WO2019210631A1

WO2019210631A1 - Mobile terminal access control method and device

Info

Publication number: WO2019210631A1
Application number: PCT/CN2018/102876
Authority: WO
Inventors: 李睿; 谢晴; 罗海光; 李洋; 孔茉莉
Original assignee: 平安科技（深圳）有限公司
Priority date: 2018-05-03
Filing date: 2018-08-29
Publication date: 2019-11-07
Also published as: CN108632807A; CN108632807B

Abstract

Disclosed is a mobile terminal access control method, comprising: receiving operating information input regarding a mobile service instance; generating a corresponding mobile service access event according to the operating information; determining, from a security enhanced SDK, a target SDK of a mobile operating system which correspondingly generates the mobile service access event; and calling the target SDK to carry out real-time control on the security of the mobile service access event. Compared with the prior art, in the present application, multiple sets of SDKs respectively suitable for different mobile terminal operating systems are introduced into a security enhanced SDK, a target SDK is determined by means of a mobile terminal operating system which generates a mobile service access event, and the target SDK is called to carry out real-time control on the security of the mobile service access event, so that a portal application can be installed and applied, only with one set of installation files, to multiple mobile terminal operating systems, and the efficiency and convenience of the usage of the portal application are improved.

Description

Method and device for access control of mobile terminal

Technical field

The present application claims priority to Chinese Patent Application No. 20181041394, filed on May 3, 2008, the entire disclosure of which is incorporated herein by reference. in.

The present application relates to the field of computer software technology, and in particular, to a method and apparatus for mobile terminal access control.

Background technique

With the development of the mobile Internet, enterprises have built various mobile office applications in order to improve employee productivity. Enterprise mobile applications break the boundaries of traditional enterprise network access control, and mobile devices have the characteristics of personal consumer goods, and the mixed personal and work information brings serious information security risks to enterprises. Therefore, the corresponding mobile security management tools must be configured to ensure the security of all business systems and mobile devices of the enterprise.

Currently, many companies deploy independent VPNs (Virtual Private Network, virtual private network) equipment to ensure the security of the communication link, or to ensure the security of mobile applications and devices through independent MDM (Mobile Device Management) software. The inventors realized that while improving system security, the experience was sacrificed. In the era of mobile Internet, users have higher and higher requirements for enterprise mobile application experience, and need new methods that can be integrated with portal applications (applications, mobile applications) to ensure the security of mobile applications without affecting user experience. However, the existing mobile office app cannot implement a set of installation files suitable for different mobile operating systems, which affects the efficiency of mobile office applications.

In addition, the inventor found that mobile office chat app software on the market generally only has a simple chat and office portal function. Since the data flowing in the app in the enterprise has exceeded the boundary of the traditional enterprise data security protection, the enterprise works in the mobile device. Data management and protection are more difficult. Users can pass data, such as copying and pasting, screen capture, and taking photos, resulting in data leakage.

In view of the above, it is necessary to provide a mobile terminal access control method and apparatus capable of solving the above technical problems.

technical problem

The purpose of the present application is to overcome the deficiencies of the prior art and provide a mobile terminal access control method and apparatus capable of effectively controlling service access and ensuring information security.

Technical solution

In order to achieve the above object, the present application provides a mobile terminal access control method, including the steps of: receiving input operation information for a mobile service instance; generating a corresponding mobile service access event according to the operation information; determining an enhanced security SDK Corresponding to the target SDK of the mobile operating system that generates the mobile service access event; calling the target SDK to perform real-time control on the security of the mobile service access event.

In order to achieve the above object, the present application further provides a mobile terminal access control apparatus, including:

Receiving an operation information module, configured to receive the input operation information for the mobile service instance; generating an access event module, configured to generate a corresponding mobile service access event according to the operation information; and determining a target SDK module, configured to determine an enhanced security SDK Corresponding to the target SDK of the mobile operating system that generates the mobile service access event; and the control access event module, configured to invoke the target SDK to perform real-time control on the security of the mobile service access event.

In order to achieve the above object, the present application also provides a mobile terminal access control adaptation device, comprising: one or more processors; a memory; one or more computer programs, wherein the one or more computer programs are stored In the memory and configured to be executed by the one or more processors, the one or more computer programs configured to perform the following steps of a mobile terminal access control method: receiving input for mobile The operation information of the service instance is generated; the corresponding mobile service access event is generated according to the operation information; the target SDK of the mobile operating system corresponding to the mobile service access event in the enhanced security SDK is determined; and the target SDK is invoked to the mobile service. The security of the access event is controlled in real time.

