Security layer protection method, device, electronic device, storage medium and product

Abstract

The present application discloses a security layer protection method, device, electronic device, storage medium and product, which relates to the field of data security technology and is applicable to a preset operating system. The preset operating system can run on a desktop operating system and carries a target application, including: using a preset image synthesizer to synthesize the layers of the target application into a target image, and detecting a security layer. If a security layer exists, the transparency component of the target image is set to a preset value, which indicates that the desktop operating system is prohibited from taking screenshots or recording the screen of the target image, and the target image is output to the desktop operating system. When the desktop operating system detects that the transparency component is a preset value, the screenshot or screen recording operation is prohibited. For the desktop system, an image from the preset operating system is received, and the transparency component is checked. If it is non-zero, the screenshot or screen recording operation is prohibited. The present application solves the technical problem of how to achieve the protection of the security layer.

Description

Technical Field

[0001] The present application relates to the field of data security technology, and in particular to a security layer protection method, device, electronic device, storage medium and computer program product. Background Art

[0002] In a desktop operating system environment, if the Android security layer is displayed by directly recording the screen or taking screenshots, the security restrictions of the Android system will be encountered. If the user modifies the Android system settings by force to bypass these security restrictions and obtain the security layer content, the desktop operating system will no longer be able to protect these sensitive information, which may lead to sensitive information leakage. Therefore, there is a problem that the security layer cannot be protected when the Android application is compatible with the display under the current desktop operating system. Summary of the invention

[0003] The main purpose of this application is to provide a security layer protection method, device, electronic device, storage medium and computer program product, aiming to solve the technical problem of how to achieve security layer protection.

[0004] To achieve the above-mentioned purpose, the present application proposes a security layer protection method, which is applied to a preset operating system, the preset operating system is compatible with running on a desktop operating system, and a target application is running on the preset operating system. The security layer protection method includes:

[0005] Synthesizing the application layers of the target application into a target image through a preset image synthesizer, and detecting whether the target image has a security layer;

[0006] In the case where the target image has a security layer, the transparency component of the target image is set to a preset value, wherein the preset value is used to indicate that the desktop operating system is prohibited from taking a screenshot or recording the target image;

[0007] The target image is output to the desktop operating system, and the desktop operating system prohibits a screenshot or screen recording operation on the target image when the transparency component is not zero.

[0008] In one embodiment, after the step of detecting whether the target image has a security layer, the step further includes:

[0009] In the case where the target image does not have a security layer, the transparency component of the target image is set to a non-preset value, wherein the non-preset value is used to represent that the desktop operating system is not restricted from taking screenshots or recording the target image.

[0010] The present application proposes a security layer protection method, which is applied to a desktop operating system, wherein the desktop operating system is compatible with a preset operating system, and a target application is running on the preset operating system. The security layer protection method includes:

[0011] Receiving a target image output by the preset operating system, wherein the target image is synthesized by a preset image synthesizer in the preset operating system based on each application layer of the target application, and if the target image includes a security layer, a transparency component in the target image is set to a preset value by the preset operating system;

[0012] The transparency component of the target image is obtained, and when the transparency component is not zero, a screenshot or screen recording operation on the target image is prohibited.

[0013] After the step of receiving the target image output by the preset operating system, the step further includes:

[0014] Adjusting the size and resolution of the target image so that the target image fits the desktop of the desktop operating system;

[0015] The target image is rendered to the desktop, and security information in the target image is acquired through a preset security protocol.

[0016] The steps of prohibiting screenshot or screen recording operations include:

[0017] When receiving a screenshot or screen recording operation of the target image, disabling the screenshot tool and blurring the sensitive information in the target image;

[0018] Output a prompt message prohibiting screenshot or recording, and verify whether the operator of the current desktop operating system is legal.

[0019] The step of verifying whether the operator of the current desktop operating system is legitimate includes:

[0020] A password verification pop-up window is displayed to receive the security password entered by the operator of the current desktop operating system and verify whether the security password is the same as the preset password;

[0021] In the case that the security password is the same as the preset password, the operator of the current desktop operating system is determined to be legitimate, and the blurring of the sensitive information in the target image is cancelled.

[0022] In addition, to achieve the above-mentioned purpose, the present application also proposes a security layer protection device, the security layer protection device includes a preset operating system and a desktop operating system, the preset operating system is compatible with running on the desktop operating system, a target application is running on the preset operating system, the desktop operating system is compatible with running on the preset operating system, and the target application is running on the preset operating system, the security layer protection device includes:

[0023] A preset operating system, used to synthesize the application layers of the target application into a target image through a preset image synthesizer, and detect whether the target image has a security layer;

[0024] In the case where the target image has a security layer, the transparency component of the target image is set to a preset value, wherein the preset value is used to indicate that the desktop operating system is prohibited from taking a screenshot or recording the target image;

[0025] Outputting the target image to the desktop operating system, wherein the desktop operating system prohibits a screenshot or screen recording operation on the target image when the transparency component is not zero;

[0026] A desktop operating system, configured to receive a target image output by the preset operating system, wherein the target image is synthesized by a preset image synthesizer in the preset operating system based on each application layer of the target application, and if the target image includes a security layer, a transparency component in the target image will be set to a preset value by the preset operating system;

[0027] The transparency component of the target image is obtained, and when the transparency component is not zero, a screenshot or screen recording operation on the target image is prohibited.

