WO2018053903A1

WO2018053903A1 - Method and device for managing file, and mobile terminal

Info

Publication number: WO2018053903A1
Application number: PCT/CN2016/103982
Authority: WO
Inventors: 郭辰; 徐宇杰
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2016-09-22
Filing date: 2016-10-31
Publication date: 2018-03-29
Also published as: CN106484796B; CN106484796A

Abstract

A method and device for managing a file, and a mobile terminal. The mobile terminal comprises a first operating system and a second operating system, the first operating system being able to access a communication network, the second operating system being connected to the first operating system and being isolated from the communication network. The method for managing a file comprises: storing, every time the first operating system receives an eSIM type parameter file sent by a server, the received eSIM type parameter file in the second operating system (102); detecting, when an editing operation on any one of all eSIM type parameter files is received, whether a user has the authority to edit any one of the eSIM type parameter files (104); responding, when it is determined that the user has the authority to edit, to the editing operation of any one of all the eSIM type parameter files (106); not responding, when it is determined that the user has no authority to edit, to the editing operation on any one of the all eSIM type parameter files (108). By means of the technical solution, it is guaranteed that the eSIM type parameter will not be falsified, meanwhile, one can process the eSIM type parameter according to actual requirements.

Description

File management method, file management device, and mobile terminal

This application claims the priority of the Chinese Patent Application filed on September 22, 2016, the Chinese Patent Application No. 201610841738.X, the invention titled "File Management Method, Document Management Device, and Mobile Terminal", the entire contents of which are incorporated by reference. Combined in this application.

Technical field

The present invention relates to the field of mobile terminal technologies, and in particular, to a file management method, a file management apparatus, and a mobile terminal.

Background technique

In the related art, in order to avoid the eSIM (Embedded SIM, embedded customer identification module) type parameter in the mobile terminal being modified, the file access attribute of the type parameter of the eSIM is usually modified, or the type parameter and the eUICC are used by the eSIM logical container ( eSIM data isolation in Embedded UICC, embedded universal integrated circuit card), or type parameter of eSIM stored by eUICC through a registry of an operating system (OS) that is inaccessible to MNO, however various methods in the related art In order to prevent the eSIM type parameter from being falsified, the operation of the eSIM type parameter is not modified, and the operation of the MSIM (Mobile Network Operator) is not modified. Certain defects.

Summary of the invention

The present invention is based on at least one of the above technical problems, and proposes a new file management scheme, which can ensure that eSIM type parameters are not falsified, and can also process eSIM type parameters according to actual use requirements.

In view of this, the present invention provides a file management method for a mobile terminal, the mobile terminal includes a first operating system and a second operating system, the first operating system can access a communication network, and the second An operating system is connected to the first operating system and is isolated from the communication network, and the file management method includes: each time the first operating system receives an eSIM type parameter file sent by a server, the received operating system The eSIM type parameter file is stored to the second operating system; when an editing operation for any eSIM type parameter file in all eSIM type parameter files is received, detecting whether the user has edited any of the eSIM type parameter files Authenticating; responding to the editing operation of any of the eSIM type parameter files when determining the editing authority; not determining the editing operation of the any eSIM type parameter file when determining that the editing authority is not available.

In this technical solution, by setting the first operating system and the second operating system in the mobile terminal, each time the first operating system receives the eSIM type parameter file sent by the server, the received eSIM type parameter file is stored to The second operating system, because the second operating system is isolated from the communication network, has high security, and can avoid unintentional or intentional tampering of eSIM type parameters under abnormal circumstances (such as improper modification of the operator or external spoofing of the hacker) Modify), at the same time, when receiving the editing operation of any eSIM type parameter file, the user's editing authority is detected. Only the user with editing authority can edit any eSIM type parameter file, otherwise it cannot be edited, and the eSIM is guaranteed. The type parameter is not illegally tampering, and the eSIM type parameter can be processed according to the actual use requirement.

In the above technical solution, preferably, after the step of storing the received eSIM type parameter file to the second operating system, and in detecting whether the user has any of the eSIM type parameter files Before the step of editing the permission, the method further includes: verifying, in the second operating system, the validity of the received eSIM type parameter file; and when the received eSIM type parameter file is verified, the display includes the a setting interface of all eSIM type parameter files, for the user to perform an editing operation on the eSIM type parameter file on the setting interface; when the verification of the received eSIM type parameter file fails, the user is Push verification failure message.

