CN106385415B - An information security control method, device and terminal - Google Patents

Abstract

The present invention discloses an information security control method, device and terminal. The method comprises: upon receiving an instruction to view application information, detecting whether the current login account of the application to which the application information belongs is logged in at the same time at other terminals; when determining that the current login account is logged in at the same time at other terminals, obtaining the distance between the current terminal and the other terminals; when determining that the distance between the current terminal and any of the other terminals is greater than a preset threshold, issuing an identity authentication prompt. The technical solution provided by the embodiment of the present invention avoids the problem of application information leakage in terminals far away from the user's location when the same login account is logged in at the same time at multiple terminals, thereby improving the security of application information in the terminal.

Description

An information security control method, device and terminal

technical field

Embodiments of the present invention relate to the field of information security, and in particular, to an information security control method, device, and terminal.

Background technique

With the continuous development of communication technology, a variety of social applications gradually appear in the user's field of vision, which greatly enriches the way users communicate with terminals.

In order to facilitate users to perform multiple operations, in the prior art, one login account can be simultaneously logged in to multiple terminals, users can operate the same social application in different locations, and multiple terminals can simultaneously receive application information sent by others.

However, when the same login account is logged in on multiple terminals, if the distance between the user's current operating terminal and other terminals is far, the user cannot monitor the operation of other terminals, and the application information sent by others may be used by other terminals. The operator obtains it, which in turn leads to the disclosure of application information and reduces the security of the application information.

SUMMARY OF THE INVENTION

The present invention provides an information security control method, device and terminal to improve the security of application information in the terminal.

In a first aspect, an embodiment of the present invention provides an information security control method, the method comprising:

When receiving the application information viewing instruction, detect whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals;

When it is determined that the current login account is logged in at other terminals at the same time, the distance between the current terminal and the other terminals is obtained;

When it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold, an identity verification prompt is issued.

In a second aspect, an embodiment of the present invention further provides an information security control device, the device comprising:

an account detection module, configured to detect whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals when receiving the application information viewing instruction;

a distance obtaining module, configured to obtain the distance between the current terminal and the other terminals when the current login account is logged in at other terminals at the same time;

The prompt sending module is configured to send an identity verification prompt when it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold.

In a third aspect, an embodiment of the present invention further provides a terminal, where the terminal includes the information security control apparatus described in the second aspect.

The technical solution provided by the embodiment of the present invention is to detect whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals when receiving the application information viewing instruction, and obtain the current terminal when it is determined that the current login account is simultaneously logged in at other terminals. The distance between the terminal and other terminals, and when the distance between the current terminal and any terminal in the other terminals is determined to be greater than the preset threshold, an authentication prompt is issued, which avoids the simultaneous login of the same login account in multiple terminals. Terminals where users are located far away are prone to leakage of application information, which improves the security of application information in the terminals.

Description of drawings

In order to illustrate the technical solutions of the exemplary embodiments of the present invention more clearly, the following briefly introduces the accompanying drawings used in describing the embodiments. Obviously, the introduced drawings are only a part of the drawings of the embodiments to be described in the present invention, rather than all drawings. For those of ordinary skill in the art, without creative work, they can also obtain the drawings according to these drawings. Additional drawings.

1 is a schematic flowchart of an information security control method provided in Embodiment 1 of the present invention;

2 is a schematic flowchart of an information security control method provided in Embodiment 2 of the present invention;

3 is a schematic flowchart of an information security control method provided by Embodiment 3 of the present invention;

4 is a schematic structural diagram of an information security control device provided in Embodiment 4 of the present invention;

FIG. 5 is a schematic structural diagram of a terminal according to Embodiment 5 of the present invention.

Detailed ways

The present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present invention, but not to limit the present invention. In addition, it should be noted that, for the convenience of description, the drawings only show some but not all structures related to the present invention.

Example 1

FIG. 1 is a schematic flowchart of an information security control method provided by Embodiment 1 of the present invention. This embodiment is applicable to the case where the same login account is logged in simultaneously in multiple terminals, and the information security control method may be executed by an information security control device. The device can be implemented by means of hardware and/or software, and can be set in a terminal that supports social application functions.

