WO2013075422A1

WO2013075422A1 - Method for protecting privacy information and mobile terminal

Info

Publication number: WO2013075422A1
Application number: PCT/CN2012/071547
Authority: WO
Inventors: 雷明剑; 王巍; 徐立锋; 古幼鹏; 钟声; 胡炜
Original assignee: 中兴通讯股份有限公司
Priority date: 2011-11-24
Filing date: 2012-02-23
Publication date: 2013-05-30
Also published as: CN102413221B; CN102413221A

Abstract

Disclosed is a method for protecting privacy information, including: a mobile terminal generating a privacy information security control policy according to a preset privacy information security control policy configuration file; when detecting that an application software uses a function involving personal privacy information defined in the privacy information security control policy, the mobile terminal controlling the right of the function involving personal privacy information used by the application software according to a right to use control policy of the function used in the privacy information security control policy. Also at the same time disclosed is a mobile terminal. The present invention can be applied to control the right of the invoke function involving user personal privacy information and thus protect the personal privacy information about the mobile terminal user.

Description

Method for protecting private information and mobile terminal

The present invention relates to access control technologies in mobile terminals, and in particular, to a method for protecting private information and a mobile terminal. Background technique

Mobile terminals such as mobile phones have entered the era of intelligence, and a variety of application software can be installed and run on mobile phones to enhance the convenience of mobile phone users.

At present, the number of malicious applications that maliciously steal user's private information is increasing in the application software installed on the mobile phone. These malicious applications run hidden in the background, and obtain private information of mobile phone users, such as: short messages, contacts, call records, etc.; these malicious applications can be run in the background to automatically obtain the user's private Information, and the user's private information is sent to the illegal supplier (SP, Service Provider), thus, will leak the privacy of the mobile phone user.

It can be seen that since the malicious application in the mobile terminal, such as the mobile phone, does not control the function authority of the user's private information, the user reveals the personal privacy information without being aware of it. Summary of the invention

In view of the above, an object of the present invention is to provide a method and a mobile terminal for protecting private information, which can control the authority of a calling function involving a user's personal privacy information, thereby protecting the personal privacy information of the mobile terminal user.

In order to achieve the above object, the technical solution of the present invention is achieved as follows:

The present invention provides a method of protecting private information, the method comprising: Generating a privacy information security control policy according to a configuration file of a preset privacy information security control policy;

When the application software detects the function related to the personal privacy information defined in the privacy information security control policy, the permission usage control policy according to the function of the privacy information security control policy related to the personal privacy information is used by the application software. Permissions to control the functionality of personal privacy information are controlled.

In the foregoing solution, before the detecting that the application software uses the function related to the personal privacy information defined in the privacy information security control policy, the method further includes: determining, in real time, whether the currently accessed application software uses the personal privacy information. Function, if yes, detecting whether the right corresponding to the function related to the personal privacy information used by the application software matches any one of the privacy information security control policies; otherwise, continuing to determine whether the currently accessed application software uses personal privacy information The function.

In the above solution, whether the permission corresponding to the function related to the personal privacy information used by the detection application software is consistent with any one of the privacy information security control policies, includes: viewing the privacy information security control policy according to the trust level of the application software. Corresponding to the function permission control list related to the personal privacy information under the trust level; determining whether the function related to the personal privacy information used by the application software and the function permission control list related to the personal privacy information need to be controlled involves personal privacy The functions of the information are the same. If there is the same item, the application software is detected to use the function related to the personal privacy information defined in the privacy information security control policy; if there is no identical item, the application software is allowed to use the personal privacy involved. The function of information.

