WO2023284555A1

WO2023284555A1 - Method for securely calling service, and method and apparatus for securely registering service

Info

Publication number: WO2023284555A1
Application number: PCT/CN2022/102477
Authority: WO
Inventors: 张阿东
Original assignee: 华为技术有限公司
Priority date: 2021-07-14
Filing date: 2022-06-29
Publication date: 2023-01-19
Also published as: CN115701018A

Abstract

The present application provides a method for securely calling a service, and a method and apparatus for securely registering the service. The method for securely calling the service in the present application comprises: obtaining a first security level of a service requested to be called by a terminal device; obtaining a second security level of the terminal device; determining, according to the first security level and the second security level, whether the terminal device has a permission to call the service; and when the terminal device has the permission to call the service, allowing the terminal device to call the service. The present application ensures the security of the service.

Description

Method for securely invoking service, method and device for securely registering service

This application claims the priority of the Chinese patent application with the application number 202110795692.3 and the title of the application titled "Method for Safe Calling Service, Method and Device for Safe Registration Service" submitted to the China Patent Office on July 14, 2021, the entire content of which is passed References are incorporated in this application.

technical field

The present application relates to terminal operating system technology, and in particular to a method for securely invoking a service, and a method and device for securely registering a service.

Background technique

Terminal devices carry a variety of services and applications. With the development of communication and the improvement of user needs, terminal devices can call each other to realize the cooperative use of services and applications, forming a multi-service system that can provide distributed services. end device network.

Correspondingly, users have higher and higher security requirements for terminal equipment.

Contents of the invention

The present application provides a method for securely invoking a service, a method and device for securely registering a service, so as to ensure the security of the service.

In the first aspect, the present application provides a method for safely invoking a service, including: obtaining the first security level of the service requested by the terminal device; obtaining the second security level of the terminal device; according to the first security level and the The second security level determines whether the terminal device has the right to call the service; when the terminal device has the right to call the service, the terminal device is allowed to call the service.

In a possible implementation manner, before the acquiring the first security level of the service requested to be invoked by the terminal device, the method further includes: receiving a service invocation request sent by the terminal device.

In this application, the operating system of the terminal device provides a service security level configuration interface, and the service security level configuration interface includes but is not limited to the following forms:

1. In the service configuration file, add a security level field.

For example, the configuration file (config file) includes the field Securelevel: SL1. Securelevel is a newly added security level field in the config file, and SL1 is preset or written by the service provider.

For another example, the configuration file (such as xml/config/Json file) includes the Securelevel field, and the configuration format is as follows:

{

...

"Securelevel": "SL2"

...

}

The above configuration can be implemented by the provider of the service.

2. Provide a security configuration page, and the user can set the security level of the service

When the user starts the service, the security configuration page can be displayed to the user, and the user can write or select the security level of the service. It should be understood that the terminal operating system may also provide the user with an interface or interface for setting the security level in other ways, which is not specifically limited in this application.

For example,

Start service_A

Securelevel SL3

3. Match the security level according to the characteristic information of the service

For example, services can use key signatures to provide security guarantees. Therefore, the service key signature level can be associated with the service security level, and the service key signature level reflects its security level. For example, a service with a security level of SL1 is signed with an SL1-level key; a service with a security level of SL2 is signed with a SL2-level key.

For another example, the storage path of the service program may be associated with the security level of the service, and the security level of the service program may be reflected by the storage path of the service program. For example, the storage path of the service program is under the system path, and its security level is SL2, and the storage path of the service program is under the data path, and its security level is SL1.

It should be understood that, in addition to the above three methods, the operating system of the terminal device may also provide other security level configuration interfaces to configure the security level of the service, and this application does not limit the specific implementation of the configuration.

In a possible implementation manner, the obtaining the second security level of the terminal device includes: when the service invocation request includes the identifier of the terminal device, obtaining the second security level according to the identifier of the terminal device Two security levels; or, when the service invocation request includes a security level identifier of the terminal device, acquiring the second security level according to the security level identifier of the terminal device.

In a possible implementation manner, the service providing device may determine whether the first security level is smaller than the second security level. When the first security level is lower than the second security level, it is determined that the service calling device has the right to call the service; or, when the first security level is greater than or equal to the second security level, it is determined that the service calling device does not have the right to call the service.

In this manner, the security level of the terminal device and the security level of the service may use the same judgment standard. For example, the security level of the terminal device and the security level of the service both include L1-Lm, so the two security levels are the same standard.

The first security level is lower than the second security level, indicating that the security level of the service is lower than that of the service calling device, and the service calling device can call the service, so the service providing device determines that the service calling device has the authority to call the service.

In a possible implementation manner, the service providing device may determine the highest service level corresponding to the second security level, and determine whether the first security level is smaller than the highest service level. When the first security level is less than the highest service level, it is determined that the service calling device has the right to call the service; when the first security level is greater than or equal to the highest service level, it is determined that the service calling device does not have the right to call the service.

In this method, the security level of the terminal equipment and the security level of the service can adopt different judgment standards, but there is a corresponding relationship between the security level of the terminal equipment and the security level of the service. For example, the security level of the terminal equipment includes L1～Lm , the security levels of the service include SL1˜SLn, m<n, and the security level of one terminal device may correspond to one or more security levels of the service.

The highest level of service corresponding to the second security level refers to the highest level of service that the service calling device can call. If the service is higher than the highest service level, the service calling device cannot call it. The first security level is lower than the highest level of the service, which means that the security level of the service is lower than the highest level of the service that the service calling device can call, and the service calling device can call the service, so the service providing device determines that the service calling device has the authority to call the service.

In a possible implementation manner, the service providing device may determine the lowest level of the device corresponding to the first security level, and determine whether the second security level is greater than or equal to the lowest level of the device. When the second security level is greater than the lowest level of the device, it is determined that the service calling device has the right to call the service; when the second security level is less than or equal to the lowest level of the device, it is determined that the service calling device does not have the right to call the service.

In this method, the security level of the terminal equipment and the security level of the service can adopt different judgment standards, but there is a corresponding relationship between the security level of the terminal equipment and the security level of the service. For example, the security level of the terminal equipment includes L1～Lm , the security levels of the service include SL1˜SLn, m is greater than n, and one security level of the service may correspond to the security levels of one or more terminal devices.

The lowest level of equipment corresponding to the first security level refers to the lowest level of equipment that can call the service. If the security level of the service calling device is lower than the lowest level of the device, the service cannot be called. The second security level is greater than the lowest level of the device, which means that the security level of the service calling device is greater than the lowest level of the terminal device that can call the service, and the service calling device can call the service, so the service providing device determines that the service calling device has the authority to call the service.

It should be understood that, in addition to the above three determination rules, other rules may also be used to determine whether the service calling device has the right to call the service, which is not specifically limited in the present application.

It can be seen that the service providing device matches the security level of the service invoking device with the security level of the called service. The terminal device can call a service with a low security level), and the service calling device has the authority to call the service on the service providing device, which ensures the security of the service.

In this application, by separately setting security levels for terminal equipment and services, and based on the security levels of the two, it is determined whether the terminal equipment has the authority to call services on other terminal equipment, so that terminal equipment with a low security level cannot call services with a high security level , terminal equipment with a high security level can call services with a low security level, ensuring the security of services.

It should be understood that the above-mentioned embodiment describes the process of the service calling device securely calling the service on the service providing device. When calling the permission of the application, the service calling device is allowed to call the service and obtain the data of the service.

In a second aspect, the present application provides a method for secure registration service, including: obtaining the first security level of the service for which the terminal device requests to register; obtaining the second security level of the terminal device; according to the first security level and the The second security level determines whether the terminal device has the right to register the service; when the terminal device has the right to register the service, allow the terminal device to register the service.

1. In the service configuration file, add a security level field.

{

...

"Securelevel": "SL2"

...

}

The above configuration can be implemented by the provider of the service.

For example,

Start service_A

Securelevel SL3

Based on the above methods, the terminal device can obtain the first security level of the service to be registered, for example, you can read the value of the field Securelevel in the config file, and use SL1 as the first security level; or, read the configuration of the service The field Securelevel in the item, set SL1 as the first security level; or, obtain the key signature level of the service, and use its corresponding security level as the first security level; or, obtain the storage path of the program of the service, according to the storage path Determines the second security level for the service.

In a possible implementation manner, the operating system of the terminal device may determine whether the first security level is lower than the second security level. When the first security level is lower than the second security level, it is determined that the terminal device has the authority to register for the service; or, when the first security level is greater than or equal to the second security level, it is determined that the terminal device does not have the authority to register for the service.

The first security level is lower than the second security level, indicating that the security level of the service is lower than that of the terminal device, and the terminal device can register for the service, so the operating system of the terminal device determines that the terminal device has the authority to register for the service.

In a possible implementation manner, the operating system of the terminal device may determine the highest service level corresponding to the second security level, and determine whether the first security level is lower than the highest service level. When the first security level is less than the highest service level, it is determined that the terminal device has the authority to register for the service; when the first security level is greater than or equal to the highest service level, it is determined that the terminal device does not have the authority to register for the service.

The highest service level corresponding to the second security level refers to the highest service level that the terminal device can register with. If the service is higher than the highest service level, the terminal device cannot register. The first security level is lower than the highest service level, indicating that the security level of the service is lower than the highest level of services that the terminal device can register for, and the terminal device can register for the service, so the operating system of the terminal device determines that the terminal device has the authority to register for the service.

