CN106909413A - A kind of data processing method and device - Google Patents
A kind of data processing method and device Download PDFInfo
- Publication number
- CN106909413A CN106909413A CN201510982488.7A CN201510982488A CN106909413A CN 106909413 A CN106909413 A CN 106909413A CN 201510982488 A CN201510982488 A CN 201510982488A CN 106909413 A CN106909413 A CN 106909413A
- Authority
- CN
- China
- Prior art keywords
- application
- starting
- application process
- rule
- message
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/445—Program loading or initiating
- G06F9/44505—Configuring for program initiating, e.g. using registry, configuration files
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/51—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F9/00—Arrangements for program control, e.g. control units
- G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
- G06F9/44—Arrangements for executing specific programs
- G06F9/445—Program loading or initiating
- G06F9/44568—Immediately runnable code
- G06F9/44578—Preparing or optimising for loading
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
- G06F2221/033—Test or assess software
Landscapes
- Engineering & Computer Science (AREA)
- Software Systems (AREA)
- Theoretical Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Stored Programmes (AREA)
Abstract
A kind of method and apparatus of data processing are the embodiment of the invention provides, described method includes：System process interface is monitored, acquisition is currently up the application message of application process；Detect whether the application process meets preset No starting rule according to the application message；When detecting the application process and meeting preset No starting rule, forbid the startup of the application process.The self-starting of useless application program can effectively be forbidden, increase the cruising time of system, the fluency of lifting system.
Description
Technical field
The present invention relates to communication technical field, at more particularly to a kind of data processing method and a kind of data
Reason device.
Background technology
Various application programs (APP, application) can be installed, current APP leads in user equipment
Often all there is background service.APP can consume the system resource of user equipment in running background, performance directly perceived
Be equipment electric quantity consumption steeply risen than very fast, mobile network's flow, system become increasingly card.Using
Setting out certainly for program reduce system cruising time for not only serious, is also greatly reduced the smoothness of system
Degree.
The problem of resources for user equipment is influenceed for above-mentioned APP running backgrounds, at present, many safe factories
Commercial city has added in the product forbids application program from the function of opening, such as using fail-safe software by prohibiting
Prevented from opening certainly with the broadcast components of third party software.
But, the method for current organizations self-starting cannot overall monitor software, and easily occur missing
The problems such as inspection.
The content of the invention
In view of the above problems, it is proposed that the present invention overcomes above mentioned problem or at least part of to provide one kind
The data processing method that solves the above problems and corresponding data processing equipment.
According to one aspect of the present invention, there is provided a kind of data processing method, described method includes：
System process interface is monitored, acquisition is currently up the application message of application process；Answered according to described
Whether meet preset No starting rule with application process described in infomation detection；Enter when the application is detected
When the preset No startings of Cheng Fuhe are regular, forbid the startup of the application process.
Alternatively, system process interface is monitored, obtains process creation function；From process wound
Build in function and obtain the application message of the application process.
Alternatively, the parameter information that execution journal writes function is searched in the process creation function；From
Obtain application message in the parameter information, wherein, the application message include it is following at least one：Mark
Knowledge information, using bag name and start type.
Alternatively, process creation function includes：StartProcessLocked functions；The daily record writes letter
Number includes：EventLog.writeEvent functions.
Alternatively, according to the application identities in application bag name and/or identification information, the application is judged
Whether process correspondence application is No starting application；When the application of application process correspondence for No starting should
Used time, the application process meets preset No starting rule.
Alternatively, according to the application identities in the identification information and process identification (PID), judge that the application is entered
Whether journey has been run；When the application process off-duty, the application process meets preset No starting
Rule.
Alternatively, the type information of terminal is obtained；According to answering in application bag name and/or identification information
With mark, detect whether application process correspondence application is that the type information of the terminal corresponding is forbidden
Start application；When application process correspondence application is for No starting application, the application process meets
Preset No starting rule.
Alternatively, determine application process correspondence process components according to the startup type, when it is described enter
When journey component is target element, execution judges whether the application process correspondence application is No starting application
The step of.
According to another aspect of the present invention, there is provided a kind of data processing equipment, including：Monitor and obtain mould
Block, for monitoring system process interface, acquisition is currently up the application message of application process；Inspection
Module is surveyed, for detecting whether the application process meets preset No starting and advise according to the application message
Then；No starting module, for when detecting the application process and meeting preset No starting rule,
Forbid the startup of the application process.
Alternatively, function acquisition submodule, for monitoring system process interface, obtains process wound
Build function；Acquisition of information submodule, for obtaining the application process from the process creation function
Application message.
