Application data isolation method and device, electronic equipment and readable storage medium

Abstract

The invention discloses an application data isolation method and device, electronic equipment and a readable storage medium. The method is applied to the electronic equipment and comprises the steps that in response to the fact that a sharing function is triggered, first data of a target application is backed up, and the target application with second data runs; wherein the second data does not contain the first data; the first data is use data of an owner of the electronic equipment; and in response to ending of the sharing function, recovering the target application by using the first data. By means of the mode, the operation process during equipment sharing can be simplified on the premise that the data privacy of the owner and the non-owner is safe.

Description

Technical Field

[0001] The present application relates to the technical field of data isolation, and in particular to a method, device, electronic device and readable storage medium for isolating application data. Background Art

[0002] At present, in electronic devices with operating systems, the method of isolating data for different users is mainly a multi-user mechanism, that is, different users can set their own unique lock screen password (used to protect the user's private data), use the device (such as mobile phones, tablets, etc.) with their own user identities, and install applications separately.

[0003] For some scenarios in life where devices are temporarily shared, the multi-user mechanism of the operating system of the electronic device is not applicable or is relatively cumbersome to operate. However, if the multi-user mechanism is not set up, there is a potential risk of privacy leakage for both the owner and non-owners. Summary of the invention

[0004] The present application provides an application data isolation method, device, electronic device, and readable storage medium, which can simplify the operation process when sharing a device while ensuring the data privacy of the device owner and non-owners.

[0005] In a first aspect, the present application provides an application data isolation method, which is applied to an electronic device, and the method includes: in response to a sharing function being triggered, backing up first data of a target application, and running a target application with second data; wherein the second data does not contain the first data; the first data is usage data of an owner of the electronic device; in response to the sharing function ending, restoring the target application using the first data.

[0006] In a second aspect, the present application provides an isolation device for application data, the isolation device comprising: a first response module, in response to a sharing function being triggered, backing up first data of a target application and running a target application with second data; wherein the second data does not contain the first data; the first data is usage data of an owner of the electronic device; and a second response module, in response to the sharing function ending, restoring the target application using the first data.

[0007] In a third aspect, the present application provides an electronic device, comprising a processor and a memory coupled to the processor; wherein the memory is used to store a computer program, and the processor is used to execute the computer program to implement the method provided in the first aspect.

[0008] In a fourth aspect, the present application provides a computer-readable storage medium, which stores a computer program. When the computer program is executed by a processor, it implements the method provided in the first aspect.

[0009] The beneficial effects of the present application are as follows: Different from the prior art, the application data isolation method, device, electronic device and readable storage medium provided by the present application simplify the operation when the device is shared by setting a sharing function, without the need to set a multi-user mechanism, and backing up the first data of the target application, and running the target application of the second data that does not contain the first data for use by non-machine owners, which can effectively isolate the data between the machine owner and the non-machine owner and ensure the privacy and security of the data; further, in response to the end of the sharing function, the target application is restored using the first data, so that the target application is restored to the state when the machine owner uses it, ensuring the privacy and security of the non-machine owner's data. That is, through the above method, the operation process when the device is shared can be simplified under the premise of ensuring the data privacy and security of the machine owner and non-machine owner. BRIEF DESCRIPTION OF THE DRAWINGS

[0010] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the following briefly introduces the drawings required for use in the description of the embodiments. Obviously, the drawings described below are only some embodiments of the present application. For ordinary technicians in this field, other drawings can be obtained based on these drawings without creative work. Among them:

[0011] Figure 1 It is a flowchart of an embodiment of an application data isolation method provided by the present application;

[0012] Figure 2 is a flow chart of another embodiment of the method for isolating application data provided by the present application;

[0013] Figure 3 is a flow chart of another embodiment of the method for isolating application data provided by the present application;

[0014] Figure 4 It is a flow chart of an embodiment of an isolation device for application data provided by the present application;

[0015] Figure 5 It is a structural schematic diagram of an embodiment of an electronic device provided by the present application;

[0016] Figure 6 is a structural schematic diagram of another embodiment of the electronic device provided by the present application;

[0017] Figure 7 It is a structural schematic diagram of an embodiment of a computer-readable storage medium provided by the present application. DETAILED DESCRIPTION

[0018] The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. It will be understood that the specific embodiments described herein are only used to explain the present application, rather than to limit the present application. It should also be noted that, for ease of description, only some but not all structures related to the present application are shown in the drawings. Based on the embodiments in the present application, all other embodiments obtained by ordinary technicians in the field without making creative work are within the scope of protection of the present application.

