Permission-occupied mobile terminal security protection method
By developing an APP with a single function on a smartphone, it occupies the highest permissions of the camera and microphone, prevents the background APP from stealing user data, solves the problem of users failing to reasonably analyze APP permissions, and realizes effective protection of privacy data and APP market Purification.
Patent Information
- Application Number
- CN202411089591.4
- Authority / Receiving Office
- CN · China
- Patent Type
- Applications(China)
- Current Assignee / Owner
- Filing Date
- 2024-08-09
- Publication Date
- 2024-12-13
AI Technical Summary
There are risks in the operating mechanism of existing smartphones. Users fail to conduct reasonable analysis when using authorized hardware modules and core data, resulting in the background APP that may start the camera and microphone without the user's knowledge to collect privacy data, resulting in serious consequences. .
Develop an APP with a single function, which occupies hardware devices such as cameras and microphones with the highest permissions when starting, prevents other APPs from starting these devices in the background, counts the access frequency of permissions in real time, forms a warning list for obtaining privacy data, and feedback after the user closes the APP. Related log data.
Effectively prevent illegal personnel from stealing user privacy data through remote control, providing on-demand protection for privacy data, and not affecting other mobile phone functions, providing regulatory and evidence collection means for illegal backend behavior of APP, purifying the smartphone APP market.
Smart Images

Figure CN119135793A_ABST
Abstract
Description
Technical Field
[0001] The present invention belongs to the interdisciplinary field of information security and mobile communications, and specifically refers to a method for obtaining and locking the use permissions of various devices such as cameras and microphones in mobile terminals such as mobile phones, reducing the risk of various optical and acoustic acquisition devices being called by backdoor software and stealing data, and more particularly relates to a security protection method for mobile terminals with occupied permissions. Background Art
[0002] With the popularity of smart phones, the importance of user privacy data security protection has become increasingly prominent. Smart phones provide a running environment for various APPs, and the calls to various hardware modules and core data require user confirmation and authorization. However, the above operating mechanism has important risks, which are mainly reflected in three aspects: First, when various APPs are running and installed, users will need to confirm the permissions. Given the large number of detailed terms, users usually click to agree directly and unconsciously authorize the access permissions of hardware modules and core data; second, when some APPs are running and installed, they forcibly require the use permissions of various devices such as cameras and microphones on the condition that "the software cannot run normally" (otherwise, the installation will fail), and users usually do not conduct a reasonable analysis of whether the APP really needs to obtain so many permissions; third, a small number of APPs have a background operation mechanism, that is, various hardware devices such as cameras and microphones are started without the user's knowledge, and user privacy data is collected and sent directly to the APP maintenance unit.
[0003] For high-security event venues, cell phone signal blockers and other means are usually used to block the remote control and signal transmission of mobile phones, or people entering are directly required to lock their phones in shielding cabinets. Once a mobile phone is brought into a high-security event venue by mistake, some uncertified apps may activate hardware devices such as cameras and microphones, record or videotape without the user's knowledge, obtain confidential meeting content and cause serious consequences. Summary of the invention
[0004] In view of the above defects, the technical problem to be solved by the present invention is how to prevent various APPs from starting the camera and microphone in the background, collecting image and audio information and obtaining user privacy data, while not affecting other functions such as making calls and receiving messages.
[0005] In order to technically circumvent the above-mentioned problems and further prevent lawless persons from stealing privacy data for profit through remote control of mobile phones and the like, the present invention develops an APP for smart phones. The APP has a single function and only accesses and occupies various hardware devices such as cameras and microphones with the highest authority when started, preventing various APPs from starting cameras and microphones in the background, collecting images and audio information and obtaining user privacy data, while not affecting other functions such as making calls and receiving messages.
[0006] In order to achieve the above-mentioned effects, the mobile terminal security protection method for permission occupation provided by the present invention realizes functions through APP, and is characterized by including: APP startup and permission list are directly specified by the user; when the APP is started, the APP accesses and occupies the camera, microphone and various hardware devices with the highest authority, and all other APPs cannot turn on the camera and microphone at this time and cannot obtain image and audio information. The forensic system is retained in the APP, and the access frequency of other APPs to the camera and microphone access permissions during the period of occupying permissions is counted in real time to form a privacy data acquisition early warning list.