Alternatively, parameter information searching unit, for searching execution journal in the process creation function
Write the parameter information of function；Information acquisition unit, for obtaining application message from the parameter information,
Wherein, the application message include it is following at least one：Identification information, using bag name and start type.
Alternatively, process creation function includes：StartProcessLocked functions；The daily record writes letter
Number includes：EventLog.writeEvent functions.
Alternatively, process judging submodule, for according to answering in application bag name and/or identification information
With mark, judge whether the application process correspondence application is No starting application；Rule match submodule,
For when application process correspondence application is for No starting application, the application process to meet preset taboo
Only setup rule.
Alternatively, judging submodule is run, for according to the application identities and process in the identification information
Mark, judges whether the application process has been run；Rule match submodule, is additionally operable to when the application
During process off-duty, the application process meets preset No starting rule.
Alternatively, process judging submodule, the type information for obtaining terminal；According to the application bag
Application identities in name and/or identification information, detect whether the application process correspondence application is the terminal
The corresponding No starting application of type information；Rule match submodule, for when the application process pair
Should apply during for No starting application, the application process meets preset No starting rule.
Alternatively, component judging submodule, for determining the application process pair according to the startup type
Process components are answered, when the process components are target element, execution judges that the application process correspondence should
With whether be No starting application the step of.
Of the invention that system process interface is monitored, acquisition is currently up the application of application process
Information；Detect whether the application process meets preset No starting rule according to the application message；When
When detecting the application process and meeting preset No starting rule, forbid the startup of the application process.
The self-starting of useless application program can effectively be forbidden, the reduction of system cruising time is thus solved, by mistake
The problems such as inspection, achieve monitoring more comprehensively, the cruising time of system increases, and the fluency of system is obtained
The beneficial effect of lifting.
Described above is only the general introduction of technical solution of the present invention, in order to better understand skill of the invention
Art means, and can be practiced according to the content of specification, and it is of the invention above and other in order to allow
Objects, features and advantages can become apparent, below especially exemplified by specific embodiment of the invention.
Brief description of the drawings
By reading the detailed description of hereafter preferred embodiment, various other advantages and benefit are for this
Field those of ordinary skill will be clear understanding.Accompanying drawing is only used for showing the purpose of preferred embodiment,
And it is not considered as limitation of the present invention.And in whole accompanying drawing, be denoted by the same reference numerals
Identical part.In the accompanying drawings：
The step of Fig. 1 shows data processing method according to an embodiment of the invention flow chart；
The step of Fig. 2 shows data processing method in accordance with another embodiment of the present invention flow chart；
Fig. 3 shows the structured flowchart of data processing equipment according to an embodiment of the invention；
Fig. 4 shows the structured flowchart of data processing equipment in accordance with another embodiment of the present invention.
Specific embodiment
The exemplary embodiment of the disclosure is more fully described below with reference to accompanying drawings.Although being shown in accompanying drawing
The exemplary embodiment of the disclosure, it being understood, however, that may be realized in various forms the disclosure without
Should be limited by embodiments set forth here.Conversely, there is provided these embodiments are able to more thoroughly
Understand the disclosure, and can by the scope of the present disclosure it is complete convey to those skilled in the art.
Embodiment one
Reference picture 1, flow chart the step of show data processing method according to an embodiment of the invention,
Specifically may include steps of：
Step 102, system process interface is monitored, acquisition is currently up the application letter of application process
Breath.
The present embodiment can be actuated for monitoring with application processes, prevent due to the application journey without opening certainly
Sequence self-starting and waste of resource.Therefore system process interface can be monitored, with Android system
As a example by, can be by injecting java hook, the system process interface to transmitting application message is monitored.
Using needing to carry out the startup of application program by the system process interface interchange run function on startup,
The system process interface is monitored, so that it is determined that during current just startup application process, obtaining this just
Starting the application message of application process, application message can be the various information that can be identified for that the application,
Such as process identification (PID), using bag name.
Step 104, detect whether the application process meets preset No starting according to the application message
Rule.
The embodiment of the present invention is pre-configured with the No starting rule of various application programs, the preset No starting
Rule is used to limit the self-starting of application program, and self-starting refers to no user triggering and voluntarily starts, example
Can classify to each application program such as preset No starting rule, will not be by when determining which program self-starting
Forbid, need to be prohibited during which program self-starting.These self-startings are needed into forbidden application program
Application message storage forbid at one in open list.Acquisition is currently up the application message of application process
Afterwards, can detect whether the application process meets preset No starting rule according to the application message,
Such as judge that the application message is being forbidden from the information for opening list lookup with the presence or absence of matching, i.e., according to application
Information performs the logic judgment of self-starting.