[0019] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0020] At present, in electronic devices with operating systems, the method of isolating data for different users is mainly a multi-user mechanism, that is, different users can set their own unique lock screen password (used to protect the user's private data), use the device (such as mobile phones, tablets, etc.) with their own user identities, and install applications separately.

[0021] For some scenarios in life where devices are temporarily shared, the multi-user mechanism of the operating system of the electronic device is not applicable or is relatively cumbersome to operate. However, if the multi-user mechanism is not set up, there is a potential risk of privacy leakage for both the owner and non-owners.

[0022] For example, if an electronic device is a personal device, the owner may temporarily lend the device, such as a mobile phone or tablet, to a friend. In this scenario, the lending frequency to a specific device borrower (i.e., a friend) is low, and a specific friend may only temporarily borrow the device once; and the lending time is short, such as only one day, for temporary information query, or for a short period of time to borrow a specific application.

[0023] In this scenario, if a multi-user mechanism is used to set up additional user identities for friends who temporarily borrow the device, the operation will be relatively cumbersome and time-consuming. For example, the owner needs to set up and clear new user identities before and after lending the device; the non-owner needs to download and install the applications he needs; when the non-owner wants to borrow some software or membership services purchased by the owner, the owner still needs to provide additional credential information (account password, etc.).

[0024] However, if multiple users are not set up, there is a potential risk of privacy leakage for both the device owner and non-device owners. Taking public devices as an example, in commercial public places such as cafes, there are sometimes tablet devices for consumers to use in the store. In this scenario, the user using the device is a non-specific user and the usage time is short, so the multi-user mechanism is not applicable. As the owner of the device, the merchant cannot set up a new user identity for each consumer who uses the device, so generally no additional settings are made for the tablet. If the consumer forgets to delete the device usage data, the data will remain on the device, which is not under the control of the user and there is a risk of privacy data leakage.

[0025] The applicant has found that in scenarios where the temporary users of the device are fixed, the frequency of shared use of the device is low, and the shared use time is short, the operation of additionally setting up a multi-user mechanism is cumbersome and time-consuming.

[0026] In scenarios where the temporary users of a device are not fixed, and the device is shared frequently but for a short period of time (i.e., as a public device), the multi-user mechanism is not actually applicable.

[0027] Based on this, the present application proposes any of the following technical solutions: by setting a sharing function, the operation of device sharing is simplified, and there is no need to set up a multi-user mechanism. The first data of the target application is backed up, and the target application of the second data that does not contain the first data is run for use by non-machine owners, which can effectively isolate the data between the machine owner and the non-machine owner to ensure the privacy and security of the data; further, in response to the end of the sharing function, the target application is restored using the first data to restore the target application to the state when the machine owner used it, ensuring the privacy and security of the non-machine owner's data. That is, through the above method, the operation process of device sharing can be simplified under the premise of data privacy and security of the machine owner and non-machine owner.

[0028] See also Figure 1 , Figure 1 1 is a flow chart of an embodiment of an application data isolation method provided by the present application. Applied to electronic equipment, the method includes:

[0029] Step 11: In response to the sharing function being triggered, backing up the first data of the target application, and running the target application with the second data.

[0030] The second data does not include the first data; the first data is the usage data of the owner (machine owner) of the electronic device.

[0031] In this embodiment, the owner of the electronic device refers to the person who sets the system account in the electronic device. For example, user A purchases an electronic device and sets a series of information such as the system account when activating the electronic device. Such as the lock screen password, unlocking fingerprint and system account of the electronic device. It can be understood that the system account is established based on the server background of different electronic device manufacturers. That is, different users can have different system accounts, but only one system account can be logged in on the electronic device.

