WO2016187806A1

WO2016187806A1 - Method, device and terminal for preventing android device from being rooted

Info

Publication number: WO2016187806A1
Application number: PCT/CN2015/079812
Authority: WO
Inventors: 李志刚
Original assignee: 华为技术有限公司
Priority date: 2015-05-26
Filing date: 2015-05-26
Publication date: 2016-12-01
Also published as: CN106471464B; CN106471464A

Abstract

Disclosed in embodiments of the present invention are a method, device and terminal for preventing an Android device from being rooted. The method in the embodiment of the present invention comprises: receiving a non-read-only command for an embedded multimedia card (EMMC) drive layer; if an operation mode of an operating system where the EMMC drive layer is located is determined to be a normal activation mode or a normal engineering recovery mode, activating a pre-configured write filter function; and determining, via the write filter function, whether the non-read-only command acts on data of a read-only partition in the EMMC drive layer; if so, filtering the non-read-only command via the write filter function, and if not, issuing the non-read-only command.

Description

Method, device and terminal for preventing Android device from being superuser

Technical field

The present invention relates to the field of data processing, and in particular, to a method, an apparatus, and a terminal for preventing an Android device from being rooted.

Background technique

The mobile phone Root is the highest permission to obtain the operating system of the mobile phone, which is an unlocking process of the Android mobile phone. The advantage of mobile phone Root is that users can cut down the mobile phone's program according to their own preferences and needs, and at the same time can carry out more operations. Now there are many Root tools on the Internet, so it is very simple to get Root. After the phone gains root privileges, it can access some restricted items, and the components of the system can be deleted and modified. Root privilege is the biggest temptation for those mobile phone players to be able to flash the machine. As long as the root permission is obtained, the user can delete some programs that are included in the system or brush into different operating systems. It is because of the root that the user can do anything at will. Because the user accidentally deletes the system file and causes various faults in the mobile phone, which occupies a large amount of maintenance resources, there is an urgent need for preventing the root of the mobile phone.

Now, the system partition read-only protection scheme is generally adopted. This scheme filters the write commands of the System partition at the block device layer to prevent illegal writing to the System partition and achieve the purpose of preventing Root.

System partition read-only protection scheme can effectively prevent the cracking of common one-click root tools. However, since it is implemented at the block device layer, it is impossible to completely prevent the root by replacing the image.

Summary of the invention

The embodiment of the invention provides a method, a device and a terminal for preventing an Android device from being rooted, and can prevent the Android device from being rooted.

In view of this, the first aspect of the present invention provides a method for preventing an Android device from being rooted, which may include:

Receiving a non-read only command to the embedded multimedia card EMMC driver layer;

If it is determined that the working mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering recovery mode, the pre-configured write filtering function is started;

Determining, by the write filtering function, whether the non-read only command acts on the EMMC driver layer The data of the read-only partition in the case, if yes, the non-read-only command is filtered by the write filtering function, and if not, the non-read-only command is issued.

With reference to the first aspect of the present invention, in the first embodiment of the first aspect of the present invention, the method may include:

Determining, according to the processing function triggered in the initialization init process corresponding to the non-read-only command, that the operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovery mode.

With reference to the first aspect of the present invention, the second embodiment of the first aspect of the present invention may include:

Obtaining, by the write filtering function, an address that is not a read-only command;

Determining, according to the address, whether the non-read-only command acts on data of a read-only partition in the EMMC driver layer.

With reference to the first aspect of the present invention, the first embodiment of the first aspect of the present invention, the second embodiment of the first aspect of the present invention, the third embodiment of the first aspect of the present invention may include:

Constructing a structure function;

The write filtering function is configured in the structure function.

With reference to the first aspect of the present invention, the first embodiment of the first aspect of the present invention, the second embodiment of the first aspect of the present invention, the fourth embodiment of the first aspect of the present invention may include:

The write filtering function is cancelled by restarting.

With reference to the first aspect of the present invention, the first embodiment of the first aspect of the present invention, the second embodiment of the first aspect of the present invention, the fifth embodiment of the first aspect of the present invention may include:

If the unlock code of the Android device is obtained, the non-read only command is issued.

In view of this, the second aspect of the present invention provides an apparatus for preventing an Android device from being rooted, which may include:

a receiving unit, configured to receive a non-read only command to the embedded multimedia card EMMC driver layer;

a determining unit, configured to determine that an operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovrey mode;

a startup unit for initiating a pre-configured write filtering function;

a determining unit, configured to determine, by the write filtering function, whether the non-read-only command acts on data of a read-only partition in the EMMC driver layer;

An execution unit, configured to: when the determining unit determines that the non-read only command acts on the EMMC driver When the data of the read-only partition in the layer is filtered, the non-read-only command is filtered by the write filtering function, and when the determining unit determines that the non-read-only command does not act on the data of the read-only partition in the EMMC driver layer , the non-read only command is issued.

