CN108229149A - A kind of method and apparatus of data protection - Google Patents
A kind of method and apparatus of data protection Download PDFInfo
- Publication number
- CN108229149A CN108229149A CN201711474388.9A CN201711474388A CN108229149A CN 108229149 A CN108229149 A CN 108229149A CN 201711474388 A CN201711474388 A CN 201711474388A CN 108229149 A CN108229149 A CN 108229149A
- Authority
- CN
- China
- Prior art keywords
- authentication information
- default
- mobile terminal
- application
- consistent
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
- G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
- G06F21/53—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
- G06F21/32—User authentication using biometric data, e.g. fingerprints, iris scans or voiceprints
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/60—Protecting data
- G06F21/604—Tools and structures for managing or administering access control systems
Landscapes
- Engineering & Computer Science (AREA)
- Computer Security & Cryptography (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- General Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- Physics & Mathematics (AREA)
- Computer Hardware Design (AREA)
- Automation & Control Theory (AREA)
- Health & Medical Sciences (AREA)
- Bioethics (AREA)
- General Health & Medical Sciences (AREA)
- Telephone Function (AREA)
Abstract
An embodiment of the present invention provides a kind of method and apparatus of data protection; applied to mobile terminal; sandbox system is provided in the mobile terminal; one or more application-specifics are installed and are operated in the sandbox system; desktop icons are not presented at the interface of mobile terminal in the application-specific, the method includes：Receive the authentication information that user submits；It is whether consistent with default authentication information to verify the authentication information；When the authentication information is consistent with default authentication information, then into the sandbox system, start the application-specific being adapted to the authentication information；In the embodiment of the present invention, desktop icons are not presented at the interface of mobile terminal, improve applications security, it is verified using a variety of different verification modes, the step of reducing user setting reduces the risk that application program generates in the process of running, improves user experience.
Description
Technical field
The present invention relates to the technical field of data processing, method and a kind of data more particularly to a kind of data protection are protected
The device of shield.
Background technology
At present, with the development of science and technology, the people increasingly come possesses mobile terminal, and the function of mobile terminal also exists
It continuously improves and increases, for example, clearer can take pictures, webpage, the screen of bigger can be opened faster.
Certainly, user may be used mobile terminal and advantageously carry out delivery operation, example using various payment class application programs
Such as, the virtual retail shop that user can be on line does shopping, can also online under entity retail shop do shopping, can also include
Pay certain finance products, the means of the protection safety of payment such as generally use application program encryption, still, are adopted in existing technology
Payment class application program is protected with the mode of simple data encryption, makes Information Security still relatively low.
Invention content
In view of the above problems, it is proposed that the present invention overcomes the above problem in order to provide one kind or solves at least partly
State a kind of method of data protection of problem and a kind of corresponding device of data protection.
One side according to the present invention provides a kind of method of data protection, applied to mobile terminal, the movement
Sandbox system is provided in terminal, one or more application-specifics are installed and operated in the sandbox system, the spy
Determine application program and desktop icons are not presented at the interface of mobile terminal, the method includes：
Receive the authentication information that user submits；
It is whether consistent with default authentication information to verify the authentication information；
When the authentication information is consistent with default authentication information, then into the sandbox system, start with
The application-specific of the authentication information adaptation.
Optionally, the mobile terminal includes certain chip, and the certain chip is with the sandbox system via independent reading
Write access carries out data interaction, and the application-specific is mounted on the isolated storage area belonging to the sandbox system.
Optionally, described the step of receiving the authentication information that user submits, includes：
Receive fingerprint characteristic and/or iris feature that user submits.
Optionally, described the step of receiving the authentication information that user submits, includes：
Receive data label input by user；
And/or receive the press event for physical button of user.
Optionally, the default authentication information includes preset fingerprint feature, default iris feature, preset data label
And default physical button.
Optionally, the verification authentication information step whether consistent with default authentication information includes：
Obtain the preset fingerprint feature and/or the default iris feature；
It verifies the fingerprint characteristic and whether the preset fingerprint feature is consistent；
And/or verify the iris feature and whether the default iris feature is consistent.
Optionally, the verification authentication information step whether consistent with default authentication information is also wrapped
It includes：
Obtain the preset data label and/or the default physical button；
It verifies the data label and whether the preset data label is consistent；
And/or whether the button verified in the press event meets default physical button.
Optionally, the mobile terminal includes certain chip, the preset fingerprint feature and/or the default iris feature
The certain chip is stored in, described the step of obtaining the preset fingerprint feature and/or the default iris feature includes:
The preset fingerprint feature and/or the default iris feature are read from the certain chip.
Optionally, the mobile terminal is connect with external connection module, and the external connection module is provided with the preset data label,
The step of acquisition preset data label and/or the default physical button, includes:
The preset data label is obtained from the external connection module.
Optionally, the application-specific shows application icon in sandbox system, and the method further includes：
When the authentication information is consistent with default authentication information, then into the sandbox system；
Receive the click event that user is directed to the application icon；
It responds the click event and starts the application-specific.
According to another aspect of the present invention, a kind of device of data protection, applied to mobile terminal, the movement are provided
Sandbox system is provided in terminal, one or more application-specifics are installed and operated in the sandbox system, the spy
Determine application program and desktop icons are not presented at the interface of mobile terminal, described device includes：
Information receiving module, for receiving the authentication information of user's submission；
Correction verification module, it is whether consistent with default authentication information for verifying the authentication information；
First starting module, for when the authentication information is consistent with default authentication information, then into institute
Sandbox system is stated, starts the application-specific being adapted to the authentication information.
Optionally, the mobile terminal includes certain chip, and the certain chip is with the sandbox system via independent reading
Write access carries out data interaction, and the application-specific is mounted on the isolated storage area belonging to the sandbox system.
Optionally, described information receiving module includes：
First receiving submodule, for receiving the fingerprint characteristic and/or iris feature of user's submission.
Optionally, described information receiving module includes：
Second receiving submodule, for receiving data label input by user；
And/or third receiving submodule, for receiving the press event for physical button of user.
Optionally, the default authentication information includes preset fingerprint feature, default iris feature, preset data label
And default physical button.
Optionally, the correction verification module includes：
First acquisition submodule, for obtaining the preset fingerprint feature and/or the default iris feature；
First verification submodule, it is whether consistent for verifying the fingerprint characteristic and the preset fingerprint feature；
And/or second verification submodule, it is whether consistent for verifying the iris feature and the default iris feature.
Optionally, the correction verification module further includes：
Second acquisition submodule, for obtaining the preset data label and/or the default physical button；
Whether third verifies submodule, consistent for verifying the data label and the preset data label；
And/or the 4th verification submodule, the button for verifying in the press event whether meet default entity by
Key.
