WO2017036200A1

WO2017036200A1 - Method and system for encrypting user file system in multiple domains

Info

Publication number: WO2017036200A1
Application number: PCT/CN2016/084105
Authority: WO
Inventors: 肖敏; 申泽奇
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-08-28
Filing date: 2016-05-31
Publication date: 2017-03-09
Also published as: CN105631345A; CN105631345B

Abstract

Provided are a method and system for encrypting a user file system in multiple domains. The method comprises: detecting an environment in which an intelligent terminal is used (S100); determining whether the environment in which the intelligent terminal is used is a secure environment (S101); when the environment in which the intelligent terminal is used is determined to be a secure environment, and after the intelligent terminal is switched to another domain, delaying a predetermined period of time to encrypt a user file system of the intelligent terminal (S103); or, after intelligent terminal is switched to another domain, immediately encrypting the user file system of the intelligent terminal (S102). Compared with an existing intelligent terminal encrypting a user file system thereof immediately after each domain switching event, a smart phone switching frequently to and fro between two domains in particular, the method can effectively increase switching speed and operation smoothness of an intelligent terminal, thereby improving user experience.

Description

Multi-domain user file system encryption method and system

This application claims priority to Chinese Patent Application No. 201510542789.8, entitled "Multi-domain User File System Encryption Method and System", filed on August 28, 2015, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to the field of file system encryption technologies, and in particular, to a multi-domain user file system encryption method and system.

Background technique

Generally, encrypting a file system can effectively prevent the storage medium from leaking information due to loss or theft.

In the multi-domain user file system encryption method of the existing smart terminal, taking the mobile phone as an example, a domain switching action occurs in the following two situations: one is that the mobile phone actively switches the domain; the other is when the mobile phone receives the incoming call. When the information such as SMS or SMS is used, the domain is switched. When user A's mobile phone performs domain switching in a multi-domain environment, the user file system of user A needs to be encrypted, and the user file system corresponding to the handover target domain needs to be decrypted, wherein the user file system of user A is encrypted. It is to prevent other users from accessing the user file system (after user A has accessed) to ensure the security of the user file system.

However, in the above technical solution, the encryption operation is performed immediately after the domain switching. When the user A needs to frequently switch between the two domains, since data encryption is a computationally intensive operation, it is required to consume a large amount of CPU time significantly reduces the speed of domain switching, affecting the smoothness of mobile phone usage, and thus reducing the user experience.

Summary of the invention

In view of this, the present invention provides a multi-domain user file system encryption method and system, so as to improve the smart terminal domain switching speed and usage fluency, thereby improving user experience.

To solve the above technical problem, the present invention provides a multi-domain user file system encryption method, including:

Detecting an environment in which the smart terminal is located, and determining whether the environment in which the smart terminal is located is a secure environment;

When it is determined that the environment in which the smart terminal is located is a security environment, after the smart terminal switches the domain, the user file system of the smart terminal is encrypted by delaying the preset time period; otherwise, the smart terminal is switched. Immediately after the domain, the user file system of the smart terminal is encrypted.

In the above method, optionally, the detecting the environment in which the smart terminal is located, and determining whether the environment in which the smart terminal is located is a security environment, including:

Obtaining a trust degree label of all connected devices directly connected to the smart terminal; the trust degree label has a trust attribute or an untrust attribute;

When the attributes of the trust tags of all the connected devices are all trusted attributes, it is determined that the environment in which the smart terminal is located is a secure environment; otherwise, the environment in which the smart terminal is located is determined to be a dangerous environment.

In the foregoing method, before the obtaining the trust label of all connected devices directly connected to the smart terminal, the method further includes:

When detecting that the connected device is connected to the smart terminal, determining the attribute of the trust tag of the connected device input by the user in response to the user's selection of the trust degree of the connected device.

In the above method, optionally, when detecting that the connection device is connected to the smart terminal for the first time, determining an attribute of a trust degree label of the connected device input by the user.

The invention also provides a multi-domain user file system encryption system, comprising:

The environment security judging unit is configured to detect an environment in which the smart terminal is located, and determine whether the environment in which the smart terminal is located is a security environment;

a user file system encryption unit, configured to: after determining that the environment in which the smart terminal is located is a security environment, after the smart terminal switches the domain, delay the preset time period to encrypt the user file system of the smart terminal; Otherwise, the user file system of the smart terminal is encrypted immediately after the smart terminal switches the domain.