In the foregoing solution, before the viewing of the function permission control list related to the personal privacy information in the privacy information security control policy, the method further includes: determining to perform the installation of the new application software, decompressing the new application software. The installation package extracts signature information of the new application software; uses the signature information of the application software to perform authentication, determines the trust level of the application software according to the authentication result; and saves the trust level in the attribute configuration file corresponding to the application software. In the above solution, before the permission usage control policy according to the function related to the personal privacy information in the privacy information security control policy controls the authority of the function related to the personal privacy information to be used by the application software, the method The method further includes: determining whether a function related to the personal privacy information used by the application software has a corresponding permission use control policy, and if yes, using the control policy according to the permission, the personal privacy information to be used by the application software The authority of the function is controlled; if not, the permission for the function related to the personal privacy information is set and saved using the control policy.

The present invention also provides a mobile terminal, where the mobile terminal includes: a rights usage policy module and a rights usage control module;

a permission usage policy module, configured to generate a privacy information security control policy according to a preset configuration file of the privacy information security control policy, and provide the permission usage control module;

The permission use control module is configured to refer to the personal information according to the privacy information security control policy when the function related to the personal privacy information defined in the system connection permission control policy in the application software usage right policy module is detected The permission of the function of the private information uses the control policy to control the authority of the application to use the function related to the personal privacy information.

In the above solution, the mobile terminal further includes: an application processing module, configured to determine in real time whether the currently accessed application software uses any function related to personal privacy information, and if yes, sends the application software to the rights usage control module. The name of the function used to refer to personal privacy information; otherwise, continue to determine whether the currently accessed application uses the functionality related to personal privacy information;

Correspondingly, the permission use control module is specifically configured to receive a name of a function related to the personal privacy information used by the application software sent by the application processing module, and detect whether the function related to the personal privacy information and the privacy information security control Any one of the policies matches.

In the above solution, the permission usage control module is specifically used to trust according to application software. Level, view the function permission control list related to personal privacy information under the corresponding trust level in the privacy information security control policy in the policy module; determine whether the function related to the personal privacy information used by the application software relates to personal privacy The functions related to the personal privacy information that need to be controlled in the function permission control list of the information are the same. If there is the same item, the function that the application software uses to refer to the personal privacy information defined in the privacy information security control policy is detected; The same item, the notification application processing module allows the application software to use the function related to personal privacy information;

Correspondingly, the application processing module is further configured to receive, by the permission usage control module, a function that allows the application software to use the personal privacy information;

The rights usage policy module is specifically configured to provide a privacy information security control policy for the rights usage control module.

In the above solution, the mobile terminal further includes: an application trust level authentication module, configured to receive an installation package of a new application software sent by the application processing module, decompress a new application software installation package, and extract a new application software. Signature information; use the signature information of the application software for authentication, determine the trust level of the application software according to the authentication result; and then save the trust level in the attribute configuration file corresponding to the application software;

Correspondingly, the application processing module is further configured to: when the installation of the new application software is performed, send the installation package of the new application software to the application trust level authentication module.

In the foregoing solution, the permission use control module is specifically configured to determine whether a function related to the personal privacy information used by the application software has a corresponding permission use control policy, and if yes, use the control policy according to the permission, The application software controls the rights of the functions related to the personal privacy information; if not, the rights control policy for the functions related to the personal privacy information is set, and the personal privacy information is involved. The permissions of the feature are saved to the rights usage policy module using the control policy;

Correspondingly, the permission usage policy module is specifically used to receive the permission usage control module The privilege uses the control policy, and saves the privilege usage control policy to the corresponding functional item related to the personal privacy information in the function permission control list related to the personal privacy information.