Optionally, the mobile terminal includes certain chip, the preset fingerprint feature and/or the default iris feature
The certain chip is stored in, first acquisition submodule includes:
First acquisition unit, for reading the preset fingerprint feature and/or the default iris from the certain chip
Feature.
Optionally, the mobile terminal is connect with external connection module, and the external connection module is provided with the preset data label,
Second acquisition submodule includes:
Second acquisition unit, for obtaining the preset data label from the external connection module.
Optionally, the application-specific shows application icon in sandbox system, and described device further includes：
System enters module, for when the authentication information is consistent with default authentication information, then into institute
State sandbox system；
Event receiving module, for receiving the click event that user is directed to the application icon；
First starting module starts the application-specific for responding the click event.
According to another aspect of the present invention, a kind of mobile terminal is provided, including processor and memory,
The memory performs the program of the data protection for storing；
The processor is configurable for performing the program stored in the memory.
The method and relevant device of a kind of data protection according to the present invention, are provided with sandbox system in mobile terminal, and one
A or multiple application-specifics are installed and are operated in the sandbox system, and the application-specific is on the boundary of mobile terminal
Desktop icons are not presented in face, receive the authentication information that user submits, verify the authentication information and tested with default identity
Whether consistent demonstrate,prove information, when the authentication information is consistent with default authentication information, then into the sandbox system,
Start the application-specific that is adapted to the authentication information, in the embodiment of the present invention, sandbox is set in the terminal
System allows application-specific to be run in the environment of sandbox, and desktop icons are not presented at the interface in mobile terminal, carries
High applications security, further, verify the authentication information of user's typing and default authentication information whether one
Cause, if unanimously, starting the application-specific that is adapted to the authentication information, using a variety of different verification modes into
The step of row verification, reduction user setting, reduces the risk that application program generates in the process of running, improves user experience.
Above description is only the general introduction of technical solution of the present invention, in order to better understand the technological means of the present invention,
And it can be implemented in accordance with the contents of the specification, and in order to allow above and other objects of the present invention, feature and advantage can
It is clearer and more comprehensible, below the special specific embodiment for lifting the present invention.
Description of the drawings
By reading the detailed description of hereafter preferred embodiment, it is various other the advantages of and benefit it is common for this field
Technical staff will become clear.Attached drawing is only used for showing the purpose of preferred embodiment, and is not considered as to the present invention
Limitation.And throughout the drawings, the same reference numbers will be used to refer to the same parts.In the accompanying drawings：
Fig. 1 shows a kind of step flow chart of the method for data protection according to an embodiment of the invention；
Fig. 2 shows a kind of step flow charts of the method for data protection according to an embodiment of the invention；
Fig. 3 shows a kind of step flow chart of the method for data protection according to an embodiment of the invention；
Fig. 4 shows a kind of device of data protection according to an embodiment of the invention；And
Fig. 5 shows the block diagram with the part-structure of the relevant mobile phone of terminal provided in an embodiment of the present invention.
Specific embodiment
The exemplary embodiment of the disclosure is more fully described below with reference to accompanying drawings.Although the disclosure is shown in attached drawing
Exemplary embodiment, it being understood, however, that may be realized in various forms the disclosure without should be by embodiments set forth here
It is limited.On the contrary, these embodiments are provided to facilitate a more thoroughly understanding of the present invention, and can be by the scope of the present disclosure
Completely it is communicated to those skilled in the art.
The step of reference Fig. 1, the embodiment of the method for showing a kind of data protection according to an embodiment of the invention, flows
Cheng Tu applied to mobile terminal, is provided with sandbox system, one or more application-specific installations are simultaneously in the mobile terminal
It operates in the sandbox system, desktop icons are not presented at the interface of mobile terminal in the application-specific, specifically can be with
Include the following steps：
Step 101, the authentication information that user submits is received；
In the embodiment of the present invention, sandbox system is a kind of virtual system program, is that one kind can be limited according to security strategy
The performing environment of program behavior, sandbox system are arranged in some specific region of the memory of mobile terminal, be properly termed as every
From memory block, file is all through overweight caused by the application-specific operational process and installation process run in sandbox system
It orients and is stored in the isolated storage area, called by the system for intercepting application program, the means of the behavior of monitoring program are realized
One virtual secure execution environments.
In embodiments of the present invention, the mobile terminal can be the terminals such as smart mobile phone, tablet computer or can
The other-end of application program, such as smartwatch etc. are installed, the present invention is not construed as limiting the concrete type of mobile terminal.
In embodiments of the present invention, the operating system of mobile terminal can include Android (Android), IOS, Windows
Phone, Windows etc..
In the embodiment of the present invention, one or more application-specifics are installed and are operated in the sandbox system, described
Desktop icons are not presented at the interface of mobile terminal in application-specific.
Specifically, mobile terminal receives the authentication information of user's submission first, which can wrap
Certain biological characteristics of user are included, which can be the feature for reflecting the uniqueness of each mobile terminal user, such as
Fingerprint characteristic, iris feature, eyeprint feature, vein pattern etc., the data label that can also include user preset, such as password are tested
Code, slip gesture etc. are demonstrate,proved, the embodiment of the present invention does not limit this specifically.
Step 102, it is whether consistent with default authentication information to verify the authentication information；
Further, after mobile terminal receives the authentication information of user, it can further obtain default identity and test
Information is demonstrate,proved, which can be obtained from the certain chip of mobile terminal, and the certain chip can be with
With other chips (processor chips, the DSP (Digital Signal Processing, Digital Signal Processing) on mobile terminal
Chip, power management chip) etc. independent chip, the certain chip can only storage user default authentication information and certain
A little private datas etc., the sandbox system of mobile terminal can read the default identity from the independent read/write channel of certain chip and test
Demonstrate,prove information.
Specific in the embodiment of the present invention, can also being obtained from external connection module for the sandbox system of mobile terminal is described pre-
If authentication information, wherein, the external connection module can be including storage card or the function encrypting module identical with U-shield, this hair
Bright embodiment does not limit the type and the mode of action of external connection module specifically, and U-shield is a kind of built-in miniature intelligent card in processing
Device is encrypted data using specific key algorithm, decrypts and digital signature, it is ensured that the confidentiality of online transaction, true
Property, integrality, the storage card or encrypting module can include being attached with mobile terminal by different modes, such as pass through
Type-C interfaces, lightning interfaces, the embodiment of the present invention are not restricted this.
When the sandbox system of mobile terminal can read the default authentication from the independent read/write channel of certain chip
It after information, can carry out verifying the authentication information and the whether consistent step of default authentication information, when user records
When having entered multiple authentication informations, it can be carried out at the same time or carry out verification operation respectively, the embodiment of the present invention does not make this
Limitation, the default authentication information include preset fingerprint feature, default iris feature, preset data label and default entity
Button.