With reference to the second aspect of the present invention, in the first embodiment of the second aspect of the present invention, the method may include:

The determining subunit is configured to determine, according to the processing function triggered in the initialization init process corresponding to the non-read-only command, that the working mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovery mode.

With reference to the second aspect of the present invention, in the second embodiment of the second aspect of the present invention, the method may include:

An obtaining unit, configured to acquire, by using the write filtering function, an address that is not a read-only command;

The determining unit includes:

a determining subunit, configured to determine, according to the address, whether the non-read only command acts on data of a read-only partition in the EMMC.

With reference to the second aspect of the present invention, the first embodiment of the second aspect of the present invention, the second embodiment of the second aspect of the present invention, the third embodiment of the second aspect of the present invention may include:

A structural unit for constructing a structure function;

a configuration unit, configured to configure the write filtering function in the structure function.

With reference to the second aspect of the present invention, the first embodiment of the second aspect of the present invention, the second embodiment of the second aspect of the present invention, the fourth embodiment of the second aspect of the present invention may include:

The first processing unit is configured to cancel the write filtering function by restarting.

With reference to the second aspect of the present invention, the first embodiment of the second aspect of the present invention, the second embodiment of the second aspect of the present invention, the fifth embodiment of the second aspect of the present invention may include:

The second processing unit is configured to deliver the non-read only command if the unlock code of the Android device is obtained.

In view of this, the third aspect of the present invention provides a terminal, which may include:

One or more processors; a memory; and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or Multiple programs include instructions for executing the following:

If it is determined that the operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or The normal engineering Recovery mode starts the pre-configured write filtering function;

Determining, by the write filtering function, whether the non-read-only command acts on data of a read-only partition in the EMMC driver layer, and if yes, filtering the non-read-only command by the write filtering function, if not, The non-read only command is issued.

With reference to the third aspect of the present invention, in the first embodiment of the third aspect of the present invention, the method may include:

With reference to the third aspect of the present invention, the second embodiment of the third aspect of the present invention may include:

With reference to the third aspect of the present invention, the first embodiment of the third aspect of the present invention, the second embodiment of the third aspect of the present invention, the third embodiment of the third aspect of the present invention may include:

Constructing a structure function;

The write filtering function is configured in the structure function.

With reference to the third aspect of the present invention, the first embodiment of the third aspect of the present invention, the second embodiment of the third aspect of the present invention, the fourth embodiment of the third aspect of the present invention may include:

The write filtering function is cancelled by restarting.

With reference to the third aspect of the present invention, the first embodiment of the third aspect of the present invention, the second embodiment of the third aspect of the present invention, the fifth embodiment of the third aspect of the present invention may include:

With reference to the third aspect of the present invention, the sixth embodiment of the third aspect of the present invention may include:

The memory is a readable storage medium, and the instructions, when executed by the terminal, cause the terminal to execute the following instructions:

Constructing a structure function;

The write filtering function is configured in the structure function.

The write filtering function is cancelled by restarting.

It can be seen from the above technical solution that the embodiment of the present invention has the following advantages: determining whether the non-read-only command acts on the data of the read-only partition in the EMMC driver layer by using the pre-configured write filtering function, and when the determination is yes, filtering The non-read-only command, because the EMMC only abstracts an EMMC device in the EMMC driver layer, and limits the read-only partition pointed to by the EMMC device, thereby preventing the data of the read-only partition from being tampered with, thereby preventing The Android device is rooted.

DRAWINGS

In order to more clearly illustrate the technical solutions of the embodiments of the present invention, the drawings used in the description of the embodiments will be briefly described below. It is obvious that the drawings in the following description are only some embodiments of the present invention, Those of ordinary skill in the art, without paying for creative labor Further drawings can also be obtained from these drawings.

1 is a schematic diagram of an embodiment of a method for preventing an Android device from being rooted according to an embodiment of the present invention;

2 is a schematic diagram of another embodiment of a method for preventing an Android device from being rooted according to an embodiment of the present invention;

3 is a schematic diagram of an embodiment of a device for preventing an Android device from being rooted according to an embodiment of the present invention;

4 is a schematic diagram of another embodiment of an apparatus for preventing an Android device from being rooted according to an embodiment of the present invention;

FIG. 5 is a schematic diagram of an embodiment of a terminal device according to an embodiment of the present invention; FIG.

