WO2018000658A1

WO2018000658A1 - Information processing method and apparatus

Info

Publication number: WO2018000658A1
Application number: PCT/CN2016/101922
Authority: WO
Inventors: 王战锋
Original assignee: 中兴通讯股份有限公司
Priority date: 2016-06-29
Filing date: 2016-10-12
Publication date: 2018-01-04
Also published as: CN107545155A

Abstract

Disclosed are an information processing method and apparatus. The method comprises: acquiring environment information, and saving the environment information according to a pre-set policy; and receiving a camouflage enabling instruction, prohibiting the environment information in a terminal which acquires environment information from being deleted and/or modified. In embodiments of the present invention, it can be realized that environment information in a terminal will not be deleted and/or modified during a process of acquiring environment information, thereby ensuring the process of acquiring environment information will not be discovered, so that the process of acquiring environment information can be effectively protected from being violently stopped or terminated, thus finally covertly conducting the process of acquiring environment information, and effectively ensuring the safety of the result and the process of acquiring environment information.

Description

Information processing method and device

Technical field

The present invention relates to the field of mobile communications, and in particular, to an information processing method and apparatus.

Background technique

People travel with them or carry various instruments and equipment with them, such as mobile terminals, wearable devices, and in-vehicle devices. Most of these devices have the functions of information collection and recording, including but not limited to video information, image information, and sound information. Location information, etc., using the information collection and recording function of these instruments and equipment, can record various kinds of information in real time. However, not every information collection process is smooth, safe, and undisturbed. For example, when users encounter violent law enforcement in some public power departments, there are potentials in specific environments. In the case of security risks, such as passengers on the Internet, the reporters who are conducting unannounced visits need to collect environmental information for collecting evidence by collecting video and audio. In these situations, the process of storing information is often difficult. Law enforcement officers or other relevant persons in the public rights department who knows the loss will try to violently destroy the evidence and violence to prevent the evidence collection process. However, the prior art can only provide the means of obtaining evidence without considering the security of the evidence, which makes the evidence easy. It is destroyed and deleted, which brings difficulties to the subsequent rights protection and other processing.

Summary of the invention

The embodiment of the invention provides an information processing method and device for solving the problem that only the information collecting means is provided in the prior art, and the environmental information of the collected environment cannot be guaranteed.

In order to solve the above technical problem, an embodiment of the present invention provides an information processing method, including:

Collecting required environmental information and saving the environmental information according to a preset policy;

Receiving a masquerading open command prohibits the environmental information in the terminal from being deleted and/or changed.

Optionally, the environment information includes at least one of video information, image information, audio information, and location information.

Optionally, the prohibiting the environment information in the terminal from being deleted and/or being changed comprises: hiding the deletion and/or changing function of the environment information.

Optionally, after the receiving the masquerading open command, the method further includes: turning off the power-off function and/or the reset function of the terminal, and prohibiting the terminal from being powered off and/or resetting.

Optionally, after the receiving the masquerading open command, the method further includes: closing the acquiring system management authority function of the terminal, and prohibiting acquiring the system management right of the terminal.

Optionally, after the receiving the masquerading open command, the method further includes: uploading the collected environmental information to the server in real time.

In addition, an embodiment of the present invention further provides an information processing apparatus, including:

An information collection module configured to collect required environmental information;

The information saving module is configured to save the collected environmental information according to a preset policy;

The instruction receiving module is configured to receive a masquerading open command, and the environment information in the terminal is prohibited from being deleted and/or changed according to the masquerading open command.

Optionally, the information processing apparatus further includes a function setting module configured to: after the instruction receiving module receives the masquerading open instruction, turn off the power-off function and/or the reset function of the information processing terminal.

Optionally, the function setting module is further configured to: after the instruction receiving module receives the masquerading open instruction, turn off the acquiring system management authority function of the information processing terminal.

Optionally, the information processing apparatus further includes an uploading module, configured to upload the collected environmental information to the related server in real time.

In addition, an embodiment of the present invention further provides a computer storage medium, where the computer storage medium stores computer executable instructions, and the computer executable instructions are used to execute the information processing method.