In the technical solution, the validity of the received eSIM type parameter file is verified in the second operating system, and when the verification is passed, a setting interface including all eSIM type parameter files is displayed to support the setting interface. The editing operation satisfies the user's editing requirements for the eSIM type parameter, and pushes the verification failure information to the user during the verification and identification, so that the user can perform subsequent processing in time.

In any of the above technical solutions, preferably, the editing operation includes any one of the following: a selection operation, a modification operation, and a deletion operation.

In this technical solution, the user can modify, delete, and select the eSIM type parameter file in the stored second operating system according to actual needs, and meet different user needs of the user. The editing operations include, but are not limited to, operations of selecting, modifying, deleting, and the like.

In any one of the above aspects, preferably, in the case that the editing operation is the selecting operation, the step of responding to the editing operation of the any eSIM type parameter file includes: selecting according to the selection Any one of the eSIM type parameter files updates an eSIM type parameter in the mobile terminal, and controls the mobile terminal to switch to the first operating system.

In this technical solution, by updating the eSIM type parameter in the mobile terminal according to any selected eSIM type parameter file, and controlling the mobile terminal to switch to the first operating system, the updated eSIM type parameter is activated for the user to use, To a large extent, it fits the actual needs of users.

In any one of the foregoing technical solutions, the step of detecting whether the user has the editing authority for the any eSIM type parameter file includes: collecting the authentication information of the user; determining the authentication. Whether the information matches the pre-stored authentication information; when the authentication information matches the pre-stored authentication information, determining the editing authority; the authentication information and the pre-stored authentication information are not When the matching is performed, determining that there is no editing authority; wherein the authentication information includes a combination of any one or more of the following: password information input by the user, voiceprint information of the user, fingerprint information of the user, The iris information of the user.

In the technical solution, by collecting the authentication information of the user, and determining whether the authentication information matches the pre-stored authentication information to determine whether the current user of the mobile terminal has editing rights, the security is improved, and the eSIM is avoided. The type parameter file is arbitrarily modified by others.

According to a second aspect of the present invention, a file management apparatus is provided for a mobile terminal, the mobile terminal comprising a first operating system and a second operating system, the first operating system being accessible to a communication network, The second operating system is connected to the first operating system and is isolated from the communication network, and the file management apparatus includes: a storage unit configured to receive an eSIM type parameter sent by the server every time the first operating system is received And storing, in the file, the received eSIM type parameter file to the second operating system; and the detecting unit is configured to detect whether the user is in operation when receiving an editing operation on any of the eSIM type parameter files in all the eSIM type parameter files Having an editing permission for any of the eSIM type parameter files; the processing unit is configured to, when determining the editing authority, respond to the editing operation of the any eSIM type parameter file, when determining that the editing authority is not available , does not respond to the editing operation of any of the eSIM type parameter files.

In the above technical solution, preferably, the method further includes: a verification unit configured to perform verification of validity of the received eSIM type parameter file in the second operating system; and a display unit configured to be the verification unit When the received eSIM type parameter file is verified, the setting interface including all the eSIM type parameter files is displayed, so that the user performs an editing operation on the eSIM type parameter file on the setting interface; The pushing unit is configured to push the verification failure information to the user when the verification unit fails the verification of the received eSIM type parameter file.

In any one of the foregoing technical solutions, preferably, in the case that the editing operation is the selecting operation, the processing unit is specifically configured to: update the mobile according to the selected one of the eSIM type parameter files. An eSIM type parameter in the terminal, and controlling the mobile terminal to switch to the first operating system.

In any one of the foregoing technical solutions, the detecting unit is specifically configured to: collect authentication information of the user; determine whether the authentication information matches pre-stored authentication information; When the weight information matches the pre-stored authentication information, the editing authority is determined; when the authentication information does not match the pre-stored authentication information, determining that there is no editing authority; wherein the authentication is performed The information includes a combination of any one or more of the following: password information input by the user, voiceprint information of the user, fingerprint information of the user, and iris information of the user.

Through the above technical solution, while ensuring that the eSIM type parameters are not falsified, the eSIM type parameters can be processed according to actual use requirements.

DRAWINGS

FIG. 1 shows a schematic flow chart of a file management method according to an embodiment of the present invention;

FIG. 2 shows a schematic flow chart of a file management apparatus according to an embodiment of the present invention; FIG.

FIG. 3 shows a schematic block diagram of a mobile terminal in accordance with one embodiment of the present invention; FIG.

FIG. 4 is a schematic flow chart showing a file management method according to another embodiment of the present invention; FIG.

