WO2016127448A1 - 系统切换方法、系统切换装置和终端 - Google Patents

系统切换方法、系统切换装置和终端 Download PDF

Info

Publication number
WO2016127448A1
WO2016127448A1 PCT/CN2015/073439 CN2015073439W WO2016127448A1 WO 2016127448 A1 WO2016127448 A1 WO 2016127448A1 CN 2015073439 W CN2015073439 W CN 2015073439W WO 2016127448 A1 WO2016127448 A1 WO 2016127448A1
Authority
WO
WIPO (PCT)
Prior art keywords
terminal
current
identification information
current system
information
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/CN2015/073439
Other languages
English (en)
French (fr)
Inventor
彭彬
叶瑞权
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Yulong Computer Telecommunication Scientific Shenzhen Co Ltd
Original Assignee
Yulong Computer Telecommunication Scientific Shenzhen Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Yulong Computer Telecommunication Scientific Shenzhen Co Ltd filed Critical Yulong Computer Telecommunication Scientific Shenzhen Co Ltd
Publication of WO2016127448A1 publication Critical patent/WO2016127448A1/zh
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2133—Verifying human interaction, e.g., Captcha
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2141—Access rights, e.g. capability lists, access control lists, access tables, access matrices

Definitions

  • the present invention relates to the field of terminal technologies, and in particular, to a system switching method, a system switching device, and a terminal.
  • the terminal has a Personal Private Domain system (PPD system) with a lower security level and a Secure Enterprise Domain system (SED system) with a higher security level.
  • PPD system Personal Private Domain system
  • SED system Secure Enterprise Domain system
  • the security domain system is secure.
  • the security domain system of the mechanism because the data of the user such as call, short message, schedule, recording, photography and related document data are all encrypted, the security domain system is highly secure, so the user's related privacy data is leaked. The risk is small, and the standard domain system is relatively low in terms of security performance.
  • it can be used to switch between the security domain system and the standard domain system according to the real-time requirements of the terminal.
  • the security of the system with a higher security level in the terminal is limited.
  • a standard domain system with a lower security level and a security domain system with a higher security level are installed on the terminal, and the user bound to the terminal is in the security domain system.
  • the terminal is used, for some reason, the user bound to the terminal leaves the terminal, and the terminal not only does not go out of the screen but also runs in the security domain system.
  • the data in the security domain system is easy. Leaked, reducing the user experience.
  • the present invention is based on the above problems, and proposes a new technical solution.
  • the terminal can be automatically switched to a system with a lower security level, thereby avoiding a higher security level of other users.
  • Data in a system or a system with a higher security level thereby preventing data in a system with a higher security level from being illegally leaked, thereby improving the security performance of the terminal.
  • an aspect of the present invention provides a system switching method for a terminal, where a plurality of systems are installed, the method includes: determining whether a terminal operating in the current system detects the first identity. Information, when the determination result is no, controlling the terminal to be switched by the current system to the target system; otherwise, controlling the terminal to continue to run in the current system; wherein the first identification information is The identification information of the user bound to the terminal, the target system being any other system whose security level is lower than the security level of the current system.
  • a terminal installed with multiple systems runs in a current system with a higher security level.
  • the first identity information pre-stored in the terminal When the first identity information pre-stored in the terminal is detected, it indicates that the user bound to the terminal is using the terminal when not detected.
  • the control terminal switches from the current system with a higher security level to the target system with a lower security level, thereby preventing the illegal user from using the security level.
  • Higher system or data in a system with a higher security level thereby preventing data in a system with a higher security level from being illegally leaked, thereby improving the security performance of the terminal.
  • users are bound to the terminal. Any user other than .
  • the method before the controlling the terminal to be switched to the target system by the current system, the method further includes: determining, when the terminal does not detect the first identity identification information, determining whether the terminal is The screen is off, and when the judgment result is no, the terminal is controlled to be switched from the current system to the target system; when the determination result is YES, the terminal is controlled to maintain the current running state.
  • the terminal when the terminal does not detect the first identity information, if the terminal does not go out, the terminal is switched from the current system to the target system, and the illegal user is prevented from using a system with a higher security level or a higher security level.
  • the data in the system if the terminal is off, the control terminal continues to stay in the current system, because the terminal is off, indicating that the user needs to input authentication information (such as verification password, user fingerprint, etc.) to enter the current system. Therefore, the terminal is kept in the current running state to ensure the security of the data in the terminal, and if the terminal is off the screen and then switched to the target system, Before the user enters the current system, the user must manually switch from the target system to the current system. Therefore, the terminal can stay in the current system after the terminal is off, so that the user can manually switch to the current system when the terminal is used again, thereby improving the user experience. .
  • the terminal switches to the target system, if the terminal re-detects the second identity information, determining the second identity information and the Whether an identity identification information matches, and determining, according to the determination result, whether the terminal can be directly switched by the target system to the current system.
  • the terminal may detect the second identification information, according to the second Whether the identity information matches the first identity information determines whether the terminal is directly switched by the target system to the current system.
  • the determining, according to the determination result, whether the terminal can be directly switched by the target system to the current system specifically, if the determining result is yes, if the terminal receives Switching to the current system by the target system, controlling the terminal to directly switch from the target system to the current system; if the determination result is no, if the terminal receives the target
  • the current user is prompted to input a system switching key, and when the system switching key is correct, the terminal is controlled to be switched by the target system to the current system; otherwise, The terminal is prohibited from being switched by the target system to the current system.
  • the current system with a higher security level specifically includes: if the second identity information matches the first identity information, indicating that the user who uses the terminal again is a user bound to the terminal, the terminal can directly switch from the target system to the current In the system, the user is prevented from manually switching to the current system, so that the terminal is more intelligent. If the second identity information does not match the first identity information, the user who uses the terminal again is another user, and the system switching key needs to be correctly input. The key can enter the current system with a higher security level to prevent unauthorized users from entering the system with higher security level, thus preventing the data in the system with higher security level from being illegally stolen by illegal users, thereby improving the security performance of the terminal. .
  • the first identity identification information and the second identity identification information comprise: user voice information, facial feature information, body impedance information, and human body infrared information bound to the terminal. At least one of finger pressure information and hand feature information.
  • the first identity information and the second identity information include, but are not limited to, voice information of the user bound to the terminal, facial feature information, body impedance information, human body infrared information, finger pressure information, hands
  • the at least one of the information of the part information enables the terminal to accurately identify, according to the first identity identification information and the second identity identification information, whether the user who uses the terminal is a user bound to the terminal, and prevents the illegal user from using the terminal, thereby preventing illegal
  • the user steals information from a system with a higher security level, thereby improving the security performance of the terminal.
  • Another aspect of the present invention provides a system switching apparatus for a terminal, wherein the terminal is installed with a plurality of systems, and the apparatus includes: a determining unit, determining whether the terminal operating in the current system detects the first identity The first control unit, when the determination result is no, the terminal is controlled to be switched by the current system to the target system; otherwise, the terminal is controlled to continue to run in the current system; wherein the first identity is The information is identification information of a user bound to the terminal, and the target system is any other system whose security level is lower than the security level of the current system.
  • a terminal installed with multiple systems runs in a current system with a higher security level.
  • the first identity information pre-stored in the terminal When the first identity information pre-stored in the terminal is detected, it indicates that the user bound to the terminal is using the terminal when not detected.
  • the control terminal switches from the current system with a higher security level to the target system with a lower security level, thereby preventing the illegal user from using the security level.
  • Higher system or data in a system with a higher security level thereby preventing data in a system with a higher security level from being illegally leaked, thereby improving the security performance of the terminal.
  • users are bound to the terminal. Any user other than .
  • the determining unit is further configured to: if it is determined that the terminal does not detect the first identity identification information, before controlling the terminal to switch to the target system by the current system, Determining whether the terminal is off; the first control unit is further configured to: when the determination result is no, control the terminal to be switched to the target system by the current system; when the determination result is yes, control the terminal Keep the current running state.
  • the terminal when the terminal does not detect the first identity information, if the terminal does not go out, the terminal is switched from the current system to the target system, and the illegal user is prevented from using the system with higher security level. If the terminal is out of the screen, the control terminal continues to stay in the current system, because the terminal is off, indicating that the user needs to input authentication information (such as verification password, user fingerprint, etc.) when the terminal is used again. In order to enter the current system, the terminal can maintain the current running state to ensure the security of the data in the terminal. In addition, if the terminal switches to the target system after the screen is off, the user must also go from the target system before entering the current system. Manually switch to the current system, so the terminal can stay in the current system after the screen is off, thus avoiding the user manually switching to the current system when the terminal is used again, thereby improving the user experience.
