Device security protection method and system

The device security protection method uses mobile devices to generate time-based keys and monitor user interaction and distance to prevent unauthorized access and information leaks, addressing the limitations of traditional security methods.

CN115174077BActive Publication Date: 2024-12-27EAST MONEY INFORMATION CO LTD
View PDF 0 Cites 0 Cited by

Patent Information

Application Number
CN202210905659.6
Authority / Receiving Office
CN · China
Patent Type
Patents(China)
Current Assignee / Owner
Filing Date
2022-07-29
Publication Date
2024-12-27
Estimated Expiration
2042-07-29

AI Technical Summary

Technical Problem

Traditional security methods, such as password access and antivirus software, fail to prevent information leaks and security breaches due to user negligence, such as forgetting to lock devices or unplugging security devices.

Method used

A device security protection method involving a mobile security device that initiates a wired connection with the device to be protected, generates and compares time-based one-time keys, and adjusts lock states based on user verification, device monitoring, and distance thresholds to ensure secure operation.

Benefits of technology

Prevents unauthorized access and information leakage by dynamically adjusting lock states, using mobile devices for secure key generation and monitoring, enhancing security without the need for additional hardware.

✦ Generated by Eureka AI based on patent content.

Smart Images

  • Figure CN115174077B_ABST
    Figure CN115174077B_ABST
Patent Text Reader

Abstract

The present invention provides a device security protection method and system. When the protected device and the mobile security device are initialized for the first time, a wired physical link to the mobile device is required, so that the key parameters of the mobile security device are obtained from the protected device based on the wired connection, thereby realizing safe and reliable key parameter initialization. The protected device and the mobile security device each independently calculate the first key and the second key, respectively, avoiding the problem of simple passwords and not changing passwords for a long time, and realizing safe and reliable response of the protected device. The present invention can realize functions such as device lock, software hardware lock, watchdog, etc., and can timely adjust the lock state or unlock state of the protected device to prevent the device from being unlocked due to user negligence, and effectively prevent software theft, illegal control, information leakage and other problems.
Need to check novelty before this filing date? Find Prior Art

Description

Technical Field

[0001] The present invention relates to the field of computers, and in particular to a device security protection method and system. Background Art

[0002] With the popularization of personal PCs, smart terminals, smart machines, and the emergence of e-wallets, e-banking, and smart contracts, the security of personal information, equipment, and industrial equipment has become increasingly prominent. Traditional security uses password access, antivirus software, and software and hardware watchdogs to solve some security issues, but it cannot protect users from carelessly forgetting to lock, turn off, or unplug security devices, resulting in information leaks, security accidents, and economic losses. Summary of the invention

[0003] An object of the present invention is to provide a device security protection method and system.

[0004] According to one aspect of the present invention, a device security protection method is provided, the method comprising:

[0005] The device to be protected verifies the user information. If the user information is verified, a key parameter of the user is generated, and a first key valid within a preset time is generated based on the key parameter;

[0006] The mobile security device detects the device information of the mobile security device itself, and if the device information detection of the mobile security device itself passes, establishes a wired connection with the device to be protected, obtains the key parameter from the device to be protected based on the wired connection, and generates a second key valid within the preset time based on the key parameter;

[0007] The device to be protected obtains the second key from the mobile security device based on the wired connection, and compares the first key with the second key. If the comparison is consistent, the device to be protected and the mobile security device are paired successfully, the wired connection is disconnected, and the device to be protected and the mobile security device establish a wireless connection;

[0008] The protected device obtains an operation request from the user, and determines whether it is in a locked state. If it is in a locked state, it does not respond to the user's operation request; if it is in an unlocked state, it regenerates a first key valid within a preset time based on the key parameters, and obtains a second key valid within a preset time regenerated based on the key parameters from the mobile security device through the wireless connection, compares the regenerated first key and the second key, and if the comparison is consistent, the protected device responds to the user's operation request.