Step 106, when detecting the application process and meeting preset No starting rule, forbid described
The startup of application process.
When detecting the application process and meeting preset No starting rule, such as in forbidding oneself to open list
The information matched with the application message for being currently up application process is found, the information is returned to app layers
Monitoring module, for example, user equipment antivirus client, then forbids the application by the antivirus client
The startup of process.
In sum, monitored by system process interface, acquisition is currently up answering for application process
Use information；Detect whether the application process meets preset No starting rule according to the application message；
When detecting the application process and meeting preset No starting rule, forbid opening for the application process
It is dynamic, can effectively forbid the self-starting of useless application program, monitoring more comprehensively, to reduce flase drop etc. and ask
Topic, so that increase the cruising time of system, the fluency of lifting system.
Embodiment two
Reference picture 2, flow the step of show data processing method in accordance with another embodiment of the present invention
Figure, specifically may include steps of：
Step 202, system process interface is monitored, obtain process creation function.
Step 204, in the process creation function search execution journal write function parameter information.
Step 206, from the parameter information obtain application message.
Wherein, the application message include it is following at least one：Identification information, using bag name and start class
Type.
The present embodiment obtains the application message for starting application process by monitoring system process interface,
Monitoring can be performed using hook modes, so that the process creation function called when application starts is obtained,
Wherein, the process creation function includes：StartProcessLocked functions.Then created from the process
Build in function and obtain the application message of the application process, you can searched with the process creation function
Execution journal writes the parameter information of function, and the daily record write-in function includes：EventLog.writeEvent
Function, then obtains application message from the parameter information.
By taking android system as an example, it is the system based on component, these groups that android system is one
Part includes broadcast (broadcast component), provider (supplier's component), service (serviced component)
With activity (movable component).Each Android software is formed by these parts assemblings, is led to
The function and behavior for configuring these components are crossed, application program is can be achieved with by other groups in user or system
Part wakes up.
Wherein, before an application program is started, the driver in Activity application programs
ActivityManagerService can call a process creation function startProcessLocked method to go
Start new process.The embodiment of the present invention can be carried out by injecting java hook to system process interface
Monitor.System searches execution journal write-in function in startProcessLocked
EventLog.writeEvent methods, obtain the parameter information of EventLog.writeEvent methods.
Then application message is obtained from the parameter information, application message is including identification information, using bag
Name and startup type, wherein, identification information includes application identities and process identification (PID).General android systems
System can be automatically using one application identities of generation i.e. user identifier (User Identification, UID),
And each application can be allocated different UID, the authority and data for managing each application are common
Enjoy.Process identification (PID) (Process Identifier, PID) is that the kernel of most of operating systems is used for uniquely
One numerical value of identification process, this numerical value can be as the parameter of many function calls.Android (Android)
Application bag name (Package Name) can be used in system as the mark of application.One bag name is represented
One application, bag name is mainly used in the different application of system identification.The embodiment of the present invention can be according to described
Start type and determine the corresponding process components of the application process.
Step 208, determine application process correspondence process components according to the startup type.
In the present embodiment, application process includes various process components, and different Starting mode can start not
Same process components, therefore determine the application process correspondence process components according to the startup type, its
In, process components include such as activity components, broadcast components, service components and provider
Component.
(1) activity components
Activity components are visualization components, because activity components are typically to be triggered by user's triggering
Startup behavior, and non-software, from opening, usual activity components can be determined that to be non-targeted component.
(2) broadcast components
Broadcast components are non-visualization components, can as target element, and judge its whether as
During self-starting, can process in two kinds of situation：If the software comprising the broadcast components has been located
In running status, for example, after antivirus client terminal start-up success, each application program in meeting monitoring users equipment
Running status, when a component is activated, it is possible to travel through this running status list, differentiate bag
Whether the application program containing the component is in running status.Each application program can be injected, in the journey
One monitor is set in sequence, then it is assumed that current startup behavior is not opened certainly, it is not necessary to intercepted.This
The situation of kind is typically occurred in multi-process Android software.Conversely, being then considered to open certainly.
(3) service components
Service components are non-visualization components, can as target element, and judge its whether as
During self-starting, its discriminant approach is similar with broadcast components.But the importance one of service components
As be higher than broadcast components, inappropriate interception most likely results in some running software exceptions,
In order to avoid such case, when the initiation of service components when setting out to be intercepted certainly, can further give
Prompting is given, guiding user completes expected operation, so as to judge whether the process components are target element.