  • authentication information such as verification password, user fingerprint, etc.
  • the determining unit is further configured to: after the terminal switches to the target system, if the terminal re-detects the second identity information, determining the second identity Whether the information matches the first identification information, and according to the determination result, whether the terminal can be directly switched to the current system by the target system.
  • the terminal may detect the second identification information, according to the second Whether the identity information matches the first identity information determines whether the terminal is directly switched by the target system to the current system.
  • the determining unit includes: a second control unit, when the determining result is yes, if the terminal receives a switching command that is switched by the target system to the current system, then controlling The terminal is directly switched by the target system to the current system; when the determination result is no, if the terminal receives a handover command that is switched by the target system to the current system, the prompting current
  • the user inputs a system switching key; the processing unit controls the terminal to be switched by the target system to the current system when the system switching key is correct, otherwise, prohibiting the terminal from being switched to the target system by the target system The current system.
  • the current system with a higher security level specifically includes: if the second identity information matches the first identity information, indicating that the user who uses the terminal again is a user bound to the terminal, the terminal can directly switch from the target system to the current In the system, the user is prevented from manually switching to the current system, so that the terminal is more intelligent. If the second identity information does not match the first identity information, the user who uses the terminal again is another user, and the system switching key needs to be correctly input. The key can enter the security In the current system with higher level, the illegal users are prevented from entering the system with higher security level, so that the data in the system with higher security level is prevented from being illegally stolen by illegal users, thereby improving the security performance of the terminal.
  • the first identity identification information and the second identity identification information comprise: user voice information, facial feature information, body impedance information, and human body infrared information bound to the terminal. At least one of finger pressure information and hand feature information.
  • the first identity information and the second identity information include, but are not limited to, voice information of the user bound to the terminal, facial feature information, body impedance information, human body infrared information, finger pressure information, hands
  • the at least one of the information of the part information enables the terminal to accurately identify, according to the first identity identification information and the second identity identification information, whether the user who uses the terminal is a user bound to the terminal, and prevents the illegal user from using the terminal, thereby preventing illegal
  • the user steals information from a system with a higher security level, thereby improving the security performance of the terminal.
  • a further aspect of the present invention provides a terminal comprising the system switching device according to any of the above aspects.
  • the terminal with multiple systems is installed in the current system with a higher security level.
  • the control terminal switches from the current system with a higher security level to the security level.
  • illegal users are prevented from using data in a system with a higher security level or a system with a higher security level, thereby preventing data in a system with a higher security level from being illegally leaked, thereby improving the security performance of the terminal.
  • other users are any users other than the user bound to the terminal.
  • the terminal when the user bound to the terminal leaves the terminal, the terminal can be automatically switched to a system with a lower security level to prevent the illegal user from using a system with a higher security level or a system with a higher security level.
  • the data prevents the data in the system with higher security level from being illegally leaked, thereby improving the security performance of the terminal.
  • FIG. 1 is a flow chart showing a system switching method according to an embodiment of the present invention
  • FIG. 2 is a flow chart showing a system switching method according to another embodiment of the present invention.
  • FIG. 3 is a block diagram showing the structure of a system switching apparatus according to an embodiment of the present invention.
  • FIG. 4 is a schematic structural diagram of a terminal according to an embodiment of the present invention.
  • FIG. 5 is a block diagram showing the structure of a terminal according to another embodiment of the present invention.
  • FIG. 1 is a flow chart showing a system switching method according to an embodiment of the present invention.
  • a system switching method includes:
  • Step 102 It is determined whether the terminal running in the current system detects the first identity identification information, and if the determination result is no, the terminal is controlled to be switched by the current system to the target system; otherwise, the terminal is controlled to continue to run in the terminal.
  • the current system wherein the first identity identification information is identity identification information of a user bound to the terminal, and the target system is any other system whose security level is lower than a security level of the current system.
  • a terminal installed with multiple systems runs in a current system with a higher security level.
  • the first identity information pre-stored in the terminal When the first identity information pre-stored in the terminal is detected, it indicates that the user bound to the terminal is using the terminal when not detected.
  • the control terminal switches from the current system with a higher security level to the target system with a lower security level, thereby preventing the illegal user from using the security level.
  • Higher system or data in a system with a higher security level thereby preventing data in a system with a higher security level from being illegally leaked, thereby improving the security performance of the terminal.
  • users are bound to the terminal. Any user other than .
  • the method before the controlling the terminal to be switched to the target system by the current system, the method further includes: determining, when the terminal does not detect the first identity identification information, determining whether the terminal is The screen is off, and when the judgment result is no, the terminal is controlled to be switched from the current system to the target system; when the determination result is YES, the terminal is controlled to maintain the current running state.
  • the terminal when the terminal does not detect the first identity information, if the terminal does not go out, the terminal is switched from the current system to the target system, and the illegal user is prevented from using a system with a higher security level or a higher security level.
  • the data in the system if the terminal is off, the control terminal continues to stay in the current system, because the terminal is off, indicating that the user needs to input authentication information (such as verification password, user fingerprint, etc.) to enter the current system. Therefore, the terminal maintains the current running state to ensure the security of the data in the terminal.
  • the terminal switches to the target system after the screen is off, the user must manually switch from the target system to the current system before entering the current system. Therefore, after the terminal is off the screen, it can stay in the current system, thereby avoiding the user manually switching to the current system when the terminal is used again, thereby improving the user experience.
  • the terminal switches to the target system, if the terminal re-detects the second identity information, determining the second identity information and the Whether an identity identification information matches, and determining, according to the determination result, whether the terminal can be directly switched by the target system to the current system.
  • the terminal may detect the second identification information, according to the second Whether the identity information matches the first identity information determines whether the terminal is directly switched by the target system to the current system.
  • the determining, according to the determination result, whether the terminal can be directly switched by the target system to the current system specifically, if the determining result is yes, if the terminal receives Switching to the current system by the target system, controlling the terminal to directly switch from the target system to the current system; if the determination result is no, if the terminal receives the target
  • the current user is prompted to input a system switching key, and when the system switching key is correct, the terminal is controlled to be switched by the target system to the current system; otherwise, The terminal is prohibited from being switched by the target system to the current system.
  • the terminal after the user bound to the terminal leaves the terminal, there are users (including: users bound to the terminal and other users) to use the terminal again, and whether the terminal can be directly switched to the target system with a lower security level to
  • the current system with a higher security level specifically includes: if the second identity information matches the first identity information, the user who uses the terminal again is a user bound to the terminal, The terminal can be directly switched from the target system to the current system, so as to prevent the user from manually switching to the current system, so that the terminal is more intelligent. If the second identity information does not match the first identity information, the terminal user is used again.
  • the first identity identification information and the second identity identification information comprise: user voice information, facial feature information, body impedance information, and human body infrared information bound to the terminal. At least one of finger pressure information and hand feature information.
  • the first identity information and the second identity information include, but are not limited to, voice information of the user bound to the terminal, facial feature information, body impedance information, human body infrared information, finger pressure information, hands
  • the at least one type of information of the part information enables the terminal to accurately identify, according to the first identity identification information and the second identity identification information, whether the user who uses the terminal is a user bound to the terminal, and prevents the illegal user from using the security level.
  • a high system terminal thereby preventing illegal users from stealing information in a system with a higher security level, thereby improving the security performance of the terminal.
  • FIG. 2 is a flow chart showing a system switching method according to another embodiment of the present invention.
  • a system switching method according to another embodiment of the present invention (in this embodiment, the terminal is a mobile phone, and a dual system is installed on the mobile phone, that is, a standard domain system with a lower security level and a higher security level.
  • Security domain system including:
  • Step 202 The mobile phone runs in a secure domain system (current system), so that the user bound to the mobile phone uses the mobile phone in the secure domain system.
  • a secure domain system current system
