WO2016173118A1

WO2016173118A1 - Secure data access control method and system, and terminal

Info

Publication number: WO2016173118A1
Application number: PCT/CN2015/082980
Authority: WO
Inventors: 张学林
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2015-04-30
Filing date: 2015-06-30
Publication date: 2016-11-03
Also published as: CN105631344A; CN105631344B

Abstract

A secure data access control method, a secure data access control system, and a terminal, a plurality of operating systems being installed on the terminal, and the access control method comprising: according to a received data access request, judging the current access mode of a secure data storage area in a target operating system of the terminal (102); and according to a judgement result, determining whether access is permitted to the secure data stored in the secure data storage area, wherein the security level of the target operating system is higher than the security levels of other operating systems apart from the target operating system in the plurality of operating systems (104). The technical solution can be more adapted to the actual requirements of a user. Secure data of a secure operating system is effectively protected from being stolen, and the loss of privacy data is prevented, so that the privacy security of the user is further improved.

Description

Security data access control method and system, terminal

This application claims priority to Chinese Patent Application No. 201510219696.1, entitled "Access Control Method and System for Secure Data, Terminals", filed on April 30, 2015, the entire contents of which are incorporated by reference. In this application.

Technical field

The present invention relates to the field of terminal technologies, and in particular, to an access control method for secure data, an access control system for secure data, and a terminal.

Background technique

At present, the existing security system privacy data protection methods mainly have the following solutions:

Solution 1, backup protection. Through cloud data backup, if the security operating system has data loss or damage, you can quickly restore the private data in the secure operating system through cloud backup to protect the privacy data of the security operating system.

Option 2, data camouflage protection. When other non-secure operating systems access the private data in the secure operating system, the data in the secure operating system is displayed by masquerading, thereby protecting the privacy data of the secure operating system from being stolen.

Solution 3: Shield the security operating system hardware to achieve the protection of private data. An application for protection of dual-system data has been proposed, specifically to partially block some hardware in the secure operating system through cloud instructions, so that users cannot steal private data in the secure operating system; in addition, by modifying the command parameters, The hardware of the secure operating system is effective to protect the data security of the secure operating system in the dual system.

The defects of the prior art solutions are described as follows:

Solution 1. Although the backup protection scheme can prevent data loss and destruction through data backup, there is still the danger of leakage of private data. There are many cases of cloud data leakage, such as the leakage of Xiaomi account, CSDN (Chinese Software Develop Net, China) Software Development Alliance) account leaks, etc. In the event of a private data breach, there will be a significant security risk.

Solution 2: Data masquerading protection, this solution is to prevent non-secure operating system access and steal the installation system privacy data. However, the loss of private data cannot be completely protected. For example, if the mobile phone is lost or stolen, if the other person can enter the secure operating system, the privacy data in the secure operating system still has the risk of leaking.

Solution 3: Hardware shielding protection, this scheme can effectively protect the privacy data from being stolen, but in the case of a fault in the security operating system, it is impossible to enter the security operating system, and there may be a situation in which the security operating system privacy data cannot be obtained, if the security operation is urgently needed Important privacy data in the system will be very troublesome.

Therefore, how to further improve the security of the privacy data of the security operating system has become a technical problem to be solved urgently.

Summary of the invention

The invention is based on the above problems, and proposes a new technical solution, which can be more adapted to the actual needs of users, effectively protects the security data of the security system from being stolen, and prevents the loss of private data, thereby further improving the user. Privacy security.

In view of this, an aspect of the present invention provides a method for controlling access to secure data, which is used in a terminal, and a plurality of operating systems are installed on the terminal, and the access control method includes: according to the received data access request, Determining a current access mode of the secure data storage area in the target operating system of the terminal; determining, according to the determination result, whether to allow access to the security data stored in the secure data storage area, wherein the security level of the target operating system A security level higher than other operating systems of the plurality of operating systems except the target operating system.