For example, it is contemplated that operation typically have following several scenes：Such as when user is carried out in user equipment Taobao
During payment, even if user prohibits Alipay from opening, now he also is intended to Alipay can be waken up；Separately
A kind of outer scene is user equipment bodyguard and user equipment assistant, when this two application programs coexist,
User equipment bodyguard constantly can wake up user equipment assistant by service components, if user is inherently
Prohibit user equipment assistant opens function certainly, then at this time user is probably not intended to user equipment
Assistant is activated.According to specific usage scenario, user can produce different expections to prohibiting from the effect for opening.
(4) provider components
The startup behavior that provider components trigger is not intercepted typically, it is possible to determine that the process components
It is non-target element.
When the process components are not target elements, return to step 202；When the process components are mesh
During mark component, step 210 is performed.
Step 210, according to the application identities in application bag name and/or identification information, judge it is described should
Whether it is No starting application with process correspondence application.
The embodiment of the present invention can classify to each application program, will not be banned when determining which program self-starting
Which only, need to be prohibited during program self-starting.These self-startings are needed into forbidden application program
Application message storage is forbidden from opening list at one.Acquisition is currently up the application message of application process
Afterwards, according to the application identities UID in application bag name Package Name or identification information,
Can be looked into forbidding oneself to open list simultaneously according to application bag name Package Name and application identities UID
Look for the information with the presence or absence of matching.When Package Name and/or UID is forbidding from opening list, sentence
The fixed application process correspondence application is No starting application, performs step 212.If it is not, the i.e. application
Process is non-No starting application, return to step 202.
In a preferred embodiment of the invention, detect whether the application process accords with according to the application message
Closing preset No starting rule includes：Obtain the type information of terminal.According to application bag name and/or mark
Application identities in knowledge information, detect the application of application process correspondence whether be the terminal type letter
Cease corresponding No starting application.
In actual treatment, the terminal models of different user equipmenies are different, and corresponding different application sets in difference
Power consumption in standby is also different.Such as some application programs power consumption in Samsung user equipment is big, some
Application program power consumption in apple user equipment is big, therefore the embodiment of the present invention can be directed to some power consumptions
Than more serious type, the recommended value specifically designed for the type system application is set, i.e., for different type
The user equipment of information sets corresponding No starting application, such as respective to forbid opening list certainly.Obtain eventually
The type information at end, according to the application identities in application bag name or identification information, it is also possible to while
According to the application identities in application bag name and identification information, counterpart terminal forbid look into from opening list
Look for the information with the presence or absence of matching, that is, carry out logic judgment determine the application of application process correspondence whether be
The corresponding No starting application of type information of the terminal.
If so, i.e. described application process correspondence application is No starting application, step 212 is performed.If it is not,
That is application process correspondence application is non-No starting application, return to step 202.
Step 212, according to the application identities in the identification information and process identification (PID), judge the application
Whether process has been run.
UID and PID according to application process determine whether the application process has been run, i.e., can monitor use
The running status of each application program in the equipment of family, so as to travel through this running status list, differentiation is included
Whether the application program of the component is in running status.
If so, i.e. application process has been run, return to step 202；If it is not, i.e. application process off-duty,
Perform step 214.
Step 214, the application process meet preset No starting rule.
Step 216, the startup for forbidding the application process.
When detecting target element and to start, by judging to determine that target element correspondence application program is
No starting application, and the application program is not actuated, can now determine that application process meets preset forbidding
Setup rule, so as to application process self-starting is forbidden in the startup for forbidding the application process.So as to prevent by
Cause the waste of device resource in self-starting, it passes through various judgements and reduces flase drop, prevents user
Triggering starts and forbidden problem, improves Consumer's Experience.
For embodiment of the method, in order to be briefly described, therefore it is all expressed as a series of combination of actions,
But those skilled in the art should know, the embodiment of the present invention is not limited by described sequence of movement
System, because according to the embodiment of the present invention, some steps can sequentially or simultaneously be carried out using other.Its
Secondary, those skilled in the art should also know, embodiment described in this description belongs to be preferable to carry out
Example, necessary to the involved action not necessarily embodiment of the present invention.
Embodiment three
Reference picture 3, shows the structured flowchart of data processing equipment according to an embodiment of the invention.
Can specifically include with lower module：
Acquisition module 302 is monitored, for monitoring system process interface, acquisition is currently up application
The application message of process.