  • Step 204 The virtual layer virtual machine security monitoring mechanism is used to detect whether the user bound to the mobile phone leaves the mobile phone (determining whether the terminal running the current system detects the first identity identification information). When the determination result is yes, the process proceeds to step 206. When the result of the determination is no, the process proceeds to step 202.
  • step 206 it is detected that the user bound to the mobile phone leaves the mobile phone, and the virtual machine is automatically switched to the standard domain system with a lower security level by the security domain system with higher security level.
  • Step 208 Since the user bound to the mobile phone leaves the mobile phone, the mobile phone runs in a standard domain system with a lower security level, and prevents other users from using the mobile phone running in a security system with a higher security level.
  • Step 210 When a user uses the mobile phone again, it is determined whether the user who uses the mobile phone is a user bound to the mobile phone (determining whether the second identification information matches the first identification information), and when the determination result is yes, the step is entered. 212. When the determination result is no, the process proceeds to step 208.
  • Step 212 After the user bound to the mobile phone leaves the mobile phone, the mobile phone is used again, and the virtual machine automatically switches the mobile phone from the standard domain system to the secure domain system, so that the user bound to the mobile phone continues to use the mobile phone in the secure domain system.
  • FIG. 3 is a block diagram showing the structure of a system switching apparatus according to an embodiment of the present invention.
  • a system switching apparatus 300 is used for a terminal, and a plurality of systems are installed on the terminal.
  • the apparatus includes: a determining unit 302, determining whether a terminal running in the current system is Detecting the first identification information; the first control unit 304, when the determination result is no, controlling the terminal to be switched to the target system by the current system; otherwise, controlling the terminal to continue to run in the current system;
  • the first identity identification information is identity identification information of a user that is bound to the terminal, and the target system is any other system whose security level is lower than a security level of the current system.
  • a terminal installed with multiple systems runs in a current system with a higher security level.
  • the first identity information pre-stored in the terminal When the first identity information pre-stored in the terminal is detected, it indicates that the user bound to the terminal is using the terminal when not detected.
  • the control terminal switches from the current system with a higher security level to the target system with a lower security level, thereby preventing the illegal user from using the security level.
  • Higher system or data in a system with a higher security level thereby preventing data in a system with a higher security level from being illegally leaked, thereby improving the security performance of the terminal.
  • users are bound to the terminal. Any user other than .
  • the determining unit 302 is further configured to: if it is determined that the terminal does not detect the first identity identification information, before controlling the terminal to be switched by the current system to the target system, Determining whether the terminal is off the screen; the first control unit 304 is further configured to: when the determination result is no, control the terminal to be switched to the target system by the current system; when the determination result is yes, the control center The terminal maintains the current running state.
  • the terminal when the terminal does not detect the first identity information, if the terminal does not go out, the terminal is switched from the current system to the target system, and the illegal user is prevented from using a system with a higher security level or a higher security level.
  • the data in the system if the terminal is off, the control terminal continues to stay in the In the pre-system, because the terminal is off, the user needs to input authentication information (such as verification password, user fingerprint, etc.) to enter the current system. Therefore, the terminal maintains the current running state to ensure the security of the data in the terminal.
  • the terminal if the terminal is switched to the target system after the screen is off, the user must manually switch from the target system to the current system before entering the current system, so the terminal can remain in the current system after the screen is off, thereby avoiding When the user uses the terminal again, he manually switches to the current system, thereby improving the user experience.
  • the determining unit 302 is further configured to: after the terminal switches to the target system, if the terminal re-detects the second identity information, determining the second identity Whether the identification information matches the first identification information, and according to the determination result, whether the terminal can be directly switched to the current system by the target system.
  • the terminal may detect the second identification information, according to the second Whether the identity information matches the first identity information determines whether the terminal is directly switched by the target system to the current system.
  • the determining unit 302 includes: a second control unit 3022, when the determination result is yes, if the terminal receives a switching command that is switched by the target system to the current system, Controlling the terminal to be directly switched by the target system to the current system; the prompting unit 3024, when the determination result is no, if the terminal receives the switching command that is switched by the target system to the current system, Then prompting the current user to input a system switching key; the processing unit 3026, when the system switching key is correct, controlling the terminal to be switched by the target system to the current system; otherwise, prohibiting the terminal from being targeted by the target The system switches to the current system.
  • the current system with a higher security level specifically includes: if the second identity information matches the first identity information, indicating that the user who uses the terminal again is a user bound to the terminal, the terminal can directly switch from the target system to the current In the system, the user is prevented from manually switching to the current system, so that the terminal is more intelligent. If the second identity information does not match the first identity information, the user who uses the terminal again is another user, and the system switching key needs to be correctly input. The key can enter the current system with higher security level, preventing illegal users from entering the system with higher security level, thus The data in the system with higher security level is prevented from being illegally stolen by illegal users, thereby improving the security performance of the terminal.
  • the first identity identification information and the second identity identification information comprise: user voice information, facial feature information, body impedance information, and human body infrared information bound to the terminal. At least one of finger pressure information and hand feature information.
  • the first identity information and the second identity information include, but are not limited to, voice information of the user bound to the terminal, facial feature information, body impedance information, human body infrared information, finger pressure information, hands
  • the at least one of the information of the part information enables the terminal to accurately identify, according to the first identity identification information and the second identity identification information, whether the user who uses the terminal is a user bound to the terminal, and prevents the illegal user from using the terminal, thereby preventing illegal
  • the user steals information from a system with a higher security level, thereby improving the security performance of the terminal.
  • FIG. 4 shows a schematic structural diagram of a terminal according to an embodiment of the present invention.
  • a terminal 400 includes the system switching apparatus 300 according to any one of the above aspects.
  • the terminal 400 installed with multiple systems operates in the current system with a higher security level.
  • the control terminal 400 switches from the current system with a higher security level.
  • other users are prevented from using the terminal 400 running in the system with higher security level, thereby preventing data in the system with higher security level from being illegally leaked, thereby improving the security performance of the terminal 400.
  • other users are users other than the user bound to the terminal 400.
  • FIG. 5 is a schematic structural diagram of a terminal according to another embodiment of the present invention, where a plurality of systems are installed on the terminal; as shown in FIG. 5, the terminal 5 may include: at least one processor 51, such as a CPU. At least one communication bus 52 and memory 53; the processor 51 can be combined with the system switching device 300 shown in FIG. 3; the communication bus 52 is used to implement connection communication between these components; the memory 53 can be a high-speed RAM memory, or can be non-easy Non-volatile memory, such as at least one disk storage. A set of program codes is stored in the memory 53, and the processor 51 is configured to call the program code stored in the memory 53 for performing the following operations:
  • the terminal running in the current system Determining whether the terminal running in the current system detects the first identification information, and if the determination result is no, controlling the terminal to switch from the current system to the target system; otherwise, controlling the terminal to continue Continuing to run in the current system; wherein the first identification information is identity identification information of a user bound to the terminal, and the target system is other security level lower than a security level of the current system Any system.
  • processor 51 may further perform the following operations before controlling the terminal to switch from the current system to the target system:
  • the terminal When it is determined that the terminal does not detect the first identity identification information, determine whether the terminal is off, and if the determination result is no, control the terminal to switch from the current system to the target system; When yes, the terminal is controlled to maintain the current operating state.
  • the processor 51 may further perform the following operations:
  • Determining whether the second identity identification information matches the first identity identification information and determining, according to the determination result, whether the terminal can be directly switched by the target system to the current system.
  • the processor 51 determines, according to the determination result, whether the terminal can be directly switched to the current system by the target system, and specifically includes:
  • the terminal receives a handover command that is switched by the target system to the current system, the terminal is controlled to be directly switched by the target system to the current system;
  • the terminal receives the handover command that is switched by the target system to the current system, prompting the current user to input the system handover key, and when the system switching key is correct, controlling The terminal is handed over to the current system by the target system, otherwise the terminal is prohibited from being switched by the target system to the current system.
  • the first identity identification information and the second identity identification information include: user voice information, facial feature information, body impedance information, human body infrared information, finger pressure information, and hand binding with the terminal. At least one of the feature information.
  • the terminal can be automatically switched to a system with a lower security level to prevent the illegal user from using a system with higher security level or security.
  • Data in a higher-level system thereby preventing data in a system with a higher security level from being illegally leaked, thereby improving the security performance of the terminal.