Referring to FIG. 1, the information security control method may specifically include:

Step 110: When receiving the application information viewing instruction, detect whether the current login account of the application to which the application information belongs is simultaneously logged in on other terminals.

Exemplarily, the application information may include WeChat information, Weibo information, email information or QQ application information. Correspondingly, the application to which the application information belongs may include a WeChat application, a Weibo application, an email application or a QQ application.

Optionally, the application to which the application information belongs is a social application.

It should be noted that the application in the terminal may run on the current operation interface or in the background. Correspondingly, the application information in this embodiment may be the application information of the current application or the application information of the background running application.

In this embodiment, the corresponding viewing instruction is generated by the user's click operation. Exemplarily, a terminal installs a QQ application and a WeChat application. The user first runs the QQ application, and then puts the QQ application in the background and runs the WeChat application. In the above case, the application information received by the terminal may be the QQ application information or the WeChat application information. Specifically, when the application information received by the terminal is QQ application information, since the QQ application runs in the background, the user needs to click the QQ application information prompt link in the "Notification" drop-down menu of the terminal, and the terminal detects the user's click When operating, it is determined to receive the viewing instruction of the QQ application; when the application information received by the terminal is WeChat application information, since the WeChat application is running, the user only needs to click on the chat record with the sender of the application information to open the link to view the application information. The terminal determines to receive the viewing instruction of the WeChat application when detecting the user's click operation.

For the case where the current login account is only logged in at one terminal, the user is usually near the terminal, and there is almost no possibility that the application information can be viewed by others. Therefore, the information security control method in this embodiment is mainly aimed at the current login account in multiple simultaneous logins. The case of terminal login. Correspondingly, when receiving the application information viewing instruction, it is first detected whether the current login account is simultaneously logged in at other terminals, so as to determine whether to use the information security control method in this embodiment.

Step 120: When it is determined that the current login account is logged in at other terminals at the same time, the distance between the current terminal and the other terminals is obtained.

Exemplarily, when the same login account of an application logs in to multiple terminals at the same time, the current terminal in this embodiment may be any one of the above-mentioned multiple terminals, and the remaining terminals are other terminals.

For the case where the current login account is logged in the current terminal and other terminals at the same time, the current terminal does not directly open the application information when detecting the user's application information viewing instruction, but first determines whether the user can monitor all the application information at the same time. Receive the operation status of the terminal (that is, the current terminal and other terminals), if yes, open the application information on the current terminal, if not, ensure that only the user can view the application information by means of encryption, so as to avoid the current terminal is not the current terminal of the user. Information leakage problem that occurs when operating the terminal. Optionally, it can be judged by the distance between the current terminal and other terminals whether the user can monitor the operation status of all terminals receiving the application information at the same time.

It can be understood that, in the case where the current login account logs in to two terminals at the same time, the farther the distance between the two terminals is, the less likely the user is to detect the operation of the two terminals at the same time. In the case where the current login account logs in at least three terminals at the same time, since the terminal closest to the user cannot be determined, an excessive distance between any two terminals may cause the user to be unable to detect the operation of all terminals at the same time. To sum up, in this embodiment, the distance between the current terminal and each of the other terminals is obtained, and when it is determined that the distance between the current terminal and any one of the other terminals is too large, it is determined that the user cannot detect the application at the same time. Information on the operation of all receiving terminals.

The above distance can be obtained in various ways. Exemplarily, it can be obtained by comparing the IP addresses of the current terminal and other terminals, or the indoor positioning technology can be used to obtain the positions of the current terminal and other terminals, and then obtain the distance between the current terminal and other terminals. distance between.

Step 130: When it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold, send an identity verification prompt.

In this embodiment, a preset threshold is set. When the distance between the two terminals is smaller than the preset threshold, the user can monitor the operation of the other terminal while operating one of the terminals. When the distance between the two terminals is greater than the preset threshold When the threshold is set, the user cannot monitor the operation of another terminal. It should be noted that the preset threshold can be set by the user according to the actual situation. In this embodiment, when the distance between the current terminal and any other terminal is greater than a preset threshold, the user is prompted to perform identity verification, which ensures that only the user can view the application information, so that no matter whether the current terminal is the terminal closest to the user or not No application information will be leaked.

