Control method of electronic equipment and electronic equipment

Abstract

The embodiment of the invention is suitable for the technical field of terminals, and provides a control method of electronic equipment and the electronic equipment. By applying the method, the trusted execution environment module in the electronic equipment can send the power-off instruction to the driving module when receiving the information of the occurrence of the target event, so as to drive and disconnect the control switch of the target module, thereby realizing the power-off of the target module. The control switch and the driving module of the target module can be configured or installed in the trusted execution environment module. Thus, the process of receiving the power-off instruction by the driving module and driving to disconnect the control switch of the target module can be completed in the trusted execution environment module, and the safety of the processing process is improved. Besides, disconnection of the control switch of the target module to power-off of the target module belongs to control of a physical level, compared with stopping of use of the target module in a software instruction form, the safety of the control process is greatly improved, and the possibility of user privacy disclosure is further reduced.

Description

Technical Field

[0001] Embodiments of the present application relate to the technical field of terminals, and in particular, to a control method for an electronic device and an electronic device. Background Art

[0002] The development of information technology and mobile communication technology has brought many conveniences to people's lives. People can use electronic devices such as mobile phones to conveniently complete operations such as shopping, hailing a taxi, and paying bills. During the use of electronic devices, the information mastered by the electronic devices is also increasing. Once this information is leaked, it may have an adverse impact on the user's daily life.

[0003] In the prior art, in order to prevent the information in the electronic device from leaking, some electronic devices can be set to disable the functions of individual modules or devices in the privacy mode. For example, in the privacy mode of the electronic device, after the screen of the electronic device is turned off, the camera can be disabled. In this way, the electronic device in the screen-off state cannot collect images or shoot videos through the camera, reducing the possibility of information leakage and protecting the user's privacy. The above privacy protection in the prior art is mainly achieved through software control. The electronic device issues a disable instruction to an individual module or device in the form of a software instruction to turn off the operation of these modules or devices. However, in some cases, these modules or devices that have stopped running may still be enabled, making it difficult to strictly protect the user's privacy. For example, if the electronic device is invaded by a malicious program, in the screen-off state, the malicious program may illegally call the camera to collect images without the user's knowledge, resulting in the leakage of the user's privacy. Summary of the Invention

[0004] A control method for an electronic device and an electronic device provided by embodiments of the present application can improve the control of the privacy mode from a software framework to power-on and power-off of hardware devices, achieving more strict and accurate privacy protection.

[0005] To achieve the above object, the present application adopts the following technical solutions:

[0006] In a first aspect, a control method for an electronic device is provided, including: monitoring a target event through a trusted execution environment module of the electronic device; when receiving information that the target event occurs, sending a power-off instruction to a driver module, where the power-off instruction is used to drive a target module to power off. The driver module is deployed in the trusted execution environment module, and a control switch of the target module is configured in the trusted execution environment module.

[0007] By applying the control method of the electronic device provided in the embodiments of the present application, a trusted execution environment (TEE) module can be built in the electronic device, and the processing of sensitive data in the electronic device can be implemented by the TEE module, so as to realize the privacy calculation and protection of sensitive data. When the TEE module receives the information that a target event occurs, the TEE module can send a power-down instruction to the driver module, and the driver module drives the target module in the electronic device to power down. In the embodiments of the present application, by deploying the driver module in the TEE module, the data processing of the driver module can be completed in the trusted execution environment, improving the security of data processing. By configuring the control switch of the target module in the TEE module, the control switch belongs to a hardware control switch. When the driver module in the TEE module drives to disconnect the control switch of the target module, each target module can be powered down, realizing the on / off at the physical level of each target module, and any software-level operation cannot control the operation of each target module, which not only realizes hardware-level control but also improves the security of the control process.

[0008] It should be understood that the target event can be some events that occur on the electronic device. When such events occur, if the operation of the target module is not properly controlled, it may have an adverse impact on user privacy due to the continuous operation of the target module. Exemplarily, if the electronic device is a folding screen device, after the folding screen device is folded, if modules such as the camera and microphone are allowed to continue operating, the camera, microphone, etc. may collect the user's privacy data without the user's knowledge, increasing the risk of user privacy leakage. Therefore, when the target event occurs, these target modules can be powered down physically through the driver module, which can reduce the risk of user privacy leakage.

[0009] In a possible implementation manner of the embodiments of the present application, the target module may include at least one of the following modules in the electronic device: a camera module, a microphone module, a positioning module, a near-field communication module, or a sensor hub.

[0010] In another possible implementation manner of the embodiments of the present application, the number of target modules is multiple, and the control switches of the multiple target modules are all integrated in the same port in the TEE module. In this way, the received power-down instruction of the driver module can be used to drive and disconnect the control switches of the multiple target modules at the same time, so that the multiple target modules are powered down at the same time, ensuring timing consistency.

[0011] In a possible implementation manner of the embodiment of the present application, when receiving the information that a target event has occurred, a power-down instruction is sent to the drive module, including: when receiving the information that a target event has occurred, the information that the target event has occurred is broadcast to the target module through the privacy mode CA, and this information can be used to instruct the target module to prepare for power-down, that is, to protect the on-site situation before power-down; when receiving the information that the target module has completed the power-down preparation feedback through the privacy mode CA, it means that the on-site protection of each target module is completed. At this time, the TEE module can send a power-down instruction to the drive module. In this way, when the TEE module receives the information that a target event has occurred, it can timely notify the target module to prepare for power-down through the privacy mode TA, avoiding suddenly powering down the target module, which helps to ensure the normal operation of other modules and the system.

[0012] The information that the target module has completed the power-down preparation can be fed back to the TEE module by the target module through the privacy mode CA, that is, after each target module has completed the power-down preparation, the privacy mode CA can send the information that each target module has completed the power-down preparation to the TEE module. If the TEE module does not receive the information that the target module has completed the power-down preparation feedback through the privacy mode CA, the TEE module can directly send a power-down instruction to the drive module at a preset moment after the target event occurs. The above preset moment can be a certain time point after the TEE module receives the information that the target event has occurred, or a certain time point after the privacy mode CA broadcasts the target event to the target module. Exemplarily, after the target event occurs, the privacy mode CA will broadcast the information that the target event has occurred to the target module. If the TEE module does not receive the information that each target module has completed the power-down preparation feedback by the privacy mode CA within x seconds after the privacy mode CA broadcasts this information, the TEE module can directly notify the drive module to power it down through the privacy mode TA, and the value of the above x can be determined according to actual needs.

[0013] It should be understood that the power-down preparation may include at least one of the following processes: terminating the service currently executed by the target module and storing the key data of the service; or decoupling the target module from other modules; or decoupling each module inside the target module. Through the above processes, the problem of data loss caused by suddenly powering down the target module can be avoided, and the problem that other modules associated with the target module cannot operate normally after the target module is powered down can also be prevented; by decoupling each module inside the target module, each module inside the target module can be protected, and the probability that the target module cannot be started after being powered on again can be reduced.

[0014] In a possible implementation of the embodiment of the present application, when the TEE module receives information indicating that a target event has occurred, the TEE module can verify the authenticity of the target event. After the target event passes the verification, the TEE module sends a power-off instruction to the driver module. Specifically, when the TEE module receives information indicating that a target event has occurred, the TEE module obtains the key carried in the information indicating the target event; verifies the target event based on the key; when the target event passes the verification, the TEE module sends a power-off instruction to the driver module. Among them, the above information indicating that a target event has occurred can be sent from the privacy mode CA to the TEE module. The TEE module sending a power-off instruction to the driver module can be implemented through the privacy mode TA, that is, after the target event passes the verification, the privacy mode TA in the TEE module sends a power-off instruction to the driver module.

