TWI803836B - Mobile device monitoring system and method - Google Patents

Abstract

A mobile device monitoring system and a monitoring method for mobile device are provided in the present disclosure. The mobile device monitoring system includes a controller, a display device and a storage device. The first program is initialized according to an activation request to display a page of the first program on the display device. After the first program is initialized, the first program provides a monitoring program activation request to the operating system to activate the monitoring program. The first program includes multiple sensitive pages. When one of the multiple sensitive pages of the first program is displayed on the display device, the monitoring program continuously monitors whether or not the page operation authority parameter of one of the multiple sensitive pages of the first program changes.

Description

Mobile device monitoring system and method

The present invention relates to a mobile device monitoring system and method, in particular to a mobile device monitoring system and method for preventing application pages from being covered.

Some malicious programs will quickly overwrite the page of the program after some programs are opened, and obtain important information such as the user's personal information, financial card information or credit card information, personal account password, etc. by forging the program page.

Therefore, how to provide a mobile device monitoring system and method that can effectively prevent application pages from being covered has become one of the important issues to be solved by this project.

The technical problem to be solved by the present invention is to provide a mobile device monitoring system for the deficiencies in the prior art, including: a controller; a display device electrically connected to the controller; and a storage device electrically connected to the controller device, the storage device at least stores an operating system, a first program, and a monitoring program; wherein, when the operating system is initialized, executed and displayed by the controller, the storage device, and the display device , the first program is initialized according to a start request, so as to display a page of the first program on the display device; wherein, when the first program is initialized, the first program provides a monitoring A program activation request is sent to the operating system to activate the monitoring program; wherein, the first program includes a plurality of alert pages, and when one of the plurality of alert pages of the first program is displayed on the display device At this time, the monitoring program continuously monitors whether a page operation authority of one of the smart pages of the first program is changed.

In order to solve the above technical problems, one of the technical solutions adopted by the present invention is to provide a mobile device monitoring method, including: initializing a first program; providing a monitoring program activation request to start a monitoring program; monitoring the first program displaying whether a page operation authority of a smart page in the foreground changes; and providing a warning message at least according to the page operation authority of the smart page.

One of the beneficial effects of the present invention is that the mobile device monitoring system and method provided by the present invention can effectively monitor other programs, such as the page coverage of malicious programs, and effectively prevent leakage of sensitive data.

In order to further understand the features and technical content of the present invention, please refer to the following detailed description and drawings related to the present invention. However, the provided drawings are only for reference and description, and are not intended to limit the present invention.

The implementation of the "mobile device monitoring system and method" disclosed in the present invention is described below through specific specific examples. Those skilled in the art can understand the advantages and effects of the present invention from the content disclosed in this specification. The present invention can be implemented or applied through other different specific embodiments, and various modifications and changes can be made to the details in this specification based on different viewpoints and applications without departing from the concept of the present invention. In addition, the drawings of the present invention are only for simple illustration, and are not drawn according to the actual size, which is stated in advance. The following embodiments will further describe the relevant technical content of the present invention in detail, but the disclosed content is not intended to limit the protection scope of the present invention. In addition, the term "or" used herein may include any one or a combination of more of the associated listed items depending on the actual situation.

[first embodiment]

Please refer to FIG. 1 and FIG. 2 . FIG. 1 is a schematic diagram of a mobile device monitoring system according to a first embodiment of the present invention. FIG. 2 is a message interaction diagram of the operating system, the first program and the monitoring program in the mobile device monitoring system.

Since mobile devices are quite common nowadays, and mobile finance is becoming more and more prosperous, personal information and financial-related information, such as credit card and debit card information, have also become content that malicious programs want to steal. As malicious programs become more and more rampant, they even imitate the program pages of financial institutions or fake personal information input pages, and obtain sensitive information such as user personal information by covering the front of the program pages. In order to prevent this problem, the present invention provides a mobile device monitoring system 1 . Since not all overlay pages imitate the original program screen, it may be a fake screen added by the attacker himself. For example, BlackRock will fake the credit card information input page in front of google play, Netflix and other programs, but the style and style of the page itself does not match the original program.

The mobile device monitoring system 1 includes a controller 11 , a display device 12 , a storage device 13 and a communication device 14 . The controller 11 is electrically connected to the display device 12 , the storage device 13 and the communication device 14 . In this embodiment, the mobile device monitoring system 1 is applicable to a mobile device MD. The mobile device MD can be a smart phone, a tablet computer or a wearable electronic device.