The method for protecting private information and the mobile terminal provided by the present invention set a privacy information security control policy for application software with different trust levels, and focus on detecting the use of some functions related to personal privacy information that the user cares about; When any one of the privacy information security control policies used by the software to the mobile terminal relates to the function of the personal privacy information, the control policy is used according to the specific authority of the function related to the personal privacy information; thus, according to the application The trust level, classification control and management of the application software on the mobile terminal to the use of personal privacy information, thereby protecting the privacy information of the mobile terminal user and improving the security of the personal information in the mobile terminal. In addition, the privacy information security control policy can be modified or deleted according to the actual situation, so that the usage rights of the functions related to personal privacy information can be flexibly controlled. DRAWINGS

1 is a schematic flow chart of a method for protecting private information according to the present invention;

2 is a schematic structural diagram of a mobile terminal according to the present invention. detailed description

The basic idea of the present invention is: generating a privacy information security control policy according to a configuration file of a preset privacy information security control policy; and detecting that the application software uses a function related to personal privacy information defined in the privacy information security control policy, The authority to use the control policy based on the rights of the functions used in the privacy information security control policy controls the rights of the application to use the functions related to personal privacy information.

The privacy information security control policy is: a specific function of the required control corresponding to the function of the personal privacy information under different trust levels, and a permission use control policy of the function related to the personal privacy information; The permission use control policy is a permission control manner for using a function related to personal privacy information in any one of the privacy information security control policies, and may include: always allowing, always rejecting, or asking each time.

The present invention will be further described in detail below with reference to the accompanying drawings and specific embodiments.

The following takes the mobile terminal as a mobile phone as an example. The method for protecting the private information of the present invention is as shown in FIG. 1 , and includes the following steps:

Step 101: Pre-configure the configuration file of the privacy information security control policy in the mobile phone.

Here, the configuration file of the privacy information security control policy is written according to the actual situation, and may include the type of the permission, the trust level, the name of the permission group, and the individual involved in the permission group. The function of the private information, the format can be written in the Extensible Markup Language (XML) format;

For example, you can write a configuration file for the privacy information security control policy in the following format: <?xml version- 1.0' encoding='utf-8' standalone='yes' ?>

Permission name="ACCESS— MESSAGE" /> permission name=" ACCESS— CONTACTS" />

Permission name=" ACCESS- CALLLOG" />

Permission name=" ACCESS- LOCATION" />

Permission name=" ACCESS- DEVICE_ INFO" />

< /permissionGroup >

</ trustLevel >

</sysControlPermission>

Where <sysControlPermission> indicates that the type of the permission belongs to the default control of the system, <trustLevel name ⁼ "unApproved"> ^ indicates that the trust level is untrusted

( unApproved ), <permissionGroup name:" personal— info "/> represents the permission group Name is personal privacy information class ( personal_ info ) , permission

Name="ACCESS— MESSAGE >, permission name=" ACCESS— CONTACTS" />, permission name=" ACCESS_ CALLLOG" />, <permission name=" ACCESS- LOCATION" /:^<permission name=" ACCESS- DEVICE — INFO" /> indicates that the personal privacy information type permission group needs to control the access message

( ACCESS_MESSAGE ), access phone book ( ACCESS_CONTACTS ), access call record ( ACCESS_CALLLOG ), access user location ( ACCESS_LOCATION ) and access device information ( ACCESS — DEVICE — INFO ).

Step 102: After the mobile phone is started, generate a privacy information security control policy according to the configuration file of the privacy information security control policy.

Specifically: After the mobile phone is started, check whether there is a new privacy information security control policy configuration file from the specified directory. If not, go directly to step 103; if yes, read the private information security control policy configuration file, from In the configuration file of the privacy information security control policy, the trust level, the permission group name, and the specific control function under the permission group are extracted; the specific control function under the trust level as the identifier, the permission group name, and the permission group is added to the personal privacy involved. The function permission control list of the information; finally, the function permission control list related to the personal privacy information is saved in the phone memory to form a privacy information security control policy, and then step 103 is performed;

Here, the specified directory is: a file directory of a configuration file storing a privacy information security control policy, for example, the specified directory may be a root directory of a mobile phone memory card.

Step 103: Real-timely determine whether the currently used application software uses any function of the personal privacy information in the mobile phone. If yes, execute step 104; otherwise, repeat step 103.