In the above system, optionally, the environmental security determining unit includes:

a trust degree acquisition subunit, configured to acquire a trust degree label of all connected devices directly connected to the smart terminal; the trust degree label has a trust attribute or an untrust attribute;

a security judging subunit, configured to determine that the environment in which the smart terminal is located is a security environment when the attributes of the trustability label of all the connected devices are all trusted attributes; otherwise, determine that the environment in which the smart terminal is located is Dangerous environment.

In the above system, optional, further includes:

a trust degree determining unit, configured to determine, when the connected device is connected to the smart terminal, the attribute of the trust degree label of the connected device that is input by the user, in response to the user's selection of the trust degree of the device .

Optionally, the trust degree label determining unit includes:

The trust degree determining subunit is configured to determine an attribute of the trust label of the connected device input by the user when detecting that the connecting device is connected to the smart terminal for the first time.

In the above system, optionally, the connection device directly connected to the smart terminal includes a smart wearable device, a smart home device, and/or a WiFi device.

In the above system, optionally, the smart terminal is a smart phone.

The multi-domain user file system encryption method and system provided by the present invention determine different encryption policies according to the environment security of the smart terminal. Specifically, the environment in which the smart terminal is located is detected first, and then the preset is referenced. The security environment standard determines whether the environment is a secure environment. When it is determined that the environment in which the smart terminal is located is a secure environment, after the smart terminal switches the domain, the user file system of the smart terminal is encrypted by delaying the preset time period; otherwise, The user file system is encrypted immediately after the smart terminal switches the domain. Compared with the prior art, the smart terminal encrypts the user file system immediately after the domain switch, especially when the smart phone frequently switches back and forth between two different domains, the technical solution provided by the present invention is effectively improved. The intelligent terminal domain switching speed and the use of fluency, thereby improving the user experience.

DRAWINGS

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the embodiments or the description of the prior art will be briefly described below. Obviously, the drawings in the following description are only It is an embodiment of the present invention, and those skilled in the art can obtain other drawings according to the provided drawings without any creative work.

1 is a flowchart of Embodiment 1 of a multi-domain user file system encryption method according to the present invention;

2 is a flowchart of Embodiment 2 of a multi-domain user file system encryption method according to the present invention;

FIG. 3 is a schematic structural block diagram of Embodiment 1 of a multi-domain user file system encryption system according to the present invention.

detailed description

The technical solutions in the embodiments of the present invention are clearly and completely described in the following with reference to the accompanying drawings in the embodiments of the present invention. It is obvious that the described embodiments are only a part of the embodiments of the present invention, but not all embodiments. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention without creative efforts are within the scope of the present invention.

The core of the present invention is to provide a multi-domain user file system encryption method and system, so as to improve the switching speed and usage fluency of the intelligent terminal domain, thereby improving user experience.

In the present invention, the smart terminal refers to an intelligent terminal that uses the domain switching function in a multi-domain environment, and may be a mobile phone, a tablet, or other intelligent terminals. The present invention does not Be strictly limited. In order to enable a person skilled in the art to better understand the solution of the present invention, the following description will be made by taking a smart phone as an example, and the present invention will be further described in detail with reference to the accompanying drawings and specific embodiments.

Please refer to FIG. 1. FIG. 1 is a flowchart of Embodiment 1 of a method for encrypting a multi-domain user file system according to the present invention. The method may specifically include the following steps:

Step S100: detecting an environment in which the smart phone is located;

In the present invention, the environment in which the smart phone is located refers to the network environment in which the smart phone is currently located, because it usually appears only in the case where the smart phone is connected to the Internet or connected to other connected devices. The data creates a security threat. The network environment may be a wireless network connected to a smart phone or a wired network, or may be a network environment formed by connecting the smart phone with other connected devices, and the present invention is not limited thereto.

Step S101: determining whether the environment in which the smart phone is located is a security environment; when it is determined that the environment in which the smart phone is located is a safe environment, proceeding to step S102; otherwise, determining that the environment in which the smart phone is located is a dangerous environment, proceeding to step S103 ;

Step S102: After the smart phone switches the domain, delay the preset time period to encrypt the user file system of the smart phone;

In the present invention, when it is determined that the network environment in which the smart phone is located is a secure environment, it is considered that in the environment, the security of the user file system is guaranteed, and it is not required to be encrypted immediately, so that a preset can be delayed. The time period is then encrypted.