Beneficial effects:

The embodiment of the invention provides an information processing method and device, collects required environment information, saves environment information according to a preset policy, receives a masquerading open instruction, and prohibits environmental information in the terminal. The information is deleted and/or changed. Through the implementation of the present invention, the environment information in the terminal is not deleted and/or changed in the process of collecting the environment information, so that the environment information can be ensured not to be deleted and/or modified, and the site is effectively protected.

DRAWINGS

1 is a flow chart showing an information processing method of a first embodiment of the present invention;

2 is a schematic diagram of an information processing terminal according to a second embodiment of the present invention;

Fig. 3 is a flow chart showing the information processing method of the third embodiment of the present invention.

detailed description

The idea of the present invention is to prevent the environmental information in the terminal from being deleted and/or changed when the terminal performs forensic, thereby ensuring that the forensic result is not destroyed, and effectively protecting the site.

The specific embodiments of the present invention are further described below in conjunction with the accompanying drawings.

First embodiment

This embodiment provides an information processing method. Referring to FIG. 1, the method includes:

S101: Collect required environmental information, and save according to a preset policy;

S102. Receive a masquerading open command, and prohibit the environment information in the terminal from being deleted and/or changed according to the masquerading open command.

The terminal in this embodiment includes, but is not limited to, a terminal having a forensic function, such as a mobile terminal, a wearable device, an in-vehicle terminal, and the like, and the forensic function may include video collection, image acquisition, audio collection, and location information collection according to different requirements. The environment information in this embodiment includes at least one of video information, image information, audio information, and location information. According to the different environmental information, the means of obtaining evidence are different. For example, when video information and/or image information needs to be collected, the means of evidence collection should include shooting, which is done by the camera on the terminal; when it is needed to collect audio information. At the time, the means of evidence should include recording, through the recording on the terminal The unit, such as a microphone, is completed; when location information needs to be collected, the means of forensics should include determining the location information of the terminal according to the positioning system. The positioning system includes, but is not limited to, a GPS (Global Positioning System), a Beidou positioning system, or a positioning by a base station, as long as the position can be determined.

In step S101, the required environment information is collected, that is, the corresponding environmental information is collected according to requirements, and at least one of the video information, the image information, the audio information, and the location information is selected as the required environmental information, and according to the corresponding Forensic means to collect the corresponding environmental information.

After the environment information is collected, you need to save the environment information according to the preset policy. The preservation of environmental information has different storage methods according to different environmental information. When the environmental information is video information, the means of saving is to save while the video recording and storage are almost synchronized. The collection of image information is stored by means of acquisition and then saved. The collection of audio information is similar to the process of collecting video information. It is also stored while being captured, and video recording and storage are almost synchronous. For the collection of location information, different storage means are needed according to different scenarios. For example, when the purpose of collecting location information is to save the route, it is necessary to continuously collect location information and save according to a certain time interval; and when collecting location information If the purpose is to save the location, then you may only need to collect and save the current location information. The location information is often collected in conjunction with video information, image information, audio information, etc., that is, while collecting environmental information such as video information, image information, and audio information, the location information corresponding to the information is collected.

In addition, the environmental information may include time information in addition to the above video information, image information, audio information, location information, etc., and may add time information to the collected environmental information, characterizing the time of collecting the environmental information, and making the environmental information more persuasive. The time information can be automatically added to the environment information at the same time as the collection, such as adding time information directly to the video recording screen, adding time information to the captured image information screen, or adding time in the file details of the environmental information file. The information is a feasible solution in this embodiment.