FIG. 6 is a schematic diagram of an embodiment in which a terminal is used as a mobile phone according to an embodiment of the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is an embodiment of the invention, but not all of the embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts shall fall within the scope of the present invention.

The terms "first", "second", "third", "fourth", etc. (if present) in the specification and claims of the present invention and the above figures are used to distinguish similar objects without being used for Describe a specific order or order. It is to be understood that the data so used may be interchanged where appropriate so that the embodiments described herein can be implemented in a sequence other than what is illustrated or described herein. In addition, the terms "comprises" and "comprises" and "the" and "the" are intended to cover a non-exclusive inclusion, for example, a process, method, system, product, or device that comprises a series of steps or units is not necessarily limited to Those steps or units may include other steps or units not explicitly listed or inherent to such processes, methods, products or devices.

In order to facilitate the understanding of the embodiments of the present invention, a principle for preventing an Android device from being rooted in the embodiment of the present invention is described below.

System partition read-only protection scheme can effectively prevent the cracking of common one-click root tools. However, since it is implemented at the block device layer, the Embedded Multi Media Card (EMMC) abstracts a plurality of block devices at the block device layer, and these block devices respectively point to the respective partitions on the entire EMMC (there are blocks) The device points to the System partition on the EMMC), in the block The device layer can only restrict access to the System partition, but hackers can illegally write by accessing other partitions. Therefore, it is impossible to completely prevent the root by replacing the mirror. Since EMMC only abstracts an EMMC device at the EMMC driver layer, it restricts the read-only partition pointed to by the EMMC device. (The present invention configures the write filtering function to filter the non-read-only data of the read-only partition through the write filtering function. The command can prevent the data of the read-only partition from being tampered with, and can completely prevent the root by replacing the mirror. At the same time, it can effectively prevent the crack of the common one-click root tool.

On the basis of the above principles, the root of a mobile phone, a tablet, and the like is described by the following embodiments:

Referring to FIG. 1, an embodiment of a method for preventing an Android device from being rooted in an embodiment of the present invention includes:

101. Receive a non-read-only command to an embedded multimedia card EMMC driver layer.

In this embodiment, the non-read-only command for the embedded multimedia card EMMC driver layer is received, wherein the non-read-only command includes a single block write (CMD24), a multi-block write (CMD25), and an erase command (CMD38), and includes Other types of non-read-only commands are not limited herein.

102. If it is determined that the working mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovery mode, the pre-configured write filtering function is started.

After receiving the non-read-only command to the embedded multimedia card EMMC driver layer, if it is determined that the operating mode of the operating system where the EMMC driver layer is located is the normal startup mode or the normal engineering Recovrey mode, the pre-configured write filtering function is started. The Recovrey mode is a mode that can modify the data or system inside the Android machine. The Recovrey mode is also called recovery mode and flash mode.

It should be noted that the write filtering function is used to block an illegal write operation, and the write filtering function may be configured in the structure function by constructing a structure function, and the write filtering function mainly includes three functions: determining Whether the received command is a non-read-only command, whether the non-read-only command acts on the data of the read-only partition, and the non-read-only command is filtered.

It should be noted that the normal startup mode herein can be understood as a mode with a complete interface. The Recovery mode here can be understood as a mode with simple interface and used for mobile phone maintenance.

Further, the operating system can be an operating system of the mobile phone, and can also be a tablet operating system. In the present invention, the Root device of the Android device can be understood as Root for a device having an Android operating system.

And determining, by the write filtering function, whether the non-read-only command acts on the data of the read-only partition in the EMMC driver layer, and if yes, filtering the non-read-only command by using the write filtering function, and if not, sending the Non-read only command.

Determining, by the write filtering function, whether the non-read-only command acts on the data of the read-only partition in the EMMC driver layer, and if so, stopping the sending of the non-read-only command, returning to the end, and optionally setting the error flag, if No, the non-read only command is issued.

The method of stopping the non-read-only command is a method for filtering the non-read-only command, and the non-read-only command may be filtered by other methods, and details are not described herein again.

In this embodiment, the pre-configured write filtering function determines whether the non-read-only command acts on the data of the read-only partition in the EMMC driver layer. When the determination is yes, the non-read-only command is filtered, because the EMMC is driven by the EMMC. The layer only abstracts an EMMC device. By restricting the read-only partition pointed to by the EMMC device, the purpose of preventing the data of the read-only partition from being tampered is achieved, so that the Android device can be prevented from being rooted.

