CN113676440B - Authority negotiation method and device in communication process and electronic equipment - Google Patents
Authority negotiation method and device in communication process and electronic equipment Download PDFInfo
- Publication number
- CN113676440B CN113676440B CN202010622179.XA CN202010622179A CN113676440B CN 113676440 B CN113676440 B CN 113676440B CN 202010622179 A CN202010622179 A CN 202010622179A CN 113676440 B CN113676440 B CN 113676440B
- Authority
- CN
- China
- Prior art keywords
- electronic device
- item
- restricted
- call connection
- permission
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 230000006854 communication Effects 0.000 title claims abstract description 182
- 238000000034 method Methods 0.000 title claims abstract description 69
- 238000004891 communication Methods 0.000 claims abstract description 129
- 238000012790 confirmation Methods 0.000 claims abstract description 41
- 230000004044 response Effects 0.000 claims abstract description 14
- 238000012545 processing Methods 0.000 claims description 25
- 238000004590 computer program Methods 0.000 claims description 16
- 238000004806 packaging method and process Methods 0.000 claims description 3
- 230000006870 function Effects 0.000 description 44
- 238000007726 management method Methods 0.000 description 20
- 238000010295 mobile communication Methods 0.000 description 20
- 238000010586 diagram Methods 0.000 description 19
- 230000005236 sound signal Effects 0.000 description 11
- 210000000988 bone and bone Anatomy 0.000 description 10
- 230000008569 process Effects 0.000 description 9
- 238000005516 engineering process Methods 0.000 description 7
- 230000000694 effects Effects 0.000 description 5
- 230000003993 interaction Effects 0.000 description 5
- 230000003287 optical effect Effects 0.000 description 5
- 229920001621 AMOLED Polymers 0.000 description 3
- 230000001133 acceleration Effects 0.000 description 3
- 230000009471 action Effects 0.000 description 3
- 238000013528 artificial neural network Methods 0.000 description 3
- 238000004422 calculation algorithm Methods 0.000 description 3
- 238000013461 design Methods 0.000 description 3
- 230000005764 inhibitory process Effects 0.000 description 3
- 230000002159 abnormal effect Effects 0.000 description 2
- 230000005540 biological transmission Effects 0.000 description 2
- 230000036772 blood pressure Effects 0.000 description 2
- 230000001413 cellular effect Effects 0.000 description 2
- 230000008859 change Effects 0.000 description 2
- 239000003086 colorant Substances 0.000 description 2
- 238000013500 data storage Methods 0.000 description 2
- 238000001514 detection method Methods 0.000 description 2
- 238000011161 development Methods 0.000 description 2
- 230000001939 inductive effect Effects 0.000 description 2
- 238000002955 isolation Methods 0.000 description 2
- 230000033001 locomotion Effects 0.000 description 2
- 230000002093 peripheral effect Effects 0.000 description 2
- 238000003825 pressing Methods 0.000 description 2
- 230000009467 reduction Effects 0.000 description 2
- 230000000717 retained effect Effects 0.000 description 2
- 238000006467 substitution reaction Methods 0.000 description 2
- 230000003321 amplification Effects 0.000 description 1
- 230000003416 augmentation Effects 0.000 description 1
- 230000003190 augmentative effect Effects 0.000 description 1
- 238000013475 authorization Methods 0.000 description 1
- 238000010009 beating Methods 0.000 description 1
- 230000006399 behavior Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 230000007175 bidirectional communication Effects 0.000 description 1
- 230000002457 bidirectional effect Effects 0.000 description 1
- 238000013529 biological neural network Methods 0.000 description 1
- 210000004556 brain Anatomy 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 230000000295 complement effect Effects 0.000 description 1
- 239000004020 conductor Substances 0.000 description 1
- 238000001914 filtration Methods 0.000 description 1
- 230000005484 gravity Effects 0.000 description 1
- 230000036541 health Effects 0.000 description 1
- 230000002452 interceptive effect Effects 0.000 description 1
- 230000009545 invasion Effects 0.000 description 1
- 239000010985 leather Substances 0.000 description 1
- 239000004973 liquid crystal related substance Substances 0.000 description 1
- 230000007774 longterm Effects 0.000 description 1
- 239000000203 mixture Substances 0.000 description 1
- 210000002569 neuron Anatomy 0.000 description 1
- 238000003199 nucleic acid amplification method Methods 0.000 description 1
- 238000005457 optimization Methods 0.000 description 1
- 230000010349 pulsation Effects 0.000 description 1
- 239000002096 quantum dot Substances 0.000 description 1
- 238000009877 rendering Methods 0.000 description 1
- 230000002441 reversible effect Effects 0.000 description 1
- 238000005070 sampling Methods 0.000 description 1
- 239000004065 semiconductor Substances 0.000 description 1
- 230000003238 somatosensory effect Effects 0.000 description 1
- 230000001360 synchronised effect Effects 0.000 description 1
- 238000012546 transfer Methods 0.000 description 1
- 230000000007 visual effect Effects 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/10—Network architectures or network communication protocols for network security for controlling access to devices or network resources
- H04L63/105—Multiple levels of security
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L63/00—Network architectures or network communication protocols for network security
- H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
- H04L63/205—Network architectures or network communication protocols for network security for managing network security; network security policies in general involving negotiation or determination of the one or more network security mechanisms to be used, e.g. by negotiation between the client and the server or between peers or by selection according to the capabilities of the entities involved
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Computing Systems (AREA)
- General Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Telephone Function (AREA)
Abstract
The embodiment of the application provides a method and a device for negotiating permissions in a communication process and electronic equipment, wherein in the method for negotiating permissions in the communication process, a first electronic equipment displays an interface of a currently running communication application, and after a first operation of a user is detected, a permission item which is limited to be used in the communication process of the first electronic equipment and a second electronic equipment is obtained in response to the first operation; then, the first electronic device sends a first request to the second electronic device, wherein the first request comprises a restricted-use authority item, receives confirmation information of the second electronic device for the restricted-use authority item, and restricts the application of a locally-installed application to the restricted-use authority item according to the confirmation information; and finally, after the communication between the first electronic device and the second electronic device is finished, restoring the setting of the permission item of the locally installed application to the setting before the communication between the first electronic device and the second electronic device. Therefore, the permission items which are limited to be used in the communication process can be negotiated by the two communication parties before or during the communication, and after the communication is finished, the setting of the permission items can be recovered to the permission setting before the communication, so that the normal use of the electronic equipment at ordinary times is not influenced, and the hardware investment is not required.
Description
Technical Field
The embodiment of the application relates to the technical field of intelligent terminals, in particular to a method and a device for authority negotiation in a communication process and electronic equipment.
Background
With the development of mobile communication technology, the interactive scenes of multiple terminals (at least two terminals) are more and more, the conditions of sound recording, screen recording and/or video recording are very common during the interaction of the multiple terminals, and the conditions of surreptitious recording are very common, which can cause invasion to the privacy of users. At present, the protection of the privacy of the user is more and more concerned, and when judicial evidence collection is involved, the evidence inducing the recording cannot be adopted, and the user must be clearly informed, so that the recorded evidence is effective. The problem is not solved in current distributed authority management, and when one end records sound, video and/or record a screen when multi-terminal interaction is carried out, other ends do not know, and further authority management and control measures can not be taken.
Disclosure of Invention
The embodiment of the application provides a method and a device for negotiating the permission in the communication process and electronic equipment, and also provides a computer readable storage medium, so as to realize that two communication parties negotiate the permission of limiting use in the communication process before or during the communication.
In a first aspect, an embodiment of the present application provides a method for negotiating an authority in a communication process, where the method is applied to an electronic device, and the method includes: the method comprises the steps that a first electronic device displays an interface of a currently running communication application; after first operation of a user is detected, in response to the first operation, a permission item which is limited to be used in the communication process of first electronic equipment and second electronic equipment is obtained; specifically, the first operation may include: the user may click, double-click or long-press the "security mode" icon in the display interface of the currently running communication application, or the user may perform other types of triggering operations on the "security mode" icon, so as to start the security communication mode, and this embodiment does not limit the type of the triggering operation performed on the "security mode" icon by the user; alternatively, the first operation may be another form of operation, such as: in a display interface of the currently running communication application, a user presses the user identification (such as a user name) of the second electronic equipment for a long time to select a safe communication mode in a pop-up menu; or, in a display interface of the currently running communication application, detecting that the time for pressing a mechanical key (for example, a switch key and/or a volume key) by a user reaches a preset time, wherein the preset time can be set by the user when the preset time is specifically realized; the present embodiment does not limit the specific operation form of the first operation.
Then, the first electronic equipment sends a first request to the second electronic equipment, wherein the first request comprises a restricted-use permission item; and the first electronic equipment receives confirmation information of the second electronic equipment aiming at the limited-use authority item, and limits the application of the locally-installed application to the limited-use authority item according to the confirmation information.
Finally, after the first electronic device and the second electronic device finish communication, the first electronic device restores the setting of the permission item of the locally installed application to the setting before the first electronic device and the second electronic device communicate. Specifically, when the two parties of the communication hang up the phone call or the communication cannot be continued due to other reasons, the current permission agreement is no longer valid, and after the permission application arbitration module in the electronic device used by the two parties of the communication acquires the closing information of the currently running communication application and/or the notification information of the communication protocol stack, the setting of the permission item of the locally installed application may be restored to the setting before the first electronic device communicates with the second electronic device.
In the authority negotiation method in the communication process, a first electronic device displays an interface of a currently running communication application, and after a first operation of a user is detected, an authority item which is limited to be used in the communication process of the first electronic device and a second electronic device is obtained in response to the first operation; then, the first electronic device sends a first request to the second electronic device, wherein the first request comprises a restricted-use authority item, receives confirmation information of the second electronic device for the restricted-use authority item, and restricts the application of a locally-installed application to the restricted-use authority item according to the confirmation information; and finally, after the communication between the first electronic equipment and the second electronic equipment is finished, restoring the setting of the authority item of the locally-installed application to the setting before the communication between the first electronic equipment and the second electronic equipment. Therefore, the permission items which are limited to be used in the communication process can be negotiated by the two communication parties before or during the communication, and after the communication is finished, the setting of the permission items can be recovered to the permission setting before the communication, so that the normal use of the electronic equipment at ordinary times is not influenced, and the hardware investment is not required.
In one possible implementation manner, the first electronic device may limit, according to the confirmation information, the application of the locally installed application to the restricted-use permission item by: and acquiring the authority item confirmed by the second electronic equipment in the limited-use authority items according to the confirmation information, and then limiting the application of the locally-installed application to the authority item confirmed by the second electronic equipment.