In order to achieve the above object, the present application also provides a computer readable nonvolatile storage medium having stored thereon a computer program executed by a processor to perform a mobile terminal access control method of the following steps: receiving an input And corresponding to the operation information of the mobile service instance; generating a corresponding mobile service access event according to the operation information; determining a target SDK of the mobile operating system corresponding to the mobile service access event in the enhanced security SDK; calling the target SDK The security of mobile service access events is controlled in real time.

Beneficial effect

The technical solution of the mobile terminal access control provided by the present application introduces multiple sets of SDKs respectively applicable to different mobile terminal operating systems in the enhanced security SDK, determines the target SDK by the mobile terminal operating system that generates the mobile service access event, and invokes the target SDK pair. The security of the mobile service access event is controlled in real time, so that the portal application can be installed and applied to multiple mobile terminal operating systems by only one set of installation files, thereby improving the efficiency and convenience of the use of the portal application.

DRAWINGS

1 is a flowchart of a mobile terminal access control method according to the present application;

2 is a flowchart of an embodiment of a mobile terminal access control method according to the present application;

3 is a schematic diagram of a cross-platform engine of a mobile application supporting HTML5 according to the present application;

4 is a schematic diagram of the composition of an application portal module of the enterprise portal of the present application;

5 is a block diagram of a module of a mobile terminal access control apparatus of the present application;

6 is a schematic diagram of a mobile terminal access control adaptation device of the present application.

BEST MODE FOR CARRYING OUT THE INVENTION

The description of the preferred embodiment of the invention is entered here.

Embodiments of the invention

Referring to FIG. 1 , a mobile terminal access control method disclosed in the present disclosure includes the following steps:

Step 101: Receive input operation information for a mobile service instance.

Step 102: Generate a corresponding mobile service access event according to the operation information.

Step 103: Determine a target SDK of the mobile operating system corresponding to the mobile service access event in the enhanced security SDK.

Step 104: Call the target SDK to perform real-time control on the security of the mobile service access event.

The mobile terminal access control method disclosed in the disclosure can be applied to installation including android OS (Android operating system), IOS Enterprise mobile portal application APP software on mobile terminal operating systems such as OS (Apple operating system) and WinPhone OS (Microsoft mobile operating system). The implementation of the method is explained in detail below in conjunction with FIG. 2.

Step 201: Load a mobile service module.

The mobile service module can be various office service modules, such as the attendance punch card service module, the project management service module, the enterprise office automation service module, the enterprise instant messaging tool business module, and the enterprise entertainment activity business module.

The mobile service module can be pre-packaged in the APP installation file, which is loaded by default when the user installs, or can be dynamically loaded by the APP and the server after downloading data from the server (can be installed as a plug-in) during the process of using the APP. . The user can choose to load one or more mobile service modules.

Step 202: The mobile service module runs a process, and the corresponding process receives operation information input by the user.

For example, after the user selects to load the enterprise instant messaging tool business module, in the process of using the chat function, the enterprise instant messaging tool business module runs and generates one or more mobile service instance processes, and the user long presses and pastes the chat information. During operation, the corresponding process receives the user's operation information.

For example, after the user selects to load the project management service module, in the process of using the project management service, the project management service module runs and generates one or more processes of the mobile service instance, and clicks to implement the operation of opening a specific page carrying the confidential data. , the corresponding process receives the user's operation information.

For another example, after the user selects to load the enterprise office automation service module, during the use process, the enterprise office automation service module runs and generates one or more mobile service instance processes, and the user opens the page containing the enterprise trade secret information, and the page is When the operation of intercepting the screen image is performed, the corresponding process receives the operation information of the user.

For example, after the user selects to load and use the enterprise entertainment activity business module, the process of one or more mobile service instances generated by the enterprise entertainment activity business module generates file data of the enterprise plan planning during use, when the user uses the mobile phone Bluetooth When the driver such as infrared or NFC transmits the file to the outside, the corresponding process receives the operation information of the user.

For another example, after the user selects to install one or more of the above modules, the module runs and generates one or more mobile service instance processes during use, and the user saves the generated data or files to a local operation, or implements Click to access the specific content operation, the corresponding process can receive the user's operation information.

Step 203: The process generates a corresponding mobile service access event according to the operation information.

Step 204: The process determines a target SDK of the mobile operating system corresponding to the mobile service access event in the enhanced security SDK.