[0007] Preferably, the above method specifically comprises the following steps:
[0008] S101, permission call, compile a special APP, when the APP is started, call and occupy the camera and microphone with the highest permission, all other APPs cannot open the camera and microphone at this time, and cannot obtain image and audio information;
[0009] S102. Monitoring alarm, retaining the evidence collection system in the APP, real-time statistics on the frequency of other APPs' access to the camera and microphone during the period of occupying permissions, forming a privacy data acquisition warning list, and providing important data basis for remote illegal privacy acquisition.
[0010] Preferably, the above APP obtains the root authority of the mobile phone, and the camera and microphone are occupied at the highest level. Once the APP is started, the camera and microphone will always be in a closed state and the APP will occupy the authority.
[0011] Preferably, during the operation of the above-mentioned APP, if other APPs repeatedly retrieve camera and microphone data, the log data of other APPs' application for access to the camera and microphone are recorded in real time, and the log data is directly fed back to the user after the APP is closed by the user.
[0012] A method for protecting mobile terminal security from permission occupation is implemented through an APP, specifically including:
[0013] S201, when the user enters a specific space, start the APP;
[0014] S202, the APP uses the highest authority to access and occupy the camera and microphone. All other APPs cannot open the camera and microphone and cannot obtain image and audio information at this time;
[0015] S203. During the operation of the APP, no restrictions are imposed on the mobile phone's Wi-Fi, Bluetooth, voice communication, and SMS sending and receiving functions;
[0016] S204. During the running of the APP, if other APPs repeatedly access the camera and microphone data, the log data of other APPs' application for access to the camera and microphone will be recorded in real time, and the log data will be directly fed back to the user after the APP is closed by the user.
[0017] Preferably, the specific space described in S201 above includes a high-security activity venue or a private space.
[0018] Preferably, the above APP startup and permission list are directly specified by the user.
[0019] Preferably, the management authority for the operation and maintenance of the above-mentioned APP is directly scheduled by the user, and other software does not have the authority to modify the APP.
[0020] Preferably, the above APP is set by an administrator of a specific place or environment, and when the mobile phone enters the environment, the APP is automatically awakened.
[0021] The present invention provides a computer-readable storage medium on which a computer program is stored. When the program is executed by a processor, the above method is implemented.
[0022] Compared with the prior art, the present invention achieves the following technical effects:
[0023] Firstly, the present invention proposes a mobile terminal security protection method based on permission occupation, which can prevent illegal persons from arbitrarily turning on the camera and microphone, collecting image and audio data and leaking user privacy by remotely controlling the APP by occupying the camera and microphone usage permissions;
[0024] Secondly, the method proposed in the present invention has a wide range of applications and is easy to operate. It can be promoted as a "conference communication" product and applied to various confidential meetings and daily life, realizing on-demand protection of privacy data without affecting other functions (flight mode does not meet this condition);
[0025] Finally, the present invention can also provide an effective means of collecting evidence for the supervision of illegal background behaviors of APPs, and provide an important solution for purifying the smart phone APP market. BRIEF DESCRIPTION OF THE DRAWINGS
[0026] In order to more clearly illustrate the technical solution of the embodiment of the present invention, the following briefly introduces the drawings required for use in the embodiment of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.
[0027] Figure 1 A schematic diagram of an embodiment of a method for protecting mobile terminal security from authority occupation according to the present invention is shown;
[0028] Figure 2 A schematic diagram of another embodiment of the method for protecting mobile terminal security against permission occupation according to the present invention is shown. DETAILED DESCRIPTION
[0029] The features and exemplary embodiments of various aspects of the present invention will be described in detail below. In order to make the purpose, technical solutions and advantages of the present invention clearer, the present invention will be further described in detail below in conjunction with the accompanying drawings and Examples. It should be understood that the specific embodiments described herein are only configured to explain the present invention and are not configured to limit the present invention. For those skilled in the art, the present invention can be implemented without the need for some of these specific details. The following description of the embodiments is only to provide a better understanding of the present invention by illustrating examples of the present invention.
[0030] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the statement "include..." do not exclude the presence of other identical elements in the process, method, article or device including the elements.
[0031] The present invention provides an embodiment of a mobile terminal security protection method for permission occupation, wherein a specific APP is installed on a smart phone, and the APP startup and permission list are directly specified by the user; when the user enters a high-security activity venue, the APP is started, and at this time, the APP obtains the permission to use the camera and microphone without any empty windows, and access is denied when other APPs call for relevant hardware device permissions.