It should also be noted that the authentication method may include, but is not limited to, fingerprint authentication or password authentication. Exemplarily, issuing an authentication prompt may include issuing a fingerprint for authentication.

The technical solution provided by this embodiment is to detect whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals when receiving the application information viewing instruction, and when it is determined that the current login account is simultaneously logged in at other terminals, the current terminal and the current terminal are obtained. The distance between other terminals, and when it is determined that the distance between the current terminal and any one of the other terminals is greater than the preset threshold, an authentication prompt is issued, which prevents the same login account from logging in at multiple terminals at the same time. Terminals located far apart are prone to information leakage, which improves the security of application information in the terminals.

Embodiment 2

This embodiment is based on the above-mentioned Embodiment 1, and specifically describes the steps of acquiring the distance between the current terminal and the other terminals.

FIG. 2 is a schematic flowchart of an information security control method provided by Embodiment 2 of the present invention. Referring to Figure 2, the information security control method may specifically include:

Step 210: When receiving the application information viewing instruction, detect whether the current login account of the application to which the application information belongs is simultaneously logged in on other terminals.

Step 220: When it is determined that the current login account is logged in at other terminals at the same time, the IP address of the current terminal is sent to the other terminals through the server.

An IP address is used to assign a number to a terminal on the Internet. Each networked terminal has an IP address, and each IP address includes two identification codes, one of which is a network identification code and the other is a host identification code. Usually, the coverage of the network, the area where the network is located, etc. can be known through the network ID. In this embodiment, the relationship between the distance between multiple terminals and the preset threshold is determined by using the IP address.

Step 230: Receive the IP address of the other terminal through the server.

The current terminal and other terminals are all connected to the server, and all can communicate with the server. In order to obtain the relationship between the distance between the current terminal and other terminals and the preset threshold by comparing the IP addresses, the other terminals send their respective IP addresses to the server, and the server sends the IP addresses of the other terminals to the current terminal. The IP address of the current terminal is compared locally with the received IP address of each terminal in the other terminals in turn.

Step 240: Determine the distance between the current terminal and the other terminals according to the IP address of the current terminal and the IP addresses of the other terminals.

There is a method for obtaining the geographic location of the terminal through the IP address of the terminal in the prior art. In this embodiment, the geographic location of the current terminal can be obtained through the IP address of the current terminal, and the geographic location of other terminals can be obtained through the IP addresses of other terminals. Then, the distance between the current terminal and each of the other terminals is obtained according to the geographic location of the current terminal and the geographic locations of other terminals.

Optionally, since the method for obtaining the position of the corresponding terminal by using the IP address is relatively complicated, in this embodiment, the relationship between the distance between the two terminals and the preset threshold may also be judged in combination with other properties of the IP address. For example, the area where the two terminals are connected to the network can be determined through the IP addresses. For example, the network identification code of the IP address of the terminal A indicates that the terminal A is located in city B, and the network identification code of the IP address of the terminal C indicates that the terminal C is located in the city D, then Terminal A and Terminal C are located in two different cities. Users cannot monitor the operation of Terminal A and Terminal C at the same time. Therefore, the distance between Terminal A and Terminal C must be greater than the preset threshold.

Step 250: When it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold, send an identity verification prompt.

The technical solution provided by this embodiment detects whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals when receiving the application information viewing instruction, and determines that when the current login account is simultaneously logged in at other terminals, according to the current terminal's current login account The IP address and the IP address of the other terminals determine the distance between the current terminal and the other terminals, and when it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold, an identity verification is issued The prompting avoids the problem of application information leakage in terminals far away from the user's location when the same login account is logged in simultaneously in multiple terminals, thereby improving the security of application information in the terminals.

Embodiment 3

This embodiment is based on the above-mentioned Embodiment 1, and specifically describes the steps of acquiring the distance between the current terminal and the other terminals.