Step 103, when the authentication information is consistent with default authentication information, then into the sandbox system
System starts the application-specific being adapted to the authentication information.
In the embodiment of the present invention, when mobile terminal judgement authentication information is consistent with default authentication information, then
Into the sandbox system, start the application-specific being adapted to the authentication information.When verifying successfully, then enter
The running environment of sandbox system starts the application-specific being adapted to the authentication information under the running environment.
It should be noted that in the embodiment of the present invention, each authentication information pre-sets corresponding specific application journey
Sequence when authentication information is consistent with default authentication information, starts corresponding spy under the running environment of sandbox system
Determine application program, when for example, described in user setting presetting authentication information, association can be set to start simultaneously specific
Application program, when the authentication information of the typing of user is consistent with default authentication information, then start this it is specific should
With program, for example, user is used as default authentication information for the fingerprint of right hand forefinger, which opens
Dynamic application-specific be Alipay, then when user's fingerprint of typing right hand forefinger again, mobile terminal judge the fingerprint with
When the fingerprint of typing for the first time is consistent, then Alipay is run under the running environment of sandbox system.
Certainly, in the embodiment of the present invention, other modes can also be used to run application-specific, for example, when identity is tested
When card information is consistent with default authentication information, a pop-up box is shown on the screen of the mobile terminal, which includes
The application icon of one or more application-specifics that can be run under sandbox system, mobile terminal receive user and are directed to institute
The click event of application icon is stated, the corresponding application-specific of the application icon is run under the running environment of sandbox system,
The above-mentioned only embodiment of the present invention herds act, can also be when authentication information is consistent with default authentication information, simultaneously
Association starts multiple application-specifics, and the embodiment of the present invention is not restricted.
Sandbox system is provided in the embodiment of the present invention, in mobile terminal, one or more application-specific installations are simultaneously
It operates in the sandbox system, desktop icons are not presented at the interface of mobile terminal for the application-specific, receive user
The authentication information of submission, whether with default authentication information consistent, when the identity if verifying the authentication information
When verification information is consistent with default authentication information, then into the sandbox system, startup is fitted with the authentication information
The application-specific matched in the embodiment of the present invention, sets sandbox system, allows application-specific in sandbox in the terminal
Environment in run, and be not presented desktop icons at the interface of mobile terminal, improve applications security, further
Ground verifies whether the authentication information of user's typing and default authentication information are consistent, if unanimously, starting and the body
The application-specific of part verification information adaptation, is verified using a variety of different verification modes, reduces the step of user setting
Suddenly, the risk that application program generates in the process of running is reduced, improves user experience.
The step of reference Fig. 2, the embodiment of the method for showing a kind of data protection according to an embodiment of the invention, flows
Cheng Tu applied to mobile terminal, is provided with sandbox system, one or more application-specific installations are simultaneously in the mobile terminal
It operates in the sandbox system, desktop icons are not presented at the interface of mobile terminal in the application-specific, specifically can be with
Include the following steps：
Step 201, the fingerprint characteristic and/or iris feature that user submits are received；
In the embodiment of the present invention, mobile terminal can receive the fingerprint characteristic and/or iris feature of user's submission, and fingerprint is special
Sign refers to the convex recessed uneven streakline generated of the positive surface skin of finger tips of people.The different line of the regular arrangement form of streakline
Type.The details of starting point, terminal, binding site and the bifurcation, referred to as fingerprint of streakline are user's lifes as fingerprint characteristic
Reason feature further includes iris feature, and iris feature refers to be formed the woven structure of a variety of colors and texture around pupil, often
Personal iris has its unique as characteristics such as hat, crystalline, filament, spot, concave point, salient point, ray, wrinkle and stripeds
Structure.Certainly, the embodiment of the present invention can also include other physiological characteristics, such as vein pattern, the embodiment of the present invention to this not
It is restricted.
Step 202, the preset fingerprint feature and/or the default iris feature are obtained；
It should be noted that after mobile terminal receives the fingerprint characteristic and/or iris feature of user's submission, obtain and use
The preset fingerprint feature at family and/or default iris feature, the concrete mode of acquisition can be via independent read-write from certain chip
Channel is obtained.
In a kind of preferred embodiment of the embodiment of the present invention, mobile terminal can include certain chip, the default finger of user
Line feature and/or default iris feature are stored in the certain chip, obtain the preset fingerprint feature and/or the default rainbow
The step of film feature, can include:The preset fingerprint feature and/or the default iris feature are read from the certain chip.
Specifically, the certain chip in mobile terminal carries out data friendship with the sandbox system via independent read/write channel
Mutually, the application-specific is mounted on the isolated storage area belonging to the sandbox system.
Step 203, it verifies the fingerprint characteristic and whether the preset fingerprint feature is consistent；
Step 204, it verifies the iris feature and whether the default iris feature is consistent；
In the embodiment of the present invention, after mobile terminal receives the fingerprint characteristic and/or iris feature of user's submission, into one
Step ground obtains user preset fingerprint characteristic and default iris feature, then judge that the fingerprint characteristic is characterized in the preset fingerprint
It is no consistent and/or judge whether the iris feature and the default iris feature are consistent.
Step 205, if when consistent, into the sandbox system, startup is adapted to specific with the authentication information
Application program.
Specifically, when mobile terminal judges that the fingerprint characteristic is consistent with the preset fingerprint feature or judges the rainbow
When film feature is consistent with the default iris feature, then into sandbox system, start corresponding with the fingerprint characteristic or iris feature
Application-specific.
It should be noted that in the embodiment of the present invention, user can be by each authentication information and application-specific
It is associated, when mobile terminal receives authentication information, after verifying successfully, the associated specific application can be started
Program, for example, user can set the iris features of eyes as authentication information, the application-specific that can start
For Taobao, when the iris feature of mobile terminal user, and after verifying successfully, can under the running environment of sandbox system,
Start this application-specific of Taobao.
In the embodiment of the present invention, mobile terminal receives the fingerprint characteristic and/or iris feature that user submits, and obtains described pre-
If fingerprint characteristic and/or the default iris feature；It verifies the fingerprint characteristic and whether the preset fingerprint feature is consistent, school
It tests the iris feature and whether the default iris feature is consistent, if when consistent, into the sandbox system, startup and institute
The application-specific of authentication information adaptation is stated, in the embodiment of the present invention, the biology that mobile terminal can receive user is special
(iris feature, fingerprint characteristic) is levied as authentication information, ensures the safety that mobile terminal uses, in the fortune of sandbox system
Under row environment, the safety during application program use is further improved.