[0032] In some implementation examples, the root permissions of the smartphone are obtained through the APP without any empty window occupation, and the camera and microphone can be occupied at the highest level. Once the APP is started, the camera and microphone will always be in a closed state and the APP will occupy the permissions; during the operation of the APP, if other APPs repeatedly retrieve the camera and microphone data, the log data of other APPs applying to access the camera and microphone will be recorded in real time, and the log data will be directly fed back to the user after the APP is closed by the user; the management permissions of the APP operation and maintenance are directly scheduled by the user, and other software does not have the permission to modify the APP. The operation mode of the APP and the code features behind it are not limited.
[0033] In some implementation examples, if an unlawful person activates a camera or microphone in a high-security event venue to obtain images or audio information in the venue, confidential documents, core secrets, and user privacy will be leaked. Any method that uses software to shut down the camera or microphone to ensure that private information such as core meetings and user daily life details are not leaked is within the scope of the claims of the present invention.
[0034] The present invention provides an embodiment of a method for protecting the security of a mobile terminal with occupied permissions.
[0035] like Figure 1 As shown, the present invention provides an embodiment of a method for protecting mobile terminal security against permission occupation, including:
[0036] S101, permission call, compile a special APP, when the APP is started, it can call and occupy various hardware devices such as camera and microphone with the highest permission. All other APPs cannot open the camera and microphone at this time, and there is no possibility of obtaining image and audio information;
[0037] S102. Monitoring alarm, retaining the evidence collection system in the APP, real-time statistics on the frequency of other APPs' access to the camera and microphone during the period of occupying permissions, forming a privacy data acquisition warning list, and providing important data basis for remote illegal privacy acquisition.
[0038] In some embodiments, the APP obtains the root permission of the mobile phone, and the camera and microphone are occupied at the highest level. Once the APP is started, the camera and microphone will always be in a closed state and the APP will occupy the permission.
[0039] In some embodiments, during the operation of the APP, if other APPs repeatedly retrieve camera and microphone data, the log data of other APPs' application for access to the camera and microphone are recorded in real time, and the log data is directly fed back to the user after the APP is closed by the user.
[0040] This embodiment also provides a method for protecting the security of a mobile terminal from privilege occupation, and the implementation steps are as follows:
[0041] 1. When the user enters a high-security activity venue or is in a private space, start the APP;
[0042] 2. The APP uses the highest authority to access and occupy various hardware devices such as cameras and microphones. At this time, other APPs will not be able to turn on the camera and microphone, and there is no possibility of obtaining image and audio information.
[0043] 3. During the operation of the APP, it does not restrict other functions of the smartphone, such as WiFi, Bluetooth, voice communication, SMS sending and receiving, etc.
[0044] 4. During the operation of the APP, if other APPs repeatedly access the camera and microphone data, the log data of other APPs' application for access to the camera and microphone will be recorded in real time, and the log data will be directly fed back to the user after the APP is closed by the user.
[0045] As another solution of the present invention, this embodiment also provides a method for protecting the security of a mobile terminal with occupied permissions, which is implemented by installing a specific APP in a mobile phone. The APP can be awakened by a third party with higher permissions. The implementation steps are:
[0046] 1. When a mobile phone with a specific APP enters a specific space, the third party wakes up and starts the APP; for example, in a high-security event venue, the third party is woken up by the software or system set up in the venue.
[0047] 2. The APP uses the highest authority to access and occupy various hardware devices such as the camera and microphone. At this time, other APPs will not be able to turn on the camera and microphone, and there is no possibility of obtaining image and audio information.
[0048] 3. During the operation of the APP, it does not restrict other functions of the smartphone, such as WiFi, Bluetooth, voice communication, SMS sending and receiving, etc.
[0049] 4. During the operation of the APP, if other APPs repeatedly access the camera and microphone data, the log data of other APPs' application for access to the camera and microphone will be recorded in real time, and the log data will be directly fed back to the user after the APP is closed by the user.
[0050] like Figure 2 As shown, this embodiment also provides a mobile terminal security protection method for permission occupation, which is implemented through an APP and specifically includes:
[0051] S201, when the user enters a specific space, start the APP;
[0052] S202, the APP uses the highest authority to access and occupy the camera and microphone. All other APPs cannot open the camera and microphone and cannot obtain image and audio information at this time;
[0053] S203. During the operation of the APP, no restrictions are imposed on the mobile phone's Wi-Fi, Bluetooth, voice communication, and SMS sending and receiving functions;
[0054] S204. During the running of the APP, if other APPs repeatedly access the camera and microphone data, the log data of other APPs' application for access to the camera and microphone will be recorded in real time, and the log data will be directly fed back to the user after the APP is closed by the user.