Detection module 304, for detecting whether the application process meets preset according to the application message
No starting rule.
No starting module 306, preset No starting rule is met for that ought detect the application process
When, forbid the startup of the application process.
In sum, monitored by system process interface, acquisition is currently up answering for application process
Use information；Detect whether the application process meets preset No starting rule according to the application message；
When detecting the application process and meeting preset No starting rule, forbid opening for the application process
It is dynamic, can effectively forbid the self-starting of useless application program, monitoring more comprehensively, to reduce flase drop etc. and ask
Topic, so that increase the cruising time of system, the fluency of lifting system.
Example IV
Reference picture 4, shows the structured flowchart of data processing equipment in accordance with another embodiment of the present invention.
Can specifically include with lower module：
Acquisition module 302 is monitored, for monitoring system process interface, acquisition is currently up application
The application message of process.
In a preferred embodiment of the invention, the monitoring acquisition module 302, including：
Function acquisition submodule 3022, for monitoring system process interface, obtains process creation letter
Number.
Acquisition of information submodule 3024, for obtaining the application process from the process creation function
Application message.
In a preferred embodiment of the invention, described information acquisition submodule 3024, including：
Parameter information searching unit 30242, writes for searching execution journal in the process creation function
Enter the parameter information of function.
Information acquisition unit 30244, for obtaining application message from the parameter information, wherein, institute
State application message include it is following at least one：Identification information, using bag name and start type.
Wherein, process creation function includes：StartProcessLocked functions；The daily record writes function
Including：EventLog.writeEvent functions.
Detection module 304, for detecting whether the application process meets preset according to the application message
No starting rule.
In a preferred embodiment of the invention, the detection module 304, including：
Component judging submodule 3042, for determining that the application process correspondence is entered according to the startup type
Journey component, when the process components are target element, execution judges that the application process correspondence application is
The step of no application for No starting.
Process judging submodule 3044, for according to the application in application bag name and/or identification information
Mark, judges whether the application process correspondence application is No starting application.
Rule match submodule 3046, for being No starting application when application process correspondence application
When, the application process meets preset No starting rule.
In a preferred embodiment of the invention, the detection module 304, including：
Process judging submodule 3044, the type information for obtaining terminal；According to the application bag name and
/ or identification information in application identities, detect the application of application process correspondence whether be the terminal class
The corresponding No starting application of type information.
Rule match submodule 3046, for being No starting application when application process correspondence application
When, the application process meets preset No starting rule.
In a preferred embodiment of the invention, the detection module 304 also includes：
Operation judging submodule 3048, for according to the application identities in the identification information and process mark
Know, judge whether the application process has been run；
Rule match submodule 3046, is additionally operable to when the application process off-duty, the application process
Meet preset No starting rule.
No starting module 306, preset No starting rule is met for that ought detect the application process
When, forbid the startup of the application process.
For device embodiment, because it is substantially similar to embodiment of the method, so the comparing of description
Simply, the relevent part can refer to the partial explaination of embodiments of method.
Algorithm and display be not solid with any certain computer, virtual system or miscellaneous equipment provided herein
There is correlation.Various general-purpose systems can also be used together with based on teaching in this.As described above,
It is obvious to construct the structure required by this kind of system.Additionally, the present invention is not also for any specific
Programming language.It is understood that, it is possible to use various programming languages realize the content of invention described herein,
And the description done to language-specific above is to disclose preferred forms of the invention.
In specification mentioned herein, numerous specific details are set forth.It is to be appreciated, however, that this
Inventive embodiment can be put into practice in the case of without these details.In some instances, not
Known method, structure and technology are shown specifically, so as not to obscure the understanding of this description.
Similarly, it will be appreciated that in order to simplify the disclosure and help understand in each inventive aspect
Or it is multiple, in above to the description of exemplary embodiment of the invention, each feature of the invention is sometimes
It is grouped together into single embodiment, figure or descriptions thereof.However, should not be by the disclosure
Method be construed to reflect following intention：I.e. the present invention for required protection requirement ratio is in each claim
The middle more features of feature be expressly recited.More precisely, as the following claims reflect
As, inventive aspect is all features less than single embodiment disclosed above.Therefore, it then follows
Thus claims of specific embodiment are expressly incorporated in the specific embodiment, wherein each right
It is required that in itself all as separate embodiments of the invention.