Further, the preset time period delayed by the encryption in step S102 may be set by a person skilled in the art according to actual needs before the smartphone leaves the factory, or may be set by the smart phone after leaving the factory. User set up. Of course, in order to ensure that the delay time period is frequently switched between the two domains, the speed of the smart phone domain switching can be effectively improved, and the fluency of the smart phone is improved. The present invention is preferably adopted before the smart phone is shipped from the factory. The time period of the encryption delay is set by a person skilled in the art according to the actual needs.

Step S103: Immediately after the smart phone switches the domain, the user file system of the smart terminal is encrypted.

When it is determined that the network environment in which the smart phone is located is a dangerous environment, it is considered that the user file system has a security risk in this environment, and at this time, it needs to be encrypted immediately to ensure the security of the user file system.

In summary, in the multi-domain user file system encryption method provided by the present invention, different encryption policies are determined according to the environment security of the smart phone, compared with the prior art, the smart phone immediately contacts the user after each domain switch. File system encryption, especially in the case where a smartphone frequently switches back and forth between two different domains (consuming a lot of CPU time, affecting the speed and usage fluency of the smartphone domain), the technology provided by the present invention The solution effectively improves the switching speed and fluency of the smartphone domain, thereby improving the user experience.

Referring to FIG. 2, FIG. 2 is a flowchart of Embodiment 2 of a method for encrypting a multi-domain user file system according to the present invention. Specifically, step S101 may be performed to determine whether the environment in which the smart phone is located is a secure environment. :

Step S200: Obtain a trust degree label of all connected devices directly connected to the smart phone; wherein the trust degree tag has a trust attribute or an untrust attribute;

In the present invention, the trust degree tag has two types of trust attributes and untrusted attributes, which are trust attributes or untrusted attributes, which can be set by the user, specifically: before obtaining the trust degree label of all connected devices directly connected to the smart phone. When detecting that a connected device is connected to the smart phone, displaying a trust attribute setting interface of the connected device, and setting a trust attribute of the connected device by the user, and the APP running in the smart phone responds to the user to connect The selection of the trust attribute of the device determines the attribute of the trust tag of the connected device input by the user.

In the present invention, preferably, when it is detected that the connection device is connected to the smart terminal for the first time, the attribute of the trust degree tag of the connected device input by the user is determined.

Step S201: Determine attributes of a trust label of all connected devices connected to the smart phone. Whether it is a trust attribute, when the attributes of the trustability label of all connected devices are all trust attributes, proceed to step S202, otherwise, proceed to step S203;

Step S202: determining that the environment in which the smart phone is located is a security environment;

Step S203: determining that the environment in which the smart phone is located is a dangerous environment.

In the present invention, the security of the network environment in which the smart phone is located is preferably determined by a connection device directly connected to the smart phone, wherein a connection device directly connected to the smart phone refers to the connection device and The connections established between smartphones are not directly involved in other devices (such as route repeaters in the Internet), and they are directly connected. Since the two are directly connected and there is no other equipment involved, in this case, there are few factors that can affect the security of the network environment in which the smartphone is located. Only the connected devices connected to it are guaranteed. The security of the network environment where the higher smartphone is located. The user can also set the trust label attribute of the connected device directly connected to the smart phone, further improving the accuracy of the result of the security judgment of the network environment in which the smart phone is located in the present invention, and further The user file system of the mobile phone delays the preset time period for encryption delay, and the security of the user file system provides a better guarantee.

In the present invention, the connection device directly connected to the smart phone may be a smart wearable device, may be a smart home device, or may be a WiFi device, or may be any combination of the above three connected devices. Of course, this is merely an example, and the technical solutions provided by the present invention are understood by those skilled in the art, and the present invention is not limited thereto.

The present invention further provides a multi-domain user file system encryption system embodiment 1. Referring to FIG. 3, the system 300 can include the following contents:

The environment security judging unit 301 is configured to detect an environment in which the smart terminal is located, and determine whether the environment in which the smart terminal is located is a security environment;

The user file system encryption unit 302 is configured to: when the environment in which the smart terminal is located is a security environment, after the smart terminal switches the domain, delay the preset time period to encrypt the user file system of the smart terminal; otherwise, the smart terminal After switching the domain, the user file system of the smart terminal is encrypted immediately.