[0032] In some embodiments, a user who has used the electronic device for more than a preset time is defined as the owner of the electronic device. The user can unlock the electronic device by himself. If user A uses the electronic device for a long time, the usage time is as long as one month, two months, three months or half a year. Or if the electronic device has been used by user A since activation, user A is the owner (machine owner) of the electronic device.

[0033] In some embodiments, the usage data of the owner of the electronic device includes at least one of the owner's preference settings, historical usage records, bookmarks, and application configurations.

[0034] In some embodiments, the second data may be basic data of the target application, which can ensure the normal operation of the target application. The basic data may be factory default data of the target application.

[0035] The sharing function is used to be triggered when the electronic device is used by a non-owner. The sharing function can be triggered by the user himself through touch. The owner can also trigger the sharing function of the electronic device and give the electronic device to other users (non-owners) for use.

[0036] In some embodiments, the sharing function can be triggered automatically. Specifically, when a user uses an electronic device, the sharing function can use the corresponding biometric feature collection technology to identify the collected biometric features. If it is identified that the biometric features do not match the biometric features of the owner of the electronic device, the sharing function will be automatically activated. The biometric features can be at least one of voiceprint, fingerprint, face and iris.

[0037] Step 12: In response to the sharing function being ended, restoring the target application using the first data.

[0038] In some embodiments, when the user finishes using the electronic device, the user can terminate the sharing function by himself.

[0039] In some embodiments, when the user finishes using the electronic device, the user hands the electronic device to the owner, and the owner ends the sharing function of the electronic device.

[0040] In response to the end of the sharing function, the target application is restored using the first data to restore the target application to the state when the owner used it, that is, the state before the user used it.

[0041] In this embodiment, by setting a sharing function, the operation of device sharing is simplified, and there is no need to set a multi-user mechanism. The first data of the target application is backed up, and the target application without the second data of the first data is run for use by non-machine owners, which can effectively isolate the data between the machine owner and the non-machine owner to ensure the privacy and security of the data; further, in response to the end of the sharing function, the target application is restored using the first data to restore the target application to the state when the machine owner used it, ensuring the privacy and security of the non-machine owner's data. That is, through the above method, the operation process of device sharing can be simplified under the premise of data privacy and security of the machine owner and non-machine owner.

[0042] See also Figure 2 , Figure 2 1 is a flow chart of another embodiment of the method for isolating application data provided by the present application. Applied to electronic equipment, the method includes:

[0043] Step 21: In response to the sharing function being triggered, backing up the first data of the target application, and running the target application with the second data.

[0044] The second data does not include the first data; the first data is the usage data of the owner of the electronic device.

[0045] Step 21 has the same or similar technical solution as the other embodiments of the present application and will not be described in detail here.

[0046] Step 22: In response to the end of the sharing function, third data during the running of the target application is counted and the third data is encrypted.

[0047] The third data is usage data of the user who triggers the sharing function. The usage data may be usage data during the period when the user who triggers the sharing function uses the electronic device, such as at least one of browsing history, preference settings, and personal information.

[0048] In some embodiments, the third data may be encrypted using a corresponding encryption algorithm.

[0049] In one embodiment, after encrypting the third data, the unencrypted third data is deleted and the encrypted third data is stored. In this process, the unencrypted third data plaintext is deleted and only the ciphertext third data is stored, which can ensure the security of the third data.

[0050] In some embodiments, the first data and the encrypted third data are stored in different areas respectively. The user corresponding to the third data cannot check the first data, which can ensure the privacy security of the owner corresponding to the first data.

[0051] Step 23: Restore the target application using the first data.

[0052] Step 23 has the same or similar technical solution as the other embodiments of the present application and will not be described in detail here.

[0053] In some embodiments, in response to a delete instruction, the encrypted third data is deleted. After the user finishes using the electronic device, that is, when the sharing function ends, the electronic device provides a delete function. For example, a delete button is set on the display screen of the electronic device, and the delete button is displayed when the sharing function ends. When the delete button is clicked, a delete instruction is generated. The electronic device deletes the encrypted third data in response to the delete instruction. The person who clicks the delete button can be the user or the owner of the electronic device.

[0054] In some embodiments, an automatic deletion function may also be set to automatically delete the encrypted third data in response to the end of the sharing function and the third data being encrypted.

