Information protection method and device for lost equipment, electronic equipment and storage medium

Abstract

The invention provides an information protection method and device for lost equipment, electronic equipment and a storage medium. The equipment comprises a BIOS (Basic Input Output System) and a WWAN (Wireless Wide Area Network) card, the method comprises the following steps: receiving a lost short message instruction aiming at lost equipment from mobile equipment through a WWAN card; wherein the mobile device is a device communicating with a lost device; obtaining the device state of the lost device, and adjusting the lost device to be in a BIOS restart state under the condition that the device state of the lost device is a running state; in response to the BIOS restart state of the lost equipment, based on the lost short message instruction, obtaining an information protection instruction for the lost equipment; and protecting the information of the lost equipment based on the information protection instruction of the lost equipment. According to the invention, safe and efficient protection of lost equipment information can be realized without depending on an operating system.

Description

Technical Field

[0001] The present application relates to the field of communications, and in particular to a method, device, electronic device and storage medium for protecting information of a lost device. Background Art

[0002] In the information age, laptop computers are the most commonly used devices for storing information, and their information security is particularly important. The loss of a computer will not only lead to the leakage of personal information, but also cause data loss, economic losses and other problems. In related technologies, third-party software is usually installed on the operating system of a laptop to help locate the location of the laptop. However, if the operating system is tampered with or reinstalled, the security measures will become invalid. In addition, the security software or solutions under the operating system are usually vulnerable to malware attacks and have low security. Summary of the invention

[0003] The present application provides a method, apparatus, electronic device and storage medium for protecting information of a lost device, so as to at least solve the above technical problems existing in the prior art.

[0004] According to a first aspect of the present application, a method for protecting information of a lost device is provided, wherein the device includes a basic input and output system BIOS and a wireless wide area network WWAN card; the method includes:

[0005] Receiving a lost SMS instruction for a lost device from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device;

[0006] Acquire the device status of the lost device, and if the device status of the lost device is a running status, adjust the lost device to a BIOS restart status;

[0007] In response to the BIOS restart state of the lost device, based on the lost SMS instruction, obtaining an information protection instruction for the lost device;

[0008] Based on the information protection instruction of the lost device, the information of the lost device is protected.

[0009] In one possible implementation, obtaining the information protection instruction for the lost device based on the lost SMS instruction includes:

[0010] The lost SMS instruction is parsed to obtain an information protection instruction for the lost device; the information protection instruction includes at least one of a hard disk encryption instruction, a hard disk erasing instruction, a device positioning instruction, and a device alarm instruction.

[0011] In one possible implementation, when the information protection instruction includes a hard disk encryption instruction,

[0012] The protecting the information of the lost device based on the information protection instruction of the lost device includes:

[0013] Generate an encrypted password for a lost device;

[0014] Based on the encryption password, the hard disk of the lost device is encrypted.

[0015] In one possible implementation manner, after encrypting the hard disk of the lost device, the method further includes:

[0016] Sending the encrypted password to the mobile device and generating a password verification interface;

[0017] Based on the password verification interface, obtaining a verification password;

[0018] When the verification password is empty, or the verification password is inconsistent with the encryption password, the lost device is adjusted to a shutdown state.

[0019] In one possible implementation, when the information protection instruction includes a device location instruction,

[0020] The protecting the information of the lost device based on the information protection instruction of the lost device includes:

[0021] The global positioning system GPS information of the lost device is obtained through the WWAN card, and the GPS information is sent to the mobile device.

[0022] In one possible implementation, when the information protection instruction includes a hard disk erasing instruction,

[0023] The protecting the information of the lost device based on the information protection instruction of the lost device includes:

[0024] Based on the hard disk erasing instruction, erase information on the hard disk of the lost device and generate erasure completion information;

[0025] Sending erasure completion information to the mobile device.

