Privacy protection method and related device

Abstract

The present application provides a privacy protection method and related devices, which relate to the field of terminal technology. The method includes: receiving a first operation; in response to the first operation, displaying a first desktop and closing other applications, wherein the first desktop includes icons of preset applications but does not include icons of other applications; in response to a first incoming call from a first contact included in a contact application, notifying the first incoming call; when receiving a second incoming call from a second contact, not notifying the second incoming call, wherein the second contact is not included in the contact application. Based on the solution of the present application, the privacy data of the user can be protected with high security.

Description

[0001] This application is a divisional application of the invention patent application with application number 202211435431.1 submitted to the China Patent Office, application date November 16, 2022, and invention name “Privacy protection method and related equipment”. Technical Field

[0002] The present application relates to the field of terminal technology, and in particular to a privacy protection method and related equipment. Background Art

[0003] With the rapid development of electronic devices such as mobile phones, more and more applications (APPs) can be installed on electronic devices. When some APPs are running on electronic devices, they may need to use the camera, microphone, etc. of the electronic device to provide users with corresponding functions.

[0004] Usually, when an electronic device opens an APP for the first time or during the operation of the application, the electronic device will display a permission request pop-up box to request the user to grant the APP permission to call one or more system functions; however, some APPs may call the system functions of the electronic device to obtain the user's information without the user's knowledge when they are not granted permission at all, or after obtaining permission to call one or more system functions, for example, they may call the camera to take photos or record videos. This poses a security risk of leaking the user's privacy information.

[0005] Therefore, a new privacy protection method is urgently needed to solve this problem. Summary of the invention

[0006] The present application provides a privacy protection method and an electronic device, which can solve the problem of privacy data leakage by controlling the status of an application program and improve the security of user privacy data.

[0007] In order to achieve the above objectives, this application adopts the following technical solutions:

[0008] In a first aspect, the present application provides a privacy protection method, which is applied to an electronic device, wherein the electronic device includes a preset application, the preset application includes at least one of a phone application, a short message application, and a contact application, and the electronic device also includes other applications other than the preset application;

[0009] The method comprises:

[0010] receiving a first operation;

[0011] In response to the first operation, display a first desktop and close the other applications, wherein the first desktop includes an icon of the preset application but does not include icons of the other applications;

[0012] In response to a first incoming call from a first contact included in the contact application, notifying the first incoming call;

[0013] When a second incoming call from a second contact is received, notifying the second incoming call is not performed, wherein the contact application does not include the second contact.

[0014] Since the Contacts APP, Phone APP and Short Message APP are more secure than other system APPs and third-party APPs, at least one of the above three system APPs that can meet the user's basic needs can be selected from the system APPs as the preset application, while the icons of other less secure or unsafe applications will not be displayed and their use will be prohibited.

[0015] In this application, processes or threads used to instruct to close (kill) other less secure system apps and all third-party apps are disabled, and these apps are prohibited from starting up on their own.

[0016] Since the phone APP can still make voice calls to the contacts in the whitelist (the first contact included in the contact application) after entering the privacy moment mode, after entering the privacy moment mode, if there is an incoming call related to the contacts in the whitelist, a notification will be made to prompt the user to answer or hang up; if it is a call related to a contact outside the whitelist, no notification is required.

[0017] The privacy protection method provided in the embodiment of the present application controls the running state of the application program to protect the user's privacy. Unlike the permission management method that manages the APP through the permission switch, after the user enters the privacy moment mode provided by the present application, only a few system APPs with very high security are retained, and other system APPs with lower security and all third-party APPs are disabled, so that the state isolation of the high-security mode can be achieved, achieving the purpose of protecting the user's privacy data.

[0018] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0019] In response to receiving a first short message from the first contact, displaying a notification message corresponding to the first short message;

[0020] When the second short message from the second contact is received, a notification message corresponding to the second short message is not displayed.

[0021] In this implementation, since the short message APP can still receive and send messages to contacts in the whitelist after entering the privacy moment mode, after entering the privacy moment mode, if there are notification messages of short messages related to contacts in the whitelist, they can continue to be displayed for users to view; if there are notification messages of short messages related to contacts outside the whitelist, they do not need to be displayed.

[0022] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0023] After notifying the first incoming call, receiving a second operation;

[0024] In response to the second operation, answering the first incoming call;

[0025] During the first incoming call, the recording function is disabled.

[0026] In this implementation, after the phone APP enters the private moment mode, it can still make voice calls to the contacts in the whitelist (the first contact included in the contact application). Therefore, after entering the private moment mode, if there is an incoming call related to the contacts in the whitelist, a notification will be issued to prompt the user to answer or hang up; when the user answers, the voice call function can be realized. At this time, in order to protect the user's privacy data, the recording function in the phone APP can be disabled.

[0027] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0028] In response to the first operation, deactivating other functions except the preset function corresponding to the preset application, and / or powering off other drivers except the preset driver;

[0029] The preset driver corresponds to a preset function of the preset application.

[0030] In this implementation, by disabling functions other than the preset functions corresponding to the preset applications, the electronic device is unable to provide corresponding functional services; at the same time, all drivers except the preset drivers are powered off, so that the hardware cannot work and the original data cannot be obtained, thereby achieving isolation at the hardware level; thereby, the user's privacy data can be highly protected, so that the user can have a sense of certainty that "privacy will not be leaked at all" after enabling the privacy moment mode.

[0031] In combination with the first aspect, in some implementations of the first aspect, the preset function includes a voice call function of the phone application and a message receiving and sending function of the short message application;

[0032] The preset driver includes a microphone voice call driver, and the other drivers include at least one of a microphone recording driver, a Bluetooth driver, a WLAN driver, a GPS or Beidou positioning driver, a camera driver, and a USB debugging driver;

[0033] Among them, the microphone voice call driver corresponds to the voice call function of the telephone application.

[0034] In this implementation, since it is necessary to use the phone APP to answer calls in the whitelist to realize the voice call function in the privacy moment mode, the microphone voice driver needs to work normally. Therefore, the microphone voice driver will not be powered off, but other drivers can all be powered off to realize privacy data protection at the hardware level.

[0035] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0036] Before receiving the first operation, receiving a third operation;

[0037] In response to the third operation, displaying a first interface, the first interface including a first notification center, the first notification center displaying a first notification message corresponding to the preset application and other notification messages corresponding to the other applications;

[0038] After receiving the first operation, receiving a fourth operation;

[0039] In response to the fourth operation, a second interface is displayed, the second interface includes a second notification center, the second notification center displays the first notification message corresponding to the preset application, and does not display the other notification messages corresponding to the other applications.

[0040] In this implementation, since the user has not viewed the first notification message corresponding to the preset application before entering the private moment mode, it needs to be displayed to the user again after exiting the private moment mode in order not to miss the information. However, other notification messages corresponding to other applications do not need to be displayed to the user after entering the private moment mode.

[0041] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0042] receiving a fifth operation;

[0043] In response to the fifth operation, a second desktop is displayed, which includes an icon of the preset application and at least some of the icons of the other applications, other functions except the preset functions corresponding to the preset application are restored, and other drivers except the preset driver are powered on.

[0044] In this implementation, the functions turned off and the drivers powered off when entering the privacy moment mode can be automatically restored to improve the user experience.

[0045] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0046] After receiving the fifth operation, the second incoming call and / or the second short message is notified.

[0047] In this implementation, after entering the privacy moment mode and before exiting the privacy moment mode, the preset application may also generate notification messages for some contacts outside the whitelist, but during this period, the notification manager cannot provide them with push message services under the control of the privacy moment service module. Therefore, after exiting the privacy moment mode, the messages received by the preset application during the privacy moment mode can be displayed to prevent users from missing missed calls, short messages, etc. from contacts outside the whitelist during the privacy moment mode.

[0048] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0049] receiving a sixth operation;

[0050] In response to the sixth operation, a third interface is displayed, the third interface includes a third notification center, and the third notification center includes at least one of the following messages: the other notification messages, the notification message corresponding to the second incoming call, and the notification message corresponding to the second short message.

[0051] In this implementation, after exiting the privacy moment mode, missed calls, short messages, etc. corresponding to contacts outside the whitelist received during the privacy moment mode can be displayed in the notification center.

[0052] In addition, other notification messages corresponding to other applications are not displayed to the user during the privacy moment mode. Therefore, after exiting the privacy moment mode, they need to be displayed to the user again in order to avoid missing information.

[0053] In combination with the first aspect, in some implementations of the first aspect, notifying the second incoming call and / or the second short message includes:

[0054] In response to the fifth operation, when the second desktop is displayed, a notification message corresponding to the second incoming call and / or a notification message corresponding to the second short message is displayed.

[0055] In this implementation, after exiting the privacy moment mode, missed calls, short messages, etc. received from contacts outside the whitelist during the privacy moment mode can be displayed on the desktop in a pop-up window or other manner, prompting the user in time to avoid omissions caused by the user's inactive checking.

[0056] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0057] After receiving the fifth operation, receiving a seventh operation, wherein the seventh operation is used to instruct to start any target application other than the preset application;

[0058] The target application is run, and a third notification message corresponding to the target application is displayed; the receiving time of the third notification message includes the time after the third operation is received or the time after the first operation is received.

[0059] In this implementation, since other applications except the preset applications have killed their background processes or threads under the control of the privacy moment mode service and are prohibited from automatic startup when entering the privacy moment mode, the process of the application and the corresponding notification message cannot be restored by themselves after exiting the privacy moment mode.

[0060] At this time, any application program other than the preset application program can be restarted through the seventh operation of the user. Only when the application program is restarted can the corresponding notification message be received and displayed.

[0061] In combination with the first aspect, in certain implementations of the first aspect, the electronic device includes a front camera disposed under a display screen or in a hole, and the first operation is a double-click operation in a preset area, and the preset area is used to indicate an area on the display screen associated with the front camera.

[0062] In this implementation, you can quickly switch to the privacy moment mode by operating on a preset area related to the front camera of the camera in the display screen.

[0063] In combination with the first aspect, in some implementations of the first aspect, the method further includes:

[0064] A fourth interface is displayed, wherein the fourth interface includes a first control, and the first operation is a click operation on the first control.

[0065] In this implementation, users can enter the private moment mode with one click to achieve centralized control of all applications in the electronic device. This avoids multiple operations by the user, simplifies the steps, and helps users quickly switch from non-private moment mode to non-private moment mode, thus improving the user experience while achieving privacy protection.

[0066] In combination with the first aspect, in some implementations of the first aspect, the first desktop includes a second control, and the fifth operation is a click operation on the second control.

[0067] In this implementation, since the user can exit the privacy moment mode with one click, centralized control of all applications in the electronic device is achieved, avoiding multiple operations by the user, simplifying the steps, and helping the user quickly switch from the privacy moment mode to the non-privacy moment mode.

[0068] In a second aspect, an electronic device is provided, comprising a module / unit for executing the privacy protection method in the first aspect or any one of the implementations of the first aspect.

[0069] In a third aspect, an electronic device is provided, comprising one or more processors and a memory; the memory is coupled to the one or more processors, the memory is used to store computer program code, the computer program code comprises computer instructions, and the one or more processors call the computer instructions to enable the electronic device to execute the privacy protection method in the first aspect or any one of the implementations of the first aspect.

[0070] In a fourth aspect, a chip system is provided, which is applied to an electronic device, and the chip system includes one or more processors, and the processor is used to call computer instructions so that the electronic device executes the first aspect or any one of the privacy protection methods in the first aspect.