[0009] Furthermore, in the above method, the device to be protected determines whether it is in a locked state, including:

[0010] If the mobile security device detects that the device to be protected is being monitored, the device to be protected has a network proxy setting, or the communication between the device to be protected and the mobile security device is interrupted, the mobile security device sends a locking instruction to the device to be protected, and the device to be protected adjusts itself to a locked state based on the received locking instruction.

[0011] Furthermore, in the above method, the device to be protected determines whether it is in a locked state, including:

[0012] The device to be protected monitors whether the mobile security device is in an inactive state through the wireless connection. If the mobile security device is in an inactive state, the device to be protected determines that it is in a locked state.

[0013] Furthermore, in the above method, the device to be protected determines whether it is in a locked state, including:

[0014] The device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold. If so, the device to be protected determines that it is in a locked state.

[0015] Furthermore, in the above method, the device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including:

[0016] If a wireless network is connected between the device to be protected and the mobile security device, the device to be protected and the mobile security device form a point-to-point wireless network. The device to be protected is based on the point-to-point wireless network, adopts a wireless positioning method, and cooperates with NFC, Bluetooth, GPS or cellular mobile network to monitor whether the distance between itself and the mobile security device exceeds a preset distance threshold.

[0017] Furthermore, in the above method, the device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including:

[0018] If both the device to be protected and the mobile security device are equipped with NFC or Bluetooth devices, the device to be protected uses NFC or Bluetooth, and cooperates with GPS or cellular mobile network to monitor whether the distance between itself and the mobile security device exceeds a preset distance threshold.

[0019] Furthermore, in the above method, the device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including:

[0020] If both the device to be protected and the mobile safety device are equipped with a gyroscope and a cellular mobile positioning or GPS positioning device, the device to be protected uses GPS positioning or a cellular mobile network and cooperates with the gyroscope to monitor whether the distance between itself and the mobile safety device exceeds a preset distance threshold.

[0021] Furthermore, in the above method, the device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including:

[0022] If the device to be protected is equipped with a sound receiving device and the mobile safety device is equipped with a sound source playing device, the device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold by means of the sound receiving device monitoring the infrasound or ultrasonic waves of a preset frequency emitted by the sound source playing device.

[0023] Furthermore, in the above method, after the device to be protected determines that it is in a locked state, the method further includes:

[0024] The device to be protected locks its own screen, disconnects the wireless connection, and / or encrypts the memory information of the device to be protected.

[0025] According to another aspect of the present invention, there is also provided a device safety protection system, wherein the system comprises:

[0026] The mobile security device is used to detect its own device information, and if the detection of its own device information passes, establish a wired connection with the device to be protected, obtain the key parameters from the device to be protected based on the wired connection, and generate a second key valid within the preset time based on the key parameters;

[0027] The device to be protected is used to verify user information. If the user information is verified, a key parameter of the user is generated, and a first key valid within a preset time is generated based on the key parameter; based on the wired connection, the second key is obtained from the mobile security device, and the first key and the second key are compared. If the comparison is consistent, the pairing with the mobile security device is successful, the wired connection is disconnected, and a wireless connection is established with the mobile security device; and the user's operation request is obtained. The device to be protected determines whether it is in a locked state. If it is in a locked state, it does not respond to the user's operation request; if it is in an unlocked state, the first key valid within a preset time is regenerated based on the key parameter, and the second key valid within the preset time regenerated based on the key parameter is obtained from the mobile security device through the wireless connection, and the regenerated first key and the second key are compared. If the comparison is consistent, the user's operation request is responded to.

[0028] According to another aspect of the present invention, a computer-readable medium is further provided, on which computer-readable instructions are stored. The computer-readable instructions can be executed by a processor to implement any of the above methods.