FIG. 3 is a schematic flowchart of an information security control method provided by Embodiment 3 of the present invention. Referring to Figure 3, the information security control method may specifically include:

Step 310: When receiving the application information viewing instruction, detect whether the current login account of the application to which the application information belongs is simultaneously logged in on other terminals.

Step 320: When it is determined that the current login account is logged in at other terminals at the same time, the indoor positioning technology is used to obtain the location information of the current terminal, and the location information is sent to the other terminals through the server.

Usually, the geographic location of the terminal can be simply obtained through conventional GPS positioning, and then the distance between the two terminals can be obtained. However, when the terminal to which the current login account may be logged in is located in the same building, for example, on different floors, the geographic location of each terminal obtained by using conventional GPS positioning technology cannot accurately obtain the distance between the two terminals. The indoor positioning technology obtains the position information of the current terminal, and similarly, other terminals can also obtain their own position information by using the indoor positioning technology.

Step 330: Receive the location information of the other terminal through the server.

Both the current terminal and other terminals are connected to the server and can communicate with the server. Therefore, the current terminal can send its own location information to other terminals through the server, and can also receive the location information of other terminals through the server.

Step 340: Determine the distance between the current terminal and the other terminals according to the location information of the current terminal and the location information of the other terminals.

The location information here is obtained using indoor positioning technology, so it is more accurate. The current terminal can obtain the location information between the current terminal and any one of the other terminals through its own location information and the received location information of any one of the other terminals. distance.

Specifically, there are various indoor positioning technologies, which may include, but are not limited to, indoor GPS positioning technology and indoor wireless positioning technology.

Step 350: Send an identity verification prompt when it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold.

The technical solution provided by this embodiment detects whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals when receiving the application information viewing instruction, and determines that when the current login account is simultaneously logged in at other terminals, according to the current login account the location information of the terminal and the location information of the other terminals, determine the distance between the current terminal and the other terminals, and when it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold, The authentication prompt is issued to avoid the problem of application information leakage in terminals far away from the user's location when the same login account is logged in simultaneously in multiple terminals, and the security of application information in the terminal is improved.

Embodiment 4

FIG. 4 is a schematic structural diagram of an information security control device according to Embodiment 4 of the present invention. The information security control device provided in this embodiment may be set in a terminal that supports a social application function. Referring to Figure 4, the specific structure of the information security control device is as follows:

The account detection module 410 is configured to detect whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals when receiving the application information viewing instruction;

A distance obtaining module 420, configured to obtain the distance between the current terminal and the other terminals when the current login account is logged in at other terminals at the same time;

The prompt sending module 430 is configured to send an identity verification prompt when it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold.

In this embodiment, the distance acquisition module 420 may include:

An address sending unit, configured to send the IP address of the current terminal to the other terminals through the server;

An address receiving unit, configured to receive the IP address of the other terminal through the server;

A distance determining unit, configured to determine the distance between the current terminal and the other terminals according to the IP address of the current terminal and the IP addresses of the other terminals.

In this embodiment, the distance acquisition module 420 may include:

an information sending unit, configured to acquire the position information of the current terminal by using an indoor positioning technology, and send the position information to the other terminals through the server;

an information receiving unit, configured to receive the location information of the other terminal through the server;

A distance determining unit, configured to determine the distance between the current terminal and the other terminals according to the position information of the current terminal and the position information of the other terminals.

In this embodiment, the application information may include WeChat information, Weibo information, mailbox information or QQ application information.

In this embodiment, the prompt issuing module 430 may include:

Fingerprint authentication unit for issuing a prompt for authentication by fingerprint.

The information security control device provided in this embodiment belongs to the same inventive concept as the information security control method provided by any embodiment of the present invention, can execute the information security control method provided by any embodiment of the present invention, and has corresponding functional modules and beneficial Effect. For technical details not described in detail in this embodiment, reference may be made to the information security control process provided by any embodiment of the present invention.