The step of reference Fig. 3, the embodiment of the method for showing a kind of data protection according to an embodiment of the invention, flows
Cheng Tu applied to mobile terminal, is provided with sandbox system, one or more application-specific installations are simultaneously in the mobile terminal
It operates in the sandbox system, desktop icons are not presented at the interface of mobile terminal in the application-specific, specifically can be with
Include the following steps：
Step 301, data label input by user is received；
In the embodiment of the present invention, mobile terminal receives data label input by user, the data label can include password,
Identifying code, slip gesture etc., the embodiment of the present invention is not restricted this.
Step 302, the press event for physical button of user is received；
Further, while mobile terminal receives data label input by user, it is real that being directed to for user can also be received
The press event of body button, which can include volume key, power key, major key etc., the embodiment of the present invention to this not
It is restricted.
Step 303, the preset data label and/or the default physical button are obtained；
Specific in the embodiment of the present invention, obtaining the preset data label and/or the default physical button, the present invention
In a kind of preferred embodiment of embodiment, mobile terminal is connect with external connection module, and the external connection module is provided with the present count
According to label, described the step of obtaining the preset data label and/or the default physical button, includes：From the external connection module
Obtain the preset data label.
It should be noted that preset data label and/or the default physical button are stored in the external connection module, this is external
Module can including storage card etc. storage devices, be attached by specific interface with mobile terminal.
Step 304, it verifies the data label and whether the preset data label is consistent；
Step 305, verify whether the button in the press event meets default physical button；
In the embodiment of the present invention, after mobile terminal receives data label and/or the press event of user's submission, into one
Step ground obtains user preset data label and default physical button, then judge that the data label is with the preset data label
It is no consistent and/or judge whether the button in the press event meets default physical button.
Step 306, if when consistent, into the sandbox system, startup is adapted to specific with the authentication information
Application program.
It should be noted that the application-specific is mounted on the isolated storage area belonging to the sandbox system.
Specifically, when mobile terminal judges that the data label is consistent with the preset data label or presses described in judging
When button in pressure event meets default physical button, then into sandbox system, start in the data label or press event
The corresponding application-specific of button.
In a kind of preferred embodiment of the embodiment of the present invention, the application-specific shows application drawing in sandbox system
Mark, the method further include：When the authentication information is consistent with default authentication information, then into the sandbox system
System；Receive the click event that user is directed to the application icon；It responds the click event and starts the application-specific.
In the embodiment of the present invention, mobile terminal receives data label input by user, and receive user is directed to physical button
Press event, verify the data label and whether the preset data label consistent, and verify in the press event
Whether button meets default physical button, if when consistent, into the sandbox system, startup is fitted with the authentication information
The application-specific matched, in the embodiment of the present invention, mobile terminal can receive the data mark for being stored in external connection module of user
Label and physical button ensure the safety that mobile terminal uses as authentication information, under the running environment of sandbox system,
Further improve the safety during application program use.
For embodiment of the method, in order to be briefly described, therefore it is all expressed as to a series of combination of actions, but this field
Technical staff should know that the embodiment of the present invention is not limited by described sequence of movement, because implementing according to the present invention
Example, certain steps may be used other sequences or are carried out at the same time.Secondly, those skilled in the art should also know, specification
Described in embodiment belong to preferred embodiment, necessary to the involved action not necessarily embodiment of the present invention.
With reference to Fig. 4, a kind of structural frames of the device embodiment of data protection according to an embodiment of the invention are shown
Figure, applied to mobile terminal, is provided with sandbox system, one or more application-specifics are installed and transported in the mobile terminal
For row in the sandbox system, desktop icons are not presented at the interface of mobile terminal in the application-specific, can specifically wrap
Include following module：
Information receiving module 401, for receiving the authentication information of user's submission；
Correction verification module 402, it is whether consistent with default authentication information for verifying the authentication information；
First starting module 403, for when the authentication information is consistent with default authentication information, then entering
The sandbox system starts the application-specific being adapted to the authentication information.
Preferably, the mobile terminal includes certain chip, and the certain chip is with the sandbox system via independent reading
Write access carries out data interaction, and the application-specific is mounted on the isolated storage area belonging to the sandbox system.
Preferably, described information receiving module includes：
First receiving submodule, for receiving the fingerprint characteristic and/or iris feature of user's submission.
Preferably, described information receiving module includes：
Second receiving submodule, for receiving data label input by user；
And/or third receiving submodule, for receiving the press event for physical button of user.
Preferably, the default authentication information includes preset fingerprint feature, default iris feature, preset data label
And default physical button.
Preferably, the correction verification module includes：
First acquisition submodule, for obtaining the preset fingerprint feature and/or the default iris feature；
First verification submodule, it is whether consistent for verifying the fingerprint characteristic and the preset fingerprint feature；
And/or second verification submodule, it is whether consistent for verifying the iris feature and the default iris feature.
Preferably, the correction verification module further includes：
Second acquisition submodule, for obtaining the preset data label and/or the default physical button；
Whether third verifies submodule, consistent for verifying the data label and the preset data label；
And/or the 4th verification submodule, the button for verifying in the press event whether meet default entity by
Key.
Preferably, the mobile terminal includes certain chip, the preset fingerprint feature and/or the default iris feature
The certain chip is stored in, first acquisition submodule includes:
First acquisition unit, for reading the preset fingerprint feature and/or the default iris from the certain chip
Feature.
Preferably, the mobile terminal is connect with external connection module, and the external connection module is provided with the preset data label,
Second acquisition submodule includes:
Second acquisition unit, for obtaining the preset data label from the external connection module.
Preferably, the application-specific shows application icon in sandbox system, and described device further includes：
System enters module, for when the authentication information is consistent with default authentication information, then into institute
State sandbox system；
Event receiving module, for receiving the click event that user is directed to the application icon；
First starting module starts the application-specific for responding the click event.
For device embodiment, since it is basicly similar to embodiment of the method, so description is fairly simple, it is related
Part illustrates referring to the part of embodiment of the method.
The embodiment of the present invention additionally provides a kind of mobile terminal, as shown in figure 5, for convenience of description, illustrating only and this
The relevant part of inventive embodiments, particular technique details do not disclose, please refer to present invention method part.The terminal can
Think including mobile phone, tablet computer, PDA (Personal Digital Assistant, personal digital assistant), POS (Point
Of Sales, point-of-sale terminal), the arbitrary terminal device such as vehicle-mounted computer, by terminal for for mobile phone：
Fig. 5 is illustrated that the block diagram with the part-structure of the relevant mobile phone of terminal provided in an embodiment of the present invention.Reference chart
5, mobile phone includes：Radio frequency (Radio Frequency, RF) circuit 510, memory 520, input unit 530, display unit 540,
Sensor 550, voicefrequency circuit 560, Wireless Fidelity (wireless fidelity, WiFi) module 570, processor 580, power supply
The components such as 590 and certain chip.It will be understood by those skilled in the art that the handset structure shown in Fig. 5 does not form opponent
The restriction of machine can include either combining certain components or different components arrangement than illustrating more or fewer components.