[0029] According to another aspect of the present invention, there is also provided a device for information processing at a network device end, the device comprising a memory for storing computer program instructions and a processor for executing program instructions, wherein when the computer program instructions are executed by the processor, the device is triggered to execute any of the methods described above.

[0030] Compared with the prior art, the device to be protected and the mobile security device need to be physically connected to the mobile device via a wire when they are initialized for the first time, so that the key parameters of the mobile security device are obtained from the device to be protected based on the wired connection, thereby achieving safe and reliable key parameter initialization. The device to be protected and the mobile security device each independently calculate the first key and the second key.

[0031] The present invention adopts a time-based one-time first key and a second key. The first key and the second key are valid within a preset time. A new first key and a second key are generated every preset time period. After the first key and the second key expire, they are directly invalidated and a new first key and a second key valid within the preset time are generated again. After the first key and the second key are compared and consistent, the protected device responds to the user's operation request, avoiding the problem of simple passwords and not changing the password for a long time, and can achieve safe and reliable response of the protected device.

[0032] The present invention can use mobile devices with a very high penetration rate at present, such as mobile phones, smart watches, tablets, smart bracelets and other portable devices, without the need to purchase hardware devices separately, to achieve functions such as device lock, software hardware lock, watchdog and the like, and can timely adjust the lock state or unlock state of the device to be protected to prevent the device from being unlocked due to user negligence, and effectively prevent problems such as software theft, illegal control, and information leakage. BRIEF DESCRIPTION OF THE DRAWINGS

[0033] Other features, objects and advantages of the present invention will become more apparent from the detailed description of non-limiting embodiments made with reference to the following drawings:

[0034] Figure 1 A schematic diagram of a device security protection method and system according to one aspect of the present invention is shown. DETAILED DESCRIPTION

[0035] The present invention is further described in detail below in conjunction with the accompanying drawings.

[0036] In a typical configuration of the present application, the terminal, the device of the service network and the trusted party all include one or more processors (CPU), input / output interfaces, network interfaces and memories.

[0037] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.

[0038] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include non-transitory media such as modulated data signals and carrier waves.

[0039] like Figure 1 As shown, the present invention provides a device security protection method, the method comprising:

[0040] Step S1, the device to be protected verifies user information. If the user information is verified, a key parameter of the user is generated, and a first key valid within a preset time is generated based on the key parameter;

[0041] Step S2, the mobile security device detects the device information of the mobile security device itself, and if the device information detection passes, establishes a wired connection with the device to be protected, obtains the key parameters from the device to be protected based on the wired connection, and generates a second key valid within the preset time based on the key parameters;

[0042] Here, the device to be protected is a device that needs to be protected, such as a computer, a mobile phone, etc.

[0043] The mobile security device is a device that protects the device to be protected, such as a mobile phone, a tablet computer, a smart watch, a smart bracelet, etc.

[0044] The wired connection is a physical connection;

[0045] Step S3: The protected device obtains the second key from the mobile security device based on the wired connection, and compares the first key with the second key. If the comparison is consistent, the protected device is successfully paired with the mobile security device, the wired connection is disconnected, and the protected device and the mobile security device establish a wireless connection;

[0046] In step S4, the device to be protected obtains the user's operation request, and the device to be protected determines whether it is in a locked state. If it is in a locked state, it does not respond to the user's operation request; if it is in an unlocked state, it regenerates a first key valid within a preset time based on the key parameters, and obtains a second key valid within a preset time regenerated based on the key parameters from the mobile security device through the wireless connection, compares the regenerated first key with the second key, and if the comparison is consistent, the device to be protected responds to the user's operation request.

[0047] Here, when the protected device and the mobile security device are initialized for the first time, a wired physical connection with the mobile device is required, so that the key parameters of the mobile security device are obtained from the protected device based on the wired connection, thereby achieving safe and reliable key parameter initialization. The protected device and the mobile security device each independently calculate the first key and the second key.