[0071] In a fifth aspect, a computer-readable storage medium is provided, wherein the computer-readable storage medium stores a computer program code. When the computer program code is executed by an electronic device, the electronic device executes the privacy protection method in the first aspect or any one of the implementations of the first aspect.

[0072] In a sixth aspect, a computer program product is provided, comprising: a computer program code, which, when executed by an electronic device, enables the electronic device to execute the privacy protection method in the first aspect or any one of the implementations of the first aspect.

[0073] The embodiment of the present application provides a privacy protection method and related equipment, which controls the running state of the application and the power-on and power-off state of the driver by setting a privacy moment mode, thereby realizing the protection of user privacy. Unlike the permission management method that manages the APP through the permission switch, after the user enters the privacy moment mode provided by the present application, only some functions of several native system APPs with very high security are retained, other functions are disabled, and other processes or threads of other system APPs with lower security and all third-party APPs are closed (killed), so as to realize the state isolation of the high-security mode. At the same time, all other drivers except the preset drivers are powered off to realize the isolation at the hardware level; through the combination of these two aspects, the user's privacy data can be highly protected, so that the user has a sense of certainty that "privacy will not be leaked at all" after enabling the privacy moment mode.

[0074] In addition, due to the privacy protection method provided in the embodiment of the present application, the privacy moment mode can be entered and exited with one click, thereby achieving centralized control of all applications, functions and drivers in the electronic device, avoiding multiple operations by the user, simplifying the steps, and helping the user to quickly switch between the privacy moment mode and the non-privacy moment mode, thereby improving the user experience. BRIEF DESCRIPTION OF THE DRAWINGS

[0075] Figure 1 Schematic diagram of the permission management method provided for the relevant technology;

[0076] Figure 2 Schematic diagrams of three application scenarios applicable to the embodiments of the present application;

[0077] Figure 3 A hardware system suitable for use in the embodiments of the present application;

[0078] Figure 4 A software system is provided for use in the embodiments of the present application;

[0079] Figure 5 A flowchart of a privacy protection method provided in an embodiment of the present application;

[0080] Figure 6 A flowchart of another privacy protection method provided in an embodiment of the present application;

[0081] Figure 7 A schematic diagram of a hot zone provided in an embodiment of the present application;

[0082] Figure 8 A schematic diagram of another hot zone provided in an embodiment of the present application;

[0083] Fig. 9 A schematic diagram of a display interface provided in an embodiment of the present application;

[0084] Fig.10 A schematic diagram of another display interface provided in an embodiment of the present application;

[0085] Fig.11 A schematic diagram of a display interface for identity authentication provided in an embodiment of the present application;

[0086] Fig.12 A schematic diagram of another display interface for identity authentication provided in an embodiment of the present application;

[0087] Fig.13 A schematic diagram of another identity authentication display interface provided in an embodiment of the present application;

[0088] Fig.14 A schematic diagram of a privacy moment desktop provided in an embodiment of the present application;

[0089] Fig.15 A schematic diagram of a privacy moment lock screen interface provided in an embodiment of the present application;

[0090] Fig.16 A schematic diagram of another display interface provided in an embodiment of the present application;

[0091] Fig.17 A schematic diagram of another display interface provided in an embodiment of the present application;

[0092] Fig.18 A flowchart of another privacy protection method provided in an embodiment of the present application;

[0093] Fig.19 A flowchart of another privacy protection method provided in an embodiment of the present application;

[0094] Fig. 20 A schematic diagram of another display interface provided in an embodiment of the present application;

[0095] Fig.21 A schematic diagram of another display interface provided in an embodiment of the present application;

[0096] Fig. 22 is a structural schematic diagram of a privacy protection device provided in an embodiment of the present application;

[0097] Fig.23 It is a structural schematic diagram of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0098] In the embodiments of the present application, the following terms "first", "second", etc. are used for descriptive purposes only and are not to be understood as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Thus, a feature defined as "first" or "second" may explicitly or implicitly include one or more of the features. In the description of the present embodiment, unless otherwise specified, "plurality" means two or more.

[0099] First, some of the terms involved in the embodiments of the present application are explained to facilitate understanding by those skilled in the art.

[0100] 1. System functions, which can include the functions provided by the system APP in the electronic device and the capabilities of the hardware resources of the electronic device. The APP in the electronic device can usually be divided into system APP and third-party APP.

[0101] For example, system functions may include: calling the camera to take photos or record videos, calling the microphone to collect audio, calling the positioning device to determine the location information of the user's device, and calling the motion sensor to obtain the user's motion information, such as walking, cycling, and step count.

[0102] 2. Permissions describe the access rights of the APP to the resources of the electronic device; granting APP permissions can mean granting the application the right to access the resources of the electronic device. Among them, the resources of the electronic device include hardware resources and software resources. Hardware resources include sensors, detectors, memory, microphones, speakers, cameras, etc. on the electronic device; software resources mainly refer to data information, including user data information, such as user location information, voice, etc.

[0103] 3. System APP refers to the APP provided or developed by the manufacturer of the electronic device. The manufacturer of the electronic device may include the manufacturer, supplier, provider or operator of the electronic device. For example, the system APP in the electronic device may include phone, information, contacts, camera, recording, etc.; further, the system APP can be divided into the main system APP (such as phone, information and contacts) and other secondary system APPs that are natively carried by the system; the main system APPs that are natively carried have relatively mature standards and higher security.

[0104] Exemplarily, the phone APP can provide the function of making a call, reading the device call status and identification code, etc. The identification code may include the subscriber identification module (SIM) card number in the electronic device, the identity number (ID) of the electronic device, etc. The SMS APP can provide the function of reading SMS messages, sending SMS messages, etc. The contact APP can provide the function of reading contact information, editing (such as creating, modifying, deleting) contacts, etc. The camera APP can be used to provide shooting functions such as taking pictures and recording videos.

[0105] 4. Third-party APP refers to APP provided or developed by software application developers other than the manufacturer of the electronic device. For example, WeChat, Alipay, etc. Third-party APP can provide users with corresponding functions by calling one or more system functions in the electronic device. Third-party APP can also be called non-system APP.

[0106] For example, Alipay can provide users with functions such as shopping payment, payment collection, and ride code. WeChat can provide users with functions such as sending instant messages, voice calls, and video calls. In addition, WeChat can also provide users with functions such as shopping payment, payment collection, and ride code.

[0107] 5. Application interface (UI) refers to the media interface for interaction and information exchange between applications or operating systems and users, which can realize the conversion between the internal form of information and the form that users can receive. The application interface is the source code written in specific computer languages ​​such as Java and extensible markup language (XML). The interface source code is parsed and rendered on the electronic device and finally presented as content that users can recognize. The common form of application interface is the graphical application interface (GUI), which refers to the application interface related to computer operations displayed in a graphical way. It can be visual interface elements such as text, icons, buttons, menus, tabs, text boxes, dialog boxes, status bars, navigation bars, widgets, etc. displayed on the display screen of electronic devices.

[0108] 6. Foreground operation, background operation and shutdown

[0109] APP corresponds to three running states: foreground running, background running and closed. Among them, when the APP runs in the foreground of an electronic device, the electronic device can display the application interface of the APP on the display screen, and the user can interact with the APP through the controls in the application interface of the APP. The APP runs in the electronic device, but it does not belong to the above-mentioned situation of running in the foreground, that is, the APP runs in the background of the electronic device. The situation where the APP runs in the background of the electronic device may include the existence of the APP process in the electronic device, but the application interface of the APP is not displayed on the display screen. Since the application interface of the APP running in the background is not displayed on the display screen, the user usually cannot directly interact with the APP running in the background. Closed means that the APP is not running on the electronic device.

[0110] It should be understood that there may be one or more APPs running in the foreground of the electronic device, and there may also be one or more APPs running in the background of the electronic device. Among them, when there are one or more APPs running in the foreground of the electronic device, there may also be one or more APPs running in the background of the electronic device.

[0111] 7. Android system layer and trusted execution environment

[0112] The Android system layer provides a rich execution environment (REE) for electronic devices, that is, a running environment for various applications of electronic devices, such as the system apps and third-party apps listed in this application. The rich execution environment can also be called a normal execution environment or an untrusted execution environment, that is, the REE is open and extensible but not very secure.

[0113] Trusted execution environment (TEE), also known as the security side or security zone, is an area that requires authorization to access. TEE is an operating environment in which REE coexists with REE in electronic devices. It is isolated from REE through hardware support, has security capabilities, and can resist software attacks that conventional REE sides are susceptible to. TEE has its own operating space and defines strict protection measures. Therefore, it has a higher security level than REE and can protect assets in TEE, such as data and software, from software attacks and resist specific types of security threats.

[0114] REE+TEE architecture refers to an architecture that provides services for applications through the combination of TEE and REE. In other words, TEE and REE coexist in electronic devices. For example, TEE can implement an operating mechanism isolated from REE through hardware support. TEE has its own operating space, with a higher security level than REE, and can protect assets in TEE from software attacks. Only authorized security software can be executed in TEE, and it also protects the confidentiality of the resources and data of the security software. Compared with REE, TEE can better protect the security of data and resources due to its protection mechanisms such as isolation and permission control.

[0115] TA, or trusted application, is an application running in TEE that can provide security services for applications running outside TEE, such as password input, fingerprint recognition, face recognition, etc.

[0116] 8. Process and thread

[0117] A process is an application's running activity on a certain data set, and is the basic unit for resource allocation and scheduling in an operating system (such as the Android system). Each process occupies a piece of memory space, and an application runs on the operating system in the form of one or more processes to achieve corresponding functions.

[0118] A thread is an entity of a process. It is a basic unit that is smaller than a process and can run independently. A thread can share all resources owned by the process with other threads belonging to the same process. A thread can create and cancel another thread, and multiple threads in the same process can execute in parallel.

[0119] The above is a brief introduction to the terms involved in the embodiments of the present application, which will not be repeated below.

[0120] At present, when an electronic device opens an APP for the first time or during the operation of the application, the electronic device will display a permission request pop-up box, requesting the user to grant the APP permission to call one or more system functions, and after obtaining the user's consent, allowing the application to call the corresponding hardware or software resources in the electronic device to implement the corresponding functions. If the user's consent is not obtained, the application is not allowed to call and the required function cannot be implemented. By managing permissions at the user-oriented level, electronic devices can control the reasonable acquisition of permissions by applications and protect users' privacy data.

[0121] Figure 1 A process diagram of a permission management method.

[0122] For example, Figure 1As shown, in the scenario of shopping payment, WeChat APP needs to verify the user's identity to ensure the security of the payment account. If the user chooses face recognition for identity authentication, the APP needs to call the electronic device's camera capability (such as calling the camera) to collect the user's face image. At this time, if the electronic device does not have camera access rights enabled, the electronic device can display a corresponding permission request pop-up box to request the user to enable camera access rights; when the user agrees, in response to the user's operation, the electronic device can call the camera to collect the user's face image for identity authentication.

[0123] For example, Figure 1 As shown, in the scenario of going out to take a taxi, the map APP needs to call the location information determination capability of the electronic device (such as a positioning device) to obtain the user's location information, and then recommend the boarding location based on the user's location information. At this time, if the electronic device does not have the location information access permission turned on, the electronic device can display the corresponding permission request pop-up box and ask the user to turn on the location information access permission; when the user agrees, in response to the user's operation, the electronic device can call the positioning device to collect the user's location information to recommend the boarding location.