In this embodiment, the storage device 13 at least stores an operating system OS, a first program APP1 and a monitoring program MP.

The first program APP1 includes a plurality of smart pages CP and non-smart pages NCP. The user can browse or log in a plurality of smart pages CP and non-smart pages NCP of the first program APP1 by initializing the first program APP1. In this embodiment, the first program APP1 is a mobile device application program, such as a bank transaction program, a stock and securities transaction program or a social software program, a mobile game program or a live entertainment application program.

Smart page CP is a page that needs to input confidential information such as user's personal information, bank card information, credit card information, account password input or third-party authentication information. A non-sensitive page NCP is a page that does not contain confidential information such as user personal information, bank card information, credit card information, account password input, or third-party authentication information.

Firstly, after the mobile device MD starts up, the operating system OS will be initialized. The operating system OS and the first program APP1 need to be executed and displayed by the controller 11 , the display device 12 and the storage device 13 before the initialization can be completed.

The first program APP1 can be initialized according to an activation request, so as to display a page of the first program APP1 on the display device 12 . In this embodiment, the activation request is a click signal of a touch interface. Wherein, after the first program APP1 completes the initialization, the first program APP1 provides a monitor program start request to the operating system OS to start the monitor program MP. The monitoring program MP can be set in the first program APP1 and initialized at the same time. In other embodiments, the monitoring program MP can be started after the first program APP1 is initialized.

Moreover, the first program APP1 includes a plurality of smart pages CP and a plurality of non-smart pages NCP. When one of the multiple smart pages CP and the multiple non-smart pages NCP of the first program APP1 is displayed on the display device 12, the monitoring program MP will continuously monitor the multiple smart pages CP and the multiple non-smart pages of the first program APP1. Whether the operation authority of multiple pages of smart page NCP has changed. In this embodiment, the monitoring program MP is set in the first program APP1. The monitoring program MP is used to detect whether the page operation authority of multiple pages of the first program APP1 is changed. In other embodiments, the monitoring program MP can be used to detect multiple pages of the first program APP1 or multiple pages of other programs, which is not limited in the present invention.

When the operation authority of one of the multiple pages of the first program APP1 displayed on the display device 12 is changed, the operating system OS provides a permission change notification information to the first program APP1, and the first program APP1 will notify the monitoring program MP The page operation authority of the currently displayed page has been changed. Here, the reason for the page operation authority of the page may be because of the advertisement pop-up window of the own program, or the foreground is taken away by other programs, or the page is covered by malicious programs. That is, in this embodiment, the monitoring program MP can detect whether the page operation authority of the smart page CP and the non-smart page NCP is changed. In other embodiments, the monitoring program MP can only detect whether the page operation authority of the smart page CP is changed.

Therefore, when the monitoring program MP is notified by the first program APP1 that one of the multiple pages of the first program APP1 has a page operation authority changed, the monitoring program MP will also detect whether the page of the first program APP is displayed in the foreground , instead of being retreated to the background, and whether the program covering the first program APP1 belongs to the pop-up window of the first program APP1 itself, to determine whether to provide a warning message.

In other embodiments, when the monitoring program MP is notified by the first program APP1 that the operation authority of one of the multiple pages of the first program APP1 is changed, the monitoring program MP can provide warning information to notify the user of the current situation. The displayed pages are risky.

In this embodiment, then, when the monitoring program MP detects that the page operation authority of the page of the first program APP1 is changed, the page of the first program APP1 is in the foreground, the program covered on the page of the first program APP1 For windows or pages that do not belong to the first program APP1 itself, the monitoring program MP will provide a warning message.

As shown in FIG. 2 , the interaction between the operating system OS and the first program APP1 is as mentioned above. After the first program APP1 is initialized, the operating system OS is required to start the monitoring program MP. Then, when the malicious program covers the page of the first program APP, the monitoring program MP will provide warning information.

The controller 11 is a central processing unit (CPU), an application specific integrated circuit (ASIC), a graphics processing unit (GPU) or a microprocessor (MCU). The display device 12 is a liquid crystal display device or an organic light emitting diode display device. The storage device 13 is a flash memory, a read-only memory, a programmable read-only memory, an electrically rewritable read-only memory, an erasable programmable read-only memory or an electrically erasable Scalable read-only memory. The communication device 14 includes a wired communication unit (not shown) and a wireless communication unit (not shown). When the communication device 14 is a wireless communication unit, the communication device 14 can be a Wi-Fi communication unit, a Bluetooth communication unit, a Zigbee communication unit (Zigbee), a LoRa communication unit, a Sigfox communication unit or a NB -IoT communication unit. The operating system OS may be an Android system, an iOS system, an iPadOS system, and the like.