In step S102, the masquerading open command is received, indicating that the terminal will perform the corresponding masquerading, that is, the masquerading function is turned on; after receiving the masquerading open command, at least the environment information in the terminal is prohibited from being deleted. In addition and / or change. Optionally, disabling the environment information in the terminal from being deleted and/or changing may include: deleting the deletion and/or changing function of the environment information. In the terminal, the data deletion and change function is often provided, and the data is subjected to corresponding operations. For example, on the premise that a data is selected, an operation menu appears, and the operation menu includes submenus such as deletion and change, and the user can select The corresponding submenu achieves the corresponding purpose. However, in this embodiment, the implementation of deleting and/or changing the environment information in the terminal is prohibited, and the menus that are deleted and changed in the operation menu may be hidden, and the menus are not displayed, so that the user cannot operate; or, the deletion is still displayed. And the changed submenu, but the corresponding operation is not performed, and the corresponding sensory response can be made according to the user's operation, so that the user thinks that the file has been deleted and changed accordingly. The foregoing makes a corresponding sensory response according to the user's operation, including prompting the user in a display manner, the file has been deleted or changed, or prompting the user in a sound effect, the file has been deleted or has been changed, that is, given The user creates the illusion of deletion or alteration, and in fact, the file does not operate accordingly, thereby avoiding the deletion and/or modification of the environmental information. In addition, files deleted in this way will no longer display the relevant interface for the user, and the disk capacity occupied by the file will no longer be counted in the disk capacity of the terminal.

The manner of deleting and/or changing files on the existing terminal can be roughly divided into hardware operation and software operation. On some terminals, such as mobile terminals and wearable devices, the display screen can be a touch screen, deleted or changed. The operation is also performed by displaying the corresponding operation menu on the touch screen and then performing corresponding operations. In this case, prohibiting the environment information in the terminal from being deleted may directly hide the deleted or changed operation menu; and on other terminals, For example, a terminal such as an in-vehicle device does not have a touch screen, and some are only physical buttons. Then, as a delete or change button of a physical button, the environment information in the terminal cannot be deleted by not displaying it. The user's operation makes a corresponding sensory response, causing the user to think that the file has been deleted and changed accordingly, and in fact, the file does not perform corresponding operations, thereby avoiding the deletion of the environmental information.

When the environment information in the terminal is forbidden to be deleted and/or changed, the file can still be written to the terminal, that is, the process of collecting the environment information is not affected; the file is written, in this embodiment, Save the collected environmental information according to the preset policy, that is, collect environmental information and The process of saving is the process of writing the file; during the process of writing the file, the deletion and/or modification of the file according to the preset policy itself may be allowed, such as the collection of video information, the fact It has been making changes, and the collection of other environmental information is similar.

In addition, in addition to ensuring that environmental information is not deleted, that is, retaining the evidence for the evidence, it may also include that the protection forensics process is not interrupted. In the process of using the terminal for forensics, the forensic process may be interrupted, and once the forensic process is interrupted, the result of the forensic may be incomplete. Therefore, the covert collection environment information method can also ensure that the forensic process is not interrupted as much as possible.

Optionally, after receiving the masquerading open command, the method further includes: turning off the power-off function and/or the reset function of the terminal, and prohibiting the terminal from being powered off and/or resetting. The power-off in this embodiment includes a shutdown, and the reset may include restoring the factory settings, or reverting to the system version of the previous terminal. In this embodiment, the implementation of shutting down the terminal is prohibited. In the existing shutdown process, it is added to determine whether a masquerading open command is received. If received, the shutdown process is terminated, if not received. If the camouflage is turned on, the shutdown can be performed normally. Since the shutdown function on the existing terminal is often implemented by the form of a physical button, the shutdown function of the terminal is usually adopted. In this embodiment, the implementation of resetting the terminal is prohibited. In the existing reset process, it is added to determine whether the masquerading open command is received. If received, the reset process is terminated, if not received. The camouflage open command, then the reset can be performed normally. In addition, it can also be a menu item that hides the reset, so that the user cannot turn on the reset function.

Optionally, when the user collects the environment information, the collection of the environment information may be concealed collection in the background, and the collection process is not displayed, thereby preventing the collection process from being directly discovered.

Optionally, after receiving the masquerading open command, the method further includes: closing the terminal acquiring the system management authority function, and prohibiting acquiring the system management authority of the terminal. After obtaining the system management authority, various files in the system can be managed, so that the programs running in the background and the collected environment information can be found. Then, in order to prevent the forensic process from being interrupted and the environment information being deleted, after receiving the masquerading open command, the terminal acquires the system management authority function. In this embodiment, the implementation of the system management authority function is prohibited, and the existing acquisition system may be In the process of managing authority, adding a judgment to whether a masquerading open instruction is received, if received, the process of processing the system management authority request is terminated, and if the masquerading open command is not received, the process of acquiring the system management authority request is processed. It can be executed normally.