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Telephone Function (AREA)

Abstract

本发明提出了一种系统切换方法、一种系统切换装置和一种终端，其中，所述系统切换方法包括：判断运行在当前系统的终端是否检测到第一身份识别信息，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。通过本发明的技术方案，当与终端绑定的用户离开终端时，可以使终端自动切换至安全等级较低的系统中，避免其他用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到泄露，进而提升终端的安全性能。

Description

系统切换方法、系统切换装置和终端
本申请要求于2015年02月10日提交中国专利局，申请号为CN201510069877.0、发明名称为“系统切换方法、系统切换装置和终端”的中国专利申请的优先权，其全部内容通过引用结合在本申请中。
技术领域
本发明涉及终端技术领域，具体而言，涉及一种系统切换方法、系统切换装置和一种终端。
背景技术
目前，随着技术的发展，一个终端上可以同时运行两个独立的系统，且这两个系统之间可以互相通信，但是两个系统在功能和安全性等方面有所不同。例如，终端上安装有安全等级较低的标准域(Personal Private Domain)系统(简称PPD系统)和安全等级较高的安全域(Secure Enterprise Domain)系统(简称SED系统)，安全域系统是含有安全机制的安全域系统，由于通话、短信、日程、录音、照相和相关文档数据等用户的数据都是经过加密处理的，安全域系统的安全性很高，因此用户的相关隐私的数据遭到泄漏的风险很小，而标准域系统在安全性能方面就比较低，另外，用于可以根据对终端的实时需求在安全域系统和标准域系统之间进行切换。
但是，终端中安全等级较高的系统的安全性有限，例如，终端上安装有安全等级较低的标准域系统和安全等级较高的安全域系统，当与终端绑定的用户在安全域系统中使用终端时，由于某种原因，与终端绑定的用户离开终端，且终端不仅未灭屏还在安全域系统中运行，此时若其他用户使用终端，则安全域系统中的数据很容易遭到泄漏，降低了用户体验。
因此，当与终端绑定的用户离开终端时，如何避免终端中安全等级较高的系统中的数据遭到泄漏成为亟待解决的问题。
发明内容
本发明正是基于上述问题，提出了一种新的技术方案，当与终端绑定的用户离开终端时，可以使终端自动切换至安全等级较低的系统中，避免其他用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能。
有鉴于此，本发明的一方面提出了一种系统切换方法，用于终端，所述终端上安装有多个系统，所述方法包括：判断运行在当前系统的终端是否检测到第一身份识别信息，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
在该技术方案中，安装有多系统的终端运行在安全等级较高的当前系统中，当检测到终端中预存的第一身份信息时，说明与终端绑定的用户在使用终端，当未检测到终端中预存的第一身份信息时，说明与终端绑定的用户已经离开终端，则控制终端从安全等级较高的当前系统切换至安全等级较低的目标系统中，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能，其中，其他用户为除与终端绑定的用户以外的任一用户。
在上述技术方案中，优选地，在控制所述终端由所述当前系统切换至目标系统之前，还包括：在判定所述终端未检测到所述第一身份识别信息时，判断所述终端是否灭屏，并在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
在该技术方案中，当终端未检测到第一身份识别信息时，如果终端没有灭屏，则终端由当前系统切换至目标系统，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，如果终端灭屏，则控制终端继续停留在当前系统中，因为终端灭屏说明用户再次使用终端时需要输入验证信息(如验证密码、用户指纹等)才能进入到当前系统中，所以终端保持在当前运行状态可以保证终端中数据的安全，除此之外，如果终端灭屏后切换至目标系统中，则 用户进入当前系统之前，还要从目标系统手动切换至当前系统中，所以终端灭屏后继续停留在当前系统中即可，从而避免用户再次使用终端时手动切换至当前系统中，从而提升用户体验。
在上述技术方案中，优选地，还包括：在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，则判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统。
在该技术方案中，终端切换至安全等级较低的目标系统后，如果有用户(包括：与终端绑定的用户和其他用户)使用终端，终端可以检测到第二身份识别信息，根据第二身份信息与第一身份识别信息是否匹配，确定终端是否直接由目标系统切换至当前系统中。
在上述技术方案中，优选地，所述根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统，具体包括：在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；在判断结果为否时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则提示当前用户输入系统切换密钥，并在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
在该技术方案中，当与终端绑定的用户离开终端后，有用户(包括：与终端绑定的用户和其他用户)再次使用终端，终端是否能够直接由安全等级较低的目标系统切换至安全等级较高的当前系统，具体包括：如果第二身份信息与第一身份识别信息之间匹配，说明再次使用终端的用户为与终端绑定的用户，则终端可以直接由目标系统切换至当前系统中，避免用户手动切换至当前系统中，从而使终端更加智能，如果第二身份信息与第一身份识别信息之间不匹配，说明再次使用终端的用户为其他用户，需要正确输入系统切换密钥才能进入安全等级较高的当前系统中，防止非法用户进入到安全等级较高的系统中，从而避免安全等级较高的系统中的数据遭到非法用户的非法窃取，进而提升终端的安全性能。
在上述技术方案中，优选地，所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
在该技术方案中，第一身份识别信息和第二身份识别信息包括但不限于：与终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息，使终端可以根据第一身份识别信息和第二身份识别信息准确地辨认使用终端的用户是否为与终端绑定的用户，避免非法用户使用终端，从而防止非法用户窃取安全等级较高的系统中的信息，进而提升终端的安全性能。
本发明的另一方面提出了一种系统切换装置，用于终端，所述终端上安装有多个系统，所述装置包括：判断单元，判断运行在当前系统的终端是否检测到第一身份识别信息；第一控制单元，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
在该技术方案中，安装有多系统的终端运行在安全等级较高的当前系统中，当检测到终端中预存的第一身份信息时，说明与终端绑定的用户在使用终端，当未检测到终端中预存的第一身份信息时，说明与终端绑定的用户已经离开终端，则控制终端从安全等级较高的当前系统切换至安全等级较低的目标系统中，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能，其中，其他用户为除与终端绑定的用户以外的任一用户。
在上述技术方案中，优选地，所述判断单元还用于：在控制所述终端由所述当前系统切换至目标系统之前，若判定所述终端未检测到所述第一身份识别信息，则判断所述终端是否灭屏；所述第一控制单元还用于：在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
在该技术方案中，当终端未检测到第一身份识别信息时，如果终端没有灭屏，则终端由当前系统切换至目标系统，避免非法用户使用安全等级较高的系 统或安全等级较高的系统中的数据，如果终端灭屏，则控制终端继续停留在当前系统中，因为终端灭屏说明用户再次使用终端时需要输入验证信息(如验证密码、用户指纹等)才能进入到当前系统中，所以终端保持在当前运行状态可以保证终端中数据的安全，除此之外，如果终端灭屏后切换至目标系统中，则用户进入当前系统之前，还要从目标系统手动切换至当前系统中，所以终端灭屏后继续停留在当前系统中即可，从而避免用户再次使用终端时手动切换至当前系统中，从而提升用户体验。