[0028] In addition, to achieve the above-mentioned purpose, the present application also proposes an electronic device, which includes: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the security layer protection method described above.

[0029] In addition, to achieve the above-mentioned purpose, the present application also proposes a storage medium, which is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by the processor, the steps of the security layer protection method described above are implemented.

[0030] In addition, to achieve the above-mentioned purpose, the present application also provides a computer program product, which includes a computer program, and when the computer program is executed by a processor, the steps of the security layer protection method described above are implemented.

[0031] The present application provides a security layer protection method, which is applied to a preset operating system, the preset operating system is compatible with running on a desktop operating system, and a target application is running on the preset operating system. The security layer protection method includes: synthesizing the application layers of the target application into a target image through a preset image synthesizer, and detecting whether the target image has a security layer; if the target image has a security layer, setting the transparency component of the target image to a preset value, wherein the preset value is used to indicate that the desktop operating system is prohibited from taking screenshots or recording screens of the target image; outputting the target image to the desktop operating system, and the desktop operating system prohibiting the taking screenshots or recording screens of the target image when the transparency component is not zero;

[0032] Applied to a desktop operating system, the desktop operating system is compatible with a preset operating system, and a target application is running on the preset operating system. The security layer protection method includes: receiving a target image output by the preset operating system, wherein the target image is synthesized by a preset image synthesizer in the preset operating system based on each application layer of the target application, and if the target image carries a security layer, the transparency component in the target image will be set to a preset value by the preset operating system; obtaining the transparency component of the target image, and when the transparency component is not zero, prohibiting screenshots or screen recording operations on the target image.

[0033] This application sets the transparency component as a mark of security information, determines whether the image contains security information that needs to be protected based on the value of the transparency component, and decides whether to allow screenshots or screen recording operations. This not only ensures the normal display of the security layer, but also achieves effective protection of sensitive information without affecting the normal use of users, thereby improving the convenience and safety of operations. Compared with related solutions that can achieve screenshot or screen recording operations but lack protection for the security layer, this application obtains the transparency component of the target image and determines whether it carries security information, thereby determining whether to allow screenshot or screen recording operations. The invalid bit of the transparency component is used as a carrier of security information, realizing implicit storage of information, avoiding the need for additional storage space, while maintaining the normal display of the image, protecting sensitive information, and improving the accuracy and effectiveness of security protection. BRIEF DESCRIPTION OF THE DRAWINGS

[0034] The accompanying drawings, which are incorporated in and constitute a part of this specification, illustrate embodiments consistent with the present application and, together with the description, serve to explain the principles of the present application.

[0035] In order to more clearly illustrate the embodiments of the present application or the technical solutions in the prior art, the drawings required for use in the embodiments or the description of the prior art will be briefly introduced below. Obviously, for ordinary technicians in this field, other drawings can be obtained based on these drawings without paying any creative work.

[0036] Figure 1 A flowchart of the first embodiment of the security layer protection method of the present application is provided;

[0037] Figure 2 A flowchart of the transparency component value assignment operation of the security layer protection method of this application;

[0038] Figure 3 A flowchart diagram of the second embodiment of the security layer protection method of the present application is provided;

[0039] Figure 4 This is a schematic diagram of the module structure of the security layer protection device according to an embodiment of the present application;

[0040] Figure 5 Schematic diagram of the device structure of the hardware operating environment involved in the security layer protection method in the embodiment of the present application.

[0041] The purpose, features and advantages of this application will be further described in conjunction with the embodiments and with reference to the accompanying drawings. DETAILED DESCRIPTION

[0042] It should be understood that the specific embodiments described herein are only used to explain the technical solutions of the present application and are not used to limit the present application.

[0043] In order to better understand the technical solution of the present application, a detailed description will be given below in conjunction with the accompanying drawings and specific implementation methods.

[0044] The embodiment of the present application is applied to a preset operating system, which is compatible with a desktop operating system, and a target application is running on the preset operating system. The main solution is: synthesize the application layers of the target application into a target image through a preset image synthesizer, and detect whether the target image has a security layer; if the target image has a security layer, set the transparency component of the target image to a preset value, wherein the preset value is used to indicate that the desktop operating system is prohibited from taking screenshots or recording screens of the target image; output the target image to the desktop operating system, and the desktop operating system prohibits taking screenshots or recording screens of the target image when the transparency component is not zero. Applied to a desktop operating system, the desktop operating system is compatible with a preset operating system, and a target application is running on the preset operating system. The main solution is: receive the target image output by the preset operating system, wherein the target image is synthesized by the preset image synthesizer in the preset operating system based on the application layers of the target application, and if the target image has a security layer, the transparency component in the target image will be set to a preset value by the preset operating system; obtain the transparency component of the target image, and prohibit taking screenshots or recording screens of the target image when the transparency component is not zero.

[0045] In this embodiment, for ease of description, the following description is made with the security layer protection system as the execution subject.

[0046] Since the existing technology transfers restricted security layers (such as login interface, password input, etc.) from Android applications under the desktop operating system by directly recording or taking screenshots, it not only violates the protection mechanism of the Android system for the security layer (resulting in the return of black screen data), but also even if these restrictions are bypassed by coercive means, the desktop operating system cannot properly protect the transferred security layer, thus leaving serious security risks.

