Processing method and electronic equipment

Abstract

The invention provides a processing method and electronic equipment, and relates to the technical field of electronic equipment. The processing method comprises the steps that a target instruction is responded based on a second system, an input area of the second system is located in a first area of the electronic equipment, an output area of the second system is located in a second area of the electronic equipment, and an execution process indicated by the target instruction relates to private data of a user; the second system responds to the execution process indicated by the target instruction, first data are input through the first area, and second data are output through the second area; the execution process of the second system responding to the target instruction is ended, and the second area is recovered to be the output area of the first system; wherein the security level of the second system is higher than that of the first system.

Description

Technical Field

[0001] The present disclosure relates to the technical field of electronic devices, and in particular to a processing method and an electronic device. Background Art

[0002] In daily life, users frequently process private data through electronic devices. Currently, data encryption technology is mainly used to protect privacy. However, since the execution environment of electronic devices may be exposed, even if private data is encrypted, there is still a security risk of being stolen during the execution process. Summary of the invention

[0003] In view of this, the present disclosure provides a processing method and an electronic device.

[0004] According to the first aspect of the present disclosure, a processing method is provided, including: based on a second system responding to a target instruction, an input area of ​​the second system is located in a first area of ​​an electronic device and an output area of ​​the second system is located in a second area of ​​the electronic device, and an execution process indicated by the target instruction involves private data of a user; in the execution process indicated by the target instruction, the second system inputs first data through the first area and outputs second data through the second area; the execution process of the second system responding to the target instruction ends, and the second area is restored to the output area of ​​the first system; wherein the security level of the second system is higher than the security level of the first system.

[0005] According to an embodiment of the present disclosure, the target instruction comes from the first system; wherein different target instructions indicate different execution processes, and different execution processes involve different types of user private data.

[0006] According to an embodiment of the present disclosure, before the second system responds to the target instruction, it also includes: allocating a second memory space, the second memory space is used to cache execution data of the execution process indicated by the target instruction, the execution data includes at least first data and second data, and the second memory space is an isolated space inaccessible to the first system.

[0007] According to an embodiment of the present disclosure, when the second system responds to a target instruction, a target input device and a target output device are locked for the second system, and the target output device is one of a plurality of display screens included in the electronic device.

[0008] According to an embodiment of the present disclosure, the processing method also includes: if the first system obtains the target instruction, triggering a split screen instruction; in response to the split screen instruction, controlling the display screen of the electronic device to be divided into at least two display areas; based on when the second system responds to the target instruction, locking the target input device and the target display area for the second system, the target display area belonging to one of the at least two display areas.

[0009] According to an embodiment of the present disclosure, the processing method also includes: projecting the first display interface of the first program to the display screen of the terminal device through a connection channel, and obtaining operation information of the terminal device for the first display interface of the first program through the connection channel; in response to an operation instruction corresponding to the operation information, generating a second display interface and projecting it to the display screen of the terminal device to update the first display interface; wherein, if the operation instruction corresponding to the operation information is the target instruction, then based on the second system responding to the target instruction, locking the target input device of the electronic device and the display screen of the electronic device as the second area for the second system; and outputting a third display interface generated in response to the target instruction based on the display screen of the electronic device.

[0010] A second aspect of the present disclosure provides an electronic device, comprising: an input device; an output device; and a processor, for responding to a target instruction based on a second system, wherein an input area of ​​the second system is located in a first area of ​​the input device and an output area of ​​the second system is located in a second area of ​​the output device, an execution process indicated by the target instruction involves private data of a user, the second system inputs first data through the first area and outputs second data through the second area in response to the execution process indicated by the target instruction, the execution process of the second system in response to the target instruction ends, and the second area is restored to the output area of ​​the first system, wherein the security level of the second system is higher than the security level of the first system.

[0011] According to an embodiment of the present disclosure, the processor is further used to run a virtual machine, where the virtual machine is configured as the second system and keeps the second system and the first system running in isolation.

[0012] According to an embodiment of the present disclosure, the electronic device also includes: a memory; the processor is further used to allocate a second memory space in the memory, the second memory space is used to cache execution data of the execution process indicated by the target instruction, the execution data includes at least first data and second data, and the second memory space is an isolated space inaccessible to the first system.

[0013] According to an embodiment of the present disclosure, the output device includes multiple display screens; the processor is also used to lock a target input device and a target output device for the second system when the second system responds to a target instruction, and the target output device is one of the multiple display screens.

[0014] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present disclosure, nor is it intended to limit the scope of the present disclosure. Other features of the present disclosure will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] The above and other objects, features and advantages of the present disclosure will become more apparent through the following description of the embodiments of the present disclosure with reference to the accompanying drawings, in which:

[0016] Figure 1 The following schematically shows a schematic diagram of the system architecture for private data in the related art;

[0017] Figure 2 A flowchart of the processing method proposed in the embodiment of the present disclosure is schematically shown;

[0018] Figure 3 A schematic diagram of a dual system architecture based on virtualization technology proposed in an embodiment of the present disclosure is shown;

[0019] Figure 4 A schematic diagram of a scenario of hardware resource locking proposed in an embodiment of the present disclosure is schematically shown;

[0020] Figure 5A A flowchart of another processing method provided by an embodiment of the present disclosure is schematically shown;

[0021] Figure 5B A schematic diagram of a scenario of split screen processing provided by an embodiment of the present disclosure is schematically shown;

[0022] Figure 5C A schematic diagram schematically shows another scenario of split screen processing provided by an embodiment of the present disclosure;

[0023] Figure 6 A flowchart of another processing method provided by an embodiment of the present disclosure is schematically shown;

[0024] Figure 7 A block diagram of an electronic device provided by an embodiment of the present disclosure is schematically shown. DETAILED DESCRIPTION

[0025] Hereinafter, embodiments of the present disclosure will be described with reference to the accompanying drawings. However, it should be understood that these descriptions are exemplary only and are not intended to limit the scope of the present disclosure. In the following detailed description, for ease of explanation, many specific details are set forth to provide a comprehensive understanding of the embodiments of the present disclosure. However, it is apparent that one or more embodiments may also be implemented without these specific details. In addition, in the following description, descriptions of known structures and technologies are omitted to avoid unnecessary confusion of the concepts of the present disclosure.

[0026] The terms used herein are only for describing specific embodiments and are not intended to limit the present disclosure. The terms "comprise", "include", etc. used herein indicate the existence of the features, steps, operations and / or components, but do not exclude the existence or addition of one or more other features, steps, operations or components.

[0027] All terms (including technical and scientific terms) used herein have the meanings commonly understood by those skilled in the art unless otherwise defined. It should be noted that the terms used herein should be interpreted as having a meaning consistent with the context of this specification and should not be interpreted in an idealized or overly rigid manner.