[0015] It should be understood that other applications or programs in the electronic device may access the driver module. The above information indicating the target event may refer to the information transmitted by other applications or programs during the access process. The TEE module can verify the authenticity of the target event by obtaining the key carried in this information. The above information is sent from the privacy mode CA to the TEE module.

[0016] In a possible implementation of the embodiment of the present application, the key carried in the information transmitted by other applications or programs may include at least one of a Universally Unique Identifier (UUID), a permission group key, or a scenario ID. When the TEE module verifies the target event based on the key, it can match the key with the key in the currently configured privacy mode; if the key matches successfully with the corresponding key in the currently configured privacy mode, it can be determined that the target event passes the verification; otherwise, it is determined that the target event fails the verification. In one example, if the target event is that the folding screen device changes from the unfolded state to the folded state, the target event passing the verification can indicate that the folding screen device has truly undergone a folding event, and the target module needs to be powered off to ensure the user's privacy and security. Therefore, the TEE module can send a power-off instruction to the driver module after the target event passes the verification.

[0017] In a possible implementation of the embodiment of the present application, the electronic device may be a folding screen device, and the target event may be an event that the folding screen device changes from the unfolded state to the folded state. Therefore, the TEE module of the electronic device receiving information indicating that a target event has occurred may refer to the TEE module in the folding screen device receiving the opening and closing signal of the folding screen device sent by the privacy mode CA. The above opening and closing signal is a signal used to represent that the folding screen device changes from the unfolded state to the folded state, and this opening and closing signal belongs to a software signal.

[0018] In another possible implementation of the embodiment of the present application, after receiving the opening and closing signal of the folding screen device sent by the privacy mode CA in the TEE module of the folding screen device, the bending hardware signal of the folding screen device can also be actively obtained through driving. The above-mentioned bending hardware signal can be a hardware signal indicating that the folding screen device is converted from the unfolded state to the folded state. In this way, if the opening and closing signal is consistent with the bending hardware signal, it can be determined that the target event has occurred, and subsequent processing can be executed; otherwise, it can be considered that the target event has not occurred.

[0019] In a second aspect, an electronic device is provided. The electronic device is configured with a TEE module and a driving module. Among them, the driving module is deployed in the TEE module, and a control switch of the target module is also configured in the TEE module; when the TEE module receives the information that the target event has occurred, the TEE module can send a power-down instruction to the driving module, and the power-down instruction is used to drive the target module to power down.

[0020] In a possible implementation of the second aspect, the number of target modules in the electronic device can include multiple, and the control switches of the multiple target modules can be integrated into the same port in the TEE module. In this way, the power-down instruction received by the driving module can be used to simultaneously drive and disconnect the control switches of multiple target modules, so that multiple target modules are powered down simultaneously, ensuring the consistency of timing.

[0021] In another possible implementation of the second aspect, the information that the target event has occurred received by the TEE module in the electronic device can be sent by the privacy mode CA to the TEE module. When the target event occurs, the privacy mode CA can monitor the occurrence of the target event and send relevant information to the TEE module. On the other hand, the privacy mode CA can broadcast the information that the target event has occurred to the target module to notify the target template to perform power-down preparation processing. After the target module completes the power-down preparation, it can feedback a message indicating that the power-down preparation is completed to the TEE module. The feedback of the message indicating that the power-down preparation is completed from the target module to the TEE module can also be implemented by the privacy mode CA, that is, after the target module completes the power-down preparation, it feedbacks a message to the privacy mode CA, and then the privacy mode CA feedbacks the messages that each target module has completed the power-down preparation to the TEE module. After all target modules have completed the power-down preparation, the TEE module can send a power-down instruction to the driving module through the privacy mode TA.

[0022] In a third aspect, an electronic device is provided. The electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. Among them, when the processor executes the computer program, it can implement the control method of the electronic device as described in any item of the first aspect above.

[0023] Fourthly, a computer-readable storage medium is provided. The computer-readable storage medium includes a memory and a processor. Wherein, when the processor executes the computer program stored in the memory, the control method of the electronic device as described in any item of the first aspect above can be implemented.

[0024] Fifthly, a chip is provided. The chip includes a memory and a processor. Wherein, when the processor executes the computer program stored in the memory, the control method of the electronic device as described in any item of the first aspect above can be implemented.

[0025] It can be understood that for the beneficial effects of the second aspect to the fifth aspect above, reference can be made to the relevant descriptions in the first aspect above, and details are not described herein again. Description of the Drawings

[0026] Figure 1 It is a schematic diagram of the differences between the control method of the electronic device provided by the embodiment of the present application and the related method in the prior art;

[0027] Figure 2 It is a schematic diagram of the architecture of the system to which the control method of the electronic device provided by the embodiment of the present application is applicable;

[0028] Figure 3 It is a schematic diagram of the control method of the electronic device provided by the embodiment of the present application;

[0029] Figure 4 It is a schematic diagram of the interface operation for enabling privacy protection provided by the embodiment of the present application;

[0030] Figure 5 It is a schematic diagram of the interface operation for disabling privacy protection provided by the embodiment of the present application;

[0031] Figure 6 It is a schematic diagram of the control logic of a target module provided by the embodiment of the present application;

[0032] Figure 7 It is a schematic diagram of controlling the power-off of the GPS module provided by the embodiment of the present application;

[0033] Figure 8 It is a schematic diagram of an authority verification process provided by the embodiment of the present application;

[0034] Figure 9 It is a schematic diagram of the process of the control method of the electronic device provided by the embodiment of the present application;

[0035] Figure 10 It is a schematic diagram of the steps of the control method of the electronic device provided by the embodiment of the present application;

[0036] Figure 11It is a structural block diagram of an electronic device provided by an embodiment of the present application. Detailed implementation manners

[0037] For the convenience of clearly describing the technical solutions of the embodiments of the present application, in the embodiments of the present application, terms such as "first" and "second" are used to distinguish identical or similar items with basically the same functions and roles. For example, the first module, the second module, etc. are only used to distinguish different modules in the electronic device, and no other limitations are imposed on them.

[0038] It should be noted that in the embodiments of the present application, words such as "exemplarily" or "for example" are used to represent examples, illustrations or explanations. Any embodiment or design solution described as "exemplarily" or "for example" in the embodiments of the present application should not be construed as being more preferred or having more advantages than other embodiments or design solutions. Exactly speaking, using words such as "exemplarily" or "for example" is intended to present relevant concepts in a specific manner.

[0039] The business scenarios described in the embodiments of the present application are for more clearly explaining the technical solutions of the embodiments of the present application, and do not constitute a limitation on the technical solutions provided by the embodiments of the present application. Those of ordinary skill in the art know that with the emergence of new business scenarios, the technical solutions provided by the embodiments of the present application are equally applicable to similar technical problems.

[0040] In the embodiments of the present application, "at least one" means one or more, and "a plurality" means two or more. "And / or" describes the association relationship of associated objects, indicating that three relationships can exist. For example, A and / or B can represent: A exists alone, A and B exist simultaneously, and B exists alone, where A and B can be singular or plural. The character " / " generally represents an "or" relationship between the associated objects before and after. "At least one (item)" or its similar expression refers to any combination of these items, including any combination of single item (item) or plural items (items). For example, at least one (item) of a, b, or c can represent: a, b, c, a - b, a - c, b - c, or a - b - c, where a, b, c can be single or multiple.

[0041] The steps involved in the control method of an electronic device provided by the embodiments of the present application are only examples, not all steps are steps that must be executed, or not all the contents in each step are mandatory. During use, it can be increased or decreased as needed. In the embodiments of the present application, the same step or steps with the same function or content can be referred to and learned from each other between different embodiments.