[0047] The present application provides a solution, which obtains the transparency component of the target image and determines whether it carries security information, thereby determining whether screenshot or screen recording operations are allowed, and uses the invalid bits of the transparency component as a carrier of security information to achieve implicit storage of information, avoiding the need for additional storage space, while maintaining the normal display of the image, protecting sensitive information, and improving the accuracy and effectiveness of security protection.

[0048] It should be noted that the execution subject of this embodiment can be a computing service device with data processing, network communication and program running functions, such as a tablet computer, a personal computer, a mobile phone, etc., or an electronic device capable of realizing the above functions, a security layer protection system, etc. The following takes the security layer protection system as an example to illustrate this embodiment and the following embodiments.

[0049] Based on this, the present application embodiment provides a security layer protection method, referring to Figure 1 , Figure 1 This is a flow chart of the first embodiment of the security layer protection method of the present application.

[0050] In this embodiment, the preset operating system is applied, the preset operating system is compatible with the desktop operating system, and the preset operating system runs a target application. The security layer protection method includes steps S01 to S03:

[0051] Step S01, synthesizing the application layers of the target application into a target image through a preset image synthesizer, and detecting whether the target image has a security layer;

[0052] It should be noted that the preset operating system refers to the operating system environment on which this application is based, which may be the Android system; the desktop operating system refers to the host environment in which the preset operating system runs, such as the Linux desktop operating system; the target application refers to the application running on the preset operating system; the preset image synthesizer (customized SurfaceFlinger) refers to a pre-configured image processing algorithm for synthesizing multiple layers into a target image. The layers can be scaled, rotated, and the transparency adjusted according to specific rules or parameters to achieve the final image effect; application layers refer to different images or interface elements in the target application, such as backgrounds, buttons, text, etc.; and the target image refers to the overall image synthesized by the application layers through the synthesizer.

[0053] In addition, it should be noted that, through a preset image synthesizer, image data from different sources (i.e., application layers) are synthesized into a unified target image. During the synthesis process, the target image is detected to check whether each layer contains a security layer mark to determine whether it contains security information. The security information is embedded in the layer data in the form of specific tags or attributes, for example, identified by specific metadata fields or layer attributes. The system can identify which layers are marked as "secure" or contain sensitive content by parsing the metadata or attributes of the layers. If a layer is marked as a security layer, the entire target image will be deemed to contain security information.

[0054] It is understandable that, since existing solutions (such as Android native SurfaceFlinger) directly draw a security layer in black when encountering it, resulting in information loss, step S01 is performed to detect and retain the security layer information while synthesizing the application layers of the target application into the target image through a preset image synthesizer, rather than simply drawing it in black. This provides a basis for subsequent security control.

[0055] Step S02, in the case where the target image has a security layer, setting the transparency component of the target image to a preset value, wherein the preset value is used to indicate that the desktop operating system is prohibited from taking a screenshot or recording the target image;

[0056] It should be noted that image data is usually stored in RGBA format, that is, each pixel consists of four components: red (R), green (G), blue (B) and transparency (Alpha, A). Each component occupies 8 bits, and a total of 32 bits form a complete pixel information. Among them, A (Alpha) represents the transparency component. The transparency component is a value between 0 (completely transparent) and 255 (completely opaque), which determines the transparency of the pixel.

[0057] In addition, it should be noted that when the target image contains a security layer, the system sets the transparency component (alpha component) of a specific pixel of the target image (such as the first pixel) to a preset value (such as 200). This preset value is used to identify that the target image contains sensitive information and prohibits the desktop operating system from taking screenshots or recording the screen.

[0058] For example, to help understand the technical concept or technical principle of this application, please refer to Figure 2 , Figure 2 A transparency component value assignment operation flow chart is provided. The system receives a batch of application layers: A application layer, B application layer, and C application layer. Among them, C application layer carries security information and is a security layer. The layers to be synthesized are synthesized into a target image through a preset image synthesizer. At this time, the target image carries security information, and the transparency component of a specific pixel bit of the target image needs to be set to a preset value, indicating that screenshot or screen recording operations of the desktop operating system are prohibited. If the target image does not contain a security layer when synthesized, the transparency component of the preset pixel bit is set to zero, indicating that there is no restriction on the target image, and screenshot or screen recording operations can be performed normally. After completing the transparency component assignment operation, the target image is output.

[0059] It is understandable that since the existing solutions rely on security controls at the application level (such as disabling the screenshot button), but these methods are easily bypassed, step S02 is performed. In the process of synthesizing the target image, the transparency component of the application layer has been used in the synthesis process. At this time, in the synthesized image, the transparency component is regarded as an invalid bit. By utilizing the underutilized space of the transparency component in the RGBA mode, an identifier that can identify security information is embedded in the target image, thereby avoiding additional storage and transmission overhead, and also ensuring the reliability and identifiability of the security information. In addition, by agreeing on a specific preset numerical value to indicate the presence or absence of security information, the efficiency and accuracy of security information processing are improved.

[0060] Step S03: output the target image to the desktop operating system. When the transparency component is not zero, the desktop operating system prohibits the screenshot or screen recording operation of the target image.