[0028] When using expressions such as "at least one of A, B, and C, etc.", they should generally be interpreted according to the meaning of the expression commonly understood by those skilled in the art (for example, "a system having at least one of A, B, and C" should include but is not limited to a system having A alone, B alone, C alone, A and B, A and C, B and C, and / or A, B, C, etc.).

[0029] In the embodiments of the present disclosure, the collection, updating, analysis, processing, use, transmission, provision, disclosure, storage, etc. of the data involved (for example, including but not limited to user personal information) are in compliance with the provisions of relevant laws and regulations, are used for legitimate purposes, and do not violate public order and good morals. In particular, necessary measures are taken for user personal information to prevent illegal access to user personal information data and maintain the security of user personal information, network security, and national security.

[0030] The embodiments of the present disclosure provide a processing method and an electronic device. Before introducing the technical solutions provided by the embodiments of the present disclosure, the related technologies involved in the present disclosure are first described.

[0031] In the prior art, when users process private data through electronic devices, they mainly rely on data encryption technology to protect privacy security. However, the above protection method has obvious limitations. Although the data itself is encrypted, in the actual processing process, these encrypted data need to be decrypted before they can be operated, which causes private data to exist in plain text in the execution environment. Since the execution environment of electronic devices is usually shared, other programs may access these plain text data through system vulnerabilities, causing private information to be leaked.

[0032] The above problem is further extended to the level of system resource sharing. In traditional electronic devices, hardware resources such as input devices and display devices are shared and lack effective isolation mechanisms. This means that when processing private data, both the user input process and the data display process may be monitored or intercepted by other programs. Simple data encryption cannot solve the security issues at the execution environment level mentioned above, because it cannot guarantee the security of the entire process of private data processing.

[0033] Figure 1 The following is a schematic diagram of the system architecture for private data in the related art.

[0034] For example, refer to Figure 1 In the Android system architecture, the following core functional modules are mainly included: the first service module 101, the first display touch and multimedia service module 102, and the first display touch and multimedia driver module 103. Among them, the first service module 101 is an intermediary agent module for privacy services in the Android system, and is mainly used to receive and process privacy service requests from Android system applications. The first display touch and multimedia service module 102 is responsible for the abstraction and service support of display, touch and multimedia hardware operations in the Android system, and provides a standardized hardware access interface for upper-level applications. The first display touch and multimedia driver module 103 is located at the bottom layer, directly interacting with the display screen 104, the touch controller 105 and the multimedia 106, and providing driver support for touch, display and multimedia hardware for the Android system.

[0035] When the first service module 101 receives a request to process private data, it needs to allocate corresponding hardware resources to the application. The allocation process involves calling input and output devices such as display devices, touch devices, and other multimedia devices. Before calling these devices, the system needs to perform permission verification and identity configuration on specific input and output devices.

[0036] Although the data can be encrypted in the above process, since private data must be decrypted before it can be displayed or processed when actually used, the private data will still exist in plain text during the use of input and output devices, making the solution of relying solely on data encryption to protect private data have obvious limitations.

[0037] More importantly, since the Android system itself is an openly defined system, its permission management mechanism is relatively loose. Any application that has obtained the corresponding permissions can access these input and output devices. For example, when a user is processing private data, other applications with corresponding permissions may obtain private data by monitoring touch input, intercepting display content, etc. Even if the system controls device access permissions, due to the lack of an effective isolation mechanism, the above control still cannot completely prevent malicious programs from obtaining private data through system vulnerabilities or other means.

[0038] In addition, during data processing, private data needs to be transmitted and processed between these hardware devices. Due to the open nature of the Android system, the above transmission and processing process may be intercepted or tampered with by other programs. Especially when displaying content output, since the display buffer is shared, other applications with appropriate permissions may access this data, resulting in the risk of private data leakage during the processing process.

[0039] Before further describing the embodiments of the present disclosure in detail, the nouns and terms involved in the embodiments of the present disclosure are described. The nouns and terms involved in the embodiments of the present disclosure are subject to the following interpretations.

[0040] A virtual machine is a computer system simulation entity implemented by software. Its core feature is the ability to create and run multiple independent operating system instances on a single physical host, with each instance running as an independent virtual machine. Through virtualization technology, multiple operating systems and their applications can be run in parallel on the same hardware platform, thereby improving the utilization efficiency of hardware resources.

[0041] Hypervisor is a key technical component for virtualization. Its main function is to manage the shared access of multiple operating systems to the hardware resources of the physical host. Specifically, the hypervisor is responsible for the unified scheduling and allocation of physical resources such as processors, memory, and storage. By creating an independent virtual operating environment, each virtual machine can obtain a dedicated system environment and application running space as if it were running on an independent physical host.

[0042] A trusted system is a special computing environment that focuses on security. It ensures the security, reliability and integrity of system operation by using multiple protection methods such as encryption technology, permission management mechanism and security protocol. The above system design is particularly suitable for scenarios that process sensitive information. It can effectively prevent unauthorized access, block data leakage risks, and protect the system from malicious damage, thereby providing reliable system environment support for application scenarios with high security requirements.

[0043] An embodiment of the present disclosure provides a processing method, including: based on a second system responding to a target instruction, an input area of ​​the second system is located in a first area of ​​an electronic device and an output area of ​​the second system is located in a second area of ​​the electronic device, and an execution process indicated by the target instruction involves private data of a user; in the execution process indicated by the second system responding to the target instruction, first data is input through the first area and second data is output through the second area; the execution process of the second system responding to the target instruction ends, and the second area is restored to the output area of ​​the first system; wherein the security level of the second system is higher than the security level of the first system.

[0044] By implementing the disclosed embodiment, a second system with a higher security level is set in the electronic device, and when the second system responds to a target instruction involving private data, its input area and output area are respectively limited to the first area and the second area of ​​the electronic device, thereby forming an independent execution environment in the process of processing private data. The execution environment is controlled by the second system with a higher security level, so that the input and output of private data are limited to a specific area, effectively preventing the risk of data being stolen during the execution process. After the execution process is completed, by restoring the second area to the output area of ​​the first system with a lower security level, the security of private data processing is guaranteed without affecting the normal use of the device.