[0042] Generally, an electronic device can prevent the disclosure of a user's privacy by disabling the functions of individual modules or devices. Exemplarily, when the electronic device is in the screen-off state, the electronic device can disable the camera. In this way, the disabled camera cannot operate normally, and it can prevent the electronic device in the screen-off state from illegally collecting images without the user's knowledge. Or, after the foldable screen device is folded, the foldable screen device can disable the microphone to prevent the microphone from illegally collecting the user's voice without the user's knowledge. However, in the prior art, the disabling of each module of the electronic device is achieved in the form of software instructions. For example, after the electronic device is in the screen-off state, the processor of the electronic device can send an instruction to the camera to instruct the camera to stop operating or close the use of related functions. This disabling method is an on / off in the software sense, and its control over the related module is implemented based on the software framework of the electronic device. In some cases, such as when the operating system of the electronic device is illegally invaded, these disabled modules may still be illegally started. For example, in the screen-off state, after the electronic device instructs the camera to close the image acquisition function through software instructions, the software program that illegally invades the electronic device may restart the camera and continue to collect images in the screen-off state. In this way, without the user's knowledge, the camera is still operating normally, increasing the risk of user privacy leakage.

[0043] In view of the above problems, the embodiments of the present application provide a control method for an electronic device. By applying this method, the control of some modules of the electronic device can be implemented by hardware devices on the electronic device. As Figure 1 shown, it shows the difference between the control method of the electronic device provided by the embodiments of the present application and the related methods in the prior art. It can be seen from Figure 1 this that in the prior art, the disabling of related modules is implemented through a software framework, and the control of these related modules is implemented on the basis of the software framework, that is, the control point in the prior art is on the software framework. However, when implementing module disabling by applying the control method of the electronic device provided by the embodiments of the present application, it is implemented based on hardware devices, that is, the control point in this method is on the hardware devices. In this way, through the control of hardware devices, an on / off in the hardware sense can be achieved, achieving the purpose of "super" privacy protection. For example, in some cases where it is necessary to disable individual modules, the electronic device can directly control the power-off of related modules from the hardware side, disable various functions of related modules, achieve hardware-level isolation, and implement true module disabling, further protecting the user's privacy and security.

[0044] The control method of the electronic device provided by the embodiments of the present application can be applied to electronic devices. For example, mobile phones, tablet computers, wearable devices, and so on. Among them, the above-mentioned electronic device can also be a foldable screen device.

[0045] As Figure 2As shown in the figure, it is a schematic diagram of the architecture of a system to which the control method of an electronic device according to an embodiment of the present application is applicable. According to Figure 2 In the system architecture shown, a Trusted Execution Environment (TEE) can be included in the electronic device. The TEE is relative to the rich execution environment (REE). The REE is an open environment in the operating system. The system running in the REE is called Rich OS or REEOS, and the applications or programs running in the REE can be called Client Applications (CA). Due to the openness of the REE, the REE is vulnerable to attacks by malware or programs, resulting in insecure events such as theft of sensitive data, abuse of digital rights, and theft of mobile payments, affecting the security of the electronic device. Compared with the REE, the TEE can improve the security of the electronic device. The system running in the TEE can be called Trusted OS or TEEOS, and the applications or programs running in the TEE can be called Trusted Applications (TA). By applying the TEE, the hardware and software resources of the electronic device can be divided into a Secure World and a Normal World. Among them, the Secure World can be used to store important information of the electronic device, such as passwords, fingerprints, face information, etc. Therefore, as Figure 2 shown, the electronic device can include a TEE module, a driver module, and a target module. Among them, the TEE module, as the central system, is mainly responsible for the upload and download of information, user authentication, and information processing, etc. The driver module is deployed in the TEE module and is responsible for executing various signals sent by the TEE module, and performing power-on, power-off of relevant modules, and signal verification during data processing, etc. The target module can refer to a module that is disabled when privacy protection is required, such as a camera module, a microphone module, a positioning module, a Near Link module, etc. A control switch of the target module can be configured in the TEE module. During the process of powering off the target module, the driver module can drive to disconnect the control switch of the above target module based on the power-off instruction sent by the TEE module to achieve the power-off of the target module.

[0046] Based on Figure 2In the system architecture shown, when a target event occurs, the TEE module can receive a message indicating the occurrence of the target event sent by the privacy mode CA. Among them, the target event can refer to an event that triggers the power-off operation of the target module. Usually, when the target event occurs, it can mean that the user no longer needs to use the electronic device or the relevant target module in the electronic device. To protect the user's privacy, the operation of the target module needs to be terminated at this time. Exemplarily, the target event can be an event that the folding screen device is folded. When the folding screen device is folded, that is, when the folding screen device is converted from the unfolded state to the folded state, it can mean that the user no longer uses the folding screen device currently. At this time, the operation of some target modules can be stopped.

[0047] The message indicating the occurrence of the target event can be monitored by the privacy mode CA, and the privacy mode CA can notify the TEE module of the monitored message indicating the occurrence of the target event. At the same time, the privacy mode CA can notify the target module that a target event has occurred in the electronic device at this time, so that the target module can make preparations for power-off. In the embodiments of the present application, the preparation for power-off of the target module can refer to the on-site protection process of the target module, so as to ensure that other modules associated with the target module can continue to operate normally after the target module is powered off.

[0048] In a possible implementation manner of the embodiments of the present application, the on-site protection of the target module may include terminating the service currently executed by the target module and storing the key data of the service; or decoupling the target module from other modules; or decoupling each module inside the target module. By terminating the currently executed service and storing the key data of the service, the problem of data loss caused by the sudden power-off of the target module can be avoided; by decoupling the target module from other modules, the problem that other modules associated with the target module cannot operate normally after the target module is powered off can be prevented; by decoupling each module inside the target module, each module inside the target module can be protected, and the probability that the target module cannot be started after being powered on again can be reduced.

[0049] After the target module completes the on-site protection, the target module can feedback a message to the TEE module via the privacy mode CA, and the privacy mode CA will inform the TEE module of the information that the target module has completed the power-off preparation work. At this time, the privacy mode TA in the TEE module can notify the driver module to power off the target module. The powered-off target module will be unavailable, and the electronic device enters the privacy mode. In the privacy mode, the disabled electronic device cannot be restarted. Since the target module has been physically powered off, any software-level operation cannot control the target module. Therefore, even if the electronic device is invaded by an illegal application or an illegal program, the illegal application or the illegal program cannot start the disabled target module in the privacy mode. In this way, the user's privacy can be fully protected, and the target module can be prevented from being illegally started without the user's knowledge.

[0050] As Figure 3 shown, it is a schematic diagram of a control method for an electronic device provided by an embodiment of the present application. Figure 3 Shown is a schematic flowchart of implementing the control method for the electronic device provided by the embodiment of the present application on a foldable screen device. Specifically, Figure 3 In the example shown, it is a process of applying this method to power off the camera, microphone, and global positioning system (GPS) module on a foldable screen device to achieve user privacy protection.

[0051] As Figure 3 shown, the foldable screen device can provide a setting interface, which may include multiple menu options. The user can operate in this interface to enable the privacy protection option. Exemplarily, the privacy protection option can be the "Folding Protection" option. After the "Folding Protection" option is enabled, it means that after the foldable screen device is folded, the device enters the privacy protection state. In this state, some modules of the foldable screen device will be disabled. Among them, the disabled modules can be sensitive modules in the foldable screen device, and these sensitive modules can be used to collect sensitive information or privacy information of the user. For example, collecting the user's image and sound information, positioning the user and the current location of the foldable screen device, etc. Exemplarily, as Figure 3 shown, the modules disabled in the privacy protection state may include the camera, microphone, and GPS module, etc.