Embodiment 5

This embodiment provides a terminal, and the terminal may include the information security control apparatus provided in Embodiment 4 of the present invention. FIG. 5 is a schematic structural diagram of a terminal according to Embodiment 5 of the present invention. As shown in FIG. 5 , the terminal 500 may include: a memory 501, a central processing unit (Central Processing Unit, hereinafter referred to as CPU) 502, a peripheral interface 503, an RF (Radio Frequency, radio frequency) circuit 505, audio circuit 506, speaker 511, power management chip 508, input/output (I/O) subsystem 509, touch screen 512, other input/control devices 510 and external ports 504, these components pass through One or more communication buses or signal lines 507 to communicate.

It should be understood that the illustrated terminal 500 is merely an example of a terminal, and that the terminal 500 may have more or fewer components than those shown in the figures, may combine two or more components, or may have Different part configurations. The various components shown in the figures may be implemented in hardware, software, or a combination of hardware and software, including one or more signal processing and/or application specific integrated circuits.

The terminal for implementing information security control provided by this embodiment is described in detail below, and the terminal is a mobile phone as an example.

Memory 501, which can be accessed by CPU 502, peripheral interface 503, etc., said memory 501 can include high-speed random access memory, and can also include non-volatile memory, such as one or more disk storage devices, flash memory devices , or other volatile solid-state storage devices.

A peripheral interface 503 that can connect the input and output peripherals of the device to the CPU 502 and the memory 501 .

I/O subsystem 509, which can connect input and output peripherals on the device, such as touch screen 502 (equivalent to the screen in the above embodiment) and other input/control devices 510, to the peripherals interface 503. The I/O subsystem 509 may include a display controller 5091 and one or more input controllers 5092 for controlling other input/control devices 510 . Among them, one or more input controllers 5092 receive electrical signals from or send electrical signals to other input/control devices 510, which may include physical buttons (push buttons, rocker buttons, etc. ), dial pad, slide switch, joystick, click wheel. Notably, the input controller 5092 can be connected to any of the following: a keyboard, an infrared port, a USB interface, and a pointing device such as a mouse.

The touch screen 512, which is an input interface and an output interface between the user terminal and the user, displays visual output to the user, and the visual output may include graphics, text, icons, videos, and the like.

Display controller 5091 in I/O subsystem 509 receives electrical signals from touch screen 512 or sends electrical signals to touch screen 512 . The touch screen 512 detects the contact on the touch screen, and the display controller 5091 converts the detected contact into interaction with the user interface object displayed on the touch screen 512, that is, to realize human-computer interaction, and the user interface object displayed on the touch screen 512 can be run. Icons for games, icons for connecting to the corresponding network, etc. It is worth noting that the device may also include a light mouse, which is a touch-sensitive surface that does not display visual output, or an extension of the touch-sensitive surface formed by a touch screen.

The RF circuit 505 is mainly used to establish the communication between the mobile phone and the wireless network (ie, the network side), and realize the data reception and transmission between the mobile phone and the wireless network. Such as sending and receiving text messages, e-mails, etc. Specifically, the RF circuit 505 receives and transmits RF signals, also known as electromagnetic signals, the RF circuit 505 converts electrical signals into electromagnetic signals or converts electromagnetic signals into electrical signals, and communicates with communication networks and other devices through the electromagnetic signals to communicate. RF circuitry 505 may include known circuitry for performing these functions including, but not limited to, antenna systems, RF transceivers, one or more amplifiers, tuners, one or more oscillators, digital signal processors, CODECs ( COder-DECoder, codec) chip set, subscriber identity module (Subscriber Identity Module, SIM) and so on.

The audio circuit 506 is mainly used for receiving audio data from the peripheral interface 503 , converting the audio data into an electrical signal, and sending the electrical signal to the speaker 511 .

The speaker 511 is used to restore the voice signal received by the mobile phone from the wireless network through the RF circuit 505 to sound and play the sound to the user.

The power management chip 508 is used for power supply and power management for the hardware connected to the CPU 502, the I/O subsystem and the peripheral interface.

The CPU 502 provided in the embodiment of the present invention may perform the following operations:

When receiving the application information viewing instruction, detect whether the current login account of the application to which the application information belongs is simultaneously logged in at other terminals;

When it is determined that the current login account is logged in at other terminals at the same time, the distance between the current terminal and the other terminals is obtained;

When it is determined that the distance between the current terminal and any one of the other terminals is greater than a preset threshold, an identity verification prompt is issued.