Enhanced Security SDK (Software The Development Kit, a software development kit, runs on top of the mobile terminal operating system and is programmed by extending the native capabilities of the mobile terminal operating system browser kernel. The enhanced security SDK seamlessly integrates cross-platform engines for mobile apps in the app.

The enhanced security SDK includes several sets of SDK packages for different mobile operating systems. Each SDK package integrates a native interface corresponding to the mobile operating system, and the corresponding process determines the corresponding target SDK according to the mobile operating system that generates the mobile service access time. .

In step 205, the process accesses the target SDK through the mobile application cross-platform engine.

Referring to FIG. 3, taking the corresponding process for the HTML5-based process as an example, the process corresponding to the mobile service access event accesses the target SDK through the mobile application cross-platform engine.

Specifically, the process accesses the browser kernel of the browser through a JAVAScript request interface of a browser built in the mobile terminal operating system, and then accesses the target SDK through a native interface of the mobile operating system integrated in the target SDK.

Therefore, the portal application in the present application can be installed without restriction to be applied to various mobile terminal operating system platforms, such as an Android operating system, an IOS operating system, and a WinPhone operating system.

In step 206, the process invokes the target SDK to perform real-time control on the security of the mobile service access event.

Referring to FIG. 4, when the target SDK is invoked to control the security of the mobile service access event in real time, the information can be exchanged with the background server, the background server, the enterprise portal application App and the mobile service module therein, the mobile cross-platform engine, and enhanced security. The relationship between the SDKs is shown in Figure 3.

The access type corresponding to the mobile service access event includes at least one of application interaction access, data storage access, and device capability access.

The target SDK is invoked to control the security of the mobile service access event in real time. For example, the security of the service application can be ensured through the control of interface interaction, data storage or device capability access, and the server can be uploaded for log archive for security administrator check. The following is a specific example when the mobile service access event is an application interactive access type, a data storage access type, and a device capability access type.

(1) Application interactive access control

Encapsulate the mobile terminal operating system UI program framework, support form dynamic watermarking, copy and paste control, edit box encryption, etc., and secure the application interface interaction.

The form dynamic watermark function can be implemented by re-encapsulating the browser form control on the IOS or Android platform to support dynamic watermark display. For example, when the user selects to open a specific page carrying the confidential data in the process of using the project management service, the process invokes the SDK to perform real-time control on the operation, adding a watermark to the specific page displayed to the user, and preventing the user from being The company’s secrets are revealed by taking pictures to obtain pictures and affecting the company.

Copy and paste control function, you can control the long press operation in the IOS platform, and control the copyEnable feature of the View component in the Android platform. For example, in the process of using the chat function, when the user performs a long press copy and paste operation on the chat information, the process invokes the SDK to perform real-time control on the operation, preventing the user from copying and pasting the confidential data to cause the enterprise secret to leak.

Anti-screen control, for example, the user uses the enterprise office automation business module to open a page containing the business secret information of the enterprise, and intercepts the screen image of the page, and the process calls the SDK to perform real-time control on the operation, which can be implemented on the android operating system. Anti-screen control, for the IOS operating system can not prohibit screen capture, record screen capture operations, sent to the background server for record and archive, to prevent users from intercepting the screen to leak corporate secret content.

(2) Data storage access control

The application local storage is encapsulated to implement an encrypted storage and automatic cache cleaning mechanism to ensure the security of the portal application terminal process data.

The local data encryption storage function establishes a dedicated storage file for the entire mobile portal application as a unified storage area, and establishes a private file access mechanism in the storage area, and temporarily stores the temporary storage data for each process in the portal according to the area and uses the AES encryption and decryption algorithm to process . For example, the user selects to install and use multiple mobile service modules, and implements a save local operation on the generated data or files in the process of using each mobile service instance, or performs an operation of clicking to access specific content, and the process may invoke the SDK pair. These operations perform data partitioning and encryption control as described above.

The application cache management function dynamically creates a cache data area for the mobile service instance inside the portal, manages the cache data according to the operation status of the mobile service instance, and clears all cached contents before the application portal App exits.

The remote data clearing function sends a data clearing instruction by the server's management background to delete the specified application and corresponding data on the mobile phone. For example, when a non-enterprise employee uses a portal application to perform a preset operation, such as accessing a data file, the operation triggers a security protection function, and sends information to the management background. The management background judges information such as the employee's on-the-job status and mobile phone location. If it is determined that the employee corresponding to the portal application login account has resigned, or if the mobile phone where the portal App is installed has been lost, the data clearing instruction is issued, and the process calls the target SDK to perform real-time control on the operation according to the instruction, that is, delete the mobile phone. Specify the application or the corresponding data.