[0048] The present invention adopts a time-based one-time first key and a second key. The first key and the second key are valid within a preset time. A new first key and a second key are generated every preset time period. After the first key and the second key expire, they are directly invalidated and a new first key and a second key valid within the preset time are generated again. After the first key and the second key are compared and consistent, the protected device responds to the user's operation request, avoiding the problem of simple passwords and not changing the password for a long time, and can achieve safe and reliable response of the protected device.

[0049] The present invention can use mobile devices with a very high penetration rate at present, such as mobile phones, smart watches, tablets, smart bracelets and other portable devices, without the need to purchase hardware devices separately, to achieve functions such as device lock, software hardware lock, watchdog and the like, and can timely adjust the lock state or unlock state of the device to be protected to prevent the device from being unlocked due to user negligence, and effectively prevent problems such as software theft, illegal control, and information leakage.

[0050] In an embodiment of the device security protection method of the present invention, the device to be protected determines whether it is in a locked state, including:

[0051] If the mobile security device detects that the device to be protected is being monitored, the device to be protected has a network proxy setting, or the communication between the device to be protected and the mobile security device is interrupted, the mobile security device sends a locking instruction to the device to be protected, and the device to be protected adjusts itself to a locked state based on the received locking instruction.

[0052] Here, after the pairing between the device to be protected and the mobile security device is completed, the device to be protected and the mobile security device independently calculate the first key and the second key, and maintain communication through wireless network, Bluetooth and other communication methods using encrypted links to perform the first key and the second key. Once the communication is interrupted, monitored, or there is an intermediate agent, the mobile security device sends a locking instruction to the device to be protected, and the device to be protected implements protection on the local software or hardware according to the locking instruction to enter a locked state, such as locking the screen, encrypting memory information, exiting, and other measures.

[0053] In an embodiment of the device security protection method of the present invention, the device to be protected determines whether it is in a locked state, including:

[0054] The device to be protected monitors whether the mobile security device is in an inactive state through the wireless connection. If the mobile security device is in an inactive state, the device to be protected determines that it is in a locked state.

[0055] Here, the mobile security device is in an inactive state, for example, the screen may be locked, a preset application may be running in the background, etc., indicating that the user may have forgotten the mobile security device at the current location, and the device to be protected can be locked immediately

[0056] By monitoring whether the mobile security device is in an inactive state, it can be ensured that the device to be protected is adjusted to a locked state in time, thereby ensuring the operational safety of the device to be protected.

[0057] In an embodiment of the device security protection method of the present invention, the device to be protected determines whether it is in a locked state, including:

[0058] The device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold. If so, the device to be protected determines that it is in a locked state.

[0059] Here, when the safety distance between the mobile security device and the device to be protected is beyond the preset distance, the device to be protected determines that it is in an unlocked state, the mobile security device maintains a secure wireless link with the device to be protected or the software, and the mobile security device transmits the offline dynamically generated second key to the device to be protected; when the safety distance between the mobile security device and the device to be protected is within the preset distance, the device to be protected determines that it is in a locked state. This ensures that the device to be protected is adjusted to a locked state or an unlocked state in a timely manner, ensuring the operational safety of the device to be protected

[0060] In an embodiment of the device security protection method of the present invention, the device to be protected monitors whether the distance between itself and the mobile security device exceeds a preset distance threshold, including:

[0061] If a wireless network is connected between the device to be protected and the mobile security device, the device to be protected and the mobile security device form a point-to-point wireless network. The device to be protected is based on the point-to-point wireless network, adopts a wireless positioning method, and cooperates with NFC, Bluetooth, GPS or cellular mobile network to monitor whether the distance between itself and the mobile security device exceeds a preset distance threshold.

[0062] Here, when both the device to be protected and the mobile security device have wireless network devices, the device to be protected and the mobile security device can form a point-to-point network, use a wireless positioning method to determine the distance, and cooperate with near-field devices such as NFC, Bluetooth, or GPS, cellular mobile networks, and other positioning methods to accurately determine the distance and whether to turn on or off the lock state of the device to be protected.