[0045] The electronic device in the embodiments of the present disclosure refers to a terminal device with a display screen. Such electronic devices include mobile terminals such as smart phones, tablet computers, laptops, PDAs, in-vehicle electronic devices, mobile Internet devices (Mobile Internet Device, MID), and smart devices such as augmented reality (Augmented Reality, AR) / virtual reality (Virtual Reality, VR) devices, robots, and wearable devices. In addition, portable computing devices such as ultra-mobile personal computers (Ultra-Mobile Personal Computer, UMPC), netbooks, personal digital assistants (Personal Digital Assistant, PDA), and computing devices such as servers, network attached storage (Network Attached Storage, NAS), and personal computers (Personal Computer, PC) also belong to the electronic device category described in the embodiments of the present disclosure. At the same time, display devices such as televisions (Television, TV), ATMs, and self-service terminals are also within the scope of application of the embodiments of the present disclosure.

[0046] It should be noted that the embodiments of the present disclosure do not limit the specific types of electronic devices. The above examples are only illustrative descriptions. The technical solutions of the present disclosure can be applied to any electronic device that needs to process private data.

[0047] Below through Figure 2 to Figure 6 The processing method of the embodiment of the present disclosure is described in detail.

[0048] Figure 2 The flowchart of the processing method provided by the embodiment of the present disclosure is schematically shown.

[0049] like Figure 2 As shown, the processing method of this embodiment may include operations S201 to S203.

[0050] Operation S201, based on the second system responding to the target instruction, the input area of ​​the second system is located in the first area of ​​the electronic device and the output area of ​​the second system is located in the second area of ​​the electronic device, the execution process indicated by the target instruction involves the private data of the user, wherein the security level of the second system is higher than the security level of the first system;

[0051] Operation S202, the second system inputs first data through the first area and outputs second data through the second area in response to the execution process indicated by the target instruction;

[0052] In operation S203 , the second system ends the execution process in response to the target instruction, and the second area is restored to the output area of ​​the first system.

[0053] In operation S201, the target instruction refers to a data processing instruction that needs to be executed in a high security level environment, and the execution process indicated by the instruction involves the user's private data. The execution process refers to the complete operation process from the user initiating a data processing request to completing the data processing.

[0054] Exemplarily, private data may include sensitive personal information of the user, such as biometric data, account password, identity authentication information, etc.; it may also include private content of the user, such as encrypted communication content, private documents, personal photos, etc.

[0055] In order to safely process these private data, the electronic device of the disclosed embodiment adopts a dual-system architecture design. Among them, the first system is the main operating system environment used in the electronic device to handle daily tasks. This system directly interacts with the user and is responsible for the basic function operation of the device and the execution of common applications. The first system adopts an open architecture, supports the installation and operation of multiple applications, and has high system flexibility and functional scalability.

[0056] The corresponding second system is a high-security operating environment specifically used to process private data. This system is built based on virtualization technology and has independent system resources and strict access control mechanisms.

[0057] The first system and the second system form a mutually cooperative but resource-isolated relationship, which are managed and maintained through a super monitoring program to ensure that the systems can both efficiently cooperate to complete user tasks and strictly maintain security boundaries.

[0058] In a feasible implementation, the target instruction can be understood as a special system call request, which is initiated by the first system but needs to be executed in the second system, and is mainly used to implement secure task switching between the first system and the second system. Through the target instruction, the system can automatically switch the relevant operations to a more secure execution environment when the user needs to process private data.

[0059] In another feasible implementation, the target instruction may also be a security request initiated by the second system to implement active intervention from the second system to the first system. The above implementation is mainly used in system security management and control scenarios. For example, when the second system detects a potential security threat, it can initiate a target instruction to request the suspension of specific operations in the first system; or when regular security checks are required, the second system actively initiates the relevant security verification process. In the above case, the execution priority of the target instruction is usually high, which can interrupt the normal task execution of the first system.

[0060] In order to further enhance security, the input and output areas of the second system are clearly divided into physical spaces on the electronic device. Specifically, the input area of ​​the second system is located in the first area of ​​the electronic device, and the first area can be equipped with an independent touch sensor or input hardware specifically for processing the user's private data input operation. Correspondingly, the output area of ​​the second system is located in the second area of ​​the electronic device, and the second area can be equipped with an independent display controller and display buffer for securely displaying processing results or feedback information.

[0061] For example, when a user needs to perform a mobile payment operation, he first selects the payment function in the payment application interface of the first system and confirms the payment amount. At this time, the payment application recognizes that the password input operation to be performed involves private data processing, and then initiates a target instruction to the system.

[0062] After receiving the target command, the super monitoring program will start the security switching process. A specific area (first area) in the lower half of the electronic device screen is allocated to the second system as a password input area, and a specific area (second area) in the upper half of the screen is allocated to the second system as an information display area. After the resource allocation is completed, the second system will perform the subsequent process of secure payment in these areas.

[0063] In operation S202, the first data refers to the data information input by the user through the first area during the execution process, and the second data refers to the data information output through the second area after being processed by the second system. Specifically, the first data can be understood as the user input content required for the execution process, such as user password, biometric data, authentication information, etc.; the second data can be understood as the output result generated by the execution process, such as processing status, operation feedback, verification results, etc. The first data and the second data play the role of input parameters and output results in the entire execution process.

[0064] It should be noted that, in actual applications, the first data usually directly involves the user's private data, such as password information entered by the user in the payment scenario, fingerprint data in the identity authentication scenario, etc. The second data may involve private data (such as bank account balance, personal information, etc.) or non-private status information (such as successful operation prompts, progress displays, etc.). Considering that the second data may contain private data, and in order to maintain the integrity of the execution environment, the embodiment of the present disclosure outputs the second data uniformly through the second area to ensure that the entire execution process is completed in a controlled and secure environment.

[0065] In operation S203, after the second system completes the execution process indicated by the target instruction, it is necessary to restore the second area to the output area of ​​the first system. Specifically, the second system will first clear the display content and related cache data in the second area to ensure that no private data remains, and then release the exclusive control over the second area. The super monitoring program will then reconfigure the resource allocation of the second area and return its display control to the first system. For example, after the payment verification is completed, the transaction information originally displayed in the second area will be cleared, and the area will return to the display range of the first system, and the interface content of the ordinary application can continue to be displayed.

[0066] By implementing the embodiments of the above-mentioned operations S201 to S203 of the present disclosure, a dynamically isolated private data processing environment can be established in an electronic device. When the execution process involves private data, the second system will respond to the target instruction with a higher security level, and through the physical area division, the input operation is limited to the first area and the output operation is limited to the second area, thereby realizing the isolation protection of the execution environment at both the system and physical levels. The above-mentioned dual protection mechanism effectively prevents other programs or systems from illegally obtaining the user's private data by sharing resources. At the same time, by releasing the second area in time after the execution process ends and restoring it to the output area of ​​the first system, the security of private data processing is guaranteed without affecting the normal use of the device.