In this technical solution, an access mode may be set for a secure data storage area of a target operating system (ie, a secure operating system), wherein different access modes may correspond to different access rights, for example, may be secure data storage for a secure operating system. The zone is set to access the security identifier lock, and then the access protection of the secure data storage area is controlled in different scenarios by the security identifier lock, wherein different lock states of the security identifier lock correspond to different access modes of the secure data storage area. This method can completely prevent data leakage caused by data backup. At the same time, if the mobile phone is stolen, the remote access command can also trigger the change of access mode to prevent others from entering the secure operating system to obtain private data. In addition, if the security operation is performed, If the system fails, the access mode can be triggered according to a preset trigger mechanism. Therefore, when the secure data storage area receives the data access request, the terminal can determine whether to run the access according to the current access mode, thereby being more suitable for the actual needs of the user, and effectively protecting the security data of the secure operating system of the terminal. Not being stolen, preventing the loss of private data, thereby further enhancing the user's hidden Private security.

In the above technical solution, preferably, when it is determined that the current access mode of the secure data storage area is a secure access mode, determining whether the data access request is from the target operating system, and determining that the current access mode is The secure access mode allows access to the secure data, otherwise access to the secure data is prohibited.

In the technical solution, a secure access mode can be set for the secure data storage area. In the secure access mode, only the target operating system can normally access the data of the secure data storage area, and other systems in the terminal are prohibited from accessing the data of the secure data storage area. Therefore, the security data of the secure operating system of the terminal is effectively protected from being stolen, thereby further improving the privacy of the user.

In the above technical solution, preferably, when it is determined that the current access mode of the secure data storage area is a shared access mode, accessing the security data is allowed; or when determining that the current access mode of the secure data storage area is a masked access In the mode, access to the security data is prohibited.

In this technical solution, a shared access mode and a masked access mode can also be set for the secure data storage area. In the shared access mode, each system can normally access the data of the secure data storage area, and in the shielded access mode, all are prohibited. The system normally accesses the data of the secure data storage area, thereby effectively protecting the security data of the secure operating system of the terminal from being stolen, thereby further improving the privacy of the user.

In the above technical solution, preferably, when access to the security data is prohibited, determining whether to reset an access mode of the secure data storage area in the target operating system; and determining to reset the security data In the access mode of the storage area, the access mode of the secure data storage area in the target operating system is reset according to the received reset command.

In the technical solution, when the request for accessing the security data is prohibited, the user may be prompted to reset the access mode, and the access mode may be reset according to the user's setting, thereby making the setting and transition of the access mode more flexible and improved. The user experience.

In the above technical solution, preferably, before determining the current access mode of the secure data storage area according to the received data access request, the method further includes: presetting the current access of the secure data storage area mode.

In the technical solution, the access mode may be preset according to actual needs or user instructions, wherein the setting of the access mode cannot be simply changed through the settings in the mobile phone, but needs to pass the special There are instructions to change. Specifically, the instruction to change the access mode may be in the following form:

Command:=op state state

Op:=change|other

State:=safe|share|unsafe

Among them, in op state state, op is a change operation, the previous state represents the original access mode, the latter state represents the new access mode, op and state can be represented by 2, 3 bit (byte) binary respectively, such as 000 means unsafe, unsafe Represents the masked access mode. At present, there are not many ops and states. If there is an extension later, you can increase the number of binary bits to achieve.

Another aspect of the present invention provides a security data access control system for a terminal, the terminal having a plurality of operating systems installed thereon, the access control system comprising: a determining module, configured to access according to the received data a request, determining a current access mode of the secure data storage area in the target operating system of the terminal; and a control module, configured to determine, according to the determination result, whether to allow access to the security data stored in the secure data storage area, where The security level of the target operating system is higher than the security level of the other operating systems except the target operating system.