[0124] For example, Figure 1 As shown, recording apps usually need to call on the audio collection capabilities of electronic devices (such as calling on the microphone) to collect the user's audio data, but do not need the photo-taking function; then, users can manage the permissions for the recording app to call the microphone and camera in the "Settings" app as needed, such as selecting "Allow" to enable microphone access permissions, and selecting "Prohibit" to turn off camera access permissions.

[0125] Although multiple permissions involved in an APP can be managed according to the above method, or permissions involved in multiple APPs can be managed in batches in the "Settings" APP. However, some APPs may call the system functions of electronic devices to obtain the user's private data without the user's knowledge after obtaining one or more permissions. Some APPs may also secretly call the system functions of electronic devices to obtain the user's private data without being granted permissions, such as calling the camera for sneak shots; calling the microphone for eavesdropping. There are even some APPs that maliciously borrow APPs that have been authorized with certain permissions to obtain the user's highly sensitive data, such as other APPs to steal the location information obtained by the map APP, and then track the user by calling the precise location information. In this way, there may be a security risk that the user's private data will be leaked; in more serious cases, it may threaten the user's personal safety. It can be seen that managing APP permissions only through permission management can no longer protect the user's privacy and security, and a new privacy protection method that can highly protect the user's private data is urgently needed.

[0126] In view of this, the embodiment of the present application provides a privacy protection method, which controls the running state of the application and the power-on and power-off states of the driver by setting a privacy moment mode, thereby realizing the protection of user privacy. Unlike the permission management method that manages the APP through the permission switch, after the user enters the privacy moment mode provided by the present application, only some functions of several native system APPs with very high security are retained, other functions are disabled, and other processes or threads of other system APPs and all third-party APPs with lower security are closed (killed), so as to realize the state isolation of the high-security mode. At the same time, all other drivers except the preset drivers are powered off to realize hardware-level isolation; through the combination of these two aspects, the user's privacy data can be highly protected, so that the user has a sense of certainty that "privacy will not be leaked at all" after enabling the privacy moment mode.

[0127] In addition, due to the privacy protection method provided in the embodiment of the present application, the privacy moment mode can be entered and exited with one click, thereby achieving centralized control of all applications, functions and drivers in the electronic device, avoiding multiple operations by the user, simplifying the steps, and helping the user to quickly switch between the privacy moment mode and the non-privacy moment mode, thereby improving the user experience.

[0128] Here, the privacy moment mode is the name of an application management mode, which may also be called super privacy mode, high security mode, etc., and this application does not limit this. The "close" described in this application means that the APP is no longer running in the background and the corresponding keep-alive process or thread is killed. For example, for communication applications such as WeChat, usually even if you exit from multitasking, the listening process or thread will be retained in the background to listen for new messages; in this regard, the killing of other less secure system apps and all third-party apps' processes or threads described in this application includes killing the process or thread used to listen for new messages, so that in the privacy moment mode, no notification messages related to WeChat will be received and displayed at all.

[0129] Below, first combine the attached Figure 2 The scenarios provided in the embodiments of the present application are illustrated by way of example. Figure 2 Three scenarios to which the embodiments of the present application are applicable are shown.

[0130] Application scenario 1: Business meeting scenario

[0131] For example, Figure 2As shown in (a), in the scenario where the user is conducting a business meeting, since the content of the meeting involves commercial secrets, if the user uses the permission management method involved in the relevant technology to restrict the permissions of the electronic device 100 carried, it may work for some apps, but it cannot block some malicious eavesdropping apps. In this regard, the user can enable the privacy moment mode provided by the embodiment of the present application with one click; after entering the privacy moment mode, the electronic device 100 only retains the basic functions of several system apps, turns off other functions, and turns off other less secure system apps and all third-party apps to prevent privacy data leakage; including prohibiting the use of the microphone to collect audio data by driving the power off to prevent the leakage of meeting conversation content and ensure high privacy security.

[0132] Application scenario 2: Viewing non-public information

[0133] For example, Figure 2 As shown in (b), in the scenario where the user is viewing some non-public information (such as documents, paintings or images), since the content of the information involves confidentiality or personal privacy, if the user uses the permission management method involved in the relevant technology to restrict the permissions of the electronic device 100 carried, it may work for some apps, but it cannot block some malicious sneak shots. In this regard, the user can enable the privacy moment mode provided in the embodiment of the present application with one click, retaining only the basic functions of a few system apps, turning off other functions, and turning off other less secure system apps and all third-party apps to prevent privacy data leakage; including prohibiting the use of the camera to capture images by driving the power off to prevent the leakage of non-public information being viewed, and achieve high privacy security.

[0134] Application scenario three: individual solitude scenario

[0135] For example, Figure 2As shown in (c), in the scenario where the user is meditating alone, since the user needs time to completely relax himself, at this time, for the electronic device carried by the user, if it is turned off, important calls or text messages may be missed; if permission management is used, the user needs to modify it in the "Settings" APP, and the operation steps are cumbersome and time-consuming. In addition, when the user is done relaxing, if he wants to restore the permissions to the state before the modification, he needs to perform cumbersome steps and modify it back, which also wastes time. Moreover, the user may not be able to remember what content has been modified, and the whole process is very inefficient for the user, and the experience is very bad. In this regard, the user can enable the privacy moment mode provided in the embodiment of the present application, and only retain the basic functions of several native system APPs, such as retaining the voice call function of the phone APP, and the receiving and sending functions of information. In this way, it can ensure that the user enjoys the time to relax himself, and will not be anxious because of the worry of missing important calls and messages; at the same time, it can also enter or exit the privacy moment mode provided by the present application with one key, which is simple and fast to operate; importantly, when the user exits the privacy moment mode, the electronic device can also restore the permissions and functions before entering the privacy moment mode, improving the user's experience effect.

[0136] It should be understood that the above are only examples of three scenarios. The privacy protection method provided in the embodiments of the present application can also be applied to other scenarios, and the present application does not impose any restrictions on this.

[0137] Secondly, combined Figure 3 and Figure 4 The hardware system and software system of the electronic device applicable to the present application are described. Figure 3 A hardware system of an electronic device suitable for the present application is shown.

[0138] Exemplarily, the electronic device in the embodiments of the present application may be a mobile phone, a smart screen, a tablet computer, a wearable electronic device, an in-vehicle electronic device, an augmented reality (AR) device, a virtual reality (VR) device, a laptop computer, an ultra-mobile personal computer (UMPC), a netbook, a personal digital assistant (PDA), a projector, etc. The embodiments of the present application do not impose any restrictions on the specific types of electronic devices.

[0139] like Figure 3As shown, the electronic device 100 may include: a processor 110, an external memory interface 120, an internal memory 121, a universal serial bus (USB) interface 130, a charging management module 140, a power management module 141, a battery 142, an antenna 1, an antenna 2, a mobile communication module 150, a wireless communication module 160, an audio module 170, a speaker 170A, a receiver 170B, a microphone 170C, an earphone interface 170D, a sensor module 180, a button 190, a motor 191, an indicator 192, a camera 193, a display screen 194, and a subscriber identification module (SIM) card interface 195, etc. The sensor module 180 may include a pressure sensor 180A, a gyroscope sensor 180B, an air pressure sensor 180C, a magnetic sensor 180D, an acceleration sensor 180E, a distance sensor 180F, a proximity light sensor 180G, a fingerprint sensor 180H, a temperature sensor 180J, a touch sensor 180K, an ambient light sensor 180L, a bone conduction sensor 180M, etc.

[0140] It should be noted that Figure 3 The structure shown does not constitute a specific limitation on the electronic device 100. In other embodiments of the present application, the electronic device 100 may include Figure 3 More or fewer components than those shown, or the electronic device 100 may include Figure 3 Combinations of some of the components shown, or the electronic device 100 may include Figure 3 Subassemblies of some of the components shown. Figure 3 The components shown may be implemented in hardware, software, or a combination of software and hardware.

[0141] Exemplarily, the processor 110 may include one or more processing units. For example, the processor 110 may include at least one of the following processing units: an application processor (AP), a modem processor, a graphics processing unit (GPU), an image signal processor (ISP), a controller, a video codec, a digital signal processor (DSP), a baseband processor, and a neural-network processing unit (NPU). Among them, different processing units may be independent devices or integrated devices. The controller may generate an operation control signal according to the instruction opcode and the timing signal to complete the control of fetching and executing instructions.

[0142] The processor 110 may also be provided with a memory for storing instructions and data. In some embodiments, the memory in the processor 110 is a cache memory. The memory may store instructions or data that the processor 110 has just used or cyclically used. If the processor 110 needs to use the instruction or data again, it may be directly called from the memory. This avoids repeated access, reduces the waiting time of the processor 110, and thus improves the efficiency of the system.

[0143] In some embodiments, the processor 110 may include one or more interfaces. For example, the processor 110 may include at least one of the following interfaces: an inter-integrated circuit (I2C) interface, an inter-integrated circuit sound (I2S) interface, a pulse code modulation (PCM) interface, a universal asynchronous receiver / transmitter (UART) interface, a mobile industry processor interface (MIPI), a general-purpose input / output (GPIO) interface, a SIM interface, and a USB interface.

[0144] Illustratively, in an embodiment of the present application, the processor 110 may execute the privacy protection method provided in an embodiment of the present application.

[0145] Figure 3The connection relationship between the modules shown is only a schematic illustration and does not constitute a limitation on the connection relationship between the modules of the electronic device 100. Optionally, the modules of the electronic device 100 may also adopt a combination of multiple connection modes in the above embodiments.

[0146] The wireless communication function of the electronic device 100 can be implemented through components such as the antenna 1, the antenna 2, the mobile communication module 150, the wireless communication module 160, the modem processor, and the baseband processor.

[0147] Antenna 1 and antenna 2 are used to transmit and receive electromagnetic wave signals. Each antenna in electronic device 100 can be used to cover a single or multiple communication frequency bands. Different antennas can also be reused to improve the utilization of antennas. For example, antenna 1 can be reused as a diversity antenna for a wireless local area network. In some other embodiments, the antenna can be used in combination with a tuning switch.

[0148] In some embodiments, the antenna 1 of the electronic device 100 is coupled to the mobile communication module 150, and the antenna 2 is coupled to the wireless communication module 160, so that the electronic device 100 can communicate with the network and other devices through wireless communication technology. The above-mentioned mobile communication module 150 can provide solutions for wireless communications including 2G / 3G / 4G / 5G applied to the electronic device 100. The mobile communication module 150 may include at least one filter, a switch, a power amplifier, a low noise amplifier (LNA), etc. The mobile communication module 150 can receive electromagnetic waves from the antenna 1, and filter, amplify, etc. the received electromagnetic waves, and transmit them to the modulation and demodulation processor for demodulation.

[0149] The mobile communication module 150 can also amplify the signal modulated by the modem processor and convert it into electromagnetic waves for radiation through the antenna 1. In some embodiments, at least some functional modules of the mobile communication module 150 can be set in the processor 110. In some embodiments, at least some functional modules of the mobile communication module 150 can be set in the same device as at least some modules of the processor 110.

[0150] The wireless communication module 160 can provide wireless communication solutions for application in the electronic device 100, including wireless local area networks (WLAN) (such as wireless fidelity (Wi-Fi) networks), Bluetooth (BT), global navigation satellite system (GNSS), frequency modulation (FM), near field communication technology (NFC), infrared technology (IR), etc.