Optionally, after receiving the masquerading open command, the method further includes uploading the collected environmental information to the server in real time. The server is the content of the cloud. After receiving the masquerading open command, uploading the environment information to the server can ensure that the environmental information is not destroyed. Even if the environment information of the terminal is destroyed, it does not matter. Have a backup of the environment information. The backup process may be performed by using a wireless network for backup, or by backing up through a data network, or by using a wired network for backup. In this embodiment, the server may be a server provided by each major manufacturer, and the cloud storage space may be used. It can also be a personal server, which aims to transfer the environmental information in the terminal in time, thereby ensuring the security of the environmental information. The user can set the address of the server. After receiving the masquerading open command, the function of setting the server address can be turned off, no longer exposed to the user, and the forensic evidence is prevented from being maliciously blocked.

Optionally, in the forensic process of the terminal, the unit for forensic may be a unit of the terminal, including a camera, a microphone, a positioning system, etc., or may be an external forensic unit, and the forensic unit collects the collected environmental information. The save can also be saved in a storage unit other than the forensic unit.

The camouflage open command is generally input by the user. The method of inputting the command includes a hardware mode or a software mode, and the software method may be, for example, a method of engineering commands; in addition, in order to disguise the open command, it is not easy to be detected, and the sending of the camouflage open command is not suitable. The way the menu is explicitly displayed prevents direct exposure on the screen and prevents non-users from discovering it. The masquerading open command may be sent on the terminal, and may also be sent remotely through other devices, such as sending a masquerading open command to the in-vehicle device through the wearable device.

In addition, after receiving the masquerading open command, the alert message may also be sent to a specific contact, and the content of the short message may include the user's location information and behavior (the user is forensic) to remind the specific contact user that the forensic is being performed. This particular contact focuses on the user's dynamics and maximizes the security of the user who is collecting the evidence.

Optionally, after the user believes that the forensic process has been completed, the security of the related environmental information has been ensured. If the environmental information has been uploaded to the server, or the user has carried the terminal with the environmental information, the user may leave the site. Sending a masquerading shutdown command corresponding to the masquerading open command, canceling prohibiting the environment information in the terminal from being deleted and/or changed, so that the files in the terminal can be deleted/changed normally, and the power-off/reset function of the terminal can be restored. And get system management rights.

The forensic process in this embodiment may be: after receiving the masquerading open instruction, sending a forensic start instruction, performing forensic according to the forensic start instruction, and then sending a forensic end instruction after receiving the masquerading close instruction, ending the forensic according to the forensic end instruction It is also possible to directly obtain the evidence according to the masquerading opening instruction, and end the forensic according to the masquerading end instruction; first, the forensic can be opened first, and then the masquerading open command is received for masquerading, that is, the order of receiving the masquerading open command can be before the forensic start. Or after the forensic start, or synchronously, because the user may only be a simple forensic at first, in the process of simple forensics, it may be found that masquerading may be required, and then the masquerading open command is sent, which is also feasible in this embodiment.

The embodiment provides an information processing method, which receives a masquerading open command, prohibits the environment information in the terminal from being deleted and/or changed according to the masquerading open command, collects the required environment information, and saves the environment information according to the preset policy, which can be implemented. In the process of collecting environmental information, the environmental information in the terminal is not deleted and/or modified, and the site is effectively protected.

Second embodiment

This embodiment provides an information processing apparatus. Referring to FIG. 2, the method includes:

The instruction receiving module 201 is configured to receive the masquerading open command, and prohibit the environment information in the terminal from being deleted and/or changed;

The information collection module 202 is configured to collect required environmental information;

The information saving module 203 is configured to save the collected environment information according to a preset policy.