[0052] In a possible implementation manner of the embodiment of the present application, when the user enables the privacy protection option through the setting interface, the foldable screen device can explain the privacy protection function through a pop-up window and introduce the "Folding Protection" function. After the foldable screen device receives the confirmation information from the user, the foldable screen device officially enters the privacy protection state.

[0053] In another possible implementation manner of the embodiment of the present application, when the user enables the privacy protection option on the foldable screen device, the user's identity can also be verified. Exemplarily, verifying the user's identity can be achieved by verifying the lock screen password and / or fingerprint of the foldable screen device. The data generated during the above identity verification process can be processed in the TEE module to ensure the security of the verification process.

[0054] When the foldable screen device is folded, an opening and closing signal will be generated, which can be used to indicate that the foldable screen device is converted from the unfolded state to the folded state. The above opening and closing signal can be generated by modifying the identification bit of the hardware signal when the folding event occurs. The opening and closing signal will be sent to the TEE module. After receiving the opening and closing signal, the TEE module will notify the target module to prepare for power off. That is, the TEE module notifies Figure 3Protect the site with the camera, microphone, and GPS module shown in the figure. By powering down the target module after a series of site protection operations are completed on the target module, the impact on the normal operation of other modules and the normal operation of the system caused by the sudden power-down of the target module can be reduced.

[0055] When the target module completes site protection, it means that the power-down preparation work of the target module has been completed. The message that the target module has completed power-down preparation can be transmitted to the TEE module through the privacy mode CA. At this time, the TEE module can notify the driver module of the completion of site protection, and the driver module can power down the target module.

[0056] In a possible implementation manner of the embodiment of the present application, when the number of target modules includes multiple, the message that each target module has completed site protection can be transmitted to the TEE module through the privacy mode CA, and the messages that each target module has completed site protection can be sent to the TEE module separately by the privacy mode CA. The TEE module can notify the driver module after receiving the message that any target module has completed site protection. At this time, the driver module can record the received message and be in a waiting state. When the driver module receives the messages that all target modules have completed site protection, the driver module can power down each module. Or, the TEE module can record the message and be in a waiting state after receiving the message that any target module has completed site protection sent by the privacy mode CA. When the TEE module receives the messages that all target modules have completed site protection, it then sends the messages to the driver module.

[0057] In another possible implementation manner of the embodiment of the present application, when the number of target modules includes multiple, if the TEE module has not received the message that a certain target module has completed site protection transmitted by the privacy mode CA for more than a certain period of time, the TEE module can directly send a message to the driver module, and the driver module can power down the target module. Exemplarily, when the privacy mode CA sends a notice for power-down preparation to the target module, if the TEE module has not received the message that the target module has completed site protection for more than x seconds, the TEE module can directly send a message to the privacy mode driver module, and the driver module can power down the target module. The value of the above x can be set according to actual needs, and the embodiment of the present application does not limit this.

[0058] After the target module is powered down, the folding screen device will enter the privacy mode. In the privacy mode, each target module cannot be started. Exemplarily, Figure 3 the camera, microphone, and GPS module in the figure will be in a powered-off state and cannot be enabled in the privacy mode.

[0059] In a possible implementation manner of the embodiment of the present application, in order to improve the fluency of the user using the folding screen device and improve the performance of the folding screen device itself, the control switches of multiple target modules can be integrated into the same port in the TEE module, and the above port can be a general purpose input / output port (GPIO). In this way, when the driving module powers off multiple target modules, it can be carried out simultaneously, ensuring the consistency of the timings of multiple target modules, and further improving the security performance of the folding screen device.

[0060] Next, with specific examples, the specific implementation process of the control method for the electronic device provided in the embodiment of the present application will be introduced. Similar to the examples in Figure 3 , in the subsequent examples, the electronic device will also continue to be taken as a folding screen device for illustration.

[0061] As Figure 4 shown, it is a schematic diagram of an interface operation for enabling privacy protection provided in the embodiment of the present application. The above privacy protection may refer to the "folding protection" of the folding screen device, that is, the privacy protection function realized by the folding screen device in the folded state. In Figure 4 (a), a schematic diagram of the setting page of the privacy mode is shown, and the privacy mode may be the "super privacy mode" in Figure 4 (a). The user can enter the above "super privacy mode" setting page through the setting page of the folding screen device. In this setting page, the introduction information 401 of the "super privacy mode" and the "folding protection" option 402 can be displayed. Among them, the introduction information 401 can be used to introduce the "super privacy mode". Exemplarily, as shown in Figure 4 (a), the introduction information 401 may be the following content: In the super privacy mode, applications are prohibited from accessing the camera, microphone, and location information. The user can operate on the "folding protection" option 402 to enable "folding protection". When the user selects to enable the "folding protection" option, the folding screen device can explain the specific protection content in the form of a pop-up window. As Figure 4As shown in (b) of [Figure 0], the protection instructions after enabling "Folding Protection" are displayed in the pop-up window 403, which are: "After folding, the connections of the camera, microphone, and GPS positioning hardware will be disconnected. In this mode, application functions such as phone calls, video chats, taking photos, navigation, and voice wake-up cannot be used normally and will resume after unfolding the device." In the pop-up window 403, the foldable screen device can provide two options, namely, the "Cancel" option 404 and the "Enable Folding Protection" option 405. After the user reads the protection instructions displayed in the above pop-up window 403, the user can choose to enable or cancel the folding protection. When the user selects the "Enable Folding Protection" option 405, the foldable screen device will officially enable the "Folding Protection" function. After the "Folding Protection" function is enabled, when the foldable screen device is folded, the device will officially enter the "Super Privacy Mode". In the super privacy mode, the foldable screen device will disconnect the connections of the camera, microphone, and GPS positioning hardware. Application functions such as phone calls, video chats, taking photos, navigation, and voice wake-up of the foldable screen device cannot be used normally.

[0062] In the embodiment of the present application, when the user enables the folding protection, the protection instructions are displayed to the user through a pop-up window, which can facilitate the user's comprehensive understanding of the function; moreover, through two confirmations, it can also prevent entering the privacy mode setting page due to accidental touch, facilitate the user to exit the page at any time, and help improve the user experience.

[0063] In a possible implementation manner of the embodiment of the present application, when the user operates the foldable screen device to exit the "Folding Protection", the foldable screen device can also perform multiple verifications to avoid exiting the "Folding Protection" due to non-user operations, enhancing the security performance of the foldable screen device.