在上述技术方案中，优选地，所述判断单元还用于：在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，则判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来控制所述终端是否能够直接由所述目标系统切换至所述当前系统。
在该技术方案中，终端切换至安全等级较低的目标系统后，如果有用户(包括：与终端绑定的用户和其他用户)使用终端，终端可以检测到第二身份识别信息，根据第二身份信息与第一身份识别信息是否匹配，确定终端是否直接由目标系统切换至当前系统中。
在上述技术方案中，优选地，所述判断单元包括：第二控制单元，在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；提示单元，在判断结果为否时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则提示当前用户输入系统切换密钥；处理单元，在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
在该技术方案中，当与终端绑定的用户离开终端后，有用户(包括：与终端绑定的用户和其他用户)再次使用终端，终端是否能够直接由安全等级较低的目标系统切换至安全等级较高的当前系统，具体包括：如果第二身份信息与第一身份识别信息之间匹配，说明再次使用终端的用户为与终端绑定的用户，则终端可以直接由目标系统切换至当前系统中，避免用户手动切换至当前系统中，从而使终端更加智能，如果第二身份信息与第一身份识别信息之间不匹配，说明再次使用终端的用户为其他用户，需要正确输入系统切换密钥才能进入安 全等级较高的当前系统中，防止非法用户进入到安全等级较高的系统中，从而避免安全等级较高的系统中的数据遭到非法用户的非法窃取，进而提升终端的安全性能。
在上述技术方案中，优选地，所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
在该技术方案中，第一身份识别信息和第二身份识别信息包括但不限于：与终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息，使终端可以根据第一身份识别信息和第二身份识别信息准确地辨认使用终端的用户是否为与终端绑定的用户，避免非法用户使用终端，从而防止非法用户窃取安全等级较高的系统中的信息，进而提升终端的安全性能。
本发明的又一方面提出了一种终端，包括如上述任一项技术方案所述的系统切换装置。
在该技术方案中，安装有多系统的终端运行在安全等级较高的当前系统中，当与终端绑定的用户已经离开终端，则控制终端从安全等级较高的当前系统切换至安全等级较低的目标系统中，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能，其中，其他用户为除与终端绑定的用户以外的任一用户。
通过本发明的技术方案，当与终端绑定的用户离开终端时，可以使终端自动切换至安全等级较低的系统中，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能。
附图说明
图1示出了根据本发明的一个实施例的系统切换方法的流程示意图；
图2示出了根据本发明的另一个实施例的系统切换方法的流程示意图；
图3示出了根据本发明的一个实施例的系统切换装置的结构示意图；
图4示出了根据本发明的一个实施例的终端的结构示意图；
图5示出了根据本发明的另一个实施例的终端的结构示意图。
具体实施方式
为了可以更清楚地理解本发明的上述目的、特征和优点，下面结合附图和具体实施方式对本发明进行进一步的详细描述。需要说明的是，在不冲突的情况下，本申请的实施例及实施例中的特征可以相互组合。
在下面的描述中阐述了很多具体细节以便于充分理解本发明，但是，本发明还可以采用其他不同于在此描述的其他方式来实施，因此，本发明的保护范围并不受下面公开的具体实施例的限制。
图1示出了根据本发明的一个实施例的系统切换方法的流程示意图。
如图1所示，根据本发明的一个实施例的系统切换方法，包括：
步骤102，判断运行在当前系统的终端是否检测到第一身份识别信息，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
在该技术方案中，安装有多系统的终端运行在安全等级较高的当前系统中，当检测到终端中预存的第一身份信息时，说明与终端绑定的用户在使用终端，当未检测到终端中预存的第一身份信息时，说明与终端绑定的用户已经离开终端，则控制终端从安全等级较高的当前系统切换至安全等级较低的目标系统中，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能，其中，其他用户为除与终端绑定的用户以外的任一用户。
在上述技术方案中，优选地，在控制所述终端由所述当前系统切换至目标系统之前，还包括：在判定所述终端未检测到所述第一身份识别信息时，判断所述终端是否灭屏，并在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
在该技术方案中，当终端未检测到第一身份识别信息时，如果终端没有灭屏，则终端由当前系统切换至目标系统，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，如果终端灭屏，则控制终端继续停留在当前系统中，因为终端灭屏说明用户再次使用终端时需要输入验证信息(如验证密码、用户指纹等)才能进入到当前系统中，所以终端保持在当前运行状态可以保证终端中数据的安全，除此之外，如果终端灭屏后切换至目标系统中，则用户进入当前系统之前，还要从目标系统手动切换至当前系统中，所以终端灭屏后继续停留在当前系统中即可，从而避免用户再次使用终端时手动切换至当前系统中，从而提升用户体验。
在上述技术方案中，优选地，还包括：在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，则判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统。
在该技术方案中，终端切换至安全等级较低的目标系统后，如果有用户(包括：与终端绑定的用户和其他用户)使用终端，终端可以检测到第二身份识别信息，根据第二身份信息与第一身份识别信息是否匹配，确定终端是否直接由目标系统切换至当前系统中。
在上述技术方案中，优选地，所述根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统，具体包括：在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；在判断结果为否时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则提示当前用户输入系统切换密钥，并在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
在该技术方案中，当与终端绑定的用户离开终端后，有用户(包括：与终端绑定的用户和其他用户)再次使用终端，终端是否能够直接由安全等级较低的目标系统切换至安全等级较高的当前系统，具体包括：如果第二身份信息与第一身份识别信息之间匹配，说明再次使用终端的用户为与终端绑定的用户， 则终端可以直接由目标系统切换至当前系统中，避免用户手动切换至当前系统中，从而使终端更加智能，如果第二身份信息与第一身份识别信息之间不匹配，说明再次使用终端的用户为其他用户，需要正确输入系统切换密钥才能进入安全等级较高的当前系统中，防止非法用户进入到安全等级较高的系统中，从而避免安全等级较高的系统中的数据遭到非法用户的非法窃取，进而提升终端的安全性能。
在上述技术方案中，优选地，所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
在该技术方案中，第一身份识别信息和第二身份识别信息包括但不限于：与终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息，使终端可以根据第一身份识别信息和第二身份识别信息准确地辨认使用终端的用户是否为与终端绑定的用户，避免非法用户使用运行在安全等级较高的系统的终端，从而防止非法用户窃取安全等级较高的系统中的信息，进而提升终端的安全性能。
图2示出了根据本发明的另一个实施例的系统切换方法的流程示意图。
如图2所示，根据本发明的另一个实施例的系统切换方法(在该实施例中，终端为手机，手机上安装有双系统，即安全等级较低的标准域系统和安全等级较高的安全域系统)，包括：
步骤202，手机运行在安全域系统(当前系统)中，以供与手机绑定的用户在安全域系统中使用手机。
