A mobile terminal based on public network and power wireless private network

Abstract

The present application belongs to the field of electric power communication technology, and specifically discloses a mobile terminal based on a public network and an electric power wireless private network, including: an electric power private network business system, a public network business system and a system manager, wherein the electric power private network business system and the public network business system are respectively operated in a first container and a second container, and the physical hard disk partitions allocated to the first container and the second container are two different partitions; the system manager is used to receive target input, and in response to the target input, control the terminal display to display the user interface corresponding to the business system in the display state; the electric power private network business system is used to process the electric power private network business data, and transmit the data through the electric power wireless private network; the public network business system is used to process the public network business data, and transmit the data through the public network. By combining data isolation and responding to system switching requirements, the present application can achieve the security isolation between the public network business and the electric power private network business on the terminal, while taking into account the convenience of switching between systems.

Description

Technical Field

[0001] The present application belongs to the field of power communication technology, and more specifically, relates to a mobile terminal based on a public network and a power wireless private network. Background Art

[0002] Under the new situation of building a new power system, the number of distributed terminal communications in the power grid continues to rise. In the production and management activities of the power grid, the communication needs of modern smart grid services such as distributed wind and solar control, precise load control (demand side management), smart charging facilities, new distribution network protection, source-grid-load-storage collaborative control are prominent; the communication needs of control services such as green environmental protection, smart parks, smart homes, smart car control, and comprehensive energy saving that are closely related to the power supply business are significant. Power wireless private networks have begun to be widely used in power communication networks. The original communication method transmitted in the private network can no longer meet the needs of the development of digital power grid services. Mobile terminals must be able to provide high-quality services to customers externally and carry out various forms of production and operation work internally. With the maturity of the deployment of power wireless private networks, these two mobile application functions are integrated into the same mobile terminal, that is, the same terminal can use the public network card to realize the normal functions of the mobile phone, and can also serve as a private network mobile terminal to handle private network services. How to achieve the security isolation between the public network services and the power private network services on the terminal while taking into account the convenience of users switching between the two business systems to handle services is a technical problem that needs to be solved urgently in this field. Summary of the invention

[0003] In view of the defects of the existing technology, the purpose of this application is to achieve the security isolation between the public network services and the power private network services on the terminal, while taking into account the convenience of users switching between the two business systems to handle business.

[0004] To achieve the above-mentioned purpose, the present application provides a mobile terminal based on a public network and a power wireless private network, comprising: a power private network business system, a public network business system and a system manager, wherein the power private network business system is an operating system running on a first container, and the public network business system is an operating system running on a second container, and the first container and the second container are two different containers created on a Linux kernel, and the physical hard disk partition allocated to the first container and the physical hard disk partition allocated to the second container are two different partitions;

[0005] The system manager is used to receive a target input, and in response to the target input, control the display of the mobile terminal to display a user interface corresponding to the business system in a display state, wherein the target input is used to indicate that one of the power private network business system and the public network business system is in a display state and the other is in a non-display state;

[0006] The power private network business system is used to process power private network business data and transmit data through the power wireless private network;

[0007] The public network business system is used to process public network business data and transmit data through the public network. The power wireless private network and the public network are two isolated networks.

[0008] In a possible implementation, the system manager is used to control the display of the mobile terminal to display the user interface corresponding to the public network business system when it is detected that the switch button is clicked and the business system currently in the display state is the power private network business system;

[0009] Or, when it is detected that the switch button is clicked and the business system currently being displayed is a public network business system, the display of the mobile terminal is controlled to display the user interface corresponding to the power private network business system.

[0010] In a possible implementation, the switch button is a physical button on the mobile terminal or a virtual button on the user interface.

[0011] In a possible implementation, it also includes: an embedded security element eSE chip;

[0012] The system manager is also used to verify the integrity of the system firmware corresponding to the power private network business system and the integrity of the system firmware corresponding to the public network business system through the eSE chip. If the integrity verification passes, the power private network business system is loaded into the first container based on the system firmware corresponding to the power private network business system, and the public network business system is loaded into the second container based on the system firmware corresponding to the public network business system.