[0064] As Figure 5 shown, it is a schematic diagram of the interface operation for closing the privacy protection provided by the embodiment of the present application. Among them, Figure 5 (a) of [Figure 13] shows a schematic diagram of the setting page of the super privacy mode after enabling the "Folding Protection". The introduction information 501 of the "Super Privacy Mode" is displayed on the setting page. In the setting page shown in (a) of [Figure 13], the "Folding Protection" option 502 is in the enabled state. The user can operate on this option 502 to disable the "Folding Protection". When the user disables the "Folding Protection", the foldable screen device can authenticate the user. In a possible implementation manner, when the user disables the "Folding Protection", the foldable screen device can first perform the first verification. For example, the fingerprint service is pulled up through a pop-up window to request the user to verify the fingerprint. For example, as Figure 5 shown in [Figure 15], (a) shows a schematic diagram of the setting page of the super privacy mode after enabling the "Folding Protection". The introduction information 501 of the "Super Privacy Mode" is displayed on the setting page. In the setting page shown in (a) of [Figure 15], the "Folding Protection" option 502 is in the enabled state. The user can operate on this option 502 to disable the "Folding Protection". When the user disables the "Folding Protection", the foldable screen device can authenticate the user. In a possible implementation manner, when the user disables the "Folding Protection", the foldable screen device can first perform the first verification. For example, the fingerprint service is pulled up through a pop-up window to request the user to verify the fingerprint. For example, as Figure 5As shown in (b) of [Figure 0], the folding screen device displays a pop-up window 503, requesting fingerprint verification of the user. The pop-up window 503 displays introduction information on how to perform fingerprint verification, and at the same time provides a "Cancel" option 504 and a "Use Password" option 505 for the user to exit the first verification or allow the user to use a password for the first verification. Assume that the user continues to use fingerprint for the first verification. After the user's fingerprint verification is successful, the folding screen device can perform a secondary verification. The secondary verification can be a verification method different from the first verification. For example, the secondary verification can be password verification. Exemplarily, after the user's first fingerprint verification passes, as Figure 5 shown in (c) of [Figure 0], the folding screen device can display a virtual keyboard 506 and a password verification pop-up window 507 for the user to perform password verification. If both the user's first verification and secondary verification pass, the folding screen device can exit the "Super Privacy Mode". In one example, if the user's first verification or secondary verification fails, the folding screen device requests the user to perform verification again. When multiple verifications fail, for example, the user tries three times and fails to pass the verification during the first verification or secondary verification, the folding screen device can automatically lock for a period of time. For example, lock for 5 minutes or 10 minutes. After 5 minutes or 10 minutes, the user is allowed to continue the verification. In another example, to protect the device security and user privacy, when multiple verifications fail, the automatically locked time of the folding screen device can continue to be extended. In this way, through the first verification and secondary verification, the security of the folding screen device can be further improved, and information leakage caused by device loss or non-user operation can be avoided.

[0065] To avoid the situation that other associated modules or devices may not work properly due to forcibly disconnecting the target module through hardware, the folding screen device can send a message to the target module after receiving the opening / closing signal, notifying the target module to prepare for power-off. After the target module completes the power-off preparation, the TEE module sends a power-off instruction to the drive module, and the drive module disconnects the control switch of the target module. In a possible implementation manner of the embodiment of the present application, if the number of target modules includes multiple, the control switches of the multiple target modules can be integrated on the same port of the TEE module. In this way, the multiple target modules can be powered off simultaneously under the drive of the drive module. When the device is unfolded and the functions of the target modules need to be restored, the drive module can also power on the multiple target modules simultaneously, ensuring the consistency of the timing during the power-on and power-off processes of the multiple modules.

[0066] As Figure 6 shown, it is a schematic diagram of the control logic of a target module provided by the embodiment of the present application. In Figure 6Among them, the target modules include a camera, a microphone, and a GPS module. Among them, the camera may include multiple cameras, such as a main camera, a secondary camera, a telephoto camera, a front camera, and a spectral camera; the microphone may include a main microphone and a secondary microphone. The software control switches of the above modules can be connected to the chip SOC, and the chip realizes the on / off of the modules in a software sense. In addition, as Figure 6 shown, control switches for each module can also be configured in the TEE module of the folding screen device, and the control switches in the TEE module can be integrated into the same port. When the folding screen device is folded, the opening and closing signal of the device will be immediately transmitted to the TEE module. After being processed, the TEE module can send a power-down instruction to the drive module, and the drive module can disconnect the control switches configured in the TEE module to simultaneously power down the above multiple modules.

[0067] For the sake of easy understanding, the following will introduce the above control process with a specific example in combination with the power-down process of the GPS module.

[0068] As Figure 7 shown, it is a schematic diagram of controlling the power-down of the GPS module provided by an embodiment of the present application. Figure 7 It shows an example of the process of controlling the power-down of the GPS module in a hardware control manner by using the method provided by the embodiment of the present application. Referring to Figure 7 , the user can turn off the location service through the location service switch provided in the settings page related to the folding screen device. At this time, the information of turning off the location service will be transmitted to the location service core component LocationManager. Then, the LocationManager component sends the information of turning off the location service to the relevant component HiGNSS in the chip SOC for implementing the location service, and the HiGNSS component notifies the software driver to turn off the location service. After the location service is turned off, the software driver will send a confirmation message to the LocationManager component to confirm turning off the location service.

[0069] On the other hand, as Figure 7 shown, after the LocationManager component confirms that the location service is turned off, it can send a confirmation message to the TEE module, and the TEE module uses the control method provided by the embodiment of the present application to control the power-down of the GPPS module in a hardware control manner. That is, after the TEE module receives the location service off confirmation message sent by the LocationManager component, it sends a power-down instruction to the drive module to directly power down the GNSS core that can implement the relevant functions of the location service. In this way, the use of the GPS module can be completely disconnected to ensure the privacy and security of the user.

[0070] In the embodiments of the present application, the control of the target module can be implemented based on the TEE module. When it is necessary to disable the target module, the target module can be powered off at the physical level, so that any software-side instructions cannot control the target module. Among them, the driving module for driving the target module to power on and off is deployed in the TEE module, and the driving module only receives signals transmitted by trusted applications, and other interfaces or applications of the device cannot access the driving module. To ensure the security of the control process, a permission verification process can be added to the communication between modules.

[0071] In a possible implementation manner of the embodiments of the present application, in the super privacy mode, the service manager will access the driving module. The TEE module can verify the key carried in the information transmitted during the access process of the service manager. Among them, the above-mentioned key can include various different types of keys, such as universally unique identifier (UUID), permission group key, or scenario ID, etc. During the verification process, only when multiple types of keys are all verified successfully, the TEE module allows the service manager to access the driving module.

[0072] As Figure 8 shown, it is a schematic diagram of a permission verification process provided by the embodiments of the present application. According to Figure 8 the shown process, after the "folding protection" function of the folding screen device is turned on, when the folding screen device is bent, it will trigger the device to enter the super privacy mode. In the super privacy mode, the privacy mode service center can send a message to the target module to notify the target module to prepare for power off. When each target module has completed the power-off preparation, a context environment can be created and a session can be requested. Then, the privacy mode CA can judge through the logical model and perform permission verification. As Figure 8 shown, the privacy mode CA can first perform hash authentication. If the hash authentication fails, the access request is directly intercepted. If the hash authentication is successful, the privacy mode TA can continue with the permission group matching. If the permission group matching fails, the access request can be intercepted; if the permission group matching is successful, the super privacy mode driving module can set the driver program and continue with the scenario matching.

[0073] In a possible implementation manner of the embodiments of the present application, multiple logics can be set for the driving module to cope with different scenarios in the super privacy mode. As Figure 8 shown, it shows examples of accessing the driving module in 4 different scenarios. These 4 scenarios are respectively configured with different scenario IDs, and only when the scenario ID carried by the access program uniquely matches the ID of a certain type of scenario, the corresponding operation is allowed to be executed. As Figure 8 shown, these 4 scenarios can include:

[0074] Scenario 1: Initialization. The corresponding scenario ID is 0xA, which is used when receiving system startup broadcasts, switching users, or using the privacy space, etc. By pre-saving the privacy mode status, it can be reassigned after switching the system. At the same time, an unconditional recovery interface is provided. When the privacy mode status is disrupted due to system scheduling problems, it can be restored through initialization.

[0075] Scenario 2: Fold change. The corresponding scenario ID is 0xB. The fold change interface is used to monitor the folding information of the folding screen device and determine the type of fold change. Specifically, if it is a fold-unfold change, that is, the folding screen device changes from the folded state to the unfolded state, the folding screen device can directly exit the super privacy mode. If it is an unfold-fold change, that is, the folding screen device changes from the unfolded state to the folded state, at this time, the folding screen device can enter the fold protection state and wait for the module on-site protection to be completed. In addition, when the opening and closing signal is inconsistent with the bending hardware signal obtained by the drive internally, relevant warning prompts can be collected (indicating that the system may be invaded, etc.).