[0055] In some embodiments, the specific space described in S201 includes a high-security activity venue or a privacy space.
[0056] In some embodiments, APP launch and permission list are directly specified by the user.
[0057] In some embodiments, the management authority for APP operation and maintenance is directly scheduled by the user, and other software does not have the authority to modify the APP.
[0058] In some embodiments, the APP is set up by an administrator of a specific place or environment, and when the mobile phone enters the environment, the APP is automatically awakened.
[0059] Compared with the prior art, the present invention has the following advantages:
[0060] (1) The present invention proposes a mobile terminal security protection method based on permission occupation, which can prevent illegal persons from arbitrarily turning on the camera and microphone, collecting image and audio data, and leaking user privacy by remotely controlling the APP by occupying the camera and microphone usage permissions;
[0061] (2) The method proposed in the present invention has a wide range of applications and is easy to operate. It can be promoted as a "conference communication" product and applied to various confidential meetings and daily life, realizing on-demand protection of privacy data without affecting other functions (flight mode does not meet this condition);
[0062] (3) The present invention can also provide an effective means of collecting evidence for the supervision of illegal background behaviors of APPs, and provide an important method for purifying the smartphone APP market.
[0063] For the convenience of description, the above device is described in various units according to their functions. Of course, when implementing the present application, the functions of each unit can be implemented in the same or multiple software and / or hardware.
[0064] Those skilled in the art will appreciate that embodiments of the present invention may be provided as methods, systems, or computer program products. Therefore, the present invention may take the form of a complete hardware embodiment, a complete software embodiment, or an embodiment combining software and hardware. Moreover, the present invention may take the form of a computer program product implemented on one or more computer-usable storage media (including but not limited to disk storage, CD-ROM, optical storage, etc.) containing computer-usable program code.
[0065] The present invention is described with reference to flowcharts and / or block diagrams of methods, devices (systems), and computer program products according to embodiments of the present invention. It should be understood that each process and / or block in the flowchart and / or block diagram, as well as the combination of processes and / or blocks in the flowchart and / or block diagram, can be implemented by computer program instructions. These computer program instructions can be provided to a processor of a general-purpose computer, a special-purpose computer, an embedded processor, or other programmable data processing device to produce a machine, so that the instructions executed by the processor of the computer or other programmable data processing device generate instructions for implementing the processes in the flowchart and / or block diagram. Figure 1 A process or multiple processes and / or boxes Figure 1 A device that provides the functions specified in a block or multiple blocks.
[0066] The present application may be described in the general context of computer-executable instructions executed by a computer, such as program modules. Generally, program modules include routines, programs, objects, components, data structures, etc. that perform specific tasks or implement specific abstract data types. The present application may also be practiced in distributed computing environments where tasks are performed by remote processing devices connected through a communication network. In a distributed computing environment, program modules may be located in local and remote computer storage media, including storage devices.
[0067] These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing device to operate in a specific manner, so that the instructions stored in the computer-readable memory produce an article of manufacture comprising an instruction device, which implements the process Figure 1 A process or multiple processes and / or boxes Figure 1 A function specified in one or more boxes.
[0068] These computer program instructions can also be loaded onto a computer or other programmable data processing device so that a series of operating steps are executed on the computer or other programmable device to produce a computer-implemented process, thereby providing instructions for implementing the process in the computer or other programmable device. Figure 1 A process or multiple processes and / or boxes Figure 1 The steps for the functions specified in one or more boxes.
[0069] In a typical configuration, a computing device includes one or more processors (CPU), input / output interfaces, network interfaces, and memory.
[0070] The memory may include non-permanent storage in a computer-readable medium, random access memory (RAM) and / or non-volatile memory in the form of read-only memory (ROM) or flash RAM. The memory is an example of a computer-readable medium.