[0061] It should be noted that when the target image is output to the desktop operating system, after receiving the image, the desktop operating system will check whether the transparency component of the target image is not zero (that is, whether it contains the preset security mark). If the transparency component is not zero, the desktop operating system will prohibit screenshots or screen recording operations on the image.

[0062] It is understandable that since the existing solutions rely on security policies at the operating system level (such as screen recording permission control), but these policies are usually not flexible enough and can be easily bypassed by users with advanced permissions, step S03 is performed to achieve more flexible and effective security protection by combining the security identification information in the image data and the security control mechanism of the desktop operating system.

[0063] In a feasible implementation manner, in step S01, after the step of detecting whether the target image has a security layer, step A01 is further included:

[0064] Step A01, when the target image does not have a security layer, sets the transparency component of the target image to a non-preset value, wherein the non-preset value is used to indicate that the desktop operating system is not restricted from taking screenshots or recording screens of the target image.

[0065] It should be noted that if the target image is not detected to have a security layer, the transparency component of the target image is set to a non-preset value. The non-preset value is a specific integer value, which is used to indicate that the target image does not contain security information, so that the desktop operating system can take screenshots or record the screen. The non-preset value is pre-defined and is different from the preset value used to indicate the security layer. For example, you can choose to set the transparency component to 0 (indicating complete transparency) or 255 (indicating complete opacity, but here in order to distinguish the security layer, 255 is usually not selected as the non-preset value), ensuring that the non-preset value is logically distinguished from the preset value so that the desktop operating system can correctly identify it and adjust its behavior accordingly.

[0066] In this implementation, by utilizing the transparency component in the target image, it is ensured that the desktop operating system can perform screenshot or screen recording operations normally without affecting the display quality of the image, thereby providing a strong technical guarantee for the secure interaction between the preset operating system and the desktop operating system.

[0067] Based on the first embodiment of the present application, in the second embodiment of the present application, the same or similar contents as those in the above-mentioned embodiment 1 can be referred to the above introduction, and will not be repeated in the following. Figure 3 , applied to a desktop operating system, the desktop operating system is compatible with a preset operating system, and the preset operating system runs a target application. The security layer protection method includes steps S11~S12:

[0068] Step S11, receiving a target image output by a preset operating system, wherein the target image is synthesized by a preset image synthesizer in the preset operating system based on various application layers of the target application, and if the target image has a security layer, the transparency component in the target image will be set to a preset value by the preset operating system;

[0069] It should be noted that the desktop operating system receives the target image output from the preset operating system. The target image is the result of synthesis by the preset image synthesizer based on the application layers of the target application. During the synthesis of the target image, if the target image contains a security layer (that is, contains sensitive information), the preset operating system will set the transparency component of the target image to a preset value (such as 200). This preset value is agreed upon between the desktop operating system and the preset operating system, and is used to identify that the image contains a security layer.

[0070] Step S12, obtaining the transparency component of the target image, and when the transparency component is not zero, prohibiting the screenshot or screen recording operation of the target image.

[0071] It should be noted that the desktop operating system reads the transparency component of a specific pixel in the target image. If the transparency component is not zero and equal to a preset value (such as 200), the desktop operating system determines that the target image contains sensitive information and needs to be protected, and prohibits screenshots or screen recording operations on the target image. If the transparency component is zero, the desktop operating system determines that the target image does not contain sensitive information, and does not restrict operations on the target image, allowing users to take screenshots or screen recording operations.

[0072] In this implementation, a preset numerical mechanism of the transparency component ensures that images with security layers will not be arbitrarily captured or recorded, thereby effectively protecting the security of sensitive information. For images that do not contain sensitive information, users can still freely take screenshots or record screens without unnecessary restrictions, which ensures the convenience and flexibility of users during normal use.

[0073] In a feasible implementation manner, in step S11, after the step of receiving the target image output by the preset operating system, steps B01 to B02 are also included:

[0074] Step B01, adjusting the size and resolution of the target image so that the target image fits the desktop of the desktop operating system;

[0075] It should be noted that the target images have different sizes and resolutions. In order to make them adapt to the desktop of the desktop operating system, the desktop operating system needs to analyze the original size and resolution of the image and the display parameters of the desktop environment (such as screen size, resolution, etc.). Based on the analysis of the image properties and the desktop environment, the desktop operating system will calculate a set of adjustment parameters for adjusting the size and resolution of the target image to match the desktop environment. Applying the calculated adjustment parameters, the desktop operating system scales, crops, or fills the target image to ensure that it can adapt to the desktop of the desktop operating system. The desktop of the desktop operating system refers to the graphical interface that the user sees when using the desktop operating system, which includes various applications, folders, shortcuts and other elements, as well as toolbars, menu bars and other interface elements used to display and operate these elements.

[0076] Step B02: Render the target image to the desktop, and obtain security information in the target image through a preset security protocol.

[0077] It should be noted that preparing the rendering environment includes determining the display position, size and interaction method of the target image with other desktop elements. Using the prepared rendering environment, the desktop operating system draws the target image on the desktop by decoding, rendering and synthesizing the image with other desktop elements. After the rendering is completed, the preset security protocol is triggered. The preset security protocol is used to identify and obtain security information in the target image, such as security layers, encryption tags or sensitive data. According to the provisions of the preset security protocol, the obtained security information is decrypted, verified and saved.