[0076] Scenario 3: Fold protection. The corresponding scenario ID is 0xC. After starting fold protection, when the folding state of the folding screen device changes, it can receive and record the signals transmitted by the target modules. When all target modules are ready to perform the power-off operation (enter the super privacy state), it also monitors the change of the bending signal. When the bending signal changes, all flag bits are cleared and the signals transmitted by each target module are recorded again.

[0077] Scenario 4: Wait timeout and power off immediately. The corresponding scenario ID is 0xD. When the privacy mode service center notifies all target modules to perform on-site protection and enter the privacy mode, if the signal indicating that the on-site protection of the target module is completed is not received within x seconds, all target modules can be immediately disconnected and enter the super privacy state.

[0078] For ease of understanding, the following combines a complete example to introduce the control method of the electronic device provided in the embodiments of the present application. As Figure 9 shown, it is a flowchart of a control method of an electronic device provided in the embodiments of the present application. Figure 9 The electronic device targeted by the process shown is a folding screen device, and the target event can be the event that the folding screen device is folded. That is, Figure 9 it shows the process of controlling each target module of the electronic device by applying the method provided in the embodiments of the present application when the folding screen device is folded. Figure 9The target modules in the shown process schematic diagram may include a camera module, a microphone module, a positioning module, a NearLink module, and a sensor hub (sensohub). Among them, the sensor hub can be used to uniformly manage various sensors in the foldable screen device. In the traditional way, sensors directly interact with the CPU, and many algorithms (such as 9-axis algorithm, 6-axis algorithm, gesture algorithm, etc.) are run on the application processor (AP) side. Exemplarily, the operating system, user interface, and application programs of the foldable screen device are all executed on the AP, resulting in a relatively high CPU power consumption. Moreover, after the electronic device goes into sleep mode, each algorithm will stop running. By centrally handing over the various sensors that originally interacted directly with the CPU to the sensor hub for processing, and then having the sensor hub interact with the CPU, the CPU burden can be reduced. Also, when the electronic device is in the sleep state, the sensor hub can continue to work.

[0079] As Figure 9 shown, the foldable screen management service in the foldable screen device can uniformly collect the fold state information of the foldable screen device and perform subsequent logical processing. When the fold state of the foldable screen device changes, the foldable screen management service can notify the fold state information to each relevant module through broadcasting. For example, when the foldable screen device changes from the unfolded state to the folded state, the foldable screen management service can notify the fold state information to the message listening module in the security component service. After receiving the information broadcast by the foldable screen management service, the message listening module can judge the current state of the foldable screen device and perform corresponding logical processing.

[0080] When the fold state information is the fold state information indicating that the foldable screen device changes from the unfolded state to the folded state, the message listening module can distribute the fold state information. For example, as Figure 9 shown, the message listening module can distribute the fold state information to the super privacy mode center in the security public service and the super privacy mode software switch control module in the security component service.

[0081] Among them, the super privacy mode center can transmit the information to the super privacy mode CA through broadcasting, and then the super privacy mode CA transmits the information to the super privacy mode TA. After the command processing module in the super privacy mode TA verifies the information through methods such as UUID and permission group verification, it can transmit the information to the super privacy mode driver. On the other hand, after receiving the information, the super privacy mode software switch control module in the security component service can transmit the fold information to each relevant module. At this time, the foldable screen device can enter the privacy mode and power off each target module. Before powering off, each target module can perform power-off preparation, that is, complete the on-site protection processing before powering off.

[0082] AsFigure 9 As shown, the super privacy mode software switch control module can transmit the folding information to the sensor privacy service and the settings center. Among them, the sensor privacy service can send the folding information to the camera service, and the camera service distributes the message to each underlying service, that is, the services that need to be shut down in the camera service. During this process, each service prepares for power-down, protects the on-site environment, and packages important information. After each underlying service completes the on-site protection, the confirmation messages can be aggregated to the camera service center and the messages are notified to the security and privacy center. After receiving the messages, the security and privacy center notifies the super privacy mode TA and the privacy mode driver.

[0083] After the super privacy mode software switch control module transmits the folding information to the settings center, the settings center can turn off the location service according to the received information and notify the StarFlash module, the sensor hub, and the positioning module to perform on-site protection. After each target module completes the on-site protection, the StarFlash module and the positioning module can send the confirmation signal to the location management service. The confirmation signal can be transmitted to the privacy mode CA. Among them, the camera module and the sensor hub can directly send the signal to the privacy mode CA. The privacy mode CA can be in a waiting state. Once it receives the message that each target module has completed on-site protection, it can send the confirmation signal to the privacy mode driver module, and the driver module performs subsequent processing.

[0084] The privacy mode driver can make a judgment each time it receives a signal. When all target modules are ready, the driver module can power down each target module, and the folding screen device enters the "super" privacy state.

[0085] In a possible implementation manner of the embodiment of the present application, the folding state information received by the folding screen management service may be the unfolded state information indicating that the folding screen device changes from the folded state to the unfolded state. At this time, power-on operations need to be performed on each target module, and after a short delay, the privacy mode driver notifies each target module to resume operation. In this way, it can be ensured that each target module resumes in a state where the device is safely powered on, avoiding security problems such as system crashes and unavailable functions caused by the situation that when the timing is stuck, each target module receives the unfolded state information first while the privacy mode driver receives the unfolded state information later, and each target module resumes directly before power-on.

[0086] When applying the method provided by the embodiments of the present application to power on and off each target module during the folding state change of the folding screen device, the accuracy of information transmission should be ensured, which requires the cooperation of software and hardware. In the case where the user repeatedly folds the device, the folding signal and the signals for in-situ protection of each target module may be disordered, resulting in a malfunction of the folding screen device. To address this problem, the embodiments of the present application can perform a secondary verification before the super privacy mode CA transmits information to the super privacy mode TA. It is confirmed that the folding state represented by the information transmitted to the super privacy mode TA is consistent with the folding state represented by the information broadcast by the folding screen management service.

[0087] In a possible implementation manner of the embodiments of the present application, when the folding screen device is folded, each target module can record the current on / off state and then start to disable the relevant functions. When the folding screen device is unfolded, each target module can restore the on / off state recorded last time.

[0088] Combined with the introduction of the foregoing embodiments, as Figure 10 shown, a schematic diagram of the steps of a control method for an electronic device provided by the embodiments of the present application is shown. The method may include the following steps:

[0089] S1001. Monitor a target event through the trusted execution environment module of the electronic device.

[0090] The electronic device in the embodiments of the present application may include electronic devices such as mobile phones, tablet computers, and wearable devices. Among them, the electronic device may also be a folding screen device. For example, a folding mobile phone, etc.

[0091] The trusted execution environment module may be the TEE module in the foregoing embodiments. A driver module is deployed in the TEE module, and control switches for multiple target modules are configured. The control switches for multiple target modules may be integrated into the same port in the TEE module.

[0092] In a possible implementation manner of the embodiments of the present application, the target module may include a camera module, a microphone module, a positioning module, a star flash module, or a sensor hub. That is, the camera, microphone, GPS module, star flash module, and sensor hub module in the foregoing embodiments.

[0093] The target event may refer to those events that require corresponding protection on the electronic device after the event occurs to prevent the leakage of user privacy.

[0094] In one example, the electronic device may be a folding screen device, and the target event for the folding screen device may be that the folding screen device changes from an unfolded state to a folded state. Therefore, monitoring the target event through the TEE module of the electronic device may mean receiving, by the TEE module in the folding screen device, the opening / closing signal of the folding screen device sent by the privacy mode CA. The above opening / closing signal may be used to represent that the folding screen device changes from an unfolded state to a folded state. When the TEE module receives the opening / closing signal, it can be considered that the target event has occurred, and the TEE module needs to perform further protection for the target event.