[0063] In an embodiment of the device security protection method of the present invention, the device to be protected monitors whether the distance between itself and the mobile security device exceeds a preset distance threshold, including:

[0064] If both the device to be protected and the mobile security device are equipped with NFC or Bluetooth devices, the device to be protected uses NFC or Bluetooth, and cooperates with GPS or cellular mobile network to monitor whether the distance between itself and the mobile security device exceeds a preset distance threshold.

[0065] Here, when the device to be protected and the mobile security device do not form a point-to-point network, the protection device and the mobile security device can use near-field communication devices such as NFC and Bluetooth to determine the distance based on the signal strength, and cooperate with GPS, cellular mobile and other positioning methods to accurately determine whether to turn on or off the lock state of the device to be protected.

[0066] In an embodiment of the device security protection method of the present invention, the device to be protected monitors whether the distance between itself and the mobile security device exceeds a preset distance threshold, including:

[0067] If both the device to be protected and the mobile safety device are equipped with a gyroscope and a cellular mobile positioning or GPS positioning device, the device to be protected uses GPS positioning or a cellular mobile network and cooperates with the gyroscope to monitor whether the distance between itself and the mobile safety device exceeds a preset distance threshold.

[0068] Here, when there is no near-field communication device, the device to be protected can determine the distance between the device to be protected and the mobile security device based on cellular movement, GPS positioning, etc., and cooperate with motion detection devices such as gyroscopes to determine the user's steps and moving distance, reduce cellular movement and GPS positioning errors, and determine whether to turn on or off the locking state of the device to be protected.

[0069] In an embodiment of the device security protection method of the present invention, the device to be protected monitors whether the distance between itself and the mobile security device exceeds a preset distance threshold, including:

[0070] If the device to be protected is equipped with a sound receiving device and the mobile safety device is equipped with a sound source playing device, the device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold by means of the sound receiving device monitoring the infrasound or ultrasonic waves of a preset frequency emitted by the sound source playing device.

[0071] Here, for the protected device and the mobile security device that do not have any positioning device, gyroscope or other motion detection, the mobile security device can use sound source playback hardware to generate infrasound or ultrasonic waves of a preset frequency, and the protected device can monitor through the radio device. When the sound wave source capacity is reduced to the preset lower limit, the locking state of the protected device is immediately turned on or off.

[0072] In an embodiment of the device security protection method of the present invention, after the device to be protected determines that it is in a locked state, the method further includes:

[0073] The device to be protected locks its own screen, disconnects the wireless connection, and / or encrypts the memory information of the device to be protected.

[0074] According to another aspect of the present invention, there is also provided a device safety protection system, wherein the system comprises:

[0075] A mobile security device is used to detect its own device information. If the device information detection is passed, a wired connection is established with the device to be protected. Based on the wired connection, the key parameter is obtained from the device to be protected, and a second key valid within the preset time is generated based on the key parameter.

[0076] The device to be protected is used to verify user information. If the user information is verified, a key parameter of the user is generated, and a first key valid within a preset time is generated based on the key parameter; based on the wired connection, the second key is obtained from the mobile security device, and the first key and the second key are compared. If the comparison is consistent, the pairing with the mobile security device is successful, the wired connection is disconnected, and a wireless connection is established with the mobile security device; and the user's operation request is obtained. The device to be protected determines whether it is in a locked state. If it is in a locked state, it does not respond to the user's operation request; if it is in an unlocked state, the first key valid within a preset time is regenerated based on the key parameter, and the second key valid within the preset time regenerated based on the key parameter is obtained from the mobile security device through the wireless connection, and the regenerated first key and the second key are compared. If the comparison is consistent, the user's operation request is responded to.