[0055] In some embodiments, in response to an export instruction, the encrypted third data is transmitted to an external device. After the user has finished using the electronic device, that is, when the sharing function ends, the electronic device provides an export function. For example, an export button is set on the display screen of the electronic device, and the export button is displayed when the sharing function ends. When the export button is clicked, an export instruction is formed. The electronic device responds to the export instruction and transmits the encrypted third data to the external device. Providing this function can facilitate the user to export the third data generated during its use. Further, after the export, the electronic device provides a deletion function. For example, a delete button is set on the display screen of the electronic device, and the delete button is displayed when the sharing function ends. When the delete button is clicked, a delete instruction is formed. The electronic device responds to the delete instruction and deletes the encrypted third data, thereby ensuring the privacy and security of the user.

[0056] In this embodiment, by setting a sharing function, the operation of device sharing is simplified, and there is no need to set a multi-user mechanism. The first data of the target application is backed up, and the target application without the second data of the first data is run for use by non-machine owners, which can effectively isolate the data between the machine owner and the non-machine owner to ensure the privacy and security of the data; further, in response to the end of the sharing function, the target application is restored using the first data to restore the target application to the state when the machine owner used it, ensuring the privacy and security of the non-machine owner's data. That is, through the above method, the operation process of device sharing can be simplified under the premise of data privacy and security of the machine owner and non-machine owner.

[0057] Furthermore, by encrypting and storing the usage data of non-machine owners, the privacy and security of the data is guaranteed.

[0058] See also Figure 3 , Figure 3 1 is a flow chart of another embodiment of the method for isolating application data provided by the present application. Applied to electronic equipment, the method includes:

[0059] Step 31: In response to the sharing function being triggered, back up the first data of the target application, run the target application with the second data, and receive the text information input by the user.

[0060] The second data does not include the first data; the first data is the usage data of the owner of the electronic device.

[0061] Step 31 has the same or similar technical solution as the other embodiments of the present application and will not be described in detail here.

[0062] The difference is that when the target application with the second data is run, the text information input by the user is received synchronously. The text information can be a single character or a combination of characters such as numbers, Chinese characters, punctuation marks, etc. The characters are only known to the user. The text information can be used as a subsequent encryption key.

[0063] Step 32: In response to the end of the sharing function, third data during the running of the target application is counted, and the third data is encrypted using text information.

[0064] The third data is the usage data of the user who triggers the sharing function.

[0065] Using text information to encrypt the third data can make the third data more secure.

[0066] Step 33: Restore the target application using the first data.

[0067] Steps 32 to 33 have the same or similar technical solutions as the other embodiments of the present application and will not be described in detail here.

[0068] In this embodiment, by setting a sharing function, the operation of device sharing is simplified, and there is no need to set a multi-user mechanism. The first data of the target application is backed up, and the target application without the second data of the first data is run for use by non-machine owners, which can effectively isolate the data between the machine owner and the non-machine owner to ensure the privacy and security of the data; further, in response to the end of the sharing function, the target application is restored using the first data to restore the target application to the state when the machine owner used it, ensuring the privacy and security of the non-machine owner's data. That is, through the above method, the operation process of device sharing can be simplified under the premise of data privacy and security of the machine owner and non-machine owner.

[0069] Furthermore, by encrypting and storing the usage data of non-machine owners, the privacy and security of the data is guaranteed.

[0070] In an application scenario, an electronic device loaded with an operating system is shared with low frequency and for a short period of time (hereinafter referred to as private sharing), or used as a public electronic device (hereinafter referred to as public sharing). This application proposes an isolation method for application data in a temporary sharing scenario, which is used to protect some applications on the electronic device in a targeted manner and isolate application data between different users. It can be understood that the target application can be a music application, a game application, a video application, and / or a tool application, etc.

[0071] Take the target application as a browser application as an example:

[0072] The browser application confirms the backup scope of the application data before the device is shared. The backup data is used to restore the application to the state before sharing after the sharing ends.

[0073] The operating system provides a temporary sharing switch button for the electronic device, which is manually clicked by the user to trigger and mark the opening and closing of the sharing state of the electronic device. The switch state is globally visible in the electronic device, allowing various applications on the electronic device to monitor the current sharing state of the device.