The terminal in this embodiment includes, but is not limited to, a terminal having a forensic function, such as a mobile terminal, a wearable device, an in-vehicle terminal, and the like, and the forensic function may include video capture according to different requirements. The environment information in the embodiment includes at least one of video information, image information, audio information, and location information. According to the different environmental information, the means of obtaining evidence are different. For example, when video information and/or image information needs to be collected, the means of evidence collection should include shooting, which is done by the camera on the terminal; when it is needed to collect audio information. At the time, the means of forensics should include recording, which is completed by a recording unit on the terminal, such as a microphone; when location information needs to be collected, the means of obtaining evidence should include determining the location information of the terminal according to the positioning system. The positioning system includes, but is not limited to, GPS, Beidou positioning system, or positioning by base station, as long as the position can be determined.

The information collecting module 202 is configured to collect the required environmental information, that is, collect corresponding environmental information according to requirements, and select at least one of the video information, the image information, the audio information, and the location information as the required environmental information, and Collect corresponding environmental information according to the corresponding evidence collection methods. The information collection module 202 may be configured to include at least one of a camera, a microphone, and a positioning system according to different environmental information.

After the environment information is collected, the information saving module 203 needs to save the environment information according to the preset policy. The preservation of environmental information has different storage methods according to different environmental information. When the environmental information is video information, the means of saving is to save while the video recording and storage are almost synchronized. The collection of image information is stored by means of acquisition and then saved. The collection of audio information is similar to the process of collecting video information. It is also stored while being captured, and video recording and storage are almost synchronous. For the collection of location information, different storage means are needed according to different scenarios. For example, when the purpose of collecting location information is to save the route, it is necessary to continuously collect location information and save according to a certain time interval; and when collecting location information If the purpose is to save the location, then you may only need to collect and save the current location information. The location information is often collected in conjunction with video information, image information, audio information, etc., that is, while collecting environmental information such as video information, image information, and audio information, the location information corresponding to the information is collected. The information storage module 203 may be a memory in the terminal, including a ROM (Read Only Memory), a RAM (Random-Access Memory), and the like.

The instruction receiving module 201 receives the masquerading open command, indicating that the terminal will perform the corresponding masquerading, that is, the masquerading function is turned on; and after receiving the masquerading open command, at least the environment information in the terminal is prohibited from being deleted and/or changed. In the terminal, the data deletion and change function is often provided, and the data is subjected to corresponding operations. For example, on the premise that a data is selected, an operation menu appears, and the operation menu includes submenus such as deletion and change, and the user can select The corresponding submenu achieves the corresponding purpose. However, in this embodiment, the implementation of deleting and/or changing the environment information in the terminal is prohibited, and the menus that are deleted and changed in the operation menu may be hidden, and the menus are not displayed, so that the user cannot operate; or, the deletion is still displayed. And the changed submenu, but the corresponding operation is not performed, and the corresponding sensory response can be made according to the user's operation, so that the user thinks that the file has been deleted and changed accordingly. The foregoing makes a corresponding sensory response according to the user's operation, including prompting the user in a display manner, the file has been deleted or changed, or prompting the user in a sound effect, the file has been deleted or has been changed, that is, given The user creates the illusion of deletion or alteration, and in fact, the file does not operate accordingly, thereby avoiding the deletion and/or modification of the environmental information. In addition, files deleted in this way will no longer display the relevant interface for the user, and the disk capacity occupied by the file will no longer be counted in the disk capacity of the terminal. The instruction receiving module 201 in this embodiment may be implemented by a communication unit in the terminal or by a control unit.

The manner of deleting and/or changing files on the existing terminal can be roughly divided into hardware operation and software operation. On some terminals, such as mobile terminals and wearable devices, the display screen can be a touch screen, deleted or changed. The operation is also performed by displaying the corresponding operation menu on the touch screen and then performing corresponding operations. In this case, prohibiting the environment information in the terminal from being deleted may directly hide the deleted or changed operation menu; and on other terminals, Such as car equipment Waiting for the terminal, there is no touch screen, and some are only some physical buttons. Then, as the delete or change button of the physical button, the environment information in the terminal cannot be deleted by not displaying, and at this time, according to the operation of the user. Corresponding sensory response is made to make the user think that the file has been deleted and changed accordingly. In fact, the file does not operate accordingly, thus avoiding the deletion of environmental information.