In one possible implementation manner, after receiving the confirmation information of the second electronic device for the restricted-use permission item, the first electronic device may further establish a call connection with the second electronic device, where the call connection includes a video call connection or a voice call connection.
That is to say, the user may send the first request to the second electronic device before establishing a call connection with the second electronic device, and after receiving the confirmation information of the second electronic device for the restricted-use permission item, the first electronic device may establish a call connection with the second electronic device.
In one possible implementation manner, after the first electronic device displays the interface of the currently running communication application and before the first operation of the user is detected, a call request may be sent to the second electronic device, and a call connection is established with the second electronic device according to the call request, where the call connection includes a video call connection or a voice call connection. That is, the first electronic device may establish a call connection with the second electronic device, and then send the first request to the second electronic device.
In one possible implementation manner, after a call connection is established between a first electronic device and a second electronic device, if a permission item confirmed by the second electronic device includes all permission items in the restricted-use permission items, a prompt message indicating that the call connection is a secure call connection is displayed; and if the authority item confirmed by the second electronic equipment is empty or the authority item confirmed by the second electronic equipment comprises part of the authority items in the restricted use authority items, displaying the prompt message that the call connection is the non-secure call connection.
Specifically, the first electronic device may prompt the call connection to be a secure call connection or a non-secure call connection in a text form in a display interface of the currently running communication application, or may also display an icon in the display interface of the currently running communication application, and prompt the call connection to be a secure call connection or a non-secure call connection through different colors of the icon, where the present embodiment does not limit a manner in which the electronic device displays the prompt information.
In one possible implementation manner, the first electronic device sends a first request to the second electronic device, where the first request includes a restricted-use permission item, and the restricted-use permission item may be: and the first electronic equipment sends a data packet carrying the first request to the second electronic equipment, wherein the data packet comprises the identifier of the restricted-use authority item. The identifier of the restricted-use authority item may be a name of the restricted-use authority item, or the identifier of the restricted-use authority item may also be other types of information, as long as the restricted-use authority item can be indicated, and the identifier of the restricted-use authority item is not limited in this embodiment.
In one possible implementation manner, the data packet includes one or a combination of the following fields: a data packet header field, a type field, a subtype field and an information embedding field; when the value of the type field is a first preset value and the value of the subtype field is a second preset value, the data packet is a data packet carrying the first request, and the data carried by the information embedding field is the first request. The first preset value and the second preset value may be set by themselves when the first preset value and the second preset value are implemented specifically, and the first preset value and the second preset value are not limited in this embodiment.
In one possible implementation manner, the sending, by the first electronic device, the data packet carrying the first request to the second electronic device may be: and the first electronic equipment adds a random number in the data carried by the information embedding field, and encrypts the data added with the random number by using a secret key in the trusted execution environment. Wherein, the data carried by the information embedding field comprises the identification of the restricted-use authority item.
Specifically, the first electronic device may encrypt the data to which the random number is added by using a private key in a secret key of the TEE, where the random number is added to prevent the data carried in the information embedding field from being illegally embedded after being retained by a person. The random numbers are different in each communication, and uniqueness can be guaranteed.
And then, the electronic equipment encapsulates the encrypted data in a data packet, and sends the data packet to second electronic equipment.
In one possible implementation manner, the acquiring, by the first electronic device, the right item restricted for use in the communication process between the first electronic device and the second electronic device may be: according to a security protection level set by a user, acquiring a restricted use authority item corresponding to the security protection level; or acquiring the limited-use authority item set by the user.
In a second aspect, an embodiment of the present application provides an apparatus for negotiating an authority in a communication process, where the apparatus is included in an electronic device, and the apparatus has a function of implementing a behavior of the electronic device in the first aspect and possible implementation manners of the first aspect. The functions may be implemented by hardware, or by hardware executing corresponding software. The hardware or software includes one or more modules or units corresponding to the above-described functions. Such as a receiving module or unit, a processing module or unit, a transmitting module or unit, etc.
In a third aspect, an embodiment of the present application provides a first electronic device, including: one or more processors; a memory; a plurality of application programs; and one or more computer programs, wherein the one or more computer programs are stored in the memory, the one or more computer programs comprising instructions which, when executed by the first electronic device, cause the first electronic device to perform the steps of: displaying an interface of the currently running communication application; after a first operation of a user is detected, responding to the first operation, and acquiring a permission item which is limited to be used in the communication process of first electronic equipment and second electronic equipment; sending a first request to a second electronic device, wherein the first request comprises a restricted-use permission item; receiving confirmation information of the second electronic equipment aiming at the limited-use authority item; according to the confirmation information, the application of the locally installed application to the restricted use authority item is restricted; and after the first electronic device and the second electronic device are communicated, restoring the setting of the permission item of the locally installed application to the setting before the first electronic device and the second electronic device are communicated.
In one possible implementation manner, when the instruction is executed by the first electronic device, the step of causing the first electronic device to execute the step of limiting the application of the locally installed application to the restricted-use permission item according to the confirmation information includes: acquiring the authority items confirmed by the second electronic equipment in the limited-use authority items according to the confirmation information; and limiting the application of the locally installed application to the authority item confirmed by the second electronic equipment.
In one possible implementation manner, when the instruction is executed by the first electronic device, the first electronic device is caused to perform, after the step of receiving the confirmation information of the second electronic device for the restricted-use right item, the following steps are further performed: and establishing a call connection with the second electronic equipment, wherein the call connection comprises a video call connection or a voice call connection.
In one possible implementation manner, when the instruction is executed by the first electronic device, after the step of presenting the interface of the currently running communication application is executed by the first electronic device, and before the step of detecting the first operation of the user, the following steps are further executed: sending a call request to a second electronic device; and establishing a call connection with the second electronic equipment according to the call request, wherein the call connection comprises a video call connection or a voice call connection.
In one possible implementation manner, when the instruction is executed by the first electronic device, after the first electronic device executes the step of establishing a call connection with the second electronic device, the following steps are further executed: if the permission items confirmed by the second electronic equipment comprise all permission items in the permission items limited to be used, displaying prompt information that the call connection is safe call connection; and if the permission item confirmed by the second electronic equipment is empty or the permission item confirmed by the second electronic equipment comprises part of permission items in the permission items restricted from being used, displaying prompt information that the call connection is non-secure call connection.
In one possible implementation manner, when the instruction is executed by the first electronic device, the instruction causes the first electronic device to execute sending of a first request to the second electronic device, where the step of the first request including a restricted-use right item may be: and sending a data packet carrying the first request to a second electronic device, wherein the data packet comprises an identifier of the restricted-use authority item.
In one possible implementation manner, the data packet includes one or a combination of the following fields: data packet header field, type field, subtype field and information embedding field; when the value of the type field is a first preset value and the value of the subtype field is a second preset value, the data packet is a data packet carrying the first request, and the data carried by the information embedding field is the first request.
In one possible implementation manner, when the instruction is executed by the first electronic device, the step of causing the first electronic device to execute sending the data packet carrying the first request to the second electronic device may be: adding a random number in the data carried by the information embedding field, and encrypting the data added with the random number by using a secret key in a trusted execution environment; packaging the encrypted data in a data packet; and sending the data packet to a second electronic device.
In one possible implementation manner, when the instruction is executed by the first electronic device, the step of causing the first electronic device to execute the step of acquiring the restricted-use right item in the communication process between the first electronic device and the second electronic device may be: according to a security protection level set by a user, acquiring a restricted use authority item corresponding to the security protection level; or acquiring the limited-use authority item set by the user.
In a fourth aspect, an embodiment of the present application provides a computer-readable storage medium, in which a computer program is stored, and when the computer program runs on a computer, the computer is caused to execute the method provided in the first aspect.
It should be understood that the second to fourth aspects of the embodiment of the present application are consistent with the technical solution of the first aspect of the embodiment of the present application, and beneficial effects obtained by each aspect and a corresponding possible implementation manner are similar, and are not described again.
In a fifth aspect, the present application provides a computer program, which is used to execute the method provided in the first aspect when the computer program is executed by a computer.
In a possible design, the program in the fifth aspect may be stored in whole or in part on a storage medium packaged with the processor, or in part or in whole on a memory not packaged with the processor.
Drawings
FIG. 1 is a diagram illustrating an application acquisition privilege in the prior art;
fig. 2 is a schematic structural diagram of a first electronic device according to an embodiment of the present application;
fig. 3 is a schematic diagram of a software structure of a first electronic device 100 according to an embodiment of the present application;
fig. 4 is a flowchart of a method for negotiating permissions in a communication process according to an embodiment of the present application;
FIG. 5 is a schematic diagram of a presentation interface of a currently running communication application provided in one embodiment of the present application;
FIG. 6 is a diagram illustrating an embodiment of the present application for obtaining restricted-use rights items;
fig. 7 is a flowchart of an authority negotiation method in a communication process according to another embodiment of the present application;
fig. 8 is a flowchart of an authority negotiation method in a communication process according to still another embodiment of the present application;
fig. 9 is a flowchart of an authority negotiation method in a communication process according to still another embodiment of the present application;
fig. 10 is a schematic diagram illustrating an implementation of a communication layer according to an embodiment of the present application;
FIG. 11 is a diagram illustrating a format of a data packet according to an embodiment of the present application;
fig. 12 is a flowchart of an authority negotiation method in a communication process according to still another embodiment of the present application;
fig. 13 is a flowchart of an authority negotiation method in a communication process according to still another embodiment of the present application;
FIG. 14 is a schematic diagram of an interface for setting a security level according to an embodiment of the present application;
FIG. 15 is a diagram illustrating an interface for setting restricted-use rights items according to an embodiment of the present application;
fig. 16 is a flowchart of an authority negotiation method in a communication process according to still another embodiment of the present application;
fig. 17 is a schematic structural diagram of a first electronic device according to another embodiment of the present application.
Detailed Description
The terminology used in the description of the embodiments section of the present application is for the purpose of describing particular embodiments of the present application only and is not intended to be limiting of the present application.
With the development of mobile communication technology, there are more and more scenes of multi-terminal (at least two terminals) interaction, and in the prior art, when multi-terminal interaction is performed and one end is used for recording sound, recording video and/or recording a screen, other ends do not know, and further rights management and control measures cannot be taken.
Based on the above problems, the embodiments of the present application provide a method for negotiating permissions in a communication process, which can implement that two communication parties negotiate a permission item restricted for use in the communication process before or during a call.