[0151] The wireless communication module 160 may be one or more devices integrating at least one communication processing module. The wireless communication module 160 receives electromagnetic waves via the antenna 2, modulates the electromagnetic wave signal and performs filtering, and sends the processed signal to the processor 110. The wireless communication module 160 may also receive a signal to be sent from the processor 110, modulate the signal, amplify the signal, and convert it into an electromagnetic wave for radiation via the antenna 2.

[0152] Of course, the wireless communication module 160 can also support the electronic device 100 for voice communication. For example, the electronic device 100 can access the Wi-Fi network through the wireless communication module 160, and then use any application that can provide voice communication services to interact with other devices to provide voice communication services for users. For example, the application that can provide voice communication services can be an instant messaging application.

[0153] The electronic device 100 can realize the display function through the GPU, the display screen 194 and the application processor. The GPU is a microprocessor for image processing, which connects the display screen 194 and the application processor. The GPU is used to perform mathematical and geometric calculations for graphics rendering. The processor 110 may include one or more GPUs, which execute program instructions to generate or change display information.

[0154] Display screen 194 may be used to display images or videos.

[0155] Optionally, the display screen 194 can be used to display images or videos. The display screen 194 includes a display panel. The display panel can be a liquid crystal display (LCD), an organic light-emitting diode (OLED), an active-matrix organic light-emitting diode (AMOLED), a flexible light-emitting diode (FLED), a mini light-emitting diode (Mini LED), a micro light-emitting diode (Micro LED), a micro OLED (Micro OLED) or a quantum dot light emitting diode (QLED). In some embodiments, the electronic device 100 may include 1 or N display screens 194, where N is a positive integer greater than 1.

[0156] Exemplarily, the electronic device 100 can implement a shooting function through an ISP, a camera 193, a video codec, a GPU, a display screen 194, and an application processor. The ISP is used to process data fed back by the camera 193. In some embodiments, the ISP can be set in the camera 193.

[0157] Exemplarily, the camera 193 (also referred to as a lens) is used to capture static images or videos. It can be triggered to start by an application program instruction to implement a photo function, such as taking pictures to obtain images of any scene.

[0158] Exemplarily, in the embodiment of the present application, 1 or N cameras 193 may be included, where N is a positive integer greater than 1. When the electronic device includes N cameras 193, the N cameras include one or more front cameras (cameras on the same side as the display screen).

[0159] The electronic device 100 can implement audio functions such as music playing and recording through the audio module 170, the speaker 170A, the receiver (ie, the handset) 170B, the microphone 170C, the headphone jack 170D, and the application processor.

[0160] The audio module 170 is used to convert digital audio signals into analog audio signals for output, and is also used to convert analog audio inputs into digital audio signals. The audio module 170 can also be used to encode and decode audio signals. In some embodiments, the audio module 170 can be arranged in the processor 110, or some functional modules of the audio module 170 can be arranged in the processor 110. The speaker 170A, also known as the "speaker", is used to convert audio electrical signals into sound signals. The receiver 170B, also known as the "earpiece", is used to convert audio electrical signals into sound signals. The microphone 170C, also known as the "microphone" or "microphone", is used to convert sound signals into electrical signals. The headphone jack 170D is used to connect wired headphones. The headphone jack 170D can be a USB interface 130, or it can be a 3.5mm open mobile terminal platform (OMTP) standard interface, or a cellular telecommunications industry association of the USA (CTIA) standard interface.

[0161] For example, the fingerprint sensor 180H is used to collect fingerprints. The electronic device 100 can use the collected fingerprint characteristics to implement functions such as unlocking, accessing application locks, taking photos, and answering calls.

[0162] Exemplarily, the touch sensor 180K is also referred to as a touch control device. The touch sensor 180K may be disposed on the display screen 194, and the touch sensor 180K and the display screen 194 form a touch screen, which is also referred to as a touch control screen. The touch sensor 180K is used to detect a touch operation acting on or near it. The touch sensor 180K may pass the detected touch operation to the application processor to determine the type of touch event. A visual output related to the touch operation may be provided through the display screen 194. In other embodiments, the touch sensor 180K may also be disposed on the surface of the electronic device 100, and may be disposed at a different position from the display screen 194.

[0163] In addition, an operating system is running on the above hardware. The operating system of the operating system layer can be any one or more computer operating systems that implement business processing through processes. The operating system of the electronic device 100 can include but is not limited to The embodiment of the present application is not limited to the operating system such as Harmony. Application programs can be installed and run on the operating system.

[0164] The operating system of the electronic device 100 may adopt a layered architecture, an event-driven architecture, a micro-core architecture, a micro-service architecture, or a cloud architecture. The embodiment of the present application takes the Android system of the layered architecture as an example to exemplify the software structure of the electronic device 100.

[0165] Figure 4 It is a software structure diagram of the electronic device 100 of the embodiment of the present application. The framework includes the Android system layer (REE) and TEE, and the REE and TEE can interact with each other.

[0166] The layered architecture divides the software into several layers, each with clear roles and division of labor. The layers communicate with each other through software interfaces. In some embodiments, the Android system can be divided into three layers, from top to bottom, namely, the application layer (applications), the application framework layer (application framework), and the kernel layer (kernel); at the same time, under the kernel layer, there is also a hardware layer, which can act on both REE and TEE.

[0167] like Figure 4 As shown in the figure, on the REE side, the application layer can include a series of application packages. Applications (also referred to as apps) can be divided into system applications and third-party applications. For example, system applications can include: phone, information, contacts, camera, recording, sports health, notification center and other applications; they can also include gallery, music, video, reading and device search ( Figure 4 Third-party applications may include: WeChat, Alipay, maps, singing, etc. The present application embodiment does not impose any restrictions on this.

[0168] The application layer may also include a system application interface (System UI). In addition, it may also include a privacy moment application interface provided in an embodiment of the present application; the privacy moment application interface is used as a medium interface for information exchange between an electronic device and a user in the privacy moment mode, to achieve conversion between the internal form of the information and the form that the user can receive. For example, the privacy moment application interface may specifically include a privacy moment desktop and a privacy moment lock screen. The privacy moment desktop and the privacy moment lock screen may present text elements including "privacy moment" to intuitively prompt the user that the current electronic device is in the privacy moment mode, so as to avoid the user confusing the privacy moment mode with the normal state; the normal state refers to other situations where the electronic device is turned on but not in the privacy moment mode.

[0169] The application framework layer provides application programming interface (API) and programming framework for the applications in the application layer. The application framework layer includes some predefined functions. Figure 4 As shown, the application framework layer may include an application permission manager, a notification manager, a positioning service, a camera framework, an audio framework, an application background keep-alive service, and a privacy moment service module, etc.

[0170] The Application Permission Manager is used to manage application permissions, allowing applications to call one or more system functions.

[0171] The notification manager enables applications to display notification information in the status bar. It can be used to convey notification-type messages and can disappear automatically after a short stay without user interaction. For example, the notification manager is used to notify the completion of downloads, message reminders, etc. The notification manager can also be a notification that appears in the system's top status bar in the form of an icon or scroll bar text, such as notifications from applications running in the background. The notification manager can also be a notification that appears on the screen in the form of a dialog window, such as a text message in the status bar, a beep, an electronic device vibrating, an indicator light flashing, etc.

[0172] The location service (location kit) is used to perform positioning using a hybrid positioning mode of multiple approaches such as the global positioning system (GPS), Beidou positioning system, Wi-Fi, and base stations, giving applications the ability to quickly obtain user location information. In some embodiments, when a hybrid positioning mode is used for positioning, multiple levels of positioning accuracy can be provided based on a hybrid approach. For example, rough positioning can be performed based on GPS and Beidou positioning systems to obtain fuzzy user location information; low-precision positioning can be performed based on GPS, Beidou positioning system, and Wi-Fi to obtain relatively clear user location information; and high-precision positioning can be performed based on GPS, Beidou positioning system, Wi-Fi, and base stations to obtain accurate user location information.

[0173] The camera framework is used to manage the camera. For example, it can obtain the camera's parameters and determine the camera's working status (foreground running, background running, or closed).

[0174] The audio framework includes voice call service and recording service. The voice call service is used to provide call functions for electronic devices, such as management of call status (connected or hung up); the recording service is used to provide recording functions for electronic devices.

[0175] The application background keep-alive service is used to manage the status of each application running in the background. For the sake of experience and performance, the Android system will continue to monitor its corresponding process or thread when the application returns to the background running state, so as to start the application more quickly next time. In this way, even if the user closes an application on the interface and switches to another application, the process of the so-called closed application may still exist in the memory.

[0176] like Figure 4 As shown, the application framework layer can also include the privacy moment service module provided by this application; the privacy moment service module can centrally manage other projects in the application framework layer, such as the notification manager, positioning service, camera framework, audio framework, and application background keep-alive service. For example, in the privacy moment mode, the notification manager can be instructed to hide previous notification messages, and the positioning service, camera framework, recording service in the audio framework, and application background keep-alive service can all be instructed to stop service, but the voice call service in the audio framework can continue to run.

[0177] The kernel layer is the layer between hardware and software. The kernel layer contains at least GPS / Beidou positioning driver, WLAN driver, Bluetooth driver, camera driver, audio driver, USB debugging, etc. Among them, the audio driver can be specifically divided into microphone voice call driver and microphone recording driver. The voice call service corresponds to the microphone voice call driver, and the recording service corresponds to the microphone recording driver. In other words, the voice call service needs to call the microphone voice call driver to implement the voice call function, and the recording service needs to call the microphone recording driver to implement the recording function.

[0178] like Figure 4 As shown, on the TEE side, a privacy moment management module and an identity authentication module are also running. The identity authentication module is used to verify the identity of the owner. When the verification is successful, the privacy moment state (entering the privacy moment mode and exiting the privacy moment mode) can be switched. The privacy moment management module provided in this application can be used to interact with the privacy moment service module on the REE side; in addition, the privacy moment management module can also be used to manage the whitelist and the power on and off of the driver on the REE side. Among them, the whitelist indicates the whitelist data involved in the preset application that can be run in the privacy moment mode; the driver power on and off refers to the power on and off operations of the driver involved on the REE side.

[0179] The hardware layer also includes a specific secure storage space. In an embodiment of the present application, the secure storage module is used to store the identifier of the privacy moment mode, and the identifier of the privacy moment mode includes an identifier for entering the privacy moment mode and an identifier for exiting the privacy moment mode.

[0180] The execution subject of the privacy protection method provided in the embodiment of the present application can be the above-mentioned electronic device, or it can be a functional module and / or functional entity in the electronic device that can implement the privacy protection method, and the present application scheme can be implemented by hardware and / or software, which can be determined according to actual use requirements, and the embodiment of the present application is not limited. The following takes an electronic device as an example, and combines the accompanying drawings to exemplarily illustrate the privacy protection method provided in the embodiment of the present application.

[0181] For ease of understanding, the following embodiments of the present application will be described in detail with Figure 3 and Figure 4 Taking the mobile phone with the shown structure as an example, the privacy protection method provided in the embodiment of the present application is specifically explained in combination with the accompanying drawings and application scenarios.

[0182] Figure 5 A flowchart of a privacy protection method provided in an embodiment of the present application is shown below. Figure 5 As shown, the method 50 includes S51 to S54, which are described in detail below.