When the environment information in the terminal is forbidden to be deleted and/or changed, the file can still be written to the terminal, that is, the process of collecting the environment information is not affected; the file is written, in this embodiment, The process of saving the collected environment information according to the preset policy, that is, the process of collecting the environment information and saving is the process of writing the file; during the process of writing the file, deleting and/or changing the file according to the preset policy itself Operation, it can be allowed, such as the collection of video information, in fact, it is always making changes, the collection of other environmental information is similar.

In addition, in addition to ensuring that environmental information is not deleted, that is, retaining the evidence for the evidence, it may also include that the protection forensics process is not interrupted. In the process of using the terminal for forensics, the forensic process may be interrupted, and once the forensic process is interrupted, the result of the forensic may be incomplete. Therefore, the device for concealing environmental information collection can also ensure that the forensic process is not interrupted as much as possible.

Optionally, the function setting module 204 is further configured to: after receiving the masquerading open command, turn off the power-off function and/or the reset function of the terminal, and prohibit the terminal from being powered off and/or reset. The power-off in this embodiment includes a shutdown, and the reset may include restoring the factory settings, or reverting to the system version of the previous terminal. In this embodiment, the implementation of shutting down the terminal is prohibited. In the existing shutdown process, it is added to determine whether a masquerading open command is received. If received, the shutdown process is terminated, if not received. If the camouflage is turned on, the shutdown can be performed normally. Since the shutdown function on the existing terminal is often implemented by the form of a physical button, the shutdown function of the terminal is usually adopted. In this embodiment, the implementation of resetting the terminal is prohibited. In the existing reset process, it is added to determine whether the masquerading open command is received. If received, the reset process is terminated, if not received. The camouflage open command, then the reset can be performed normally. In addition, it can also be a menu item that hides the reset, so that the user cannot turn on the reset function.

Optionally, the function setting module 204 is further configured to: after receiving the masquerading open command, turn off the acquiring system management authority function of the terminal, and prohibit obtaining the system management authority of the terminal. After obtaining the system management authority, various files in the system can be managed, so that the programs running in the background and the collected environment information can be found. Then, in order to prevent the forensic process from being interrupted and the environment information being deleted, after receiving the masquerading open command, the terminal acquires the system management authority function. In this embodiment, the implementation of the system management authority function is prohibited, and the existing process of acquiring the system management authority may be added to determine whether the masquerading open command is received. If received, the processing system management authority request is obtained. The process will be terminated. If the masquerading open command is not received, the process of processing the system management permission request can be executed normally.

Optionally, the method further includes an uploading module 205, configured to upload the environmental information to the server in real time. The server is the content of the cloud. After receiving the masquerading open command, the collected environmental information can be uploaded to the server in real time to ensure that the environmental information is not destroyed, even if the environment information of the terminal is destroyed. Relationship, there is already a backup of the environment information on the server. The backup process may be performed by using a wireless network for backup, or by backing up through a data network, or by using a wired network for backup. In this embodiment, the server may be a server provided by each major manufacturer, and the cloud storage space may be used. It can also be a personal server, which aims to transfer the environmental information in the terminal in time, thereby ensuring the security of the environmental information. The user can set the address of the server. After receiving the masquerading open command, the function of setting the server address can be turned off, no longer exposed to the user, and the forensic evidence is prevented from being maliciously blocked.

The camouflage open command is generally input by the user. The way to input the command includes hardware. Mode or software mode, software method can be, for example, a way of engineering commands; in addition, in order to disguise the opening command is not easy to be detected, the sending masquerading open command should not be explicitly displayed in the form of a menu, preventing direct exposure on the screen, thereby preventing non- The user himself found out. The masquerading open command may be sent on the terminal, and may also be sent remotely through other devices, such as sending a masquerading open command to the in-vehicle device through the wearable device.

The embodiment provides an information processing apparatus, including an instruction receiving module, an information collecting module, and an information saving module. The instruction receiving module is configured to receive a masquerading open command, and the environment information in the terminal is prohibited from being deleted and/or changed according to the masquerading open command. The information collection module collects the required environment information, and the information saving module is set to save the environment information according to the preset policy, which can be implemented in During the process of collecting environmental information, the environmental information in the terminal is not deleted and/or modified, and the site is effectively protected.