For convenience of understanding, a manner of acquiring the application right in the related art is described below, and referring to fig. 1, fig. 1 is a schematic diagram of acquiring the application right in the related art.
In fig. 1, if an application a wants to operate a certain entity device in an electronic device, a standard interface needs to be called first to obtain an operation right of the corresponding device, and the corresponding device operation interface can be called only after the corresponding right is obtained. In an Android (Android) system, permissions corresponding to devices are represented by fixed Identifiers (IDs), a complete permission of Android is defined in a frame-res.apk, and table 1 shows ID information of the permissions corresponding to some devices in the Android system.
TABLE 1
For example, an example of applying for obtaining the recording right by the application a may be as follows:
// applying for recording rights// holds
After the application a applies for the recording right successfully, the application a may operate a microphone (mic) in the electronic device to complete a subsequent recording operation.
The two communication parties negotiate the permission item which is limited to be used in the communication process, the security of the permission item needs to be ensured, and a Trusted Execution Environment (TEE) in the electronic equipment is introduced below.
A TEE is a secure area on the main processor of an electronic device (e.g., a smartphone, tablet, set-top box, or smart television, etc.) that can guarantee the security, confidentiality, and integrity of code and data loaded inside the environment. The TEE provides an isolated execution environment, and the security features provided include: isolated execution, integrity of trusted applications, confidentiality and/or secure storage of trusted data, and the like. In general, the execution space provided by the TEE provides a higher level of security than common mobile operating systems (e.g., input Output Systems (IOS) or Android, etc.); secure Element (SE), for example: smart cards or SIM cards, etc., providing more functionality.
On the electronic equipment, the TEE environment and the mobile operating system exist in parallel, and the security function is provided for the abundant mobile operating system environment. Applications running in the TEE environment are called Trusted Applications (TAs), the TAs have access to all functions of the main processor and memory of the electronic device, and hardware isolation technology protects the TAs from applications installed in the main operating system environment. Software and password isolation technology inside the TEE can protect the TAs from interaction, so that a plurality of different service providers can use the TAs at the same time without affecting security.
Based on the above description, it can be seen that, in the prior art, the authority control of the electronic device belongs to permanent enjoying after authorization of the user, and the authority negotiation method in the communication process provided by the embodiment of the application can implement that the two communication parties negotiate the authority item restricted to be used in the communication process before or during the call.
The method for negotiating permission in a communication process provided by the embodiment of the application can be applied to electronic equipment, wherein the electronic equipment can be a smart phone, a tablet computer, wearable equipment, vehicle-mounted equipment, augmented Reality (AR)/Virtual Reality (VR) equipment, a notebook computer, an ultra-mobile personal computer (UMPC), a netbook or a Personal Digital Assistant (PDA), and the like; the embodiment of the present application does not set any limit to the specific type of the electronic device.
For example, fig. 2 is a schematic structural diagram of a first electronic device according to an embodiment of the present disclosure, and as shown in fig. 2, the first electronic device 100 may include a processor 110, an external memory interface 120, an internal memory 121, a Universal Serial Bus (USB) interface 130, a charging management module 140, a power management module 141, a battery 142, an antenna 1, an antenna 2, a mobile communication module 150, a wireless communication module 160, an audio module 170, a speaker 170A, a receiver 170B, a microphone 170C, an earphone interface 170D, a sensor module 180, a button 190, a motor 191, an indicator 192, a camera 193, a display screen 194, a Subscriber Identity Module (SIM) card interface 195, and the like. The sensor module 180 may include a pressure sensor 180A, a gyroscope sensor 180B, an air pressure sensor 180C, a magnetic sensor 180D, an acceleration sensor 180E, a distance sensor 180F, a proximity light sensor 180G, a fingerprint sensor 180H, a temperature sensor 180J, a touch sensor 180K, an ambient light sensor 180L, a bone conduction sensor 180M, and the like.
It is to be understood that the illustrated structure of the embodiment of the present application does not specifically limit the first electronic device 100. In other embodiments of the present application, the first electronic device 100 may include more or fewer components than shown, or combine certain components, or split certain components, or a different arrangement of components. The illustrated components may be implemented in hardware, software, or a combination of software and hardware.
The controller can generate an operation control signal according to the instruction operation code and the time sequence signal to finish the control of instruction fetching and instruction execution.
A memory may also be provided in the processor 110 for storing instructions and data. In some embodiments, the memory in the processor 110 is a cache memory. The memory may hold instructions or data that have just been used or recycled by the processor 110. If the processor 110 needs to reuse the instruction or data, it can be called directly from the memory. Avoiding repeated accesses reduces the latency of the processor 110, thereby increasing the efficiency of the system.
In some embodiments, processor 110 may include one or more interfaces. The interface may include an integrated circuit (I2C) interface, an integrated circuit built-in audio (I2S) interface, a Pulse Code Modulation (PCM) interface, a universal asynchronous receiver/transmitter (UART) interface, a Mobile Industry Processor Interface (MIPI), a general-purpose input/output (GPIO) interface, a Subscriber Identity Module (SIM) interface, and/or a Universal Serial Bus (USB) interface, etc.
The I2C interface is a bidirectional synchronous serial bus comprising a serial data line (SDA) and a serial clock line (DCL). In some embodiments, the processor 110 may include multiple sets of I2C buses. The processor 110 may be coupled to the touch sensor 180K, a charger, a flash, a camera 193, etc. through different I2C bus interfaces, respectively. For example: the processor 110 may be coupled to the touch sensor 180K through an I2C interface, so that the processor 110 and the touch sensor 180K communicate through an I2C bus interface to implement the touch function of the first electronic device 100.
The I2S interface may be used for audio communication. In some embodiments, processor 110 may include multiple sets of I2S buses. The processor 110 may be coupled to the audio module 170 through an I2S bus to enable communication between the processor 110 and the audio module 170. In some embodiments, the audio module 170 may transmit the audio signal to the wireless communication module 160 through the I2S interface, so as to implement a function of receiving a call through a bluetooth headset.
The PCM interface may also be used for audio communication, sampling, quantizing and encoding analog signals. In some embodiments, audio module 170 and wireless communication module 160 may be coupled by a PCM bus interface. In some embodiments, the audio module 170 may also transmit audio signals to the wireless communication module 160 through the PCM interface, so as to implement a function of answering a call through a bluetooth headset. Both the I2S interface and the PCM interface may be used for audio communication.
The UART interface is a universal serial data bus used for asynchronous communications. The bus may be a bidirectional communication bus. It converts the data to be transmitted between serial communication and parallel communication. In some embodiments, a UART interface is generally used to connect the processor 110 with the wireless communication module 160. For example: the processor 110 communicates with a bluetooth module in the wireless communication module 160 through a UART interface to implement a bluetooth function. In some embodiments, the audio module 170 may transmit the audio signal to the wireless communication module 160 through a UART interface, so as to realize the function of playing music through a bluetooth headset.
The MIPI interface may be used to connect the processor 110 with peripheral devices such as the display screen 194, the camera 193, and the like. The MIPI interface includes a Camera Serial Interface (CSI), a Display Serial Interface (DSI), and the like. In some embodiments, the processor 110 and the camera 193 communicate through a CSI interface to implement the photographing function of the first electronic device 100. The processor 110 and the display screen 194 communicate through the DSI interface to implement the display function of the first electronic device 100.
The GPIO interface may be configured by software. The GPIO interface may be configured as a control signal and may also be configured as a data signal. In some embodiments, a GPIO interface may be used to connect the processor 110 with the camera 193, the display 194, the wireless communication module 160, the audio module 170, the sensor module 180, and the like. The GPIO interface may also be configured as an I2C interface, I2S interface, UART interface, MIPI interface, and the like.
The USB interface 130 is an interface conforming to the USB standard specification, and may specifically be a Mini USB interface, a Micro USB interface, a USB Type C interface, or the like. The USB interface 130 may be used to connect a charger to charge the first electronic device 100, and may also be used to transmit data between the first electronic device 100 and a peripheral device. And the method can also be used for connecting a headset and playing audio through the headset. The interface may also be used to connect other electronic devices, such as AR devices and the like.
It should be understood that the connection relationship between the modules according to the embodiment of the present invention is only illustrative and does not limit the structure of the first electronic device 100. In other embodiments of the present application, the first electronic device 100 may also adopt different interface connection manners or a combination of multiple interface connection manners in the above embodiments.
The charging management module 140 is configured to receive a charging input from a charger. The charger may be a wireless charger or a wired charger. In some wired charging embodiments, the charging management module 140 may receive charging input from a wired charger via the USB interface 130. In some wireless charging embodiments, the charging management module 140 may receive a wireless charging input through a wireless charging coil of the first electronic device 100. The charging management module 140 may also supply power to the first electronic device 100 through the power management module 141 while charging the battery 142.
The power management module 141 is used to connect the battery 142, the charging management module 140 and the processor 110. The power management module 141 receives input from the battery 142 and/or the charge management module 140, and supplies power to the processor 110, the internal memory 121, the display 194, the camera 193, the wireless communication module 160, and the like. The power management module 141 may also be used to monitor parameters such as battery capacity, battery cycle count, battery state of health (leakage, impedance), etc. In other embodiments, the power management module 141 may be disposed in the processor 110. In other embodiments, the power management module 141 and the charging management module 140 may also be disposed in the same device.
The wireless communication function of the first electronic device 100 may be implemented by the antenna 1, the antenna 2, the mobile communication module 150, the wireless communication module 160, a modem processor, a baseband processor, and the like.
The antennas 1 and 2 are used for transmitting and receiving electromagnetic wave signals. Each antenna in the first electronic device 100 may be used to cover a single or multiple communication bands. Different antennas can also be multiplexed to improve the utilization of the antennas. For example: the antenna 1 may be multiplexed as a diversity antenna of a wireless local area network. In other embodiments, the antenna may be used in conjunction with a tuning switch.
The mobile communication module 150 may provide a solution including wireless communication of 2G/3G/4G/5G, etc. applied to the first electronic device 100. The mobile communication module 150 may include at least one filter, a switch, a power amplifier, a Low Noise Amplifier (LNA), and the like. The mobile communication module 150 may receive the electromagnetic wave from the antenna 1, filter, amplify, etc. the received electromagnetic wave, and transmit the electromagnetic wave to the modem processor for demodulation. The mobile communication module 150 may also amplify the signal modulated by the modem processor, and convert the signal into electromagnetic wave through the antenna 1 to radiate the electromagnetic wave. In some embodiments, at least some of the functional modules of the mobile communication module 150 may be disposed in the processor 110. In some embodiments, at least some of the functional modules of the mobile communication module 150 may be provided in the same device as at least some of the modules of the processor 110.