FIG. 5 shows a schematic block diagram of a mobile terminal in accordance with another embodiment of the present invention.

detailed description

The present invention will be further described in detail below with reference to the drawings and specific embodiments. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In the following description, numerous specific details are set forth in order to provide a full understanding of the invention, but the invention may be practiced otherwise than as described herein. Limitations of the embodiments.

FIG. 1 shows a schematic flow chart of a file management method in accordance with one embodiment of the present invention.

As shown in FIG. 1, a file management method according to an embodiment of the present invention is used for a mobile terminal, where the mobile terminal includes a first operating system and a second operating system, and the first operating system can access a communication network. The second operating system is connected to the first operating system and is isolated from the communication network, and the file management method includes:

Step 102: Store the received eSIM type parameter file to the second operating system each time the first operating system receives the eSIM type parameter file sent by the server.

Step 104: When receiving an editing operation for any eSIM type parameter file in all eSIM type parameter files, it is detected whether the user has editing rights to any of the eSIM type parameter files.

Step 106: In response to determining that the editing authority is present, responding to an editing operation on the any eSIM type parameter file.

Step 108: When it is determined that the editing authority is not available, the editing operation on the any eSIM type parameter file is not responded.

FIG. 2 shows a schematic flow chart of a file management apparatus according to an embodiment of the present invention.

As shown in FIG. 2, a file management apparatus 200 according to an embodiment of the present invention is used for a mobile terminal, where the mobile terminal includes a first operating system and a second operating system, and the first operating system can access a communication network. The second operating system is connected to the first operating system and is isolated from the communication network. The file management device 200 includes a storage unit 202, a detecting unit 204, and a processing unit 206.

The storage unit 202 is configured to store the received eSIM type parameter file to the second operating system every time the first operating system receives the eSIM type parameter file sent by the server; the detecting unit 204 is configured to be When receiving an editing operation for any eSIM type parameter file in all eSIM type parameter files, detecting whether the user has editing rights to any of the eSIM type parameter files; the processing unit 206 is configured to determine that the editing authority is determined At the time of responding to the editing operation of any of the eSIM type parameter files, when it is determined that the editing authority is not available, the editing operation for the any eSIM type parameter file is not responded.

In the above technical solution, preferably, the method further includes: a verification unit 208, configured to perform verification of validity of the received eSIM type parameter file in the second operating system; the display unit 210 is configured to be The verification unit 208 displays a setting interface including all the eSIM type parameter files when the verification of the received eSIM type parameter file is passed, for the user to perform the any eSIM type parameter file on the setting interface. An editing operation; the pushing unit 212 is configured to push the verification failure information to the user when the verification unit 208 fails the verification of the received eSIM type parameter file.

In any one of the foregoing technical solutions, preferably, in the case that the editing operation is the selecting operation, the processing unit 206 is specifically configured to: update the according to the selected one of the eSIM type parameter files. An eSIM type parameter in the mobile terminal, and controlling the mobile terminal to switch to the first operating system.

FIG. 3 shows a schematic block diagram of a mobile terminal in accordance with an embodiment of the present invention.

As shown in FIG. 3, a mobile terminal 300 according to an embodiment of the present invention includes: a file management apparatus 200 as shown in FIG. 2.

The technical solution of the present invention will be further described below with reference to FIG. 4.

In this embodiment, a plurality of independent eSIM type parameter files are reserved in the mobile terminal, and are uniformly managed by the file tree collection security domain function, and only one file is used to ensure uniqueness is enabled.

In an embodiment, the dual system of the mobile terminal is different from the pure software solution of the IOS used by other products. For example, the Apple IOS and some of the main business-secure smartphones have the ROOT permission turned off, but cannot be isolated from the bottom layer, and are easily Trojan intrusion fails, and the dual system in this embodiment ensures security through physical hard isolation. Users can update eSIM information actively or passively (operator push) under normal system environment (ie, the first operating system). After doing the restart switch operation. In the security system environment (that is, the second operating system), the validity check is performed, and the verification failure prompts the user for the reason, and if successful, the eSIM setting interface is entered.

The eSIM settings interface has the following types of functions:

1. eSIM selection function (save all downloaded eSIM and factory eSIM files): User selects whether to update the type parameter, which eSIM the updated type parameter belongs to.

2. eSIM verification results (reliability, integrity and validity verification).

3. eSIM detailed information list (list all the eSIM type parameter files, including the corresponding information (for example: specific type, update time, update operator, possible impact, eSIM calibration result report details, etc.).

As shown in Figure 4, the specific process includes:

In step 402, the network pushes the eSIM request.

Step 404: The mobile terminal requests whether the reliability verification is successful. If yes, step 406 is performed; otherwise, step 428 is performed.