In a possible implementation manner, the operating system of the terminal device may determine the lowest level of the device corresponding to the first security level, and determine whether the second security level is greater than or equal to the lowest level of the device. When the second security level is greater than the lowest level of the device, it is determined that the terminal device has the authority to register the service; when the second security level is less than or equal to the lowest level of the device, it is determined that the terminal device does not have the authority to register the service.

The lowest level of equipment corresponding to the first security level refers to the lowest level of equipment that can register for services. If the security level of a terminal device is lower than the lowest level of equipment, it cannot register for services. The second security level is greater than the lowest level of the device, which means that the security level of the terminal device is greater than the lowest level of the terminal device that can register for the service, and the terminal device can register for the service. Therefore, the operating system of the terminal device determines that the terminal device has the authority to register for the service.

It should be understood that, in addition to the above three determination rules, other rules may also be used to determine whether the terminal device has the authority to register the service, which is not specifically limited in this application.

It can be seen that the operating system of the terminal device matches the security level of the terminal device with the security level of the registered service. The terminal device can register a service with a low security level), the terminal device has the authority to register the service on the operating system of the terminal device, ensuring the security of the service.

In this application, by separately setting security levels for terminal equipment and services, and based on the security levels of the two, it is determined whether the terminal equipment has the authority to register services on it, so that terminal equipment with low security levels cannot register services with high security levels. A terminal device with a security level can register a service with a low security level, which ensures the security of the service.

It should be understood that the above-mentioned embodiment describes the process of securely registering a local service on a terminal device. The operating system of the terminal device can also refer to the above steps to implement the process of securely installing the service on the terminal device. When the terminal device has the authority to install the service, the terminal device is allowed to install service.

In a possible implementation manner, before obtaining the first security level of the service for which the terminal device requests to register, the method further includes: obtaining a service registration request.

In a third aspect, the present application provides a device for safely invoking a service, including: an acquisition module and a processing module. in,

An acquisition module, configured to acquire the first security level of the service requested by the terminal device; acquire a second security level of the terminal device; a processing module, configured to determine the required security level according to the first security level and the second security level Whether the terminal device has the right to call the service; when the terminal device has the right to call the service, allow the terminal device to call the service.

In a possible implementation manner, the processing module is specifically configured to judge whether the first security level is smaller than the second security level; when the first security level is smaller than the second security level, determine The terminal device has the right to call the service; or, when the first security level is greater than or equal to the second security level, it is determined that the terminal device does not have the right to call the service.

In a possible implementation manner, the processing module is specifically configured to determine the highest service level corresponding to the second security level; judge whether the first security level is smaller than the highest service level; when the first security level When the security level is lower than the highest service level, it is determined that the terminal device has the authority to call the service; when the first security level is greater than or equal to the highest service level, it is determined that the terminal device does not have the right to call the service. service permissions.

In a possible implementation manner, the processing module is specifically configured to determine the lowest level of equipment corresponding to the first security level; judge whether the second security level is greater than the lowest level of the equipment; when the second When the security level is greater than the minimum level of the device, it is determined that the terminal device has the authority to call the service; when the second security level is less than or equal to the minimum level of the device, it is determined that the terminal device does not have the right to call the service. service permissions.

In a possible implementation manner, the obtaining module is further configured to receive a service invocation request sent by the terminal device.

In a possible implementation manner, the service invocation request includes an identifier of the service; the obtaining module is specifically configured to determine the service according to the identifier of the service; read the configuration file of the service to obtain the the first security level; or, acquire the user configuration information of the service to acquire the first security level; or acquire the first security level according to the feature information of the service, the feature information including the service The key signature level or the storage path of the program of the service.

In a possible implementation manner, the acquiring module is specifically configured to acquire the second security level according to the identifier of the terminal device when the service call request includes the identifier of the terminal device; or, when When the service invocation request includes the security level identifier of the terminal device, the second security level is acquired according to the security level identifier of the terminal device.

In a possible implementation manner, the acquiring module is further configured to acquire the third security level of the service for which the terminal device requests to register; acquire the fourth security level of the terminal device; and the processing module is further configured to The third security level and the fourth security level determine whether the terminal device has the right to register the service; when the terminal device has the right to register the service, allow the terminal device to register the service .

In a possible implementation manner, the processing module is specifically configured to determine whether the third security level is less than the fourth security level; when the third security level is less than the fourth security level, determine The terminal device has the right to register the service; or, when the third security level is greater than or equal to the fourth security level, it is determined that the terminal device does not have the right to register the service.

In a possible implementation manner, the processing module is specifically configured to determine the highest service level corresponding to the fourth security level; determine whether the third security level is smaller than the highest service level; when the third security level When the security level is less than the highest service level, it is determined that the terminal device has the right to register the service; when the third security level is greater than or equal to the highest service level, it is determined that the terminal device does not have the right to register the service. service permissions.

In a possible implementation manner, the processing module is specifically configured to determine the lowest level of equipment corresponding to the third security level; judge whether the fourth security level is greater than the lowest level of the equipment; when the fourth When the security level is greater than the minimum level of the device, it is determined that the terminal device has the right to register the service; when the fourth security level is less than or equal to the minimum level of the device, it is determined that the terminal device does not have the right to register the service. service permissions.

In a possible implementation manner, the acquiring module is further configured to acquire a service registration request.

In a possible implementation manner, the service registration request includes an identifier of the service; the obtaining module is specifically configured to determine the service according to the identifier of the service; read the configuration file of the service to obtain the the third security level; or, acquire the user configuration information of the service to acquire the third security level; or acquire the third security level according to the feature information of the service, the feature information including the service The storage path of the key signature level or the program of the service.

In a fourth aspect, the present application provides a terminal device, including: one or more processors; a memory for storing one or more programs; when the one or more programs are executed by the one or more processors , so that the one or more processors implement the method described in any one of the first to second aspects above.

In a fifth aspect, the present application provides a computer-readable storage medium, including a computer program. When the computer program is executed on a computer, the computer executes the method described in any one of the first to second aspects above.

In the sixth aspect, the present application also provides a computer program product, the computer program product includes computer program code, and when the computer program code is run on the computer, the computer is made to execute the terminal device in any one of the above two method embodiments. Actions and/or processing performed.

Description of drawings

FIG. 1 is an exemplary structural diagram of a multi-terminal device network 100 provided by the present application;

FIG. 2 shows a schematic structural diagram of a terminal device 200;

FIG. 3 is a software structural block diagram of the terminal device 200 of the present application;

FIG. 4 is a flowchart of a process 400 of a method for securely invoking a service provided by the present application;

FIG. 5 is a flowchart of a process 500 of the method for secure registration services provided by the present application;

FIG. 6 is an exemplary structural diagram of an apparatus 600 for securely invoking a service provided by the present application.

detailed description

In order to make the purpose, technical solutions and advantages of this application clearer, the technical solutions in this application will be clearly and completely described below in conjunction with the accompanying drawings in this application. Obviously, the described embodiments are part of the embodiments of this application , but not all examples. Based on the embodiments in this application, all other embodiments obtained by persons of ordinary skill in the art without creative efforts fall within the protection scope of this application.

The terms "first" and "second" in the description, embodiments, claims and drawings of the present application are only used for the purpose of distinguishing descriptions, and cannot be interpreted as indicating or implying relative importance, nor can they be interpreted as indicating or imply order. Furthermore, the terms "comprising" and "having", as well as any variations thereof, are intended to cover a non-exclusive inclusion, for example, of a sequence of steps or elements. A method, system, product or device is not necessarily limited to those steps or elements explicitly listed, but may include other steps or elements not explicitly listed or inherent to the process, method, product or device.

It should be understood that in this application, "at least one (item)" means one or more, and "multiple" means two or more. "And/or" is used to describe the association relationship of associated objects, indicating that there can be three types of relationships, for example, "A and/or B" can mean: only A exists, only B exists, and A and B exist at the same time , where A and B can be singular or plural. The character "/" generally indicates that the contextual objects are an "or" relationship. "At least one of the following" or similar expressions refer to any combination of these items, including any combination of single or plural items. For example, at least one item (piece) of a, b or c can mean: a, b, c, "a and b", "a and c", "b and c", or "a and b and c ", where a, b, c can be single or multiple.

The following are related concepts involved in this application:

1. Ubiquitous network

The ubiquitous network can literally be understood as a widespread and ubiquitous network. That is to say, people are placed in the ubiquitous network, so that people can exchange information with any person and thing at any time and place using any network. Based on the needs of individuals and society, use existing network technology and new network technology to provide ubiquitous and all-encompassing services and applications (Application, APP) for individuals and society. The modern Internet is a huge collection of interconnected computer networks of various types, and the types of networks are increasing all the time, including a variety of wireless communication technologies. The end result is that networking has become a ubiquitous resource where devices can be connected anytime, anywhere.

It should be understood that wireless data transmission from machine to machine (M2M), sensor network (sensor network), near field communication technology (near field communication, NFC), wireless local area network (wireless local area networks, WLAN) (such as , wireless fidelity (wireless fidelity, Wi-Fi) network, Bluetooth (bluetooth, BT)), global navigation satellite system (global navigation satellite system, GNSS), frequency modulation (frequency modulation, FM), infrared technology (infrared, IR) The development of wireless communication technologies, such as , has promoted the application of ubiquitous networks.