(3) Equipment capability access control

Access control of terminal hardware capabilities such as Bluetooth transmission, infrared transmission, NFC transmission, positioning, and photographing, ensuring that the hardware access of the portal application is authorized to ensure that the hardware capability access is controlled and recordable. For example, when the user uses the enterprise entertainment activity business module, the file data of the enterprise activity plan is generated. When the user uses the mobile phone Bluetooth, infrared, NFC, etc. to transmit the file to the outside, or when taking a photo operation, the target is called. The SDK controls the operation in real time, and can detect the user authority information. If the user does not have the access control authority, the user is prohibited from accessing and controlling the hardware devices of the terminal.

Referring to FIG. 5, the mobile terminal access control apparatus disclosed in the disclosure includes:

Receiving an operation information module, configured to receive input operation information for a mobile service instance;

Generating an access event module, configured to generate a corresponding mobile service access event according to the operation information;

Determining a target SDK module, configured to determine a target SDK of a mobile operating system corresponding to the mobile service access event in the enhanced security SDK;

The control access event module is configured to invoke the target SDK to perform real-time control on security of the mobile service access event.

The working processes of receiving the operation information module, generating the access event module, determining the target SDK module, and controlling the access time module respectively correspond to the steps 101, 102, 103, and 104 of the mobile terminal access control method of the present disclosure, and details are not described herein again.

The present application also provides a mobile terminal access control adaptation device comprising: one or more processors; a memory; one or more computer programs, wherein the one or more computer programs are stored in the memory And configured to be executed by the one or more processors, the one or more computer programs configured to: perform the aforementioned mobile terminal access control method.

Referring to FIG. 5, the mobile terminal access control adaptation device may include a processor 1001, such as a CPU, a network interface 1002, a user interface 1003, and a memory 1004. Connection communication between these components can be achieved via a communication bus. The network interface 1002 may optionally include a standard wired interface (for connecting to a wired network), a wireless interface (such as a WI-FI interface, a Bluetooth interface, an infrared interface, etc. for connecting to a wireless network). The user interface 1003 can include a display, an input unit such as a keyboard, and the optional user interface 1003 can also include a standard wired interface (eg, for connecting a wired keyboard, a wired mouse, etc.) and/or a wireless interface (eg, Used to connect a wireless keyboard, wireless mouse). The memory 1004 may be a high speed RAM memory or a non-volatile memory such as a disk memory. The memory 1004 can also optionally be a storage device independent of the aforementioned processor 1001.

Optionally, the mobile terminal access control adaptation device may further include a camera, RF (Radio) Frequency, RF) circuits, sensors, audio circuits, WiFi modules, and more.

It will be understood by those skilled in the art that the mobile terminal access control adaptation device structure shown in the figure does not constitute a limitation of the mobile terminal access control adaptation device, and may include more or less components than the illustration, or a combination of some Some parts, or different parts are arranged.

The present application also provides a computer readable non-volatile storage medium having stored thereon a computer program that, when executed by a processor, implements the steps of the aforementioned mobile terminal access control method.

Referring to FIG. 5, an operating system, a network communication module, a user interface module, and a mobile terminal access control adaptation program may be included in the memory 1004 as a computer storage medium. The operating system is a program for managing and controlling the hardware and software resources of the mobile terminal access control adaptation device, and supports the operation of the network communication module, the user interface module, the mobile terminal access control adaptation program, and other programs or software; The management and control network interface 1002 is used to manage and control the user interface 1003.

As can be seen from the above detailed description of the disclosure, the present disclosure has at least the following beneficial technical effects compared to the prior art:

First, the mobile terminal operating system built-in browser kernel JAVAScript callback interface accesses the mobile terminal operating system native API interface, so that the portal App can be installed unrestrictedly applied to various mobile terminal operating system platforms, and the mobile terminal access control method is added. Application flexibility.

Secondly, by adding device management and control functions to the mobile office software, combined with the policy distribution, user information, and device information detection and analysis in the management background, the device security, application security, and data security of the mobile office software are enhanced.

Thirdly, the enhanced security SDK is implemented by programming the native capability extension of the mobile terminal operating system browser kernel, and the implementation manner is simple and easy, which reduces the complexity of the software and improves the operation efficiency.