The modem processor may include a modulator and a demodulator. The modulator is used for modulating a low-frequency baseband signal to be transmitted into a medium-high frequency signal. The demodulator is used for demodulating the received electromagnetic wave signal into a low-frequency baseband signal. The demodulator then passes the demodulated low frequency baseband signal to a baseband processor for processing. The low frequency baseband signal is processed by the baseband processor and then transferred to the application processor. The application processor outputs a sound signal through an audio device (not limited to the speaker 170A, the receiver 170B, etc.) or displays an image or video through the display screen 194. In some embodiments, the modem processor may be a stand-alone device. In other embodiments, the modem processor may be provided in the same device as the mobile communication module 150 or other functional modules, independent of the processor 110.
The wireless communication module 160 may provide a solution for wireless communication applied to the first electronic device 100, including Wireless Local Area Networks (WLANs) (e.g., wireless fidelity (Wi-Fi) networks), bluetooth (bluetooth, BT), global Navigation Satellite System (GNSS), frequency Modulation (FM), near Field Communication (NFC), and/or Infrared (IR). The wireless communication module 160 may be one or more devices integrating at least one communication processing module. The wireless communication module 160 receives electromagnetic waves via the antenna 2, performs frequency modulation and filtering processing on electromagnetic wave signals, and transmits the processed signals to the processor 110. The wireless communication module 160 may also receive a signal to be transmitted from the processor 110, perform frequency modulation and amplification on the signal, and convert the signal into electromagnetic waves through the antenna 2 to radiate the electromagnetic waves.
In some embodiments, the antenna 1 of the first electronic device 100 is coupled to the mobile communication module 150 and the antenna 2 is coupled to the wireless communication module 160 so that the first electronic device 100 can communicate with networks and other devices through wireless communication technology. The wireless communication technology may include global system for mobile communications (GSM), general Packet Radio Service (GPRS), code division multiple access (code division multiple access, CDMA), wideband Code Division Multiple Access (WCDMA), time-division code division multiple access (time-division code division multiple access, TD-SCDMA), long Term Evolution (LTE), BT, GNSS, WLAN, NFC, FM, and/or IR technologies, etc. The GNSS may include a Global Positioning System (GPS), a global navigation satellite system (GLONASS), a beidou satellite navigation system (BDS), a quasi-zenith satellite system (QZSS), and/or a Satellite Based Augmentation System (SBAS).
The first electronic device 100 implements the display function through the GPU, the display screen 194, and the application processor. The GPU is a microprocessor for image processing, connected to the display screen 194 and the application processor. The GPU is used to perform mathematical and geometric calculations for graphics rendering. The processor 110 may include one or more GPUs that execute program instructions to generate or alter display information.
The display screen 194 is used to display images, video, and the like. The display screen 194 includes a display panel. The display panel may adopt a Liquid Crystal Display (LCD), an organic light-emitting diode (OLED), an active-matrix organic light-emitting diode (active-matrix organic light-emitting diode, AMOLED), a flexible light-emitting diode (FLED), a miniature, a Micro-oeld, a quantum dot light-emitting diode (QLED), and the like. In some embodiments, the first electronic device 100 may include 1 or N display screens 194, N being a positive integer greater than 1.
The first electronic device 100 may implement a photographing function through the ISP, the camera 193, the video codec, the GPU, the display screen 194, the application processor, and the like.
The ISP is used to process the data fed back by the camera 193. For example, when a photo is taken, the shutter is opened, light is transmitted to the camera photosensitive element through the lens, the optical signal is converted into an electrical signal, and the camera photosensitive element transmits the electrical signal to the ISP for processing and converting into an image visible to naked eyes. The ISP can also carry out algorithm optimization on noise, brightness and skin color of the image. The ISP can also optimize parameters such as exposure, color temperature and the like of a shooting scene. In some embodiments, the ISP may be provided in camera 193.
The camera 193 is used to capture still images or video. The object generates an optical image through the lens and projects the optical image to the photosensitive element. The photosensitive element may be a Charge Coupled Device (CCD) or a complementary metal-oxide-semiconductor (CMOS) phototransistor. The light sensing element converts the optical signal into an electrical signal, which is then passed to the ISP where it is converted into a digital image signal. And the ISP outputs the digital image signal to the DSP for processing. The DSP converts the digital image signal into image signal in standard RGB, YUV and other formats. In some embodiments, the first electronic device 100 may include 1 or N cameras 193, N being a positive integer greater than 1.
The digital signal processor is used for processing digital signals, and can process digital image signals and other digital signals. For example, when the first electronic device 100 selects a frequency bin, the digital signal processor is used to perform fourier transform or the like on the frequency bin energy.
Video codecs are used to compress or decompress digital video. The first electronic device 100 may support one or more video codecs. In this way, the first electronic device 100 can play or record video in a plurality of encoding formats, such as: moving Picture Experts Group (MPEG) 1, MPEG2, MPEG3, MPEG4, and the like.
The NPU is a neural-network (NN) computing processor that processes input information quickly by using a biological neural network structure, for example, by using a transfer mode between neurons of a human brain, and can also learn by itself continuously. Applications such as intelligent recognition of the first electronic device 100 can be implemented by the NPU, for example: image recognition, face recognition, speech recognition, text understanding, and the like.
The external memory interface 120 may be used to connect an external memory card, such as a Micro SD card, to extend the storage capability of the first electronic device 100. The external memory card communicates with the processor 110 through the external memory interface 120 to implement a data storage function. For example, files such as music, video, etc. are saved in the external memory card.
The internal memory 121 may be used to store computer-executable program code, which includes instructions. The internal memory 121 may include a program storage area and a data storage area. The storage program area may store an operating system, an application program (such as a sound playing function, an image playing function, etc.) required by at least one function, and the like. The storage data area may store data (such as audio data, a phone book, etc.) created during the use of the first electronic device 100, and the like. In addition, the internal memory 121 may include a high-speed random access memory, and may further include a nonvolatile memory, such as at least one magnetic disk storage device, a flash memory device, a universal flash memory (UFS), and the like. The processor 110 executes various functional applications and data processing of the first electronic device 100 by executing instructions stored in the internal memory 121 and/or instructions stored in a memory provided in the processor.
The first electronic device 100 can implement an audio function through the audio module 170, the speaker 170A, the receiver 170B, the microphone 170C, the earphone interface 170D, and the application processor. Such as music playing, recording, etc.
The audio module 170 is used to convert digital audio information into an analog audio signal output and also to convert an analog audio input into a digital audio signal. The audio module 170 may also be used to encode and decode audio signals. In some embodiments, the audio module 170 may be disposed in the processor 110, or some functional modules of the audio module 170 may be disposed in the processor 110.
The speaker 170A, also called a "horn", is used to convert the audio electrical signal into an acoustic signal. The first electronic device 100 can listen to music through the speaker 170A or listen to a hands-free call.
The receiver 170B, also called "earpiece", is used to convert the electrical audio signal into an acoustic signal. When the first electronic device 100 receives a call or voice information, it can receive voice by placing the receiver 170B close to the ear of the person.
The microphone 170C, also referred to as a "microphone," is used to convert sound signals into electrical signals. When making a call or transmitting voice information, the user can input a voice signal to the microphone 170C by speaking near the microphone 170C through the mouth. The first electronic device 100 may be provided with at least one microphone 170C. In other embodiments, the first electronic device 100 may be provided with two microphones 170C to achieve a noise reduction function in addition to collecting sound signals. In other embodiments, the first electronic device 100 may further include three, four or more microphones 170C to collect sound signals, reduce noise, identify sound sources, implement directional recording functions, and so on.
The earphone interface 170D is used to connect a wired earphone. The headset interface 170D may be the USB interface 130, or may be a 3.5mm open mobile electronic device platform (OMTP) standard interface, a cellular telecommunications industry association (cellular telecommunications industry association) standard interface of the USA.
The pressure sensor 180A is used for sensing a pressure signal, and can convert the pressure signal into an electrical signal. In some embodiments, the pressure sensor 180A may be disposed on the display screen 194. The pressure sensor 180A can be of a variety of types, such as a resistive pressure sensor, an inductive pressure sensor, a capacitive pressure sensor, and the like. The capacitive pressure sensor may be a sensor comprising at least two parallel plates having an electrically conductive material. When a force acts on the pressure sensor 180A, the capacitance between the electrodes changes. The first electronic device 100 determines the intensity of the pressure from the change in capacitance. When a touch operation is applied to the display screen 194, the first electronic device 100 detects the intensity of the touch operation according to the pressure sensor 180A. The first electronic device 100 may also calculate the touched position from the detection signal of the pressure sensor 180A. In some embodiments, the touch operations that are applied to the same touch position but have different touch operation intensities may correspond to different operation instructions. For example: and when the touch operation with the touch operation intensity smaller than the first pressure threshold value acts on the short message application icon, executing an instruction for viewing the short message. And when the touch operation with the touch operation intensity larger than or equal to the first pressure threshold value acts on the short message application icon, executing an instruction of newly building the short message.
The gyro sensor 180B may be used to determine the motion attitude of the first electronic device 100. In some embodiments, the angular velocity of the first electronic device 100 about three axes (i.e., x, y, and z axes) may be determined by the gyroscope sensor 180B. The gyro sensor 180B may be used for photographing anti-shake. Illustratively, when the shutter is pressed, the gyro sensor 180B detects a shake angle of the first electronic device 100, calculates a distance to be compensated for the lens module according to the shake angle, and allows the lens to counteract the shake of the first electronic device 100 through a reverse motion, thereby achieving anti-shake. The gyroscope sensor 180B may also be used for navigation, somatosensory gaming scenes.
The air pressure sensor 180C is used to measure air pressure. In some embodiments, the first electronic device 100 calculates altitude from the barometric pressure measured by the barometric pressure sensor 180C to assist in positioning and navigation.
The magnetic sensor 180D includes a hall sensor. The first electronic device 100 may detect the opening and closing of the flip holster using the magnetic sensor 180D. In some embodiments, when the first electronic device 100 is a flip, the first electronic device 100 may detect the opening and closing of the flip according to the magnetic sensor 180D. And then according to the opening and closing state of the leather sheath or the opening and closing state of the flip cover, the automatic unlocking of the flip cover is set.