For the sake of understanding, the following is a detailed description of the method for preventing the Android device from being rooted in the embodiment of the present invention. Referring to FIG. 2, another embodiment of the method for preventing an Android device from being rooted in the embodiment of the present invention includes:

201. Receive a non-read only command to the EMMC driver layer.

In this embodiment, the upper layer application receives a non-read-only command to the EMMC driver layer, where the non-read-only command includes a single block write (CMD24) and a multi-block write (CMD25) and an erase command (CMD38), and includes other types. Non-read-only commands, which are not limited here.

It should be noted that the non-read-only command can be sent by the block device request (BIO), and the EMMC driver layer BIO is converted into a multimedia card (MMC, Multimedia Card) request structure, and queued for processing in the MMC queue.

202. If it is determined that the working mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovery mode according to a processing function triggered in the initialization init process corresponding to the non-read-only command, the pre-configured write filtering is started. Features;

After receiving a non-read-only command to the EMMC driver layer, the initial corresponding to the non-read-only command The processing function triggered in the init process determines that the operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovrey mode, and then starts a pre-configured write filtering function, wherein the Recovrey mode is a type The internal data of the Android machine or the mode in which the system is modified. The Recovrey mode is also called the recovery mode and the flash mode.

It should be noted that the processing function may be a processing function in sys_wp_init_action, which is a standard action of the Android architecture, which can be understood as a function executed during the boot process, and can also be other types. The processing function is not limited herein.

It should be noted that, by constructing a structure function, the write filtering function is configured in the structure function, and the write filtering function mainly includes three functions: determining whether the received command is a non-read-only command, and determining that the command is not only Whether the read command acts on the data of the read-only partition and filters the non-read-only commands.

When it is determined that the operating mode of the operating system where the EMMC driver layer is located is not the normal startup mode or the normal engineering Recovrey mode according to the processing function triggered in the initialization init process corresponding to the non-read-only command, the method is cancelled by restarting. Write filtering.

203. Obtain an address that is not a read-only command by using the write filtering function.

The address of the non-read-only command mapping is obtained by the write filtering function, indicating that the write filtering function pre-configures the function of obtaining an address.

204, according to the address to determine whether the non-read-only command acts on the data of the read-only partition in the EMMC, and if so, step 205 is performed, and if not, step 206 is performed;

The partition corresponding to the address is read-only, and the partition corresponding to the address is not read-only. According to the address, it is determined whether the non-read-only command acts on the data of the read-only partition in the EMMC. If yes, step 205 is performed. If not, step 206 is performed.

205. Filter the non-read-only command by using the write filtering function.

After the non-read-only command is applied to the data of the read-only partition in the EMMC driver layer, the write-filter function stops the sending of the non-read-only command, returns to the end, and can be selected. Set the error flag.

206. Issue the non-read only command.

The non-read-only command is issued after determining that the non-read-only command does not act on the data of the read-only partition in the EMMC driver layer according to the address.

It should be noted that if the unlock code is received, the non-read only command is issued. In other words, as long as you have an unlock code, you can make a legal root.

Further, the above-mentioned rooting by the unlocking code is one of a plurality of special cases, and the legal root can also be performed under the following conditions:

In the production line loading mirroring, user upgrade mirroring, in the product development and debugging phase and the first startup of the operating system.

Before taking the root of the present invention, it can be judged whether it is under the above conditions, and if so, Root is allowed.

Secondly, the determination of the normal startup mode and the normal Recovery mode and the determination of whether the non-read-only command acts on the read-only partition in the EMMC by the address makes the present embodiment more open.

For the sake of understanding, the method for preventing the Android device from being rooted in the embodiment of the present invention is described in an actual application scenario:

The mobile phone is pre-configured with the write filtering function. When the hacker A downloads the image, the hacker A starts to brush in the image. During the process of brushing in, the mobile phone receives a non-read-only command to the EMMC driver layer, according to the non-read-only command. The processing function triggered in the initialization init process determines that the non-read-only command is a non-read-only command in the normal Recovery mode, the mobile phone starts the write filtering function, acquires the address of the non-read-only command, and determines the non-read-only command by the address. Acting on the data of the read-only partition in the EMMC driver layer, the mobile phone stops the sending of the non-read-only command by the write filtering function, returns to the end, and sets an error flag.

The following describes an apparatus for preventing an Android device from being rooted in the embodiment of the present invention. Referring to FIG. 3, an embodiment of an apparatus for preventing an Android device from being rooted in the embodiment of the present invention includes:

The receiving unit 301 is configured to receive a non-read only command for the embedded multimedia card EMMC driver layer;

The determining unit 302 is configured to determine that an operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovrey mode;

The startup unit 303 is configured to start a pre-configured write filtering function.