Those skilled in the art are appreciated that can be carried out certainly to the module in the equipment in embodiment
Adaptively change and they are arranged in one or more equipment different from the embodiment.Can be with
Module or unit or component in embodiment is combined into a module or unit or component, and in addition may be used
To be divided into multiple submodule or subelement or sub-component.Except such feature and/or process or
Outside at least some in unit exclude each other, can be using any combinations to this specification (including companion
With claim, summary and accompanying drawing) disclosed in all features and so disclosed any method or
All processes or unit of person's equipment are combined.Unless expressly stated otherwise, this specification (including companion
With claim, summary and accompanying drawing) disclosed in each feature can it is identical by offers, equally or phase
Replace like the alternative features of purpose.
Although additionally, it will be appreciated by those of skill in the art that some embodiments described herein include it
Some included features are rather than further feature, but the group of the feature of different embodiments in its embodiment
Conjunction means to be within the scope of the present invention and formed different embodiments.For example, in following power
In sharp claim, the one of any of embodiment required for protection mode can make in any combination
With.
All parts embodiment of the invention can be realized with hardware, or be processed with one or more
The software module run on device is realized, or is realized with combinations thereof.Those skilled in the art should
Understand, basis can be realized using microprocessor or digital signal processor (DSP) in practice
The some or all functions of some or all parts in the data processing equipment of the embodiment of the present invention.
The present invention is also implemented as some or all equipment for performing method as described herein
Or program of device (for example, computer program and computer program product).It is such to realize the present invention
Program can store on a computer-readable medium, or can have one or more signal shape
Formula.Such signal can be downloaded from internet website and obtained, or be provided on carrier signal, or
Person provides in any other form.
It should be noted that above-described embodiment the present invention will be described rather than limiting the invention,
And those skilled in the art can design replacement without departing from the scope of the appended claims
Embodiment.In the claims, any reference symbol being located between bracket should not be configured to right
It is required that limitation.Word "comprising" does not exclude the presence of element or step not listed in the claims.Position
Word "a" or "an" before element does not exclude the presence of element as multiple.The present invention can
To be realized by means of the hardware for including some different elements and by means of properly programmed computer.
If in the unit claim for listing equipment for drying, several in these devices can be by same
Individual hardware branch is embodied.The use of word first, second, and third does not indicate that any order.
These words can be construed to title.
The invention discloses A1, a kind of data processing method, including：System process interface is supervised
Listen, acquisition is currently up the application message of application process；Detect that the application is entered according to the application message
Whether journey meets preset No starting rule；Meet preset No starting rule when the application process is detected
When then, forbid the startup of the application process.
A2, the method as described in A1, monitor system process interface, and acquisition is currently up application
The application message of process, including：System process interface is monitored, process creation function is obtained；From
The application message of the application process is obtained in the process creation function.
A3, the method as described in A2, obtain answering for the application process from the process creation function
With information, including：The parameter information that execution journal writes function is searched in the process creation function；
Obtain application message from the parameter information, wherein, the application message include it is following at least one：
Identification information, using bag name and start type.
A4, the method as described in A2, process creation function include：StartProcessLocked functions；
The daily record write-in function includes：EventLog.writeEvent functions.
A5, the method as described in A3, detect whether the application process meets according to the application message
Preset No starting rule, including：According to the application identities in application bag name and/or identification information,
Judge whether the application process correspondence application is No starting application；When application process correspondence is applied
During for No starting application, the application process meets preset No starting rule.
A6, the method as described in A5, judge the application of application process correspondence for No starting application it
Afterwards, also include：According to the application identities in the identification information and process identification (PID), judge that the application is entered
Whether journey has been run；When the application process off-duty, the application process meets preset No starting
Rule.
A7, the method as described in A3, detect whether the application process meets according to the application message
Preset No starting rule, including：Obtain the type information of terminal；According to application bag name and/or mark
Application identities in knowledge information, detect the application of application process correspondence whether be the terminal type letter
Cease corresponding No starting application；It is described when application process correspondence application is for No starting application
Application process meets preset No starting rule.
A8, the method as described in A5 or A7, also include：Determine described answering according to the startup type
With process correspondence process components, when the process components are target element, execution judges that the application is entered
The step of whether journey correspondence application is No starting application.
The invention also discloses B9, a kind of data processing equipment, including：Acquisition module is monitored, is used for
System process interface is monitored, acquisition is currently up the application message of application process；Detection module,
For detecting whether the application process meets preset No starting rule according to the application message；Forbid
Starting module, for when detecting the application process and meeting preset No starting rule, forbidding described
The startup of application process.