The acceleration sensor 180E may detect the magnitude of acceleration of the first electronic device 100 in various directions (typically three axes). The magnitude and direction of gravity can be detected when the first electronic device 100 is stationary. The method can also be used for recognizing the posture of the electronic equipment, and is applied to horizontal and vertical screen switching, pedometers and other applications.
A distance sensor 180F for measuring a distance. The first electronic device 100 may measure the distance by infrared or laser. In some embodiments, shooting a scene, the first electronic device 100 may utilize the distance sensor 180F to range to achieve fast focus.
The proximity light sensor 180G may include, for example, a Light Emitting Diode (LED) and a light detector, such as a photodiode. The light emitting diode may be an infrared light emitting diode. The first electronic device 100 emits infrared light to the outside through the light emitting diode. The first electronic device 100 detects infrared reflected light from a nearby object using a photodiode. When sufficient reflected light is detected, it can be determined that there is an object near the first electronic device 100. When insufficient reflected light is detected, the first electronic device 100 may determine that there is no object near the first electronic device 100. The first electronic device 100 can utilize the proximity sensor 180G to detect that the user holds the first electronic device 100 and speaks near the ear, so as to automatically turn off the screen to achieve the purpose of saving power. The proximity light sensor 180G may also be used in a holster mode, a pocket mode automatically unlocks and locks the screen.
The ambient light sensor 180L is used to sense the ambient light level. The first electronic device 100 may adaptively adjust the brightness of the display screen 194 according to the perceived ambient light level. The ambient light sensor 180L may also be used to automatically adjust the white balance when taking a picture. The ambient light sensor 180L may also cooperate with the proximity light sensor 180G to detect whether the first electronic device 100 is in a pocket, so as to prevent accidental touch.
The fingerprint sensor 180H is used to collect a fingerprint. The first electronic device 100 can utilize the collected fingerprint characteristics to unlock the fingerprint, access the application lock, photograph the fingerprint, answer an incoming call with the fingerprint, and the like.
The temperature sensor 180J is used to detect temperature. In some embodiments, the first electronic device 100 executes a temperature processing strategy using the temperature detected by the temperature sensor 180J. For example, when the temperature reported by the temperature sensor 180J exceeds a threshold, the first electronic device 100 performs a performance reduction on a processor located near the temperature sensor 180J, so as to reduce power consumption and implement thermal protection. In other embodiments, when the temperature is lower than another threshold, the first electronic device 100 heats the battery 142 to avoid the abnormal shutdown of the first electronic device 100 caused by the low temperature. In other embodiments, when the temperature is lower than a further threshold, the first electronic device 100 performs boosting on the output voltage of the battery 142 to avoid abnormal shutdown due to low temperature.
The touch sensor 180K is also called a "touch device". The touch sensor 180K may be disposed on the display screen 194, and the touch sensor 180K and the display screen 194 form a touch screen, which is also called a "touch screen". The touch sensor 180K is used to detect a touch operation applied thereto or nearby. The touch sensor can communicate the detected touch operation to the application processor to determine the touch event type. Visual output associated with the touch operation may be provided via the display screen 194. In other embodiments, the touch sensor 180K may be disposed on a surface of the first electronic device 100, different from the position of the display screen 194.
The bone conduction sensor 180M can acquire a vibration signal. In some embodiments, the bone conduction sensor 180M may acquire a vibration signal of the human voice vibrating a bone mass. The bone conduction sensor 180M may also contact the human pulse to receive the blood pressure pulsation signal. In some embodiments, the bone conduction sensor 180M may also be disposed in a headset, integrated into a bone conduction headset. The audio module 170 may analyze a voice signal based on the vibration signal of the bone mass vibrated by the sound part acquired by the bone conduction sensor 180M, so as to implement a voice function. The application processor can analyze heart rate information based on the blood pressure beating signal acquired by the bone conduction sensor 180M, so as to realize the heart rate detection function.
The keys 190 include a power-on key, a volume key, and the like. The keys 190 may be mechanical keys. Or may be touch keys. The first electronic device 100 may receive a key input, and generate a key signal input related to user setting and function control of the first electronic device 100.
The motor 191 may generate a vibration cue. The motor 191 may be used for incoming call vibration cues, as well as for touch vibration feedback. For example, touch operations applied to different applications (e.g., photographing, audio playing, etc.) may correspond to different vibration feedback effects. The motor 191 may also respond to different vibration feedback effects for touch operations applied to different areas of the display screen 194. Different application scenes (such as time reminding, receiving information, alarm clock, game and the like) can also correspond to different vibration feedback effects. The touch vibration feedback effect may also support customization.
Indicator 192 may be an indicator light that may be used to indicate a state of charge, a change in charge, or a message, missed call, notification, etc.
The SIM card interface 195 is used to connect a SIM card. The SIM card can be brought into and out of contact with the first electronic device 100 by being inserted into the SIM card interface 195 or being pulled out of the SIM card interface 195. The first electronic device 100 may support 1 or N SIM card interfaces, where N is a positive integer greater than 1. The SIM card interface 195 may support a Nano SIM card, a Micro SIM card, a SIM card, etc. The same SIM card interface 195 can be inserted with multiple cards at the same time. The types of the plurality of cards may be the same or different. The SIM card interface 195 may also be compatible with different types of SIM cards. The SIM card interface 195 may also be compatible with external memory cards. The first electronic device 100 interacts with the network through the SIM card to implement functions such as a call and data communication. In some embodiments, the first electronic device 100 employs esims, namely: an embedded SIM card. The eSIM card may be embedded in the first electronic device 100 and cannot be separated from the first electronic device 100.
The software structure of the first electronic device 100 may be as shown in fig. 3, where fig. 3 is a schematic diagram of the software structure of the first electronic device 100 according to an embodiment of the present disclosure, the first electronic device 100 may be device a in fig. 3, referring to the software structure of device a in fig. 3, and the software structure of the first electronic device 100 may include an application (e.g., application a), an actual function interface, a function driver, an authority control framework module, a TEE environment, and the like.
For convenience of understanding, in the following embodiments of the present application, an electronic device having a structure shown in fig. 2 and fig. 3 is taken as an example, and with reference to the accompanying drawings and application scenarios, a method for negotiating an authority in a communication process provided in the embodiments of the present application is specifically described.
Fig. 4 is a flowchart of an authority negotiation method in a communication process according to an embodiment of the present application, and as shown in fig. 4, the authority negotiation method may include:
in step 401, the first electronic device 100 presents an interface of a currently running communication application.
Specifically, the first electronic device 100 may implement the operation of step 401 through the GPU, the display screen 194, the application processor, and the like.
Specifically, the first operation may include: as shown in fig. 5, the display interface of the currently running communication application includes a "security mode" icon, fig. 5 is a schematic view of the display interface of the currently running communication application provided in an embodiment of the present application, and a user may click, double-click, or long-press the "security mode" icon, or a user may perform other types of triggering operations on the "security mode" icon, so as to start a security communication mode.
Alternatively, the first operation may be another form of operation, such as: in the display interface of the currently running communication application, the user presses the user identification (such as a user name) of the second electronic equipment for a long time to select a safe communication mode in a pop-up menu; or, in a display interface of the currently running communication application, detecting that the time for pressing a mechanical key (for example, a switch key and/or a volume key) by a user reaches a preset time, wherein the preset time can be set by the user when the preset time is specifically realized; the present embodiment does not limit the specific operation form of the first operation.
In the following description of the embodiments of the present application, the first operation is taken as an example for the user to click the "security mode" icon.
Further, after the user performs the first operation, the user may set an authority item that the user wishes to be restricted from using during communication between the first electronic device 100 and the second electronic device, and then the first electronic device 100 may acquire the authority item that the user is restricted from using during communication between the first electronic device 100 and the second electronic device. As shown in fig. 6, fig. 6 is a schematic diagram of acquiring a restricted-use permission item according to an embodiment of the present application, and as can be seen from fig. 6, the restricted-use permission item includes: recording and recording are prohibited.
Specifically, the first electronic device 100 may implement the function of detecting the first operation in step 402 through the processor 110, the display screen 194 and the touch sensor 180K, and acquire the restricted-use permission item through the processor 110.
In step 403, the first electronic device 100 sends a first request to the second electronic device, where the first request includes a restricted-use permission item.
Referring to fig. 6, after the user sets the right item desired to be restricted from being used, the first electronic device 100 may send a first request to the second electronic device in response to the user clicking the "send" icon.
Specifically, an interface for sending the first request to the second electronic device may be added to a communication protocol stack in the right control framework module in fig. 3, and the sending of the first request is implemented by a local communication protocol.
Taking the limited-use authority in the communication as the screen recording prohibition example, the following functions need to be shielded:
android.permission.WRITE_EXTERNAL_STORAGE;
android.permission.READ_EXTERNAL_STORAGE;
android.permission.RECORD_AUDIO;
at this time, the following data may be carried in the first request: "WRITE _ exterior _ STORAGE; READ _ exterior _ STORAGE; RECORD _ AUDIO ".
In a specific implementation, the first electronic device 100 may implement the operation of step 403 through the processor 110, the antenna 1 and the mobile communication module 150, and/or through the processor 110, the antenna 2 and the wireless communication module 160.
In step 404, the first electronic device 100 receives the confirmation information of the second electronic device for the restricted-use right item.
In a specific implementation, the first electronic device 100 may implement the operation of step 404 through the processor 110, the antenna 1 and the mobile communication module 150, and/or through the processor 110, the antenna 2 and the wireless communication module 160.
In step 405, the first electronic device 100 restricts the application of the locally installed application to the restricted-use right item according to the confirmation information.
Specifically, after the communication protocol stack in the right control framework module in fig. 3 receives the confirmation information of the second electronic device for the restricted-use right item, the right application arbitration module in the right control framework module may be notified to restrict the application of the locally installed application to the restricted-use right item according to the confirmation information.
In a specific implementation, the first electronic device 100 may limit, according to the confirmation information, the application of the locally installed application to the restricted-use permission item by: and acquiring the authority item confirmed by the second electronic equipment in the limited-use authority items according to the confirmation information, and then limiting the application of the locally-installed application to the authority item confirmed by the second electronic equipment.
Referring to fig. 3, after receiving the notification of the communication protocol, the permission application arbitration module obtains the permission item confirmed by the second electronic device in the permission items restricted from being used according to the confirmation information, and in order to prevent the currently running communication application itself and other background applications from performing operations illegally in the communication process between the first electronic device 100 and the second electronic device, the permission application arbitration module may reject the application of the locally installed application to the permission item confirmed by the second electronic device, and mainly modify the application in the permission management service, for example: apk or similar service management module, may dynamically close the permission item confirmed by the second electronic device in the first electronic device 100.