[0074] Among them, when the electronic device has a lock screen password, the temporary sharing switch can only be turned on after the lock screen password is verified.

[0075] When the electronic device starts to be shared, the temporary user sets his own identification password. The sharing management module in the device system stores the application backup data of the browser application (the first data mentioned above). The browser application clears or encrypts and hides the data related to the owner (owner) to avoid leaking the owner's privacy information to the temporary user of the electronic device.

[0076] During the sharing of the electronic device, the sharing management module and the browser application detect and record the usage behavior and related usage data of the temporary user.

[0077] When the electronic device sharing ends, the sharing management module and the browser application respectively organize the usage data recorded during the device sharing period, and encrypt and store them using the identification password. The recorded usage data plaintext is deleted, and only the usage data ciphertext is stored.

[0078] Temporary users of electronic devices are allowed to export encrypted data through near-field transmission and other methods for their own use.

[0079] When the sharing ends, temporary users of the electronic device are allowed to manually delete the ciphertext of the data used during the sharing period.

[0080] After the electronic device ends sharing, the owner is allowed to manually delete the ciphertext of the data used during this sharing period, or configure automatic deletion.

[0081] After the electronic device ends sharing, the browser application receives the backup data from the sharing management module and restores its own data to the state before sharing by overwriting. The sharing management module restores key system data and settings to the state before sharing based on the data recorded during sharing.

[0082] Among them, the browser application pre-confirms the scope of application data that needs to be backed up before device sharing.

[0083] Electronic device manufacturers, through self-research or communication with browser applications, confirm system data and configurations that may be affected by the operation of browser applications as the scope of data that needs to be backed up and tested during device sharing.

[0084] The above-mentioned application and system data that need to be backed up include private data such as preferences, historical usage records, bookmarks, etc. that you do not want other users of the electronic device to know, or other data such as application configurations that may be changed during the use of the application. The specific data scope is subject to the actual decision of the browser application and device manufacturer, and relevant options can be provided to the owner to combine the owner's decision.

[0085] Specifically, electronic device manufacturers provide a temporary sharing switch in the device operating system, which can be manually clicked by the device user to trigger and mark the opening and closing of the device sharing state.

[0086] The switch status is visible globally on the device, allowing each application on the device to monitor the current sharing status of the device. The browser application continuously monitors the sharing switch during operation or detects the sharing switch status when the application starts, so as to obtain system notifications about the device sharing status.

[0087] When the value of the sharing switch is true, it indicates that the device enters the shared use state. When the value of the sharing switch is false, it indicates that the device exits the shared use state.

[0088] The default value of the sharing switch is false. If the device is not operated for a period of time, the sharing switch will automatically return to false.

[0089] In a private sharing scenario, if the owner has set a lock screen password for the device, if you want to turn on the temporary sharing switch, that is, set the sharing switch value to true, the operating system will force you to verify the lock screen password. The temporary sharing switch will be turned on only after the lock screen password is verified.

[0090] In a public sharing scenario, when a lock screen password is not set for the device, the current user of the device can set the value of the sharing switch to true by clicking a temporary sharing switch button displayed on the device.

[0091] When the electronic device starts sharing, when the current user of the device turns on the temporary sharing switch by clicking a temporary sharing switch button displayed on the device, the value of the sharing switch changes from false to true.

[0092] The operating system first pops up a window prompting the current temporary user of the device to set an identification password. After the user enters the identification password, the sharing management module in the system derives an encryption key based on the identification password and temporarily stores it.

[0093] At the same time, the operating system sends a notification to the browser application, informing the device to start sharing.

[0094] The browser application sends the required backup data (the first data mentioned above) to the sharing management module according to the pre-confirmed backup data range.

[0095] The shared management module stores the backup data and restricts the reading of the backup data to only browser applications.

[0096] The browser application clears / or encrypts the backup data in its own data and configuration files. Provide the current user with a browser application that does not contain backup data and configuration for the operation of the browser application during sharing to avoid leaking the owner's private information to temporary users of the device. It is understood that the browser application actually clears or encrypts the backup data, which is subject to the logic of the browser application itself.