2. Multi-terminal equipment network

The multi-terminal device network is formed by interconnecting multiple terminal devices distributed in different locations based on the ubiquitous network, and the multiple terminal devices can provide distributed services and/or applications. There is no central node in the multi-terminal equipment network, each node can communicate with each other, and the communication control function is distributed on each node. The multi-terminal equipment network has the characteristics of high reliability and easy sharing of resources by nodes in the network, and is widely used in multimedia database management, audio and video transmission, video on demand and other fields.

FIG. 1 is an exemplary structural diagram of a multi-terminal device network 100 provided by the present application. As shown in FIG. C, equipment D and equipment E, etc. Exemplarily, the multi-terminal device network 100 may include a mobile phone, a tablet computer, a wearable device, a vehicle-mounted device, an augmented reality (augmented reality, AR)/virtual reality (virtual reality, VR) device, a notebook computer, a super mobile personal computer ( Ultra-mobile personal computer, UMPC), netbook, personal digital assistant (personal digital assistant, PDA) and other terminal devices, it should be understood that this application applies to the terminal devices included in the multi-terminal device network 100 The quantity and shape are not limited.

In addition, any two terminal devices in the multi-terminal device network 100 may communicate with each other in many different ways, for example, communicate through a connection or by means of future communication technologies to transmit data. Wherein, the connection manner may include various connection manners such as wired connection or wireless connection. Exemplarily, the two terminal devices may be connected through a USB data cable; the wireless connection between the two terminal devices may be through establishing a Wi-Fi connection, a proximity connection of near field communication, a Bluetooth code scanning connection, and the like. Two terminal devices can also use future communication technologies, for example, by installing different or the same applications on mobile phones and tablets, and transmit data with the help of 5G communication networks. The method is not limited.

In a multi-terminal device network, because the use scenarios of each terminal device are different, the services and applications carried by each terminal device are also different. Correspondingly, the security levels of each terminal device are also different. Terminal devices with low security levels Services and/or applications containing sensitive personal data cannot be processed, and terminal devices with a low security level should not call services and/or applications containing sensitive personal data on terminal devices with a high security level. For example, users do not want devices such as tablets and home TVs to access private data contained in chat applications and work applications on mobile phones. Or, at home, users expect that home smart devices (home TV) can automatically connect and access, for example, automatically project incoming calls from mobile phones to large-screen TVs; but in shopping malls, users do not expect other terminal devices to automatically access mobile phones data behavior.

The current linux-based device access control methods mainly include two mechanisms: discretionary access control (DAC) and mandatory access control (mandatory access control, MAC). Wherein, in the DAC, resource access rights are determined by attributes of an access subject (Subject, such as a process) and a resource object (Object, such as a file, prop, etc.). During runtime, resource owners (owners or group members) can modify permissions to be accessed by other Subjects. In MAC, resource access rights are determined by the security context of the access subject (Subject, such as a process) and the resource object (Object, such as a file, prop, binder, etc.) defined by the security policy. There is an access control relationship between a specific Subject and Object that cannot be modified independently during runtime.

DAC and MAC have been able to meet the requirements for single-device scheduling control, but there are still problems with cross-device scheduling control in a multi-terminal device network. For example, two terminal devices with different security levels have the same identity label (such as system), but due to the different security levels, the permissions of the two terminal devices cannot be completely the same. If only the labels are considered, there must be a low security level Situations where an end device invokes services and/or applications containing sensitive personal data on an end device with a high security level.

This application provides a method for safely invoking a service, which can be applied to a terminal device. The method can be a separate service or application program, and the service or application program can be applied to any terminal device in a multi-terminal device network to ensure service or application security calls.

Specifically, the method for safely invoking services provided by this application can be applied to terminal devices such as mobile phones, tablet computers, wearable devices, vehicle-mounted devices, notebook computers, and tablets listed above, and this application does not impose any restrictions on the specific types of terminal devices .

FIG. 2 shows a schematic structural diagram of a terminal device 200 . It should be understood that the terminal device 200 shown in FIG. 2 is only an example of a terminal device, and the terminal device 200 may have more or fewer components than those shown in the figure, and two or more components may be combined , or can have different component configurations. The various components shown in Figure 2 may be implemented in hardware, software, or a combination of hardware and software including one or more signal processing and/or application specific integrated circuits.

The terminal device 200 may include: a processor 210, an external memory interface 220, an internal memory 121, a universal serial bus (universal serial bus, USB) interface 230, a charging management module 240, a power management module 241, a battery 242, an antenna 1, and an antenna 2. Mobile communication module 250, wireless communication module 260, audio module 270, speaker 270A, receiver 270B, microphone 270C, earphone jack 270D, sensor module 280, button 290, motor 291, indicator 292, camera 293, display screen 294, And a subscriber identification module (subscriber identification module, SIM) card interface 295, etc. The sensor module 280 may include a pressure sensor 280A, a gyro sensor 280B, an air pressure sensor 280C, a magnetic sensor 280D, an acceleration sensor 280E, a distance sensor 280F, a proximity light sensor 280G, a fingerprint sensor 280H, a temperature sensor 280J, a touch sensor 280K, and an ambient light sensor. Sensor 280L, bone conduction sensor 280M, etc.

The processor 210 may include one or more processing units, for example: the processor 210 may include an application processor (application processor, AP), a modem processor, a graphics processing unit (graphics processing unit, GPU), an image signal processor (image signal processor, ISP), controller, memory, video codec, digital signal processor (digital signal processor, DSP), baseband processor, and/or neural network processor (neural-network processing unit, NPU) Wait. Wherein, different processing units may be independent devices, or may be integrated in one or more processors.

Wherein, the controller may be the nerve center and command center of the terminal device 200 . The controller can generate operation control signals according to instruction opcodes and timing signals to complete the control of fetching and executing instructions.

A memory may also be provided in the processor 210 for storing instructions and data. In some embodiments, the memory in processor 210 is a cache memory. The memory may hold instructions or data that the processor 210 has just used or recycled. If the processor 210 needs to use the instruction or data again, it can be called directly from the memory. Repeated access is avoided, and the waiting time of the processor 210 is reduced, thereby improving the efficiency of the system.

In some embodiments, processor 210 may include one or more interfaces. The interface may include an integrated circuit (inter-integrated circuit, I2C) interface, an integrated circuit built-in audio (inter-integrated circuit sound, I2S) interface, a pulse code modulation (pulse code modulation, PCM) interface, a universal asynchronous transmitter (universal asynchronous receiver/transmitter, UART) interface, mobile industry processor interface (mobile industry processor interface, MIPI), general-purpose input and output (general-purpose input/output, GPIO) interface, subscriber identity module (subscriber identity module, SIM) interface, and /or universal serial bus (universal serial bus, USB) interface, etc.

The I2C interface is a bidirectional synchronous serial bus, including a serial data line (serial data line, SDA) and a serial clock line (derail clock line, SCL). In some embodiments, processor 210 may include multiple sets of I2C buses. The processor 210 can be respectively coupled to the touch sensor 280K, the charger, the flashlight, the camera 293 and so on through different I2C bus interfaces. For example, the processor 210 may be coupled to the touch sensor 280K through the I2C interface, so that the processor 210 and the touch sensor 280K communicate through the I2C bus interface to realize the touch function of the terminal device 200 .

The I2S interface can be used for audio communication. In some embodiments, processor 210 may include multiple sets of I2S buses. The processor 210 may be coupled to the audio module 270 through an I2S bus to implement communication between the processor 210 and the audio module 270 . In some embodiments, the audio module 270 can transmit audio signals to the wireless communication module 260 through the I2S interface, so as to realize the function of answering calls through the Bluetooth headset.

The PCM interface can also be used for audio communication, sampling, quantizing and encoding the analog signal. In some embodiments, the audio module 270 and the wireless communication module 260 may be coupled through a PCM bus interface. In some embodiments, the audio module 270 can also transmit audio signals to the wireless communication module 260 through the PCM interface, so as to realize the function of answering calls through the Bluetooth headset. Both the I2S interface and the PCM interface can be used for audio communication.

The UART interface is a universal serial data bus used for asynchronous communication. The bus can be a bidirectional communication bus. It converts the data to be transmitted between serial communication and parallel communication. In some embodiments, a UART interface is generally used to connect the processor 210 and the wireless communication module 260 . For example: the processor 210 communicates with the Bluetooth module in the wireless communication module 260 through the UART interface to realize the Bluetooth function. In some embodiments, the audio module 270 can transmit audio signals to the wireless communication module 260 through the UART interface, so as to realize the function of playing music through the Bluetooth headset.

The MIPI interface can be used to connect the processor 210 with the peripheral devices such as the display screen 294 and the camera 293 . MIPI interface includes camera serial interface (camera serial interface, CSI), display serial interface (display serial interface, DSI), etc. In some embodiments, the processor 210 communicates with the camera 293 through the CSI interface to realize the shooting function of the terminal device 200 . The processor 210 communicates with the display screen 294 through the DSI interface to realize the display function of the terminal device 200 .