In particular implementations, the first electronic device 100 may implement the operation of step 405 by the processor 110.
In step 406, after the first electronic device 100 ends the communication with the second electronic device, the first electronic device 100 restores the setting of the permission item of the locally installed application to the setting before the first electronic device 100 communicates with the second electronic device.
Specifically, when the two communication parties hang up the phone call or the communication cannot be continued due to other reasons, the current permission agreement is no longer valid, and after the permission application arbitration module in the electronic device used by the two communication parties obtains the closing information of the currently running communication application and/or the notification information of the communication protocol stack, the setting of the permission item of the locally installed application can be restored to the setting before the first electronic device communicates with the second electronic device.
In particular implementations, the first electronic device 100 may implement the operation of step 406 through the processor 110.
In the method for negotiating permissions in a communication process, a first electronic device 100 displays an interface of a currently running communication application, and after a first operation of a user is detected, a permission item restricted from being used in the communication process between the first electronic device 100 and a second electronic device is acquired in response to the first operation; then, the first electronic device 100 sends a first request to the second electronic device, where the first request includes a restricted-use right item, receives confirmation information of the second electronic device for the restricted-use right item, and restricts an application of a locally installed application to the restricted-use right item according to the confirmation information; finally, after the first electronic device 100 ends communication with the second electronic device, the setting of the authority item of the locally installed application is restored to the setting before the first electronic device 100 communicated with the second electronic device. Therefore, the permission items which are limited to be used in the communication process can be negotiated before or during the communication between two communication parties, and after the communication is finished, the setting of the permission items can be restored to the permission setting before the communication, normal use of the electronic equipment at ordinary times is not influenced, and hardware investment is not needed.
Fig. 7 is a flowchart of an authority negotiation method in a communication process according to another embodiment of the present application, as shown in fig. 7, in the embodiment shown in fig. 4 of the present application, after step 404, the method may further include:
in step 701, the first electronic device 100 establishes a call connection with the second electronic device, where the call connection includes a video call connection or a voice call connection.
That is, the user may send the first request to the second electronic device before establishing a call connection with the second electronic device, and after receiving the confirmation information of the second electronic device for the restricted-use permission item, the first electronic device 100 may establish a call connection with the second electronic device.
In a specific implementation, the first electronic device 100 may implement the operation of step 701 through the processor 110, the antenna 1 and the mobile communication module 150, and/or through the processor 110, the antenna 2 and the wireless communication module 160.
Fig. 8 is a flowchart of an authority negotiation method in a communication process according to still another embodiment of the present application, as shown in fig. 8, in the embodiment shown in fig. 4 of the present application, after step 401 and before step 402, the method may further include:
in step 801, the first electronic device 100 sends a call request to the second electronic device.
That is, the first electronic device 100 may first establish a call connection with the second electronic device, and then send the first request to the second electronic device.
In a specific implementation, the first electronic device 100 may implement the operation of step 801 through the processor 110, the antenna 1 and the mobile communication module 150, and/or through the processor 110, the antenna 2 and the wireless communication module 160.
In the embodiment shown in fig. 7 and 8 of the present application, after a first electronic device 100 establishes a call connection with a second electronic device, if a right item confirmed by the second electronic device includes all right items in the right items restricted from being used, a prompt message indicating that the call connection is a secure call connection is displayed; and if the authority item confirmed by the second electronic equipment is empty or the authority item confirmed by the second electronic equipment comprises part of the authority items in the restricted use authority items, displaying the prompt message that the call connection is the non-secure call connection.
Specifically, the first electronic device 100 may prompt, in a text form, that the call connection is a secure call connection or a non-secure call connection in a display interface of the currently running communication application, or may also display an icon in the display interface of the currently running communication application, and prompt, through different colors of the icon, that the call connection is a secure call connection or a non-secure call connection, where the present embodiment does not limit a manner in which the first electronic device 100 displays the prompt information.
In a specific implementation, the first electronic device 100 may implement the operation of presenting the prompt message through the process 110 and the display screen 194.
Fig. 9 is a flowchart of an authority negotiation method in a communication process according to another embodiment of the present application, as shown in fig. 9, in the embodiment shown in fig. 4 of the present application, step 403 may be:
in step 901, the first electronic device 100 sends a data packet carrying the first request to the second electronic device, where the data packet includes an identifier of the restricted-use right item.
The identifier of the restricted-use authority item may be a name of the restricted-use authority item, or the identifier of the restricted-use authority item may also be other types of information as long as it can indicate the restricted-use authority item, and the identifier of the restricted-use authority item is not limited in this embodiment.
Taking the name of the restricted-use permission item carried in the data packet carrying the first request as an example, if the restricted-use permission item in the current communication is recording prohibition, the data packet may carry "android.
Specifically, the first electronic device 100 may send a data packet carrying the first request to the second electronic device through a User Datagram Protocol (UDP), as shown in fig. 10, where fig. 10 is an implementation schematic diagram of a communication layer provided in an embodiment of the present application. In fig. 10, a real-time streaming protocol (RTSP) is used to initiate/terminate streaming media, a real-time transport protocol (RTP) is used to transport streaming media data, a real-time transport control protocol (RTCP) is used to control and synchronize the RTP, and the UDP provides a method for an application program to send a data packet without establishing a connection. Among them, RTSP belongs to the application layer, and RTP, RTCP, and UDP belong to the transport layer.
Of course, the first electronic device 100 may also send the packet carrying the first request to the second electronic device through another communication protocol, but the communication protocol used by the first electronic device 100 is not limited in this embodiment, and the first electronic device 100 sends the packet carrying the first request to the second electronic device through UDP in this embodiment is taken as an example for description.
In a specific implementation, the first electronic device 100 may implement the operation of step 901 through the processor 110, the antenna 1 and the mobile communication module 150, and/or through the processor 110, the antenna 2 and the wireless communication module 160.
In this embodiment, the data packet may include one or a combination of the following fields: a data packet header field, a type field, a subtype field and an information embedding field; specifically, when the value of the type field is a first preset value and the value of the subtype field is a second preset value, the data packet is a data packet carrying the first request, and the data carried by the information embedding field is the first request; the first preset value and the second preset value may be set by themselves when the first preset value and the second preset value are implemented specifically, and the first preset value and the second preset value are not limited in this embodiment.
Taking UDP as an example, a format of a data packet may be as shown in fig. 11, where fig. 11 is a schematic diagram of a format of a data packet provided in an embodiment of the present application, and in fig. 11, a UDP header is a header field, a Type field, a Subtype field, and a controlpacket message are information embedding fields, and in addition, the data packet may further include a Payload (Payload) field.
Specifically, the Type field describes the data content Type of the data packet transmission, different values of the Type field represent different data service types, for example, the values of the Type field and the represented data service types may be as follows: 1: audio RTP;2: audio RTCP;3: video RTP;4: video RTCP;5: remote authentication protocol for rights (RemoteAuthProtocol);
the Subtype field describes specific functional actions of each data service type, for example: request or response, etc., for example, the value of the Subtype field and the corresponding function action may be as follows: 1: initial request (InitReq); 2: initial response (InitRes); 3: initRRes;4: authentication request (AuthReq); 5: authentication response (AuthRes);
the information embedding (ControlPanelMessage) field carries data to be actually transmitted, and in this embodiment, the data carried by the information embedding (ControlPanelMessage) field includes an identifier of a restricted-use permission item.
Thus, in this example, when the first preset value is 5 and the second preset value is 4, the data packet is a data packet carrying the first request, and the data carried by the information embedding field is the first request.
Fig. 12 is a flowchart of an authority negotiation method in a communication process according to yet another embodiment of the present application, as shown in fig. 12, in the embodiment shown in fig. 9 of the present application, step 901 may include:
in step 1201, the first electronic device 100 adds a random number to the data carried by the information embedding field, and encrypts the data to which the random number is added with a key in the trusted execution environment.
Wherein, the data carried by the information embedding field comprises the identification of the restricted-use authority item.
Specifically, the first electronic device 100 may encrypt the data to which the random number is added by using a private key in a secret key of the TEE, where the random number is added to prevent the data carried in the information embedding field from being illegally embedded after being retained by a person. The random numbers are different in each communication, and uniqueness can be guaranteed.
In a specific implementation, the first electronic device 100 may implement the operations of steps 1201 and 1202 through the processor 110; the operation of step 1203 is implemented by processor 110, antenna 1 and mobile communication module 150, and/or by processor 110, antenna 2 and wireless communication module 160.
Fig. 13 is a flowchart of an authority negotiation method in a communication process according to yet another embodiment of the present application, as shown in fig. 13, in the embodiment shown in fig. 4 of the present application, step 402 may be:
Specifically, in an implementation manner, after performing the first operation, the user may set a security protection level, and the first electronic device 100 obtains the restricted-use permission item corresponding to the security protection level according to the security protection level set by the user, as shown in fig. 14, where fig. 14 is a schematic view of an interface for setting the security protection level provided in an embodiment of the present application. As can be seen from fig. 14, the security protection level includes two levels, respectively: the system comprises a high-level protection and a low-level protection, wherein the permission items which are limited to be used and correspond to the high-level protection comprise screen capture inhibition, recording inhibition and storage inhibition; and the restricted-use rights item corresponding to the low-level guard includes a prohibited save.
In another implementation manner, after the first operation is performed, the user may directly set the restricted-use permission item, and the first electronic device 100 obtains the restricted-use permission item set by the user. As shown in fig. 15, fig. 15 is a schematic diagram of an interface for setting a restricted-use right item according to an embodiment of the present application. The interface shown in fig. 15 includes the permission items for prohibiting screen capture, prohibiting audio recording, and prohibiting saving of the restricted use in these 3, and the user can select the restricted use permission item in the interface.
Fig. 16 is a flowchart of an authority negotiation method in a communication process according to still another embodiment of the present application, and as shown in fig. 16, the authority negotiation method may include:
in step 1601, user A sends a call request to a second electronic device used by user B via a communication application in a first electronic device 100 used by user A.
In step 1602, the first electronic device 100 establishes a call connection with a second electronic device according to the call request, where the call connection includes a video call connection or a voice call connection.
At step 1603, the user a thinks that confidential matters are to be discussed with the user B, and therefore clicks the "secure mode" icon in fig. 5, and the first electronic device 100 detects that the user a initiates the first operation of the secure communication mode.