[0013] In a possible implementation, the electric power private network service system is used to encrypt and store designated data through an eSE chip.

[0014] In a possible implementation, the system manager is further configured to control access of the container to the peripheral device based on the first peripheral device whitelist and the second peripheral device whitelist;

[0015] The first peripheral whitelist is used to indicate peripherals that are allowed to be accessed by the first container, and the second peripheral whitelist is used to indicate peripherals that are allowed to be accessed by the second container.

[0016] In one possible implementation, the peripherals indicated by the first peripheral whitelist include a user identification module SIM for accessing the power wireless private network, the peripherals indicated by the first peripheral whitelist do not include a secure digital SD card and a WIFI communication module, and the peripherals indicated by the second peripheral whitelist include a SIM, an SD card and a WIFI communication module for accessing the public network.

[0017] In a possible implementation, the electric power private network service system is further used to determine whether the first application is in the application whitelist when installing the first application, and if it is determined that the first application is in the application whitelist, verify the validity of the first application based on the digital signature of the first application, and install the first application if the validity verification passes;

[0018] The application whitelist is used to indicate the application programs that are allowed to run in the current business system.

[0019] In one possible implementation, the power private network business system is also used to determine whether there is a second application in the power private network business system based on the updated application whitelist when the application whitelist is updated. If so, the second application in the power private network business system is uninstalled, and the second application is not in the updated application whitelist.

[0020] In one possible implementation, the power private network business system is used to encrypt first data to be sent based on a preset encryption and decryption algorithm, and send the encrypted first data to the power wireless private network; and receive encrypted second data from the power wireless private network, decrypt the encrypted second data based on a preset encryption and decryption algorithm, and obtain the decrypted second data.

[0021] In general, the above technical solutions conceived by this application have the following beneficial effects compared with the prior art:

[0022] (1) By running the power private network business system and the public network business system through the container mechanism, it is possible to ensure that the business data processing process of the power private network business system is securely isolated from the business data processing process of the public network business system. By allocating different physical hard disk partitions to the containers where the two systems are located, it is possible to ensure that the data stored in the power private network business system is securely isolated from the data stored in the public network business system. By transmitting data through two isolated networks, it is possible to ensure that the business data transmission process of the power private network business system is isolated from the business data transmission process of the public network business system. The isolation between the public network business and the power private network business covers the entire life cycle of the terminal data (data transmission, data processing and data storage), and ensures the comprehensiveness of the isolation between the public network business and the power private network business on the terminal.

[0023] (2) When the target input is used to indicate that the electric power private network business system is in a display state and the public network business system is in a non-display state, it can be determined that the user's system switching requirement is to switch to the electric power private network business system, and then the display of the mobile terminal is controlled to display the user interface corresponding to the electric power private network business system, and then the interface of each application in the user interface interacts with the user to process the electric power private network business data; when the target input is used to indicate that the public network business system is in a display state and the electric power private network business system is in a non-display state, it can be determined that the user's system switching requirement is to switch to the public network business system, and then the display of the mobile terminal is controlled to display the user interface corresponding to the public network business system, and then the interface of each application in the user interface interacts with the user to process the public network business data. The system manager can realize rapid switching between the two business systems without restarting the device.

[0024] (3) Combining the above-mentioned isolation means covering the entire life cycle of terminal data and the above-mentioned means of quickly responding to user system switching needs, it is possible to ensure the secure isolation between public network services and power private network services on the terminal while taking into account the convenience of users switching between the two business systems to handle business. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 It is a structural diagram of a mobile terminal based on a public network and a power wireless private network provided in an embodiment of the present application;

[0026] Figure 2 It is a schematic diagram of a mobile terminal provided in an embodiment of the present application that is compatible with a public network and a power wireless private network;

[0027] Figure 3 It is a schematic diagram of creating two different containers on the Linux kernel provided by an embodiment of the present application;

[0028] Figure 4 It is a schematic diagram of the isolation between the power private network business system and the public network business system provided in the embodiment of the present application. DETAILED DESCRIPTION

[0029] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0030] The terms "first", "second", etc. in the specification and claims herein are used to distinguish different objects rather than to describe a specific order of objects. For example, a first container and a second container are used to distinguish different containers rather than to describe a specific order of containers.