Specific: The mobile phone real-time monitoring application software running process determines whether the calling information of any function related to personal privacy information is issued during the running of the application software, so that it can be judged whether the currently used application software is used. Any one of the phones involves personal privacy The function of the information, if issued, performing step 104, and extracting the function related to the personal privacy information used in the calling information of the function related to the personal privacy information; if not, repeating step 103;

Here, the calling information for any function related to personal privacy information includes: a function to be invoked related to personal privacy information; a method for generating the calling information is prior art, and is not mentioned here.

Step 104: Detect whether the right corresponding to the function related to the personal privacy information used by the application software matches any one of the privacy information security control policies, and if yes, perform step 105; otherwise, allow the application to use the personal privacy The function of the information, ending the processing flow.

Specifically, the mobile phone checks the function permission control list related to the personal privacy information in the privacy information security control policy according to the trust level of the application software; and determines whether the function related to the personal privacy information used by the application software relates to The function related to the personal privacy information that needs to be controlled in any of the function permission control lists of the personal privacy information is the same. If there is the same item, step 105 is performed; if not, the application software is allowed to use the function related to the personal privacy information. , performing subsequent processing on the access application software according to the prior art;

For example, if the mobile phone determines that the currently used application software uses the access phone book function, the mobile phone checks the function permission control list related to the personal privacy information under the corresponding trust level in the privacy information security control policy according to the trust level of the application software; When the trust level of the application software is untrustworthy, if the access permission book is recorded in the function permission control list corresponding to the personal privacy information corresponding to the untrustable level, step 105 is performed; when the trust level of the application software is trusted If the access phone book function item is recorded in the function permission control list related to the personal privacy information in the corresponding trusted level, step 105 is performed.

Step 105: The mobile phone determines whether there is a corresponding permission use control policy for the function related to the personal privacy information used by the application software. If yes, step 106 is performed; if not, step 107 is performed. Step 106: The mobile phone uses the control policy according to the permission, and controls the permission of the application to use the function related to the personal privacy information, and ends the processing flow.

Here, the control is: viewing the specific setting in the permission use control policy, when the specific setting is always allowed, the application is allowed to use the function related to the personal privacy information, and then the application is followed according to the prior art. Operation; when the specific setting is always rejected, the application software is rejected to use the function related to personal privacy information, and then the application software is followed according to the prior art; when the specific setting is for each inquiry, the user pops up the selection. Box, the user selects whether to allow the application software to use the function related to the personal privacy information, and then allows or denies the application software to use the function related to the personal privacy information according to the user's selection, and then follows the prior art according to the prior art. operating.

Step 107: The mobile phone sets the permission usage control policy for the function related to personal privacy information.

This step is specifically as follows: The mobile phone pops up a prompt dialog box for the user to remind the user that the permission for the function related to the personal privacy information is always allowed, always refused, or set each time, and the current application processing flow is suspended. The user saves the setting of the permission as a permission use control policy, adds a function item corresponding to the personal privacy information in the privacy information security control policy, and uses the control policy to follow the current application according to the set authority. deal with.

In addition, before the foregoing step 103, the trust level of the application software needs to be authenticated. The specific authentication process includes the following steps:

Step a: The mobile phone determines in real time whether the operation selected by the user is to install any new application software or use any application software. If any new application software is installed, step b is performed; if any application software is accessed, the steps are executed. 103.

Step b: The mobile phone decompresses the installation package of the new application software, and extracts the signature information of the new application software. Here, the installation package for decompressing the new application software is a prior art, and no comment is made here; The extracting the signature information of the new application software is: after extracting the installation package of the new application software, extracting the signature information therein;

The signature information is: using a special tool to write signature information into a specific field of the application software, indicating that the application has passed the audit of the signer, and the specific fields are divided into three types: Saipan.

(Symbian) Signature of the charge certificate, the author uses the public free certificate signature and the user's signature.