[0077] According to another aspect of the present invention, a computer-readable medium is provided, on which computer-readable instructions are stored. The computer-readable instructions can be executed by a processor to implement the method described in any of the above embodiments.

[0078] According to another aspect of the present invention, a device for information processing at a network device end is also provided, the device comprising a memory for storing computer program instructions and a processor for executing program instructions, wherein when the computer program instructions are executed by the processor, the device is triggered to execute the method described in any of the above embodiments.

[0079] For details of the various device and storage medium embodiments of the present invention, please refer to the corresponding parts of the various method embodiments, which will not be repeated here.

[0080] Obviously, those skilled in the art can make various changes and modifications to the present application without departing from the spirit and scope of the present application. Thus, if these modifications and variations of the present application fall within the scope of the claims of the present application and their equivalents, the present application is also intended to include these modifications and variations.

[0081] It should be noted that the present invention can be implemented in software and / or a combination of software and hardware, for example, can be implemented using an application specific integrated circuit (ASIC), a general purpose computer or any other similar hardware device. In one embodiment, the software program of the present invention can be executed by a processor to implement the steps or functions described above. Similarly, the software program of the present invention (including related data structures) can be stored in a computer readable recording medium, for example, a RAM memory, a magnetic or optical drive or a floppy disk and the like. In addition, some steps or functions of the present invention can be implemented using hardware, for example, as a circuit that cooperates with a processor to perform each step or function.

[0082] In addition, a part of the present invention may be applied as a computer program product, such as a computer program instruction, which, when executed by a computer, can call or provide the method and / or technical solution according to the present invention through the operation of the computer. The program instruction for calling the method of the present invention may be stored in a fixed or removable recording medium, and / or transmitted through a data stream in a broadcast or other signal-bearing medium, and / or stored in a working memory of a computer device that runs according to the program instruction. Here, according to an embodiment of the present invention, a device is included, the device including a memory for storing computer program instructions and a processor for executing program instructions, wherein, when the computer program instruction is executed by the processor, the device is triggered to run the method and / or technical solution based on the aforementioned multiple embodiments of the present invention.

[0083] It is obvious to those skilled in the art that the present invention is not limited to the details of the exemplary embodiments described above, and that the present invention can be implemented in other specific forms without departing from the spirit or essential features of the present invention. Therefore, from any point of view, the embodiments should be regarded as exemplary and non-restrictive, and the scope of the present invention is defined by the appended claims rather than the above description, and it is intended that all changes falling within the meaning and scope of the equivalent elements of the claims are included in the present invention. Any figure mark in the claims should not be regarded as limiting the claims involved. In addition, it is obvious that the word "comprising" does not exclude other units or steps, and the singular does not exclude the plural. Multiple units or devices stated in the device claim can also be implemented by one unit or device through software or hardware. The words first, second, etc. are used to indicate names, and do not indicate any particular order.

Claims

1. A device security protection method, wherein: The method includes: The device to be protected verifies the user information. If the user information is verified, a key parameter of the user is generated, and a first key valid within a preset time is generated based on the key parameter; The mobile security device detects the device information of the mobile security device itself, and if the device information detection of the mobile security device itself passes, establishes a wired connection with the device to be protected, obtains the key parameter from the device to be protected based on the wired connection, and generates a second key valid within a preset time based on the key parameter; The device to be protected obtains the second key from the mobile security device based on the wired connection, and compares the first key with the second key. If the comparison is consistent, the device to be protected is paired with the mobile security device successfully, the wired connection is disconnected, and the device to be protected establishes a wireless connection with the mobile security device; The protected device obtains an operation request from the user, and determines whether it is in a locked state. If it is in a locked state, it does not respond to the user's operation request; if it is in an unlocked state, it regenerates a first key valid within a preset time based on the key parameters, and obtains a second key valid within a preset time regenerated based on the key parameters from the mobile security device through the wireless connection, compares the regenerated first key and the second key, and if the comparison is consistent, the protected device responds to the user's operation request.

