A dual-system cloud security mobile phone file system security switching method

Abstract

The present invention proposes a dual-system cloud security mobile phone file system security switching method, including: S1, establishing a dual-system cloud security mobile phone; S2, isolating and adding labels; S3, controlling the logical volume state when the dual systems are started; S4: activating labels when the dual systems are switched. The present invention makes it impossible to read the complete logical volume information from a single container system and a host machine at any time, effectively preventing malicious operations on the logical volume and improving security.

Description

Technical Field

[0001] The present invention belongs to the technical field of dual-system mobile phones, and in particular relates to a dual-system cloud security mobile phone file system security switching method. Background Art

[0002] With the rapid development of cloud technology and mobile terminal technology, more and more users need terminal application scenarios with internal and external isolation, such as users of mobile terminal devices used in public security, procuratorial and judicial departments, and users who want to separate mobile terminal devices used for work and life. For information security or data confidentiality, these users usually adopt a dual-mobile phone strategy, one mobile phone for life and the other for safe office use. However, using two mobile phones is not only inconvenient to carry, but also brings troubles in operation.

[0003] Based on the above needs of users, dual-system mobile phones came into being. With the help of container technology, dual-system mobile phones can use two systems in parallel, one for life system and one for security system, one for foreground use and one for background hide. Users can use the foreground system normally and wake up the background system according to their needs, realizing real-time switching between the two systems.

[0004] Although dual-system mobile phones have met the needs of user information security or data confidentiality to a certain extent, they also bring about the problem of dual-system switching during use; in the conventional dual-system switching method, each system and the host machine can directly read the complete logical volume information and can directly operate the logical volume, which makes it difficult to prevent malicious operations on the logical volume. Summary of the invention

[0005] The present invention proposes a dual-system cloud security mobile phone file system security switching method, which prevents direct operation on logical volumes and realizes the safe switching of dual systems.

[0006] To achieve the above object, the technical solution of the present invention is achieved as follows:

[0007] A dual-system cloud security mobile phone file system security switching method, comprising:

[0008] S1. Establish a dual-system cloud security mobile phone: deploy LXC containers in the Linux kernel of the mobile phone, establish a dual-container system based on the LXC container, and manage it in the form of logical volumes; the first container system is set as the default system on the mobile phone body as a life system; the second container system is stored in the cloud server in the form of cloud mirroring as a security system;

[0009] S2. Isolate and add labels: Isolate the two container systems. When initializing the system, set the volume group to which the logical volume belongs to hidden. At the same time, use two random hash values ​​generated by the host as labels for the logical volumes owned by the two containers.

[0010] After adding the tag, set the tag value of the security system to L, generate a random number B in the host and create a linear function F(x) = L x + B, generate a random function G(x) and save it, and set H(x) = F(x) – G(x);

[0011] S3. Control the logical volume status when the dual system is started: When the dual system cloud security mobile phone system is started, the logical volume used by the life system is in an activated state, and the logical volume of the security system is in an inactivated state; the host sends H(x) to the life system for storage, and deletes the records of the original label L and the random number B;

[0012] S4: Activate labels when switching between two systems: When switching between two systems, first use the labels of the logical volumes of the background container to activate the logical volumes of the background container, switch the systems, and then invalidate the original logical volumes in the new system according to the labels. Specifically:

[0013] When the life system is about to be switched to the background, the values ​​of H(T1), H(T2), T1, and T2 are sent to the host machine according to the saved H(x) and any two timestamps T1 and T2. The host machine calculates L=(G(T2)–G(T1)+H(T2)–H(T1)) / (T2–T1); the label value of the security system is thus obtained to perform the activation operation.

[0014] Furthermore, the method for isolating the two container systems in step S2 includes: isolating product, vendor, system, and system_ext paths of the two container systems.

[0015] Furthermore, step S4 also includes:

[0016] After switching to the safety system, the same logic as step S3 is used to send information to the host machine to invalidate the logical volume of the living system, and the next dual system switch is performed with the same logic as step S4.

[0017] Compared with the prior art, the present invention has the following beneficial effects:

[0018] The present invention proposes a file system security switching method for a dual-system cloud security mobile phone. In an environment where both systems exclusively use their own file directories, users are not allowed to directly operate on logical volumes. When the system is started or switched, the logical volumes of the container system are activated through labels, and the original logical volumes are invalidated according to the labels, so that complete logical volume information cannot be read from a single container system and a host machine at any time, thereby effectively preventing malicious operations on logical volumes and improving security. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1This is a schematic diagram of the dual-system cloud phone structure of an embodiment of the present invention;

[0020] Figure 2 It is a schematic diagram of a flow chart of an embodiment of the present invention. DETAILED DESCRIPTION

[0021] It should be noted that, in the absence of conflict, the embodiments of the present invention and the features in the embodiments may be combined with each other.

[0022] The design concept of the present invention is to use lvm (logical volume management) labeling to manage the file systems of two containers respectively.

