile terminal is made to open protection process when starting shooting scanning init.rc file, also can automatic opening protection function process when making user without the need to having a Root authority.
2) by carrying out piling operation to described application information packet, the program process in described application information packet cannot be changed in operation afterwards, in the rear mount process decreased, occur the probability of carry failure.
3) judge to need the application program of protection whether by carry by the carry table in protection process, avoid and carry is repeated to the application program of carry; After the application program that the need of non-carry protect being done carry operation, the operation of this carry is kept in carry table, avoids and next time carry operation is done to this application program, accelerate processing speed.
Below only have expressed several embodiment of the present invention, it describes comparatively concrete and detailed, but therefore can not be interpreted as the restriction to the scope of the claims of the present invention.It should be pointed out that for the person of ordinary skill of the art, without departing from the inventive concept of the premise, can also make some distortion and improvement, these all belong to protection scope of the present invention.Therefore, the protection domain of patent of the present invention should be as the criterion with claims.

Claims (8)

1. be applied to a data prevention method for mobile terminal, it is characterized in that, said method comprising the steps of:
Create a protection process, in described protection process, comprise a security application program listing;
Add in a service port to described protection process;
The enabled instruction of protecting process described in one is increased in init.rc file;
When starting init.rc file described in mobile scanning terminal, open described protection process;
When described service port obtains application information data, whether be the application program that need protect according to the application program that described security application program listing judges in described application information data;
If so, will the described application program of protection be needed to carry out carry operation.
2. file means of defence according to claim 1, is characterized in that, the interpolation step of described service port is: servicemanager system call native function adds in a service port to described protection process.
3. file means of defence according to claim 1, is characterized in that, described method also comprises:
Scan all program process by packagemanagerservice process, all described program process that scanning obtains is generated an application information packet;
Piling operation is carried out to described application information packet;
The described application information packet of having driven piles is generated described application information data and is sent to described service port.
4. the file means of defence according to any one in claims 1 to 3, is characterized in that, described protection process also comprises a carry table, and described carry table is for preserving carry operation, and the step of described carry operation is:
Judge that whether the described application program that need protect is by carry by described carry table;
When described application program is not by carry, then in described application program carry to the preset security catalogue of the need of non-carry being protected, described carry operation is saved in described carry table;
When described application program is by carry, terminate the operation of described carry.
5. be applied to a data protection system for mobile terminal, it is characterized in that, described system comprises:
One adds module, for adding service port in protection process;
One editor module, for increasing the enabled instruction of protecting process described in init.rc file;
One processing module, for when starting init.rc file described in mobile scanning terminal, opens described protection process; And for when described service port obtains application information data, whether be the application program that need protect according to the application program that described security application program listing judges in described application information data; And the application program in application information data is when being the application program that need protect, carry out carry operation by needing the described application program of protection.
6. file guard system according to claim 5, it is characterized in that, described interpolation module is also for calling the native function in described servicemanager system, and wherein, described native function is used for adding described service port in described protection process.
7. file guard system according to claim 5, it is characterized in that, the all described program process that scanning obtains, also for scanning all program process by packagemanagerservice process, is generated an application information packet by described processing module; Piling operation is carried out to described application information packet; The described application information packet of having driven piles is generated described application information data and is sent to described service port.
8. according to the file guard system in claim 5 ~ 7 described in any one, it is characterized in that, described protection process also comprises a carry table, described carry table is for preserving carry operation, and described processing module is also for judging that by described carry table whether the described application program that need protect is by carry; When described application program is not by carry, then in described application program carry to the preset security catalogue of the need of non-carry being protected, described carry operation is saved in described carry table; When described application program is by carry, terminate the operation of described carry.
CN201410367254.7A 2014-07-30 2014-07-30 A kind of data prevention method and system applied to mobile terminal Active CN105320893B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201410367254.7A CN105320893B (en) 2014-07-30 2014-07-30 A kind of data prevention method and system applied to mobile terminal

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201410367254.7A CN105320893B (en) 2014-07-30 2014-07-30 A kind of data prevention method and system applied to mobile terminal

Publications (2)

Publication Number Publication Date
CN105320893A true CN105320893A (en) 2016-02-10
CN105320893B CN105320893B (en) 2018-09-28

Family

ID=55248258

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201410367254.7A Active CN105320893B (en) 2014-07-30 2014-07-30 A kind of data prevention method and system applied to mobile terminal

Country Status (1)

Country Link
CN (1) CN105320893B (en)