步骤204，使用虚拟层虚拟机安全监测机制检测与手机绑定的用户是否离开手机(判断运行在当前系统的终端是否检测到第一身份识别信息)，当判断结果为是时，进入步骤206，当判断结果为否时，进入步骤202。
步骤206，检测到与手机绑定的用户离开手机，则虚拟机由安全等级较高的安全域系统自动切换到安全等级较低的标准域系统。
步骤208，由于与手机绑定的用户离开手机，则手机运行在安全等级较低的标准域系统中，避免其他用户使用运行在安全等级较高的安全系统中的手机。
步骤210，当有用户再次使用手机时，判断使用手机的用户是否为与手机绑定的用户(判断第二身份识别信息与第一身份识别信息是否匹配)，当判断结果为是时，进入步骤212，当判断结果为否时，进入步骤208。
步骤212，与手机绑定的用户离开手机后，再次使用手机，虚拟机将手机从标准域系统自动切换到安全域系统，以供与手机绑定的用户继续在安全域系统中使用手机。
图3示出了根据本发明的一个实施例的系统切换装置的结构示意图。
如图3所示，根据本发明的一个实施例的系统切换装置300，用于终端，所述终端上安装有多个系统，所述装置包括：判断单元302，判断运行在当前系统的终端是否检测到第一身份识别信息；第一控制单元304，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
在该技术方案中，安装有多系统的终端运行在安全等级较高的当前系统中，当检测到终端中预存的第一身份信息时，说明与终端绑定的用户在使用终端，当未检测到终端中预存的第一身份信息时，说明与终端绑定的用户已经离开终端，则控制终端从安全等级较高的当前系统切换至安全等级较低的目标系统中，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能，其中，其他用户为除与终端绑定的用户以外的任一用户。
在上述技术方案中，优选地，所述判断单元302还用于：在控制所述终端由所述当前系统切换至目标系统之前，若判定所述终端未检测到所述第一身份识别信息，则判断所述终端是否灭屏；所述第一控制单元304还用于：在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
在该技术方案中，当终端未检测到第一身份识别信息时，如果终端没有灭屏，则终端由当前系统切换至目标系统，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，如果终端灭屏，则控制终端继续停留在当 前系统中，因为终端灭屏说明用户再次使用终端时需要输入验证信息(如验证密码、用户指纹等)才能进入到当前系统中，所以终端保持在当前运行状态可以保证终端中数据的安全，除此之外，如果终端灭屏后切换至目标系统中，则用户进入当前系统之前，还要从目标系统手动切换至当前系统中，所以终端灭屏后继续停留在当前系统中即可，从而避免用户再次使用终端时手动切换至当前系统中，从而提升用户体验。
在上述技术方案中，优选地，所述判断单元302还用于：在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，则判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来控制所述终端是否能够直接由所述目标系统切换至所述当前系统。
在该技术方案中，终端切换至安全等级较低的目标系统后，如果有用户(包括：与终端绑定的用户和其他用户)使用终端，终端可以检测到第二身份识别信息，根据第二身份信息与第一身份识别信息是否匹配，确定终端是否直接由目标系统切换至当前系统中。
在上述技术方案中，优选地，所述判断单元302包括：第二控制单元3022，在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；提示单元3024，在判断结果为否时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则提示当前用户输入系统切换密钥；处理单元3026，在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
在该技术方案中，当与终端绑定的用户离开终端后，有用户(包括：与终端绑定的用户和其他用户)再次使用终端，终端是否能够直接由安全等级较低的目标系统切换至安全等级较高的当前系统，具体包括：如果第二身份信息与第一身份识别信息之间匹配，说明再次使用终端的用户为与终端绑定的用户，则终端可以直接由目标系统切换至当前系统中，避免用户手动切换至当前系统中，从而使终端更加智能，如果第二身份信息与第一身份识别信息之间不匹配，说明再次使用终端的用户为其他用户，需要正确输入系统切换密钥才能进入安全等级较高的当前系统中，防止非法用户进入到安全等级较高的系统中，从而 避免安全等级较高的系统中的数据遭到非法用户的非法窃取，进而提升终端的安全性能。
在上述技术方案中，优选地，所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
在该技术方案中，第一身份识别信息和第二身份识别信息包括但不限于：与终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息，使终端可以根据第一身份识别信息和第二身份识别信息准确地辨认使用终端的用户是否为与终端绑定的用户，避免非法用户使用终端，从而防止非法用户窃取安全等级较高的系统中的信息，进而提升终端的安全性能。
图4示出了根据本发明的一个实施例的终端的结构示意图。
如图4所示，根据本发明的一个实施例的终端400，包括如上述任一项技术方案所述的系统切换装置300。
在该技术方案中，安装有多系统的终端400运行在安全等级较高的当前系统中，当与终端400绑定的用户已经离开终端400，则控制终端400从安全等级较高的当前系统切换至安全等级较低的目标系统中，避免其他用户使用运行在安全等级较高的系统中的终端400，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端400的安全性能，其中，其他用户为除与终端400绑定的用户以外的用户。
图5示出了根据本发明的另一个实施例的终端的结构示意图，所述终端上安装有多个系统；如图5所示，该终端5可以包括：至少一个处理器51，例如CPU，至少一个通信总线52以及存储器53；处理器51可以结合图3所示的系统切换装置300；通信总线52用于实现这些组件之间的连接通信；存储器53可以是高速RAM存储器，也可以是非易失性存储器(non-volatile memory)，例如至少一个磁盘存储器。存储器53中存储一组程序代码，且处理器51用于调用存储器53中存储的程序代码，用于执行以下操作：
判断运行在当前系统的终端是否检测到第一身份识别信息，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继 续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
进一步的，所述处理器51在控制所述终端由所述当前系统切换至目标系统之前，还可以执行以下操作：
在判定所述终端未检测到所述第一身份识别信息时，判断所述终端是否灭屏，并在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
再进一步的，所述处理器51在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，还可以执行以下操作：
判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统。
在一种可选的实施方式中，所述处理器51根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统，具体可以包括：
在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；
在判断结果为否时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则提示当前用户输入系统切换密钥，并在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
其中，所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
以上结合附图详细说明了本发明的技术方案，当与终端绑定的用户离开终端时，可以使终端自动切换至安全等级较低的系统中，避免非法用户使用安全等级较高的系统或安全等级较高的系统中的数据，从而防止安全等级较高的系统中的数据遭到非法泄露，进而提升终端的安全性能。
以上所述仅为本发明的优选实施例而已，并不用于限制本发明，对于本领 域的技术人员来说，本发明可以有各种更改和变化。凡在本发明的精神和原则之内，所作的任何修改、等同替换、改进等，均应包含在本发明的保护范围之内。