[Second embodiment]

Please refer to FIG. 3 and FIG. 4 , FIG. 3 is a flowchart of a mobile device monitoring method according to a second embodiment. FIG. 4 is another flow chart of the mobile device monitoring method of the second embodiment.

The mobile device monitoring method in this embodiment is applicable to the mobile device monitoring system 1 in the first embodiment, and the function and structure of the mobile device monitoring system 1 will not be repeated here.

The mobile device monitoring method includes the following steps:

Initialize a first program and a monitoring program (step S110);

Monitoring whether a page operation authority of a page displayed in the foreground by the first program is changed (step S120);

At least provide a warning message according to the page operation authority of the page (step S130 ).

In step S110 , the mobile device monitoring system 1 includes a controller 11 , a display device 12 , a storage device 13 and a communication device 14 . The controller 11 is electrically connected to the display device 12 , the storage device 13 and the communication device 14 . In this embodiment, the mobile device monitoring system 1 is applicable to a mobile device MD. The mobile device MD can be a smart phone, a tablet computer or a wearable electronic device.

In this embodiment, the storage device 13 at least stores an operating system OS, a first program APP1 and a monitoring program MP.

The first program APP1 includes a plurality of smart pages CP and non-smart pages NCP. The user can browse or log in a plurality of smart pages CP and non-smart pages NCP of the first program APP1 by initializing the first program APP1. In this embodiment, the first program APP1 is a mobile device application program, such as a bank transaction program, a stock and securities transaction program or a social software program, a mobile game program or a live entertainment application program.

Smart page CP is a page that needs to input confidential information such as user's personal information, bank card information, credit card information, account password input or third-party authentication information. A non-sensitive page NCP is a page that does not contain confidential information such as user personal information, bank card information, credit card information, account password input, or third-party authentication information.

Firstly, after the mobile device MD starts up, the operating system OS will be initialized. The operating system OS and the first program APP1 need to be executed and displayed by the controller 11 , the display device 12 and the storage device 13 before the initialization can be completed.

The first program APP1 can be initialized according to an activation request, so as to display a page of the first program APP1 on the display device 12 . In this embodiment, the activation request is a click signal of a touch interface. Wherein, after the first program APP1 completes the initialization, the first program APP1 provides a monitor program start request to the operating system OS to start the monitor program MP. The monitoring program MP can be set in the first program APP1 and initialized at the same time. In other embodiments, the monitoring program MP can be started after the first program APP1 is initialized.

In step S130, the first program APP1 includes a plurality of smart pages CP and a plurality of non-smart pages NCP. When one of the smart pages CP and the non-smart pages NCP of the first program APP1 is displayed on the display device 12, the monitoring program MP will continuously monitor the smart pages CP and the non-smart pages of the first program APP1. Whether one of the page operation permissions of the page NCP has changed. In this embodiment, the monitoring program MP is set in the first program APP1. The monitoring program MP is used to detect whether the page operation authority of multiple pages of the first program APP1 is changed. In other embodiments, the monitoring program MP can be used to detect multiple pages of the first program APP1 or multiple pages of other programs, which is not limited in the present invention.

When the operation authority of one of the multiple pages of the first program APP1 displayed on the display device 12 is changed, the operating system OS provides a permission change notification information to the first program APP1, and the first program APP1 will notify the monitoring program MP The page operation authority of the currently displayed page has been changed. That is, in this embodiment, the monitoring program MP can detect whether the page operation authority of the smart page CP and the non-smart page NCP is changed. In other embodiments, the monitoring program MP can only detect whether the page operation authority of the smart page CP is changed.

In step S140, when the monitoring program MP is notified by the first program APP1 that the page operation authority of one of the multiple pages of the first program APP1 is changed, the monitoring program MP can provide warning information to notify the user The page currently displayed is risky.

In addition, as shown in Figure 4, when the monitoring program MP is notified by the first program APP1 that one of the page operation permissions of the multiple pages of the first program APP1 is changed, the monitoring program MP will also detect the first program APP. Whether the page is displayed in the foreground instead of being retreated to the background, and whether the program covering the first program APP1 is a pop-up window of the first program APP1 itself is used to determine whether to provide a warning message.