[0031] In the embodiments of the present application, words such as "exemplary" or "for example" are used to indicate examples, illustrations or descriptions. Any embodiment or design described as "exemplary" or "for example" in the embodiments of the present application should not be interpreted as being more preferred or more advantageous than other embodiments or designs. Specifically, the use of words such as "exemplary" or "for example" is intended to present related concepts in a specific way.

[0032] In the description of the embodiments of the present application, unless otherwise specified, "multiple" means two or more than two. For example, multiple processing units refer to two or more processing units, etc.; multiple elements refer to two or more elements, etc.

[0033] The embodiments of the present application are described below in conjunction with the drawings in the embodiments of the present application.

[0034] Figure 1 is a schematic diagram of the structure of a mobile terminal based on a public network and a power wireless private network provided in an embodiment of the present application, such as Figure 1 As shown, the mobile terminal includes: a power private network (the private network in this application refers to a power wireless private network) business system 10, a public network business system 20 and a system manager 30.

[0035] Figure 2 Schematic diagram of a mobile terminal compatible with a public network and a power wireless private network provided in an embodiment of the present application, such as Figure 2 As shown, the power private network business system is used to process the power private network business data and transmit the data through the power wireless private network; the public network business system is used to process the public network business data and transmit the data through the public network. The power wireless private network and the public network are two isolated networks. Figure 2 UPF stands for User Plane Function. Therefore, the mobile terminal provided in the embodiment of the present application is compatible with the public network and the power wireless private network.

[0036] Figure 3 is a schematic diagram of creating two different containers on the Linux kernel provided by an embodiment of the present application, such as Figure 3 As shown, two different containers (a first container and a second container) may be created on the Linux kernel using an LXC command. Figure 4 Schematic diagram of the isolation between the power private network business system and the public network business system provided in the embodiment of the present application, such as Figure 4 As shown, the power private network business system is an operating system running on the first container, the public network business system is an operating system running on the second container, and the physical hard disk partition allocated to the first container and the physical hard disk partition allocated to the second container are two different partitions.

[0037] The system manager is used to receive target input, and in response to the target input, control the display of the mobile terminal to display the user interface corresponding to the business system in the display state, and the target input is used to indicate that one of the power private network business system and the public network business system is in the display state and the other is in the non-display state.

[0038] It can be understood that by running the power private network business system and the public network business system through the container mechanism, it is possible to ensure that the business data processing process of the power private network business system is securely isolated from the business data processing process of the public network business system. By allocating different physical hard disk partitions to the containers where the two systems are located, it is possible to ensure that the data stored in the power private network business system is securely isolated from the data stored in the public network business system. By transmitting data through two isolated networks, it is possible to ensure that the business data transmission process of the power private network business system is isolated from the business data transmission process of the public network business system. The isolation between the public network business and the power private network business covers the entire life cycle of the terminal data (data transmission, data processing and data storage), and ensures the comprehensiveness of the isolation between the public network business and the power private network business on the terminal.

[0039] On this basis, the system manager can quickly respond to the user's system switching needs by receiving the target input (which can be the user input). Specifically, when the target input is used to indicate that the electric power private network business system is in a display state and the public network business system is in a non-display state, it can be determined that the user's system switching needs are to switch to the electric power private network business system, and then the display of the mobile terminal is controlled to display the user interface corresponding to the electric power private network business system, and then the interface of each application in the user interface interacts with the user to process the electric power private network business data; when the target input is used to indicate that the public network business system is in a display state and the electric power private network business system is in a non-display state, it can be determined that the user's system switching needs are to switch to the public network business system, and then the display of the mobile terminal is controlled to display the user interface corresponding to the public network business system, and then the interface of each application in the user interface interacts with the user to process the public network business data. The system manager can realize rapid switching between the two business systems without restarting the device.