[0097] During the sharing of the electronic device, during a single continuous period of time when the value of the sharing switch is true (during the shared use of the device), the sharing management module detects and records the data and configuration changes in the operating system according to the pre-agreement, and backs up the corresponding original status information data.

[0098] The browser application detects and records the usage behavior of temporary users and related usage data.

[0099] When the sharing of the electronic device ends, and after the sharing ends, when the current user of the electronic device turns off the temporary sharing switch, the value of the sharing switch changes from true to false.

[0100] When the device sharing ends, the sharing management module and the browser application respectively sort out the usage data recorded during the device sharing, and encrypt the data using the encryption key to obtain the ciphertext (the encrypted third data mentioned above). The sharing management module and the browser application delete the plaintext data recorded during the sharing, and only the ciphertext is stored by the browser application.

[0101] The sharing management module provides an option for temporary users, allowing temporary users of the device to export ciphertext by near field transmission or other means (the user actively operates in the browser application, or the sharing management module sends a notification to the browser application and requests the browser application to execute) for their own use. In the future, a decryption tool can be provided to the user for decrypting the ciphertext.

[0102] The sharing management module provides an option for temporary users, allowing temporary users of the device to manually delete the ciphertext of the data used during the sharing period when the sharing ends.

[0103] The sharing management module provides options for the device owner. After the device ends sharing, the device owner is allowed to manually delete the ciphertext of the data used during the current sharing period, or configure automatic deletion after each sharing ends.

[0104] After the device ends sharing, the browser application receives the backup data from the sharing management module and restores its own data to the state before sharing by overwriting. The sharing management module restores key system data and settings to the state before sharing based on the backup system data recorded during sharing.

[0105] That is, in the present application, by setting a sharing function, the operation of device sharing is simplified, and there is no need to set up a multi-user mechanism. The first data of the target application is backed up, and the target application of the second data that does not contain the first data is run for use by non-machine owners, which can effectively isolate the data between the machine owner and the non-machine owner to ensure the privacy and security of the data; that is, when the same application is used by the machine owner and the non-machine owner, the data of the machine owner and the non-machine owner can be kept private and secure. Further, in response to the end of the sharing function, the target application is restored using the first data to restore the target application to the state when the machine owner used it, ensuring the privacy and security of the non-machine owner's data. That is, through the above method, the operation process when the device is shared can be simplified under the premise of the data privacy and security of the machine owner and the non-machine owner.

[0106] See also Figure 4 , Figure 4 1 is a schematic diagram of the structure of an embodiment of an isolation device for application data provided by the present application. The isolation device 40 includes: a first response module 41 and a second response module 42.

[0107] In response to the sharing function being triggered, the first response module 41 backs up the first data of the target application and runs the target application with second data; wherein the second data does not include the first data; the first data is the usage data of the owner of the electronic device.

[0108] In response to the sharing function being terminated, the second response module 42 uses the first data to restore the target application.

[0109] It can be understood that the first response module 41 and the second response module 42 cooperate to implement the method of any of the above embodiments.

[0110] See also Figure 5 , Figure 5 1 is a schematic diagram of the structure of an embodiment of an electronic device provided by the present application. The electronic device 110 includes a processor 111, a memory 112 coupled to the processor 111, and a display 113; wherein the memory 112 is used to store a computer program, and the processor 111 is used to execute the computer program to implement the following method:

[0111] In response to the sharing function being triggered, the first data of the target application is backed up, and the target application with the second data is run; wherein the second data does not contain the first data; the first data is the usage data of the owner of the electronic device; in response to the sharing function ending, the target application is restored using the first data.

[0112] It can be understood that the processor 111 is used to execute a computer program to implement the method of any of the above embodiments.

[0113] See also Figure 6 , Figure 6 1 is a schematic diagram of the structure of another embodiment of the electronic device provided by the present application. The electronic device 110 may be, for example, a mobile electronic device, and the electronic device 110 may include: a memory 112, a processor (Central Processing Unit, CPU) 111, a circuit board (not shown in the figure), a power circuit and a microphone 123. The circuit board is placed inside the space surrounded by the shell; the processor 111 and the memory 112 are arranged on the circuit board; the power circuit is used to supply power to various circuits or devices of the electronic device; the memory 112 is used to store executable program codes; the processor 111 runs a computer program corresponding to the executable program code by reading the executable program code stored in the memory 112, so as to implement the method of any of the above embodiments.