Step 406: The mobile terminal notifies the network that the verification is successful.

In step 408, the network performs eSIM content push.

Step 410: The mobile terminal receives and saves in a security system environment.

Step 412: The mobile terminal receives the completion and determines whether the integrity verification is successful. If yes, step 414 is performed; otherwise, step 434 is performed.

In step 414, the mobile terminal switching system is restarted.

In step 416, it is determined whether the validity verification is successful. If yes, step 418 is performed; otherwise, step 438 is performed.

In step 418, the mobile terminal enters the eSIM setting interface.

In step 420, it is determined by the biometric technology whether the user has the authority. If yes, step 422 is performed; otherwise, step 424 is performed.

In step 422, the user finally selects any eSIM type parameter file on the eSIM setting interface.

In step 424, the user is prompted to have insufficient rights.

In step 426, the terminal restarts and switches to the normal system environment.

In step 428, the user is prompted to request verification failure.

In step 430, it is determined whether the process needs to be restarted, and if so, step 430 is performed; otherwise, it ends.

In step 432, the network is notified to restart the new process.

In step 434, the user integrity verification fails.

In step 436, it is determined whether the process needs to be restarted. If yes, step 432 is performed; otherwise, it ends.

In step 438, the user is prompted to verify the validity.

In the above embodiment, the security system in the dual system of the mobile terminal saves and accesses the eSIM type parameter file, the security system does not exist in the network, and is not invaded by hackers and other lawless elements; multi-file management facilitates eSIM multi-type verification It can be retrospective, optional combination, convenient and flexible, and extensible. It is suitable for more and more complex and future application trend scenarios. Biometric technology verifies user selection and modification rights, which greatly enhances security.

As shown in FIG. 5, a mobile terminal 500 according to a second embodiment of the present invention includes a processor 502, a communication bus 504, and a memory 506. The communication bus 504 is used to implement connection communication between these components; the memory 506 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. The processor 502 is configured to perform the following steps by calling an operation instruction stored in the memory 506:

Each time the first operating system receives the eSIM type parameter file sent by the server, storing the received eSIM type parameter file to the second operating system;

When receiving an editing operation for any eSIM type parameter file in all eSIM type parameter files, detecting whether the user has editing rights to any of the eSIM type parameter files;

Responding to an editing operation on any of the eSIM type parameter files when it is determined that the editing authority is available;

When it is determined that the editing authority is not available, the editing operation for any of the eSIM type parameter files is not responded.

In the above technical solution, preferably, the processor 502 is further configured to:

In the second operating system, verifying the validity of the received eSIM type parameter file;

When the verification of the received eSIM type parameter file is passed, a setting interface including all the eSIM type parameter files is displayed, so that the user performs an editing operation on the eSIM type parameter file on the setting interface. ;

When the verification of the received eSIM type parameter file fails, the verification failure information is pushed to the user.

In the case that the editing operation is a selection operation, the step of the response to the editing operation of the any eSIM type parameter file includes:

Updating an eSIM type parameter in the mobile terminal according to the selected one of the eSIM type parameter files, and controlling the mobile terminal to switch to the first operating system.

In the above technical solution, preferably, the processor 502, the step of detecting whether the user has the editing permission for the any eSIM type parameter file, specifically includes:

Collecting authentication information of the user;

Determining whether the authentication information matches the pre-stored authentication information;

When the authentication information matches the pre-stored authentication information, determining that the editing authority is available;

When the authentication information does not match the pre-stored authentication information, determining that there is no editing authority; wherein the authentication information includes a combination of any one or more of the following: the password information and the user input The voiceprint information of the user, the fingerprint information of the user, and the iris information of the user.

The steps in the method of the embodiment of the present invention may be sequentially adjusted, merged, and deleted according to actual needs.

The units in the terminal in the embodiment of the present invention may be combined, divided, and deleted according to actual needs.

One of ordinary skill in the art can understand that all or part of the various methods of the above embodiments can be completed by a program to instruct related hardware, the program can be stored in a computer readable storage medium, and the storage medium includes read only Read-Only Memory (ROM), Random Access Memory (RAM), Programmable Read-Only Memory (PROM), Erasable Programmable Read Only Memory (Erasable Programmable Read Only Memory) EPROM), One-Time Programmable Read-Only Memory (OTPROM), Electronically-Erasable Programmable Read-Only Memory (EEPROM), Read-Only Disc (Compact Disc) Read-Only Memory (CD-ROM) or other optical disc storage, disk storage, magnetic tape storage, or any other medium readable by a computer that can be used to carry or store data.