In the present invention, preferably, the environmental security determining unit 301 may include:

a trust tag acquisition subunit for acquiring all connected devices directly connected to the smart terminal Trust tag; the trust tag has a trust attribute or an untrust attribute;

The security judgment sub-unit is configured to determine that the environment in which the smart terminal is located is a secure environment when the attributes of the trust tags of all connected devices are trust attributes; otherwise, determine that the environment in which the smart terminal is located is a dangerous environment.

In the present invention, preferably, the trust degree label determining unit comprises:

The trust degree determining subunit is configured to determine an attribute of the trust label of the connected device input by the user when detecting that the connected device is connected to the smart terminal for the first time.

In the present invention, preferably, the system 300 may further include:

The trust degree determining unit is configured to determine, when the connected device is connected to the smart terminal, the attribute of the trust degree label of the connected device input by the user, in response to the user's selection of the trust degree of the device.

In the present invention, preferably, the connection device directly connected to the smart terminal includes a smart wearable device, a smart home device, and/or a WiFi device.

In the present invention, preferably, the smart terminal is a smart phone.

It should be noted that the various embodiments in the present specification are described in a progressive manner, and each embodiment focuses on differences from other embodiments, and the same similar parts between the various embodiments are mutually referred to. can. For the system class embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the description of the method embodiment.

The above describes a multi-domain user file system encryption method and system provided by the present invention. The principles and embodiments of the present invention have been described herein with reference to specific examples, and the description of the above embodiments is only to assist in understanding the method of the present invention and its core idea. It should be noted that those skilled in the art can make various modifications and changes to the present invention without departing from the spirit and scope of the invention.

Claims

A multi-domain user file system encryption method, comprising:

Detecting an environment in which the smart terminal is located, and determining whether the environment in which the smart terminal is located is a secure environment;

When it is determined that the environment in which the smart terminal is located is a security environment, after the smart terminal switches the domain, the user file system of the smart terminal is encrypted by delaying the preset time period; otherwise, the smart terminal is switched. Immediately after the domain, the user file system of the smart terminal is encrypted.
The method of claim 1, wherein the detecting the environment in which the smart terminal is located and determining whether the environment in which the smart terminal is located is a secure environment includes:

Obtaining a trust degree label of all connected devices directly connected to the smart terminal; the trust degree label has a trust attribute or an untrust attribute;

When the attributes of the trust tags of all the connected devices are all trusted attributes, it is determined that the environment in which the smart terminal is located is a secure environment; otherwise, the environment in which the smart terminal is located is determined to be a dangerous environment.
The method of claim 2, wherein before the obtaining the trust label of all connected devices directly connected to the smart terminal, the method further comprises:

When detecting that the connected device is connected to the smart terminal, determining the attribute of the trust tag of the connected device input by the user in response to the user's selection of the trust degree of the connected device.
The method according to claim 2 or 3, wherein when it is detected that the connection device is connected to the smart terminal for the first time, the attribute of the trust degree tag of the connected device input by the user is determined.
A multi-domain user file system encryption system, comprising:

The environment security judging unit is configured to detect an environment in which the smart terminal is located, and determine whether the environment in which the smart terminal is located is a security environment;

a user file system encryption unit, configured to: after determining that the environment in which the smart terminal is located is a security environment, after the smart terminal switches the domain, delay the preset time period to encrypt the user file system of the smart terminal; Otherwise, the user file system of the smart terminal is encrypted immediately after the smart terminal switches the domain.
The system of claim 5, wherein the environmental security determination unit comprises:

a trust degree acquisition subunit, configured to acquire a trust degree label of all connected devices directly connected to the smart terminal; the trust degree label has a trust attribute or an untrust attribute;

a security judging subunit, configured to determine that the environment in which the smart terminal is located is a security environment when the attributes of the trustability label of all the connected devices are all trusted attributes; otherwise, determine that the environment in which the smart terminal is located is Dangerous environment.
The system of claim 6 further comprising:

a trust degree determining unit, configured to determine, when the connected device is connected to the smart terminal, the attribute of the trust degree label of the connected device that is input by the user, in response to the user's selection of the trust degree of the device .
The system of claim 7, wherein the trust degree determining unit comprises:

The trust degree determining subunit is configured to determine an attribute of the trust label of the connected device input by the user when detecting that the connecting device is connected to the smart terminal for the first time.
The system according to any one of claims 6 to 8, wherein the connection device directly connected to the smart terminal comprises a smart wearable device, a smart home device and/or a WiFi device.
The system of claim 9 wherein said smart terminal is a smartphone.