Step c: The mobile phone first uses the signature information of the application software to perform authentication, and determines the trust level of the application software according to the authentication result; then saves the trust level in the attribute configuration file corresponding to the application software, and continues to install the application software according to the prior art, and returns step&.

Here, the performing the authentication by using the signature information of the application software includes: matching the signature information of the application software with the signature information of the plurality of certificates preset in the mobile phone, if the signature information of the application and the signature information of any one of the certificates If the authentication result is the same, the authentication result is not passed.

The determining the trust level of the application software according to the authentication result includes: setting the trust level of the application software according to the specific signature information when the authentication result is passed; and setting the application software to be unavailable when the authentication result is not passed. Trust level

The trust level includes two categories, namely, an untrustworthy level and a trusted level. The trusted level of the application is set according to the specific signature information: the mobile phone manufacturer customizes the preset certificate according to actual needs. Signature information, the trust level corresponding to different signature information may include: "vendor trust level", "operator trust level", "third-party partner trust level", and the like.

In addition, before the foregoing step 102, the privacy information security control policy may be modified or deleted according to actual conditions, specifically: when any one of the privacy information security control policies needs to be modified or deleted, the original privacy information security control policy is found. The configuration file is modified in the configuration file, and then step 102 is performed.

The present invention also provides a mobile terminal. As shown in FIG. 2, the mobile terminal includes: The use of the policy module 21 and the permission use control module 22; wherein

The privilege usage policy module 21 is configured to generate a privacy information security control policy according to a preset configuration file of the privacy information security control policy, and provide the privilege usage control module 22, where the privilege usage control module 22 is configured to detect the application software. When using the function of personal privacy information defined by the privacy information security control policy in the policy usage policy module 21, according to the permission of the privacy information security control policy, the control policy is applied to the application software. Use the permissions of the functions related to personal privacy information to control.

The permission usage policy module 21 is specifically configured to save a configuration file of the preset privacy information security control policy; and when the mobile terminal is powered on, generate a system connection authority control policy according to the configuration file of the privacy information security control policy.

The permission usage policy module 21 is specifically configured to check whether there is a configuration file of a new privacy information security control policy from the specified directory, and if not, end the processing flow; if yes, read the configuration of the privacy information security control policy The file, from the configuration file of the privacy information security control policy, extracts the trust level, the permission group name, and the specific control of the personal privacy information under the permission group; the trust level is the identifier, the permission group name, and the permission group are specific. The function of controlling the personal privacy information is added to the function permission control list related to the personal privacy information; finally, the function permission control list related to the personal privacy information is saved, and the privacy information security control policy is formed.

The mobile terminal further includes: an application processing module 23, configured to determine in real time whether the currently accessed application software uses any function related to personal privacy information, and if yes, send the application software to the rights usage control module 22 The name of the function related to the personal privacy information; otherwise, it continues to determine whether the currently accessed application software uses any of the functions related to the personal privacy information; correspondingly, the rights usage control module 22 is specifically configured to receive the application processing. The name of the function related to personal privacy information used by the application software sent by module 23, check Whether the function related to personal privacy information matches any of the privacy information security control policies.

The application processing module 23 is specifically configured to monitor the running process of the application software in real time, and determine whether to call any function related to the personal privacy information during the running of the application software to determine the currently used application software. Whether to use any function related to personal privacy information in the mobile phone, and if so, to send the name of the function related to the personal privacy information used by the application software to the authority use control module 22; otherwise, continue to determine whether the currently accessed application software is Use any feature that involves personal privacy information.

The privilege use control module 22 is configured to: when detecting whether the function related to the personal privacy information matches any one of the privacy information security control policies, view the privacy information of the privilege usage policy module 21 according to the trust level of the application software. A function permission control list related to personal privacy information corresponding to the trust level in the security control policy; determining whether the function related to the personal privacy information used by the application software is required by any one of the function permission control lists related to the personal privacy information The function of controlling the personal privacy information is the same. If there is the same item, it is determined whether there is a corresponding permission use control policy for the function related to the personal privacy information used by the application software; if there is no identical item, the application processing module is notified. 23 allowing the application to use the functionality related to personal privacy information;

Correspondingly, the application processing module 23 is further configured to receive the function of the application permission control module 22 to allow the application software to use the personal privacy information, and then perform subsequent processing on the access application software according to the prior art.