The technical solution of the present invention is described in detail above with reference to the accompanying drawings. The technical solution of the present invention proposes a new file management scheme, which can ensure that eSIM type parameters are not falsified, and can also perform eSIM type parameters according to actual use requirements. deal with.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

A file management method for a mobile terminal, wherein the mobile terminal includes a first operating system and a second operating system, the first operating system can access a communication network, and the second operating system and the The first operating system is connected and isolated from the communication network, and the file management method includes:

Each time the first operating system receives the eSIM type parameter file sent by the server, storing the received eSIM type parameter file to the second operating system;

When receiving an editing operation for any eSIM type parameter file in all eSIM type parameter files, detecting whether the user has editing rights to any of the eSIM type parameter files;

Responding to an editing operation on any of the eSIM type parameter files when it is determined that the editing authority is available;

When it is determined that the editing authority is not available, the editing operation for any of the eSIM type parameter files is not responded.
The file management method according to claim 1, wherein after the step of storing the received eSIM type parameter file to the second operating system, and detecting whether the user has any Before the step of editing the permission of the eSIM type parameter file, the method further includes:

In the second operating system, verifying the validity of the received eSIM type parameter file;

When the verification of the received eSIM type parameter file is passed, a setting interface including all the eSIM type parameter files is displayed, so that the user performs an editing operation on the eSIM type parameter file on the setting interface. ;

When the verification of the received eSIM type parameter file fails, the verification failure information is pushed to the user.
The file management method according to claim 1 or 2, wherein the editing operation comprises any one of the following:

Select an action, modify an action, or delete an action.
The file management method according to claim 3, wherein, in the case that the editing operation is the selecting operation, the step of responding to the editing operation of the any eSIM type parameter file includes:

Updating an eSIM type parameter in the mobile terminal according to the selected one of the eSIM type parameter files, and controlling the mobile terminal to switch to the first operating system.
The file management method according to claim 1 or 2, wherein the step of detecting whether the user has the editing authority for the any eSIM type parameter file includes:

Collecting authentication information of the user;

Determining whether the authentication information matches the pre-stored authentication information;

When the authentication information matches the pre-stored authentication information, determining that the editing authority is available;

When the authentication information does not match the pre-stored authentication information, determining that the editing authority is not available;

The authentication information includes a combination of any one or more of the following: password information input by the user, voiceprint information of the user, fingerprint information of the user, and iris information of the user.
A file management apparatus for a mobile terminal, wherein the mobile terminal includes a first operating system and a second operating system, the first operating system can access a communication network, and the second operating system and the The first operating system is connected and isolated from the communication network, and the file management apparatus includes:

a storage unit, configured to store the received eSIM type parameter file to the second operating system each time the first operating system receives the eSIM type parameter file sent by the server;

a detecting unit, configured to detect whether the user has editing rights to any of the eSIM type parameter files when receiving an editing operation for any of the eSIM type parameter files in all eSIM type parameter files;

a processing unit, configured to respond to the editing operation of the any eSIM type parameter file when determining that the editing authority is available, and not to respond to the editing of the any eSIM type parameter file when determining that the editing authority is not available operating.
The file management apparatus according to claim 6, further comprising:

a verification unit, configured to verify validity of the received eSIM type parameter file in the second operating system;

a display unit, configured to display, when the verification unit passes the received eSIM type parameter file, a setting interface including all the eSIM type parameter files, for the user to perform on the setting interface Edit any eSIM type parameter file;

The pushing unit is configured to push the verification failure information to the user when the verification unit fails the verification of the received eSIM type parameter file.
A file management apparatus according to claim 6 or 7, wherein said editing operation comprises any one of the following:

Select an action, modify an action, or delete an action.
The file management apparatus according to claim 8, wherein in the case that the editing operation is the selection operation, the processing unit is specifically configured to:

Updating an eSIM type parameter in the mobile terminal according to the selected one of the eSIM type parameter files, and controlling the mobile terminal to switch to the first operating system.
The file management device according to claim 6 or 7, wherein the detecting unit is specifically configured to:

Collecting authentication information of the user;

Determining whether the authentication information matches the pre-stored authentication information;

When the authentication information matches the pre-stored authentication information, determining that the editing authority is available;

When the authentication information does not match the pre-stored authentication information, determining that the editing authority is not available;

The authentication information includes a combination of any one or more of the following: password information input by the user, voiceprint information of the user, fingerprint information of the user, and iris information of the user.
A mobile terminal, comprising:

A file management apparatus according to any one of claims 6 to 10.