[0067] Based on the above embodiment, as an optional embodiment, the target instruction comes from the first system; wherein different target instructions indicate different execution processes, and different execution processes involve different types of user private data.

[0068] Specifically, the target instruction from the first system refers to a request instruction for private data processing that is recognized and initiated by an application running in the first system. It can be understood that when the first system detects a scenario where private data processing is required, it sends a processing request in a specific format to the hypervisor through a system call. The request may include information such as the type of operation to be performed, the required system resources, and related security parameters. It is used to establish a task switching mechanism between the open first system and the secure second system.

[0069] For example, when a user initiates a transfer operation in the mobile banking application of the first system, the application recognizes that the above operation involves the input and verification of the payment password. At this time, the application constructs a target instruction containing payment verification process information and sends the instruction to the super monitoring program through a system call. After receiving the target instruction, the super monitoring program starts the second system and allocates the necessary system resources so that the subsequent password input and verification process can be carried out in a secure and isolated environment.

[0070] Furthermore, the first system will initiate different types of target instructions based on specific application scenarios. Each target instruction contains specific processing requirements and security parameters. The second system will start the corresponding execution process based on these different types of target instructions and process the corresponding types of private data in a targeted manner.

[0071] For example, the target instruction in the payment scenario will trigger the payment verification process, which mainly processes the user's payment password and account information; the target instruction in the document encryption and decryption scenario will start the file processing process, which involves the user's encryption key and document content; and the target instruction in the identity authentication scenario will activate the biometric verification process, which requires processing the user's fingerprint or facial feature data. The security strategies and resource configurations adopted by different execution processes will be adjusted accordingly according to the type of private data processed to ensure that each type of private data can receive the most appropriate protection.

[0072] Combine the following Figure 3 , the interaction process between the first system and the second system is further explained.

[0073] Figure 3 A schematic diagram of a dual system architecture based on virtualization technology proposed in an embodiment of the present disclosure is shown schematically.

[0074] Please refer to Figure 3 And compare Figure 1 In the system architecture of the disclosed embodiment, in the first system, the newly added privacy hardware abstraction layer and service module 107 serves as an intermediary layer for private data processing, responsible for identifying and forwarding processing requests involving private data. This module establishes a communication channel with the second service module 301 in the second system through the hypervisor call (hvc) mechanism, realizing controllable data interaction between the two systems. At the same time, the Hyp service module 108 is responsible for managing the resource virtualization and security area division of the first system by connecting to the virtualization layer 305.

[0075] The trusted framework module 302, the core component of the second system, provides the basic support for the trusted execution environment, ensuring that all private data processing is performed in a trusted environment. The second display touch and multimedia driver module 303 is a hardware driver module independent of the first system, and is specifically responsible for controlling external devices such as display and touch during private data processing. In addition, the virtualization and security zone service module 304 realizes the secure isolation and dynamic allocation of the second system resources through the connection with the virtualization layer 305.

[0076] Specifically, when the first system runs a regular application to process daily execution processes, the system will continuously monitor whether the current operation involves the processing of private data through the built-in security detection logic. Once it is detected that the execution process involves private data, the first system will immediately trigger the security switching mechanism and generate corresponding target instructions.

[0077] After generating the target instructions, the first service module 104, as an intermediary layer for private data processing, will receive these target instructions and perform secure encapsulation and standardization processing. Subsequently, through the super monitoring program call, the processed target instructions are securely transmitted to the second service module 301 of the second system. After receiving the target instructions, the second service module 301 will parse them, and according to the execution process type indicated by the target instructions, start the corresponding private data processing process in the second system, call the corresponding security resources and processing modules, and perform specific private data operations.

[0078] The disclosed embodiment introduces the second system to solve the potential security risks of the first system in the process of private data processing. Due to its openness, even if the first system is managed by permissions, there is still a risk that applications may access and intercept private data by obtaining device permissions, especially when sharing hardware resources such as display buffers.

[0079] During the interaction between the first system and the second system, when the first system detects that private data needs to be processed, it generates target instructions through the privacy hardware abstraction layer and service module 107, and transmits them securely to the second system through the HVC mechanism. After receiving these instructions, the second system establishes an independent secure execution environment through the second service module 301 and the trusted framework module 302. In the above environment, the second display touch and multimedia driver module 303 will completely take over the control of the relevant hardware devices to ensure that all input and output operations are performed in an isolated environment.

[0080] Different from the shared resource mechanism of the first system, the embodiment of the present application sets the following through the hypervisor: 1) the attributes of all resources such as memory, register or bus are set to secure access only (for example, VMID=0x2); 2) when the virtual machine VM (second system) is started, the program code segment executed inside the environment will also be bound and marked with the corresponding permission attribute, and finally the space accessible inside the virtual machine VM (second system) is a secure path; that is, the physical address space and the code instruction permission configuration are bound to each other. At least when the second system built on the virtual machine is called, the hypervisor Hypervisor performs a secure configuration for the input device, output device, or memory of the second system. For example, 0x0 -0xFFFF FFFF is secure only, then the main process that accesses it during this period has the configuration permission (their program instructions run at a higher level, and the permission attribute is also secure, and any other operations are blocked. Specifically, the definition of 64-bit program instructions is based on the fact that physical memory is far less than 2 to the 64th power, generally 256GB, so the remaining bits can be used to expand the permission attributes and access space range tags. Therefore, in the above example, assuming that the 56th bit is set to Secure Attribute OR Non-Secure Attribute, the configuration register that determines whether it is secure or not is fixed by hardware, and there is no way to tamper with the content of the instruction read on it. Therefore, as long as an instruction is read and its 56th bit is parsed and identified as Secure, it has the permission to access 0x0 - FFFF Therefore, the information input by the second system based on the securely configured input device (for example, security information such as passwords or fingerprints), or the data corresponding to the securely configured output device (for example, private information such as private photos of users displayed on the target display screen or target display area) is guaranteed to be secure and will not be intercepted or monitored by other programs.

[0081] By adopting the embodiment of the present disclosure, strict isolation of hardware resources and an independent processing environment are used to effectively solve the risk of private data leakage caused by the open nature of the first system, and provide a more secure and reliable execution environment for private data processing.

[0082] In a traditional shared memory architecture, even if data is encrypted, the decrypted data may still be obtained by other programs through memory access during actual operation. Therefore, the embodiment of the present disclosure solves the above problem by allocating an independent second memory space to the second system.

[0083] Further, based on the above embodiment, as an optional embodiment, operation S201, before the second system responds to the target instruction, may further include the following operations:

[0084] A second memory space is allocated, where the second memory space is used to cache execution data of the execution process indicated by the target instruction, where the execution data includes at least first data and second data, and the second memory space is an isolated space that is inaccessible to the first system.

[0085] Among them, the second memory space refers to an independent area specially divided in the physical memory of the electronic device, which is completely isolated from the first system through virtualization technology. Specifically, the second memory space includes three main parts: instruction cache, data cache and status cache. The instruction cache is used to store specific operation instructions after the target instruction is parsed; the data cache is used to store various data contents generated in the execution process, including the first input data, the second output data and the intermediate calculation results; the status cache is used to record the identification and processing status of each stage of the execution process.

[0086] Furthermore, execution data refers to all data content generated in the execution process indicated by the target instruction, including user input information, system processing results, and intermediate state data in the process. In the embodiment of the present disclosure, it can be understood as various types of data that the second system needs to store, calculate, and transmit when processing private data, the most basic of which include first data input through the first area and second data output through the second area. Execution data not only includes private information directly input by the user, but also includes various types of temporary data, status identifiers, and calculation results generated during system processing.

[0087] For example, in a mobile payment scenario, when a user needs to enter a payment password, the hypervisor will allocate an independent second memory space in the physical memory. The second memory space is used to store the execution data of the entire payment process, including the payment password entered by the user (first data) and the payment verification result information (second data). Through the memory mapping mechanism of the virtualization layer, this memory space is completely isolated at the physical level, and other applications running in the first system cannot access these private data through memory scanning or system calls.

[0088] The allocation of the second memory space adopts hardware-based memory isolation technology. The hypervisor establishes an independent memory access control mechanism by configuring the security extension features of the ARM architecture. When the second system needs to process private data, the relevant memory access request will undergo strict permission verification. At the same time, the memory space is also configured with an independent cache strategy to prevent sensitive data from leaking in the CPU cache. After the execution process ends, all data in the second memory space will be securely cleared to ensure that no sensitive information remains.

[0089] By adopting the embodiments of the present disclosure, a complete security barrier is established from the memory management level, so that the entire execution environment is effectively protected at the bottom layer of the system, ensuring the integrity and confidentiality of private data during the processing process, and effectively preventing the risk of data leakage caused by memory attacks and the like.

[0090] During the use of device resources, if there is no strict hardware access control mechanism, even if memory isolation technology is used, private data may still be intercepted by other programs during the input and output links.

[0091] Therefore, based on the above embodiments, as an optional embodiment, the embodiment of the present disclosure ensures security isolation at the device level through a hardware resource locking mechanism.

[0092] Specifically, when performing operation S201, based on the second system responding to the target instruction, the following operations may also be performed:

[0093] The target input device and the target output device are locked for the second system. The target output device is one of the multiple display screens included in the electronic device.

[0094] Specifically, when the second system starts to respond to the target instruction, the super monitoring program will first identify the hardware resources required for the execution process. In this embodiment, these hardware resources mainly include a target input device for data input (such as a touch panel, a fingerprint sensor, etc.) and a target output device for information display. Among them, the target output device can be one of the multiple display screens equipped with the electronic device.

[0095] After identifying the required hardware resources, the hypervisor calls the hardware abstraction interface through the virtualization layer to completely transfer the control of these devices to the second system. The above transfer process includes reconfiguring the interrupt routing table of the device, updating the device access rights, and resetting the device control registers. Through these underlying configurations, these hardware devices are locked at the physical level and only respond to access requests from the second system.

[0096] Figure 4 A schematic diagram of a scenario of hardware resource locking proposed in an embodiment of the present disclosure is schematically shown.

[0097] like Figure 4 As shown, when the user needs to perform payment operations on the folding screen mobile phone, the super monitoring program will dynamically allocate and lock different hardware resources according to the folding state of the device. When the device is in the unfolded state, since the display panel of the secondary screen 402 of the folding screen mobile phone is smaller than the main screen 401, the second system will lock the secondary screen 402 as the target output device, and lock its matching touch panel as the target input device. The input of the payment password and the display of the verification information are concentrated in a smaller display area, which is in line with the user's operating habits and can improve security through a limited operating range. Specifically, after the second system locks these hardware resources, it will reconfigure the display controller and touch controller of the secondary screen 402 so that it only responds to access requests from the second system, thereby blocking other applications' attempts to access these devices at the hardware level.

[0098] When the device is in the folded state, since only the external screen 403 can be used, the second system will lock the external screen 403 as the target output device and lock its corresponding touch sensor as the target input device.

[0099] It should be noted that the above examples are only exemplary. In actual applications, the allocation strategy of the target input device and the target output device can be dynamically adjusted according to the user's usage habits, operation scenarios and security requirements. For example, some users may be accustomed to using the main screen for private operations, or need a larger display space to process private documents in specific scenarios. At this time, the system can adjust the locking scheme of hardware resources accordingly.

[0100] By adopting the disclosed embodiment, when the second system responds to the target instruction, the hardware resources such as the target input device and the target output device are locked, and an independent secure operating environment is constructed at the hardware level. When the hypervisor transfers the control of these devices to the second system through the hardware abstract interface, the above hardware resources are completely isolated at the physical level, thereby effectively preventing the application program in the first system from stealing the user's private information in various ways.

[0101] In the traditional single-screen display mode, when private data needs to be processed, the entire display screen will be switched to a secure environment, which makes it impossible for the user to view or operate other non-private content at the same time. In order to solve the above problem, this embodiment introduces a split-screen mechanism, so that the user can perform private operations and ordinary operations on the same display screen at the same time.

[0102] Figure 5A The flowchart schematically shows another processing method provided by an embodiment of the present disclosure.

[0103] like Figure 5AAs shown, the split-screen processing method of this embodiment may include operations S501 to S503.

[0104] Operation S501: If the first system obtains a target instruction, a split screen instruction is triggered;

[0105] Operation S502, in response to the screen splitting instruction, controlling a display screen of the electronic device to be divided into at least two display areas;

[0106] Operation S503 : based on the second system responding to the target instruction, locking the target input device and the target display area for the second system, where the target display area belongs to one of the at least two display areas.

[0107] In operation S501, the screen splitting instruction refers to a specific control command issued by the system for controlling the spatial division of the display screen. In the embodiment of the present disclosure, it can be understood as a special system call request sent by the first system to the display control system after receiving the target instruction involving private data processing, which is used to notify the system to divide the current display screen into multiple logically independent display areas, so as to subsequently allocate independent display spaces for systems with different security levels.

[0108] Specifically, when the user performs an operation involving private data in the first system, such as clicking on the password input area in the payment application, the first system will generate a target instruction containing the private data processing requirements. After obtaining the target instruction, the first system will first send a split screen instruction to the display management module through a system call. The split screen instruction contains specific parameters for the division of the display area, such as the division method (upper and lower split screen or left and right split screen), area ratio, display priority and other configuration information.

[0109] For example, when the user needs to enter a password in a payment scenario, the first system will generate a split-screen instruction to split the display screen into upper and lower parts in a 6:4 ratio, reserving appropriate display space for subsequent security operations.

[0110] In operation S502, when the system receives the split-screen instruction, the display management module will call the hardware interface of the display controller according to the configuration parameters in the split-screen instruction, reconfigure the memory mapping and refresh strategy of the display buffer, and logically divide a physical display screen into at least two independent display areas. The above division process involves the reconfiguration of the display controller register, the reallocation of the display buffer, and the adjustment of the display refresh mechanism. For example, in the payment scenario, the system will divide the display screen into two upper and lower display areas according to the split-screen instruction, where the upper display area maintains the original display content and refresh strategy, and the lower display area is configured with an independent display buffer and control parameters to prepare for subsequent security operations.

[0111] In operation S503, when the second system starts to respond to the target instruction, the hypervisor first identifies the hardware resources that need to be locked. These resources include a target input device for data input (such as a specific area of ​​a touch panel) and a target display area for information display. The target display area refers to the area in the at least two display areas previously divided that is specifically used to display private data.

[0112] The locking process achieves exclusive access to resources through the hardware abstraction layer. First, the hypervisor reconfigures the registers and interrupt routing table of the display controller to completely transfer control of the target display area to the second system. This includes setting up an independent display buffer, configuring a dedicated channel, and establishing an independent display refresh mechanism. At the same time, the touch area corresponding to the target display area will also be configured as a target input device, and the system will reset the interrupt processing mechanism of the touch controller to ensure that the touch events in this area are directly routed to the second system for processing.

[0113] The above embodiment illustrates the split-screen processing process of the embodiment of the present disclosure by taking a single screen as an example. On the basis of the above embodiment, as an optional embodiment, the above split-screen processing process can also be applied to a folding screen device including multiple screens.

[0114] Figure 5B A schematic diagram of a split-screen processing scenario provided by an embodiment of the present disclosure is schematically shown.

[0115] In foldable screen devices, the system can monitor the folding state and spatial posture of the device in real time through the built-in angle sensor. When the device is in a semi-folded state, the two physical screens will naturally form different visual planes, providing a natural physical basis for achieving safe isolation. Specifically, the system will continuously collect the spatial parameters of the device through hardware such as gyroscopes and accelerometers, including the folding angle and the tilt angle of the device relative to the horizontal plane.

[0116] like Figure 5B As shown, when it is detected that the device is in a semi-folded state of 130° and the user holds the device at a specific tilt angle, the system recognizes that the above usage posture is suitable for safe partition display.

[0117] Based on the above collected parameters, the system can intelligently determine the division scheme of the display area. Figure 5B In the scenario shown, the system divides the folding screen into two display areas, area A 504 and area B 505. Area B 505, due to its relative position and large display area, naturally forms a relatively private visual space, which is suitable for displaying private data. At the same time, the above partitioning method can also take into account ergonomic characteristics, allowing users to operate comfortably in the semi-folded state.

[0118] After determining the display area division, the system will set area B 505 as the target display area for displaying private data that needs to be protected. The relatively small area A 504 is configured as the target input device, responsible for receiving the user's touch operation. The above configuration makes full use of the physical characteristics of the folding screen, so that the input area and the display area are naturally separated in space, which not only ensures the convenience of operation, but also improves the privacy of information display.

[0119] Based on the above embodiments, as another optional embodiment, the present disclosure also provides a safe display solution based on a single folding screen device.

[0120] Figure 5C A schematic diagram of another split-screen processing scenario provided by an embodiment of the present disclosure is schematically shown.

[0121] In a single folding screen device, the system can also utilize the spatial visual difference naturally formed in the folded state to enhance the display security of private data. Specifically, when the single folding screen device is in the folded state, the display screen will naturally form an upper half area 506 and a lower half area 507. Through the built-in angle sensor, the system can detect the relative angle between the two areas in real time.

[0122] like Figure 5C As shown, when a folding angle of 130° is detected between the upper area 506 and the lower area 507, the system will recognize this specific spatial configuration. In this configuration, the upper area 506 will form a natural line of sight block for the lower area 507, thereby physically limiting the possibility of others peeking at the content displayed in the lower area 507 from the side or back.

[0123] Based on the above physical characteristics, the system can intelligently set the lower half area 507 as the target display area. This setting makes full use of the natural shielding effect formed after the device is folded, making the display of private data more voyeur-proof. At the same time, the system will correspondingly configure the upper half area 506 as a display area for non-private information, which can be used to display common interface elements or operation prompts of the application and other content.

[0124] By adopting the disclosed embodiment, it is ensured that private data is securely protected in the target display area, and the user is allowed to continue to perform normal operations in other display areas, thereby improving the efficiency of device use. At the same time, because the target display area is locked by the second system and associated with the target input device, a complete secure interactive channel is formed, which effectively prevents other programs from obtaining private data through display interception or input monitoring, thereby ensuring data security while maintaining a good operating experience.

[0125] In the use scenarios of electronic devices, users often need to project the display content of electronic devices such as mobile phones or tablets onto a larger display screen to obtain a better visual experience. However, when processing private data in the screen projection scenario, if the interface containing private information is directly projected onto the terminal device, privacy leakage may occur. In order to solve the above problems, this embodiment provides a security processing solution based on two-way display.

[0126] Figure 6 A flowchart of another processing method provided by an embodiment of the present disclosure is schematically shown.

[0127] like Figure 2 As shown, the processing method of this embodiment may include operations S601 to S610.

[0128] Operation S601, the first system projects a first display interface of a first program to a display screen of a terminal device through a connection channel for display;

[0129] Operation S602: the terminal device displays a first display interface;

[0130] Operation S603: The terminal device feeds back operation information on the first display interface of the first program to the first system;

[0131] Operation S604, the first system determines whether the operation instruction corresponding to the operation information is a target instruction;

[0132] Operation S605: if it is determined that the operation instruction corresponding to the operation information is not the target instruction, the first system generates a second display interface in response to the operation instruction corresponding to the operation information;

[0133] Operation S606: the first system projects the second display interface to the terminal device;

[0134] Operation S607: the terminal device updates the first display interface with the second display interface;

[0135] Operation S608, if it is determined that the operation instruction corresponding to the operation information is a target instruction, the second system responds to the target instruction;

[0136] Operation S609: the second system locks the target input device of the electronic device and the display screen of the electronic device as the second area;

[0137] In operation S610, the second system outputs a third display interface generated in response to the target instruction based on the display screen of the electronic device.

[0138] Specifically, when the user needs to operate the application on a larger screen, the electronic device will establish a connection channel wirelessly or wiredly to project the first display interface of the first program onto the display screen of the terminal device. The terminal device can be a device with display function such as a smart TV, a projector or an external display. The user can view the content of the first display interface through the display screen of the terminal device and perform interactive operations through touch, remote control, etc. The operation will generate corresponding operation information and feedback to the electronic device through the connection channel.

[0139] For example, when a user clicks on video content that requires payment while watching the projected content, the click operation will be converted into operation information and transmitted back to the electronic device.

[0140] After receiving the operation information, the electronic device will generate corresponding operation instructions according to the operation information. If it is an ordinary operation instruction, the system will generate a new second display interface and project it onto the display screen of the terminal device through the connection channel to update the original first display interface. However, when the system detects that the operation information corresponds to a target instruction involving private data processing, a special security processing mechanism will be activated. At this time, the second system will be activated and lock the target input device and display screen on the electronic device as the second area, and generate a third display interface containing a password input interface on the display screen of the electronic device.

[0141] By adopting the disclosed embodiment, the electronic device keeps displaying a normal interactive interface on the terminal device, while the third display interface involving private data is only presented on the display screen of the electronic device. This allows the user to complete sensitive operations such as password input on an electronic device with better privacy, while the terminal device continues to display content that does not involve privacy, which not only protects the user's private data security, but also does not affect the normal use experience in the screen projection scenario, achieving a good balance between privacy protection and convenience.

[0142] The present disclosure embodiment also discloses an electronic device, including: an input device; an output device; a processor, which is used to respond to a target instruction based on a second system, wherein an input area of ​​the second system is located in a first area of ​​the input device and an output area of ​​the second system is located in a second area of ​​the output device, the execution process indicated by the target instruction involves private data of the user, and in the execution process indicated by the second system responding to the target instruction, first data is input through the first area and second data is output through the second area, the execution process of the second system responding to the target instruction ends, and the second area is restored to the output area of ​​the first system, wherein the security level of the second system is higher than the security level of the first system.

[0143] Based on the above embodiment, as an optional embodiment, the processor is further used to run a virtual machine, the virtual machine is configured as a second system, and the second system and the first system are kept running in isolation.

[0144] Based on the above embodiment, as an optional embodiment, the electronic device also includes a memory; the processor is also used to allocate a second memory space in the memory, the second memory space is used to cache execution data of the execution process indicated by the target instruction, the execution data includes at least first data and second data, and the second memory space is an isolated space inaccessible to the first system.

[0145] Based on the above embodiment, as an optional embodiment, the output device includes multiple display screens; the processor is also used to lock the target input device and the target output device for the second system when the second system responds to the target instruction, and the target output device is one of the multiple display screens.

[0146] Based on the above embodiments, as an optional embodiment, the processor is also used to trigger a split screen instruction if the first system obtains a target instruction; in response to the split screen instruction, control the display screen of the electronic device to be divided into at least two display areas; based on the second system responding to the target instruction, lock the target input device and the target display area for the second system, and the target display area belongs to one of the at least two display areas.

[0147] On the basis of the above embodiment, as an optional embodiment, the processor is also used to project the first display interface of the first program to the display screen of the terminal device through the connection channel, and obtain the operation information of the terminal device for the first display interface of the first program through the connection channel; in response to the operation instruction corresponding to the operation information, generate a second display interface and project it to the display screen of the terminal device to update the first display interface; wherein, if the operation instruction corresponding to the operation information is a target instruction, then based on the second system responding to the target instruction, the target input device of the electronic device and the display screen of the electronic device are locked as the second area for the second system; based on the display screen of the electronic device, a third display interface generated in response to the target instruction is output.

[0148] Figure 7 A block diagram of an electronic device provided by an embodiment of the present disclosure is schematically shown. Figure 7 The electronic device shown is only an example and should not bring any limitation to the functions and scope of use of the embodiments of the present disclosure.

[0149] like Figure 7As shown, the electronic device 700 according to an embodiment of the present disclosure includes a display screen (not shown in the figure), a processor 701, which can perform various appropriate actions and processes according to a program stored in a read-only memory (ROM) 702 or a program loaded from a memory 708 to a random access memory (RAM) 703. The processor 701 may include, for example, a general-purpose microprocessor (such as a CPU), an instruction set processor and / or a related chipset and / or a special-purpose microprocessor (for example, an application-specific integrated circuit (ASIC)), etc. The processor 701 may also include an onboard memory for caching purposes. The processor 701 may include a single processing unit or multiple processing units for performing different actions of the method flow according to an embodiment of the present disclosure.

[0150] In RAM 703, various programs and data required for the operation of electronic device 700 are stored. Processor 701, ROM 702 and RAM 703 are connected to each other via bus 704. Processor 701 performs various operations of the method flow according to the embodiment of the present disclosure by executing the program in ROM 702 and / or RAM 703. It should be noted that the program can also be stored in one or more memories other than ROM 702 and RAM 703. Processor 701 can also perform various operations of the method flow according to the embodiment of the present disclosure by executing the program stored in the one or more memories.

[0151] According to an embodiment of the present disclosure, the electronic device 700 may further include an input / output (I / O) interface 705, which is also connected to the bus 704. The system 700 may further include one or more of the following components connected to the input / output (I / O) interface 705: an input device 706 including a keyboard, a mouse, etc.; an output device 707 including a cathode ray tube (CRT), a liquid crystal display (LCD), a display screen, etc., and a speaker, etc.; a memory 708 including a hard disk, etc.; and a communication part 709 including a network interface card such as a LAN card, a modem, etc. The communication part 709 performs communication processing via a network such as the Internet. A drive 710 is also connected to the input / output (I / O) interface 705 as needed. A removable medium 711, such as a magnetic disk, an optical disk, a magneto-optical disk, a semiconductor memory, etc., is installed on the drive 710 as needed, so that a computer program read therefrom is installed into the memory 708 as needed.

[0152] According to an embodiment of the present disclosure, the method flow according to an embodiment of the present disclosure can be implemented as a computer software program. For example, an embodiment of the present disclosure includes a computer program product, which includes a computer program carried on a computer-readable storage medium, and the computer program contains a program code for executing the method shown in the flowchart. In such an embodiment, the computer program can be downloaded and installed from the network through the communication part 709, and / or installed from the removable medium 711. When the computer program is executed by the processor 701, the above-mentioned functions defined in the system of the embodiment of the present disclosure are executed. According to an embodiment of the present disclosure, the system, equipment, device, module, unit, etc. described above can be implemented by a computer program module.

[0153] The present disclosure also provides a computer-readable storage medium, which may be included in the device / apparatus / system described in the above embodiments; or may exist independently without being assembled into the device / apparatus / system. The above computer-readable storage medium carries one or more programs, and when the above one or more programs are executed, the method according to the embodiment of the present disclosure is implemented.

[0154] According to an embodiment of the present disclosure, the computer-readable storage medium may be a non-volatile computer-readable storage medium. For example, it may include, but is not limited to: a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination thereof. In the present disclosure, a computer-readable storage medium may be any tangible medium containing or storing a program that may be used by or in combination with an instruction execution system, apparatus, or device.

[0155] For example, according to an embodiment of the present disclosure, the computer-readable storage medium may include the ROM 702 and / or the RAM 703 described above and / or one or more memories other than the ROM 702 and the RAM 703 .

[0156] The embodiments of the present disclosure also include a computer program product, which includes a computer program, and the computer program contains program code for executing the method provided by the embodiments of the present disclosure. When the computer program product runs on an electronic device, the program code is used to enable the electronic device to implement the method provided by the embodiments of the present disclosure.

[0157] When the computer program is executed by the processor 701, the above functions defined in the system / device of the embodiment of the present disclosure are executed. According to the embodiment of the present disclosure, the system, device, module, unit, etc. described above can be implemented by a computer program module.

[0158] In one embodiment, the computer program may rely on tangible storage media such as optical storage devices, magnetic storage devices, etc. In another embodiment, the computer program may also be transmitted and distributed in the form of signals on a network medium, and downloaded and installed through the communication part 709, and / or installed from the removable medium 711. The program code contained in the computer program may be transmitted using any appropriate network medium, including but not limited to: wireless, wired, etc., or any suitable combination of the above.

[0159] The flowcharts and block diagrams in the accompanying drawings illustrate the possible architecture, functions and operations of the systems, methods and computer program products according to various embodiments of the present disclosure. In this regard, each box in the flowchart or block diagram may represent a module, a program segment, or a part of a code, and the above-mentioned module, program segment, or a part of the code contains one or more executable instructions for implementing the specified logical function. It should also be noted that in some alternative implementations, the functions marked in the box may also occur in an order different from that marked in the accompanying drawings. For example, two boxes represented in succession can actually be executed substantially in parallel, and they can sometimes be executed in the opposite order, depending on the functions involved. It should also be noted that each box in the block diagram or flowchart, and the combination of boxes in the block diagram or flowchart, can be implemented with a dedicated hardware-based system that performs the specified function or operation, or can be implemented with a combination of dedicated hardware and computer instructions. It can be understood by those skilled in the art that the features recorded in the various embodiments and / or claims of the present disclosure can be combined and / or combined in a variety of ways, even if such a combination or combination is not explicitly recorded in the present disclosure. In particular, without departing from the spirit and teaching of the present disclosure, the features described in the various embodiments and / or claims of the present disclosure may be combined and / or combined in a variety of ways. All of these combinations and / or combinations fall within the scope of the present disclosure.

[0160] The embodiments of the present disclosure are described above. However, these embodiments are only for illustrative purposes and are not intended to limit the scope of the present disclosure. Although the embodiments are described above separately, this does not mean that the measures in the various embodiments cannot be used in combination to advantage. The scope of the present disclosure is defined by the attached claims and their equivalents. Without departing from the scope of the present disclosure, those skilled in the art may make a variety of substitutions and modifications, which should all fall within the scope of the present disclosure.

Claims

1. A processing method comprising: Based on the second system responding to the target instruction, the input area of ​​the second system is located in the first area of ​​the electronic device and the output area of ​​the second system is located in the second area of ​​the electronic device, and the execution process indicated by the target instruction involves the private data of the user; The second system inputs first data through the first area and outputs second data through the second area in response to the execution process indicated by the target instruction; The second system responds to the end of the execution process of the target instruction, and the second area is restored to the output area of ​​the first system; The security level of the second system is higher than the security level of the first system.

2. The method according to claim 1, wherein the target instruction comes from the first system; in, Different target instructions indicate different execution processes, and different execution processes involve different types of user private data.

3. The method according to claim 1, before responding to the target instruction based on the second system, further comprising: A second memory space is allocated, where the second memory space is used to cache execution data of the execution process indicated by the target instruction, where the execution data includes at least first data and second data, and the second memory space is an isolated space that is inaccessible to the first system.

4. The method according to claim 2, based on the second system responding to the target instruction, locking the target input device and the target output device for the second system, the target output device being one of a plurality of display screens included in the electronic device.

5. The method according to claim 2, further comprising: If the first system obtains the target instruction, a split screen instruction is triggered; In response to the screen splitting instruction, controlling the display screen of the electronic device to be divided into at least two display areas; When the second system responds to the target instruction, the target input device and the target display area are locked for the second system, and the target display area belongs to one of the at least two display areas.

6. The method according to claim 2, further comprising: Projecting a first display interface of a first program to a display screen of a terminal device through a connection channel, and obtaining operation information of the terminal device on the first display interface of the first program through the connection channel; In response to the operation instruction corresponding to the operation information, generate a second display interface and project the second display interface to the display screen of the terminal device to update the first display interface; Wherein, if the operation instruction corresponding to the operation information is the target instruction, based on the second system responding to the target instruction, the target input device of the electronic device and the display screen of the electronic device are locked as the second area for the second system; A third display interface generated in response to the target instruction is output based on the display screen of the electronic device.

7. An electronic device comprising: Input device; Output device; A processor, for responding to a target instruction based on a second system, wherein an input area of ​​the second system is located in a first area of ​​the input device and an output area of ​​the second system is located in a second area of ​​the output device, an execution process indicated by the target instruction involves private data of a user, the second system responds to the execution process indicated by the target instruction, inputs first data through the first area and outputs second data through the second area, the execution process of the second system responding to the target instruction ends, and the second area is restored to the output area of ​​the first system, wherein the security level of the second system is higher than the security level of the first system. 8 . The electronic device according to claim 7 , wherein the processor is further configured to run a virtual machine, wherein the virtual machine is configured as the second system and keeps the second system and the first system running in isolation.

9. The electronic device according to claim 8, further comprising: Memory; The processor is also used to allocate a second memory space in the memory, and the second memory space is used to cache execution data of the execution process indicated by the target instruction, and the execution data includes at least first data and second data. The second memory space is an isolated space that is inaccessible to the first system.

10. The electronic device according to claim 8, wherein the output device comprises a plurality of display screens; The processor is further configured to lock a target input device and a target output device for the second system when the second system responds to a target instruction, wherein the target output device is one of the plurality of display screens.

Images