In this technical solution, an access mode may be set for a secure data storage area of a target operating system (ie, a secure operating system), wherein different access modes may correspond to different access rights, for example, may be secure data storage for a secure operating system. The zone is set to access the security identifier lock, and then the access protection of the secure data storage area is controlled in different scenarios by the security identifier lock, wherein different lock states of the security identifier lock correspond to different access modes of the secure data storage area. This method can completely prevent data leakage caused by data backup. At the same time, if the mobile phone is stolen, the remote access command can also trigger the change of access mode to prevent others from entering the secure operating system to obtain private data. In addition, if the security operation is performed, If the system fails, the access mode can be triggered according to a preset trigger mechanism. Therefore, when the secure data storage area receives the data access request, the terminal can determine whether to run the access according to the current access mode, thereby being more suitable for the actual needs of the user, and effectively protecting the security data of the secure operating system of the terminal. Not being stolen, preventing the loss of private data, thereby further enhancing the privacy of users.

In the above technical solution, preferably, the determining module is further configured to: when determining the security When the current access mode of the data storage area is the secure access mode, determining whether the data access request is from the target operating system; and the control module is specifically configured to: when determining that the current access mode is the secure access mode Allowing access to the security data, otherwise accessing the security data is prohibited.

In the above technical solution, preferably, the control module is further configured to: when determining that the current access mode of the secure data storage area is a shared access mode, allowing access to the security data; or when determining the security data When the current access mode of the storage area is the masked access mode, access to the security data is prohibited.

In the above technical solution, preferably, the determining module is further configured to: determine, when the access to the security data is prohibited, whether to reset an access mode of the secure data storage area in the target operating system; The method includes: a reset module, configured to reset an access of the secure data storage area in the target operating system according to the received reset command when determining to reset an access mode of the secure data storage area mode.

In the above technical solution, preferably, the method further includes: a setting module, configured to preset the secure data storage area before determining the current access mode of the secure data storage area according to the received data access request The current access mode.

In this technical solution, the access mode may be preset according to actual needs or user instructions, where The settings of the access mode cannot be changed simply by the settings in the phone, but need to be converted by proprietary instructions. Specifically, the instruction to change the access mode may be in the following form:

Command:=op state state

Op:=change|other

State:=safe|share|unsafe

A further aspect of the present invention provides a terminal having a plurality of operating systems installed thereon, the terminal including a processor and a memory, wherein the memory stores a set of program codes, and the processor is used by the processor Calling the program code stored in the memory to perform the following operations:

Determining, according to the received data access request, a current access mode of the secure data storage area in the target operating system of the terminal;

Determining, according to the judgment result, whether to access the security data stored in the secure data storage area, wherein the security level of the target operating system is higher than other operations of the plurality of operating systems except the target operating system The security level of the system.

In the technical solution, optionally, the processor executes:

When it is determined that the current access mode of the secure data storage area is a secure access mode, determining whether the data access request is from the target operating system, and allowing access when determining that the current access mode is the secure access mode The security data is otherwise disabled from accessing the security data.

In the technical solution, optionally, the processor executes:

Allowing access to the secure data when it is determined that the current access mode of the secure data storage area is a shared access mode; or

When it is determined that the current access mode of the secure data storage area is the masked access mode, access to the secure data is prohibited.

In the technical solution, optionally, the processor executes:

Determining whether to reset an access mode of the secure data storage area in the target operating system when accessing the security data is prohibited;

When it is determined that the access mode of the secure data storage area is reset, the access mode of the secure data storage area in the target operating system is reset according to the received reset command.

In the technical solution, optionally, the processor further performs: before determining the current access mode of the secure data storage area according to the received data access request:

Presetting the current access mode of the secure data storage area.

Through the above technical solutions, the user's actual needs can be more adapted, the security data of the security operating system is effectively protected from being stolen, and the loss of private data is prevented, thereby further improving the privacy of the user.

DRAWINGS

1 is a flow chart showing an access control method of secure data according to an embodiment of the present invention;

2 is a block diagram showing the structure of an access control system for secure data according to an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a terminal according to an embodiment of the present invention; FIG.

4 is a diagram showing an access mode transition of a secure data storage area in accordance with one embodiment of the present invention;

FIG. 5 is a flow chart showing an access control method of secure data according to another embodiment of the present invention; FIG.

FIG. 6 shows a schematic structural diagram of a terminal according to another embodiment of the present invention.

detailed description

The above described objects, features and advantages of the present invention will become more apparent from the detailed description of the appended claims. It should be noted that the embodiments in the present application and the features in the embodiments may be combined with each other without conflict.