Claims (15)

  1. 一种系统切换方法，用于终端，其特征在于，所述终端上安装有多个系统，所述方法包括：
    判断运行在当前系统的终端是否检测到第一身份识别信息，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
  2. 根据权利要求1所述的系统切换方法，其特征在于，
    在控制所述终端由所述当前系统切换至目标系统之前，还包括：
    在判定所述终端未检测到所述第一身份识别信息时，判断所述终端是否灭屏，并在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
  3. 根据权利要求1所述的系统切换方法，其特征在于，还包括：
    在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，则判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统。
  4. 根据权利要求3所述的系统切换方法，其特征在于，
    所述根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统，具体包括：
    在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；
    在判断结果为否时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则提示当前用户输入系统切换密钥，并在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
  5. 根据权利要求1至4中任一项所述的系统切换方法，其特征在于，
    所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
  6. 一种系统切换装置，用于终端，其特征在于，所述终端上安装有多个系统，所述装置包括：
    判断单元，判断运行在当前系统的终端是否检测到第一身份识别信息；
    第一控制单元，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
  7. 根据权利要求6所述的系统切换装置，其特征在于，
    所述判断单元还用于：
    在控制所述终端由所述当前系统切换至目标系统之前，若判定所述终端未检测到所述第一身份识别信息，则判断所述终端是否灭屏；
    所述第一控制单元还用于：
    在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
  8. 根据权利要求6所述的系统切换装置，其特征在于，
    所述判断单元还用于：
    在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，则判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来控制所述终端是否能够直接由所述目标系统切换至所述当前系统。
  9. 根据权利要求8所述的系统切换装置，其特征在于，
    所述判断单元包括：
    第二控制单元，在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；
    提示单元，在判断结果为否时，若所述终端接收到由所述目标系统切换至 所述当前系统的切换命令，则提示当前用户输入系统切换密钥；
    处理单元，在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
  10. 根据权利要求6至9中任一项所述的系统切换装置，其特征在于，
    所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
  11. 一种终端，所述终端上安装有多个系统，其特征在于，所述终端包括：处理器和存储器，其中，所述存储器中存储一组程序代码，且所述处理器用于调用所述存储器中存储的程序代码，用于执行以下操作：
    判断运行在当前系统的终端是否检测到第一身份识别信息，在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；否则，控制所述终端继续运行在所述当前系统；其中，所述第一身份识别信息为与所述终端相绑定的用户的身份识别信息，所述目标系统为安全等级低于所述当前系统的安全等级的其他任一系统。
  12. 根据权利要求11所述的终端，其特征在于，所述处理器在控制所述终端由所述当前系统切换至目标系统之前，还执行以下操作：
    在判定所述终端未检测到所述第一身份识别信息时，判断所述终端是否灭屏，并在判断结果为否时，控制所述终端由所述当前系统切换至目标系统；在判断结果为是时，控制所述终端保持当前运行状态。
  13. 根据权利要求11所述的终端，其特征在于，所述处理器还执行以下操作：
    在所述终端切换至所述目标系统后，若所述终端重新检测到第二身份识别信息，则判断所述第二身份识别信息与所述第一身份识别信息是否匹配，并根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统。
  14. 根据权利要求13所述的终端，其特征在于，所述处理器根据判断结果来判断所述终端是否能够直接由所述目标系统切换至所述当前系统，具体包括：
    在判断结果为是时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则控制所述终端直接由所述目标系统切换至所述当前系统；
    在判断结果为否时，若所述终端接收到由所述目标系统切换至所述当前系统的切换命令，则提示当前用户输入系统切换密钥，并在所述系统切换密钥正确时，控制所述终端由所述目标系统切换至所述当前系统，否则，禁止所述终端由所述目标系统切换至所述当前系统。
  15. 根据权利要求11至14中任一项所述的终端，其特征在于，所述第一身份识别信息和所述第二身份识别信息包括：与所述终端相绑定的用户的声音信息、面部特征信息、人体阻抗信息、人体红外线信息、手指压力信息、手部特征信息中的至少一种信息。
PCT/CN2015/073439 2015-02-10 2015-02-28 系统切换方法、系统切换装置和终端 Ceased WO2016127448A1 (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
CN201510069877.0A CN104573463B (zh) 2015-02-10 2015-02-10 系统切换方法、系统切换装置和终端
CN201510069877.0 2015-02-10