The GPIO interface can be configured by software. The GPIO interface can be configured as a control signal or as a data signal. In some embodiments, the GPIO interface can be used to connect the processor 210 with the camera 293 , the display screen 294 , the wireless communication module 260 , the audio module 270 , the sensor module 280 and so on. The GPIO interface can also be configured as an I2C interface, I2S interface, UART interface, MIPI interface, etc.

The USB interface 230 is an interface conforming to the USB standard specification, specifically, it may be a Mini USB interface, a Micro USB interface, a USB Type C interface, and the like. The USB interface 230 can be used to connect a charger to charge the terminal device 200, and can also be used to transmit data between the terminal device 200 and peripheral devices. It can also be used to connect headphones and play audio through them. This interface can also be used to connect other terminal devices, such as AR devices.

It can be understood that the interface connection relationship between the modules shown in this application is only a schematic illustration, and does not constitute a structural limitation of the terminal device 200 . In other embodiments of the present application, the terminal device 200 may also adopt different interface connection modes in the foregoing embodiments, or a combination of multiple interface connection modes.

The charging management module 240 is configured to receive charging input from the charger. Wherein, the charger may be a wireless charger or a wired charger. In some embodiments of wired charging, the charging management module 240 can receive the charging input of the wired charger through the USB interface 230 . In some wireless charging embodiments, the charging management module 240 may receive wireless charging input through the wireless charging coil of the terminal device 200 . While the charging management module 240 is charging the battery 242 , it can also supply power to the terminal device through the power management module 241 .

The power management module 241 is used for connecting the battery 242 , the charging management module 240 and the processor 210 . The power management module 241 receives the input from the battery 242 and/or the charging management module 240 to provide power for the processor 210 , the internal memory 121 , the external memory, the display screen 294 , the camera 293 , and the wireless communication module 260 . The power management module 241 can also be used to monitor parameters such as battery capacity, battery cycle times, and battery health status (leakage, impedance). In some other embodiments, the power management module 241 can also be set in the processor 210 . In some other embodiments, the power management module 241 and the charging management module 240 may also be set in the same device.

The wireless communication function of the terminal device 200 may be implemented by the antenna 1, the antenna 2, the mobile communication module 250, the wireless communication module 260, a modem processor, a baseband processor, and the like.

Antenna 1 and Antenna 2 are used to transmit and receive electromagnetic wave signals. Each antenna in the terminal device 200 can be used to cover single or multiple communication frequency bands. Different antennas can also be multiplexed to improve the utilization of the antennas. For example: Antenna 1 can be multiplexed as a diversity antenna of a wireless local area network. In other embodiments, the antenna may be used in conjunction with a tuning switch.

The mobile communication module 250 can provide wireless communication solutions including 2G/3G/4G/5G applied on the terminal device 200 . The mobile communication module 250 may include at least one filter, switch, power amplifier, low noise amplifier (low noise amplifier, LNA) and the like. The mobile communication module 250 can receive electromagnetic waves through the antenna 1, filter and amplify the received electromagnetic waves, and send them to the modem processor for demodulation. The mobile communication module 250 can also amplify the signal modulated by the modem processor, convert it into electromagnetic wave and radiate it through the antenna 1 . In some embodiments, at least part of the functional modules of the mobile communication module 250 may be set in the processor 210 . In some embodiments, at least part of the functional modules of the mobile communication module 250 and at least part of the modules of the processor 210 may be set in the same device.

A modem processor may include a modulator and a demodulator. Wherein, the modulator is used for modulating the low-frequency baseband signal to be transmitted into a medium-high frequency signal. The demodulator is used to demodulate the received electromagnetic wave signal into a low frequency baseband signal. Then the demodulator sends the demodulated low-frequency baseband signal to the baseband processor for processing. The low-frequency baseband signal is passed to the application processor after being processed by the baseband processor. The application processor outputs sound signals through audio equipment (not limited to speaker 270A, receiver 270B, etc.), or displays images or videos through display screen 294 . In some embodiments, the modem processor may be a stand-alone device. In some other embodiments, the modem processor may be independent of the processor 210, and be set in the same device as the mobile communication module 250 or other functional modules.

The wireless communication module 260 can provide wireless local area networks (wireless local area networks, WLAN) (such as wireless fidelity (Wireless fidelity, Wi-Fi) network), bluetooth (bluetooth, BT), global navigation satellite, etc. System (global navigation satellite system, GNSS), frequency modulation (frequency modulation, FM), near field communication technology (near field communication, NFC), infrared technology (infrared, IR) and other wireless communication solutions. The wireless communication module 260 may be one or more devices integrating at least one communication processing module. The wireless communication module 260 receives electromagnetic waves via the antenna 2 , frequency-modulates and filters the electromagnetic wave signals, and sends the processed signals to the processor 210 . The wireless communication module 260 can also receive the signal to be sent from the processor 210 , frequency-modulate it, amplify it, and convert it into electromagnetic waves through the antenna 2 to radiate out.

In some embodiments, the antenna 1 of the terminal device 200 is coupled to the mobile communication module 250, and the antenna 2 is coupled to the wireless communication module 260, so that the terminal device 200 can communicate with the network and other devices through wireless communication technology. The wireless communication technology may include global system for mobile communications (GSM), general packet radio service (general packet radio service, GPRS), code division multiple access (code division multiple access, CDMA), broadband Code division multiple access (wideband code division multiple access, WCDMA), time division code division multiple access (time-division code division multiple access, TD-SCDMA), long term evolution (long term evolution, LTE), BT, GNSS, WLAN, NFC , FM, and/or IR techniques, etc. The GNSS may include a global positioning system (global positioning system, GPS), a global navigation satellite system (global navigation satellite system, GLONASS), a Beidou navigation satellite system (beidou navigation satellite system, BDS), a quasi-zenith satellite system (quasi -zenith satellite system (QZSS) and/or satellite based augmentation systems (SBAS).

The terminal device 200 implements a display function through a GPU, a display screen 294, an application processor, and the like. The GPU is a microprocessor for image processing, and is connected to the display screen 294 and the application processor. GPUs are used to perform mathematical and geometric calculations for graphics rendering. Processor 210 may include one or more GPUs that execute program instructions to generate or change display information.

The display screen 294 is used to display images, videos and the like. Display 294 includes a display panel. The display panel can be a liquid crystal display (LCD), an organic light-emitting diode (OLED), an active matrix organic light emitting diode or an active matrix organic light emitting diode (active-matrix organic light emitting diode, AMOLED), flexible light-emitting diode (flex light-emitting diode, FLED), Miniled, MicroLed, Micro-oLed, quantum dot light emitting diodes (quantum dot light emitting diodes, QLED), etc. In some embodiments, the terminal device 200 may include 1 or N display screens 294, where N is a positive integer greater than 1.

The terminal device 200 can realize the shooting function through the ISP, the camera 293, the video codec, the GPU, the display screen 294, and the application processor.

The ISP is used for processing the data fed back by the camera 293 . For example, when taking a picture, open the shutter, the light is transmitted to the photosensitive element of the camera through the lens, and the light signal is converted into an electrical signal, and the photosensitive element of the camera transmits the electrical signal to the ISP for processing, and converts it into an image visible to the naked eye. ISP can also perform algorithm optimization on image noise, brightness, and skin color. ISP can also optimize the exposure, color temperature and other parameters of the shooting scene. In some embodiments, the ISP may be located in the camera 293 .

Camera 293 is used to capture still images or video. The object generates an optical image through the lens and projects it to the photosensitive element. The photosensitive element may be a charge coupled device (CCD) or a complementary metal-oxide-semiconductor (CMOS) phototransistor. The photosensitive element converts the light signal into an electrical signal, and then transmits the electrical signal to the ISP to convert it into a digital image signal. The ISP outputs the digital image signal to the DSP for processing. DSP converts digital image signals into standard RGB, YUV and other image signals. In some embodiments, the terminal device 200 may include 1 or N cameras 293, where N is a positive integer greater than 1.

Digital signal processors are used to process digital signals. In addition to digital image signals, they can also process other digital signals. For example, when the terminal device 200 selects a frequency point, the digital signal processor is used to perform Fourier transform on the energy of the frequency point.

Video codecs are used to compress or decompress digital video. The terminal device 200 may support one or more video codecs. In this way, the terminal device 200 can play or record videos in various encoding formats, for example: moving picture experts group (moving picture experts group, MPEG) 1, MPEG2, MPEG3, MPEG4, etc.

The NPU is a neural-network (NN) computing processor. By referring to the structure of biological neural networks, such as the transfer mode between neurons in the human brain, it can quickly process input information and continuously learn by itself. Applications such as intelligent cognition of the terminal device 200 can be implemented through the NPU, such as image recognition, face recognition, speech recognition, text understanding, and the like.

The external memory interface 220 can be used to connect an external memory card, such as a Micro SD card, to expand the storage capacity of the terminal device 200. The external memory card communicates with the processor 210 through the external memory interface 220 to implement a data storage function. Such as saving music, video and other files in the external memory card.

The internal memory 121 may be used to store computer-executable program codes including instructions. The processor 210 executes various functional applications and data processing of the terminal device 200 by executing instructions stored in the internal memory 121 . The internal memory 121 may include an area for storing programs and an area for storing data. Wherein, the stored program area can store an operating system, at least one application program required by a function (such as a sound playing function, an image playing function, etc.) and the like. The storage data area can store data created during the use of the terminal device 200 (such as audio data, phonebook, etc.) and the like. In addition, the internal memory 121 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, flash memory device, universal flash storage (universal flash storage, UFS) and the like.