[0023] like Figure 1 As shown, the basic architecture of the dual-system cloud security mobile phone is based on the Linux operating system. LXC is deployed in the kernel layer of the Linux system. LXC creates a virtual environment with its own process and network space, that is, a container. When LXC is deployed in the present invention, a container management program for managing the LXC container is set.

[0024] A dual container system is established based on the LXC container; the first container system is set as the default system on the mobile phone body, and the second container system is stored in the cloud server in the form of cloud mirroring.

[0025] Based on the above architecture, the method proposed by the present invention is as follows Figure 2 As shown, including:

[0026] S1. Establish a dual-system cloud security mobile phone: deploy LXC containers in the Linux kernel of the mobile phone, and establish a dual-container system based on the LXC container; the first container system is set as the default system on the mobile phone body as the life system; the second container system is stored in the cloud server in the form of cloud mirroring as the security system;

[0027] S2, isolate and add tags:

[0028] The use of the file system by the container is basically concentrated on product, vendor, system and system_ext; therefore, to ensure system security, users should not be allowed to directly operate on logical volumes, especially logical volumes of non-currently active systems. The present invention adds respective labels to product, vendor, system and system_ext used by different container systems, that is, to add labels to respective logical volumes of the dual container system, as follows:

[0029] Isolate the product, vendor, system, and system_ext paths of the two container systems. Set the volume group to which the logical volume belongs to be hidden when initializing the system. Use two random hash values ​​generated by the host as labels for the logical volumes owned by the two containers.

[0030] After adding the tag, set the tag value of the security system to L, generate a random number B in the host and create a linear function F(x) = L x + B, generate a random function G(x) and save it, and set H(x) = F(x) – G(x);

[0031] S3. Control the logical volume status when the dual system is started: When the dual system cloud security mobile phone system is started, the logical volume used by the life system is in an activated state, and the logical volume of the security system is in an inactivated state; the host sends H(x) to the life system for storage, and deletes the records of the original label L and the random number B;

[0032] S4: Activate labels when switching between two systems: When switching between two systems, first use the labels of the logical volumes of the background container to activate the logical volumes of the background container, switch the systems, and then invalidate the original logical volumes in the new system according to the labels. Specifically:

[0033] When the life system is switched to the background, the values ​​of H(T1), H(T2), T1, and T2 are sent to the host machine according to the saved H(x) and any two timestamps T1 and T2. The host machine calculates L=(G(T2)–G(T1)+H(T2)–H(T1)) / (T2–T1). The label value of the security system is obtained to perform the activation operation.

[0034] After switching to the safety system, the same logic as step S3 is used to send information to the host machine to invalidate the logical volume of the living system, and the next dual system switch is performed with the same logic as step S4.

[0035] Through the method proposed by the present invention, the complete logical volume information cannot be read from a single container system and a host machine at any time, thereby effectively preventing malicious operations on the logical volume.

[0036] The above description is only a preferred embodiment of the present invention and is not intended to limit the present invention. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principle of the present invention should be included in the protection scope of the present invention.

Claims

1. A dual-system cloud security mobile phone file system security switching method, characterized in that: include: S1. Establish a dual-system cloud security mobile phone: deploy LXC containers in the Linux kernel of the mobile phone, establish a dual-container system based on LXC containers, and manage it in the form of logical volumes; The first container system is set as the default system on the mobile phone as a life system; the second container system is stored in the cloud server in the form of cloud mirroring as a security system; S2. Isolate and add labels: Isolate the two container systems. When initializing the system, set the volume group to which the logical volume belongs to hidden. At the same time, use two random hash values ​​generated by the host as labels for the logical volumes owned by the two containers. After adding the tag, set the tag value of the security system to L, generate a random number B in the host and create a linear function F(x) = L x + B, generate a random function G(x) and save it, and set H(x) = F(x) – G(x); S3. Control the logical volume status when the dual system is started: When the dual system cloud security mobile phone system is started, the logical volume used by the life system is in an activated state, and the logical volume of the security system is in an inactivated state; the host sends H(x) to the life system for storage, and deletes the records of the original label L and the random number B; S4: Activate labels when switching between two systems: When switching between two systems, first use the labels of the logical volumes of the background container to activate the logical volumes of the background container, switch the systems, and then invalidate the original logical volumes in the new system according to the labels. Specifically: When the life system is about to be switched to the background, the values ​​of H(T1), H(T2), T1, and T2 are sent to the host machine according to the saved H(x) and any two timestamps T1 and T2. The host machine calculates L=(G(T2)–G(T1)+H(T2)–H(T1)) / (T2–T1); the label value of the security system is thus obtained to perform the activation operation.

2. The dual-system cloud security mobile phone file system security switching method according to claim 1 is characterized in that: The method for isolating the two container systems in step S2 includes isolating product, vendor, system, and system_ext paths of the two container systems.

3. The dual-system cloud security mobile phone file system security switching method according to claim 1 is characterized in that: Step S4 also includes: After switching to the safety system, the same logic as step S3 is used to send information to the host machine to invalidate the logical volume of the living system, and the next dual system switch is performed with the same logic as step S4.

Images