[0095] In a possible implementation manner of the embodiment of the present application, after receiving, by the TEE module in the folding screen device, the opening / closing signal of the folding screen device sent by the privacy mode CA, since the opening / closing signal is a software signal, the folding screen device may further obtain a bending hardware signal. The above bending hardware signal may be a hardware signal representing that the folding screen device changes from an unfolded state to a folded state. If the opening / closing signal received by the TEE module is consistent with the obtained bending hardware signal, it is determined that the target event has occurred.

[0096] S1002. When receiving the information that the target event has occurred, send a power-down instruction to the driving module, and the power-down instruction is used to drive the target module to power down.

[0097] In the embodiment of the present application, the TEE module sending a power-down instruction to the driving module after receiving the information that the target event has occurred may be implemented in the privacy mode. The privacy mode may be the privacy mode or the super privacy mode introduced in the foregoing embodiments. In the privacy mode, when the TEE module receives the information that the target event has occurred, the TEE module may send a power-down instruction to the driving module, and the driving module drives to disconnect the control switch of the target module, thereby implementing power-down of the target module.

[0098] In a possible implementation manner of the embodiment of the present application, the control switches of multiple target modules may be integrated in the same port of the TEE module. Therefore, when the driving module drives multiple target modules to power down based on the power-down instruction, it can simultaneously drive to disconnect the control switches of multiple target modules, so that multiple target modules power down simultaneously, ensuring the consistency of timing.

[0099] In another possible implementation manner of the embodiment of the present application, when receiving the information that the target event has occurred, sending a power-down instruction to the driving module includes: when receiving the information that the target event has occurred, broadcasting the information to the target module through the privacy mode CA, and the above information may be used to instruct the target module to prepare for power-down; when receiving the information fed back by the target module via the privacy mode CA that the power-down preparation is completed, sending a power-down instruction to the driving module.

[0100] That is, when the TEE module receives the information about the occurrence of the target event sent by the privacy mode CA, the privacy mode CA will also immediately notify each target module to prepare for power-off in the form of a broadcast. After each target module completes the power-off preparation, it can feedback a message indicating that the preparation is completed to the privacy mode CA, and the privacy mode CA can send the messages indicating that the preparation is completed feedback by each target module to the TEE module. After all target modules have completed the power-off preparation, the TEE module will send a power-off instruction to the drive module. In this way, it can be avoided that the TEE module directly sends a power-off instruction to the drive module, resulting in the sudden power-off of the target module and causing other associated modules or systems to malfunction.

[0101] In an embodiment of the present application, after the privacy mode CA broadcasts the information about the occurrence of the target event to the target module, if the TEE module does not receive the information indicating that the power-off preparation of the target module by the privacy mode CA is completed, the TEE module can send a power-off instruction to the drive module at a preset moment after the privacy mode CA broadcasts the target event. The above preset moment can refer to a certain time point after the privacy mode CA broadcasts the target event. For example, x seconds. When the privacy mode CA broadcasts the target event to the target module, if the TEE module still does not receive the message indicating that the power-off preparation of the target module is completed after waiting for x seconds, the TEE module can send a power-off instruction to the drive module, and the drive module can cut off the control switch of the target module to power off the target module. The value of the above x can be determined according to actual needs, and the embodiments of the present application do not limit this.

[0102] In a possible implementation manner of the embodiment of the present application, the power-off preparation completed by the target module may include at least one of the following processes: terminating the service currently executed by the target module and storing the key data of the service; or decoupling the target module from other modules; or decoupling each module inside the target module.

[0103] In an embodiment of the present application, when the TEE module sends a power-off instruction to the drive module, the TEE module can also verify the target event to confirm the authenticity of the occurring target event.

[0104] In a possible implementation manner of the embodiment of the present application, when the TEE module receives the information about the occurrence of the target event, the TEE module can also obtain the key carried in the information indicating the target event. The above information indicating the target event can be the information passed during the process of other application programs accessing the drive module. The TEE module can verify the target event based on the key carried in the information. If the target event passes the verification, it means that the target event is true and reliable. For example, the folding screen device has indeed changed from the unfolded state to the folded state. At this time, the TEE module will send a power-off instruction to the drive module.

[0105] When verifying a target event using the key carried in the information indicating the target event, the key can be matched with the key in the currently configured privacy mode; if the key carried in the above information matches the corresponding key in the currently configured privacy mode successfully, it can be determined that the target event verification passes; otherwise, it is determined that the target event verification fails. Among them, the key can include at least one of UUID, permission group key, or scenario ID.

[0106] As an example of an embodiment of this application, the TEE module can first match the UUID to determine whether the UUIDs are the same. If the UUIDs are different, the TEE module may not send a power-off instruction to the driver module. If the UUIDs are the same, the TEE module can continue to match the permission group key. When the permission group key does not match successfully, the TEE module will continue to match the scenario ID only after the permission group key matches successfully. Otherwise, the TEE module may not send a power-off instruction to the driver module. After the UUID, permission group key, and scenario ID all match successfully, the TEE module sends a power-off instruction to the driver module, and the driver module drives the control switches of each target module to disconnect, realizing the power-off of each target module.

[0107] The embodiments of this application can divide the functional modules of the electronic device according to the above method examples. For example, each functional module can be divided corresponding to each function, or one or more functions can be integrated into one functional module. It should be noted that the division of modules in the embodiments of this application is illustrative, only a logical function division, and there may be other division methods in actual implementation. The following takes dividing each functional module corresponding to each function as an example for illustration.

[0108] Corresponding to the above various embodiments, refer to Figure 11 , which shows a structural block diagram of an electronic device provided by an embodiment of this application. The electronic device may be configured with the trusted execution environment module 1101 and the driver module 1102 in the foregoing various embodiments, where the driver module 1102 is deployed in the trusted execution environment module 1101, and the trusted execution environment module 1101 is also configured with a control switch for the target module 1103; when the trusted execution environment module 1101 receives information about the occurrence of a target event, the trusted execution environment module 1101 can send a power-off instruction to the driver module 1102, and the power-off instruction can be used to drive the target module 1103 to power off.

[0109] In a possible implementation manner of the embodiment of the present application, the number of target modules 1103 can be multiple, and the control switches of the multiple target modules 1103 can be integrated into the same port in the trusted execution environment module 1101. In this way, the above-mentioned power-down instruction can be used to simultaneously drive the disconnection of the control switches of the multiple target modules 1103, so that the multiple target modules 1103 are powered down simultaneously.

[0110] In a possible implementation manner of the embodiment of the present application, the trusted execution environment module 1101 can also be used for: when receiving the information of the occurrence of the target event, broadcasting the information of the occurrence of the target event to the target module 1103 through the privacy mode CA, and this information is used to instruct the target module 1103 to perform power-down preparation; when receiving the information that the power-down preparation of the target module 1103 is completed fed back by the privacy mode CA, sending a power-down instruction to the drive module 1102.

[0111] In a possible implementation manner of the embodiment of the present application, the trusted execution environment module 1101 can also be used for: if the information that the power-down preparation of the target module 1103 fed back by the privacy mode CA is not received, then at a preset moment after the privacy mode CA broadcasts the target event, sending a power-down instruction to the drive module 1102.

[0112] In the embodiment of the present application, the power-down preparation can include at least one of the following processes:

[0113] Terminate the service currently executed by the target module 1103 and store the key data of the service; or,

[0114] Decouple the target module 1103 from other modules; or,

[0115] Decouple each module inside the target module 1103.

[0116] In a possible implementation manner of the embodiment of the present application, the trusted execution environment module 1101 can also be used for: when receiving the information of the occurrence of the target event, obtaining the key carried in the information indicating the target event; verifying the target event based on the key; if the verification of the target event passes, sending a power-down instruction to the drive module 1102.

