Sensitive information protection method based on virtualization technology

Abstract

The invention relates to a sensitive information protection method based on a virtualization technology. The sensitive information protection method is technically characterized by comprising the following steps: erecting virtualization management software between an original software layer and an original hardware layer of smart handheld equipment; when the original software attempts to acquire sensitive information of hardware, intercepting the access to the hardware by the virtualization management software, judging whether an authorized user accesses to the hardware or not by the virtualization management software; if the current access is a reasonable request of the authorized user, providing the sensitive information to the original software; and if the current access is not a request of the authorized user, embedding certain noise information in the sensitive information and providing the noise information to the original software. The sensitive information protection method breaks through the authority management of an original operation system, uses software, which is at a lower level than the operation system, for information management, thereby avoiding an information protection failure caused by insufficient permissions, effectively recognizing and controlling the access to the sensitive information by the operation system or system software; therefore, the sensitive information protection method can be widely used in various smart handheld equipment.

Description

technical field [0001] The invention belongs to the field of information technology, in particular to a sensitive information protection method based on virtualization technology. Background technique [0002] With the development of mobile Internet technology, various smart handheld devices such as smartphones and tablet computers are becoming more and more popular and are widely used in people's daily life with various applications, providing convenience for our life. The rich sensors on smart handheld devices, such as camera, voice, location, direction, etc., can provide software with a way to obtain the user's surrounding environment, so as to provide users with the most direct and effective services. However, for various purposes, various application programs and system software are trying to collect such information of users, which seriously interferes with the normal protection of user privacy information. Users' private information cannot be effectively protected, c...

AI Technical Summary

Problems solved by technology

[0004] (1) Some applications will refuse to provide services or provide incomplete services when the required information cannot be obtained;

[0005] (2) When the program trying to obtain the user's sensitive information also obtains the super user privilege, the privilege management cannot be realized;

[0006] (3) Some equipment manufacturers also try to record sensitive information of users in the design of the operating system and underlying firmware, and the operation of these information extraction cannot be sensed by the monitoring program

Images