[0078] In this implementation, by adjusting the size and resolution of the target image, it is possible to ensure that the image maintains clarity and integrity on different operating systems and devices. Users can obtain the best visual experience without performing additional scaling or adjustment operations. By presetting security protocols, effective protection and management of security information in the image are achieved, ensuring the integrity and confidentiality of security information during the image rendering process.

[0079] In a feasible implementation manner, in step S12, the step of prohibiting the screenshot or screen recording operation of the target image includes steps B11 to B12:

[0080] Step B11, when receiving a screenshot or screen recording operation of the target image, disabling the screenshot tool of the desktop operating system;

[0081] It should be noted that when the system detects a screenshot or screen recording request from a user or software, it checks the transparency component value in the target image. If the transparency component is a preset value (such as 200), it indicates that the target image contains security information, and the screenshot tool of the desktop operating system is disabled, including but not limited to the system's built-in screenshot shortcut keys, third-party screenshot software, and other programs with the function of capturing screen content.

[0082] Step B12, outputting a prompt message prohibiting screenshot or recording, blurring the sensitive information in the target image, and verifying whether the operator of the current desktop operating system is legitimate.

[0083] It should be noted that after detecting a screenshot or screen recording request, if the target image contains security information, the system ensures that no operations related to screenshot or screen recording are performed, such as saving files, displaying previews, etc., and outputs prompt messages prohibiting screenshot or recording by popping up dialog boxes, displaying desktop notifications, or recording messages in system logs. In order to ensure that sensitive information in the target image is not leaked, the sensitive information in the image is blurred. Blurring is an image processing technology that makes sensitive information in the image difficult to recognize or identify by reducing the resolution of the image, adding noise, using pixelation or mosaics, etc. The specific degree and method of blurring depends on the sensitivity of the sensitive information and the security policy of the system. At the same time, it verifies whether the operator of the current desktop operating system is legitimate to ensure that only authorized users can access and view the target image, thereby further reducing the risk of sensitive information leakage. The operator refers to the user or entity who is currently using the desktop operating system and trying to view the target image.

[0084] In this embodiment, when the system detects a screenshot or screen recording operation on the target image, the screenshot tool of the desktop operating system is disabled, effectively preventing data from being illegally copied and protecting sensitive information in the target image from being leaked. Through prompt messages, the system can guide users to comply with safety regulations, enhancing the transparency and user-friendliness of the system. Through fuzzy processing, the system can further reduce the risk of sensitive information leakage. Even if the image is illegally obtained, sensitive information cannot be read directly. By verifying the legitimacy of the operator, the system can ensure that only authorized users can access and view the target image, thereby improving the security and credibility of the system.

[0085] In a feasible implementation, in step B12, the step of verifying whether the operator of the current desktop operating system is legitimate also includes steps B21-B22:

[0086] Step B21, a password verification pop-up window is displayed to receive the security password input by the operator of the current desktop operating system, and to verify whether the security password is the same as the preset password;

[0087] It should be noted that the password verification pop-up window is a user interface element that prompts users to enter a security password to verify their identity. It contains elements such as input boxes and confirmation buttons so that users can enter and confirm their passwords. The security password is the password that the user needs to enter in order to cancel the blurring of sensitive information in the target image. The preset password is the password preset by the system administrator or developer within the system, which is used to compare with the security password entered by the user. Only when the two are consistent, the user is identified as a legitimate user.

[0088] In addition, it should be noted that the system displays a password verification pop-up window on the desktop. The operator of the current desktop operating system enters a security password in the password input box and clicks the confirmation button to submit. After the system receives the security password entered by the operator, it compares it with the password preset in the system or on the server (preset password), and returns a verification success or failure message based on the result of the password comparison.

[0089] Step B22, when the security password is the same as the preset password, it is determined that the operator of the current desktop operating system is legitimate, and the blurring of sensitive information in the target image is cancelled.

[0090] It should be noted that, based on the password verification result returned in step B01, it is determined whether the operator of the current desktop operating system has entered the correct security password. If the security password is the same as the preset password, the system determines that the current operator is a legitimate user. If they are different, it is determined to be an illegal user. For legitimate users, the blurring of sensitive information in the target image is canceled so that the sensitive information in the image can be clearly displayed. The system updates the interface status and displays a clear target image to the legitimate user. At the same time, the operation buttons related to sensitive information are hidden or disabled to prevent legitimate users from performing improper operations.

[0091] In this implementation, a simple identity authentication mechanism is established by popping up a password verification window and requiring the user to enter a secure password, thereby effectively preventing unauthorized users from accessing the target image and the sensitive information it contains. After confirming that the user's identity is legitimate, the normal display of sensitive information in the target image is restored, ensuring that legitimate users can clearly view sensitive information, protecting data security and improving user experience.

[0092] It should be noted that the above examples are only used to understand the present application and do not constitute a limitation on the security layer protection method of the present application. More simple transformations based on this technical concept are all within the protection scope of the present application.