[0040] Therefore, combining the above-mentioned isolation means covering the entire life cycle of terminal data and the above-mentioned means of quickly responding to user system switching needs, it is possible to ensure the secure isolation between public network services and power private network services on the terminal while taking into account the convenience of users switching between the two business systems to handle business.

[0041] In a possible implementation, the system manager is used to control the display of the mobile terminal to display the user interface corresponding to the public network business system when it is detected that the switch button is clicked and the business system currently in the display state is the power private network business system;

[0042] Or, when it is detected that the switch button is clicked and the business system currently being displayed is a public network business system, the display of the mobile terminal is controlled to display the user interface corresponding to the power private network business system.

[0043] It can be understood that the target input can be clicking a switch button. When the business system currently in the display state is the electric power private network business system, if the switch button is clicked, the target input is used to indicate that the electric power private network business system changes from the display state to the non-display state, and at the same time, the public network business system changes from the non-display state to the display state, and then the system manager can control the display of the mobile terminal to display the user interface corresponding to the public network business system in response to the target input. When the business system currently in the display state is the public network business system, if the switch button is clicked, the target input is used to indicate that the public network business system changes from the display state to the non-display state, and at the same time, the electric power private network business system changes from the non-display state to the display state, and then the system manager can control the display of the mobile terminal to display the user interface corresponding to the electric power private network business system in response to the target input.

[0044] Therefore, by setting a switch button and a system manager, it is possible to quickly switch between the two business systems with one click without restarting the device, further improving the convenience for users to switch between the two business systems to handle business.

[0045] In a possible implementation, the switch button is a physical button on the mobile terminal or a virtual button on the user interface.

[0046] For example, a switching button is provided on the user interface corresponding to the electric power private network business system and the user interface corresponding to the public network business system.

[0047] In a possible implementation, the mobile terminal further includes an eSE chip;

[0048] The system manager is also used to verify the integrity of the system firmware corresponding to the power private network business system and the integrity of the system firmware corresponding to the public network business system through the eSE chip. If the integrity verification passes, the power private network business system is loaded into the first container based on the system firmware corresponding to the power private network business system, and the public network business system is loaded into the second container based on the system firmware corresponding to the public network business system.

[0049] The main functions of the eSE chip are to provide secure storage (such as keys, certificates, personal identification information, etc.), execute encryption algorithms, and perform security authentication. The eSE chip is usually integrated into the hardware of the mobile terminal and physically connected to the rest of the device (such as the main processor). The eSE chip is physically connected to the main processor of the mobile terminal through a system bus (such as PCIe, SPI, I2C, etc.). Through these buses, the main processor can exchange data with the eSE chip, including sending data that needs to be encrypted, receiving encryption results, transmitting key information, etc.

[0050] Specifically, in the process of starting a business system (power private network business system or public network business system), the eSE chip can be used to verify the integrity of the system firmware corresponding to the business system. If the integrity verification passes, the business system can be loaded into the corresponding container. This can effectively prevent the loading of damaged business systems (such as malware or hacker attacks that cause damage to the system firmware) into the container, realize secure boot loading of the system, and ensure the security and reliability of the business system.

[0051] Exemplarily, the eSE chip can store a preset hash value of the system firmware. During the process of starting the business system, the eSE chip can calculate the current hash value of the system firmware through a hash algorithm, and then determine whether the preset hash value is the same as the current hash value. If they are the same, the integrity verification passes; otherwise, the integrity verification fails.

[0052] In one possible implementation, the electric power private network business system is used to encrypt and store designated data (privacy data such as passwords, fingerprints, and faces) through an eSE chip.