The above-mentioned terminal can execute the methods provided by Embodiments 1 to 3 of the present invention, and has functional modules and beneficial effects corresponding to the execution methods. For technical details not described in detail in the foregoing embodiments, reference may be made to the information security control method provided by any embodiment of the present invention.

Note that the above are only preferred embodiments of the present invention and applied technical principles. Those skilled in the art will understand that the present invention is not limited to the specific embodiments described herein, and various obvious changes, readjustments and substitutions can be made by those skilled in the art without departing from the protection scope of the present invention. Therefore, although the present invention has been described in detail through the above embodiments, the present invention is not limited to the above embodiments, and can also include more other equivalent embodiments without departing from the concept of the present invention. The scope is determined by the scope of the appended claims.

Claims (11)

1. An information security control method, comprising:

when a viewing instruction of application information is received, detecting whether a current login account of an application to which the application information belongs logs in other terminals at the same time;

when the current login account is determined to be logged in at other terminals at the same time, the distance between the current terminal and each terminal in the other terminals is obtained, and the current terminal is the terminal which receives the viewing instruction;

and sending an authentication prompt when the distance between the current terminal and any one of the other terminals is determined to be greater than a preset threshold value, wherein the authentication prompt is specific to all terminals which log in simultaneously.

2. The method of claim 1, wherein the obtaining the distance between the current terminal and the other terminal comprises:

sending the IP address of the current terminal to the other terminals through a server;

receiving the IP addresses of the other terminals through the server;

and determining the distance between the current terminal and the other terminals according to the IP address of the current terminal and the IP addresses of the other terminals.

3. The method of claim 1, wherein the obtaining the distance between the current terminal and the other terminal comprises:

acquiring the position information of the current terminal by adopting an indoor positioning technology, and sending the position information to the other terminals through a server;

receiving the position information of the other terminals through the server;

and determining the distance between the current terminal and the other terminals according to the position information of the current terminal and the position information of the other terminals.

4. The method of claim 1, wherein the application information comprises WeChat information, microblog information, mailbox information, or QQ application information.

5. The method of claim 1, wherein issuing an authentication prompt comprises:

and sending out a prompt for identity verification through the fingerprint.

6. An information security control apparatus, comprising:

the account detection module is used for detecting whether the current login account of the application to which the application information belongs logs in other terminals at the same time when a viewing instruction of the application information is received;

the distance acquisition module is used for acquiring the distance between the current terminal and each terminal in other terminals when the current login account is determined to be logged in at the same time at the other terminals, wherein the current terminal is the terminal which receives the viewing instruction;

and the prompt sending module is used for sending an authentication prompt when the distance between the current terminal and any one of the other terminals is determined to be greater than a preset threshold value, wherein the authentication prompt is specific to all terminals which log in simultaneously.

7. The apparatus of claim 6, wherein the distance acquisition module comprises:

an address sending unit, configured to send the IP address of the current terminal to the other terminals through a server;

an address receiving unit, configured to receive, by the server, the IP address of the other terminal;

and the distance determining unit is used for determining the distance between the current terminal and the other terminals according to the IP address of the current terminal and the IP addresses of the other terminals.

8. The apparatus of claim 6, wherein the distance acquisition module comprises:

the information sending unit is used for acquiring the position information of the current terminal by adopting an indoor positioning technology and sending the position information to other terminals through a server;

an information receiving unit, configured to receive, by the server, location information of the other terminal;

and the distance determining unit is used for determining the distance between the current terminal and the other terminals according to the position information of the current terminal and the position information of the other terminals.

9. The apparatus of claim 6, wherein the application information comprises WeChat information, microblog information, mailbox information, or QQ application information.

10. The apparatus of claim 6, wherein the cue issuance module comprises:

and the fingerprint verification unit is used for sending out a prompt for identity verification through the fingerprint.

11. A terminal, characterized by comprising an information security control apparatus according to any one of claims 6 to 10.