[0093] This application also provides a safety layer protection device, please refer to Figure 4The security layer protection device includes a preset operating system 10 and a desktop operating system 20, the preset operating system 10 is compatible with the desktop operating system 20, a target application is running on the preset operating system 10, the desktop operating system 20 is compatible with the preset operating system 10, and the target application is running on the preset operating system 10, the security layer protection device includes:

[0094] A preset operating system 10 is used to synthesize the application layers of the target application into a target image through a preset image synthesizer, and detect whether the target image has a security layer;

[0095] In the case where the target image has a security layer, the transparency component of the target image is set to a preset value, wherein the preset value is used to indicate that the desktop operating system 20 is prohibited from taking a screenshot or recording the target image;

[0096] The target image is output to the desktop operating system 20. When the transparency component is not zero, the desktop operating system 20 prohibits the screenshot or screen recording operation of the target image.

[0097] The desktop operating system 20 is used to receive a target image output by the preset operating system 10, wherein the target image is synthesized by a preset image synthesizer in the preset operating system 10 based on various application layers of the target application, and if the target image has a security layer, the transparency component in the target image will be set to a preset value by the preset operating system 10;

[0098] Get the transparency component of the target image. If the transparency component is not zero, the screenshot or screen recording operation of the target image is prohibited.

[0099] Optionally, the preset operating system 10 is further used for:

[0100] When the target image does not have a security layer, the transparency component of the target image is set to a non-preset value, wherein the non-preset value is used to indicate that the desktop operating system is not restricted from taking screenshots or recording the target image.

[0101] Optionally, the desktop operating system 20 is also used for:

[0102] Adjusting the size and resolution of the target image so that the target image fits the desktop of the desktop operating system;

[0103] The target image is rendered to the desktop, and the security information in the target image is obtained through a preset security protocol.

[0104] Optionally, the desktop operating system 20 is also used for:

[0105] When receiving a screenshot or screen recording operation of the target image, disable the screenshot tool and blur the sensitive information in the target image;

[0106] Output a prompt message prohibiting screenshot or recording, and verify whether the operator of the current desktop operating system is legal.

[0107] Optionally, the desktop operating system 20 is also used for:

[0108] A password verification pop-up window is displayed to receive the security password entered by the operator of the current desktop operating system and verify whether the security password is the same as the preset password;

[0109] When the security password is the same as the preset password, the operator of the current desktop operating system is determined to be legitimate, and the blurring of sensitive information in the target image is cancelled.

[0110] The security layer protection device provided by the present application adopts the security layer protection method in the above embodiment, which can solve the technical problem of how to achieve normal display and security protection of the security layer. Compared with the prior art, the beneficial effects of the security layer protection device provided by the present application are the same as the beneficial effects of the security layer protection method provided by the above embodiment, and other technical features in the security layer protection device are the same as the features disclosed in the above embodiment method, which will not be repeated here.

[0111] The present application provides an electronic device, which includes: at least one processor; and a memory communicatively connected to the at least one processor; wherein the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor so that the at least one processor can execute the security layer protection method in the above-mentioned embodiment one.

[0112] Reference below Figure 5 , which shows a schematic diagram of the structure of an electronic device suitable for implementing the embodiments of the present application. The electronic devices in the embodiments of the present application may include but are not limited to mobile terminals such as mobile phones, laptop computers, digital broadcast receivers, PDAs (Personal Digital Assistants), PADs (Portable Application Descriptions: tablet computers), PMPs (Portable Media Players: portable multimedia players), vehicle-mounted terminals (such as vehicle-mounted navigation terminals), etc., and fixed terminals such as digital TVs, desktop computers, etc. Figure 5 The electronic device shown is merely an example and should not bring any limitation to the functions and scope of use of the embodiments of the present application.

[0113] like Figure 5As shown, the electronic device may include a processing device 1001 (e.g., a central processing unit, a graphics processor, etc.), which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM: Read Only Memory) 1002 or a program loaded from a storage device 1003 to a random access memory (RAM: Random Access Memory) 1004. In RAM1004, various programs and data required for the operation of the electronic device are also stored. The processing device 1001, ROM1002, and RAM1004 are connected to each other through a bus 1005. An input / output (I / O) interface 1006 is also connected to the bus. Generally, the following systems can be connected to the I / O interface 1006: an input device 1007 including, for example, a touch screen, a touch pad, a keyboard, a mouse, an image sensor, a microphone, an accelerometer, a gyroscope, etc.; an output device 1008 including, for example, a liquid crystal display (LCD: Liquid Crystal Display), a speaker, a vibrator, etc.; a storage device 1003 including, for example, a magnetic tape, a hard disk, etc.; and a communication device 1009. The communication device 1009 can allow the electronic device to communicate with other devices wirelessly or by wire to exchange data. Although the figure shows an electronic device with various systems, it should be understood that it is not required to implement or have all the systems shown. More or fewer systems can be implemented or have alternatively.

[0114] In particular, according to the embodiments disclosed in the present application, the process described above with reference to the flowchart can be implemented as a computer software program. For example, the embodiments disclosed in the present application include a computer program product, which includes a computer program carried on a computer-readable medium, and the computer program includes a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device 1003, or installed from a ROM 1002. When the computer program is executed by the processing device 1001, the above-mentioned functions defined in the method of the embodiment disclosed in the present application are executed.