[0183] It should be noted that the electronic device provided in this application may correspond to a privacy moment mode and a non-privacy moment mode (normal mode); in the privacy moment mode, some applications and some functions of the electronic device may be restricted and unavailable, and the normal mode is a state other than the privacy moment mode. Then, before executing the privacy protection method provided in this application, the electronic device may be in normal mode, that is, a state in which various applications and functions can be used normally. For example, the electronic device receives multiple instructions from the user, starts multiple applications in multiple system apps and third-party apps, turns on the positioning function, and uses the WiFi network to download music files, etc.

[0184] S51: Receive a first operation, wherein the first operation is used to instruct the electronic device to enter a private moment mode.

[0185] Exemplarily, the first operation may be a click operation or a double-click operation of a knuckle. Of course, it may also be a drag operation, a voice operation or other operations, and the embodiments of the present application do not impose any limitations on this.

[0186] For example, Figure 7 As shown in (a) of FIG. 1 , the electronic device obtains a user's double-click operation of a finger joint on a hot zone P around the camera. The hot zone is used to indicate a preset touch area around the camera. The size and position of the preset touch area can be set as needed, for example, Figure 7 As shown in (a), it can be set in a fan shape, or it can be Figure 7In addition, when the camera is located at other positions of the display screen, the hot zone can change with the position of the camera. For example, when the camera is located at the center of the top of the display screen, the hot zone can be as shown in (b). Figure 8 As shown in (a) in FIG. 1 , it is used to indicate the upper area of ​​the display screen, or it can also be as shown in FIG. Figure 8 As shown in (b), it is set to be an elliptical area surrounding the camera, and there is no limitation in this embodiment of the present application.

[0187] Optionally, the electronic device may display a fourth interface, which includes a first control (a control for indicating entering the private moment mode), and the first operation is a first operation performed by the user on the first control.

[0188] For example, Fig. 9 As shown in (a) of FIG. 1 , the electronic device displays a desktop 201; with respect to the desktop 201, the electronic device receives a user's sliding operation, such as Fig. 9 As shown in (b) in FIG. 1 ; after receiving the sliding operation, the electronic device displays as shown in FIG. Fig. 9 The display interface 202 shown in (c) of FIG. 1 includes a drop-down menu, and the drop-down menu includes multiple switch controls, such as a switch control 203 corresponding to the privacy moment mode. At this time, the display interface 202 is equivalent to the fourth interface, and the switch control 203 is equivalent to the first control; the user clicks on the switch control 203, such as Fig. 9 As shown in (d) in the figure; after the electronic device receives the click operation, it is equivalent to receiving a request to enter the privacy moment mode.

[0189] For example, in combination Figure 8 or Fig. 9 In order to avoid user's mis-triggering, the electronic device may also display the following information after the user double-clicks the hot zone P around the camera or after the user clicks the switch control 203: Fig.10 The prompt pop-up box 301 shown in (a) of FIG. 1 may include an introduction to the private moment mode, as well as an OK button 302 and a Cancel button; the user clicks the OK button 302, such as Fig.10 As shown in (b) of FIG. 3 , the private moment mode can be triggered. At this time, the prompt pop-up box 301 is equivalent to the fourth interface, and the confirmation button 302 is equivalent to the first control; after the electronic device receives the click operation on the confirmation button 302, it is equivalent to receiving a request to enter the private moment mode.

[0190] It should be understood that entering the privacy moment mode may also be referred to as starting the privacy moment mode or activating the privacy moment mode.

[0191] S52, in response to the first operation, enter the TEE environment, display the interface for entering the privacy moment, and authenticate the user. If the authentication is successful, execute S53, if the authentication fails, end the process.

[0192] Optionally, the user's identity can be authenticated by means of a lock screen password, fingerprint recognition, or face recognition. Of course, identity authentication can also be performed in other ways, and the present application embodiment does not impose any restrictions on this.

[0193] For example, when entering the TEE environment, the following is displayed: Fig.11 The display interface 401 shown in (a) in FIG. 1 indicates that the user can enter the private moment mode only after entering the lock screen password; when the user needs to enter the private moment mode, the user can click on the control, such as Fig.11 As shown in (b) in .

[0194] For example, when entering the TEE environment, the following is displayed: Fig.12 The display interface 501 shown in (a) in the figure indicates that the user can enter the private moment mode only after entering the fingerprint, and the display interface 501 also includes a fingerprint control 502; when the user needs to enter the private moment mode, the user can touch the fingerprint control 502, such as Fig.12 As shown in (b) in .

[0195] For example, when entering the TEE environment, the following is displayed: Fig.13 The display interface 601 shown in (a) in FIG. 1 indicates that the user can enter the private moment mode only after performing face recognition; when the user needs to enter the private moment mode, the user can point his face to the front camera of the electronic device, and the electronic device can display the following Fig.13 The display interface 602 shown in (b) in FIG.

[0196] In an embodiment of the present application, when the privacy moment mode is enabled, the identity of the owner of the device is verified to prevent other users from making modifications that would cause the electronic device to be unable to be used normally.

[0197] It should be noted that the interface for entering the privacy moment is rendered in the TEE environment, which is different from the rendering effect of the Android system interface. It can indicate to the user that they are performing identity authentication in a high-security environment, thereby improving the user security experience.

[0198] Of course, in response to the first operation, the privacy moment mode may be entered directly without identity authentication, and this is not limited in the embodiments of the present application.

[0199] S53: If the verification is successful, the private moment mode is entered and a private moment desktop is displayed. The private moment desktop only includes icons of preset applications and does not include icons of other applications.

[0200] It should be understood that after successful verification, the privacy moment management module can return the verification result to the privacy moment service module, and the privacy moment service can instruct the electronic device to display the privacy moment desktop, indicating that the user has entered the privacy moment mode.

[0201] At this time, in the TEE environment, the privacy moment status can be switched and the privacy moment status identifier can be modified to enter the privacy moment mode status. For example, the privacy moment status identifier int can be modified from 0 to 1, 0 is used to indicate the status of exiting the privacy moment mode, and 1 is used to indicate the status of entering the privacy moment mode. After the modification, the identification information can be sent back to the privacy moment service module, and the modified identification can be stored in the secure storage chip.

[0202] Optionally, the preset application may include one or more. The specific application displayed as the preset application may be set and modified as needed, and the embodiment of the present application does not impose any limitation on this.

[0203] It should be understood that the privacy moment desktop can also be called the first desktop. The privacy moment desktop only displays icons of preset applications and hides all icons other than the preset applications. The non-privacy moment desktop can display icons of all applications including icons of preset applications.

[0204] S54: The electronic device closes other applications except the preset application, and disables other functions except the preset functions corresponding to the preset application; and / or powers off other drivers except the preset driver.

[0205] It should be understood that the preset application is an application available in the privacy moment mode, the preset function corresponding to the preset application refers to the function that the preset application can provide in the privacy moment mode, and the preset driver is used to indicate the driver in the kernel layer used when implementing the corresponding preset function in the privacy moment mode, such as Figure 4 In this way, when switching modes, if the preset application is running, the privacy moment service module can instruct the application to maintain the original process or thread after entering the privacy moment mode; and / or, continue to implement the corresponding preset function; and / or, continue to call the corresponding preset driver to implement the corresponding preset function.

[0206] For applications other than the preset applications, when switching modes, whether they are running in the foreground or the background, the privacy moment service module can instruct them to be closed. Since the application background keep-alive service can keep some applications in the memory, the electronic device can also instruct the application background keep-alive service to stop working through the privacy moment service module, and close (or kill) other applications other than the preset applications. In addition, in order to prevent the application from starting up automatically later, the privacy moment service module can also control the application background keep-alive service to prohibit the self-start of applications other than the preset applications. This can prevent malicious theft of privacy data through the background keep-alive service.

[0207] It should be understood that disabling other functions except the preset functions corresponding to the preset application includes disabling other functions of the preset application except the preset functions, and disabling other system functions. For example, when the preset application includes a phone APP, the phone APP usually corresponds to a voice call function, a recording function, etc. The preset function can be set to a voice call function. In this way, in the privacy moment mode, other functions except the voice call function will be disabled, including disabling the recording function. For another example, the system functions include the camera's photo or video recording functions and the positioning function. Accordingly, disabling the system functions includes disabling the camera's photo and video recording functions and disabling the positioning function. In this way, after entering the privacy moment mode, when the user clicks the icon of the preset application included on the privacy moment desktop, the electronic device can respond, that is, the preset application can run to implement the corresponding preset function. In addition, other functions are unavailable.

[0208] In the embodiment of the present application, powering off other drivers except the preset driver means disconnecting the power supply of other drivers, and the powered-off drivers will not be able to call the corresponding hardware in the hardware layer to work. In this way, it is equivalent to a secure isolation from the hardware layer, and even if it is damaged or invaded, it cannot drive the hardware to obtain the original data.

[0209] For example, after entering the private moment mode, the preset application may include at least one of the three system apps, which may be a contact app, a phone app, and a short message app. The preset function corresponding to the phone app is a voice call function (including incoming and outgoing calls), and the preset functions corresponding to the short message app include a message receiving function and a message sending function.

[0210] Among them, the caller and information contact party can be limited to the phone numbers recorded in the contact APP and the government's yellow page numbers (such as 110, 120 or local police station, etc.). Other phone numbers are automatically blocked, and replies cannot be connected. Other messages can also be automatically blocked. It should be understood that the phone numbers and government yellow page numbers recorded in the contact APP can be managed as whitelist data in the whitelist management module in the TEE environment. When a call is incoming, outgoing, or a message is received or sent, the privacy moment service module can filter based on the whitelist data provided by the whitelist management module.

[0211] Based on the above preset applications and preset functions, after entering the private moment mode, Fig.14 As shown, the electronic device can display a private moment desktop 701, which includes an icon 702 of a contact APP, an icon 703 of a phone APP, and an icon 704 of a short message APP.

[0212] For the contact APP, in response to the user's click operation on icon 702, the electronic device can display the contact list (including name and phone number, etc.); for the phone APP, in response to the user's click operation on icon 703, the electronic device can display the call record, but cannot accept other phone calls outside the white list, nor can it make calls to other phones outside the white list; for the short message APP, in response to the user's click operation on icon 704, the electronic device can display the message record, but cannot receive other messages outside the white list, nor can it send messages to other contacts outside the white list. Other functions such as positioning, recording, network data connection, etc. are not available.

[0213] In addition, the default driver for the voice call function of the phone APP is the microphone voice call driver. At this time, power-off management is performed on other drivers except the microphone voice call driver, so other drivers except the microphone voice call driver will not work. For example, the Bluetooth driver is powered off and Bluetooth is unavailable; the WLAN driver is powered off and WLAN is unavailable; the GPS / Beidou positioning driver is powered off and GPS / Beidou positioning is unavailable; the camera driver is powered off and the corresponding camera is unavailable; the USB debugging is powered off and USB debugging is unavailable, etc.

[0214] It should be understood that usually phone apps also include a recording function. However, during a call in the privacy moment mode, the recording function is prohibited, that is, the controls corresponding to the recording function cannot be operated by the user, or the controls corresponding to the recording function are hidden and not displayed; accordingly, the microphone recording driver is powered off and the corresponding microphone is unavailable.

[0215] It should be understood that since system APPs are more secure than third-party APPs, the above three system APPs that can meet the basic needs of users can be selected from the system APPs as preset applications.

[0216] The program works in private moment mode.