In the following description, numerous specific details are set forth in order to provide a full understanding of the invention, but the invention may be practiced otherwise than as described herein. Limitations of the embodiments.

FIG. 1 shows a flow of an access control method for secure data according to an embodiment of the present invention. schematic diagram.

As shown in FIG. 1 , an access control method for secure data according to an embodiment of the present invention is used for a terminal, where multiple operating systems are installed on the terminal, including:

Step 102: Determine, according to the received data access request, a current access mode of the secure data storage area in the target operating system of the terminal.

Step 104: Determine, according to the determination result, whether to access the security data stored in the secure data storage area, wherein the security level of the target operating system is higher than the security level of other operating systems except the target operating system among the plurality of operating systems.

In the above technical solution, preferably, when it is determined that the current access mode of the secure data storage area is the secure access mode, determining whether the data access request is from the target operating system, and allowing access security when determining that the current access mode is the secure access mode Data, otherwise access to secure data is prohibited.

In the above technical solution, preferably, when it is determined that the current access mode of the secure data storage area is the shared access mode, access to the secure data is permitted; or when it is determined that the current access mode of the secure data storage area is the blocked access mode, the access security is prohibited. data.

In the above technical solution, preferably, when access to the security data is prohibited, determining whether to reset the access mode of the secure data storage area in the target operating system; and when determining to reset the access mode of the secure data storage area, according to The received reset command resets the access mode of the secure data storage area in the target operating system.

In the above technical solution, preferably, before step 102, the method further includes: preset a current access mode of the secure data storage area.

In this technical solution, the access mode can be preset according to actual needs or user instructions, wherein the setting of the access mode cannot be simply changed by the setting in the mobile phone, but needs to be converted by a proprietary instruction. Specifically, the instruction to change the access mode may be in the following form:

Command:=op state state

Op:=change|other

State:=safe|share|unsafe

2 is a block diagram showing the structure of an access control system for secure data according to an embodiment of the present invention.

As shown in FIG. 2, the access control system 200 for secure data according to an embodiment of the present invention is used for a terminal, and a plurality of operating systems are installed on the terminal, and the method includes: a determining module 202, configured to access the data according to the received data. Determining a current access mode of the secure data storage area in the target operating system of the terminal; the control module 204, configured to determine, according to the determination result, whether to allow access to the stored secure data The security data in the storage area, wherein the security level of the target operating system is higher than the security level of other operating systems except the target operating system among the multiple operating systems.

In the above technical solution, the determining module 202 is further configured to: determine that the data access request is from the target operating system when determining that the current access mode of the secure data storage area is the secure access mode; and the control module 204 is specifically configured to: When it is determined that the current access mode is the secure access mode, access to secure data is allowed, otherwise access to secure data is prohibited.

In the above technical solution, preferably, the control module 204 is further configured to: when determining that the current access mode of the secure data storage area is the shared access mode, permit access to the secure data; or when determining that the current access mode of the secure data storage area is Access to secure data is prohibited when the access mode is blocked.

In the foregoing technical solution, the determining module 202 is further configured to: determine, when the access to the security data is prohibited, whether to reset the access mode of the secure data storage area in the target operating system; and further include: a reset module 206, And when determining to reset the access mode of the secure data storage area, resetting the access mode of the secure data storage area in the target operating system according to the received reset instruction.

In the above technical solution, preferably, the setting module 208 is configured to preset a current access mode of the secure data storage area before determining the current access mode of the secure data storage area according to the received data access request.

Command:=op state state

Op:=change|other

State:=safe|share|unsafe

FIG. 3 shows a schematic structural diagram of a terminal according to an embodiment of the present invention.

As shown in FIG. 3, a terminal 300 according to an embodiment of the present invention includes an access control system 200 for security data. Therefore, the terminal 300 has the same access control system 200 as the security data according to any one of the above technical solutions. The technical effects will not be described here.

4 is a diagram showing an access mode transition of a secure data storage area in accordance with one embodiment of the present invention.

