Resource access control method and terminal

Abstract

Embodiments of the invention provide a resource access control method and a terminal. The method comprises the steps of receiving a request of calling an access interface of a specified resource from a caller; calling a permission management interface to obtain a package name of the caller and sending the package name to a permission management service; transmitting the package name to a package management service by the permission management service, thereby enabling the package management service to return information related to the caller according to the package name; calling an intermediate layer interface of interaction between an operation system and a trusted execution environment by the permission management service, and sending the information related to the caller to a trusted application in the trusted execution environment; and reading preset white list information corresponding to the specified resource by the trusted application, performing identity verification on the caller, transmitting a verification result to a kernel driver for enabling the kernel driver to judge whether the caller is allowed to call the access interface or not according to the verification result, and executing corresponding response operation. According to the method and the terminal, the specified resource on the terminal can be effectively protected, so that the security of the terminal is improved.

Description

technical field [0001] The embodiments of the present invention relate to the field of electronic technology, and in particular, to a resource access control method and terminal. Background technique [0002] Some hardware or software resources on the mobile terminal are originally designed to be used only by specific applications, and do not allow third-party applications and other unauthorized applications to have access. If third-party applications or other unauthorized applications obtain When it comes to the access methods of these hardware or software resources, the security of mobile terminal information may involve risks. [0003] At present, in order to improve the security of mobile terminal information, the following methods are generally used to restrict unauthorized applications from accessing designated resources: [0004] One is to redefine the private interface, that is, to privatize the interface of the specified resource on the mobile terminal. Only the de...

AI Technical Summary

Problems solved by technology

[0004] One is to redefine the private interface, that is, to privatize the interface of the specified resource on the mobile terminal. Only the developer knows the access interface of the specified resource, and third-party applications and other unauthorized applications cannot obtain the private interface. It is also impossible to access the resources of the instruction. However, due to the complexity of the internal personnel of the development company, the security of the private interface information cannot be guaranteed. Once the private interface is leaked, the access security of the specified resources cannot be guaranteed.

[0005] The other is to do some security encryption protection before calling the access interface of the specified resource, for example: authenticate or unlock before calling the access interface of the specified resource. This method can protect the access interface of the specified resource to a certain extent However, in some abnormal cases, if a third-party application or other unauthorized application bypasses the authentication mechanism, it can also normally call the access interface of the specified resource, and there are certain security risks

[0006] In summary, the existing methods of restricting unauthorized applications from accessing designated resources are less secure and cannot effectively protect designated resources on mobile terminals.

Images