B10, the device as described in B9, the monitoring acquisition module, including：Function acquisition submodule,
For monitoring system process interface, process creation function is obtained；Acquisition of information submodule, is used for
The application message of the application process is obtained from the process creation function.
B11, the device as described in B9, described information acquisition submodule, including：Parameter information is searched single
Unit, for searching the parameter information that execution journal writes function in the process creation function；Information is obtained
Take unit, for obtaining application message from the parameter information, wherein, the application message include with
Descend at least one：Identification information, using bag name and start type.
B12, the device as described in B9, process creation function include：StartProcessLocked functions；
The daily record write-in function includes：EventLog.writeEvent functions.
B13, the device as described in B9, the detection module, including：Process judging submodule, uses
Application identities according to application bag name and/or identification information, judge that the application process correspondence should
With whether being No starting application；Rule match submodule, for being when application process correspondence application
During No starting application, the application process meets preset No starting rule.
B14, the device as described in B9, the detection module also include：Operation judging submodule,
For according to the application identities in the identification information and process identification (PID), judging the application process whether
Operation；Rule match submodule, is additionally operable to when the application process off-duty, the application process symbol
Close preset No starting rule.
B15, the device as described in B11, the detection module, including：Process judging submodule, uses
In the type information for obtaining terminal；According to the application identities in application bag name and/or identification information, inspection
Survey the application of application process correspondence whether be the terminal the corresponding No starting application of type information；
Rule match submodule, it is described to answer for when application process correspondence application is for No starting application
Meet preset No starting rule with process.
B16, the device as described in B13 or B15, the detection module also include：Component judges son
Module, for determining the application process correspondence process components according to the startup type, when the process
When component is target element, execution judges whether the application process correspondence application is No starting application
Step.
Claims (10)
1. a kind of data processing method, including：
System process interface is monitored, acquisition is currently up the application message of application process；
Detect whether the application process meets preset No starting rule according to the application message；
When detecting the application process and meeting preset No starting rule, forbid the application process
Start.
2. the method for claim 1, it is characterised in that monitor system process interface,
Acquisition is currently up the application message of application process, including：
System process interface is monitored, process creation function is obtained；
The application message of the application process is obtained from the process creation function.
3. method as claimed in claim 2, it is characterised in that obtained from the process creation function
The application message of the application process is taken, including：
The parameter information that execution journal writes function is searched in the process creation function；
Application message is obtained from the parameter information, wherein, the application message includes following at least one
：Identification information, using bag name and start type.
4. method as claimed in claim 2, it is characterised in that process creation function includes：
StartProcessLocked functions；The daily record write-in function includes：EventLog.writeEvent functions.
5. method as claimed in claim 3, it is characterised in that detect institute according to the application message
State whether application process meets preset No starting rule, including：
According to the application identities in application bag name and/or identification information, the application process correspondence is judged
Using whether being No starting application；
When application process correspondence application is for No starting application, the application process meets preset taboo
Only setup rule.
6. method as claimed in claim 5, it is characterised in that judge that the application process correspondence should
After for No starting application, also include：
According to the application identities in the identification information and process identification (PID), judge the application process whether
Operation；
When the application process off-duty, the application process meets preset No starting rule.
7. method as claimed in claim 3, it is characterised in that detect institute according to the application message
State whether application process meets preset No starting rule, including：
Obtain the type information of terminal；
According to the application identities in application bag name and/or identification information, the application process correspondence is detected
Using whether be the terminal the corresponding No starting application of type information；
When application process correspondence application is for No starting application, the application process meets preset taboo
Only setup rule.
8. the method as described in claim 5 or 7, it is characterised in that also include：
The application process correspondence process components are determined according to the startup type, when the process components are
During target element, execution judges whether the application process correspondence applies the step of being No starting application.
9. a kind of data processing equipment, including：
Acquisition module is monitored, for monitoring system process interface, acquisition is currently up application process
Application message；
Detection module, for detecting whether the application process meets preset forbidding according to the application message
Setup rule；
No starting module, for when detecting the application process and meeting preset No starting rule,
Forbid the startup of the application process.