The determining unit 304 is configured to determine, by the write filtering function, whether the non-read-only command acts on data of the read-only partition in the EMMC driver layer;

The executing unit 305 is configured to: when the determining unit 304 determines, by the write filtering function, that the non-read-only command acts on the data of the read-only partition in the EMMC driver layer, filtering the non-read-only command by using the write filtering function, when determining The unit 304 sends the non-read-only command when the non-read-only command does not act on the data of the read-only partition in the EMMC driver layer.

For the sake of understanding, the following is a detailed description of the device for preventing the Android device from being rooted in the embodiment of the present invention. Referring to FIG. 4, another embodiment of the device for preventing the Android device from being rooted in the embodiment of the present invention includes:

The receiving unit 401 is configured to receive a non-read only command to the embedded multimedia card EMMC driver layer;

The determining unit 402 is configured to determine that an operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovrey mode;

a starting unit 403, configured to start a pre-configured write filtering function;

The determining unit 404 is configured to determine, by using the write filtering function, whether the non-read-only command acts on data of the read-only partition in the EMMC driver layer;

The executing unit 405 is configured to determine, by the determining unit 404, the non-read-only command by using the write filtering function. When the data of the read-only partition in the EMMC driver layer is applied, the non-read-only command is filtered by the write filtering function, and the determining unit 404 determines, by the write filtering function, that the non-read-only command does not act on the EMMC driver layer. When the data of the read-only partition is issued, the non-read-only command is issued.

This embodiment further includes:

The obtaining unit 406 is configured to obtain, by using the write filtering function, an address that is not a read-only command;

a construction unit 407, configured to construct a structure function;

The configuration unit 408 is configured to configure the write filtering function in the structure function;

The first processing unit 409 is configured to cancel the write filtering function by means of an emergency restart.

The second processing unit 410 is configured to send the non-read-only command if the unlock code of the Android device is obtained.

The determining unit 402 in this embodiment includes:

The determining sub-unit 4021 is configured to determine, according to the processing function triggered in the initialization init process corresponding to the non-read-only command, that the working mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovery mode;

The determining unit 404 in this embodiment includes:

The determining subunit 4041 is configured to determine, according to the address, whether the non-read only command acts on data of the read-only partition in the EMMC.

For ease of understanding, the interaction between the units of the device for preventing the Android device from being Rooted in this embodiment is described in an actual application scenario:

The receiving unit 401 receives a non-read-only command of the upper layer application to the EMMC driver layer, where the non-read-only command includes a single block write (CMD24) and a multi-block write (CMD25) and an erase command (CMD38). Other types of non-read-only commands are also included, which are not limited herein; it should be noted that the non-read-only command can be delivered by the block device request (BIO), and the BIO is converted into the MMC request structure at the EMMC driver layer. The MMC queues for processing in the queue. After receiving the non-read-only command to the EMMC driver layer, the determining sub-unit 4021 in the determining unit 402 determines the operation of the operating system in which the EMMC driver layer is located according to the processing function triggered in the initialization init process corresponding to the non-read-only command. The mode is the normal startup mode or the normal engineering Recovrey mode, and the startup unit 403 starts a pre-configured write filtering function, wherein the Recovrey mode is a mode that can modify data or system inside the Android machine, and the recovery mode is also called Recovery mode, flash mode; it should be noted that the processing function can be a processing function in sys_wp_init_action, which is a standard action of the Android architecture, which can be understood as a function executed during the boot process. . It can also be other types of processing functions, which are not limited herein. It should be noted that the structure function is constructed by the constructing unit 407, and the write filtering function is configured in the structure function by the configuration unit 408. The write filtering function mainly includes three functions: determining whether the received command is non- Read-only commands, determine whether non-read-only commands act on data in read-only partitions, and filter non-read-only commands. The normal startup mode here can be understood as a mode with a complete interface. The Recovery mode here can be understood as a mode with simple interface and used for mobile phone maintenance. Further, the operating system can be an operating system of the mobile phone, and can also be a tablet operating system. In the present invention, the Root device of the Android device can be understood as Root for a device having an Android operating system. When it is determined that the operating mode of the operating system where the EMMC driver layer is located is not the normal startup mode or the normal engineering Recovrey mode according to the processing function triggered in the initialization init process corresponding to the non-read-only command, the first processing unit 409 passes The restart mode cancels the write filtering function. The obtaining unit 406 acquires the address of the non-read-only command map by the write filtering function. Since the partition corresponding to the address is read-only, the partition corresponding to the address is not read-only, and the determining sub-unit 4041 in the determining unit 404 determines, according to the address, whether the non-read-only command acts on the read-only partition in the EMMC. The data. After determining that the non-read-only command is applied to the data of the read-only partition in the EMMC driver layer, the execution unit 405 stops the sending of the non-read-only command by the write filtering function, returns to the end, and can select the setting. Error flag. After determining that the non-read-only command does not act on the data of the read-only partition in the EMMC driver layer according to the address, the executing unit 405 issues the non-read-only command. The second processing unit 410 delivers the non-read-only command if the unlock code of the Android device is obtained.