Those skilled in the art will appreciate that the present disclosure includes apparatus that is directed to performing one or more of the operations described in this disclosure. These devices may be specially designed and manufactured for the required purposes, or may also include known devices in a general purpose computer. These devices have computer programs stored therein that are selectively activated or reconfigured. Such computer programs may be stored in a device (eg, computer) readable medium or in any type of medium suitable for storing electronic instructions and coupled to a bus, respectively, including but not limited to any Types of disks (including floppy disks, hard disks, optical disks, CD-ROMs, and magneto-optical disks), ROM (Read-Only Memory), RAM (Random AcceSS) Memory, RAM, EPROM (EraSable) Programmable Read-Only Memory, EEPROM (Electrically EraSable Programmable Read-Only Memory), flash memory, magnetic card or light card. That is, a readable medium includes any medium that is stored or transmitted by a device (eg, a computer) in a readable form.

Industrial applicability

Type the industrial usability description paragraph here.

Sequence table free content

Type the sequence table free content description paragraph here.

Claims

A mobile terminal access control method, the method comprising the following steps:

Receiving input operation information for a mobile service instance;

Generating a corresponding mobile service access event according to the operation information;

Determining a target SDK of the mobile operating system corresponding to the mobile service access event in the enhanced security SDK;

The target SDK is invoked to control the security of the mobile service access event in real time.
The mobile terminal access control method according to claim 1, wherein the calling the target SDK to perform real-time control on the security of the mobile service access event comprises:

The mobile service instance corresponding to the mobile service access event accesses the target SDK through a mobile application cross-platform engine;

The target SDK is invoked to control the security of the mobile service access event in real time.
The mobile terminal access control method according to claim 2, wherein the mobile service instance is an HTML5-based mobile service instance, and the mobile service instance corresponding to the mobile service access event accessing the target SDK through the mobile application cross-platform engine comprises:

The mobile service instance accesses a browser kernel of the browser through a JAVAScript request interface of a browser built in the mobile terminal operating system;

The target SDK is accessed through a native interface of the mobile operating system integrated in the target SDK.
The mobile terminal access control method according to claim 1, wherein the access type corresponding to the mobile service access event comprises at least one of an application interaction access, a data storage access, and a device capability access.
The mobile terminal access control method according to claim 4, wherein the access type corresponding to the mobile service access event is an application interactive access, and the calling the target SDK to perform real-time control on the security of the mobile service access event includes:

Invoking the target SDK according to the mobile service access event to add a watermark to the form display; or,

Invoking the target SDK according to the mobile service access event to prohibit copying and pasting operations; or

When the operating system of the mobile terminal is an Android operating system, the target SDK is invoked according to the mobile service access event to prohibit a screen capture operation; or

When the operating system of the mobile terminal is an IOS operating system, the target SDK is invoked according to the mobile service access event to record a screen capture operation, and the screen capture record is uploaded to the server.
The mobile terminal access control method according to claim 4, wherein the access type corresponding to the mobile service access event is a data storage access, and the calling the target SDK to perform real-time control on the security of the mobile service access event includes:

Invoking the target SDK according to the mobile service access event to establish a unified storage area, storing temporary storage data generated by the mobile service instance in a specific area and encrypting; or

Invoking the target SDK according to the mobile service access event to establish a cache data area for the mobile service instance, and clearing all data of the cache data area before the program exits; or

The target SDK is invoked according to the mobile service access event to clear data in a particular data store.
The mobile terminal access control method according to claim 4, wherein the access type corresponding to the mobile service access event is device interactive access, and the calling the target SDK to perform real-time control on the security of the mobile service access event includes:

Invoking the target SDK according to the mobile service access event to prohibit a photographing operation; or

The target SDK is invoked according to the mobile service access event to prohibit acquisition of location information.
A mobile terminal access control device includes:

Receiving an operation information module, configured to receive input operation information for a mobile service instance;

Generating an access event module, configured to generate a corresponding mobile service access event according to the operation information;

Determining a target SDK module, configured to determine a target SDK of a mobile operating system corresponding to the mobile service access event in the enhanced security SDK;

The control access event module is configured to invoke the target SDK to perform real-time control on security of the mobile service access event.
A mobile terminal access control adaptation device includes:

One or more processors;

Memory

One or more computer programs, wherein the one or more computer programs are stored in the memory and configured to be executed by the one or more processors, the one or more computer programs configured to: Perform the following steps of a mobile terminal access control method:

Receiving input operation information for a mobile service instance;

Generating a corresponding mobile service access event according to the operation information;

Determining a target SDK of the mobile operating system corresponding to the mobile service access event in the enhanced security SDK;