[0115] The electronic device provided by the present application adopts the security layer protection method in the above embodiment, which can solve the technical problem of how to achieve normal display and security protection of the security layer. Compared with the prior art, the beneficial effects of the electronic device provided by the present application are the same as the beneficial effects of the security layer protection method provided by the above embodiment, and the other technical features in the electronic device are the same as the features disclosed in the method of the previous embodiment, which will not be repeated here.

[0116] It should be understood that the various parts disclosed in this application can be implemented by hardware, software, firmware or a combination thereof. In the description of the above embodiments, specific features, structures, materials or characteristics can be combined in any one or more embodiments or examples in a suitable manner.

[0117] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

[0118] The present application provides a computer-readable storage medium having computer-readable program instructions (ie, computer programs) stored thereon, the computer-readable program instructions being used to execute the security layer protection method in the above-mentioned embodiment.

[0119] The computer-readable storage medium provided in the present application may be, for example, a USB flash drive, but is not limited to electrical, magnetic, optical, electromagnetic, infrared, or semiconductor systems or devices, or any combination of the above. More specific examples of computer-readable storage media may include, but are not limited to: an electrical connection with one or more wires, a portable computer disk, a hard disk, a random access memory (RAM: Random Access Memory), a read-only memory (ROM: Read Only Memory), an erasable programmable read-only memory (EPROM: Erasable Programmable Read Only Memory or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM: CD-Read Only Memory), an optical storage device, a magnetic storage device, or any suitable combination of the above. In this embodiment, the computer-readable storage medium may be any tangible medium containing or storing a program, which may be used by or in combination with an instruction execution system or device. The program code contained on the computer-readable storage medium may be transmitted using any appropriate medium, including but not limited to: wires, optical cables, RF (Radio Frequency: Radio Frequency), etc., or any suitable combination of the above.

[0120] The computer-readable storage medium may be included in the electronic device, or may exist independently without being installed in the electronic device.

[0121] The above-mentioned computer-readable storage medium carries one or more programs. When the above-mentioned one or more programs are executed by an electronic device, the security layer protection device is applied to a preset operating system, the preset operating system is compatible with running on a desktop operating system, and a target application is running on the preset operating system. The security layer protection method includes: synthesizing the application layers of the target application into a target image through a preset image synthesizer, and detecting whether the target image has a security layer; in the case that the target image has a security layer, setting the transparency component of the target image to a preset value, wherein the preset value is used to represent that the desktop operating system is prohibited from taking screenshots or recording the screen of the target image; outputting the target image to the desktop operating system, and the desktop operating system prohibits taking screenshots or recording the screen of the target image when the transparency component is not zero.

[0122] Applied to a desktop operating system, the desktop operating system is compatible with a preset operating system, and a target application is running on the preset operating system. The security layer protection method includes: receiving a target image output by the preset operating system, wherein the target image is synthesized by a preset image synthesizer in the preset operating system based on each application layer of the target application, and if the target image carries a security layer, the transparency component in the target image will be set to a preset value by the preset operating system; obtaining the transparency component of the target image, and when the transparency component is not zero, prohibiting screenshots or screen recording operations on the target image.

[0123] Computer program code for performing the operations of the present application may be written in one or more programming languages ​​or a combination thereof, including object-oriented programming languages ​​such as Java, Smalltalk, C++, and conventional procedural programming languages ​​such as "C" or similar programming languages. The program code may be executed entirely on the user's computer, partially on the user's computer, as a separate software package, partially on the user's computer and partially on a remote computer, or entirely on a remote computer or server. In the case of a remote computer, the remote computer may be connected to the user's computer through any type of network, including a local area network (LAN) or a wide area network (WAN), or may be connected to an external computer (e.g., via the Internet using an Internet service provider).

[0124] The flow chart and block diagram in the accompanying drawings illustrate the possible architecture, function and operation of the system, method and computer program product according to various embodiments of the present application. In this regard, each square box in the flow chart or block diagram can represent a module, a program segment or a part of a code, and the module, the program segment or a part of the code contains one or more executable instructions for realizing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the square box can also occur in a sequence different from that marked in the accompanying drawings. For example, two square boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each square box in the block diagram and / or flow chart, and the combination of the square boxes in the block diagram and / or flow chart can be implemented with a dedicated hardware-based system that performs a specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions.

[0125] The modules involved in the embodiments described in this application may be implemented by software or hardware, wherein the name of the module does not constitute a limitation on the unit itself in some cases.

[0126] The readable storage medium provided by the present application is a computer-readable storage medium, which stores computer-readable program instructions (i.e., computer programs) for executing the above-mentioned security layer protection method, and can solve the technical problem of how to achieve normal display and security protection of the security layer. Compared with the prior art, the beneficial effects of the computer-readable storage medium provided by the present application are the same as the beneficial effects of the security layer protection method provided by the above-mentioned embodiment, and will not be repeated here.

[0127] The present application also provides a computer program product, including a computer program, which implements the steps of the security layer protection method as described above when the computer program is executed by a processor.

[0128] The computer program product provided by the present application can solve the technical problem of how to achieve normal display and security protection of the security layer. Compared with the prior art, the beneficial effects of the computer program product provided by the present application are the same as the beneficial effects of the security layer protection method provided by the above embodiment, which will not be repeated here.

[0129] The above descriptions are only some embodiments of the present application, and are not intended to limit the patent scope of the present application. All equivalent structural changes made using the contents of the present application specification and drawings under the technical concept of the present application, or direct / indirect applications in other related technical fields are included in the patent protection scope of the present application.