[0117] Among them, verifying the target event based on the key can include: matching the key with the key in the currently configured privacy mode; if the key matches successfully with the corresponding key in the currently configured privacy mode, it is determined that the verification of the target event passes; otherwise, it is determined that the verification of the target event fails.

[0118] In a possible implementation manner of the embodiment of the present application, the key can include at least one of UUID, permission group key or scenario ID.

[0119] In a possible implementation manner of the embodiment of the present application, the electronic device may be a folding screen device. When the electronic device is a folding screen device, the trusted execution environment module 1101 may further be configured to: receive an opening / closing signal of the folding screen device, where the opening / closing signal may be used to represent that the folding screen device is converted from an unfolded state to a folded state.

[0120] In another possible implementation manner of the embodiment of the present application, the trusted execution environment module 1101 may further be configured to: obtain a bending hardware signal of the folding screen device, where the bending hardware signal may be a hardware signal representing that the folding screen device is converted from an unfolded state to a folded state; when the opening / closing signal is consistent with the bending hardware signal, a target event occurs.

[0121] In a possible implementation manner of the embodiment of the present application, the target module 1103 may include at least one of the following modules in the electronic device: a camera module, a microphone module, a positioning module, a NearLink module, or a sensor hub.

[0122] The embodiment of the present application further provides a control device for an electronic device. By applying this device, the steps or functions that can be implemented by the relevant modules of the electronic device in the foregoing various method embodiments can be realized.

[0123] All relevant contents of the steps involved in the foregoing method embodiments can be cited in the function descriptions of the corresponding functional modules, and will not be elaborated here.

[0124] The embodiment of the present application further provides an electronic device. The electronic device may be the electronic device in each of the embodiments. The electronic device includes a memory, a processor, and a computer program stored in the memory and executable on the processor. When the processor executes the computer program, the control method of the electronic device in the foregoing various embodiments can be realized. In a possible implementation manner, the electronic device may be a folding screen device.

[0125] The embodiment of the present application further provides a computer-readable storage medium. A computer instruction is stored in the computer-readable storage medium. When the computer instruction runs on the electronic device, the electronic device is enabled to execute the above-related method steps, and the control method of the electronic device in the foregoing various embodiments can be realized.

[0126] The embodiment of the present application further provides a computer program product. When the computer program product runs on a computer, the computer is enabled to execute the above-related steps to realize the control method of the electronic device in the foregoing various embodiments.

[0127] An embodiment of the present application further provides a chip, which may be a processor, or the chip includes a processor. The processor may be a general-purpose processor or a dedicated processor; wherein, the processor is used to support the electronic device to execute the above-related steps to implement the control method of the electronic device in each of the foregoing embodiments.

[0128] Optionally, the chip further includes a transceiver, which is used to accept the control of the processor and support the electronic device to execute the above-related steps to implement the control method of the electronic device in each of the foregoing embodiments.

[0129] Optionally, the chip may further include a storage medium.

[0130] The chip may be implemented using the following circuits or devices: one or more field programmable gate arrays (FPGAs), programmable logic devices (PLDs), controllers, state machines, gate logic, discrete hardware components, any other suitable circuits, or any combination of circuits capable of performing the various functions described throughout this application.

[0131] Finally, it should be noted that the above are only specific embodiments of the present application, but the protection scope of the present application is not limited thereto. Any changes or substitutions within the technical scope disclosed in the present application should be covered within the protection scope of the present application.

Claims

1. A control method for an electronic device, characterized in that, Including: Monitoring a target event through a trusted execution environment module of an electronic device; When receiving information that the target event has occurred, sending a power-off instruction to a drive module, where the power-off instruction is used to drive a target module to power off; wherein, the drive module is deployed in the trusted execution environment module, and a control switch of the target module is configured in the trusted execution environment module.

2. The method according to claim 1, characterized in that, The number of the target modules is multiple, control switches of the multiple target modules are integrated into the same port in the trusted execution environment module, and the power-off instruction is used to simultaneously drive and disconnect the control switches of the multiple target modules, so that the multiple target modules power off simultaneously.

3. The method according to claim 1 or 2, characterized in that, The step of "when receiving information that the target event has occurred, sending a power-off instruction to the drive module" includes: When receiving information that the target event has occurred, broadcasting, through a privacy mode CA, the information that the target event has occurred to the target module, where the information is used to instruct the target module to prepare for power-off; When receiving information fed back by the privacy mode CA that the target module has completed power-off preparation, sending the power-off instruction to the drive module.

4. The method according to claim 3, characterized in that, After broadcasting, through the privacy mode CA, the information that the target event has occurred to the target module, the method further includes: If information fed back by the privacy mode CA that the target module has completed power-off preparation is not received, sending the power-off instruction to the drive module at a preset moment after the privacy mode CA broadcasts the information that the target event has occurred.

5. The method according to claim 3 or 4, characterized in that, The power-off preparation includes at least one of the following processes: Terminating a service currently executed by the target module and storing key data of the service; or, Decoupling the target module from other modules; or, Decoupling each module inside the target module.

6. The method according to any one of claims 1 to 5, characterized in that, The step of "when receiving information that the target event has occurred, sending a power-off instruction to the drive module" further includes: When receiving information that the target event has occurred, obtaining a key carried in the information indicating the target event; Verifying the target event based on the key; If the target event passes the verification, sending the power-off instruction to the drive module.

7. The method according to claim 6, characterized in that, The step of "verifying the target event based on the key" includes: Matching the key with a key in the currently configured privacy mode; If the key successfully matches the corresponding key in the currently configured privacy mode, determining that the target event passes the verification; otherwise, determining that the target event fails the verification.

8. The method according to claim 6 or 7, characterized in that, The key includes at least one of a Universally Unique Identifier (UUID), a permission group key, or a scenario ID.

9. The method according to any one of claims 1 to 8, characterized in that, The electronic device includes a folding screen device, and the step of "monitoring a target event through a trusted execution environment module of the electronic device" includes: Receiving an opening / closing signal of the folding screen device sent by a privacy mode CA, where the opening / closing signal is used to represent that the folding screen device is switched from an unfolded state to a folded state.

10. The method according to claim 9, characterized in that, After receiving the opening / closing signal of the folding screen device sent by the privacy mode CA, the method further includes: Obtain the bending hardware signal of the folding screen device, where the bending hardware signal is a hardware signal indicating that the folding screen device is converted from the unfolded state to the folded state; When the opening and closing signal is consistent with the bending hardware signal, it is determined that the target event has occurred.

11. The method according to any one of claims 1 to 10, characterized in that, The target module includes at least one of the following modules in the electronic device: Camera module, microphone module, positioning module, StarFlash module, or sensor hub.

12. An electronic device, characterized in that,The electronic device is configured with a trusted execution environment module and a driver module. The driver module is deployed in the trusted execution environment module, and a control switch for the target module is also configured in the trusted execution environment module; when the trusted execution environment module receives information that the target event has occurred, the trusted execution environment module sends a power-down instruction to the driver module, and the power-down instruction is used to drive the target module to power down.

13. The electronic device according to claim 12, wherein, The number of the target modules is multiple, and the control switches of the multiple target modules are integrated into the same port in the trusted execution environment module. The power-down instruction is used to simultaneously drive and disconnect the control switches of the multiple target modules, so that the multiple target modules are powered down simultaneously.

14. An electronic device, the electronic device comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein, When the processor executes the computer program, it implements the control method of the electronic device according to any one of claims 1 to 11.

15. A computer-readable storage medium, wherein, The computer-readable storage medium includes a memory and a processor. The processor executes the computer program stored in the memory to implement the control method of the electronic device according to any one of claims 1 to 11.

Images