The embodiment of the present invention further provides a terminal, as shown in FIG. 5, including: a receiver 501, a processor 502;

The processor 502 is configured to: perform a non-read-only command to receive an EMMC driver layer of the embedded multimedia card; and determine that the operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovery mode. , the pre-configured write filtering function is started; the write filtering function is used to determine whether the non-read-only command acts on the read-only partition data in the EMMC driver layer, and if so, the non-read-only command is filtered by the write filtering function. If no, the non-read only command is issued.

The embodiment of the present invention further provides a specific implementation scheme for determining the working mode, as follows: The processor 502 is specifically configured to control execution: if the EMMC is determined according to a processing function triggered in the initialization init process corresponding to the non-read-only command. If the working mode of the operating system where the driver layer is located is the normal startup mode or the normal engineering recovery mode, the pre-configured write filtering function is enabled. Otherwise, the write filtering function is cancelled by the restart mode.

The above Recovrey mode is a mode that can modify the data or system inside the Android machine. The processing function can be a processing function in sys_wp_init_action, which is a standard action of the Android architecture. It can be understood as a function executed during the boot process, and can also be other types of processing functions. This is not a limitation.

In the embodiment of the present invention, the partition corresponding to the address is read-only, and the partition corresponding to the address is not read-only. Therefore, the processor 502 is further configured to perform control: obtaining the non-only by using the write filtering function. The address of the read command is used to determine, according to the address, whether the non-read-only command acts on the data of the read-only partition in the EMMC driver layer, and if so, the non-read-only command is filtered by the write filtering function, and if not, the next Send this non-read-only command.

Referring to FIG. 6, another embodiment of the terminal in the embodiment of the present invention includes:

For the convenience of description, only parts related to the embodiment of the present invention are shown, and the specific technical details are not For disclosure, please refer to the method part of the embodiment of the present invention. The terminal may be any terminal device including a mobile phone, a tablet computer, a PDA (Personal Digital Assistant), a POS (Point of Sales), an in-vehicle computer, and the terminal is a mobile phone as an example:

FIG. 6 is a block diagram showing a partial structure of a mobile phone related to a terminal provided by an embodiment of the present invention. Referring to FIG. 6, the mobile phone includes: a radio frequency (RF) circuit 610, a memory 620, an input unit 630, a display unit 640, a sensor 650, an audio circuit 660, a wireless fidelity (WiFi) module 670, and a processor 680. And power supply 690 and other components. It will be understood by those skilled in the art that the structure of the handset shown in FIG. 6 does not constitute a limitation to the handset, and may include more or less components than those illustrated, or some components may be combined, or different components may be arranged.

The following describes the components of the mobile phone in detail with reference to FIG. 6:

The RF circuit 610 can be used for transmitting and receiving information or during a call, and receiving and transmitting the signal. Specifically, after receiving the downlink information of the base station, the processor 680 processes the data. In addition, the uplink data is designed to be sent to the base station. Generally, RF circuit 610 includes, but is not limited to, an antenna, at least one amplifier, a transceiver, a coupler, a Low Noise Amplifier (LNA), a duplexer, and the like. In addition, RF circuitry 610 can also communicate with the network and other devices via wireless communication. The above wireless communication may use any communication standard or protocol, including but not limited to Global System of Mobile communication (GSM), General Packet Radio Service (GPRS), Code Division Multiple Access (Code Division). Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA), Long Term Evolution (LTE), E-mail, Short Messaging Service (SMS), and the like.

The memory 620 can be used to store software programs and modules, and the processor 680 executes various functional applications and data processing of the mobile phone by running software programs and modules stored in the memory 620. The memory 620 may mainly include a storage program area and a storage data area, wherein the storage program area may store an operating system, an application required for at least one function (such as a sound playing function, an image playing function, etc.), and the like; the storage data area may be stored according to Data created by the use of the mobile phone (such as audio data, phone book, etc.). Moreover, memory 620 can include high speed random access memory, and can also include non-volatile memory, such as at least one magnetic disk storage device, flash memory device, or other volatile solid state storage device.