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070226488A1 (en) * 2006-03-22 2007-09-27 Hon Hai Precision Industry Co., Ltd. System and method for protecting digital files
CN101256570A (en) * 2008-02-22 2008-09-03 山东中创软件工程股份有限公司 File protection technique based on Windows system files filtering drive
CN103514396A (en) * 2013-09-23 2014-01-15 北京奇虎科技有限公司 Processing method and device for file / application program on mobile communication terminal

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20070226488A1 (en) * 2006-03-22 2007-09-27 Hon Hai Precision Industry Co., Ltd. System and method for protecting digital files
CN101256570A (en) * 2008-02-22 2008-09-03 山东中创软件工程股份有限公司 File protection technique based on Windows system files filtering drive
CN103514396A (en) * 2013-09-23 2014-01-15 北京奇虎科技有限公司 Processing method and device for file / application program on mobile communication terminal

Also Published As

Publication number Publication date
CN105320893B (en) 2018-09-28

Similar Documents

Publication Publication Date Title
CN102685106B (en) A kind of safe verification method and equipment
CN102045712B (en) Anti-monitoring method and system for mobile terminal
US10489568B2 (en) Apparatus and methods for improving terminal security
CN104468611A (en) Data security processing method and device based on dual-system switching
CN101917513B (en) Method and device for implementing graded display of privacy information
CN103763091B (en) A kind of application program encryption and decryption method and encryption, decryption device
CN104008313A (en) Protecting method and device of privacy information
CN103095890A (en) Contact person information encryption method and communication terminal
CN110990800B (en) Watermark processing method and system based on application program
CN105472093B (en) Mobile terminal call answers method for authenticating and mobile terminal
CN104158657A (en) Information processing method and device, as well as encryption equipment
CN102819702A (en) File encryption operation method and file encryption operation system
CN103619014A (en) Method and system preventing application data from leakage
CN101483861A (en) Method for mobile phone information safety protection
US20170091483A1 (en) Method and Device for Protecting Address Book, and Communication System
Young et al. BadVoice: Soundless voice-control replay attack on modern smartphones
CN105554226A (en) Mode switching method and system, and terminal
CN105592452A (en) Method and apparatus for preventing private data from being read maliciously
CN102238286B (en) Call record concealing method and system
CN103428370B (en) Mobile phone and multi-user control method thereof
CN104796530A (en) Phone conversation privacy protection method and system
CN105635794A (en) Screen recording method and system
CN106127034B (en) A kind of method, apparatus that anti-locking system is maliciously closed and electronic equipment
WO2017020598A1 (en) Contact information management method, apparatus and terminal
CN105320893A (en) Data protection method and system for mobile terminal

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
GR01 Patent grant
GR01 Patent grant
TR01 Transfer of patent right

Effective date of registration: 20201201

Address after: 313021 industrial function area of Donglin Town, Huzhou City, Zhejiang Province

Patentee after: ZHEJIANG YUANTE NEW MATERIAL Co.,Ltd.

Address before: 201616 Shanghai city Songjiang District Sixian Road No. 3666

Patentee before: Phicomm (Shanghai) Co.,Ltd.

TR01 Transfer of patent right
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20211123

Address after: 313000 room 1019, Xintiandi commercial office, Yishan street, Wuxing District, Huzhou, Zhejiang, China

Patentee after: Huzhou YingLie Intellectual Property Operation Co.,Ltd.

Address before: 313021 industrial functional zone, Donglin Town, Huzhou City, Zhejiang Province

Patentee before: ZHEJIANG YUANTE NEW MATERIAL CO.,LTD.

PE01 Entry into force of the registration of the contract for pledge of patent right
PE01 Entry into force of the registration of the contract for pledge of patent right

Denomination of invention: A Data Protection Method and System Applied to Mobile Terminal

Effective date of registration: 20221205

Granted publication date: 20180928

Pledgee: Huzhou Wuxing Rural Commercial Bank Co.,Ltd. high tech Zone Green sub branch

Pledgor: Huzhou YingLie Intellectual Property Operation Co.,Ltd.

Registration number: Y2022330003458

PC01 Cancellation of the registration of the contract for pledge of patent right
PC01 Cancellation of the registration of the contract for pledge of patent right

Date of cancellation: 20231205

Granted publication date: 20180928

Pledgee: Huzhou Wuxing Rural Commercial Bank Co.,Ltd. high tech Zone Green sub branch

Pledgor: Huzhou YingLie Intellectual Property Operation Co.,Ltd.

Registration number: Y2022330003458