Claims

1. A security layer protection method, characterized in that: Applied to a preset operating system, the preset operating system is compatible with running on a desktop operating system, and a target application is running on the preset operating system. The security layer protection method includes: Synthesizing the application layers of the target application into a target image through a preset image synthesizer, and detecting whether the target image has a security layer; In the case where the target image has a security layer, setting the transparency component of the target image to a preset value, wherein the preset value is used to indicate that the desktop operating system is prohibited from taking a screenshot or recording the target image; Outputting the target image to the desktop operating system, wherein the desktop operating system prohibits a screenshot or screen recording operation on the target image when the transparency component is not zero; Wherein, after the step of the desktop operating system receiving the target image output by the preset operating system, the step further includes: Analyzing the original size and resolution of the target image and display parameters of the desktop in the desktop operating system, and adjusting the size and resolution of the target image so that the target image fits the desktop; The target image is rendered to the desktop, and security information in the target image is acquired through a preset security protocol.

2. The security layer protection method according to claim 1, characterized in that: After the step of detecting whether the target image has a security layer, the following step is further included: In the case where the target image does not have a security layer, the transparency component of the target image is set to a non-preset value, wherein the non-preset value is used to represent that the desktop operating system is not restricted from taking screenshots or recording the target image.

3. A security layer protection method, characterized in that: Applied to a desktop operating system, the desktop operating system is compatible with a preset operating system, and the preset operating system runs a target application. The security layer protection method includes: Receiving a target image output by the preset operating system, wherein the target image is synthesized by a preset image synthesizer in the preset operating system based on each application layer of the target application, and if the target image includes a security layer, a transparency component in the target image is set to a preset value by the preset operating system; Obtaining a transparency component of the target image, and prohibiting a screenshot or screen recording operation on the target image when the transparency component is not zero; Wherein, after the step of receiving the target image output by the preset operating system, the method further includes: Analyzing the original size and resolution of the target image and display parameters of the desktop in the desktop operating system, and adjusting the size and resolution of the target image so that the target image fits the desktop; The target image is rendered to the desktop, and security information in the target image is acquired through a preset security protocol.

4. The security layer protection method according to claim 3, characterized in that: The step of prohibiting the screenshot or screen recording operation of the target image includes: When receiving a screenshot or screen recording operation of the target image, disabling the screenshot tool and blurring the sensitive information in the target image; Output a prompt message prohibiting screenshot or recording, and verify whether the operator of the current desktop operating system is legal.

5. The security layer protection method according to claim 4, characterized in that: The step of verifying whether the operator of the current desktop operating system is legitimate includes: A password verification pop-up window is displayed to receive the security password entered by the operator of the current desktop operating system and verify whether the security password is the same as the preset password; In the case that the security password is the same as the preset password, the operator of the current desktop operating system is determined to be legitimate, and the blurring of the sensitive information in the target image is cancelled.

6. A safety layer protection device, characterized in that: The security layer protection device includes a preset operating system and a desktop operating system, the preset operating system is compatible with the desktop operating system, the preset operating system runs a target application, the desktop operating system is compatible with the preset operating system, the preset operating system runs a target application, and the security layer protection device includes: A preset operating system, used to synthesize the application layers of the target application into a target image through a preset image synthesizer, and detect whether the target image has a security layer; In the case where the target image has a security layer, setting the transparency component of the target image to a preset value, wherein the preset value is used to indicate that the desktop operating system is prohibited from taking a screenshot or recording the target image; Outputting the target image to the desktop operating system, wherein the desktop operating system prohibits a screenshot or screen recording operation on the target image when the transparency component is not zero; Wherein, after the step of the desktop operating system receiving the target image output by the preset operating system, the step further includes: Analyzing the original size and resolution of the target image and display parameters of the desktop in the desktop operating system, and adjusting the size and resolution of the target image so that the target image fits the desktop; Rendering the target image to the desktop, and obtaining security information in the target image through a preset security protocol; A desktop operating system, configured to receive a target image output by the preset operating system, wherein the target image is synthesized by a preset image synthesizer in the preset operating system based on each application layer of the target application, and if the target image includes a security layer, a transparency component in the target image will be set to a preset value by the preset operating system; Obtaining a transparency component of the target image, and prohibiting a screenshot or screen recording operation on the target image when the transparency component is not zero; Wherein, after the step of receiving the target image output by the preset operating system, the method further includes: Analyzing the original size and resolution of the target image and display parameters of the desktop in the desktop operating system, and adjusting the size and resolution of the target image so that the target image fits the desktop; The target image is rendered to the desktop, and security information in the target image is acquired through a preset security protocol.

7. An electronic device, characterized in that: The device comprises: a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the computer program is configured to implement the steps of the security layer protection method according to any one of claims 1 to 5.

8. A storage medium, characterized in that: The storage medium is a computer-readable storage medium, and a computer program is stored on the storage medium. When the computer program is executed by a processor, the steps of the security layer protection method according to any one of claims 1 to 5 are implemented.

9. A computer program product, characterized in that The computer program product comprises a computer program, and when the computer program is executed by a processor, the steps of the security layer protection method according to any one of claims 1 to 5 are implemented.

Images