2. The method according to claim 1, wherein: The device to be protected determines whether it is in a locked state, including: If the mobile security device detects that the device to be protected is being monitored, the device to be protected has a network proxy setting, or the communication between the device to be protected and the mobile security device is interrupted, the mobile security device sends a locking instruction to the device to be protected, and the device to be protected adjusts itself to a locked state based on the received locking instruction.

3. The method according to claim 1, wherein: The device to be protected determines whether it is in a locked state, including: The device to be protected monitors whether the mobile security device is in an inactive state through the wireless connection. If the mobile security device is in an inactive state, the device to be protected determines that it is in a locked state.

4. The method according to claim 1, wherein: The device to be protected determines whether it is in a locked state, including: The device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold. If so, the device to be protected determines that it is in a locked state.

5. The method according to claim 4, wherein: The device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including: If a wireless network is connected between the device to be protected and the mobile security device, the device to be protected and the mobile security device form a point-to-point wireless network. The device to be protected is based on the point-to-point wireless network, adopts a wireless positioning method, and cooperates with NFC, Bluetooth, GPS or cellular mobile network to monitor whether the distance between itself and the mobile security device exceeds a preset distance threshold.

6. The method according to claim 4, wherein: The device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including: If both the device to be protected and the mobile security device are equipped with NFC or Bluetooth devices, the device to be protected uses NFC or Bluetooth, and cooperates with GPS or cellular mobile network to monitor whether the distance between itself and the mobile security device exceeds a preset distance threshold.

7. The method according to claim 4, wherein: The device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including: If both the protected device and the mobile safety device are equipped with a gyroscope and a cellular mobile positioning or GPS positioning device, the protected device uses GPS positioning or a cellular mobile network and cooperates with the gyroscope to monitor whether the distance between itself and the mobile safety device exceeds a preset distance threshold.

8. The method according to claim 4, wherein: The device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold, including: If the device to be protected is equipped with a sound receiving device and the mobile safety device is equipped with a sound source playing device, the device to be protected monitors whether the distance between itself and the mobile safety device exceeds a preset distance threshold by means of the sound receiving device monitoring the infrasound or ultrasonic waves of a preset frequency emitted by the sound source playing device.

9. The method according to claim 1, wherein: After the device to be protected determines that it is in a locked state, the method further includes: The device to be protected locks its own screen, disconnects the wireless connection, and / or encrypts the memory information of the device to be protected.

10. A device safety protection system, wherein: The system includes: The mobile security device is used to detect its own device information, and if the detection of its own device information passes, establish a wired connection with the device to be protected, obtain key parameters from the device to be protected based on the wired connection, and generate a second key valid within a preset time based on the key parameters; The device to be protected is used to verify user information. If the user information is verified, a key parameter of the user is generated, and a first key valid within a preset time is generated based on the key parameter; based on the wired connection, the second key is obtained from the mobile security device, and the first key and the second key are compared. If the comparison is consistent, the pairing with the mobile security device is successful, the wired connection is disconnected, and a wireless connection is established with the mobile security device; and the user's operation request is obtained. The device to be protected determines whether it is in a locked state. If it is in a locked state, it does not respond to the user's operation request; if it is in an unlocked state, the first key valid within a preset time is regenerated based on the key parameter, and the second key valid within the preset time regenerated based on the key parameter is obtained from the mobile security device through the wireless connection, and the regenerated first key and the second key are compared. If the comparison is consistent, the user's operation request is responded to.

11. A computer-readable medium having computer-readable instructions stored thereon, wherein the computer-readable instructions can be executed by a processor to implement the method according to any one of claims 1 to 9.

12. A device for information processing at a network device end, the device comprising a memory for storing computer program instructions and a processor for executing the program instructions, wherein: When the computer program instructions are executed by the processor, the device is triggered to execute the method according to any one of claims 1 to 9.