The terminal device 200 may implement an audio function through an audio module 270, a speaker 270A, a receiver 270B, a microphone 270C, an earphone interface 270D, and an application processor. Such as music playback, recording, etc.

The audio module 270 is used to convert digital audio information into analog audio signal output, and is also used to convert analog audio input into digital audio signal. The audio module 270 may also be used to encode and decode audio signals. In some embodiments, the audio module 270 can be set in the processor 210 , or some functional modules of the audio module 270 can be set in the processor 210 .

Speaker 270A, also referred to as a "horn", is used to convert audio electrical signals into sound signals. The terminal device 200 can listen to music through the speaker 270A, or listen to hands-free calls.

Receiver 270B, also called "earpiece", is used to convert audio electrical signals into audio signals. When the terminal device 200 receives a phone call or voice information, the receiver 270B can be placed close to the human ear to receive the voice.

The microphone 270C, also called "microphone" or "microphone", is used to convert sound signals into electrical signals. When making a call or sending a voice message, the user can make a sound by approaching the microphone 270C with a human mouth, and input the sound signal into the microphone 270C. The terminal device 200 may be provided with at least one microphone 270C. In some other embodiments, the terminal device 200 may be provided with two microphones 270C, which may also implement a noise reduction function in addition to collecting sound signals. In some other embodiments, the terminal device 200 can also be provided with three, four or more microphones 270C, so as to collect sound signals, reduce noise, identify sound sources, and realize directional recording functions, etc.

The earphone interface 270D is used for connecting wired earphones. The earphone interface 270D may be a USB interface 230, or a 3.5mm open mobile terminal platform (open mobile terminal platform, OMTP) standard interface, or a cellular telecommunications industry association of the USA (CTIA) standard interface.

The pressure sensor 280A is used to sense the pressure signal and convert the pressure signal into an electrical signal. In some embodiments, pressure sensor 280A may be located on display screen 294 . There are many types of pressure sensors 280A, such as resistive pressure sensors, inductive pressure sensors, and capacitive pressure sensors. A capacitive pressure sensor may be comprised of at least two parallel plates with conductive material. When a force is applied to the pressure sensor 280A, the capacitance between the electrodes changes. The terminal device 200 determines the intensity of pressure according to the change in capacitance. When a touch operation acts on the display screen 294, the terminal device 200 detects the intensity of the touch operation according to the pressure sensor 280A. The terminal device 200 may also calculate the touched position according to the detection signal of the pressure sensor 280A. In some embodiments, touch operations acting on the same touch position but with different touch operation intensities may correspond to different operation instructions. For example: when a touch operation with a touch operation intensity less than the first pressure threshold acts on the short message application icon, an instruction to view short messages is executed. When a touch operation whose intensity is greater than or equal to the first pressure threshold acts on the icon of the short message application, the instruction of creating a new short message is executed.

The gyroscope sensor 280B can be used to determine the motion posture of the terminal device 200 . In some embodiments, the angular velocity of the terminal device 200 around three axes (ie, x, y and z axes) can be determined by the gyro sensor 280B. The gyro sensor 280B can be used for image stabilization. Exemplarily, when the shutter is pressed, the gyro sensor 280B detects the shaking angle of the terminal device 200, calculates the distance that the lens module needs to compensate according to the angle, and allows the lens to counteract the shaking of the terminal device 200 through reverse movement to achieve anti-shake. The gyro sensor 280B can also be used for navigation and somatosensory game scenes.

The air pressure sensor 280C is used to measure air pressure. In some embodiments, the terminal device 200 calculates the altitude based on the air pressure value measured by the air pressure sensor 280C to assist in positioning and navigation.

The magnetic sensor 280D includes a Hall sensor. The terminal device 200 may use the magnetic sensor 280D to detect the opening and closing of the flip holster. In some embodiments, when the terminal device 200 is a clamshell machine, the terminal device 200 may detect opening and closing of the clamshell according to the magnetic sensor 280D. Furthermore, according to the detected opening and closing state of the leather case or the opening and closing state of the flip cover, features such as automatic unlocking of the flip cover are set.

The acceleration sensor 280E can detect the acceleration of the terminal device 200 in various directions (generally three axes). When the terminal device 200 is stationary, the magnitude and direction of gravity can be detected. It can also be used to recognize the posture of terminal equipment, and can be used in applications such as horizontal and vertical screen switching, pedometers, etc.

The distance sensor 280F is used to measure the distance. The terminal device 200 can measure the distance by infrared or laser. In some embodiments, when shooting a scene, the terminal device 200 may use the distance sensor 280F for distance measurement to achieve fast focusing.

Proximity light sensor 280G may include, for example, a light emitting diode (LED) and a light detector, such as a photodiode. The light emitting diodes may be infrared light emitting diodes. The terminal device 200 emits infrared light through the light emitting diode. The terminal device 200 detects infrared reflected light from nearby objects using a photodiode. When sufficient reflected light is detected, it can be determined that there is an object near the terminal device 200 . When insufficient reflected light is detected, the terminal device 200 may determine that there is no object near the terminal device 200 . The terminal device 200 can use the proximity light sensor 280G to detect that the user holds the terminal device 200 close to the ear to make a call, so as to automatically turn off the screen to save power. Proximity light sensor 280G can also be used in leather case mode, automatic unlock and lock screen in pocket mode.

The ambient light sensor 280L is used for sensing ambient light brightness. The terminal device 200 can adaptively adjust the brightness of the display screen 294 according to the perceived ambient light brightness. The ambient light sensor 280L can also be used to automatically adjust the white balance when taking pictures. The ambient light sensor 280L can also cooperate with the proximity light sensor 280G to detect whether the terminal device 200 is in the pocket, so as to prevent accidental touch.

The fingerprint sensor 280H is used to collect fingerprints. The terminal device 200 can use the collected fingerprint characteristics to implement fingerprint unlocking, access to application locks, take pictures with fingerprints, answer incoming calls with fingerprints, and so on.

The temperature sensor 280J is used to detect temperature. In some embodiments, the terminal device 200 uses the temperature detected by the temperature sensor 280J to implement a temperature processing strategy. For example, when the temperature reported by the temperature sensor 280J exceeds the threshold, the terminal device 200 executes reducing the performance of a processor located near the temperature sensor 280J, so as to reduce power consumption and implement thermal protection. In some other embodiments, when the temperature is lower than another threshold, the terminal device 200 heats the battery 242 to avoid abnormal shutdown of the terminal device 200 caused by the low temperature. In some other embodiments, when the temperature is lower than another threshold, the terminal device 200 boosts the output voltage of the battery 242 to avoid abnormal shutdown caused by low temperature.

Touch sensor 280K, also known as "touch panel". The touch sensor 280K can be arranged on the display screen 294, and the touch sensor 280K and the display screen 294 form a touch screen, also called “touch screen”. The touch sensor 280K is used to detect a touch operation on or near it. The touch sensor can pass the detected touch operation to the application processor to determine the type of touch event. Visual output related to touch operations can be provided through the display screen 294 . In some other embodiments, the touch sensor 280K may also be disposed on the surface of the terminal device 200 , which is different from the position of the display screen 294 .

The bone conduction sensor 280M can acquire vibration signals. In some embodiments, the bone conduction sensor 280M can acquire the vibration signal of the vibrating bone mass of the human voice. The bone conduction sensor 280M can also contact the human pulse and receive the blood pressure beating signal. In some embodiments, the bone conduction sensor 280M can also be disposed in the earphone, combined into a bone conduction earphone. The audio module 270 can analyze the voice signal based on the vibration signal of the vibrating bone mass of the vocal part acquired by the bone conduction sensor 280M, so as to realize the voice function. The application processor can analyze the heart rate information based on the blood pressure beating signal acquired by the bone conduction sensor 280M, so as to realize the heart rate detection function.

The keys 290 include a power key, a volume key and the like. The key 290 may be a mechanical key. It can also be a touch button. The terminal device 200 may receive key input and generate key signal input related to user settings and function control of the terminal device 200 .

The motor 291 can generate a vibrating reminder. The motor 291 can be used for incoming call vibration prompts, and can also be used for touch vibration feedback. For example, touch operations applied to different applications (such as taking pictures, playing audio, etc.) may correspond to different vibration feedback effects. The motor 291 can also correspond to different vibration feedback effects for touch operations acting on different areas of the display screen 294 . Different application scenarios (for example: time reminder, receiving information, alarm clock, games, etc.) can also correspond to different vibration feedback effects. The touch vibration feedback effect can also support customization.

The indicator 292 can be an indicator light, which can be used to indicate the charging status, the change of the battery capacity, and also can be used to indicate messages, missed calls, notifications and so on.