[0114] The electronic device may also include: a peripheral interface 114, an RF (Radio Frequency) circuit 116, an audio circuit 117, a speaker 122, a power management chip 119, an input / output (I / O) subsystem 120, other input / control devices 121, a display 113 and an external port 115. These components communicate through one or more communication buses or signal lines 118.

[0115] The memory 112 can be accessed by the processor 111, the peripheral interface 114, etc. The memory 112 can include a high-speed random access memory, and can also include a non-volatile memory, such as one or more disk storage devices, flash memory devices, or other volatile solid-state storage devices. The peripheral interface 114 can connect the input and output peripherals of the device to the processor 111 and the memory 112.

[0116] The I / O subsystem 120 can connect the input and output peripherals on the device, such as the display 113 and other input / control devices 121, to the peripheral interface 114. The I / O subsystem 120 may include a display controller 1201 and one or more input controllers 1202 for controlling other input / control devices 121. Among them, the one or more input controllers 1202 receive electrical signals from other input / control devices 121 or send electrical signals to other input / control devices 121. Other input / control devices 121 may include physical buttons (press buttons, rocker buttons, etc.), dials, slide switches, joysticks, and click wheels. It is worth noting that the input controller 1202 can be connected to any of the following: a keyboard, an infrared port, a USB interface, and a pointing device such as a mouse.

[0117] The display 113 is an input interface and an output interface between the user electronic device and the user, and displays visual output to the user. The visual output may include graphics, text, icons, videos, etc.

[0118] The display controller 1201 in the I / O subsystem 120 receives an electrical signal from the display 124 or sends an electrical signal to the display 124. The display 124 detects contact on the touch screen, and the display controller 1201 converts the detected contact into interaction with a user interface object displayed on the display 124, that is, realizes human-computer interaction. The user interface object displayed on the display 124 may be an icon for running a game, an icon for connecting to a corresponding network, etc.

[0119] The RF circuit 116 is mainly used to establish communication between the mobile phone and the wireless network (i.e., the network side) to realize data reception and transmission between the mobile phone and the wireless network. For example, sending and receiving short messages, emails, etc. Specifically, the RF circuit 116 receives and sends RF signals, which are also called electromagnetic signals. The RF circuit 116 converts electrical signals into electromagnetic signals or converts electromagnetic signals into electrical signals, and communicates with the communication network and other devices through the electromagnetic signals. The RF circuit 116 may include known circuits for performing these functions, including but not limited to antenna systems, RF transceivers, one or more amplifiers, tuners, one or more oscillators, digital signal processors, CODEC (COder-DECoder, codec) chipsets, Subscriber Identity Module (SIM), etc.

[0120] The audio circuit 117 is mainly used to receive audio data from the peripheral interface 114, convert the audio data into an electrical signal, and send the electrical signal to the speaker 122. The speaker 122 is used to restore the voice signal received by the mobile phone from the wireless network through the RF circuit 116 to sound and play the sound to the user. The power management chip 119 is used to provide power supply and power management for the processor 111, the I / O subsystem 120 and the hardware connected to the peripheral interface 114.

[0121] The above-mentioned electronic device may be a mobile terminal, such as a smart phone, a tablet or other mobile device, or a terminal device, such as a personal computer.

[0122] See also Figure 7 , Figure 7 1 is a schematic diagram of a computer readable storage medium according to an embodiment of the present application. The computer readable storage medium 150 stores a computer program 151. When the computer program 151 is executed by a processor, the following method is implemented:

[0123] In response to the sharing function being triggered, the first data of the target application is backed up, and the target application with the second data is run; wherein the second data does not contain the first data; the first data is the usage data of the owner of the electronic device; in response to the sharing function ending, the target application is restored using the first data.

[0124] It can be understood that when the computer program 151 is executed by a processor, it can also implement the method of any of the above embodiments.