[0053] It is understandable that the designated data may be private data such as passwords, fingerprints, faces, etc. Encrypting and storing the designated data through the eSE chip can further enhance the storage security of the designated data.

[0054] In a possible implementation, the system manager is further configured to control access of the container to the peripheral device based on the first peripheral device whitelist and the second peripheral device whitelist;

[0055] The first peripheral whitelist is used to indicate peripherals that are allowed to be accessed by the first container, and the second peripheral whitelist is used to indicate peripherals that are allowed to be accessed by the second container.

[0056] The peripherals of the mobile terminal may be a WIFI communication module, a mobile communication module (such as a 4G / 5G communication module) or an SD card, etc.

[0057] Exemplarily, the peripherals indicated by the first peripheral whitelist include a user identification module SIM for accessing the power wireless private network, the peripherals indicated by the first peripheral whitelist do not include a secure digital SD card and a WIFI communication module, and the peripherals indicated by the second peripheral whitelist include a SIM, an SD card and a WIFI communication module for accessing the public network.

[0058] It can be understood that by controlling the container's access to peripherals, the security and reliability of the system can be effectively improved.

[0059] In a possible implementation, the electric power private network service system is further used to determine whether the first application is in the application whitelist when installing the first application, and if it is determined that the first application is in the application whitelist, verify the validity of the first application based on the digital signature of the first application, and install the first application if the validity verification passes;

[0060] The application whitelist is used to indicate the applications that are allowed to run in the current business system.

[0061] It is understandable that by setting a trusted application whitelist, only the applications in the list can be installed on the device, which can effectively prevent the installation of unknown or risky applications. Further, by verifying the digital signature of the application, the legitimacy of the application source and non-tampering can be ensured to prevent the implantation of malicious software. By combining digital signature verification and application whitelist, the application security risk of the power private network business system can be effectively reduced.

[0062] In one possible implementation, the power private network business system is also used to determine whether there is a second application in the power private network business system based on the updated application whitelist when the application whitelist is updated. If so, the second application in the power private network business system is uninstalled, and the second application is not in the updated application whitelist.

[0063] It is understandable that in the case of an application whitelist update, applications that were previously allowed to run in the current business system may not be allowed to run in the current business system after the application whitelist is updated. Therefore, it is necessary to check whether each application in the power private network business system is in the updated application whitelist based on the updated application whitelist. If a second application (an application that is not in the updated application whitelist) is found in the power private network business system, the second application is uninstalled, thereby ensuring that every application in the power private network business system is always in the application whitelist, further reducing the application security risk of the power private network business system.

[0064] In one possible implementation, the power private network business system is used to encrypt first data to be sent based on a preset encryption and decryption algorithm, and send the encrypted first data to the power wireless private network; and receive encrypted second data from the power wireless private network, decrypt the encrypted second data based on a preset encryption and decryption algorithm, and obtain the decrypted second data.

[0065] It is understandable that by encrypting the transmitted data, the security of the power private network business data during transmission can be guaranteed.

[0066] In one possible implementation, the power private network service system is also used to receive a remote data erasure instruction from the power wireless private network, and based on the remote data erasure instruction, perform an erasure operation on the data in the physical hard disk partition corresponding to the power private network service system.

[0067] It is understandable that in the event that the mobile terminal is lost, the data in the power private network business system of the mobile terminal can be remotely deleted by sending a remote data erasure instruction to the mobile terminal to prevent leakage of the power private network business data.

[0068] The mobile terminal based on the public network and the power wireless private network provided by this application is explained below with reference to an example.

[0069] In response to the current development and demand of smart power Internet of Things communications, this application proposes a converged and isolated mobile terminal that is compatible with the public network and the power wireless private network, to achieve the converged and isolated operation of the power private network business system and the public network business system, and to meet the different working scenario requirements of the internal and external networks.

[0070] This mobile terminal uses a bottom-up security reinforcement mechanism from the application level, system framework level, system kernel level, hardware level, etc.