The SIM card interface 295 is used for connecting a SIM card. The SIM card can be connected and separated from the terminal device 200 by inserting it into the SIM card interface 295 or pulling it out from the SIM card interface 295 . The terminal device 200 may support 1 or N SIM card interfaces, where N is a positive integer greater than 1. SIM card interface 295 can support Nano SIM card, Micro SIM card, SIM card etc. Multiple cards can be inserted into the same SIM card interface 295 at the same time. The types of the multiple cards may be the same or different. The SIM card interface 295 is also compatible with different types of SIM cards. The SIM card interface 295 is also compatible with external memory cards. The terminal device 200 interacts with the network through the SIM card to implement functions such as calling and data communication. In some embodiments, the terminal device 200 adopts an eSIM, that is, an embedded SIM card. The eSIM card can be embedded in the terminal device 200 and cannot be separated from the terminal device 200.

The software system of the terminal device may adopt a layered architecture, an event-driven architecture, a micro-kernel architecture, a micro-service architecture, or a cloud architecture. This application takes the Android system with a layered architecture as an example to illustrate the software structure of the terminal device.

FIG. 3 is a block diagram of the software structure of the terminal device 200 of the present application.

The layered architecture of the terminal device 200 divides the software into several layers, and each layer has a clear role and division of labor. Layers communicate through software interfaces. In some embodiments, the Android system is divided into four layers, which are respectively the application program layer, the application program framework layer, the Android runtime (Android runtime) and the system library, and the kernel layer from top to bottom.

The application layer can consist of a series of application packages.

As shown in FIG. 3, the application package may include applications such as camera, gallery, calendar, call, map, navigation, WLAN, Bluetooth, music, video, and short message.

The application framework layer provides an application programming interface (application programming interface, API) and a programming framework for applications in the application layer. The application framework layer includes some predefined functions.

As shown in Figure 3, the application framework layer can include window manager, content provider, view system, phone manager, resource manager, notification manager, security management module, etc.

A window manager is used to manage window programs. The window manager can get the size of the display screen, determine whether there is a status bar, lock the screen, capture the screen, etc.

Content providers are used to store and retrieve data and make it accessible to applications. Said data may include video, images, audio, calls made and received, browsing history and bookmarks, phonebook, etc.

The view system includes visual controls, such as controls for displaying text, controls for displaying pictures, and so on. The view system can be used to build applications. A display interface can consist of one or more views. For example, a display interface including a text message notification icon may include a view for displaying text and a view for displaying pictures.

The phone manager is used to provide the communication function of the terminal device 200 . For example, the management of call status (including connected, hung up, etc.).

The resource manager provides various resources for the application, such as localized strings, icons, pictures, layout files, video files, and so on.

The notification manager enables the application to display notification information in the status bar, which can be used to convey notification-type messages, and can automatically disappear after a short stay without user interaction. For example, the notification manager is used to notify the download completion, message reminder, etc. The notification manager can also be a notification that appears on the top status bar of the system in the form of a chart or scroll bar text, such as a notification of an application running in the background, or a notification that appears on the screen in the form of a dialog window. For example, a text message is displayed in the status bar, a prompt sound is issued, the terminal device 200 vibrates, and the indicator light flashes.

The security management module is a newly added functional module of this application, which can implement the method of securely invoking services provided by this application and other security-related methods, which will be described in detail in subsequent embodiments of this application.

It should be understood that the present application cites the case of setting the security management module at the application framework layer, and the security management module may also be set at the kernel layer, which is not limited in the present application. As long as it has the same function as the security management module provided by this application, it is within the scope of protection of this application.

Android Runtime includes core library and virtual machine. The Android runtime is responsible for the scheduling and management of the Android system.

The core library consists of two parts: one part is the function function that the java language needs to call, and the other part is the core library of Android.

The application layer and the application framework layer run in virtual machines. The virtual machine executes the java files of the application program layer and the application program framework layer as binary files. The virtual machine is used to perform functions such as object life cycle management, stack management, thread management, security and exception management, and garbage collection.

A system library can include multiple function modules. For example: surface manager (surface manager), media library (Media Libraries), three-dimensional (3D) graphics processing library (for example: OpenGL ES), two-dimensional (2D) graphics engine (for example: SGL), etc.

The surface manager is used to manage the display subsystem and provides the fusion of 2D and 3D layers for multiple applications.

The media library supports playback and recording of various commonly used audio and video formats, as well as still image files, etc. The media library can support a variety of audio and video encoding formats, such as: MPEG4, H.264, MP3, AAC, AMR, JPG, PNG, etc.

The 3D graphics processing library is used to implement 3D graphics drawing, image rendering, compositing, and layer processing, etc.

The 2D graphics engine is a drawing engine for 2D drawing.

The kernel layer is the layer between hardware and software. The kernel layer includes at least a display driver, a Wi-Fi driver, a Bluetooth driver, an audio driver, and a sensor driver. In addition, the kernel layer may also include a process scheduling module, a disk data module, etc., which are not limited in this application.

It can be understood that the components included in the system framework layer, system library, and runtime layer shown in FIG. 3 do not constitute a specific limitation on the terminal device 200 . In other embodiments of the present application, the terminal device 200 may include more or fewer components than shown in the figure, or combine certain components, or separate certain components, or arrange different components.

It should be understood that FIG. 2 listed above is a structural diagram of a possible terminal device, and FIG. 3 is a software architecture diagram of a possible terminal device. For ease of understanding, the following embodiments of this application will take the service call between two terminal devices (such as the first device and the second device) in the multi-terminal device network shown in Figure 1 as an example, and the terminal device may have the The structure described above, the software structure shown in Figure 3. Wherein, the first electronic device that applies for invoking a service is called a "service application device", and the second electronic device that provides a service is called a "service providing device".

It should be understood that both the service application device and the service provision device can include the security management module of the application framework layer in Figure 3, and the same terminal device can be used as a service application device (or called a "service calling device"), or Devices are provided as a service. For example, device A in FIG. 1 may apply for invoking the service and/or application of device B, and device B may in turn apply for invoking the service and/or application of device A. When device A applies to call the service and/or application of device B, device A applies for the device for the service, and device B provides the device for the service; when device B in turn applies for calling the service and/or application of device A, device B is the service Apply for equipment, and equipment A provides equipment for the service, which is not limited in this application.

The following embodiments of the present application are described by taking services as an example. It should be understood that the difference between an application and a service is that an application is an application (application, APP) installed on a terminal device provided by a third party, for example, a video application, a map application, a chat application, etc., and a service is provided by an operating system of the terminal device. functions, such as taking pictures, location services, SMS, etc. However, distributed applications and services can be implemented in a network of multiple terminal devices, so the relevant procedures below are also applicable to applications.

In this application, security levels are respectively set for terminal equipment and services, for example, security levels for terminal equipment include L1-Lm, and security levels for services include SL1-SLn. In order to ensure the security of service data, there is a corresponding relationship between the security level of the terminal device and the security level of the service. The terminal device can only process services with the same or lower security level as its own, and the security level here is the same or lower. Various interpretations are possible, described in detail below.

FIG. 4 is a flowchart of a process 400 of the method for securely invoking a service provided by the present application. The process 400 can be jointly executed by two terminal devices 200, wherein one terminal device is used as a service calling device, and the other terminal device is used as a service providing device. The process 400 is described as a series of steps or operations. It should be understood that the process 400 may be executed in various orders and/or concurrently, and is not limited to the execution order shown in FIG. 4 . Process 400 may include:

Step 401, the service calling device obtains the second security level of the device.

The security level of the device itself can be written into the property file or firmware of the terminal device, so that when the service calling device calls the service on the service providing device, it can first read the security level from the corresponding file.

Step 402, the service calling device sends a service calling request to the service providing device.

The service calling device calls the service on the service providing device by sending a request.

The service invocation request includes the identifier of the service to be invoked, so that the service providing device can determine the service to be invoked by the service invocation device according to the service identifier, and then determine the first security level of the service.

The service invocation request further includes the identification of the security level of the service invoking device, so that the service providing device can determine the second security level according to the identification of the security level of the service invoking device. When a multi-terminal device network is established, each terminal device can be configured with a security level table, which includes multiple security levels and their corresponding identifiers, so that the service providing device can determine its security level according to the identifier of the security level of the service calling device.

Optionally, if the service invoking device does not perform step 401, the device identifier may be carried in the service invocation request. At this time, the service providing device may determine the service invoking device according to the device identifier, and then determine the second security of the service invoking device. grade. When a multi-terminal device network is established, each terminal device can be configured with a security level information table of the terminal device, which includes the correspondence between the identification of each terminal device and the security level, so that the service provider device can determine its security level based on the identification of the service calling device .

Step 403, the service providing device acquires the first security level of the service according to the service invocation request.

1. In the service configuration file, add a security level field.

{

...

"Securelevel": "SL2"

...

}

The above configuration can be implemented by the provider of the service.

For example,

Start service_A

Securelevel SL3

Based on the above methods, the service providing device can obtain the first security level of the service to be invoked by the service calling device, for example, it can read the value of the field Securelevel in the config file, and use SL1 as the first security level; or, read Take the field Securelevel in the configuration item of the service, and use SL1 as the first security level; or, obtain the secret key signature level of the service, and use its corresponding security level as the first security level; or, obtain the storage path of the service program, The second security level of the service is determined according to the storage path.

Step 404, the service providing device obtains the second security level of the service calling device according to the service calling request.

As mentioned above, the service invocation request may include the identifier of the service invoking device, and the service providing device may look up the security level corresponding to the identifier from the security level information table, and use it as the second security level. Alternatively, the service invocation request may include an identifier of the security level of the service invoking device, and the service providing device may search the security level table for the security level corresponding to the identifier, and use it as the second security level.