That is, when the monitoring program MP detects that the page operation authority of the page of the first program APP1 is changed, the page of the first program APP1 is in the foreground, and the program covering the page of the first program APP1 does not belong to the first program For the window or page of APP1 itself, the monitoring program MP will provide a warning message.

[Advantageous Effects of Embodiment]

One of the beneficial effects of the present invention is that the mobile device monitoring system and method provided by the present invention can effectively monitor other programs, such as the page coverage of malicious programs, and effectively prevent leakage of sensitive data.

The content disclosed above is only a preferred feasible embodiment of the present invention, and does not therefore limit the scope of the patent application of the present invention. Therefore, all equivalent technical changes made by using the description and drawings of the present invention are included in the application of the present invention. within the scope of the patent.

1: Mobile device monitoring system 11: Controller 12: Display device 13: storage device 14: Communication device MD: mobile device OS: operating system CP: smart page NCP: Non-Smart Page S110-S130, S140: Steps APP1: The first program

FIG. 1 is a schematic diagram of a mobile device monitoring system according to a first embodiment of the present invention.

FIG. 2 is a message interaction diagram of the operating system, the first program and the monitoring program in the mobile device monitoring system.

FIG. 3 is a flow chart of the mobile device monitoring method of the second embodiment.

FIG. 4 is another flow chart of the mobile device monitoring method of the second embodiment.

1: Mobile device monitoring system

11: Controller

12: Display device

13: storage device

14: Communication device

MD: mobile device

APP1: The first program

CP: smart page

NCP: Non-Smart Page

Claims (12)

A mobile device monitoring system, comprising: a controller; a display device electrically connected to the controller; and a storage device electrically connected to the controller, the storage device at least stores an operating system, a first program and a monitoring program; wherein, when the operating system is initialized, executed and displayed by the controller, the storage device, and the display device, the first program is initialized according to a startup request, so as to A page of the first program is displayed on the display device; wherein, after the initialization of the first program is completed, the monitoring program will detect multiple pages of the first program; wherein, when the When one of the plurality of pages of the first program is displayed on the display device, the monitoring program continuously monitors whether the operation authority of one of the plurality of pages of the first program in use changes , as a basis for providing an alert message. The mobile device monitoring system according to claim 1, wherein when one of the page operation permissions of the plurality of pages of the first program displayed on the display device is changed, the operating system provides A permission change notification message is sent to the first program, and the first program notifies the monitoring program that the page operation permission of the page currently displayed has been changed. The mobile device monitoring system as described in claim 2, wherein, when the monitoring program detects that one of the page operation permissions of the plurality of pages of the first program is changed, the monitoring program also It will detect whether the first program page is displayed in the foreground instead of being retreated to the background, and whether the program covering the first program belongs to the pop-up window of the first program itself, so as to determine whether to provide a warning Information. The mobile device monitoring system as described in claim 3, wherein, when the monitoring program detects that the page operation authority of the first program is changed, the first program is in the foreground and covers the second program A program on a program is not a window belonging to the first program itself, and the monitoring program will provide a warning message. The mobile device monitoring system as claimed in claim 4, wherein the first program is a mobile device application program. The mobile device monitoring system as described in claim 5, wherein the first program includes a plurality of smart pages and a plurality of non-smart pages, and the non-smart pages do not include a user's personal information, a credit card information, Account password input or a financial card information, the smart page includes a user's personal information, a credit card information, account password input or a financial card information. The mobile device monitoring system according to claim 1, wherein the monitoring program is set in the first program. A mobile device monitoring method, suitable for a mobile device monitoring system, the mobile device monitoring method includes: the mobile device monitoring system initializes a first program and a monitoring program; the monitoring program monitors the first program in use Whether a page operation authority of a page in the foreground is changed; and the monitoring program at least provides a warning information according to the page operation authority of the page. The mobile device monitoring method according to claim 8, wherein, in the step of providing a warning message at least according to the page operation authority of the smart page, it further includes: the monitoring program according to the page operation authority The warning information is provided if the page operation authority is changed, the first program is in the foreground, and the program covering the first program is not a window belonging to the first program itself. The mobile device monitoring method as described in claim 9, wherein the first program is a mobile application. The mobile device monitoring method as described in claim item 10, wherein the first program includes a plurality of smart pages and a plurality of non-smart pages, and the non-smart pages do not include a user's personal information, a credit card information or It is financial card information, and the sensitive page includes a user's personal information, credit card information or financial card information. The mobile device monitoring method according to claim 8, wherein the monitoring program is set in a first program.

Images