[0071] At the application level, industry application signature verification and whitelist mechanisms are implemented to ensure that only legitimate applications can be installed and run.

[0072] At the system framework level, the Android framework is used, with dedicated access point names (APN) preset and virtual private network (VPN) security access mechanism, end-to-end call encryption, information encryption, and email encryption in accordance with national secret algorithms. The mobile device management (MDM) control framework and interface (compliant with the mobile application security specification GA / T1466.2) are used to customize remote control strategies, achieving multi-device collaboration and national secret security in industry security control.

[0073] At the system kernel level, data and files are stored in encrypted form, support secure erasure (for example, overwriting, using random data to overwrite the storage area where the original data is located multiple times to eliminate data traces) and remote erasure, full watermarking, prohibition of screenshots / recording of sensitive information, and dual system isolation, secure startup, integrity protection, security reinforcement, trusted computing, and online authorization for flashing are supported.

[0074] At the hardware level, it uses independent national security chips, multiple PKI (Public Key Infrastructure) systems, tamper-proof fuse circuits, hardware-unique keys, and a Trusted Execution Environment (TEE) kernel to meet the preset evaluation assurance level (Evaluation Assurance Level, EAL), such as EAL6+.

[0075] The deployment method of this mobile terminal is to adopt an operating system-level isolation solution. Through the Linux Containers (LXC) technology, two containers are created on a Linux kernel. A different Android operating system framework runs in each container. The isolation between the two systems is achieved by the container mechanism of the kernel layer. The two systems are independent of each other and have a completely equal relationship. They cannot control each other (such as access or deletion, etc.).

[0076] The hard disk partitioning technology is used to isolate the physical areas where the two systems store data, and the two systems use their own file storage partitions. When the public network business system is damaged or hacked, it will not affect the safe use of the power private network business system, avoiding the risk of the public network business system being further attacked by Internet viruses or Trojans as a springboard after being hacked.

[0077] By constructing a trusted environment through independent security hardware, the power private network business and the public network business are isolated at the hardware level. Data is encrypted through the key system derived from the embedded secure element (eSE) chip to implement hardware encryption and decryption calculations, and physically isolate the security risks of possible software attacks. The chip communicates with the main chip of the mobile phone through the system bus, and the encrypted information of private data such as passwords, fingerprints, and faces is stored in the security chip. The security chip cooperates with the TEE security system to complete the protection work.

[0078] Using two physically isolated operating systems, each with an independent ROM space, the power private network data is only stored in the power private network business system and cannot be accessed by the public network business system, ensuring the security of the power private network data. Based on the chip's secure boot mechanism, the trust chain is fully covered, and layer-by-layer verification is performed during the boot process. Integrity protection, security reinforcement, and trust measurement are used to ensure the security of the operating system; the operating system is customized and trimmed, combined with independent secure storage areas and operating system (OS) management, to establish strict access control to ensure that sensitive data cannot be accessed by applications at will, achieving the security goals of preventing flashing, leaks, and rooting.

[0079] The power private network business system is connected to the designated power wireless private network, and the park-specific data network name (Data Network Name, DNN) is pre-set on the terminal to build an encrypted data communication link to ensure data transmission security. The equipment has dual systems and dual networks online at the same time, and supports one-key switching. The working system (power private network business system) builds an independent secure encryption network to ensure the security of information transmission. At the same time, the voice encryption communication mechanism can be customized.

[0080] The power private network business system and the public network business system are encrypted at the system level (file encryption and full disk encryption storage). The power private network business system is a closed operating system. When in use, WiFi, Bluetooth, USB and other peripherals are turned off, and connection to the public network is prohibited. It can only connect to the designated power wireless private network. It has the ability to securely erase and remotely erase to ensure that data is effectively cleared after the phone is accidentally lost. At the same time, the full watermark and the function of prohibiting users from taking screenshots / recording screens can be customized to prevent the leakage of sensitive information. The use of peripherals is precisely controlled by setting a mechanism for setting a peripheral whitelist, and the internal and external network control software run independently to control peripherals.