It should be understood that the service providing device may also store the correspondence between the identification of the terminal device and the security level in other ways, or the correspondence between the identification of the security level of the terminal equipment and the security level, which is not specifically limited in this application. .

Step 405, the service providing device determines whether the service calling device has the right to call the service according to the first security level and the second security level.

It can be seen that the service providing device matches the security level of the service invoking device with the security level of the called service. The terminal device can call a service with a low security level), and the service calling device has the authority to call the service on the service providing device, ensuring the security of the service.

Step 406: When the service calling device has the right to call the service, the service providing device allows the service calling device to call the service.

After the judgment in step 405, the service providing device can determine whether the service calling device has the authority to call the service. Allowing the service calling device to call the service means that the service calling device can use the service and obtain the data of the service.

FIG. 5 is a flowchart of a process 500 of the method for secure registration service provided by the present application. The process 500 can be executed by a terminal device 200, specifically, it can be executed by an operating system of the terminal device. The process 500 is described as a series of steps or operations. It should be understood that the process 500 may be executed in various orders and/or concurrently, and is not limited to the execution order shown in FIG. 5 . Process 500 may include:

Step 501, obtain a service registration request.

When the user uses the service for the first time, in order to ensure the security of user data, the user is required to register the service, for example, enter the user name and password set by the user. When the user performs the above operations, the operating system of the terminal device will receive an operation instruction from the touch screen, and the operation instruction includes a service registration request.

Step 502, acquiring the first security level of the service for which the terminal device requests to register.

1. In the service configuration file, add a security level field.

{

...

"Securelevel": "SL2"

...

}

The above configuration can be implemented by the provider of the service.

For example,

Start service_A

Securelevel SL3

Step 503, acquire the second security level of the terminal device.

The security level of the device itself can be written into the property file or firmware of the terminal device, so that when the terminal device registers for the service, it can first read the security level of the device from the corresponding file as the second security level.

Step 504: Determine whether the terminal device has the right to register the service according to the first security level and the second security level.

Step 505, when the terminal device has the authority to register for the service, allow the terminal device to register for the service.

After the judgment in step 504, the operating system of the terminal device can determine whether the terminal device has the authority to register the service. Allowing a terminal device to register with a service means that the terminal device can register with the service and obtain data of the service.

FIG. 6 is an exemplary structural diagram of an apparatus 600 for securely invoking a service provided by the present application. As shown in FIG. 6 , the apparatus 600 may be applied to the terminal device in the foregoing embodiment. The apparatus 600 in this embodiment may include: an acquiring module 601 and a processing module 602 . in,

The obtaining module 601 is used to obtain the first security level of the service requested by the terminal device; to obtain the second security level of the terminal device; the processing module 602 is used to obtain the first security level according to the first security level and the second security level Determine whether the terminal device has the right to call the service; when the terminal device has the right to call the service, allow the terminal device to call the service.

In a possible implementation manner, the processing module 602 is specifically configured to determine whether the first security level is lower than the second security level; when the first security level is lower than the second security level, Determining that the terminal device has the right to call the service; or, when the first security level is greater than or equal to the second security level, determining that the terminal device does not have the right to call the service.

In a possible implementation manner, the processing module 602 is specifically configured to determine the highest service level corresponding to the second security level; determine whether the first security level is less than the highest service level; When a security level is less than the highest service level, it is determined that the terminal device has the right to call the service; when the first security level is greater than or equal to the highest service level, it is determined that the terminal device does not have the right to call the service. permissions for the services described above.

In a possible implementation manner, the processing module 602 is specifically configured to determine the lowest level of equipment corresponding to the first security level; determine whether the second security level is greater than the lowest level of the equipment; When the second security level is greater than the lowest level of the device, it is determined that the terminal device has the authority to call the service; when the second security level is less than or equal to the lowest level of the device, it is determined that the terminal device does not have the right to call the service permissions for the services described above.

In a possible implementation manner, the obtaining module 601 is further configured to receive a service invocation request sent by the terminal device.

In a possible implementation manner, the service call request includes the identifier of the service; the obtaining module 601 is specifically configured to determine the service according to the identifier of the service; read the configuration file of the service to obtain The first security level; or, acquiring the user configuration information of the service to acquire the first security level; or, acquiring the first security level according to characteristic information of the service, the characteristic information including the service The signature level of the secret key or the storage path of the program of the service.

In a possible implementation manner, the acquiring module 601 is specifically configured to acquire the second security level according to the identifier of the terminal device when the service call request includes the identifier of the terminal device; or, When the service invocation request includes the security level identifier of the terminal device, the second security level is acquired according to the security level identifier of the terminal device.

In a possible implementation manner, the acquiring module 601 is further configured to acquire the third security level of the service for which the terminal device requests registration; acquire the fourth security level of the terminal device; the processing module 602 is also configured to Determine whether the terminal device has the authority to register the service according to the third security level and the fourth security level; when the terminal device has the authority to register the service, allow the terminal device to register the service described services.

In a possible implementation manner, the processing module 602 is specifically configured to determine whether the third security level is lower than the fourth security level; when the third security level is lower than the fourth security level, Determining that the terminal device has the right to register the service; or, when the third security level is greater than or equal to the fourth security level, determining that the terminal device does not have the right to register the service.

In a possible implementation manner, the processing module 602 is specifically configured to determine the highest service level corresponding to the fourth security level; determine whether the third security level is smaller than the highest service level; When the third security level is less than the highest service level, it is determined that the terminal device has the right to register the service; when the third security level is greater than or equal to the highest service level, it is determined that the terminal device does not have the right to register permissions for the services described above.

In a possible implementation manner, the processing module 602 is specifically configured to determine the lowest level of equipment corresponding to the third security level; determine whether the fourth security level is greater than the lowest level of equipment; Fourth, when the security level is greater than the lowest level of the device, it is determined that the terminal device has the right to register the service; when the fourth security level is less than or equal to the lowest level of the device, it is determined that the terminal device does not have the right to register permissions for the services described above.

In a possible implementation manner, the acquiring module 601 is further configured to acquire a service registration request.

In a possible implementation manner, the service registration request includes the identifier of the service; the obtaining module 601 is specifically configured to determine the service according to the identifier of the service; read the configuration file of the service to obtain The third security level; or, acquiring the third security level from user configuration information of the service; or, acquiring the third security level according to characteristic information of the service, the characteristic information including the service The signature level of the secret key or the storage path of the program of the service.

The device in this embodiment can be used to execute the technical solution of the method embodiment shown in FIG. 4 or FIG. 5 , and its implementation principle and technical effect are similar, and details are not repeated here.

In the implementation process, each step of the above-mentioned method embodiments may be completed by an integrated logic circuit of hardware in a processor or instructions in the form of software. The processor can be a general-purpose processor, a digital signal processor (DSP), an application-specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other possible Program logic devices, discrete gate or transistor logic devices, discrete hardware components. A general-purpose processor may be a microprocessor, or the processor may be any conventional processor, or the like. The steps of the method disclosed in the present application can be directly implemented by a hardware coded processor, or executed by a combination of hardware and software modules in the coded processor. The software module can be located in a mature storage medium in the field such as random access memory, flash memory, read-only memory, programmable read-only memory or electrically erasable programmable memory, register. The storage medium is located in the memory, and the processor reads the information in the memory, and completes the steps of the above method in combination with its hardware.

The memories mentioned in the above embodiments may be volatile memories or nonvolatile memories, or may include both volatile and nonvolatile memories. Among them, the non-volatile memory can be read-only memory (read-only memory, ROM), programmable read-only memory (programmable ROM, PROM), erasable programmable read-only memory (erasable PROM, EPROM), electrically programmable Erases programmable read-only memory (electrically EPROM, EEPROM) or flash memory. Volatile memory can be random access memory (RAM), which acts as external cache memory. By way of illustration and not limitation, many forms of RAM are available such as static random access memory (static RAM, SRAM), dynamic random access memory (dynamic RAM, DRAM), synchronous dynamic random access memory (synchronous DRAM, SDRAM), double data rate synchronous dynamic random access memory (double data rate SDRAM, DDR SDRAM), enhanced synchronous dynamic random access memory (enhanced SDRAM, ESDRAM), synchronous connection dynamic random access memory (synchlink DRAM, SLDRAM ) and direct memory bus random access memory (direct rambus RAM, DR RAM). It should be noted that the memory of the systems and methods described herein is intended to include, but not be limited to, these and any other suitable types of memory.

Those skilled in the art can appreciate that the units and algorithm steps of the examples described in conjunction with the embodiments disclosed herein can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are executed by hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art may use different methods to implement the described functions for each specific application, but such implementation should not be regarded as exceeding the scope of the present application.

Those skilled in the art can clearly understand that for the convenience and brevity of the description, the specific working process of the above-described system, device and unit can refer to the corresponding process in the foregoing method embodiment, which will not be repeated here.

In the several embodiments provided in this application, it should be understood that the disclosed systems, devices and methods may be implemented in other ways. For example, the device embodiments described above are only illustrative. For example, the division of the units is only a logical function division. In actual implementation, there may be other division methods. For example, multiple units or components can be combined or May be integrated into another system, or some features may be ignored, or not implemented. In another point, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces, and the indirect coupling or communication connection of devices or units may be in electrical, mechanical or other forms.