In step 1604, the first electronic device 100 shows the interface shown in fig. 14 or fig. 15 to the user a in response to the first operation, and after the user a finishes setting, the first electronic device 100 obtains the restricted-use right item.
In step 1605, the first electronic device 100 sends a first request to the second electronic device, where the first request includes the restricted-use right item.
In step 1606, after the second electronic device receives the first request, the user B clicks the confirm or accept button, and the second electronic device returns the confirmation information corresponding to the restricted-use permission item to the first electronic device 100.
Step 1607, after receiving the confirmation information of the second electronic device, the first electronic device 100 obtains the right item confirmed by the second electronic device from the limited right items according to the confirmation information, and if the right item confirmed by the second electronic device includes all right items from the limited right items, the prompt information is displayed in the display interface of the currently running communication application, and the prompt information is used for prompting the user a that the call connection is a secure call connection.
Step 1608, the first electronic device 100 and the second electronic device restrict the application of the locally installed application to the right item confirmed by the second electronic device according to the right item confirmed by the second electronic device.
Step 1609, after the communication is ended, the first electronic device 100 and the second electronic device restore the setting of the right item of the locally installed application to the setting before the first electronic device 100 communicates with the second electronic device.
According to the method for negotiating the permission in the communication process provided by the embodiment of the application, before the first electronic device 100 establishes the communication connection with the second electronic device or during the communication process, the permission item restricted to be used can be negotiated based on the communication protocol, after the negotiation is successful, the permission application arbitration module in fig. 3 is started, the functions of recording and/or screen recording of the first electronic device 100 are temporarily restricted, and after the communication is finished, the setting of the permission item of the locally installed application can be recovered to the setting before the communication, the normal use of the first electronic device 100 at ordinary times is not affected, the hardware investment is not required, and the user can realize the functions with the minimum cost.
It is to be understood that some or all of the steps or operations in the above-described embodiments are merely examples, and other operations or variations of various operations may be performed by the embodiments of the present application. Further, the various steps may be performed in a different order presented in the above-described embodiments, and it is possible that not all of the operations in the above-described embodiments are performed.
It will be appreciated that the electronic device, in order to implement the above-described functions, comprises corresponding hardware and/or software modules for performing the respective functions. The exemplary algorithm steps described in connection with the embodiments disclosed herein may be embodied in hardware or a combination of hardware and computer software. Whether a function is performed as hardware or computer software drives hardware depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, with the embodiment described in connection with the particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
In this embodiment, the electronic device may be divided into functional modules according to the method embodiments, for example, each functional module may be divided corresponding to each function, or two or more functions may be integrated into one module. The integrated module may be implemented in the form of hardware. It should be noted that the division of the modules in this embodiment is schematic, and is only a logic function division, and there may be another division manner in actual implementation.
Fig. 17 is a schematic structural diagram of a first electronic device according to another embodiment of the present application, where each functional module is divided according to a corresponding function, fig. 17 shows a schematic possible composition diagram of the first electronic device 1700 involved in the foregoing embodiment, and as shown in fig. 17, the first electronic device 1700 may include: a reception unit 1701, a processing unit 1702, and a transmission unit 1703;
the receiving unit 1701 may be configured to support the first electronic device 1700 to perform step 404, step 701, step 802, and/or other processes of the technical solutions described in the embodiments of the present application;
the sending unit 1703 may be configured to support the first electronic device 1700 to perform step 403, step 701, step 801, step 802, step 901, step 1203, and the like, and/or other processes used in the technical solutions described in the embodiments of the present application.
It should be noted that all relevant contents of each step related to the above method embodiment may be referred to the functional description of the corresponding functional module, and are not described herein again.
The first electronic device 1700 provided in this embodiment is configured to execute the method for negotiating permissions in the communication process, and therefore can achieve the same effect as the method described above.
It should be understood that the first electronic device 1700 may correspond to the first electronic device 100 shown in fig. 1. The functions of the receiving unit 1701 and the transmitting unit 1703 may be implemented by the processor 110, the antenna 1, and the mobile communication module 150 in the first electronic device 100 shown in fig. 1, and/or by the processor 110, the antenna 2, and the wireless communication module 160; the functions of the processing unit 1702 may be implemented by the processor 110, the display screen 194 and/or the touch sensor 180K in the first electronic device 100 shown in fig. 1.
Where an integrated unit is employed, the first electronic device 1700 may include a processing module, a memory module, and a communication module.
The processing module may be configured to control and manage the actions of the first electronic device 1700, for example, may be configured to support the first electronic device 1700 to execute the steps executed by the receiving unit 1701, the processing unit 1702, and the sending unit 1703. The memory module may be used to support the first electronic device 1700 in storing program codes and data, etc. A communication module that may be used to support communication of the first electronic device 1700 with other devices.
Among other things, a processing module can be a processor or controller that can implement or execute the various illustrative logical blocks, modules, and circuits described in connection with the present disclosure. A processor may also be a combination of computing functions, e.g., a combination of one or more microprocessors, a Digital Signal Processing (DSP) and a microprocessor, or the like. The storage module may be a memory. The communication module may specifically be a radio frequency circuit, a bluetooth chip and/or a Wi-Fi chip, and the like, which interact with other electronic devices.
In an embodiment, when the processing module is a processor and the storage module is a memory, the first electronic device 1700 according to the embodiment may be a device having the structure shown in fig. 1.
Embodiments of the present application further provide a computer-readable storage medium, in which a computer program is stored, and when the computer program runs on a computer, the computer is enabled to execute the method provided by the embodiments shown in fig. 4 to 16 of the present application.
Embodiments of the present application also provide a computer program product, which includes a computer program, when the computer program runs on a computer, causing the computer to execute the method provided by the embodiments shown in fig. 4 to 16 of the present application.
In the embodiments of the present application, "at least one" means one or more, and "a plurality" means two or more. "and/or" describes the association relationship of the associated objects, and means that there may be three relationships, for example, a and/or B, and may mean that a exists alone, a and B exist simultaneously, and B exists alone. Wherein A and B can be singular or plural. The character "/" generally indicates that the former and latter associated objects are in an "or" relationship. "at least one of the following" and the like, refer to any combination of these items, including any combination of singular or plural items. For example, at least one of a, b, and c may represent: a, b, c, a and b, a and c, b and c or a and b and c, wherein a, b and c can be single or multiple.
Those of ordinary skill in the art will appreciate that the various elements and algorithm steps described in connection with the embodiments disclosed herein can be implemented as electronic hardware, computer software, or combinations of electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present application.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the several embodiments provided in the present application, any function, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application or portions thereof that substantially contribute to the prior art may be embodied in the form of a software product, which is stored in a storage medium and includes several instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the methods described in the embodiments of the present application. And the aforementioned storage medium includes: a U-disk, a portable hard disk, a read-only memory (ROM), a Random Access Memory (RAM), a magnetic disk, an optical disk, or other various media capable of storing program codes.
The above description is only for the specific embodiments of the present application, and any person skilled in the art can easily conceive of the changes or substitutions within the technical scope of the present disclosure, and all the changes or substitutions should be covered by the protection scope of the present application. The protection scope of the present application shall be subject to the protection scope of the claims.
Claims (18)
1. A method for negotiating authority in communication process is applied to electronic equipment, and the method comprises the following steps:
the method comprises the steps that a first electronic device displays an interface of a currently running communication application;
after a first operation of a user is detected, in response to the first operation, acquiring an authority item which is limited to be used in the communication process of the first electronic device and the second electronic device;
sending a first request to a second electronic device, wherein the first request comprises the restricted-use permission item;
receiving confirmation information of the second electronic equipment for the limited-use permission item;
according to the confirmation information, the application of the locally installed application to the restricted use authority item is restricted;
after the first electronic device and the second electronic device are communicated, restoring the setting of the permission item of the locally installed application to the setting before the first electronic device and the second electronic device are communicated;
wherein, the application of the permission item for limiting the use of the locally installed application according to the confirmation information comprises the following steps:
acquiring the authority items confirmed by the second electronic equipment in the restricted use authority items according to the confirmation information;
and limiting the application of the locally installed application to the authority item confirmed by the second electronic equipment.
2. The method according to claim 1, wherein after receiving the confirmation information of the second electronic device for the restricted-use right item, the method further comprises:
and establishing a call connection with the second electronic equipment, wherein the call connection comprises a video call connection or a voice call connection.
3. The method of claim 1, wherein after the first electronic device presents the interface of the currently running communication application and before the first operation of the user is detected, further comprising:
sending a call request to the second electronic equipment;
and establishing call connection with the second electronic equipment according to the call request, wherein the call connection comprises video call connection or voice call connection.
4. The method according to claim 2 or 3, wherein after the establishing the call connection with the second electronic device, further comprising:
if the permission items confirmed by the second electronic equipment comprise all permission items in the permission items limited to be used, displaying prompt information that the call connection is safe call connection;
and if the permission item confirmed by the second electronic equipment is empty or the permission item confirmed by the second electronic equipment comprises part of permission items in the permission items restricted from being used, displaying prompt information that the call connection is non-secure call connection.
5. The method according to any one of claims 1-3, wherein the sending a first request to a second electronic device, the first request including the restricted-use permission item, comprises:
and sending a data packet carrying the first request to a second electronic device, wherein the data packet comprises the identifier of the restricted-use permission item.
6. The method of claim 5, wherein the data packet comprises one or a combination of the following fields: a data packet header field, a type field, a subtype field and an information embedding field;
and when the value of the type field is a first preset value and the value of the subtype field is a second preset value, the data packet is a data packet carrying the first request, and the data carried by the information embedding field is the first request.
7. The method of claim 6, wherein sending the data packet carrying the first request to the second electronic device comprises:
adding a random number in the data carried by the information embedding field, and encrypting the data added with the random number by using a secret key in a trusted execution environment;
packaging the encrypted data in a data packet;
and sending the data packet to a second electronic device.
8. The method according to any one of claims 1 to 3, wherein the acquiring the permission item restricted from being used in the communication process between the first electronic device and the second electronic device comprises:
according to the security protection level set by the user, acquiring an access item which is restricted to be used and corresponds to the security protection level; or,
and acquiring the limited use authority item set by the user.