[0125] In summary, the application data isolation method, device, electronic device and readable storage medium provided by the present application simplify the operation when the device is shared by setting a sharing function, without setting a multi-user mechanism, and backing up the first data of the target application, and running the target application of the second data that does not contain the first data for use by non-machine owners, which can effectively isolate the data between the machine owner and the non-machine owner to ensure the privacy and security of the data; further, in response to the end of the sharing function, the target application is restored using the first data, so that the target application is restored to the state when the machine owner uses it, ensuring the privacy and security of the non-machine owner's data. That is, through the above method, the operation process when the device is shared can be simplified under the premise of the data privacy and security of the machine owner and non-machine owner.

[0126] Furthermore, the present application provides a lightweight, user-friendly application data isolation solution suitable for scenarios such as private sharing and public sharing.

[0127] This application can be used as an alternative to the multi-user mechanism. Compared with the multi-user mechanism, it reduces the complexity of operation, reduces the risk of privacy data leakage of the owner and temporary users of the device, and improves security.

[0128] This application allows temporary users of the device to export their temporary usage data, providing convenience for temporary users without reducing security.

[0129] This application provides data processing options for temporary users and device owners at the end of device sharing, and flexibly supports self-configuration of whether to export usage data or delete usage data, thereby improving the flexibility of the solution.

[0130] This application has no restrictions on the types of applications and is not only applicable to browser applications, but can also be extended to other application software.

[0131] The key derivation algorithm in this application can be flexibly selected, for example, the international standard HKDF is adopted.

[0132] In the several embodiments provided in this application, it should be understood that the disclosed methods and devices can be implemented in other ways. For example, the device implementation described above is only illustrative, for example, the division of the modules or units is only a logical function division, and there may be other division methods in actual implementation, such as multiple units or components can be combined or integrated into another system, or some features can be ignored or not executed.

[0133] If the integrated units in the above other embodiments are implemented in the form of software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of the present application is essentially or the part that contributes to the prior art or all or part of the technical solution can be embodied in the form of a software product, and the computer software product is stored in a storage medium, including a number of instructions to enable a computer device (which can be a personal computer, server, or network device, etc.) or a processor (processor) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, RandomAccess Memory), disk or optical disk and other media that can store program codes.

[0134] The above description is only an implementation method of the present application, and does not limit the patent scope of the present application. Any equivalent structure or equivalent process transformation made using the contents of the present application specification and drawings, or directly or indirectly used in other related technical fields, are also included in the patent protection scope of the present application.

Claims

1. A method for isolating application data, characterized in that: Applied to electronic equipment, the method comprises: In response to the sharing function being triggered, backing up the first data of the target application, and running the target application with the second data; wherein the second data does not include the first data; and the first data is the usage data of the owner of the electronic device; In response to the sharing function being ended, the target application is restored using the first data.

2. The method according to claim 1, characterized in that In response to the sharing function ending, restoring the target application using the first data includes: In response to the end of the sharing function, third data in the running process of the target application is counted and the third data is encrypted; wherein the third data is the usage data of the user who triggered the sharing function; The target application is restored using the first data.

3. The method according to claim 2, characterized in that After encrypting the third data, deleting the unencrypted third data and storing the encrypted third data.

4. The method according to claim 2, characterized in that: In response to the deletion instruction, the encrypted third data is deleted.

5. The method according to claim 2, characterized in that: In response to the export instruction, the encrypted third data is transmitted to an external device.

6. The method according to claim 2, characterized in that In response to the sharing function being triggered, receiving text information input by the user; The encrypting the third data comprises: The third data is encrypted using the text information.

7. The method according to claim 1, characterized in that The usage data of the owner of the electronic device includes at least one of the owner's preference settings, historical usage records, bookmarks, and application configurations.

8. An isolation device for application data, characterized in that: The isolation device comprises: A first response module, in response to the sharing function being triggered, backs up first data of a target application and runs the target application with second data; wherein the second data does not include the first data; and the first data is usage data of the owner of the electronic device; The second response module, in response to the end of the sharing function, uses the first data to restore the target application.

9. An electronic device, characterized in that: The electronic device includes a processor and a memory coupled to the processor; The memory is used to store a computer program, and the processor is used to execute the computer program to implement the method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the computer program implements the method according to any one of claims 1 to 7.

Images