The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place, or may be distributed to multiple network units. Part or all of the units can be selected according to actual needs to achieve the purpose of the solution of this embodiment.

In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, each unit may exist separately physically, or two or more units may be integrated into one unit.

If the functions described above are realized in the form of software function units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or the part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including Several instructions are used to make a computer device (personal computer, server, or network device, etc.) execute all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (read-only memory, ROM), random access memory (random access memory, RAM), magnetic disk or optical disc and other media that can store program codes. .

The above is only a specific implementation of the application, but the scope of protection of the application is not limited thereto. Anyone familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the application. Should be covered within the protection scope of this application. Therefore, the protection scope of the present application should be determined by the protection scope of the claims.

Claims

A method for securely invoking a service, characterized by comprising:

Obtain the first security level of the service requested by the terminal device;

Acquiring the second security level of the terminal device;

determining whether the terminal device has the authority to call the service according to the first security level and the second security level;

When the terminal device has the right to call the service, the terminal device is allowed to call the service.
The method according to claim 1, wherein the determining whether the terminal device has the authority to invoke the service according to the first security level and the second security level comprises:

judging whether the first security level is smaller than the second security level;

When the first security level is smaller than the second security level, determine that the terminal device has the authority to invoke the service;

Or, when the first security level is greater than or equal to the second security level, it is determined that the terminal device does not have the right to invoke the service.
The method according to claim 1, wherein the determining whether the terminal device has the authority to invoke the service according to the first security level and the second security level comprises:

determining the highest service level corresponding to the second security level;

judging whether the first security level is less than the highest service level;

When the first security level is less than the highest level of the service, determine that the terminal device has the authority to invoke the service;

When the first security level is greater than or equal to the highest service level, it is determined that the terminal device does not have the right to invoke the service.
The method according to claim 1, wherein the determining whether the terminal device has the authority to invoke the service according to the first security level and the second security level comprises:

determining the lowest level of equipment corresponding to the first security level;

judging whether the second security level is greater than the lowest level of the device;

When the second security level is greater than the lowest level of the device, determine that the terminal device has the authority to call the service;

When the second security level is less than or equal to the lowest level of the device, it is determined that the terminal device does not have the right to invoke the service.
The method according to any one of claims 1-4, characterized in that before obtaining the first security level of the service requested by the terminal device, further comprising:

Receive a service invocation request sent by the terminal device.
The method according to claim 5, wherein the service invocation request includes an identification of the service; the acquiring the first security level of the service requested by the terminal device includes:

determining the service according to the identifier of the service;

Read the configuration file of the service to obtain the first security level; or obtain the user configuration information of the service to obtain the first security level; or obtain the first security level according to the characteristic information of the service , the characteristic information includes the key signature level of the service or the storage path of the program of the service.
The method according to claim 5 or 6, wherein the obtaining the second security level of the terminal device comprises:

When the service invocation request includes the identifier of the terminal device, acquiring the second security level according to the identifier of the terminal device; or,

When the service invocation request includes the security level identifier of the terminal device, the second security level is acquired according to the security level identifier of the terminal device.
A method for securely registering a service, characterized by comprising:

Obtain the first security level of the service for which the terminal device requests registration;

Acquiring the second security level of the terminal device;

determining whether the terminal device has the authority to register the service according to the first security level and the second security level;

When the terminal device has the right to register for the service, allow the terminal device to register for the service.
The method according to claim 8, wherein the determining whether the terminal device has the authority to register the service according to the first security level and the second security level comprises:

judging whether the first security level is smaller than the second security level;

When the first security level is smaller than the second security level, determine that the terminal device has the authority to register the service;

Or, when the first security level is greater than or equal to the second security level, it is determined that the terminal device does not have the right to register the service.
The method according to claim 8, wherein the determining whether the terminal device has the authority to register the service according to the first security level and the second security level comprises:

determining the highest service level corresponding to the second security level;

judging whether the first security level is less than the highest service level;

When the first security level is less than the highest level of the service, determine that the terminal device has the authority to register the service;

When the first security level is greater than or equal to the highest service level, it is determined that the terminal device does not have the right to register the service.
The method according to claim 8, wherein the determining whether the terminal device has the authority to register the service according to the first security level and the second security level comprises:

determining the lowest level of equipment corresponding to the first security level;

judging whether the second security level is greater than the lowest level of the device;

When the second security level is greater than the minimum level of the device, determine that the terminal device has the authority to register the service;

When the second security level is less than or equal to the lowest level of the device, it is determined that the terminal device does not have the right to register the service.
The method according to any one of claims 8-11, characterized in that before acquiring the first security level of the service for which the terminal device requests registration, it further includes:

Get service registration request.
The method according to claim 12, wherein the service registration request includes the identification of the service; and the obtaining the first security level of the service for which the terminal device requests registration includes:

determining the service according to the identifier of the service;

Read the configuration file of the service to obtain the first security level; or obtain the user configuration information of the service to obtain the first security level; or obtain the first security level according to the characteristic information of the service , the characteristic information includes the key signature level of the service or the storage path of the program of the service.
A device for securely invoking a service, characterized by comprising:

An acquisition module, configured to acquire the first security level of the service requested by the terminal device; acquire the second security level of the terminal device;

A processing module, configured to determine whether the terminal device has the right to call the service according to the first security level and the second security level; when the terminal device has the right to call the service, allow the The terminal device invokes the service.
The device according to claim 14, wherein the processing module is specifically configured to judge whether the first security level is lower than the second security level; when the first security level is lower than the second security level When the first security level is greater than or equal to the second security level, it is determined that the terminal device does not have the authority to call the service.
The device according to claim 14, wherein the processing module is specifically configured to determine the highest service level corresponding to the second security level; determine whether the first security level is less than the highest service level; when When the first security level is less than the highest service level, it is determined that the terminal device has the authority to call the service; when the first security level is greater than or equal to the highest service level, it is determined that the terminal device does not Have permission to call the service described.
The device according to claim 14, wherein the processing module is specifically configured to determine the lowest level of equipment corresponding to the first security level; determine whether the second security level is greater than the lowest level of the equipment; when When the second security level is greater than the lowest level of the device, it is determined that the terminal device has the authority to call the service; when the second security level is less than or equal to the lowest level of the device, it is determined that the terminal device does not Have permission to call the service described.
The apparatus according to any one of claims 14-17, wherein the obtaining module is further configured to receive a service invocation request sent by the terminal device.
The device according to claim 18, wherein the service call request includes an identifier of the service; the obtaining module is specifically configured to determine the service according to the identifier of the service; read the identifier of the service The configuration file obtains the first security level; or, obtains the user configuration information of the service to obtain the first security level; or obtains the first security level according to characteristic information of the service, and the characteristic information includes The key signature level of the service or the storage path of the program of the service.
The apparatus according to claim 18 or 19, wherein the acquiring module is specifically configured to acquire the second A security level; or, when the service invocation request includes the security level identifier of the terminal device, acquiring the second security level according to the security level identifier of the terminal device.
The apparatus according to any one of claims 14-20, the acquiring module is further configured to acquire a third security level of a service for which a terminal device requests registration; acquire a fourth security level of the terminal device;

The processing module is further configured to determine whether the terminal device has the right to register the service according to the third security level and the fourth security level; when the terminal device has the right to register the service, The terminal device is allowed to register with the service.
The device according to claim 21, wherein the processing module is specifically configured to determine whether the third security level is lower than the fourth security level; when the third security level is lower than the fourth security level When the third security level is greater than or equal to the fourth security level, it is determined that the terminal device does not have the authority to register for the service.
The device according to claim 21, wherein the processing module is specifically configured to determine the highest service level corresponding to the fourth security level; determine whether the third security level is less than the highest service level; when When the third security level is less than the highest service level, it is determined that the terminal device has the authority to register the service; when the third security level is greater than or equal to the highest service level, it is determined that the terminal device does not Have permission to register for said service.
The device according to claim 21, wherein the processing module is specifically configured to determine the lowest level of equipment corresponding to the third security level; determine whether the fourth security level is greater than the lowest level of the equipment; when When the fourth security level is greater than the lowest level of the device, it is determined that the terminal device has the authority to register the service; when the fourth security level is less than or equal to the lowest level of the device, it is determined that the terminal device does not Have permission to register for said service.
The device according to any one of claims 21-24, wherein the acquiring module is further configured to acquire a service registration request.
The device according to claim 25, wherein the service registration request includes an identifier of the service; the obtaining module is specifically configured to determine the service according to the identifier of the service; read the identifier of the service The configuration file obtains the third security level; or, obtains the user configuration information of the service to obtain the third security level; or obtains the third security level according to characteristic information of the service, and the characteristic information includes The key signature level of the service or the storage path of the program of the service.
A terminal device, characterized in that it includes:

one or more processors;

memory for storing one or more programs;

When the one or more programs are executed by the one or more processors, the one or more processors are made to implement the method according to any one of claims 1-13.
A computer-readable storage medium, characterized by comprising a computer program, and when the computer program is executed on a computer, the computer executes the method according to any one of claims 1-13.
A computer program product, characterized in that the computer program product includes computer program code, and when the computer program code is run on a computer, the computer is made to execute the method according to any one of claims 1-13.