[0071] Computer readable media include permanent and non-permanent, removable and non-removable media that can be implemented by any method or technology to store information. Information can be computer readable instructions, data structures, program modules or other data. Examples of computer storage media include, but are not limited to, phase change memory (PRAM), static random access memory (SRAM), dynamic random access memory (DRAM), other types of random access memory (RAM), read-only memory (ROM), electrically erasable programmable read-only memory (EEPROM), flash memory or other memory technology, compact disk read-only memory (CD-ROM), digital versatile disk (DVD) or other optical storage, magnetic cassettes, magnetic tape magnetic disk storage or other magnetic storage devices or any other non-transmission media that can be used to store information that can be accessed by a computing device. As defined herein, computer readable media does not include temporary computer readable media (transitory media), such as modulated data signals and carrier waves.
[0072] It should also be noted that the terms "include", "comprises" or any other variations thereof are intended to cover non-exclusive inclusion, so that a process, method, commodity or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, commodity or device. In the absence of more restrictions, the elements defined by the sentence "comprises a ..." do not exclude the existence of other identical elements in the process, method, commodity or device including the elements.
[0073] Each embodiment in this specification is described in a progressive manner, and the same or similar parts between the embodiments can be referred to each other, and each embodiment focuses on the differences from other embodiments. In particular, for the system embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiment.
[0074] The above is only an embodiment of the present application and is not intended to limit the present application. For those skilled in the art, the present application may have various changes and variations. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present application should be included in the scope of the claims of the present application.
Claims
1. A method for protecting mobile terminal security from permission occupation, which implements functions through APP, and is characterized by: include: APP launch and permission list are directly specified by the user; When the APP is started, it accesses and occupies the camera, microphone and various hardware devices with the highest permissions. All other APPs cannot open the camera and microphone at this time, nor can they obtain image and audio information. The forensic system is retained in the APP, and real-time statistics are kept on the frequency of other APPs' access to the camera and microphone during the period of occupying permissions, forming a privacy data acquisition warning list.
2. The method for protecting mobile terminal security from permission occupation according to claim 1, characterized in that The method specifically comprises the following steps: S101, permission call, compile a special APP, when the APP is started, call and occupy the camera and microphone with the highest permission, all other APPs cannot open the camera and microphone at this time, and cannot obtain image and audio information; S102. Monitoring alarm, retaining the evidence collection system in the APP, real-time statistics on the frequency of other APPs' access to the camera and microphone during the period of occupying permissions, forming a privacy data acquisition warning list, and providing important data basis for remote illegal privacy acquisition.
3. The method for protecting mobile terminal security from permission occupation according to claim 1 or 2, characterized in that: The APP obtains the root permission of the mobile phone, and occupies the camera and microphone at the highest level. Once the APP is started, the camera and microphone will always be turned off and the APP will occupy the permission.
4. The method for protecting mobile terminal security from privilege occupation according to claim 1 or 2, characterized in that: During the operation of the APP, if other APPs repeatedly access the camera and microphone data, the log data of other APPs' application for access to the camera and microphone will be recorded in real time, and the log data will be directly fed back to the user after the APP is closed by the user.
5. The mobile terminal security protection method for privilege occupation according to claim 1 is implemented through an APP, characterized in that The method specifically comprises: S201, when the user enters a specific space, start the APP; S202, the APP uses the highest authority to access and occupy the camera and microphone. All other APPs cannot open the camera and microphone and cannot obtain image and audio information at this time; S203. During the operation of the APP, no restrictions are imposed on the mobile phone's Wi-Fi, Bluetooth, voice communication, and SMS sending and receiving functions; S204. During the operation of the APP, if other APPs repeatedly access the camera and microphone data, the log data of other APPs' application for access to the camera and microphone will be recorded in real time, and the log data will be directly fed back to the user after the APP is closed by the user.
6. The method for protecting mobile terminal security from privilege occupation according to claim 5, characterized in that: The specific space described in S201 includes a high-security activity venue or a private space.
7. The method for protecting mobile terminal security from privilege occupation according to claim 5, characterized in that: The APP startup and permission list are directly specified by the user.
8. The method for protecting mobile terminal security from privilege occupation according to claim 5, characterized in that: The management authority for the operation and maintenance of the APP is directly scheduled by the user, and other software does not have the authority to modify the APP.
9. The method for protecting mobile terminal security from privilege occupation according to claim 5, characterized in that: The APP is set by an administrator of a specific place or environment, and when the mobile phone enters the environment, the APP is automatically awakened.
10. A computer-readable storage medium having a computer program stored thereon, wherein the program, when executed by a processor, implements the method according to any one of claims 1 to 9.