Each component parts of mobile phone is specifically introduced with reference to Fig. 5：
RF circuits 510 can be used for receive and send messages or communication process in, signal sends and receivees, particularly, by base station
After downlink information receives, handled to processor 580；In addition, the data for designing uplink are sent to base station.In general, RF circuits 510
Including but not limited to antenna, at least one amplifier, transceiver, coupler, low-noise amplifier (Low Noise
Amplifier, LNA), duplexer etc..In addition, RF circuits 510 can also communicate with network and other equipment by radio communication.
Above-mentioned wireless communication can use any communication standard or agreement, including but not limited to global system for mobile communications (Global
System of Mobile communication, GSM), general packet radio service (General Packet Radio
Service, GPRS), CDMA (Code Division Multiple Access, CDMA), wideband code division multiple access
(Wideband Code Division Multiple Access, WCDMA), long term evolution (Long Term Evolution,
LTE), Email, short message service (Short Messaging Service, SMS) etc..
Memory 520 can be used for storage software program and module, and processor 580 is stored in memory 520 by operation
Software program and module, so as to perform the various function application of mobile phone and data processing.Memory 520 can mainly include
Storing program area and storage data field, wherein, storing program area can storage program area, the application journey needed at least one function
Sequence (such as sound-playing function, image player function etc.) etc.；Storage data field can be stored uses what is created according to mobile phone
Data (such as audio data, phone directory etc.) etc..In addition, memory 520 can include high-speed random access memory, it can be with
Including nonvolatile memory, for example, at least a disk memory, flush memory device or other volatile solid-states
Part.
Input unit 530 can be used for receiving input number or character information and generate with the user setting of mobile phone with
And the key signals input that function control is related.Specifically, input unit 530 may include that touch panel 531 and other inputs are set
Standby 532.Touch panel 531, also referred to as touch screen, collect user on it or neighbouring touch operation (such as user use
The operation of any suitable object such as finger, stylus or attachment on touch panel 531 or near touch panel 531), and root
Corresponding attachment device is driven according to preset formula.Optionally, touch panel 531 may include touch detecting apparatus and touch
Two parts of controller.Wherein, the touch orientation of touch detecting apparatus detection user, and the signal that touch operation is brought is detected,
Transmit a signal to touch controller；Touch controller receives touch information from touch detecting apparatus, and is converted into touching
Point coordinates, then processor 580 is given, and the order that processor 580 is sent can be received and performed.Furthermore, it is possible to using electricity
The multiple types such as resistive, condenser type, infrared ray and surface acoustic wave realize touch panel 531.In addition to touch panel 531, input
Unit 1530 can also include other input equipments 532.Specifically, other input equipments 532 can include but is not limited to physics
It is one or more in keyboard, function key (such as volume control button, switch key etc.), trace ball, mouse, operating lever etc..
Display unit 540 can be used for display by information input by user or be supplied to user information and mobile phone it is various
Menu.Display unit 540 may include display panel 541, optionally, liquid crystal display (Liquid Crystal may be used
Display, LCD), the forms such as Organic Light Emitting Diode (Organic Light-Emitting Diode, OLED) it is aobvious to be configured
Show panel 541.Further, touch panel 531 can cover display panel 541, when touch panel 531 detect it is on it or attached
After near touch operation, processor 580 is sent to determine the type of touch event, is followed by subsequent processing device 580 according to touch event
Type corresponding visual output is provided on display panel 541.Although in Figure 5, touch panel 531 and display panel 541
It is the component independent as two to realize the input of mobile phone and input function, but in some embodiments it is possible to by touch-control
Panel 531 and display panel 541 are integrated and that realizes mobile phone output and input function.
Mobile phone may also include at least one sensor 550, such as optical sensor, motion sensor and other sensors.
Specifically, optical sensor may include ambient light sensor and proximity sensor, wherein, ambient light sensor can be according to ambient light
Light and shade adjust the brightness of display panel 541, proximity sensor can close display panel 541 when mobile phone is moved in one's ear
And/or backlight.As one kind of motion sensor, accelerometer sensor can detect in all directions (generally three axis) acceleration
Size, size and the direction of gravity are can detect that when static, can be used to identify the application of mobile phone posture, (for example horizontal/vertical screen is cut
Change, dependent game, magnetometer pose calibrating), Vibration identification correlation function (such as pedometer, tap) etc.；May be used also as mobile phone
The other sensors such as gyroscope, barometer, hygrometer, thermometer, the infrared ray sensor of configuration, details are not described herein.
Voicefrequency circuit 560, loud speaker 561, microphone 562 can provide the audio interface between user and mobile phone.Audio-frequency electric
The transformed electric signal of the audio data received can be transferred to loud speaker 561, sound is converted to by loud speaker 561 by road 560
Signal exports；On the other hand, the voice signal of collection is converted to electric signal by microphone 562, is turned after being received by voicefrequency circuit 560
Audio data is changed to, then after audio data output processor 580 is handled, through RF circuits 510 to be sent to such as another mobile phone,
Or audio data is exported to memory 520 to be further processed.
WiFi belongs to short range wireless transmission technology, and mobile phone can help user's transceiver electronics postal by WiFi module 570
Part, browsing webpage and access streaming video etc., it has provided wireless broadband internet to the user and has accessed.Although Fig. 5 is shown
WiFi module 570, but it is understood that, and must be configured into for mobile phone is not belonging to, it can not change as needed completely
Become in the range of the essence of invention and omit.
Processor 580 is the control centre of mobile phone, using various interfaces and the various pieces of connection whole mobile phone, is led to
It crosses operation or performs the software program being stored in memory 520 and/or module and call and be stored in memory 520
Data perform the various functions of mobile phone and processing data, so as to carry out integral monitoring to mobile phone.Optionally, processor 580 can wrap
Include one or more processing units；Preferably, processor 580 can integrate application processor and modem processor, wherein, it should
With the main processing operation system of processor, user interface and application program etc., modem processor mainly handles wireless communication.
It is understood that above-mentioned modem processor can not also be integrated into processor 580.
Mobile phone further includes the power supply 590 (such as battery) powered to all parts, it is preferred that power supply can pass through power supply pipe
Reason system and processor 580 are logically contiguous, so as to realize management charging, electric discharge and power managed by power-supply management system
Etc. functions.
Although being not shown, mobile phone can also include camera, bluetooth module etc., and details are not described herein.
In embodiments of the present invention, the processor 580 included by the terminal is also with the following functions：Receive what user submitted
Authentication information；It is whether consistent with default authentication information to verify the authentication information；When the authentication is believed
When breath is consistent with default authentication information, then into the sandbox system, start the spy being adapted to the authentication information
Determine application program.