[0217] It should be understood that the above is only an example of a preset application, preset function and preset driver, which can be set and modified as needed, and the embodiments of the present application do not impose any limitations on this.

[0218] Optionally, in combination with the above examples, Fig.18 As shown, based on the above, the privacy protection method provided in the embodiment of the present application may also include the following S61 to S66.

[0219] S61. After receiving a first operation, in response to a first incoming call from a first contact included in a contact application, notify the first incoming call.

[0220] S62: When receiving a second incoming call from a second contact, do not notify the second incoming call, wherein the contact application does not include the second contact.

[0221] It should be understood that after entering the privacy moment mode, since the preset functions of the preset applications can be realized, such as the incoming voice call function of the phone APP, accordingly, this application can normally notify the incoming call when receiving the incoming call from the contacts in the whitelist, but no notification will be made for the incoming calls from the contacts outside the whitelist.

[0222] S63: In response to receiving the first short message from the first contact, display a notification message corresponding to the first short message.

[0223] S64: When a second short message from a second contact is received, a notification message corresponding to the second short message is not displayed.

[0224] It should be understood that after entering the privacy moment mode, since the preset functions of the preset applications can be realized, such as the receiving function of the short message APP, accordingly, the present application can normally notify the short message when receiving the short message from the contacts in the whitelist, while no short message from the contacts outside the whitelist will be displayed.

[0225] S65. Based on S61, after notifying the first incoming call, receiving a second operation.

[0226] S66. In response to the second operation, answer the first incoming call.

[0227] Here, during the call of the first incoming call, the recording function is disabled.

[0228] Among them, the first incoming call can be notified in the form of an incoming call notification interface, and the caller's note name, telephone number, and answering control can be displayed on the call notification interface; when a second operation on the answering control is received, such as a click operation, the first incoming call can be answered, so that the user can have a normal conversation with the caller in the privacy moment mode.

[0229] After the call is connected, a voice call interface can be displayed. At the same time, in the voice call interface, the control for indicating recording is displayed as a prohibited state, or the control for indicating recording is not displayed. In this way, the user can be reminded that the first incoming call cannot be recorded in the privacy moment mode.

[0230] Optionally, when no operation on the privacy moment desktop is received within a preset time period, the privacy moment lock screen interface can be displayed.

[0231] The privacy moment lock screen interface is used to implement the screen lock function in the privacy moment mode. When the screen of the electronic device is in the lock screen state, the user cannot operate the preset application. Fig.15 As shown, when the screen of the electronic device is in the locked state, the privacy moment lock screen interface 705 will be displayed. The user can enter a password (such as a number, track, fingerprint, etc.) in the privacy moment lock screen interface 705 for identity authentication. If the electronic device verifies that the password entered by the user is correct, it switches from the locked state to the unlocked state. Fig.14 The privacy moment desktop 701 shown allows the user to operate the preset application.

[0232] The privacy protection method provided in the embodiment of the present application controls the running state of the application and the power-on and power-off states of the driver by setting a privacy moment mode, thereby realizing the protection of user privacy. Unlike the permission management method that manages the APP through the permission switch, after the user enters the privacy moment mode provided by the present application, only some functions of several native system APPs with very high security are retained, other functions are disabled, and other processes or threads of other system APPs with lower security and all third-party APPs are closed (killed), so as to realize the state isolation of the high-security mode. At the same time, other drivers other than the preset drivers are also powered off to realize hardware-level isolation. By combining these two aspects, the user's privacy data can be highly protected, so that the user has a sense of certainty that "privacy will not be leaked at all" after enabling the privacy moment mode.

[0233] Alternatively, if Figure 6 As shown, based on the above, the privacy protection method provided in the embodiment of the present application may also include the following S55 to S58.

[0234] S55. Receive a fifth operation, where the fifth operation is used to instruct the electronic device to exit the privacy moment mode.

[0235] Exemplarily, the fifth operation may also be as follows: Figure 7 and Figure 8 For the operations shown, please refer to the above description and will not be repeated here.

[0236] Optionally, the electronic device displays a privacy moment desktop, which includes a second control (a control for indicating exiting the privacy moment mode), and the fifth operation is a fifth operation performed by the user on the second control.

[0237] For example, Fig.16 As shown in (a) of FIG. 1 , the electronic device displays a privacy moment desktop 701 in the privacy moment mode; the privacy moment desktop includes a second control (or exit control) 705; when the user needs to exit the privacy moment mode, the user can click on the second control, such as Fig.16 As shown in (b) in FIG. 1 , after the electronic device receives the click operation, it is equivalent to receiving a request to exit the private moment mode.

[0238] Optionally, the electronic device may display a fifth interface, the fifth interface including a second control, and the fifth operation is a fifth operation performed by the user on the second control.

[0239] For example, in combination Fig.16 , in order to avoid user's accidental triggering, the electronic device can also display Fig.17 The prompt pop-up box 801 shown in (a) in the figure may include text content of "Do you want to exit the private moment", as well as a confirmation button 802 and a cancel button; the user clicks the confirmation button 802, such as Fig.17 As shown in (b) of FIG. 8 , the exit from the privacy moment mode can be triggered. At this time, the prompt pop-up box 801 is equivalent to the fifth interface, and the confirmation button 802 is equivalent to the second control. After the electronic device receives the click operation on the confirmation button 802, it is equivalent to receiving a request to exit the privacy moment mode.

[0240] S56, in response to the fifth operation, enter the TEE environment, display the exit privacy moment interface, and authenticate the user. If the authentication is successful, execute S57, if the authentication fails, end the process.

[0241] Optionally, the user can be authenticated by means of a lock screen password, fingerprint recognition, or face recognition. Of course, identity authentication can also be performed by other means, and the present application embodiment does not impose any restrictions on this. For a detailed description, please refer to the above Figures 11 to 13 The description will not be repeated here.

[0242] In an embodiment of the present application, when exiting the privacy moment mode, the identity of the owner user is verified again, which can prevent other users from modifying, eavesdropping on, and stealing private data in the electronic device.

[0243] It should be noted that the exit privacy moment interface is also rendered in the TEE environment, which is different from the Android system interface rendering effect. It can prompt users that they are performing identity authentication in a high-security environment, thereby improving the user security experience.

[0244] Of course, in response to the fifth operation, the privacy moment mode may be exited directly without identity authentication, and this embodiment of the present application does not limit this.

[0245] S57. The verification is successful, and the electronic device exits the private moment mode and displays the desktop before entering the private moment mode.

[0246] It should be understood that after successful verification, the privacy moment management module can return the verification result to the privacy moment service module, and the privacy moment service can instruct the electronic device to display the stored desktop before entering the privacy moment mode, indicating that the user has exited the privacy moment mode. Displaying the stored desktop before entering the privacy moment mode means displaying the icons of the preset applications and restoring the display of icons of other applications.

[0247] At this time, in the TEE environment, the privacy moment status can also be switched, and the privacy moment status identifier can be modified to exit the privacy moment mode. For example, the privacy moment status identifier int can be modified from 1 to 0, 0 is used to indicate the state is exiting the privacy moment mode, and 1 is used to indicate the state is entering the privacy moment mode. After the modification, the identification information can be sent back to the privacy moment service module, and the modified identification can be stored in the secure storage chip.

[0248] S58, restoring other functions except the preset functions corresponding to the preset application program, and powering on other drivers except the preset driver.

[0249] It should be understood that when switching modes, if a preset application is running, the privacy moment service module can instruct the application to maintain the original process or thread after exiting the privacy moment mode.

[0250] For applications other than the preset applications, when switching modes, since the corresponding processes or threads have been killed in the privacy moment mode, they cannot be restored autonomously after exiting the privacy moment mode and need to be restarted later under the user's operation.

[0251] It should be understood that the preset functions corresponding to the preset applications are used normally in the privacy moment mode, and the privacy moment service module can instruct the preset functions to maintain the original functions after exiting the privacy moment mode. For other functions except the preset functions, they can be restored according to the state before entering the privacy moment mode.

[0252] In addition, the preset driver corresponding to the preset function is powered on normally in the privacy moment mode, and the privacy moment service module can instruct the preset driver to remain powered on after exiting the privacy moment mode; and for other drivers except the preset driver, since they are powered off in the privacy moment mode, at this time, when exiting, they can all be powered on to restore their corresponding driving capabilities.

[0253] For example, in combination with the example in S54, after entering the privacy moment mode, only some functions of three preset applications (Contacts APP, Phone APP and Short Message APP) are available, and other functions except the preset functions corresponding to the preset applications are disabled. Then, after exiting the privacy moment mode, all disabled functions can be restored.

[0254] For example, the phone app can restore the voice call function for contacts outside the whitelist, the short message app can restore the sending and receiving message functions for contacts outside the whitelist, and the positioning, recording, network data connection and other functions can also be restored.

[0255] In addition, in the privacy moment mode, all drivers except the microphone voice call driver are powered off. At this time, when exiting the privacy moment mode, all drivers except the microphone voice call driver can be powered on. For example, the Bluetooth driver, WLAN driver, GPS / Beidou positioning driver, camera driver, microphone recording driver, USB debugging driver, etc. can be powered on.

[0256] Optionally, when exiting the private moment mode, a prompt pop-up box may be displayed to prompt the user whether to clear the cached data generated during the private moment mode. If the user confirms not to clear, the cached data will continue to be saved after exiting the private moment mode. If the user confirms to clear, the corresponding cached data will be cleared when exiting the private moment mode to prevent the data generated during the private moment mode from being leaked when the electronic device is used later.

[0257] In the privacy protection method provided in the embodiment of the present application, since the user can enter and exit the privacy moment mode with one click, centralized control of all applications in the electronic device is achieved, avoiding multiple operations by the user, simplifying the steps, and helping the user to quickly switch between the privacy moment mode and the non-privacy moment mode. On the basis of achieving privacy protection, the user experience is improved.

[0258] Alternatively, if Fig.19 As shown, based on the above, the privacy protection method provided in the embodiment of the present application may also include the following S71 to S80.

[0259] S71. Before receiving the first operation, receive a third operation, where the third operation is used to indicate a sliding operation performed on the desktop before entering the privacy moment mode.

[0260] S72. In response to the third operation, display a first interface, where the first interface includes a first notification center, and the first notification center displays a first notification message corresponding to a preset application and other notification messages corresponding to other applications.

[0261] Before entering the private moment mode, all received notification messages can be displayed in the first notification center, including the first notification message corresponding to the preset application and other notification messages corresponding to other applications. The notification message can also be understood as the original notification message.

[0262] S73. After receiving the first operation, receive a fourth operation, where the fourth operation is used to instruct a sliding operation on the desktop during the privacy moment.

[0263] S74. In response to the fourth operation, a second interface is displayed, where the second interface includes a second notification center. The second notification center displays a first notification message corresponding to a preset application, and does not display other notification messages corresponding to other applications.

[0264] After entering the privacy moment mode, since icons of applications other than the preset applications are not displayed and other applications cannot be run in the privacy moment mode, the second notification center may only store, but not display, notification messages other than the first notification message before entering the privacy moment mode, so as to avoid users requesting to enter other applications through other notification messages.

[0265] It should be understood that when entering the privacy moment mode, if there is no notification message corresponding to the preset application, there is no need to retain and display it; if there is, since some functions of the preset application can be used after entering the privacy moment mode, the notification message related to the preset application can continue to be displayed for the user to view.

[0266] S75. After receiving the fifth operation, notify the second incoming call and / or the second short message.