The privilege use control module 22 is specifically configured to: when the privilege used by the application software for the function related to the personal privacy information has the privilege to use the control policy, use the privilege in the privacy information security control policy of the policy module 21 according to the viewing privilege Using the control policy, controlling the authority of the application to use the function related to the personal privacy information, and ending the operation flow; if not, setting the permission use control policy of the function related to the personal privacy information, and then Permissions using the function of personal privacy information are saved to the rights usage policy module using the control policy

21;

Correspondingly, the privilege usage policy module 21 is specifically configured to receive the privilege usage control policy sent by the privilege usage control module 22, and save the privilege usage control policy to a corresponding privilege control list related to the personal privacy information. In a functional project involving personal privacy information.

The privilege use control module 22 is specifically configured to view specific settings in the privilege use control policy. When the specific setting is always allowed, the application software is allowed to use the function related to the personal privacy information, and then according to the prior art. The application software performs the following operations; when the specific setting is always rejected, the application software is rejected to use the function related to the personal privacy information, and then the application software is followed according to the prior art; when specifically set to each inquiry, Popping a selection box for the user, the user selects whether to allow the application software to use the function related to the personal privacy information, and then allows or denies the application software to use the function related to the personal privacy information according to the user's selection, and then according to the prior art The application software does the follow-up operation.

The privilege use control module 22 is further configured to remind the user to set the privilege usage control policy for the function related to the personal privacy information, and suspend the current application processing flow; and receive the user's privilege usage control policy for the function. Make settings, and control the permissions of the functions to be used by the application according to the rights set by the user.

The mobile terminal further includes: an application trust level authentication module 24, configured to receive an installation package of the application software sent by the application processing module 23; correspondingly, the application processing module 23 is further configured to determine, in real time, that the operation selected by the user is Install any new application software or access any application software. If any new application software is installed, the installation package of the application software is sent to the application trust level authentication module 24, and if any application software is accessed, it is determined. Whether the currently accessed application uses any of the features related to personal privacy information.

The application trust level authentication module 24 is further configured to decompress the installation package of the new application software. Extracting the signature information of the new application software, using the signature information of the application software to authenticate the application, determining the trust level of the application software according to the authentication result, and then saving the trust level in the attribute configuration file corresponding to the application software, and decompressing the The installation package of the application software and the attribute configuration file of the application software are sent back to the application processing module 23; correspondingly, the application processing module 23 is further configured to receive the installation of the decompressed application software sent by the application trust level authentication module 24. Package and application software attribute configuration file, and then continue to install the application software according to the prior art for the decompressed application software.

The application trust level authentication module 24 is specifically configured to match signature information of the application software with signature information of multiple certificates preset in the module. If the signature information of the application is the same as the signature information of any one of the certificates, The authentication result is passed; otherwise, the authentication result is not passed.

The application trust level authentication module 24 is specifically configured to: when the authentication result is passed, set a trusted level of the application according to the specific signature information; when the authentication result is not passed, set the application software to an untrustable level. .

It can be seen that, by using the above scheme, the application of the mobile terminal application to the function related to the personal privacy information can be classified and controlled according to the trust level of the application, and the function of the personal privacy information related to the mobile terminal can be effectively prevented from being used by the malware. , thereby ensuring the security of the information data of the mobile terminal user.

The above is only the preferred embodiment of the present invention and is not intended to limit the scope of the present invention.