10. device as claimed in claim 9, it is characterised in that the monitoring acquisition module, including：
Function acquisition submodule, for monitoring system process interface, obtains process creation function；
Acquisition of information submodule, the application for obtaining the application process from the process creation function
Information.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510982488.7A CN106909413A (en) | 2015-12-23 | 2015-12-23 | A kind of data processing method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201510982488.7A CN106909413A (en) | 2015-12-23 | 2015-12-23 | A kind of data processing method and device |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN106909413A true CN106909413A (en) | 2017-06-30 |
Family
ID=59206135
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201510982488.7A Pending CN106909413A (en) | 2015-12-23 | 2015-12-23 | A kind of data processing method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106909413A (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107944259A (en) * | 2017-11-21 | 2018-04-20 | 广东欧珀移动通信有限公司 | Using the management-control method of startup, device and storage medium and mobile terminal |
| CN108287738A (en) * | 2017-12-21 | 2018-07-17 | 维沃移动通信有限公司 | A kind of application control method and device |
| CN110413342A (en) * | 2019-07-15 | 2019-11-05 | 深圳市易汇软件有限公司 | A kind of android service and the process method that simultaneously dynamic adjusts alignment processing mechanism that can dynamically adjust monitoring |
| CN112016693A (en) * | 2019-05-30 | 2020-12-01 | 中兴通讯股份有限公司 | Machine learning engine implementation method and device, terminal equipment and storage medium |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140173130A1 (en) * | 2012-12-18 | 2014-06-19 | Microsoft Corporation | Application intelligent request management based on server health and client information |
| CN104462952A (en) * | 2014-12-31 | 2015-03-25 | 北京奇虎科技有限公司 | Method and device for preventing self-starting of application |
-
2015
- 2015-12-23 CN CN201510982488.7A patent/CN106909413A/en active Pending
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20140173130A1 (en) * | 2012-12-18 | 2014-06-19 | Microsoft Corporation | Application intelligent request management based on server health and client information |
| CN104462952A (en) * | 2014-12-31 | 2015-03-25 | 北京奇虎科技有限公司 | Method and device for preventing self-starting of application |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107944259A (en) * | 2017-11-21 | 2018-04-20 | 广东欧珀移动通信有限公司 | Using the management-control method of startup, device and storage medium and mobile terminal |
| CN108287738A (en) * | 2017-12-21 | 2018-07-17 | 维沃移动通信有限公司 | A kind of application control method and device |
| CN112016693A (en) * | 2019-05-30 | 2020-12-01 | 中兴通讯股份有限公司 | Machine learning engine implementation method and device, terminal equipment and storage medium |
| CN110413342A (en) * | 2019-07-15 | 2019-11-05 | 深圳市易汇软件有限公司 | A kind of android service and the process method that simultaneously dynamic adjusts alignment processing mechanism that can dynamically adjust monitoring |
| CN110413342B (en) * | 2019-07-15 | 2022-12-16 | 深圳市易汇软件有限公司 | Method capable of dynamically adjusting monitored android service and process and dynamically adjusting corresponding processing mechanism |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN106909834A (en) | A kind of data processing method and device | |
| CN104123162B (en) | The method and device that control application program is opened certainly | |
| CN103605920B (en) | A kind of application program dynamic safety management method and system based on SEAndroid platform | |
| CN106909413A (en) | A kind of data processing method and device | |
| CN106127030A (en) | A kind of interface control method and device | |
| CN108763951A (en) | A kind of guard method of data and device | |
| CN106445514B (en) | Method and device for managing Activity instance of Android platform | |
| US10241808B2 (en) | Determining test application effectiveness | |
| CN108287647B (en) | Application running method and device | |
| CN105933497B (en) | A kind of call blocking method and apparatus of multi-mode | |
| CN108334404A (en) | The operation method and device of application program | |
| CN106325993A (en) | Freezing method of application program and terminal | |
| CN106845270B (en) | A kind of seamless browsing method and device | |
| CN105743981A (en) | Monitoring method, monitoring terminal and monitoring system | |
| CN105447384B (en) | A kind of anti-method monitored, system and mobile terminal | |
| Evesti et al. | Towards micro architecture for security adaptation | |
| CN104063288A (en) | Process management method and device | |
| CN109981573B (en) | Security event response method and device | |
| CN112100620A (en) | Code security detection method, device, equipment and readable storage medium | |
| US9361209B2 (en) | Capturing domain validations and domain element initializations | |
| CN105573842B (en) | The method and device of process recovery processing is carried out in the application | |
| WO2021022433A1 (en) | Application monitoring method and apparatus, and storage medium and electronic device | |
| CN109840113B (en) | Application data processing method and equipment, storage medium and terminal thereof | |
| CN105988780A (en) | Window background implementing method and device | |
| US20140369551A1 (en) | Systems and Methods for Multimedia-Processing |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| RJ01 | Rejection of invention patent application after publication | ||
| RJ01 | Rejection of invention patent application after publication |
Application publication date: 20170630 |