The input unit 630 can be configured to receive input numeric or character information and to generate key signal inputs related to user settings and function controls of the handset. Specifically, the input unit 630 may include a touch panel 631 and other input devices 632. The touch panel 631, also referred to as a touch screen, can collect touch operations on or near the user (such as the user using a finger, a stylus, or the like on the touch panel 631 or near the touch panel 631. Operation), and drive the corresponding connecting device according to a preset program. Optionally, the touch panel 631 can include two parts: a touch detection device and a touch controller. Wherein, the touch detection device detects the touch orientation of the user, and detects a signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts the touch information into contact coordinates, and sends the touch information. The processor 680 is provided and can receive commands from the processor 680 and execute them. In addition, the touch panel 631 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch panel 631, the input unit 630 may also include other input devices 632. In particular, other input devices 632 may include, but are not limited to, one or more of a physical keyboard, function keys (such as volume control buttons, switch buttons, etc.), trackballs, mice, joysticks, and the like.

The display unit 640 can be used to display information input by the user or information provided to the user as well as various menus of the mobile phone. The display unit 640 can include a display panel 641. Alternatively, the display panel 641 can be configured in the form of a liquid crystal display (LCD), an organic light-emitting diode (OLED), or the like. Further, the touch panel 631 can cover the display panel 641. When the touch panel 631 detects a touch operation on or near it, the touch panel 631 transmits to the processor 680 to determine the type of the touch event, and then the processor 680 according to the touch event. The type provides a corresponding visual output on display panel 641. Although in FIG. 6, the touch panel 631 and the display panel 641 are two independent components to implement the input and input functions of the mobile phone, in some embodiments, the touch panel 631 may be integrated with the display panel 641. Realize the input and output functions of the phone.

The handset can also include at least one type of sensor 650, such as a light sensor, motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 641 according to the brightness of the ambient light, and the proximity sensor may close the display panel 641 and/or when the mobile phone moves to the ear. Or backlight. As a type of motion sensor, the accelerometer sensor can detect the magnitude of acceleration in all directions (usually three axes). Detecting the magnitude and direction of gravity, can be used to identify the gesture of the phone (such as horizontal and vertical screen switching, related games, magnetometer attitude calibration), vibration recognition related functions (such as pedometer, tap), etc.; as for the phone can also be configured Other sensors such as gyroscopes, barometers, hygrometers, thermometers, infrared sensors, etc., will not be described here.

Audio circuit 660, speaker 661, and microphone 662 provide an audio interface between the user and the handset. The audio circuit 660 can transmit the converted electrical data of the received audio data to the speaker 661 for conversion to the sound signal output by the speaker 661; on the other hand, the microphone 662 converts the collected sound signal into an electrical signal by the audio circuit 660. After receiving, it is converted into audio data, and then processed by the audio data output processor 680, sent to the other mobile phone via the RF circuit 610, or outputted to the memory 620 for further processing.

WiFi is a short-range wireless transmission technology, and the mobile phone can help users to send and receive emails, browse web pages, and access streaming media through the WiFi module 670, which provides users with wireless broadband Internet access. Although FIG. 6 shows the WiFi module 670, it can be understood that it does not belong to the essential configuration of the mobile phone, and can be omitted as needed within the scope of not changing the essence of the invention.

The processor 680 is the control center of the handset, and connects various portions of the entire handset using various interfaces and lines, by executing or executing software programs and/or modules stored in the memory 620, and invoking data stored in the memory 620, executing The phone's various functions and processing data, so that the overall monitoring of the phone. Optionally, the processor 680 may include one or more processing units; preferably, the processor 680 may integrate an application processor and a modem processor, where the application processor mainly processes an operating system, a user interface, an application, and the like. The modem processor primarily handles wireless communications. It will be appreciated that the above described modem processor may also not be integrated into the processor 680.

The handset also includes a power source 690 (such as a battery) that supplies power to the various components. Preferably, the power source can be logically coupled to the processor 680 through a power management system to manage functions such as charging, discharging, and power management through the power management system.

Although not shown, the mobile phone may further include a camera, a Bluetooth module, and the like, and details are not described herein again.

A person skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the system, the device and the unit described above can refer to the corresponding process in the foregoing method embodiment, and details are not described herein again.

In the several embodiments provided by the present application, it should be understood that the disclosed system, apparatus and The method can be implemented in other ways. For example, the device embodiments described above are merely illustrative. For example, the division of the unit is only a logical function division. In actual implementation, there may be another division manner, for example, multiple units or components may be combined or Can be integrated into another system, or some features can be ignored or not executed. In addition, the mutual coupling or direct coupling or communication connection shown or discussed may be an indirect coupling or communication connection through some interface, device or unit, and may be in an electrical, mechanical or other form.

The units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, may be located in one place, or may be distributed to multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of the embodiment.

In addition, each functional unit in each embodiment of the present invention may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit. The above integrated unit can be implemented in the form of hardware or in the form of a software functional unit.