[0267] The fifth operation is used to indicate the exit from the privacy moment mode. After receiving the fifth operation, that is, after exiting the privacy moment mode, the notification corresponding to the preset application after entering the privacy moment mode and before exiting the privacy moment mode, that is, in the stage of privacy moment mode, can be displayed.

[0268] It should be understood that the notification may be a notification message of a contact outside the whitelist generated by a preset application program, for example, a missed call of a contact outside the whitelist, or a short message of a contact outside the whitelist.

[0269] It should be understood that after entering the privacy moment mode and before exiting the privacy moment mode, the preset application may still generate some new notification messages accordingly. However, during the privacy moment mode, the notification manager, under the control of the privacy moment service module, cannot provide the service of pushing relevant messages for contacts outside the whitelist. Therefore, after exiting the privacy moment mode, relevant messages received by the preset application for contacts outside the whitelist during the privacy moment mode can be displayed.

[0270] For example, when the preset application is a phone APP or a short message APP, after exiting the privacy moment mode, the notification messages corresponding to the missed calls from contacts outside the whitelist during the privacy moment mode, as well as the notification messages corresponding to the messages sent by contacts outside the whitelist, can be displayed to prompt the user to check.

[0271] Optionally, when the second desktop (the desktop before entering the privacy moment mode or the desktop after exiting the privacy moment mode) is displayed, the notification message corresponding to the second incoming call and / or the notification message corresponding to the second short message can be displayed.

[0272] For example, after exiting the privacy moment mode, the desktop in the non-privacy moment mode can be displayed. On the desktop, notification messages from contacts outside the whitelist that were received by the preset application during the privacy moment mode can be displayed in the form of pop-ups, such as notification messages corresponding to incoming calls and / or notification messages corresponding to short messages.

[0273] S76. After receiving the fifth operation, a sixth operation may also be received.

[0274] The sixth operation is used to indicate a sliding down operation on the desktop after exiting the privacy moment mode.

[0275] S77. In response to the sixth operation, a third interface is displayed, where the third interface includes a third notification center, and the third notification center displays a notification message corresponding to the second incoming call and a notification message corresponding to the second short message.

[0276] For example, after exiting the privacy moment mode, the desktop in the non-privacy moment mode can be displayed. On this basis, in response to the user's sliding down operation, a third interface including a third notification center can be displayed, in which notification messages from contacts outside the whitelist received by the preset application during the privacy moment mode can be displayed.

[0277] For another example, after exiting the privacy moment mode, you can first display the notification messages from contacts outside the whitelist that the preset application received during the privacy moment mode in a pop-up window; if no user operation is received within the preset time period, the pop-up window can be removed and the notification message continues to be displayed in the third notification center.

[0278] S78. The third notification center also displays other notification messages before entering the private moment mode.

[0279] The fifth operation is an operation of exiting the privacy mode. In this regard, after receiving the fifth operation, that is, after exiting the privacy moment mode, other notification messages except the first notification message that were not stored and displayed when entering the privacy moment mode can be displayed.

[0280] It should be understood that since the user did not view this part of the notification message before entering the private moment mode, after exiting the private moment mode, in order not to miss the information, it needs to be displayed to the user again.

[0281] S79. After receiving the fifth operation, receive a seventh operation, where the seventh operation is used to instruct to start any target application other than the preset application.

[0282] S80: Run the target application and display a third notification message corresponding to the target application; the receiving time of the third notification message includes the time after receiving the third operation or after receiving the first operation.

[0283] After exiting the privacy moment mode, in response to a seventh operation of the user on any target application other than a preset application, the electronic device can run the target application, and receive and display a corresponding third notification message.

[0284] The third notification message includes the notification message corresponding to the target application when in the privacy moment mode. The third notification message also includes the notification message corresponding to the target application before entering the privacy moment mode; when a notification message of the target application is received before entering the privacy moment mode, the notification message is displayed in the third notification center, and after exiting the privacy moment mode, the other notification messages displayed in the above S78 also include the third notification message.

[0285] It should be understood that since other applications except the preset applications have killed the background processes or threads under the control of the Privacy Moment Mode Service and are prohibited from automatic startup when entering the Privacy Moment Mode, after exiting the Privacy Moment Mode, the process or thread of the application, as well as the notification messages received during and after the Privacy Moment Mode stage, cannot be restored by themselves.

[0286] At this time, any application program other than the preset application program can be restarted through the seventh operation of the user. Only when the application program is restarted can the corresponding notification message be received and displayed.

[0287] For example, if the target application is WeChat APP, after exiting the private moment mode, the notification messages corresponding to WeChat APP during the private moment mode can be displayed, including unviewed messages, unanswered voice calls or video calls, etc.

[0288] It should be noted that after the target application is restarted, the notification message corresponding to the target application may be displayed in the form of a pop-up window and / or in a notification center to prompt the user to view it.

[0289] For example, after exiting the private moment mode, in response to the seventh operation of the user, the target application is started, and the corresponding notification message of the target application during the private moment mode is displayed in a pop-up window.

[0290] For example, after exiting the private moment mode, in response to the user's seventh operation, the target application is started, and the corresponding notification message of the target application during the private moment mode is displayed in the notification center.

[0291] For another example, after exiting the privacy moment mode, the notification message received by the target application during the privacy moment mode can be displayed in a pop-up window; if no user operation is received within the preset time period, the pop-up window can be removed and the notification message can be displayed in the notification center.

[0292] For example, at 9 o'clock, the electronic device displays notification messages received in the non-private moment mode in the drop-down menu, such as multiple messages 901 corresponding to the WeChat APP. In addition, the drop-down menu also displays a switch control 203 corresponding to the private moment mode. The user clicks on the switch control 203, such as Fig. 20 As shown in (a) in .

[0293] After receiving the click operation, the electronic device performs identity authentication in response to the click operation; after successful authentication, it enters the private moment mode. At this time, the electronic device can display the following Fig. 20The display interface shown in (b) in FIG. Among them, since the WeChat application does not belong to the corresponding preset application in the privacy moment mode, the process or thread of the WeChat APP is correspondingly closed. At this time, no messages related to the WeChat APP are pushed or displayed. Fig. 20 The existing message 901 shown in (a) can be stored and hidden.

[0294] Between 9:00 and 9:30, in response to the user's operation, the electronic device is in the privacy moment mode. When the electronic device receives a call request from a contact outside the whitelist, the electronic device will not notify the user, that is, it will not ring, vibrate, or display. The electronic device of the other contact can remind the user that the call cannot be connected or is in progress. For call requests from contacts in the whitelist, the electronic device can notify the user in the form of a call notification interface.

[0295] At 9:30, when the user wants to exit the private moment mode, the user can click the switch control 203, such as Fig. 20 After receiving the click operation, the electronic device performs identity authentication in response to the click operation; after successful authentication, the private moment mode is exited; at this time, the electronic device may display the following Fig. 20 The display interface shown in (d) in FIG. Among them, the message 901 hidden before entering the privacy moment mode can be restored to display. At the same time, when the preset application is a phone APP, the notification message 902 of the missed call of the contact outside the whitelist corresponding to the phone APP during this half hour (privacy moment mode) can also be displayed.

[0296] Since the user may not actively check the missed calls, messages, etc. that were missed during the private moment mode, when the electronic device exits the private moment mode in response to the user's click operation, the electronic device may also display the following information: Fig.21 In the display interface shown in (a) in FIG. In the display interface, the notification message of the missed call of the contact outside the white list corresponding to the phone APP can be displayed above the desktop 904 in the form of a pop-up window 903, so as to prompt the user in time.

[0297] When no user operation is received within a preset time period, the pop-up window 903 can be removed and only the desktop 904 is displayed. Fig.21 As shown in (b) of FIG. 9 , for desktop 904, when the electronic device receives a sliding operation by the user, as shown in FIG. Fig.21 As shown in (c) in FIG. 1 ; after receiving the sliding operation, the electronic device displays as shown in FIG. Fig.21The display interface shown in (d) in the figure, in which the message 901 hidden before entering the privacy moment mode and the notification message 903 of missed calls from contacts outside the whitelist corresponding to the phone APP in the privacy moment mode stage are restored.

[0298] In addition, since the WeChat APP is still closed, new messages received by WeChat after 9 o'clock will not be displayed. At this time, the user needs to actively click the WeChat icon or click message 901 and reopen the WeChat application before the new messages received can be displayed.

[0299] Combination of the above Figures 1 to 20 The privacy protection method provided by the embodiment of the present application is described in detail; Figure 22 to Figure 23 The device embodiments of the present application are described in detail. It should be understood that the device in the embodiments of the present application can execute the various methods of the aforementioned embodiments of the present application, that is, the specific working processes of the following various products can refer to the corresponding processes in the aforementioned method embodiments.

[0300] Fig. 22 1000 is a schematic diagram of a privacy protection device provided in an embodiment of the present application. The privacy protection device 1000 includes a receiving module 1001 and a processing module 1002 .

[0301] The receiving module 1001 is used to receive a first operation; the processing module 1002 is used to display a first desktop and close the other applications in response to the first operation, wherein the first desktop includes an icon of the preset application but does not include icons of the other applications;

[0302] In response to a first incoming call from a first contact included in the contact application, notifying the first incoming call;

[0303] When a second incoming call from a second contact is received, notifying the second incoming call is not performed, wherein the contact application does not include the second contact.

[0304] Optionally, as an embodiment, the processing module 1002 is further configured to, in response to receiving a first short message from the first contact, display a notification message corresponding to the first short message;

[0305] When the second short message from the second contact is received, a notification message corresponding to the second short message is not displayed.

[0306] Optionally, as an embodiment, the receiving module 1001 is further configured to receive a second operation after notifying the first incoming call; the processing module 1002 is further configured to answer the first incoming call in response to the second operation;

[0307] During the first incoming call, the recording function is disabled.

[0308] Optionally, as an embodiment, the processing module 1002 is also used to, in response to the first operation, disable other functions except the preset function corresponding to the preset application, and / or power off other drivers except the preset driver; wherein the preset driver corresponds to the preset function of the preset application.

[0309] Optionally, as an embodiment, the preset functions include a voice call function of the phone application and a message receiving and sending function of the short message application;

[0310] The preset driver includes a microphone voice call driver, and the other drivers include at least one of a microphone recording driver, a Bluetooth driver, a WLAN driver, a GPS or Beidou positioning driver, a camera driver, and a USB debugging driver;

[0311] Among them, the microphone voice call driver corresponds to the voice call function of the telephone application.

[0312] Optionally, as an embodiment, the receiving module 1001 is further configured to receive a third operation before receiving the first operation;

[0313] The processing module 1002 is further configured to display a first interface in response to the third operation, where the first interface includes a first notification center, and the first notification center displays a first notification message corresponding to the preset application and other notification messages corresponding to the other applications;

[0314] The receiving module 1001 is further configured to receive a fourth operation after receiving the first operation;

[0315] The processing module 1002 is also used to display a second interface in response to the fourth operation, where the second interface includes a second notification center, in which the first notification message corresponding to the preset application is displayed, and the other notification messages corresponding to the other applications are not displayed.

[0316] Optionally, as an embodiment, the receiving module 1001 is further configured to receive a fifth operation;

[0317] The processing module 1002 is also used to display a second desktop in response to the fifth operation, wherein the second desktop includes an icon of the preset application and icons of at least some of the other applications, restore functions other than the preset functions corresponding to the preset application, and power on drivers other than the preset driver.