As shown in FIG. 4, an access security identifier lock can be set for the secure data storage area of the security system (target operating system), and then access protection for the secure data storage area is controlled in different scenarios by the security identifier lock, wherein the security identifier lock The different lock states correspond to different access modes of the secure data store. The security identification lock can have three lock states: Safe, Unsafe, and Share. Among them, when in the Safe lock state, only the security system can normally access the data in the data storage area. When the Unsafe lock state is in use, neither the security system nor the non-secure system can access the data in the data storage area, but in the Share lock state. Both the security system and the non-secure system can access the data in the data store.

By setting different trigger events, you can also control the transition between security lock states. In this way, data leakage caused by data backup can be completely prevented. At the same time, if the mobile phone is stolen, the remote security command can also be triggered to trigger the change of the security lock state to Unsafe, preventing others from entering the security system to obtain private data. The system fails, and the security lock status is triggered to change to Share according to the preset trigger mechanism. Moreover, the user cannot simply change the security lock state through the settings in the mobile phone, but needs to change the security lock state through a proprietary instruction. Specifically, the instruction to change the access mode may be in the following form:

Command:=op state state

Op:=change|other

State:=safe|share|unsafe

Through this technical solution, the user's actual needs can be more adapted, the security data of the security operating system is effectively protected from being stolen, and the loss of private data is prevented, thereby further improving the privacy of the user.

FIG. 5 is a flow chart showing an access control method of secure data according to another embodiment of the present invention.

As shown in FIG. 5, an access control method for security data according to another embodiment of the present invention includes:

Step 502: Set an access lock state of the data storage area of the security system (target operating system) (that is, a current access mode of the preset secure data storage area);

Step 504: Determine the current access lock status (current access mode) of the security system data storage area according to the received access request for the security system data. If it is the Safe status (secure access mode), go to step 506, if it is Share Status (shared access mode), then step 508 is performed, if Unsafe state (mask access mode), then step 510;

Step 506, it is determined whether the current system is a security system (ie, it is determined whether the system that issued the access request is a security system), if it is a security system, step 508 is performed, otherwise step 510 is performed;

Step 508, normal access to the security system data;

Step 510: When the security system data cannot be accessed, determine whether to reset the access lock state of the security system data storage area, and if yes, execute step 512; otherwise, end the process;

Step 512: Send an instruction to set an access lock state of the security system data storage area. After the setting is completed, return to step 504 to continue to determine the current access lock status of the security system data storage area.

6 is a block diagram showing the structure of a terminal according to another embodiment of the present invention. As shown in FIG. 6, the terminal 6 may include: at least one processor 61, such as a CPU, at least one communication bus 62, and a memory 63; The bus 62 is used to implement connection communication between these components; the memory 63 may be a high speed RAM memory or a non-volatile memory such as at least one disk memory. A set of program codes is stored in the memory 63, and the processor 61 is configured to call the program code stored in the memory 63 for performing the following operations:

Optionally, the processor 61 performs:

When access to the security data is prohibited, determining whether to reset the location in the target operating system The access mode of the secure data storage area;

Optionally, the processor 61 further performs: before determining the current access mode of the secure data storage area according to the received data access request:

Presetting the current access mode of the secure data storage area.

The technical solutions of the present invention are described in detail above with reference to the accompanying drawings. The above technical solutions can be more adapted to the actual needs of users, effectively protect the security data of the security operating system from being stolen, and prevent the loss of private data, thereby further improving. The privacy of the user is safe.

The above description is only the preferred embodiment of the present invention, and is not intended to limit the present invention, and various modifications and changes can be made to the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and scope of the present invention are intended to be included within the scope of the present invention.