Third embodiment

This embodiment provides an information processing method. Referring to FIG. 3, the method includes:

S301. Receive a masquerading open command.

The user can send a masquerading open command by operating a specific hardware switch or by a software method, such as a method of an engineering command; an entry switch for sending a masquerading open command cannot be explicitly displayed in a menu manner to prevent the entry from being Direct exposure on the screen prevents non-users from discovering that the terminal has the function of forensics and thus the destruction of environmental information collection functions.

The user can send a masquerading open command through a hardware switch or a software method to enable the masquerading function. In this embodiment, the masquerading function is opened by a software method and a dialing wheel engineering command as an example.

S302. Start collecting environmental information and save it.

After the camouflage function is enabled, the terminal will start the camera function in the background to take photos, video capture, or start the recorder function in the background for audio collection, or start the positioning function in the background to collect the position information.

After the user opens the masquerading function, the user can select the method of forensic, that is, the user is allowed to choose to take a photo forensics, or perform video capture and forensics, or perform audio collection and forensics, or perform location information collection and forensics, or simultaneously perform timed photographing, video shooting, and location. The combination of information collection for evidence.

S303. Disable deleting and/or changing the environmental information in the terminal according to the masquerading open command.

After the user turns on the camouflage function, the terminal will send a command to tell the camera application with camera and camera function, the recorder application with recording function, the positioning function application with location information collection, the picture file, the video file, the audio file, and the location. The file management application of the information file management prohibits the user from deleting and changing the environment information.

The permission to prohibit the user from deleting the related environment information by using the command may be: as long as the masquerading function is activated, the manner that the function has been activated may be detected; including but not limited to, by means of broadcasting, by means of monitoring, The method of system notification may be a method of setting a timer, or a method of setting a flag variable to change a value of a flag variable and then determining a flag variable.

Optionally, after the masquerading function is activated, the user is prohibited from deleting/changing the related environment information by using a command, and the function may send a broadcast of the related event, and the camera, the recorder, the positioning system, and the file manager register the broadcast event. In the broadcast receiver of the camera, recorder, positioning system, and file manager, a variable is set to identify whether the masquerading function is turned on. When the relevant application of the forensic application receives the broadcast for starting the forensic, the state of the variable will be changed. The relevant application for forensics can determine whether to delete or change the function menu item on the relevant interface of the forensic related application according to the state of the variable;

Optionally, after the masquerading function is started, the user is prohibited from deleting/changing the implementation of the related environment information by using a command, and the related application may also register a listener to listen to an event. When an event occurs, the listener listens to an event. Occurs to tell the relevant forensic application that the delete/change menu item will not be displayed;

Optionally, after the masquerading function is started, the user is prohibited from deleting/changing the implementation of the related environment information by using a command, and the function may also send a notification to the outside, and the notification processing may change the value of a certain system attribute, and the relevant interface of the related forensic application. When displayed, it is determined whether to display the delete/change menu item according to the value of the system attribute;

Optionally, after the masquerading function is started, the user is prohibited from deleting/changing the implementation of the related environment information by using a command, and a timer may be started. In the callback processing of the timer, the value of a certain system attribute is set, when the relevant forensic application is When the related interface is displayed, it is determined whether to display the delete/change menu item according to the value of the system attribute;

Optionally, after the masquerading function is started, the user is prohibited from deleting/changing the implementation of the related environment information by using a command, and the value of a certain flag variable may be directly set. When the related interface of the relevant forensic application is displayed, according to the value of the flag variable To decide whether to display the delete/change menu item, the target The way to set variables can be written by system attributes, etc.

S304. Turn off the shutdown function of the terminal.

The implementation of the power-off operation is prohibited. In the starting point of the existing shutdown process, it is added whether the judgment camouflage function has been started. If it is started, the shutdown process will be terminated. If it is not started, the shutdown process is normally performed.