Optionally, processor 580 is also with the following functions：Receive fingerprint characteristic and/or iris feature that user submits.
Optionally, processor 580 is also with the following functions：Receive data label input by user；And/or receive user
The press event for physical button.
Optionally, processor 580 is also with the following functions：Obtain the preset fingerprint feature and/or the default iris
Feature；It verifies the fingerprint characteristic and whether the preset fingerprint feature is consistent；And/or verify the iris feature with it is described
Whether default iris feature is consistent.
Optionally, processor 580 is also with the following functions：Obtain the preset data label and/or the default entity
Button；It verifies the data label and whether the preset data label is consistent；And/or verify pressing in the press event
Whether key meets default physical button.
Optionally, processor 580 is also with the following functions：From the certain chip read the preset fingerprint feature and/
Or the default iris feature.
Optionally, processor 580 is also with the following functions：The preset data label is obtained from the external connection module.
Optionally, processor 580 is also with the following functions：When the authentication information and default authentication information one
During cause, then into the sandbox system；Receive the click event that user is directed to the application icon；The click event is responded to open
Move the application-specific.
It is apparent to those skilled in the art that for convenience and simplicity of description, the system of foregoing description,
The specific work process of device and unit can refer to the corresponding process in preceding method embodiment, and details are not described herein.
Algorithm and display be not inherently related to any certain computer, virtual system or miscellaneous equipment provided herein.
Various general-purpose systems can also be used together with teaching based on this.As described above, required by constructing this kind of system
Structure be obvious.In addition, the present invention is not also directed to any certain programmed language.It should be understood that it can utilize various
Programming language realizes the content of invention described herein, and the description done above to language-specific is to disclose this hair
Bright preferred forms.
In the specification provided in this place, numerous specific details are set forth.It is to be appreciated, however, that the implementation of the present invention
Example can be put into practice without these specific details.In some instances, well known method, structure is not been shown in detail
And technology, so as not to obscure the understanding of this description.
Similarly, it should be understood that in order to simplify the disclosure and help to understand one or more of each inventive aspect,
Above in the description of exemplary embodiment of the present invention, each feature of the invention is grouped together into single implementation sometimes
In example, figure or descriptions thereof.However, the method for the disclosure should be construed to reflect following intention：I.e. required guarantor
Shield the present invention claims the more features of feature than being expressly recited in each claim.More precisely, as following
Claims reflect as, inventive aspect is all features less than single embodiment disclosed above.Therefore,
Thus the claims for following specific embodiment are expressly incorporated in the specific embodiment, wherein each claim is in itself
Separate embodiments all as the present invention.
Those skilled in the art, which are appreciated that, to carry out adaptively the module in the equipment in embodiment
Change and they are arranged in one or more equipment different from the embodiment.It can be the module or list in embodiment
Member or component be combined into a module or unit or component and can be divided into addition multiple submodule or subelement or
Sub-component.Other than such feature and/or at least some of process or unit exclude each other, it may be used any
Combination is disclosed to all features disclosed in this specification (including adjoint claim, abstract and attached drawing) and so to appoint
Where all processes or unit of method or equipment are combined.Unless expressly stated otherwise, this specification is (including adjoint power
Profit requirement, abstract and attached drawing) disclosed in each feature can be by providing the alternative features of identical, equivalent or similar purpose come generation
It replaces.
In addition, it will be appreciated by those of skill in the art that although some embodiments described herein include other embodiments
In included certain features rather than other feature, but the combination of the feature of different embodiments means in of the invention
Within the scope of and form different embodiments.For example, in the following claims, embodiment claimed is appointed
One of meaning mode can use in any combination.
The all parts embodiment of the present invention can be with hardware realization or to be run on one or more processor
Software module realize or realized with combination thereof.It will be understood by those of skill in the art that it can use in practice
Microprocessor or digital signal processor (DSP) realize some in the equipment of data protection according to embodiments of the present invention
Or some or all functions of whole components.The present invention be also implemented as perform method as described herein one
Partly or completely equipment or program of device (for example, computer program and computer program product).It is such to realize this
The program of invention can may be stored on the computer-readable medium or can have the form of one or more signal.In this way
Signal can be downloaded from internet website and obtain either providing on carrier signal or be provided in the form of any other.
It should be noted that the present invention will be described rather than limits the invention, and ability for above-described embodiment
Field technique personnel can design alternative embodiment without departing from the scope of the appended claims.In the claims,
Any reference mark between bracket should not be configured to limitations on claims.Word "comprising" does not exclude the presence of not
Element or step listed in the claims.Word "a" or "an" before element does not exclude the presence of multiple such
Element.The present invention can be by means of including the hardware of several different elements and being come by means of properly programmed computer real
It is existing.If in the unit claim for listing equipment for drying, several in these devices can be by same hardware branch
To embody.The use of word first, second, and third does not indicate that any sequence.These words can be explained and run after fame
Claim.
The invention discloses A1, a kind of methods of data protection, applied to mobile terminal, are provided in the mobile terminal
Sandbox system, one or more application-specifics are installed and are operated in the sandbox system, and the application-specific exists
Desktop icons are not presented in the interface of mobile terminal, the method includes：
Receive the authentication information that user submits；
It is whether consistent with default authentication information to verify the authentication information；
When the authentication information is consistent with default authentication information, then into the sandbox system, start with
The application-specific of the authentication information adaptation.
A2, the method as described in A1, the mobile terminal include certain chip, the certain chip and the sandbox system
Data interaction is carried out via independent read/write channel, the application-specific is mounted on the isolated storage belonging to the sandbox system
Area.
A3, the method as described in A1, described the step of receiving the authentication information that user submits, include：
Receive fingerprint characteristic and/or iris feature that user submits.
A4, the method as described in A1, described the step of receiving the authentication information that user submits, include：
Receive data label input by user；
And/or receive the press event for physical button of user.
A5, the method as described in A1, the default authentication information include preset fingerprint feature, default iris feature,
Preset data label and default physical button.
A6, the method as described in A1 or A3 or A5, the verification authentication information and default authentication information
Whether consistent step includes：
Obtain the preset fingerprint feature and/or the default iris feature；
It verifies the fingerprint characteristic and whether the preset fingerprint feature is consistent；
And/or verify the iris feature and whether the default iris feature is consistent.
A7, the method as described in A1 or A4 or A5, the verification authentication information and default authentication information
Whether consistent step further includes：
Obtain the preset data label and/or the default physical button；
It verifies the data label and whether the preset data label is consistent；
And/or whether the button verified in the press event meets default physical button.
A8, the method as described in A6, the mobile terminal include certain chip, the preset fingerprint feature and/or described
Default iris feature is stored in the certain chip, the acquisition preset fingerprint feature and/or the default iris feature
The step of include:
The preset fingerprint feature and/or the default iris feature are read from the certain chip.