9. An apparatus for negotiating authority during communication, provided in a first electronic device, the apparatus comprising:
the processing unit is used for displaying an interface of the currently running communication application; after the first operation of the user is detected, in response to the first operation, acquiring an authority item which is limited to be used in the communication process of the first electronic device and the second electronic device;
a sending unit, configured to send a first request to a second electronic device, where the first request includes the restricted-use permission item;
a receiving unit, configured to receive confirmation information of the second electronic device for the restricted-use permission item;
the processing unit is further used for limiting the application of the locally installed application to the limited-use authority item according to the confirmation information; after the first electronic device and the second electronic device are communicated, restoring the setting of the authority item of the locally installed application to the setting before the first electronic device and the second electronic device are communicated;
the processing unit is specifically configured to acquire, according to the confirmation information, an authority item confirmed by the second electronic device in the authority items restricted from being used, and restrict an application of a locally installed application to the authority item confirmed by the second electronic device.
10. A first electronic device, comprising:
one or more processors; a memory; a plurality of application programs; and one or more computer programs, wherein the one or more computer programs are stored in the memory, the one or more computer programs comprising instructions which, when executed by the first electronic device, cause the first electronic device to perform the steps of:
displaying an interface of a currently running communication application;
after a first operation of a user is detected, in response to the first operation, acquiring an authority item which is limited to be used in the communication process of the first electronic device and the second electronic device;
sending a first request to a second electronic device, wherein the first request comprises the restricted-use permission item;
receiving confirmation information of the second electronic equipment for the limited-use permission item;
according to the confirmation information, the application of the locally installed application to the restricted use authority item is restricted;
after the first electronic device and the second electronic device are communicated, restoring the setting of the permission item of the locally installed application to the setting before the first electronic device and the second electronic device are communicated;
wherein, when the instruction is executed by the first electronic device, the step of causing the first electronic device to execute the application of the locally installed application to the restricted-use permission item according to the confirmation information includes:
acquiring the authority items confirmed by the second electronic equipment in the restricted use authority items according to the confirmation information;
and limiting the application of the locally installed application to the authority item confirmed by the second electronic equipment.
11. The first electronic device of claim 10, wherein the instructions, when executed by the first electronic device, cause the first electronic device to perform the following steps after the step of receiving confirmation information of the second electronic device about the restricted-use right item:
and establishing a call connection with the second electronic equipment, wherein the call connection comprises a video call connection or a voice call connection.
12. The first electronic device of claim 10, wherein the instructions, when executed by the first electronic device, cause the first electronic device to, after the step of presenting the interface of the currently running communication application and before the step of detecting the first operation by the user, further perform the steps of:
sending a call request to a second electronic device;
and establishing call connection with the second electronic equipment according to the call request, wherein the call connection comprises video call connection or voice call connection.
13. The first electronic device of claim 11 or 12, wherein the instructions, when executed by the first electronic device, cause the first electronic device to perform the step of establishing a call connection with the second electronic device, further comprising:
if the permission items confirmed by the second electronic equipment comprise all permission items in the permission items limited to be used, displaying prompt information that the call connection is safe call connection;
and if the permission item confirmed by the second electronic equipment is empty or the permission item confirmed by the second electronic equipment comprises part of permission items in the permission items restricted from being used, displaying prompt information that the call connection is non-secure call connection.
14. The first electronic device of any of claims 10-12, wherein the instructions, when executed by the first electronic device, cause the first electronic device to perform the sending of the first request to the second electronic device, wherein the step of including the restricted-use permission item in the first request comprises:
and sending a data packet carrying the first request to a second electronic device, wherein the data packet comprises the identifier of the restricted-use permission item.
15. The first electronic device of claim 14, wherein the data packet includes one or a combination of the following fields: a data packet header field, a type field, a subtype field and an information embedding field;
and when the value of the type field is a first preset value and the value of the subtype field is a second preset value, the data packet is a data packet carrying the first request, and the data carried by the information embedded field is the first request.
16. The first electronic device of claim 15, wherein the instructions, when executed by the first electronic device, cause the first electronic device to perform the step of sending a data packet carrying the first request to the second electronic device comprises:
adding a random number into the data carried by the information embedding field, and encrypting the data added with the random number by using a secret key in a trusted execution environment;
packaging the encrypted data in a data packet;
and sending the data packet to a second electronic device.
17. The first electronic device according to any one of claims 10-12, wherein the instructions, when executed by the first electronic device, cause the first electronic device to perform the step of obtaining the restricted-use right item in the communication process between the first electronic device and the second electronic device, include:
according to the security protection level set by the user, acquiring an access item which is restricted to be used and corresponds to the security protection level; or,
and acquiring the limited use authority item set by the user.
18. A computer-readable storage medium, in which a computer program is stored which, when run on a computer, causes the computer to carry out the method according to any one of claims 1-8.
Priority Applications (4)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN202211315311.8A CN115865406A (en) | 2020-05-15 | 2020-06-30 | Authority negotiation method and device in communication process and electronic equipment |
US17/924,856 US20230214532A1 (en) | 2020-05-15 | 2021-04-22 | Permission negotiation method and apparatus during communication, and electronic device |
PCT/CN2021/089045 WO2021227820A1 (en) | 2020-05-15 | 2021-04-22 | Method and device for negotiating permission during communication process, and electronic apparatus |
EP21805189.4A EP4138357A4 (en) | 2020-05-15 | 2021-04-22 | Method and device for negotiating permission during communication process, and electronic apparatus |
Applications Claiming Priority (2)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
CN2020104152507 | 2020-05-15 | ||
CN202010415250 | 2020-05-15 |
Related Child Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202211315311.8A Division CN115865406A (en) | 2020-05-15 | 2020-06-30 | Authority negotiation method and device in communication process and electronic equipment |
Publications (2)
Publication Number | Publication Date |
---|---|
CN113676440A CN113676440A (en) | 2021-11-19 |
CN113676440B true CN113676440B (en) | 2022-11-04 |
Family
ID=78537897
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
CN202010622179.XA Active CN113676440B (en) | 2020-05-15 | 2020-06-30 | Authority negotiation method and device in communication process and electronic equipment |
Country Status (1)
Country | Link |
---|---|
CN (1) | CN113676440B (en) |
Families Citing this family (1)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
CN116193060A (en) * | 2021-11-29 | 2023-05-30 | 中兴终端有限公司 | Communication method, terminal, and computer-readable storage medium |
Family Cites Families (12)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
ES2271958T3 (en) * | 1996-09-04 | 2007-04-16 | Intertrust Technologies Corp | RELIABLE SYSTEMS, PROCEDURES AND TECHNOLOGIES FOR INFRASTRUCTURE SUPPORT FOR SAFE ELECTRONIC COMMERCE, ELECTRONIC TRANSACTIONS, CONTROL AND AUTOMATION OF COMMERCIAL PROCEDURES, DISTRIBUTED COMPUTERS AND RIGHTS MANAGEMENT. |
CN103577750B (en) * | 2013-11-15 | 2016-08-17 | 北京奇虎科技有限公司 | Privacy authority management method and device |
CN105049592B (en) * | 2015-05-27 | 2020-02-14 | 中国科学院信息工程研究所 | Mobile intelligent terminal voice safety protection method and system |
JP2017005322A (en) * | 2015-06-05 | 2017-01-05 | キヤノン株式会社 | Report function for camera photographing utilizing wearable terminal |
CN107545155A (en) * | 2016-06-29 | 2018-01-05 | 中兴通讯股份有限公司 | A kind of information processing method and device |
CN106506828B (en) * | 2016-10-27 | 2019-08-06 | 北京安云世纪科技有限公司 | Limit the way of recording, device and portable mobile termianl |
CN106791011A (en) * | 2016-11-29 | 2017-05-31 | 维沃移动通信有限公司 | The method and mobile terminal of a kind of control recording authority |
CN106657552B (en) * | 2016-11-30 | 2019-08-06 | Oppo广东移动通信有限公司 | Prevent the method, apparatus and terminal monitored |
US10475330B2 (en) * | 2017-05-31 | 2019-11-12 | Amazon Technologies, Inc. | Communicating with law enforcement agencies using client devices that are associated with audio/video recording and communication devices |
CN107943369B (en) * | 2017-11-30 | 2020-01-21 | 东软集团股份有限公司 | Method, device, medium and electronic equipment for controlling and managing permission application |
CN109670293A (en) * | 2018-12-21 | 2019-04-23 | 联想(北京)有限公司 | Information processing method and electronic equipment |
CN110851863B (en) * | 2019-11-07 | 2022-06-03 | 北京无限光场科技有限公司 | Application program authority control method and device and electronic equipment |
-
2020
- 2020-06-30 CN CN202010622179.XA patent/CN113676440B/en active Active
Also Published As
Publication number | Publication date |
---|---|
CN113676440A (en) | 2021-11-19 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
EP3820077A1 (en) | Login method, token sending method, and device | |
CN111132137A (en) | Wi-Fi connection method and device | |
CN111093183B (en) | Mobile equipment management method and equipment | |
CN113408016B (en) | Method and device for storing ciphertext | |
WO2021175266A1 (en) | Identity verification method and apparatus, and electronic devices | |
CN110752929B (en) | Application program processing method and related product | |
CN114528581A (en) | Safety display method and electronic equipment | |
WO2021184264A1 (en) | Data saving method, data access method, and related apparatus and device | |
CN113709024B (en) | Data transmission method, medium and electronic device thereof | |
CN113892103A (en) | Apparatus and method for performing encryption/decryption processing | |
CN113676440B (en) | Authority negotiation method and device in communication process and electronic equipment | |
WO2022037405A1 (en) | Information verification method, electronic device and computer-readable storage medium | |
CN116340913A (en) | Login method, electronic equipment and computer readable storage medium | |
CN114117461A (en) | Data protection method, electronic equipment and storage medium | |
CN114489876A (en) | Text input method, electronic equipment and system | |
EP4138357A1 (en) | Method and device for negotiating permission during communication process, and electronic apparatus | |
CN114117367A (en) | Data protection method and electronic equipment | |
WO2024032400A1 (en) | Picture storage method and apparatus, and terminal device | |
CN115599596B (en) | Data processing method, electronic device, system and storage medium | |
WO2022042273A1 (en) | Key using method and related product | |
CN114329595B (en) | Application program detection method, device, storage medium and program product | |
CN116669020B (en) | Password management method, password management system and electronic equipment | |
US20240233933A1 (en) | Contact tracing method and related device | |
WO2024037040A9 (en) | Data processing method and electronic device | |
CN115701108A (en) | Watermark adding method, watermark verifying method, electronic device and storage medium |
Legal Events
Date | Code | Title | Description |
---|---|---|---|
PB01 | Publication | ||
PB01 | Publication | ||
SE01 | Entry into force of request for substantive examination | ||
SE01 | Entry into force of request for substantive examination | ||
GR01 | Patent grant | ||
GR01 | Patent grant |