Mobile terminal and its system resource security control method

Abstract

The present invention provides a mobile terminal system resource safety control method and apparatus. The method comprises the steps of obtaining the highest authority of a system and operating agency service for providing an independent operation space with resource interfaces of the system; transmitting a plurality of corresponding marking information configured by the agency service and corresponding to different resource interfaces to a host process constructing the independent operation space by the agency service; and in response to a resource request of the host process, after the agency service identifies that the marking information attached to the resource request accords with the specification, opening the source interface corresponding to the marking information to the host process for calling. According to the method and apparatus, the system source interfaces are controlled by the agency service, the agency service is interacted with the host process to provide corresponding resource interfaces to the application, and safety of implementing effective control on the source interfaces is largely enhanced.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular, the present invention relates to a mobile terminal and a system resource security control method thereof. Background technique [0002] The Android system has been widely used in various mobile terminals. Its Linux gene makes its security initially guaranteed, but it also brings inconvenience. In particular, the permission management function of Android, under the influence of commercial factors, creates a pair of potential contradictions between the control of permissions by mobile terminal manufacturers and the desire of users for permissions. On the one hand, manufacturers hope to tighten authority control to ensure their control over the system; on the other hand, users also hope to obtain greater system authority through authority escalation operations so that they can use various functions of mobile terminals more flexibly. In most cases, this potential ...

AI Technical Summary

Problems solved by technology

[0003] Based on the characteristics of Android's four-layer architecture, the industry has carried out various forms of secondary development of Android, but these improvements are mostly based on the needs of the Android application layer, using Android's inherent "loopholes" to preempt root permissions. It can be known that this The improvement of this security performance is limited

Moreover, due to the lack of enterprise-level security thinking, the result of this improvement is to open the permissions one-way, which usually leads to the same treatment of all applications, and ultimately leads to its security management mechanism is also useless

[0004] In addition, it is not enough to solve the needs of the enterprise level simply from the root authority

Generally, enterprise-level applications need to achieve more advanced control on this basis in addition to obtaining permissions to the operating system, in order to achieve more effective management of enterprise business information, especially in the realization of centralized and unified control. On the one hand, if there is no corresponding deployment mechanism, it is obviously impossible to realize the comprehensive control of the information security of multiple mobile terminals related to the entire enterprise

[0005] From the above overview, it can be seen that so far, there is still a lot of room for technological improvement in the industry to meet the relevant needs

Images