Publications (1)

Publication Number Publication Date
WO2016127448A1 true WO2016127448A1 (zh) 2016-08-18

Family

ID=53089504

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/CN2015/073439 Ceased WO2016127448A1 (zh) 2015-02-10 2015-02-28 系统切换方法、系统切换装置和终端

Country Status (2)

Country Link
CN (1) CN104573463B (zh)
WO (1) WO2016127448A1 (zh)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN106407770A (zh) * 2015-07-31 2017-02-15 中兴通讯股份有限公司 一种用户切换的方法及装置
CN107533603A (zh) * 2015-08-31 2018-01-02 华为技术有限公司 短信处理方法、装置及终端
CN105549786A (zh) * 2015-12-30 2016-05-04 宇龙计算机通信科技(深圳)有限公司 基于压力触控的系统切换方法及装置和终端
CN106055222A (zh) * 2016-01-12 2016-10-26 上海斐讯数据通信技术有限公司 一种终端多用户切换系统和方法
CN105843681B (zh) * 2016-03-24 2020-11-13 捷开通讯(深圳)有限公司 一种移动终端及其操作系统切换的方法
CN106227456A (zh) * 2016-07-28 2016-12-14 广东小天才科技有限公司 一种基于触控的登录账号管理方法及装置、用户终端
CN109948377B (zh) * 2019-03-28 2021-12-24 联想(北京)有限公司 显示控制方法、装置及电子设备

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101340281A (zh) * 2007-07-02 2009-01-07 联想(北京)有限公司 针对在网络上进行安全登录输入的方法和系统
CN101795312A (zh) * 2009-12-18 2010-08-04 宇龙计算机通信科技(深圳)有限公司 一种邮件数据的安全管理方法、系统及移动终端
CN102004881A (zh) * 2010-11-24 2011-04-06 东莞宇龙通信科技有限公司 移动终端、移动终端工作模式的切换装置及方法

Family Cites Families (8)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6643783B2 (en) * 1999-10-27 2003-11-04 Terence T. Flyntz Multi-level secure computer with token-based access control
CN101364187A (zh) * 2007-08-08 2009-02-11 黄金富 可对抗木马程式的双操作系统计算机
CN101938558B (zh) * 2010-08-30 2014-11-19 宇龙计算机通信科技(深圳)有限公司 一种移动终端的模式切换方法、系统及移动终端
CN103294970B (zh) * 2012-02-23 2015-12-09 纬创资通股份有限公司 双操作系统共用加密设定的方法以及电子装置
CN103092503B (zh) * 2012-10-11 2016-08-31 百度在线网络技术（北京）有限公司 移动终端的解锁及验证方法与解锁及验证装置
CN104199791A (zh) * 2014-08-15 2014-12-10 深圳市中兴移动通信有限公司 一种移动终端及其双系统的文件传输方法和装置
CN104239142A (zh) * 2014-09-17 2014-12-24 宇龙计算机通信科技(深圳)有限公司 一种双系统的快捷切换方法、装置及终端
CN104270525B (zh) * 2014-09-28 2017-12-22 酷派软件技术（深圳）有限公司 信息处理方法及信息处理装置

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN101340281A (zh) * 2007-07-02 2009-01-07 联想(北京)有限公司 针对在网络上进行安全登录输入的方法和系统
CN101795312A (zh) * 2009-12-18 2010-08-04 宇龙计算机通信科技(深圳)有限公司 一种邮件数据的安全管理方法、系统及移动终端
CN102004881A (zh) * 2010-11-24 2011-04-06 东莞宇龙通信科技有限公司 移动终端、移动终端工作模式的切换装置及方法

Also Published As

Publication number Publication date
CN104573463B (zh) 2018-09-14
CN104573463A (zh) 2015-04-29

Similar Documents

Publication Publication Date Title
WO2016127448A1 (zh) 系统切换方法、系统切换装置和终端
CN104199688B (zh) 一种移动终端及其控制刷机的方法和装置
CN111835689B (zh) 数字钥匙的身份认证方法、终端设备及介质
CN102880820B (zh) 一种移动终端应用程序访问方法及移动终端
CN105704332B (zh) 移动支付方法和装置
WO2016106989A1 (zh) 多系统安全验证方法、多系统安全验证装置和终端
KR101654778B1 (ko) 하드웨어 강제 액세스 보호
CN109657448B (zh) 一种获取Root权限的方法、装置、电子设备及存储介质
CN104156657B (zh) 终端的信息输入方法、终端的信息输入装置和终端
CN104794402B (zh) 系统切换方法、系统切换装置和终端
WO2016015448A1 (zh) 一种多系统进入方法、装置及终端
CN106664521A (zh) 在嵌入式uicc中实施服务策略
WO2016169430A1 (zh) 移动支付装置及移动支付系统
WO2015117332A1 (zh) 一种usb调试模式接口启动的方法、装置及终端
CN112334896B (zh) 终端设备的解锁方法、设备和存储介质
TWI629891B (zh) 一種適用於移動終端的私密資訊保護方法及系統
CN105069333A (zh) 用户域的访问方法、访问系统及终端
KR20230064623A (ko) 안전한 개인용 메모리가 있는 모바일 장치
CN105225113B (zh) 一种信息处理方法及电子设备
CN101217399B (zh) 数据卡后台系统及其操作方法
WO2016180234A1 (zh) 一种安全环境构建方法和装置
CN105678137A (zh) 一种身份识别的方法和装置
WO2017201805A1 (zh) 业务执行方法、业务执行装置和终端
CN105812584A (zh) 一种基于可穿戴设备的信息防盗方法、装置及设备
CN105631290A (zh) 文件安全操作方法、装置及终端

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 15881610

Country of ref document: EP

Kind code of ref document: A1

NENP Non-entry into the national phase

Ref country code: DE

32PN Ep: public notification in the ep bulletin as address of the adressee cannot be established

Free format text: NOTING OF LOSS OF RIGHTS PURSUANT TO RULE 112(1) EPC (EPO FORM 1205A DATED 02/01/2018)

122 Ep: pct application non-entry in european phase

Ref document number: 15881610

Country of ref document: EP

Kind code of ref document: A1