S305. The factory reset function of the terminal is turned off;

The implementation of the operation of restoring the factory settings is prohibited. There are two types: one is to add the judgment camouflage function to the start point of the existing factory reset process. If it is started, the factory reset process will be terminated. If it is not started, the factory reset process is normal; another type of implementation is similar to the method that prohibits the user from deleting/changing the evidence file, that is, the factory reset menu item is not displayed.

S306. The function of acquiring system management authority of the terminal is closed;

The operation for prohibiting the user from obtaining the system management authority may be performed by determining whether the masquerading function has been started in the existing process starting point for obtaining the system administrator authority, and if it has been started, the process of obtaining the system management authority request will be stopped.

S307. Upload the environment information to the server.

Taking photos, collecting video, collecting audio, and collecting location information can be used as evidence to simultaneously upload servers in real time over a wireless network or mobile network.

The user can set the address of the server. When the masquerading function is turned on, the function entry for setting the server address will be hidden, that is, the user is no longer exposed, and the forensic evidence is prevented from being maliciously blocked.

According to the technical solution, when the terminal, such as a wristwatch, a mobile terminal, or an in-vehicle device, receives a local or remote masquerading shutdown command, the revoke/change permission that is prohibited from being executed is released, and the recovery terminal can be shut down, and the recovery can be restored to the factory setting. Recovery can be used to obtain system management privileges.

Obviously, those skilled in the art should understand that the above modules or steps of the present invention can be implemented by a general computing device, which can be concentrated on a single computing device, or Distributed on a network of computing devices, optionally, they can be implemented by program code executable by the computing device, so that they can be stored in a storage medium (ROM/RAM, disk, optical disk) The computing device is executed, and in some cases, the steps shown or described may be performed in an order different than that herein, or they may be separately fabricated into individual integrated circuit modules, or multiple modules or steps thereof. It is made into a single integrated circuit module. Therefore, the invention is not limited to any particular combination of hardware and software.

The above is a further detailed description of the present invention in connection with the specific embodiments, and the specific embodiments of the present invention are not limited to the description. It will be apparent to those skilled in the art that the present invention may be made without departing from the spirit and scope of the invention.

Industrial applicability

As described above, an information processing method and apparatus provided by an embodiment of the present invention have the following beneficial effects: in the process of collecting environment information, environment information in the terminal is not deleted and/or changed, thereby ensuring environmental information. Not deleted and/or modified, effectively protecting the site.

Claims

An information processing method includes:

Collecting environmental information and saving the environmental information according to a preset policy;

Receiving a masquerading open command, prohibiting the environmental information in the terminal from being deleted and/or changed according to the masquerading open command.
The information processing method according to claim 1, wherein the environmental information comprises at least one of video information, image information, audio information, and location information.
The information processing method according to claim 1, wherein the prohibiting the environmental information in the terminal from being deleted and/or changed comprises: hiding the deletion and/or changing function of the environmental information.
The information processing method according to any one of claims 1 to 3, wherein after the receiving the masquerading open command, further comprising: turning off a power-off function and/or a reset function of the terminal, prohibiting the terminal from being Electrical and / or reset.
The information processing method according to any one of claims 1 to 3, further comprising: after the receiving the masquerading open instruction, the function of acquiring the system management authority of the terminal is disabled, and the system management authority of the terminal is prohibited from being acquired. .
The information processing method according to any one of claims 1 to 3, wherein after the receiving the masquerading open command, the method further comprises: uploading the collected environmental information to the server in real time.
An information processing apparatus comprising:

An information collection module configured to collect required environmental information;

The information saving module is configured to save the collected environment information according to a preset policy.

The instruction receiving module is configured to receive a masquerading open instruction, and the environmental information in the terminal is prohibited from being deleted and/or changed according to the masquerading open instruction.
The information processing apparatus according to claim 7, further comprising a function setting module configured to turn off the power-off function and/or the reset function of said information processing terminal after said instruction receiving module receives the masquerading-on instruction.
The information processing apparatus according to claim 7, wherein said function setting module is further configured to close an acquisition system management authority function of said information processing terminal after said instruction receiving module receives a masquerading open instruction.
The information processing apparatus according to any one of claims 7-9, further comprising an uploading module, configured to upload the collected environmental information to the relevant server in real time.