[0081] In terms of application control strategy, the office operation application of the power wireless private network is designated as the only application entry point, and the installation of unauthorized applications or malicious programs is prohibited. The power operation application is provided with a live, anti-deletion, and anti-freeze mechanism, and the application signature verification and whitelist mechanism are used to ensure that only legitimate applications can be installed and run. The basic application installation of the software market of the public network business system is barrier-free.

[0082] The public network service system of the mobile terminal allows external access such as SD cards and WIFI, and uses a 4G-compatible 5G card (or eSIM) to access the public network bearer network and public network core network through 5G public network base stations and 4G public network base stations to realize data transmission and reading.

[0083] The power private network business system of the mobile terminal prohibits external access such as SD cards and WIFI. It can only use the power 5G card (or eSIM) that is additionally compatible with 4G to obtain power private network data and perform remote operations. The power private network data is connected to the power bearer network from the power 5G card through the 5G public network base station. In areas not covered by 5G signals, the relevant data is multiplexed through the 4G public network base station and connected to the power bearer network.

[0084] Among them, the SD card (Secure Digital Card) is a portable storage device widely used in digital cameras, mobile phones, tablets and other digital products. The 5G card can be a user identification module (SIM) for accessing the 5G mobile communication network. The eSIM, or embedded SIM, is a chip that integrates the functions of a SIM card and is directly embedded in the device rather than as a separate removable card.

[0085] The mobile terminal provided in this application has good isolation. Specifically, the two systems on the terminal are isolated at the information level, and are connected to the power wireless private network and the public communication network respectively. At the system kernel level, data and files are encrypted and stored, support secure erasure and remote erasure, full watermarking, and prohibition of screenshot / screen recording of sensitive information, to ensure dual system isolation, secure startup, integrity protection, security reinforcement, trusted computing, and online authorization for flashing. At the hardware level, an independent national secret security chip (multi-PKI system) and fuse circuit tamper-proof are used, the hardware has a unique secret key, and the TEE kernel is EAL6+. The public network business system of the mobile terminal allows external access such as SD cards and WIFI, and uses a 4G-compatible 5G card to access the public network bearer network and the public network core network through a 5G public network base station and a 4G public network base station to realize data transmission and reading. The power private network business system of the mobile terminal prohibits external access such as SD cards and WIFI, and can only use an additional 4G-compatible power 5G card to obtain power private network data and perform remote operations. The data of the power private network is connected to the power bearer network from the power 5G card through the 5G public network base station. In areas not covered by 5G signals, the relevant data is multiplexed through the 4G public network base station and connected to the power bearer network.

[0086] The mobile terminal provided by this application has good integration. Specifically, at the application level, the dual system implements application signature verification and whitelist mechanism to ensure that only legal applications can be installed and run. At the system framework level, the dual systems of the mobile terminal use the Android framework, dedicated APN preset and VPN security access mechanism, use the MDM management framework and interface (GA / T1466.2 departmental standard), and can customize remote management strategies to achieve multi-device collaboration and national security in industry security management.

[0087] Users of mobile terminals can use public network cards to realize normal functions of mobile phones, and can also act as work mobile terminals to handle power wireless private network services. While ensuring the information security of the power private network, it also takes into account ease of use and can meet the needs of different work scenarios of internal and external networks.

[0088] It should be understood that expressions such as "including" and "may include" that may be used in the present application indicate the existence of the disclosed functions, operations, or constituent elements, and do not limit one or more additional functions, operations, and constituent elements. In the present application, terms such as "including" and / or "having" may be interpreted as indicating specific characteristics, numbers, operations, constituent elements, components, or combinations thereof, but may not be interpreted as excluding the existence or possibility of adding one or more other characteristics, numbers, operations, constituent elements, components, or combinations thereof.