The integrated unit, if implemented in the form of a software functional unit and sold or used as a standalone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention, which is essential or contributes to the prior art, or all or part of the technical solution, may be embodied in the form of a software product stored in a storage medium. A number of instructions are included to cause a computer device (which may be a personal computer, server, or network device, etc.) to perform all or part of the steps of the methods described in various embodiments of the present invention. The foregoing storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk, or an optical disk, and the like. .

The above embodiments are only used to illustrate the technical solutions of the present invention, and are not intended to be limiting; although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art will understand that The technical solutions described in the embodiments are modified, or the equivalents of the technical features are replaced by the equivalents of the technical solutions of the embodiments of the present invention.

Claims

A method for preventing an Android device from being rooted, characterized in that it comprises:

Receiving a non-read only command to the embedded multimedia card EMMC driver layer;

If it is determined that the working mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering recovery mode, the pre-configured write filtering function is started;

Determining, by the write filtering function, whether the non-read-only command acts on data of a read-only partition in the EMMC driver layer, and if yes, filtering the non-read-only command by the write filtering function, if not, The non-read only command is issued.
The method according to claim 1, wherein the determining whether the operating mode of the operating system in which the EMMC driver layer is located is a normal startup mode or a normal engineering recovery mode includes:

Determining, according to the processing function triggered in the initialization init process corresponding to the non-read-only command, that the operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Reco very mode.
The method according to claim 1, wherein said method further comprises: before said determining, by said write filtering function, said non-read-only command acts on data of a read-only partition in said EMMC driver layer, said method further comprising :

Obtaining, by the write filtering function, an address that is not a read-only command;

The determining, by the write filtering function, whether the non-read-only command acts on the read-only partition in the EMMC driver layer includes:

Determining, according to the address, whether the non-read-only command acts on data of a read-only partition in the EMMC driver layer.
The method according to any one of claims 1 to 3, further comprising:

Constructing a structure function;

The write filtering function is configured in the structure function.
The method according to any one of claims 1 to 3, wherein if it is determined that the operating mode of the operating system in which the EMMC driver layer is located is not the normal startup mode or the normal engineering Recovrey mode, the method further Includes:

The write filtering function is cancelled by restarting.
The method according to any one of claims 1 to 3, wherein the method further comprises:

If the unlock code of the Android device is obtained, the non-read only command is issued.
A device for preventing an Android device from being rooted, characterized in that it comprises:

a receiving unit, configured to receive a non-read only command to the embedded multimedia card EMMC driver layer;

a determining unit, configured to determine that an operating mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovrey mode;

a startup unit for initiating a pre-configured write filtering function;

a determining unit, configured to determine, by the write filtering function, whether the non-read-only command acts on data of a read-only partition in the EMMC driver layer;

An execution unit, configured to: when the determining unit determines that the non-read-only command acts on data of the read-only partition in the EMMC driver layer, filtering the non-read-only command by using the write filtering function, when the determining unit determines When the non-read-only command does not act on the data of the read-only partition in the EMMC driver layer, the non-read-only command is issued.
The apparatus according to claim 7, wherein the determining unit comprises:

The determining subunit is configured to determine, according to the processing function triggered in the initialization init process corresponding to the non-read-only command, that the working mode of the operating system where the EMMC driver layer is located is a normal startup mode or a normal engineering Recovery mode.
The device according to claim 7, wherein the device further comprises:

An obtaining unit, configured to acquire, by using the write filtering function, an address that is not a read-only command;

The determining unit includes:

a determining subunit, configured to determine, according to the address, whether the non-read only command acts on data of a read-only partition in the EMMC.
The device according to any one of claims 7 to 9, wherein the device further comprises:

A structural unit for constructing a structure function;

a configuration unit, configured to configure the write filtering function in the structure function.
Apparatus according to any one of claims 7 to 9, wherein if said The operating mode of the operating system where the EMMC driver layer is located is not the normal startup mode, nor the normal engineering Recovrey mode. The device further includes:

The first processing unit is configured to cancel the write filtering function by restarting.
The device according to any one of claims 7 to 9, wherein the device further comprises:

The second processing unit is configured to deliver the non-read only command if the unlock code of the Android device is obtained.
A terminal, comprising:

One or more processors; a memory; and one or more programs, wherein the one or more programs are stored in the memory and configured to be executed by the one or more processors, the one or The plurality of programs include instructions for performing the method of any one of claims 1 to 6.
The terminal according to claim 13, wherein the memory is a readable storage medium, and the instructions, when executed by the terminal, cause the terminal to perform the method according to any one of claims 1 to 6. Instructions.