Claims

An access control method for a secure data is used in a terminal, wherein a plurality of operating systems are installed on the terminal, and the access control method of the target operating system includes:

Determining, according to the received data access request, a current access mode of the secure data storage area in the target operating system of the terminal;

Determining, according to the judgment result, whether to access the security data stored in the secure data storage area, wherein the security level of the target operating system is higher than other operations of the plurality of operating systems except the target operating system The security level of the system.
The access control method for secure data according to claim 1, wherein

When it is determined that the current access mode of the secure data storage area is a secure access mode, determining whether the data access request is from the target operating system, and allowing access when determining that the current access mode is the secure access mode The security data is otherwise disabled from accessing the security data.
The access control method for secure data according to claim 1, wherein

Allowing access to the secure data when it is determined that the current access mode of the secure data storage area is a shared access mode; or

When it is determined that the current access mode of the secure data storage area is the masked access mode, access to the secure data is prohibited.
The access control method for secure data according to claim 2 or 3, wherein when access to the secure data is prohibited, determining whether to reset an access mode of the secure data storage area in the target operating system ;as well as

When it is determined that the access mode of the secure data storage area is reset, the access mode of the secure data storage area in the target operating system is reset according to the received reset command.
The access control method for secure data according to any one of claims 1 to 3, characterized in that, before determining the current access mode of the secure data storage area, based on the received data access request, include:

Presetting the current access mode of the secure data storage area.
An access control system for security data is provided for a terminal, wherein a plurality of operating systems are installed on the terminal, and the access control system includes:

a determining module, configured to determine a target operating system of the terminal according to the received data access request The current access mode of the secure data storage area in the system;

a control module, configured to determine, according to the determination result, whether to allow access to the security data stored in the secure data storage area, wherein a security level of the target operating system is higher than the target operation in the multiple operating systems The security level of other operating systems outside the system.
The security data access control system according to claim 6, wherein the determining module is further configured to: determine the data access request when determining that the current access mode of the secure data storage area is a secure access mode Whether it comes from the target operating system;

The control module is specifically configured to: when determining that the current access mode is the secure access mode, permit access to the security data, otherwise prohibit accessing the security data.
The security data access control system according to claim 6, wherein the control module is further configured to:

Allowing access to the secure data when it is determined that the current access mode of the secure data storage area is a shared access mode; or

When it is determined that the current access mode of the secure data storage area is the masked access mode, access to the secure data is prohibited.
The security data access control system according to claim 7 or 8, wherein the determining module is further configured to: when the access to the security data is prohibited, determine whether to reset the location in the target operating system The access mode of the secure data storage area; and also includes:

And a reset module, configured to reset an access mode of the secure data storage area in the target operating system according to the received reset command when determining to reset the access mode of the secure data storage area.
The access control system for secure data according to any one of claims 6 to 8, further comprising:

And a setting module, configured to preset the current access mode of the secure data storage area before determining the current access mode of the secure data storage area according to the received data access request.
A terminal, wherein a plurality of operating systems are installed on the terminal, the terminal includes a processor and a memory, wherein the memory stores a set of program codes, and the processor is configured to invoke the memory The program code stored in it to do the following:

Determining, according to the received data access request, a current access mode of the secure data storage area in the target operating system of the terminal;

Determining, according to the judgment result, whether to access the security data stored in the secure data storage area, wherein the security level of the target operating system is higher than other operations of the plurality of operating systems except the target operating system The security level of the system.
The terminal of claim 11 wherein said processor executes:

When it is determined that the current access mode of the secure data storage area is a secure access mode, determining whether the data access request is from the target operating system, and allowing access when determining that the current access mode is the secure access mode The security data is otherwise disabled from accessing the security data.
The terminal of claim 11 wherein said processor executes:

Allowing access to the secure data when it is determined that the current access mode of the secure data storage area is a shared access mode; or

When it is determined that the current access mode of the secure data storage area is the masked access mode, access to the secure data is prohibited.
The terminal according to claim 12 or 13, wherein the processor executes:

Determining whether to reset an access mode of the secure data storage area in the target operating system when accessing the security data is prohibited;

When it is determined that the access mode of the secure data storage area is reset, the access mode of the secure data storage area in the target operating system is reset according to the received reset command.
The terminal according to any one of claims 11 to 13, wherein the processor further performs before determining the current access mode of the secure data storage area according to the received data access request. :

Presetting the current access mode of the secure data storage area.