[0089] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A mobile terminal based on a public network and a power wireless private network, characterized in that: include: A power private network business system, a public network business system and a system manager, wherein the power private network business system is an operating system running on a first container, and the public network business system is an operating system running on a second container, wherein the first container and the second container are two different containers created on a Linux kernel, and the physical hard disk partition allocated to the first container and the physical hard disk partition allocated to the second container are two different partitions; The system manager is used to receive a target input, and in response to the target input, control the display of the mobile terminal to display a user interface corresponding to the business system in a display state, wherein the target input is used to indicate that one of the power private network business system and the public network business system is in a display state and the other is in a non-display state; The power private network business system is used to process power private network business data and transmit data through the power wireless private network; The public network business system is used to process public network business data and transmit data through the public network. The power wireless private network and the public network are two isolated networks.

2. The mobile terminal based on the public network and the power wireless private network according to claim 1 is characterized in that: The system manager is used to control the display of the mobile terminal to display the user interface corresponding to the public network business system when it is detected that the switch button is clicked and the business system currently in the display state is the power private network business system; Or, when it is detected that the switch button is clicked and the business system currently in display state is the public network business system, the display of the mobile terminal is controlled to display the user interface corresponding to the power private network business system.

3. The mobile terminal based on the public network and the power wireless private network according to claim 2 is characterized in that: The switch button is a physical button on the mobile terminal or a virtual button on the user interface.

4. The mobile terminal based on the public network and the power wireless private network according to claim 1 is characterized in that: Also includes: Embedded secure element eSE chip; The system manager is also used to verify the integrity of the system firmware corresponding to the private power network business system and the integrity of the system firmware corresponding to the public network business system through the eSE chip. If the integrity verification passes, the private power network business system is loaded into the first container based on the system firmware corresponding to the private power network business system, and the public network business system is loaded into the second container based on the system firmware corresponding to the public network business system.

5. The mobile terminal based on the public network and the power wireless private network according to claim 4 is characterized in that: The electric power private network business system is used to encrypt and store designated data through the eSE chip.

6. The mobile terminal based on the public network and the power wireless private network according to claim 1 is characterized in that: The system manager is further used to control the access of the container to the peripheral device based on the first peripheral device whitelist and the second peripheral device whitelist; The first peripheral whitelist is used to indicate peripherals that the first container is allowed to access, and the second peripheral whitelist is used to indicate peripherals that the second container is allowed to access.

7. The mobile terminal based on the public network and the power wireless private network according to claim 6 is characterized in that: The peripherals indicated by the first peripheral whitelist include a user identification module SIM for accessing the power wireless private network, the peripherals indicated by the first peripheral whitelist do not include a secure digital SD card and a WIFI communication module, and the peripherals indicated by the second peripheral whitelist include a SIM, an SD card and a WIFI communication module for accessing the public network.

8. The mobile terminal based on the public network and the power wireless private network according to claim 1, characterized in that: The electric power private network business system is further used to determine whether the first application is in the application whitelist when installing the first application; if it is determined that the first application is in the application whitelist, verify the validity of the first application based on the digital signature of the first application, and install the first application if the validity verification passes; The application whitelist is used to indicate application programs that are allowed to run in the current business system.

9. The mobile terminal based on the public network and the power wireless private network according to claim 8, characterized in that: The power private network business system is also used to determine whether there is a second application in the power private network business system based on the updated application whitelist when the application whitelist is updated, and if so, uninstall the second application in the power private network business system, and the second application is not in the updated application whitelist.

10. The mobile terminal based on the public network and the power wireless private network according to any one of claims 1 to 9, characterized in that: The power private network service system is used to encrypt the first data to be sent based on a preset encryption and decryption algorithm, and send the encrypted first data to the power wireless private network; And receiving the encrypted second data from the power wireless private network, decrypting the encrypted second data based on a preset encryption and decryption algorithm, and obtaining the decrypted second data.

Images