[0318] Optionally, as an embodiment, the processing module 1002 is further configured to notify the second incoming call and / or the second short message after receiving the fifth operation.

[0319] Optionally, as an embodiment, the receiving module 1001 is further configured to receive a sixth operation;

[0320] The processing module 1002 is also used to display a third interface in response to the sixth operation, and the third interface includes a third notification center, and the third notification center includes at least one of the following messages: the other notification messages, the notification message corresponding to the second incoming call, and the notification message corresponding to the second short message.

[0321] Optionally, as an embodiment, the processing module 1002 is further used to display, in response to the fifth operation, a notification message corresponding to the second incoming call and / or a notification message corresponding to the second short message when displaying the second desktop.

[0322] Optionally, as an embodiment, the processing module 1002 is further configured to receive a seventh operation after receiving the fifth operation, wherein the seventh operation is used to instruct to start any target application other than the preset application;

[0323] The target application is run, and a third notification message corresponding to the target application is displayed; the receiving time of the third notification message includes the time after the third operation is received or the time after the first operation is received.

[0324] Optionally, as an embodiment, the processing module 1002 is further used to display a fourth interface, where the fourth interface includes a first control, and the first operation is a click operation on the first control.

[0325] Optionally, as an embodiment, the first desktop includes a second control, and the fifth operation is a click operation on the second control.

[0326] This application uses the above-mentioned privacy protection device to control the running state of the application and the power-on and power-off state of the driver, thereby realizing the protection of user privacy. Unlike the permission management method that manages the APP through the permission switch, after the user enters the privacy moment mode provided by this application, only some functions of several system APPs with very high security are retained, other functions are disabled, and other system APPs with lower security and all third-party APP processes or threads are closed (killed), so as to realize the state isolation of the high-security mode. At the same time, other drivers except the preset drivers are also powered off to realize hardware-level isolation. Through the combination of these two aspects, the user's privacy data can be highly protected, so that the user has a sense of certainty that "privacy will not be leaked at all" after enabling the privacy moment mode.

[0327] It should be noted that the privacy protection device 1000 is implemented in the form of a functional module. The term "module" here can be implemented in the form of software and / or hardware, and is not specifically limited to this.

[0328] For example, a "module" may be a software program, a hardware circuit, or a combination of the two that implements the above functions. The hardware circuit may include an application specific integrated circuit (ASIC), an electronic circuit, a processor (such as a shared processor, a dedicated processor, or a group processor, etc.) and a memory for executing one or more software or firmware programs, a combined logic circuit, and / or other suitable components that support the described functions.

[0329] Therefore, the units of each example described in the embodiments of the present application can be implemented by electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of the present application.

[0330] Fig.23 A structural schematic diagram of an electronic device provided by the present application is shown. Fig.23 The dotted line in the figure indicates that the unit or the module is optional; the electronic device 1010 can be used to implement the privacy protection method described in the above method embodiment.

[0331] The electronic device 1010 includes one or more processors 1011, which can support the privacy protection method in the method embodiment of the electronic device 1010. The processor 1011 can be a general-purpose processor or a special-purpose processor. For example, the processor 1011 can be a central processing unit (CPU), a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA), or other programmable logic devices, such as discrete gates, transistor logic devices, or discrete hardware components.

[0332] Optionally, the processor 1011 may be used to control the electronic device 1010, execute software programs, and process data of the software programs. The electronic device 1010 may also include a communication unit 1015 to implement input (reception) and output (transmission) of signals.

[0333] For example, the electronic device 1010 may be a chip, the communication unit 1015 may be an input and / or output circuit of the chip, or the communication unit 1015 may be a communication interface of the chip, and the chip may be a component of a terminal device or other electronic devices.

[0334] For another example, the electronic device 1010 may be a terminal device, and the communication unit 1015 may be a transceiver of the terminal device, or the communication unit 1015 may be a transceiver circuit of the terminal device.

[0335] The electronic device 1010 may include one or more memories 1012 on which a program 1014 is stored. The program 1014 can be executed by the processor 1011 to generate instructions 1013, so that the processor 1011 executes the privacy protection method described in the above method embodiment according to the instructions 1013.

[0336] Optionally, data may also be stored in the memory 1012 .

[0337] Optionally, the processor 1011 may also read data stored in the memory 1012 . The data may be stored at the same storage address as the program 1014 , or may be stored at a different storage address from the program 1014 .

[0338] Optionally, the processor 1011 and the memory 1012 may be provided separately or integrated together, for example, integrated on a system on chip (SOC) of the terminal device.

[0339] Exemplarily, the memory 1012 may be used to store a program 1014 related to the privacy protection method provided in the embodiment of the present application, and the processor 1011 may call the program 804 related to the privacy protection method stored in the memory 1012 to execute the privacy protection method in the embodiment of the present application. For example: receiving a first operation;

[0340] In response to the first operation, display a first desktop and close the other applications, wherein the first desktop includes an icon of the preset application but does not include icons of the other applications;

[0341] In response to a first incoming call from a first contact included in the contact application, notifying the first incoming call;

[0342] When a second incoming call from a second contact is received, notifying the second incoming call is not performed, wherein the contact application does not include the second contact.

[0343] Optionally, the present application also provides a computer program product, which, when executed by the processor 1011, implements the privacy protection method in any method embodiment of the present application.

[0344] For example, the computer program product may be stored in the memory 1012 , such as a program 1014 , which is converted into an executable target file that can be executed by the processor 1011 after preprocessing, compilation, assembly, and linking.

[0345] Optionally, the present application also provides a computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a computer, the privacy protection method of any method embodiment in the present application is implemented. The computer program can be a high-level language program or an executable target program.

[0346] For example, the computer-readable storage medium is, for example, a memory 1012. The memory 1012 may be a volatile memory or a non-volatile memory, or the memory 1012 may include both a volatile memory and a non-volatile memory. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), which is used as an external cache. By way of example and not limitation, many forms of RAM are available, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate synchronous dynamic random access memory (DDR SDRAM), enhanced synchronous dynamic random access memory (ESDRAM), synchronous link DRAM (SLDRAM), and direct rambus RAM (DR RAM).

[0347] Those of ordinary skill in the art will appreciate that the units and algorithm steps of each example described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are performed in hardware or software depends on the specific application and design constraints of the technical solution. Professional and technical personnel can use different methods to implement the described functions for each specific application, but such implementation should not be considered to be beyond the scope of this application.

[0348] Those skilled in the art can clearly understand that, for the convenience and brevity of description, the specific working processes of the systems, devices and units described above can refer to the corresponding processes in the aforementioned method embodiments and will not be repeated here.

[0349] In the several embodiments provided in the present application, it should be understood that the disclosed systems, devices and methods can be implemented in other ways. For example, the embodiments of the electronic device described above are only schematic. For example, the division of the modules is only a logical function division. There may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed. Another point is that the mutual coupling or direct coupling or communication connection shown or discussed can be an indirect coupling or communication connection through some interfaces, devices or units, which can be electrical, mechanical or other forms.

[0350] The units described as separate components may or may not be physically separated, and the components shown as units may or may not be physical units, that is, they may be located in one place or distributed on multiple network units. Some or all of the units may be selected according to actual needs to achieve the purpose of the solution of this embodiment.

[0351] In addition, each functional unit in each embodiment of the present application may be integrated into one processing unit, or each unit may exist physically separately, or two or more units may be integrated into one unit.

[0352] It should be understood that in the various embodiments of the present application, the size of the serial number of each process does not mean the order of execution. The execution order of each process should be determined by its function and internal logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.

[0353] In addition, the term "and / or" in this article is only a description of the association relationship of the associated objects, indicating that there can be three relationships. For example, A and / or B can represent: A exists alone, A and B exist at the same time, and B exists alone. In addition, the character " / " in this article generally indicates that the associated objects before and after are in an "or" relationship.

[0354] If the functions are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the prior art. The computer software product is stored in a storage medium and includes several instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the methods described in the various embodiments of the present application. The aforementioned storage media include: various media that can store program codes, such as USB flash drives, mobile hard disks, read-only memories (ROM), random access memories (RAM), magnetic disks or optical disks.

[0355] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any technician familiar with the technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims. In short, the above is only a preferred embodiment of the technical solution of the present application, and is not used to limit the protection scope of the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application should be included in the protection scope of the present application.

Claims

1. A privacy protection method, characterized in that: Applied to electronic equipment, the method comprises: In the first mode, in response to a first operation of starting a first application, running the first application; If the target function permission is not enabled, displaying a first pop-up window, the first pop-up window is used by the first application to apply for access permission for the target function; In response to a second operation on the first pop-up window, calling the target function to collect data; After the access permission of the target function is enabled, in response to a third operation, displaying a first interface at a first moment, the first interface including information prompting the electronic device to enter the second mode, the third operation being used to activate the electronic device to enter the second mode; After the first moment, receiving a fourth operation for identity authentication input by the user; In the case where the identity authentication is successful, displaying a second interface in the second mode at a second moment, the second interface including an image element, the image element being used to indicate that the electronic device is in the second mode, the target function being prohibited from use in the second mode, the second interface including a plurality of application icons, the plurality of application icons being not displayed at the first moment and during a period from the first moment to the second moment; When no operation on the second interface is received within a preset time period, a lock screen interface in the second mode is displayed, wherein the lock screen interface displays a text element corresponding to the second mode while displaying the image element, and the text element is used to indicate that the electronic device is in the second mode.

2. The method according to claim 1, characterized in that The second interface also includes a text element, and the text element is used to indicate that the electronic device is in the second mode.

3. The method according to claim 1, characterized in that The image element is in the shape of a shield.

4. The method according to claim 1, characterized in that The multiple application icons include: an icon of a contact application, an icon of a phone application, and an icon of a short message application.

5. The method according to any one of claims 1 to 4, characterized in that: The second interface includes a desktop.

6. The method according to claim 5, characterized in that The second interface also includes a second pop-up window displayed on the desktop, and the second pop-up window includes introduction content for the second mode, wherein the introduction content is used to prompt that at least one function of the electronic device in the second mode is unavailable.

7. The method according to claim 1, characterized in that The second mode is a mode for protecting user privacy data, where the privacy data includes one or more of location information, audio data, and image data of a user device.

8. The method according to claim 1, characterized in that: The method further comprises: After the second moment, the first application is run, wherein the first application cannot call the target function to collect data, and the target function cannot be enabled in the second mode.

9. The method according to claim 1, 7 or 8, characterized in that: The target function includes one or more of a positioning function, a camera function and a microphone function.

10. The method according to claim 1, characterized in that The method also includes: the identity authentication is performed in a TEE environment.

11. The method according to claim 1 or 10, characterized in that: The method also includes: the identity authentication method includes any one of a lock screen password, fingerprint recognition, and face recognition.

12. The method according to any one of claims 1 to 4, characterized in that: The electronic device entering the second mode comprises: The second mode state identifier of the electronic device is changed to the first identifier.

13. The method according to claim 12, characterized in that The method further comprises: After the electronic device enters the second mode, receiving a fifth operation to exit the second mode; The exiting the second mode includes: changing the second mode state identifier from the first identifier to a second identifier.

14. An electronic device, characterized in that: include: Processors, memory, and interfaces; The processor, the memory and the interface cooperate with each other so that the electronic device executes the method as claimed in any one of claims 1 to 13.

15. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the processor is caused to perform the method according to any one of claims 1 to 13.

Images