The target SDK is invoked to control the security of the mobile service access event in real time.
The mobile terminal access control adaptation device according to claim 9, wherein the calling the target SDK to perform real-time control on the security of the mobile service access event comprises:

The mobile service instance corresponding to the mobile service access event accesses the target SDK through a mobile application cross-platform engine;

The target SDK is invoked to control the security of the mobile service access event in real time.
The mobile terminal access control adaptation device according to claim 10, wherein the mobile service instance is an HTML5-based mobile service instance, and the mobile service instance corresponding to the mobile service access event accesses the target SDK through a mobile application cross-platform engine include:

The mobile service instance accesses a browser kernel of the browser through a JAVAScript request interface of a browser built in the mobile terminal operating system;

The target SDK is accessed through a native interface of the mobile operating system integrated in the target SDK.
The mobile terminal access control adaptation device according to claim 9, wherein the access type corresponding to the mobile service access event comprises at least one of an application interaction access, a data storage access, and a device capability access.
The mobile terminal access control adaptation device according to claim 12, wherein the access type corresponding to the mobile service access event is an application interactive access, and the calling the target SDK controls the security of the mobile service access event in real time. include:

Invoking the target SDK according to the mobile service access event to add a watermark to the form display; or,

Invoking the target SDK according to the mobile service access event to prohibit copying and pasting operations; or

When the operating system of the mobile terminal is an Android operating system, the target SDK is invoked according to the mobile service access event to prohibit a screen capture operation; or

When the operating system of the mobile terminal is an IOS operating system, the target SDK is invoked according to the mobile service access event to record a screen capture operation, and the screen capture record is uploaded to the server.
A computer readable non-volatile storage medium having stored thereon a computer program that, when executed by a processor, implements the following steps of a mobile terminal access control method:

Receiving input operation information for a mobile service instance;

Generating a corresponding mobile service access event according to the operation information;

Determining a target SDK of the mobile operating system corresponding to the mobile service access event in the enhanced security SDK;

The target SDK is invoked to control the security of the mobile service access event in real time.
The computer readable non-volatile storage medium according to claim 14, wherein the calling the target SDK to perform real-time control on security of the mobile service access event comprises:

The mobile service instance corresponding to the mobile service access event accesses the target SDK through a mobile application cross-platform engine;

The target SDK is invoked to control the security of the mobile service access event in real time.
The computer readable non-volatile storage medium according to claim 15, wherein the mobile service instance is an HTML5-based mobile service instance, and the mobile service instance corresponding to the mobile service access event accesses the mobile application cross-platform engine The target SDK includes:

The mobile service instance accesses a browser kernel of the browser through a JAVAScript request interface of a browser built in the mobile terminal operating system;

The target SDK is accessed through a native interface of the mobile operating system integrated in the target SDK.
The computer readable non-volatile storage medium according to claim 14, wherein the access type corresponding to the mobile service access event comprises at least one of an application interaction access, a data storage access, and a device capability access.
The computer readable non-volatile storage medium according to claim 17, wherein the access type corresponding to the mobile service access event is an application interactive access, and the calling the target SDK performs security on the mobile service access event. Real-time control includes:

Invoking the target SDK according to the mobile service access event to add a watermark to the form display; or,

Invoking the target SDK according to the mobile service access event to prohibit copying and pasting operations; or

When the operating system of the mobile terminal is an Android operating system, the target SDK is invoked according to the mobile service access event to prohibit a screen capture operation; or

When the operating system of the mobile terminal is an IOS operating system, the target SDK is invoked according to the mobile service access event to record a screen capture operation, and the screen capture record is uploaded to the server.
The computer readable non-volatile storage medium according to claim 17, wherein the access type corresponding to the mobile service access event is a data storage access, and the calling the target SDK performs security on the mobile service access event. Real-time control includes:

Invoking the target SDK according to the mobile service access event to establish a unified storage area, storing temporary storage data generated by the mobile service instance in a specific area and encrypting; or

Invoking the target SDK according to the mobile service access event to establish a cache data area for the mobile service instance, and clearing all data of the cache data area before the program exits; or

The target SDK is invoked according to the mobile service access event to clear data in a particular data store.
The computer readable non-volatile storage medium according to claim 17, wherein the access type corresponding to the mobile service access event is device interactive access, and the calling the target SDK performs security on the mobile service access event. Real-time control includes:

Invoking the target SDK according to the mobile service access event to prohibit a photographing operation; or

The target SDK is invoked according to the mobile service access event to prohibit acquisition of location information.