A9, the method as described in A7, the mobile terminal are connect with external connection module, and the external connection module is provided with described pre-
If data label, described the step of obtaining the preset data label and/or the default physical button, includes:
The preset data label is obtained from the external connection module.
A10, the method as described in A1, the application-specific show application icon, the method in sandbox system
It further includes：
When the authentication information is consistent with default authentication information, then into the sandbox system；
Receive the click event that user is directed to the application icon；
It responds the click event and starts the application-specific.
The invention also discloses B11, a kind of devices of data protection, applied to mobile terminal, are set in the mobile terminal
Sandbox system is equipped with, one or more application-specifics are installed and operated in the sandbox system, the specific application journey
Desktop icons are not presented at the interface of mobile terminal in sequence, and described device includes：
Information receiving module, for receiving the authentication information of user's submission；
Correction verification module, it is whether consistent with default authentication information for verifying the authentication information；
First starting module, for when the authentication information is consistent with default authentication information, then into institute
Sandbox system is stated, starts the application-specific being adapted to the authentication information.
B12, the device as described in B11, the mobile terminal include certain chip, the certain chip and the sandbox system
System carries out data interaction via independent read/write channel, and the isolation that the application-specific is mounted on belonging to the sandbox system is deposited
Storage area.
B13, the device as described in B11, described information receiving module include：
First receiving submodule, for receiving the fingerprint characteristic and/or iris feature of user's submission.
B14, the device as described in B11, described information receiving module include：
Second receiving submodule, for receiving data label input by user；
And/or third receiving submodule, for receiving the press event for physical button of user.
B15, the device as described in B11, it is special that the default authentication information includes preset fingerprint feature, default iris
Sign, preset data label and default physical button.
B16, the device as described in B11 or B13 or B15, the correction verification module include：
First acquisition submodule, for obtaining the preset fingerprint feature and/or the default iris feature；
First verification submodule, it is whether consistent for verifying the fingerprint characteristic and the preset fingerprint feature；
And/or second verification submodule, it is whether consistent for verifying the iris feature and the default iris feature.
B17, the device as described in B11 or B14 or B15, the correction verification module further include：
Second acquisition submodule, for obtaining the preset data label and/or the default physical button；
Whether third verifies submodule, consistent for verifying the data label and the preset data label；
And/or the 4th verification submodule, the button for verifying in the press event whether meet default entity by
Key.
B18, the device as described in B16, the mobile terminal include certain chip, the preset fingerprint feature and/or institute
It states default iris feature and is stored in the certain chip, first acquisition submodule includes:
First acquisition unit, for reading the preset fingerprint feature and/or the default iris from the certain chip
Feature.
B19, the device as described in B17, the mobile terminal are connect with external connection module, and the external connection module is provided with described
Preset data label, second acquisition submodule include:
Second acquisition unit, for obtaining the preset data label from the external connection module.
B20, the device as described in B11, the application-specific show application icon, described device in sandbox system
It further includes：
System enters module, for when the authentication information is consistent with default authentication information, then into institute
State sandbox system；
Event receiving module, for receiving the click event that user is directed to the application icon；
First starting module starts the application-specific for responding the click event.
C21, a kind of mobile terminal, including processor and memory,
The memory supports R-T unit to perform the program of the method for the data protection described in A1-A10 for storage；
The processor is configurable for performing the program stored in the memory.
Claims (10)
- A kind of 1. method of data protection, which is characterized in that applied to mobile terminal, sandbox system is provided in the mobile terminal System, one or more application-specifics are installed and are operated in the sandbox system, and the application-specific is mobile whole Desktop icons are not presented in the interface at end, the method includes：Receive the authentication information that user submits；It is whether consistent with default authentication information to verify the authentication information；When the authentication information is consistent with default authentication information, then into the sandbox system, start with it is described The application-specific of authentication information adaptation.
- 2. the method as described in claim 1, which is characterized in that the mobile terminal includes certain chip, the certain chip Data interaction is carried out via independent read/write channel with the sandbox system, the application-specific is mounted on the sandbox system Affiliated isolated storage area.
- 3. the method as described in claim 1, which is characterized in that described the step of receiving the authentication information that user submits wraps It includes：Receive fingerprint characteristic and/or iris feature that user submits.
- 4. the method as described in claim 1, which is characterized in that described the step of receiving the authentication information that user submits wraps It includes：Receive data label input by user；And/or receive the press event for physical button of user.
- 5. the method as described in claim 1, which is characterized in that the default authentication information include preset fingerprint feature, Default iris feature, preset data label and default physical button.
- 6. the method as described in claim 1 or 3 or 5, which is characterized in that the verification authentication information and default body The whether consistent step of part verification information includes：Obtain the preset fingerprint feature and/or the default iris feature；It verifies the fingerprint characteristic and whether the preset fingerprint feature is consistent；And/or verify the iris feature and whether the default iris feature is consistent.
- 7. the method as described in claim 1 or 4 or 5, which is characterized in that the verification authentication information and default body The whether consistent step of part verification information further includes：Obtain the preset data label and/or the default physical button；It verifies the data label and whether the preset data label is consistent；And/or whether the button verified in the press event meets default physical button.
- 8. method as claimed in claim 6, which is characterized in that the mobile terminal includes certain chip, the preset fingerprint Feature and/or the default iris feature are stored in the certain chip, the preset fingerprint feature and/or described of obtaining The step of default iris feature, includes:The preset fingerprint feature and/or the default iris feature are read from the certain chip.
- 9. a kind of device of data protection, which is characterized in that applied to mobile terminal, sandbox system is provided in the mobile terminal System, one or more application-specifics are installed and are operated in the sandbox system, and the application-specific is mobile whole Desktop icons are not presented in the interface at end, and described device includes：Information receiving module, for receiving the authentication information of user's submission；Correction verification module, it is whether consistent with default authentication information for verifying the authentication information；First starting module, for when the authentication information is consistent with default authentication information, then into the sand Case system starts the application-specific being adapted to the authentication information.