Claims

Claim

A method for protecting private information, characterized in that the method comprises:

Generating a privacy information security control policy according to a configuration file of a preset privacy information security control policy;

The method according to claim 1, wherein before the detecting that the application software uses the function related to the personal privacy information defined in the privacy information security control policy, the method further comprises: determining the current access in real time. Whether the application software uses the function related to personal privacy information, and if so, whether the permission corresponding to the function related to the personal privacy information used by the application software matches any one of the privacy information security control policies; otherwise, the current access is continuously determined. Whether the application uses features that involve personal privacy information.

The method according to claim 2, wherein the detecting the right corresponding to the function related to the personal privacy information used by the application software is consistent with any one of the privacy information security control policies, including: according to the application software Trust level, view the function permission control list related to the personal privacy information under the corresponding trust level in the privacy information security control policy; determine whether the function related to the personal privacy information used by the application software and the function related to the personal privacy information The functions related to personal privacy information that need to be controlled in the permission control list are the same. If there is the same item, the function that the application software uses to refer to the personal privacy information defined in the privacy information security control policy is detected; if there is no identical item, The application is then allowed to use the functionality described in relation to personal privacy information.

The method according to claim 3, wherein the viewing of the function authority control list related to the personal privacy information under the corresponding trust level in the privacy information security control policy is The method further includes: determining to install the new application software, extracting the installation package of the new application software, extracting the signature information of the new application software, using the signature information of the application software for authentication, and determining the application software according to the authentication result. Trust level; then save the trust level in the attribute configuration file corresponding to the application software.

The method according to claim 1, wherein the rights usage control policy according to the function related to personal privacy information in the privacy information security control policy relates to personal privacy involved in the application software. Before the control of the function of the information is controlled, the method further includes: determining whether the function related to the personal privacy information used by the application software has a corresponding permission use control policy, and if yes, using the control policy according to the permission, The application software controls the rights of the functions related to the personal privacy information; if not, the rights control policy for the functions related to the personal privacy information is set and saved.

A mobile terminal, the mobile terminal comprising: a rights usage policy module and a rights usage control module; wherein

The mobile terminal according to claim 6, wherein the mobile terminal further includes:

An application processing module, configured to determine in real time whether the currently accessed application software uses any function related to personal privacy information, and if yes, sends a name of a function related to personal privacy information used by the application software to the permission use control module; Otherwise, continue to judge the current visit Whether the application uses features related to personal privacy information;

8. The mobile terminal of claim 6, wherein

The privilege usage control module is configured to: according to the trust level of the application software, view a function privilege control list related to personal privacy information under a corresponding trust level in the privacy information security control policy in the privilege usage policy module; Whether the function related to the personal privacy information used is the same as the function related to the personal privacy information that needs to be controlled in the function permission control list related to the personal privacy information, and if there is the same item, the application software is detected to use the privacy information security control. a function defined in the policy relating to personal privacy information; if there is no identical item, the notification application processing module allows the application software to use the function related to personal privacy information;

The mobile terminal according to claim 8, wherein the mobile terminal further comprises: an application trust level authentication module, configured to receive an installation package of a new application software sent by the application processing module, and decompress the new one. The installation package of the application software extracts the signature information of the new application software; the signature information of the application software is used for authentication, and the trust level of the application software is determined according to the authentication result; and the trust level is saved in the attribute configuration file corresponding to the application software;

10. The mobile terminal of claim 9, wherein The permission use control module is specifically configured to determine whether a function corresponding to the personal privacy information used by the application software has a corresponding permission use control policy, and if yes, use the control policy according to the permission to use the application software. The access to the function related to the personal privacy information is controlled; if not, the permission control policy is applied to the function related to the personal privacy information, and the function relating to the function of the personal privacy information is further set. Use the control policy to save to the permission usage policy module;

Correspondingly, the privilege usage policy module is specifically configured to receive a privilege usage control policy sent by the privilege usage control module, and save the privilege usage control policy to a corresponding privilege control list related to personal privacy information. Go to the function item of personal privacy information.