[0026] According to a second aspect of the present application, a device for protecting information of a lost device is provided, wherein the device comprises a basic input and output system BIOS and a wireless wide area network WWAN card; the device comprises:

[0027] A first receiving unit, configured to receive a lost SMS instruction for a lost device from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device;

[0028] A first adjustment unit is used to obtain the device state of the lost device, and when the device state of the lost device is a running state, adjust the lost device to a BIOS restart state;

[0029] A first acquisition unit, configured to obtain, in response to a BIOS restart state of the lost device and based on the lost SMS instruction, an information protection instruction for the lost device;

[0030] The information protection unit is used to protect the information of the lost device based on the information protection instruction of the lost device.

[0031] In one possible implementation, the first acquisition unit is used to parse the lost SMS instruction to obtain an information protection instruction for the lost device; the information protection instruction includes at least one of a hard disk encryption instruction, a hard disk erasing instruction, a device positioning instruction, and a device alarm instruction.

[0032] According to a third aspect of the present application, an electronic device is provided, including:

[0033] at least one processor; and

[0034] a memory communicatively connected to the at least one processor; wherein,

[0035] The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method described in the present application.

[0036] According to a fourth aspect of the present application, a non-transitory computer-readable storage medium storing computer instructions is provided, wherein the computer instructions are used to enable a computer to execute the method described in the present application.

[0037] In the present application, a lost SMS instruction for a lost device is received from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device; the device state of the lost device is obtained, and when the device state of the lost device is in a running state, the lost device is adjusted to a BIOS restart state; in response to the BIOS restart state of the lost device, an information protection instruction for the lost device is obtained based on the lost SMS instruction; and the information of the lost device is protected based on the information protection instruction of the lost device. It is possible to achieve safe and efficient protection of the lost device information without relying on the operating system.

[0038] It should be understood that the content described in this section is not intended to identify the key or important features of the embodiments of the present application, nor is it intended to limit the scope of the present application. Other features of the present application will become easily understood through the following description. BRIEF DESCRIPTION OF THE DRAWINGS

[0039] By reading the detailed description below with reference to the accompanying drawings, the above and other purposes, features and advantages of the exemplary embodiments of the present application will become easily understood. In the accompanying drawings, several embodiments of the present application are shown in an exemplary and non-limiting manner, wherein:

[0040] In the drawings, the same or corresponding reference numerals represent the same or corresponding parts.

[0041] Figure 1 A schematic diagram of the implementation process of the information protection method for a lost device according to an embodiment of the present application is shown;

[0042] Figure 2 A schematic diagram showing the application of the information protection method for a lost device according to an embodiment of the present application;

[0043] Figure 3 A schematic diagram of the communication process of a USB device according to an embodiment of the present application is shown;

[0044] Figure 4 A schematic diagram showing the structure of the information protection device for a lost device according to an embodiment of the present application is shown;

[0045] Figure 5 A schematic diagram of the structure of an electronic device according to an embodiment of the present application is shown. DETAILED DESCRIPTION

[0046] In order to make the purpose, features, and advantages of the present application more obvious and easy to understand, the technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only part of the embodiments of the present application, not all of the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those skilled in the art without creative work are within the scope of protection of the present application.

[0047] Understandably, in order to reduce the loss of a laptop due to loss or theft, users usually install third-party software on the laptop's operating system to help locate the laptop. However, third-party software requires the operating system to run. If the operating system is tampered with or reinstalled, the security measures will become ineffective, increasing the risk of the computer being bypassed or attacked. Moreover, third-party software positioning not only requires an Internet connection to obtain the computer's location, but if the security software under the operating system relies on specific software applications or services to run, it may not be able to protect data when the computer starts, especially before startup or before the operating system is loaded. In addition, the security solution under the operating system may require a more complex management and maintenance process, including regular software updates, monitoring of security status, etc., which increases management costs and workload. It will also occupy system resources, resulting in performance degradation or adverse effects on user experience.

[0048] The embodiment of the present application provides a method for protecting information of a lost device, receiving a lost SMS instruction for a lost device from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device; obtaining the device state of the lost device, and adjusting the lost device to a BIOS restart state when the device state of the lost device is a running state; in response to the BIOS restart state of the lost device, obtaining an information protection instruction for the lost device based on the lost SMS instruction; and protecting the information of the lost device based on the information protection instruction of the lost device. The method can realize safe and efficient protection of the information of the lost device without relying on the operating system.

[0049] The embodiment of the present application provides a method for protecting information of a lost device, wherein the device includes a basic input and output system BIOS and a wireless wide area network WWAN card; Figure 1 As shown, the method includes:

[0050] S101: receiving a lost SMS instruction for a lost device from a mobile device via a WWAN card; wherein the mobile device is a device that communicates with the lost device.

[0051] In this step, combine Figure 2 As shown, when a user's laptop is lost, the user sends a lost SMS instruction to the lost laptop (lost device) through a mobile phone (mobile device), and the lost device monitors the instruction through the SMS callback service of the WWAN (Wireless Wide Area Network) card.

[0052] refer to Figure 3As shown, under normal circumstances, the USB (Universal Serial Bus) device communicates with the USB I / O (Input / Output) protocol of the USB bus driver through the protocol, and then communicates with the USB host controller device driver, and finally abstracted through the PCI (Peripheral Component Interconnect) I / O protocol hardware. Among them, the USB storage device driver communicates with the USB bus driver through the Block (synchronous blocking) I / O protocol. The USB keyboard device driver communicates with the USB bus driver through the Simple Input (simple input) protocol. The USB mouse device driver communicates with the USB bus driver through the Simple Pointer (simple pointer) protocol. The USB WWAN device driver in the embodiment of the present application communicates with the USB bus driver through the AT command protocol. In addition, other USB device drivers are also included, which communicate with the USB bus driver through corresponding protocols respectively, and the embodiments of the present application are not specifically listed here.

[0053] S102: Acquire the device status of the lost device, and if the device status of the lost device is a running status, adjust the lost device to a BIOS restart status.

[0054] In this step, refer to Figure 2 As shown, when the lost device is in the running state, that is, the lost device is currently being used by a non-original user of the device, in order to enhance data security, the lost device is forced to restart and enter the BIOS initialization phase. This ensures that the operating system is reloaded to apply new encryption or erase settings, so that even if the device is used by others, the encrypted or erased data cannot be accessed. Similarly, when the lost device is in the shutdown state and is turned on by a non-original user, the device automatically enters the BIOS initialization phase.

[0055] S103: In response to the BIOS restart state of the lost device, based on the lost SMS instruction, obtaining an information protection instruction for the lost device;

[0056] In this step, refer to Figure 2As shown, in response to the BIOS restart status of the lost device, the WWAN card of the lost device mounts the driver and starts to receive the lost SMS instruction. The application reads the SMS on the SIM / eSIM (Subscriber Identity Module) card and WWAN card of the lost device to confirm whether the lost SMS instruction for the lost device has been received. If the lost SMS instruction is not received, continue to boot into the operating system. If the lost SMS instruction is received, based on the lost SMS instruction, the information protection instruction for the lost device is obtained. The information protection instruction is used to indicate the information protection operation of the lost device, including encryption, erasure, positioning or alarm, etc.

[0057] S104: Protecting the information of the lost device based on the information protection instruction of the lost device.

[0058] In this step, based on the information protection instruction for the lost device, the corresponding information protection operation is performed on the information of the lost device. The embodiment of the present application integrates an anti-theft function in the UEFI (Unified Extensible Firmware Interface) BIOS (Basic Input / Output System), which is a security protection solution implemented at the hardware level. It is more difficult to bypass or tamper with than the software-based solution in the related art, ensuring durability and reliability, and can remotely lock the device or erase data, and protect data security even if the operating system is reinstalled or the hard disk is replaced. And the stored sensitive data is encrypted at the hard disk level, so that even if the device is stolen, it is difficult to steal and access the information therein. The information protection scheme of the embodiment of the present application can take effect when the lost device is started, does not depend on the operating status of the operating system, and provides more reliable security protection.

[0059] The process algorithm abstraction process involved in steps S101 to S104 is as follows:

[0060] 1.UEFI instruction driven algorithm:

[0061] 1) Apply for memory for the AT command driver and save the driver context to ensure that the context information is processed correctly when the driver is initialized:

[0062] T={f1,f2,f3, …} Formula (1)

[0063] Among them, f1, f2, f3, ... are context structures, and T is a structure set.

[0064] 2) Load the USB I / O (Input / Output) protocol, obtain the USB handle, and confirm whether it is the target WWAN device:

[0065] R = Z(h) Formula (2)

[0066] Where h is the handle of the polled USB device, R is the returned result, and Z is a conditional function.

[0067] 3) WWAN card communication data transmission, reading information from WWAN / SIM / eSIM:

[0068] S(h, d, r) Formula (3)

[0069] Where h represents the handle, d represents the input data, r represents the output data, and S is a data transmission function.

[0070] 4) Algorithm steps: If the condition Z(h) is true, indicating that the currently polled USB device is the target WWAN device, then execute the communication S(h, d, r) to obtain the SMS information in the WWAN data. If it is not the target WWAN device, continue polling until the polling ends:

[0071]

[0072] Where a is the action of polling the USB, used for defect verification in step 4 below, and h is the USB handle of the current USB device.

[0073] 2. SMS data encryption and decryption algorithm:

[0074] Select two large prime numbers p and q. Calculate n = p * q (Formula 5) and calculate the Euler's totient function φ(n) = (p - 1)(q - 1) (Formula 6). Determine a public key exponent e that satisfies 1 < e < φ(n) and e is relatively prime to φ(n). Calculate the modular inverse d of e with respect to φ(n) such that (e × d) mod φ(n) = 1 (Formula 7). The process of SMS encryption is shown in Formula (8), and the formula for SMS decryption is shown in Formula (9):

[0075] C = M^e mod n Formula (8)

[0076] M = C^d mod n Formula (9)

[0077] Where M is the actual SMS content and C is the encrypted SMS content.

[0078] 3. Callback SMS service

[0079] 1) Map the SMS set X to the instruction processing set Y. That is, given an SMS x ∈ X in a SIM card, the function f will generate an operation y ∈ Y for processing the instruction:

[0080] f: X → Y Formula (10)

[0081] 2) Based on algorithm A, analyze whether the SMS is from the lost device. It receives two parameters: P and callback function f. Algorithm A will use callback function f to process the input SMS set P and return the result Q of whether it is from the lost device:

[0082] Q=A(P,f) Formula (11)

[0083] 3) Perform the following steps for each SMS element x in the data set P in the SIM / eSMI or WWAN card:

[0084] r=Process(x) Formula (12)

[0085] Parse the SMS x to see if it is a message from the lost device and return the result r.

[0086] Checks whether the condition Condition(r) is true. If the condition is true, calls the callback function f(r) 。 Continue with the next SMS element x.

[0087] 4. Defect detection

[0088] Perform defect checks on polled USB devices to ensure there are no abnormalities:

[0089]

[0090] Where a is the polling action in step 1(4). If the USB device defect detection D f (a ) Returns true; otherwise, throws an exception.

[0091] In the scheme shown in steps S101 to S104, a lost SMS instruction for a lost device is received from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device; when the lost device is in a running state, the lost device is adjusted to a BIOS restart state; in response to the BIOS restart state of the lost device, an information protection instruction for the lost device is obtained based on the lost SMS instruction; and information of the lost device is protected based on the information protection instruction of the lost device. It is possible to achieve safe and efficient protection of lost device information without relying on an operating system.

[0092] In an optional solution, obtaining the information protection instruction for the lost device based on the lost SMS instruction includes:

[0093] The lost SMS instruction is parsed to obtain an information protection instruction for the lost device; the information protection instruction includes at least one of a hard disk encryption instruction, a hard disk erasing instruction, a device positioning instruction, and a device alarm instruction.

[0094] In this application, the lost SMS instruction is parsed to obtain the SMS content, that is, the information protection instruction for the lost device. Among them, the information protection instruction includes hard disk encryption, hard disk erasure, device location or device alarm. The information protection instruction is used to perform corresponding protection operations on the lost device to ensure the information security of the lost device.

[0095] In an optional solution, when the information protection instruction includes a hard disk encryption instruction,

[0096] The protecting the information of the lost device based on the information protection instruction of the lost device includes:

[0097] Generate an encrypted password for a lost device;

[0098] Based on the encryption password, the hard disk of the lost device is encrypted.

[0099] In the present application, when the information protection instruction (hereinafter referred to as AT instruction) includes a hard disk encryption instruction, an encryption password for the lost device is automatically generated and the hard disk of the lost device is encrypted to ensure that the hard disk information of the lost device cannot be accessed at will.

[0100] In an optional solution, after encrypting the hard disk of the lost device, the method further includes:

[0101] Sending the encrypted password to the mobile device and generating a password verification interface;

[0102] Based on the password verification interface, obtaining a verification password;

[0103] When the verification password is empty, or the verification password is inconsistent with the encryption password, the lost device is adjusted to a shutdown state.

[0104] In this application, reference Figure 2 As shown, after encrypting the hard disk of the lost device to ensure that others cannot normally access the hard disk data of the device, the password used to encrypt the hard disk of the lost device must be sent to the mobile phone of the original user, so that only the original user can access the lost device. In addition, a password verification interface is generated on the lost device. If the verification password entered by the user before the lost device is inconsistent with the encryption password or is empty within a preset time (such as 10 seconds), it is considered that the user who wants to access the device at this time is not the original user, and the lost device automatically shuts down. The information security of the lost device is further guaranteed.

[0105] In an optional solution, when the information protection instruction includes a device location instruction,

[0106] The protecting the information of the lost device based on the information protection instruction of the lost device includes:

[0107] The global positioning system GPS information of the lost device is obtained through the WWAN card, and the GPS information is sent to the mobile device.

[0108] In this application, reference Figure 2 As shown, when the information protection instruction (AT instruction) includes a device positioning instruction, the GPS (Global Positioning System) information of the lost device is obtained through the WWAN card of the lost device, and the GPS information is sent to the original user's mobile phone to facilitate the original user to retrieve the device or alarm tracking. The AT instructions involved include:

[0109] (a) Read the information stored in WWAN and SIM card (AT+CMGL="ALL", +CMGL:1,"STO UNSENT", "",,, +CMGL:1,"STO UNSENT", "",,,)

[0110] (b) Turn on GNSS (AT+QGPS=1)

[0111] (c) Read the current location information (AT+QGPSLOC=0) or (NMEA sentence, AT+QGPSGNMEA=”GGA”)

[0112] (d) Turn off GNSS (AT+QGPSEND)

[0113] (e) Set the SMS format to text mode (AT+CMGF=1)

[0114] (f) Set the character set to GSM used by TE (AT+CSCS="GSM")

[0115] (g) Send a message to the original user (AT+CMGW="1865606XXXX")

[0116] (h) Restore the SMS format and set it to PDU mode (AT+CMGF=0, AT+CMGW=18)

[0117] The command statements involved in the above instructions are all AT commands commonly used in this field. For the meaning of the specific fields in the statements, please refer to the relevant instructions, and this application will not go into details.

[0118] In an optional solution, when the information protection instruction includes a hard disk erasing instruction,

[0119] The protecting the information of the lost device based on the information protection instruction of the lost device includes:

[0120] Based on the hard disk erasing instruction, erase information on the hard disk of the lost device and generate erasure completion information;

[0121] Sending erasure completion information to the mobile device.

[0122] In this application, reference Figure 2 As shown, when the information protection instruction includes a hard disk erasing instruction, the hard disk of the lost device is erased, and the erasure completion information is sent to the original user's mobile phone to ensure that the original user knows that the hard disk contents have been erased, avoiding information leakage or theft caused by the hard disk contents not being completely erased.

[0123] The embodiment of the present application also provides an information protection device for a lost device, wherein the device includes a basic input and output system BIOS and a wireless wide area network WWAN card; Figure 4 As shown, the device comprises:

[0124] The first receiving unit 401 is used to receive a lost SMS instruction for a lost device from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device;

[0125] The first adjustment unit 402 is used to obtain the device state of the lost device, and when the device state of the lost device is a running state, adjust the lost device to a BIOS restart state;

[0126] A first acquisition unit 403 is configured to obtain an information protection instruction for the lost device based on the lost SMS instruction in response to the BIOS restart state of the lost device;

[0127] The information protection unit 404 is used to protect the information of the lost device based on the information protection instruction of the lost device.

[0128] In an optional solution, the first acquisition unit 403 is used to parse the lost SMS instruction to obtain an information protection instruction for the lost device; the information protection instruction includes at least one of a hard disk encryption instruction, a hard disk erasing instruction, a device positioning instruction and a device alarm instruction.

[0129] In an optional solution, when the information protection instruction includes a hard disk encryption instruction,

[0130] The information protection unit 404 is used to generate an encryption password for the lost device; and encrypt the hard disk of the lost device based on the encryption password.

[0131] In an optional solution, the information protection unit 404 is used to send the encrypted password to the mobile device and generate a password verification interface; obtain the verification password based on the password verification interface; when the verification password is empty or the verification password is inconsistent with the encryption password, adjust the lost device to a shutdown state.

[0132] In an optional solution, when the information protection instruction includes a device location instruction,

[0133] The information protection unit 404 is used to obtain the global positioning system GPS information of the lost device through the WWAN card, and send the GPS information to the mobile device.

[0134] In an optional solution, when the information protection instruction includes a hard disk erasing instruction,

[0135] The information protection unit 404 is used to erase the information on the hard disk of the lost device based on the hard disk erasure instruction, generate erasure completion information, and send the erasure completion information to the mobile device.

[0136] It should be noted that the information protection device for a lost device in the embodiment of the present application solves the problem on a principle similar to the aforementioned information protection method for a lost device. Therefore, the implementation process, implementation principle, and beneficial effects of the information protection device for a lost device can all be referred to the description of the implementation process, implementation principle, and beneficial effects of the aforementioned method, and the repeated parts will not be repeated here.

[0137] According to an embodiment of the present application, the present application also provides an electronic device and a readable storage medium.

[0138] Figure 5 A schematic block diagram of an example electronic device 500 that can be used to implement an embodiment of the present application is shown. The electronic device is intended to represent various forms of digital computers, such as laptop computers, desktop computers, workbenches, personal digital assistants, servers, blade servers, mainframe computers, and other suitable computers. The electronic device can also represent various forms of mobile devices, such as personal digital processing, cellular phones, smart phones, wearable devices, and other similar computing devices. The components shown herein, their connections and relationships, and their functions are merely examples and are not intended to limit the implementation of the present application described and / or required herein.

[0139] like Figure 5As shown, the electronic device 500 includes a computing unit 501, which can perform various appropriate actions and processes according to a computer program stored in a read-only memory (ROM) 502 or a computer program loaded from a storage unit 508 into a random access memory (RAM) 503. In the RAM 503, various programs and data required for the operation of the electronic device 500 can also be stored. The computing unit 501, the ROM 502, and the RAM 503 are connected to each other via a bus 504. An input / output (I / O) interface 505 is also connected to the bus 504.

[0140] Multiple components in the electronic device 500 are connected to the I / O interface 505, including: an input unit 506, such as a keyboard, a mouse, etc.; an output unit 507, such as various types of displays, speakers, etc.; a storage unit 508, such as a disk, an optical disk, etc.; and a communication unit 509, such as a network card, a modem, a wireless communication transceiver, etc. The communication unit 509 allows the electronic device 500 to exchange information / data with other devices through a computer network such as the Internet and / or various telecommunication networks.

[0141] The computing unit 501 may be a variety of general and / or special processing components with processing and computing capabilities. Some examples of the computing unit 501 include, but are not limited to, a central processing unit (CPU), a graphics processing unit (GPU), various dedicated artificial intelligence (AI) computing chips, various computing units running machine learning model algorithms, digital signal processors (DSPs), and any appropriate processors, controllers, microcontrollers, etc. The computing unit 501 performs the various methods and processes described above, such as the information protection method for a lost device. For example, in some embodiments, the information protection method for a lost device may be implemented as a computer software program, which is tangibly contained in a machine-readable medium, such as a storage unit 508. In some embodiments, part or all of the computer program may be loaded and / or installed on the electronic device 500 via the ROM 502 and / or the communication unit 509. When the computer program is loaded into the RAM 503 and executed by the computing unit 501, one or more steps of the information protection method for the lost device described above may be performed. Alternatively, in other embodiments, the computing unit 501 may be configured to perform the information protection method for a lost device in any other appropriate manner (e.g., by means of firmware).

[0142] Various implementations of the systems and techniques described above herein can be implemented in digital electronic circuit systems, integrated circuit systems, field programmable gate arrays (FPGAs), application specific integrated circuits (ASICs), application specific standard products (ASSPs), systems on chips (SOCs), complex programmable logic devices (CPLDs), computer hardware, firmware, software, and / or combinations thereof. These various implementations can include: being implemented in one or more computer programs that can be executed and / or interpreted on a programmable system including at least one programmable processor, which can be a special purpose or general purpose programmable processor that can receive data and instructions from a storage system, at least one input device, and at least one output device, and transmit data and instructions to the storage system, the at least one input device, and the at least one output device.

[0143] The program code for implementing the method of the present application can be written in any combination of one or more programming languages. These program codes can be provided to a processor or controller of a general-purpose computer, a special-purpose computer, or other programmable data processing device, so that the program code, when executed by the processor or controller, implements the functions / operations specified in the flow chart and / or block diagram. The program code can be executed entirely on the machine, partially on the machine, partially on the machine and partially on a remote machine as a stand-alone software package, or entirely on a remote machine or server.

[0144] In the context of the present application, a machine-readable medium may be a tangible medium that may contain or store a program for use by or in conjunction with an instruction execution system, device, or equipment. A machine-readable medium may be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium may include, but is not limited to, an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, device, or equipment, or any suitable combination of the foregoing. A more specific example of a machine-readable storage medium may include an electrical connection based on one or more lines, a portable computer disk, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or flash memory), an optical fiber, a portable compact disk read-only memory (CD-ROM), an optical storage device, a magnetic storage device, or any suitable combination of the foregoing.

[0145] To provide interaction with a user, the systems and techniques described herein can be implemented on a computer having: a display device (e.g., a CRT (cathode ray tube) or LCD (liquid crystal display) monitor) for displaying information to the user; and a keyboard and pointing device (e.g., a mouse or trackball) through which the user can provide input to the computer. Other types of devices can also be used to provide interaction with the user; for example, the feedback provided to the user can be any form of sensory feedback (e.g., visual feedback, auditory feedback, or tactile feedback); and input from the user can be received in any form (including acoustic input, voice input, or tactile input).

[0146] The systems and techniques described herein may be implemented in a computing system that includes back-end components (e.g., as a data server), or a computing system that includes middleware components (e.g., an application server), or a computing system that includes front-end components (e.g., a user computer with a graphical user interface or a web browser through which a user can interact with implementations of the systems and techniques described herein), or a computing system that includes any combination of such back-end components, middleware components, or front-end components. The components of the system may be interconnected by any form or medium of digital data communication (e.g., a communication network). Examples of communication networks include: a local area network (LAN), a wide area network (WAN), and the Internet.

[0147] A computer system may include a client and a server. The client and the server are generally remote from each other and usually interact through a communication network. The relationship of client and server is generated by computer programs running on respective computers and having a client-server relationship with each other. The server may be a cloud server, a server of a distributed system, or a server combined with a blockchain.

[0148] It should be understood that the various forms of processes shown above can be used to reorder, add or delete steps. For example, the steps recorded in this application can be executed in parallel, sequentially or in different orders, as long as the expected results of the technical solution disclosed in this application can be achieved, and this document is not limited here.

[0149] In addition, the terms "first" and "second" are used for descriptive purposes only and should not be understood as indicating or implying relative importance or implicitly indicating the number of technical features indicated. Therefore, a feature defined as "first" or "second" may explicitly or implicitly include at least one of the features. In the description of this application, the meaning of "plurality" is two or more, unless otherwise clearly and specifically defined.

[0150] The above is only a specific implementation of the present application, but the protection scope of the present application is not limited thereto. Any person skilled in the art who is familiar with the present technical field can easily think of changes or substitutions within the technical scope disclosed in the present application, which should be included in the protection scope of the present application. Therefore, the protection scope of the present application should be based on the protection scope of the claims.

Claims

1. A method for protecting information of a lost device, characterized in that: The device includes a basic input and output system BIOS and a wireless wide area network WWAN card; the method includes: Receiving a lost SMS instruction for a lost device from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device; Acquire the device status of the lost device, and if the device status of the lost device is a running status, adjust the lost device to a BIOS restart status; In response to the BIOS restart state of the lost device, based on the lost SMS instruction, obtaining an information protection instruction for the lost device; Based on the information protection instruction of the lost device, the information of the lost device is protected.

2. The method according to claim 1, characterized in that The obtaining, based on the lost SMS instruction, an information protection instruction for the lost device includes: The lost SMS instruction is parsed to obtain an information protection instruction for the lost device; the information protection instruction includes at least one of a hard disk encryption instruction, a hard disk erasing instruction, a device positioning instruction, and a device alarm instruction.

3. The method according to claim 2, characterized in that When the information protection instruction includes a hard disk encryption instruction, The protecting the information of the lost device based on the information protection instruction of the lost device includes: Generate an encrypted password for a lost device; Based on the encryption password, the hard disk of the lost device is encrypted.

4. The method according to claim 3, characterized in that After encrypting the hard disk of the lost device, the method further includes: Sending the encrypted password to the mobile device and generating a password verification interface; Based on the password verification interface, obtaining a verification password; When the verification password is empty, or the verification password is inconsistent with the encryption password, the lost device is adjusted to a shutdown state.

5. The method according to claim 2, characterized in that: When the information protection instruction includes a device location instruction, The protecting the information of the lost device based on the information protection instruction of the lost device includes: The global positioning system GPS information of the lost device is obtained through the WWAN card, and the GPS information is sent to the mobile device.

6. The method according to claim 2, characterized in that When the information protection instruction includes a hard disk erasing instruction, The protecting the information of the lost device based on the information protection instruction of the lost device includes: Based on the hard disk erasing instruction, erasing information on the hard disk of the lost device, and generating erasing completion information; Sending erasure completion information to the mobile device.

7. An information protection device for a lost device, characterized in that: The device includes a basic input and output system BIOS and a wireless wide area network WWAN card; the apparatus includes: A first receiving unit, configured to receive a lost SMS instruction for a lost device from a mobile device through a WWAN card; wherein the mobile device is a device that communicates with the lost device; A first adjustment unit is used to obtain the device state of the lost device, and when the device state of the lost device is a running state, adjust the lost device to a BIOS restart state; A first acquisition unit, configured to obtain, in response to a BIOS restart state of the lost device and based on the lost SMS instruction, an information protection instruction for the lost device; The information protection unit is used to protect the information of the lost device based on the information protection instruction of the lost device.

8. The device according to claim 7, characterized in that The first acquisition unit is used to parse the lost SMS instruction to obtain an information protection instruction for the lost device; the information protection instruction includes at least one of a hard disk encryption instruction, a hard disk erasing instruction, a device positioning instruction and a device alarm instruction.

9. An electronic device, characterized in that: include: at least one processor; as well as a memory communicatively connected to the at least one processor; wherein, The memory stores instructions that can be executed by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the method according to any one of claims 1 to 6.

10. A non-transitory computer-readable storage medium storing computer instructions, characterized in that: The computer instructions are used to make a computer execute the method according to any one of claims 1-6.

Images