- 10. a kind of mobile terminal, which is characterized in that including processor and memory,The memory supports R-T unit perform claim requirement 1 to the data protection described in claim 8 for storing The program of method；The processor is configurable for performing the program stored in the memory.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711474388.9A CN108229149B (en) | 2017-12-29 | 2017-12-29 | Data protection method and device |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201711474388.9A CN108229149B (en) | 2017-12-29 | 2017-12-29 | Data protection method and device |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108229149A true CN108229149A (en) | 2018-06-29 |
| CN108229149B CN108229149B (en) | 2020-11-06 |
Family
ID=62646846
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201711474388.9A Active CN108229149B (en) | 2017-12-29 | 2017-12-29 | Data protection method and device |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108229149B (en) |
Cited By (4)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN111466889A (en) * | 2020-04-13 | 2020-07-31 | 蔚奥斯科技(珠海)有限公司 | Body temperature monitoring system |
| CN111949334A (en) * | 2020-10-16 | 2020-11-17 | 腾讯科技（深圳）有限公司 | Sandbox environment-based virtual application starting control method, device and equipment |
| CN112020714A (en) * | 2018-07-20 | 2020-12-01 | 惠普发展公司，有限责任合伙企业 | Authentication profiles for users |
| CN113297568A (en) * | 2021-06-04 | 2021-08-24 | 国网汇通金财（北京）信息科技有限公司 | Sandbox-based data processing method and system |
Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20100223579A1 (en) * | 2009-03-02 | 2010-09-02 | Schwartz Gerry M | Iphone application disguiser |
| CN102509055A (en) * | 2011-11-24 | 2012-06-20 | 宇龙计算机通信科技(深圳)有限公司 | Mobile terminal and method for hiding programs of mobile terminal |
| CN103634482A (en) * | 2013-12-26 | 2014-03-12 | 厦门福龙天下网络技术有限公司 | Safety protecting method for application software of portable intelligent equipment |
| CN104732157A (en) * | 2015-03-31 | 2015-06-24 | 酷派软件技术（深圳）有限公司 | Method and device for hiding and opening applications |
| CN106295387A (en) * | 2015-06-05 | 2017-01-04 | 北京壹人壹本信息科技有限公司 | A kind of safety protecting method and device |
| CN106446632A (en) * | 2016-09-22 | 2017-02-22 | 北京奇虎科技有限公司 | Hide display starting device and hide display starting method for application programs |
| CN106778297A (en) * | 2016-11-30 | 2017-05-31 | 广东欧珀移动通信有限公司 | Application program operating method, device and mobile terminal |
| CN106855923A (en) * | 2015-12-09 | 2017-06-16 | 神州医者（北京）科技有限公司 | A kind of electronic installation based on biological identification technology |
| CN106874731A (en) * | 2017-04-14 | 2017-06-20 | 深信服科技股份有限公司 | A kind of application layer multi-user method and device based on terminal |
-
2017
- 2017-12-29 CN CN201711474388.9A patent/CN108229149B/en active Active
Patent Citations (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US20100223579A1 (en) * | 2009-03-02 | 2010-09-02 | Schwartz Gerry M | Iphone application disguiser |
| CN102509055A (en) * | 2011-11-24 | 2012-06-20 | 宇龙计算机通信科技(深圳)有限公司 | Mobile terminal and method for hiding programs of mobile terminal |
| CN103634482A (en) * | 2013-12-26 | 2014-03-12 | 厦门福龙天下网络技术有限公司 | Safety protecting method for application software of portable intelligent equipment |
| CN104732157A (en) * | 2015-03-31 | 2015-06-24 | 酷派软件技术（深圳）有限公司 | Method and device for hiding and opening applications |
| CN106295387A (en) * | 2015-06-05 | 2017-01-04 | 北京壹人壹本信息科技有限公司 | A kind of safety protecting method and device |
| CN106855923A (en) * | 2015-12-09 | 2017-06-16 | 神州医者（北京）科技有限公司 | A kind of electronic installation based on biological identification technology |
| CN106446632A (en) * | 2016-09-22 | 2017-02-22 | 北京奇虎科技有限公司 | Hide display starting device and hide display starting method for application programs |
| CN106778297A (en) * | 2016-11-30 | 2017-05-31 | 广东欧珀移动通信有限公司 | Application program operating method, device and mobile terminal |
| CN106874731A (en) * | 2017-04-14 | 2017-06-20 | 深信服科技股份有限公司 | A kind of application layer multi-user method and device based on terminal |
Cited By (5)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN112020714A (en) * | 2018-07-20 | 2020-12-01 | 惠普发展公司，有限责任合伙企业 | Authentication profiles for users |
| CN111466889A (en) * | 2020-04-13 | 2020-07-31 | 蔚奥斯科技(珠海)有限公司 | Body temperature monitoring system |
| CN111949334A (en) * | 2020-10-16 | 2020-11-17 | 腾讯科技（深圳）有限公司 | Sandbox environment-based virtual application starting control method, device and equipment |
| CN113297568A (en) * | 2021-06-04 | 2021-08-24 | 国网汇通金财（北京）信息科技有限公司 | Sandbox-based data processing method and system |
| CN113297568B (en) * | 2021-06-04 | 2024-04-30 | 国网汇通金财（北京）信息科技有限公司 | Data processing method and system based on sandboxes |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108229149B (en) | 2020-11-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10484526B2 (en) | Method for providing contents corresponding to accessory devices and electronic device thereof | |
| US9703971B2 (en) | Sensitive operation verification method, terminal device, server, and verification system | |
| KR102598613B1 (en) | System and method for providing vehicle information based on personal certification and vehicle certification | |
| KR102577054B1 (en) | Electronic device providing electronic payment function and operating method thereof | |
| CN104572325B (en) | A kind of progressive response sheet disposal method and terminal | |
| KR102216653B1 (en) | Apparatas and method for conducting a communication of the fingerprint verification in an electronic device | |
| US20170103382A1 (en) | Method of providing payment service and electronic device for implementing same | |
| WO2017211205A1 (en) | Method and device for updating whitelist | |
| KR20150098097A (en) | Apparatus and Method for processing biometric information in a electronic device | |
| KR20150098002A (en) | Authentication method and apparatus based on biometric information in a electronic device | |
| KR20170035294A (en) | Electronic device and payment method of providing security thereof | |
| CN106357599A (en) | Electronic device, certification agency server, and payment system | |
| CN108475304B (en) | Method and device for associating application program and biological characteristics and mobile terminal | |
| CN104901805B (en) | A kind of identification authentication methods, devices and systems | |
| CN108229149A (en) | A kind of method and apparatus of data protection | |
| CN107346397A (en) | Information processing method and related product | |
| CN109816375A (en) | Method and device for paying public payment fee and subway fee by scanning code | |
| CN110941821A (en) | Data processing method, device and storage medium | |
| CN107133794A (en) | IFAA fingerprints payment mechanism, system, method and mobile terminal | |
| CN109873794A (en) | A kind of means of defence and server of Denial of Service attack | |
| CN108319873A (en) | Flexible screen terminal security authentication control method, terminal and computer storage media | |
| CN107153792A (en) | A kind of data safety processing method, device and mobile terminal | |
| CN107133507A (en) | A kind of privacy services system access method, device and mobile terminal | |
| CN104899488B (en) | Numeric value transfer and device | |
| CN107480996A (en) | A kind of method of payment and terminal |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |