Data protection method of device, electronic device, and computer-readable storage medium

Abstract

The application discloses a data protection method of a device, an electronic device and a computer readable storage medium, and comprises the following steps: sending an uplink message carrying a device identifier and a device data protection instruction to a satellite terminal in a short burst through a button terminal in an uplink communication frequency band; relaying the uplink message to a ground master terminal through the satellite terminal; checking and re-encrypting the uplink message by the ground master terminal to generate a downlink message; and broadcasting the downlink message through the satellite terminal in a downlink communication frequency band. By listening to the downlink broadcast through the device terminal, the downlink message matched with the device terminal is received, decrypted and parsed, and the data protection operation can be performed in an off-network or physically isolated scene, so that the data protection of the mobile device in the off-network or physically isolated scene is effectively realized.

Description

Technical Field

[0001] This application relates to the field of data processing technology, and in particular to a data protection method for a device, an electronic device, and a computer-readable storage medium. Background Technology

[0002] With the rapid development of mobile communication and smart terminal technologies, users rely on mobile devices for payments, social interactions, travel, and work. Loss of these devices directly impacts users' lives and information security. Therefore, how to achieve rapid location tracking, remote locking, and data protection in the event of a lost or stolen mobile device has become an important research direction in the field of smart terminal security.

[0003] Currently, mobile device anti-loss and data protection technologies form a multi-layered security system encompassing the cloud, terminal, and accessories. At the cloud level, this is primarily achieved through operating system-level services. At the hardware level, short-range alarm and location functions are implemented using Bluetooth anti-loss devices or ultra-wideband tags. At the terminal level, data protection relies on full-disk encryption using Advanced Encryption Standard (AES), security chips, and biometric keys, supplemented by a user identity module's personal identification code and an International Mobile Equipment Identity (IMEI) blacklist mechanism to restrict unauthorized network access and use.

[0004] However, existing anti-loss and data protection technologies still have several shortcomings. First, the cloud positioning function immediately fails when the device is powered off, the SIM card is removed, or it enters airplane mode, causing tracking to be interrupted. Second, ultra-wideband signals exhibit significant drift in multipath environments such as subways, and create positioning blind spots in areas with sparse crowdsourcing nodes. Third, some Android models have security vulnerabilities, allowing the locking mechanism to be bypassed through manufacturer repair channels, resulting in the recovery of encrypted data. In addition, the continuous scanning mechanism of Bluetooth anti-loss devices consumes a lot of power, making it prone to low battery false alarms. In other words, existing solutions rely excessively on online connectivity for mobile devices, making it difficult to cope with offline or physically isolated scenarios. Summary of the Invention

[0005] This application provides a data protection method for a device, an electronic device, and a computer-readable storage medium, which can effectively protect the data of mobile devices in offline or physically isolated scenarios.

[0006] One technical solution adopted in this application is: providing a data protection method for a device, wherein the data protection method is applied to the device and includes: The system monitors messages within the downlink communication frequency band and receives downlink messages associated with the device. In response to a device loss command, the system sends the uplink message to the satellite in a burst manner within the uplink communication frequency band via a button. The satellite then forwards the uplink message to the master control unit, which re-encrypts the uplink message to obtain the downlink message. The master control unit then forwards the downlink message to the satellite, allowing the satellite to broadcast the downlink message within the downlink communication frequency band. The downlink message is parsed to obtain the device data protection instruction; In response to the device data protection command, a data protection policy is executed.

[0007] Another technical solution adopted in this application is: providing a data protection method for a device, wherein the data protection method is applied to the main control terminal, and the data protection method includes: Receive uplink messages associated with the device from the satellite terminal; wherein, in response to a device loss command, the button terminal sends the uplink message to the satellite terminal in a burst manner within the uplink communication frequency band, so that the satellite forwards the uplink message to the master control terminal; The uplink message is re-encrypted to obtain the downlink message; The downlink message is forwarded to the satellite terminal, so that the satellite terminal broadcasts the downlink message in the downlink communication frequency band, so that the device terminal listens for messages in the downlink communication frequency band, receives the downlink message associated with the device terminal, parses the downlink message to obtain the device data protection instruction, and executes the data protection strategy in response to the device data protection instruction.

[0008] Another technical solution adopted in this application is: providing a data protection method for a device, wherein the data protection method is applied to a button end, and the data protection method includes: In response to a device loss command, an uplink message associated with the device is sent to a satellite in a burst manner within the uplink communication frequency band. The satellite then forwards the uplink message to the master control unit, which re-encrypts the uplink message to obtain a downlink message. The master control unit then forwards the downlink message to the satellite, which broadcasts the downlink message within the downlink communication frequency band. The device then listens for messages within the downlink communication frequency band, receives the downlink message associated with the device, parses the downlink message to obtain a device data protection command, and executes a data protection strategy in response to the device data protection command.

[0009] Another technical solution adopted in this application is: providing an electronic device, the electronic device comprising: Memory, used to store executable program code; A processor is configured to call and run the executable program code from the memory, causing the electronic device to perform the data protection method of the device as described in any of the preceding embodiments.

[0010] Another technical solution adopted in this application is to provide a computer-readable storage medium storing a computer program, which, when executed by a processor, implements the data protection method of the device as described in any of the above claims.

[0011] This application provides a data protection method for a device, the data protection method for the device including: The beneficial effects of this application's embodiments are as follows: The button terminal transmits an uplink message carrying the device identifier and device data protection instructions to the satellite terminal via a short burst in the uplink communication band; the satellite terminal relays this message to the ground control terminal, which verifies and re-encrypts it to generate a downlink message, which is then broadcast cyclically in the downlink communication band via the satellite terminal. By listening to the downlink broadcast on the device terminal, receiving and decrypting the matching downlink message, and parsing it, data protection operations can be performed in offline or physically isolated scenarios, effectively achieving data protection for mobile devices in offline or physically isolated scenarios. Attached Figure Description

[0012] Figure 1 This is a flowchart illustrating the first embodiment of the data protection method for the device described in this application; Figure 2 This is a flowchart illustrating the second embodiment of the data protection method for the device described in this application; Figure 3 This is a schematic diagram of the data protection method for the device in this application. Figure 4 This is a flowchart illustrating the third embodiment of the data protection method for the device in this application; Figure 5 This is a flowchart illustrating the fourth embodiment of the data protection method for the device in this application; Figure 6 This is an exemplary structural block diagram of an electronic device for the data protection method of the device described in this application; Figure 7 This is an exemplary structural block diagram of a computer-readable storage medium for the data protection method of the device described in this application. Detailed Implementation

[0013] The present application will now be described in detail with reference to the accompanying drawings and embodiments.

[0014] In some embodiments, please refer to Figure 1 , Figure 1This is a flowchart illustrating the first embodiment of the data protection method for the device described in this application. It should be noted that if substantially the same result is achieved, the method of this application is not necessarily identical. Figure 1 The illustrated process sequence is limited. For example... Figure 1 As shown, the data protection method for the device is applied to the device itself, and the data protection method for the device includes: S101, monitor the messages in the downlink communication frequency band and receive the downlink messages associated with the device; wherein, in response to a device loss command, the button sends the uplink message to the satellite in a burst manner in the uplink communication frequency band, so that the satellite forwards the uplink message to the master control terminal, so that the master control terminal re-encrypts the uplink message to obtain the downlink message, and forwards the downlink message to the satellite terminal, so that the satellite terminal broadcasts the downlink message in the downlink communication frequency band; The satellite terminal can serve as a space communication node for signal relay, forwarding, and broadcasting messages. All devices can listen to broadcast messages, but only devices with matching identifiers will receive, decrypt, and execute the messages. This improves system availability and reliability in extreme environments (such as areas with no signal). Satellite communication can utilize different frequency bands to distinguish between uplink and downlink; for example, the L-band is used for narrowband uplink, and the S-band for downlink broadcasting. This avoids uplink and downlink interference and optimizes the satellite transceiver link.

[0015] The device can be a mobile phone, tablet, or smart terminal. When the device is lost, it can execute preset data protection policies. The device may contain a chip module. There is a one-to-one correspondence between the device and the button; for example, this can be achieved by carrying a device identifier and / or possessing a corresponding key.

[0016] The button terminal can be a standalone triggering device, potentially containing an internal chip module. It's used to quickly issue device data protection commands when the user cannot access the device. Before the user presses the button, the terminal is pre-configured with an uplink message containing the device identifier and the data protection command. The button terminal then encrypts the uplink message using both public-key cryptography (SM2) and symmetric cryptography (SM4) and transmits it to the satellite via the uplink communication band in a burst mode. This burst, short-duration, high-power pulse is more easily received by the satellite in noisy environments and reduces the risk of continuous location tracking or interference from third parties.

[0017] The master control unit can be a ground control and management center. It can be used for authentication and security verification, such as verifying the legitimacy of messages uploaded from button terminals or devices, the registration status of devices, and key matching. Simultaneously, it can decrypt uplink messages and then re-encrypt them using the system key to generate downlink messages. The generated downlink messages are then included in the satellite's outgoing frame and sent to the satellite for network-wide broadcast. Before re-encryption, the master control unit can also verify signatures, check for whitelists / overdue payments / legal restrictions, and record event identifiers and times in the logs.

[0018] The message may include, but is not limited to, at least one of the following: device identifier, command type, timestamp / serial number, sender signature or MAC, and random number / anti-replay data.

[0019] As an example, when an independent button receives a device data protection command, it bursts an uplink message containing the device identifier and loss command to the satellite in the uplink communication band, preventing the button from occupying uplink resources for an extended period. The satellite captures this uplink message and forwards it to the master control unit. The master control unit re-encrypts the uplink message, generates a downlink message, and sends it back to the satellite. The satellite then broadcasts the downlink message cyclically to all devices in the downlink communication band, and the device matching the device identifier saves and processes the downlink message. Each device can continuously listen for the broadcast in the downlink communication band and receive the downlink message associated with its device identifier. This allows for continuous, low-power reception of broadcast information.

[0020] If multiple button terminals transmit simultaneously, short message multiple access (time slot / random backoff) can be designed or collision detection / error correction can be used at the satellite access layer.

[0021] In some exemplary implementations, the uplink burst process at the button end takes about 0.2 seconds, the processing process at the master control end takes about 0.5 seconds, and the downlink scheduling or broadcast propagation process is relatively short, with the overall delay typically being 0.8 to 2 seconds.

[0022] S102, the downlink message is parsed to obtain the device data protection instruction; As an example, after receiving a downlink message, the device can use a local key to decrypt and parse the message content, and extract device data protection instructions, such as locking, erasing, and uploading location information.

[0023] The command is encrypted at the master control end using a key that the target device can recognize. Only the corresponding device with the correct key can decrypt and execute the command, thus preventing eavesdroppers or other devices from mistakenly executing the command. In addition, downlink messages can be verified, such as command signature verification, timestamp verification, replay protection checks, and policy applicability verification, to confirm that the command is authentic and valid.

[0024] S103, in response to the device data protection command, execute the data protection strategy.

[0025] Data protection strategies can be automated security measures implemented by the device in response to data protection commands to prevent the leakage, tampering, or unauthorized use of sensitive data within the device. Emergency security measures are also used to prevent data leakage or misuse after device loss.

[0026] Data protection strategies may include, but are not limited to, encrypted storage or immediate destruction (erasing data partitions, deleting keys), entering locked mode, blocking any access, prohibiting unauthorized users from operating the device, shutting down or restricting communication interfaces, preventing external devices from reading internal storage, preventing the device from being used as an attack node in an uncontrolled state, protecting the communication keys or authentication information between the device and the main control system from being stolen, and remotely unlocking or restoring the device via a button after it has been recovered.

[0027] In this embodiment, the button transmits an uplink message carrying the device identifier and device data protection instructions to the satellite in a short burst on the uplink communication band. The satellite relays the message to the ground control unit, which verifies and re-encrypts it to generate a downlink message, which is then broadcast cyclically on the downlink communication band via the satellite. By listening to the downlink broadcast on the device, receiving and decrypting the matching downlink message, and parsing it, data protection operations can be performed in offline or physically isolated scenarios, effectively protecting the data of mobile devices in these environments.

[0028] Please see Figure 2 , Figure 2 This is a flowchart illustrating a second embodiment of the data protection method for the device described in this application. The data protection method is applied to the device and includes the following steps: S201, monitor the downlink communication frequency band and receive downlink messages associated with the device; S201 can be described as in S101, and will not be repeated here.

[0029] S202, the downlink message is parsed to obtain the device data protection instruction; S202 can be described as in S102, and will not be repeated here.

[0030] S203, obtain the location information of the device through the chip module, and send the location information to the main control terminal; As an example, after recognizing the device data protection command, the chip module on the device side can proactively call its own positioning module to obtain the current location, then encrypt it via the uplink communication frequency band and send it to the satellite, which in turn forwards it to the main control terminal. This allows the user to view the real-time or nearest location of the lost device through the main control terminal.

[0031] In some embodiments, S203 may include: obtaining the current state parameters of the battery cell through the chip cell; determining a transmission time interval based on the state parameters; obtaining the location information of the device based on the transmission time interval, and sending the location information to the master control terminal.

[0032] The chip module can be a main control system-level chip or a power management integrated circuit. The feedback interval can be the period at which the device periodically reports its position to the main control unit. The status parameters can reflect at least one of the device's voltage and current curves, power level, discharge state, and power consumption, and also indirectly reflect the time the device can maintain operation.

[0033] As an example, the chip module dynamically adjusts the frequency of location information reporting based on battery status. In one exemplary implementation, the transmission interval is shortened when the battery is sufficient and lengthened when the battery is low. At predetermined time intervals, the device obtains its current location via the positioning module (GPS / BeiDou); then, it reports the location information to the satellite or main control unit using an encrypted communication link, achieving continuous tracking. By dynamically adjusting the transmission frequency, the device's power consumption when the battery is low can be reduced, extending its operating time in offline mode.

[0034] S204, in response to the device data protection command, control the operating system to perform data protection operations; wherein, the data protection operations include at least one of the following: turning off the display screen, sounding an alarm, and erasing data.

[0035] As an example, after confirming the device's data protection command, the chip module can control the operating system or underlying hardware to perform corresponding data protection operations. Therefore, even if the device is disconnected from the network or restarted, the chip module can still independently control the protection behavior, improving reliability.

[0036] In some embodiments, S204 may include: controlling the operating system to execute the sound alarm; if the device is detected to be running, controlling the operating system to turn off the display screen; if a preset time safety threshold is detected and no message carrying a retrieval confirmation instruction associated with the device is detected, controlling the operating system to execute the data erasure.

[0037] As an example, when the device receives a loss or alarm command, the system controls the operating system via the chip module to trigger an audio prompt. The system also determines that the device is currently running and can forcibly turn off the display screen to prevent other users from operating, reading, or photographing the screen content. If the device is already powered off, this action is skipped or delayed until the next power-on. Simultaneously, the system continuously times the process. If a certain time safety threshold is exceeded after the device is lost, and the main control terminal or button terminal does not send a retrieval confirmation message to the device, meaning the device is still marked as lost, a data erasure operation is automatically performed to clear local sensitive information or destroy encryption keys, thus preventing data leakage.

[0038] In some embodiments, controlling the operating system to perform the data erasure includes: controlling the operating system to destroy the key storage area; controlling the operating system to perform multiple physical overwrites on the flash memory medium; and controlling the operating system to disconnect the power supply path to the control circuit.

[0039] In one exemplary implementation, after the user confirms the device is lost, pressing the button on the device for 3 seconds sends an encrypted command to the main control unit via the BeiDou satellite. The main control unit broadcasts this command across the entire network. Upon receiving the command, the target device immediately locks its screen, forces a maximum volume loop, and sends its location back at dynamic intervals of 5 minutes to 1 hour. Simultaneously, a three-tiered timer is activated: 0-8 hours only a screen lock notification; after 8 hours, payments are frozen and the IMEI is blacklisted; after 120 hours, a triple self-destruct mechanism is executed, consisting of AES key melting, three physical erasures of the embedded multimedia card, and power-off of the motherboard fuse. Within 120 hours, the user can cancel the anti-loss and self-destruct system by pressing the button, resetting the timer.

[0040] In this embodiment, the device monitors the downlink communication frequency band of the satellite and receives downlink packets that match its own device identifier. It decrypts and parses the downlink packets to obtain device data protection instructions. Through the chip module, it obtains its own location information according to the instructions and reports this information to the main control unit. The chip module executes the loss instruction, controlling the operating system to perform data protection operations. Therefore, remote locking, location tracking, and self-destruction can be achieved when the device is in a network-free or offline state.

[0041] Please see Figure 3 , Figure 3This is a schematic diagram illustrating the data protection method of the device described in this application. Specifically, after the factory writes the corresponding device identifier and device data protection command to an independent button terminal, the chip module within the button terminal packages the message and encrypts it using the domestic SM2 / SM4 algorithm to generate an uplink message. When the button terminal is triggered, the device terminal bursts transmission at approximately 10W power in the uplink communication band (L band) for about 0.2 seconds, sending the encrypted uplink message to the GEO satellite terminal approximately 36,000 kilometers from Earth. After receiving the message, the satellite terminal forwards it to the BeiDou short message master control terminal. The master control terminal completes identity verification, decryption, re-encryption, and generates a downlink message, the entire process taking approximately 0.5 seconds. Subsequently, the master control terminal broadcasts the downlink message in the downlink communication band (S band, 2492±4MHz) via the satellite terminal, placing the downlink message into the outgoing frame for broadcast. All device terminals can listen to the broadcast, but only those with matching device identifiers will save the corresponding information. After receiving the downlink message, the device terminal decrypts it using its local SM4 key, parses out the device data protection command, and executes it. Then, the device transmits the encrypted real-time location information back to the main control unit via satellite. The main control unit stores the location information in the corresponding account for user retrieval. The chip module's built-in power metering unit can monitor the voltage and current of the battery cells in the chip module in real time, dynamically adjusting the transmission power and transmission interval to maximize battery life within a 120-hour buffer period. If the battery is depleted, the timer resumes after charging. The self-destruct timer can be terminated by pressing a button again, thus ensuring end-to-end communication and security reliability. Therefore, it is compatible with all mainstream operating systems, taking into account retrieval rate, power consumption, privacy, and regulatory requirements.

[0042] Please see Figure 4 , Figure 4 This is a flowchart illustrating the third embodiment of the data protection method for the device described in this application. The data protection method is applied to the main control terminal and includes the following steps: S401, Receive uplink messages associated with the device forwarded by the satellite; wherein, in response to a device loss command, the button sends the uplink messages to the satellite in a burst manner within the uplink communication frequency band, so that the satellite forwards the uplink messages to the master control terminal; S402, the uplink message is re-encrypted to obtain the downlink message; S403, forward the downlink message to the satellite terminal so that the satellite terminal broadcasts the downlink message in the downlink communication frequency band so that the device terminal listens for messages in the downlink communication frequency band, receives the downlink message associated with the device terminal, parses the downlink message to obtain the device data protection instruction, and executes the data protection strategy in response to the device data protection instruction.

[0043] S401, S402, and S403 can be as described in the first embodiment above, and will not be repeated here.

[0044] In this embodiment, the button terminal transmits an uplink message carrying the device identifier and device data protection instructions to the satellite terminal via a short burst in the uplink communication band. The satellite terminal relays the message to the ground master control terminal, which verifies and re-encrypts it to generate a downlink message, which is then broadcast cyclically in the downlink communication band via the satellite terminal. By listening to the downlink broadcast, receiving and decrypting the matching downlink message, and parsing it, data protection operations can be performed in offline or physically isolated scenarios, effectively protecting the data of mobile devices in offline or physically isolated scenarios.

[0045] Please see Figure 5 , Figure 5 This is a flowchart illustrating the fourth embodiment of the data protection method for the device described in this application. The data protection method for the device is applied to a button and includes the following steps: S501, Receive the device identifier and the device data protection instruction from the device end; As an example, a device identifier can be uniquely identifying information about the device, such as a device ID, serial number, or satellite terminal number, used to correctly identify the device in subsequent communications. Device data protection commands can include operations such as data encryption, erasure, locking, and backup; adjustments to data access permissions; and updates to the device's security status.

[0046] S502, the device identifier and the device data protection instruction are encapsulated and encrypted to generate an uplink message.

[0047] As an example, encapsulation can involve organizing device identifiers and instructions into data packets according to a communication protocol format, enabling them to be identified and processed by the satellite. Encrypting the encapsulated data prevents interception or tampering during transmission. Then, a data message conforming to the uplink communication format requirements is generated. Thus, when the user presses the trigger button on the button, the pre-encapsulated and encrypted uplink message can be sent to the satellite within the uplink communication frequency band.

[0048] S503, in response to a device loss command, sends an uplink message associated with the device to a satellite in a burst manner within the uplink communication frequency band. The satellite then forwards the uplink message to the master control unit, which re-encrypts the uplink message to obtain a downlink message. The master control unit then forwards the downlink message to the satellite, which broadcasts the downlink message within the downlink communication frequency band. The device then listens for messages within the downlink communication frequency band, receives the downlink message associated with the device, parses the downlink message to obtain a device data protection command, and executes a data protection strategy in response to the device data protection command.

[0049] S503 can be as described in the first embodiment above, and will not be repeated here.

[0050] In this embodiment, the button terminal transmits an uplink message carrying the device identifier and device data protection instructions to the satellite terminal via a short burst in the uplink communication band. The satellite terminal relays the message to the ground master control terminal, which verifies and re-encrypts it to generate a downlink message, which is then broadcast cyclically in the downlink communication band via the satellite terminal. By listening to the downlink broadcast, receiving and decrypting the matching downlink message, and parsing it, data protection operations can be performed in offline or physically isolated scenarios, effectively protecting the data of mobile devices in offline or physically isolated scenarios.

[0051] Please see Figure 6 , Figure 6 This is an exemplary structural block diagram of an electronic device for the data protection method of the device described in this application. Figure 6 As shown, the electronic device 600 of this application may include a processor 601 and a memory 602, wherein the processor 601 and the memory 602 communicate via a bus. The memory 602 stores program instructions for data protection of the device. When the program instructions are executed by the processor 601, the processor performs the aforementioned related method steps to implement a data protection method for the device in the above embodiments.

[0052] Please see Figure 7 , Figure 7 This is an exemplary structural block diagram of a computer-readable storage medium for the data protection method of the device described in this application. Figure 7 As shown, the computer-readable storage medium 700 stores a computer program 701. When the computer program 701 is run by a processor on a computer, it causes the computer to perform the aforementioned related method steps to implement a data protection method for a device in the above embodiments.

[0053] The above scheme involves the button terminal transmitting an uplink message carrying the device identifier and data protection instructions to the satellite terminal via a short burst in the uplink communication band. The satellite terminal relays this message to the ground control terminal, which verifies and re-encrypts it to generate a downlink message, which is then broadcast cyclically in the downlink communication band via the satellite terminal. By listening to the downlink broadcast on the device terminal, receiving and decrypting the matching downlink message, and parsing it, data protection operations can be performed in offline or physically isolated scenarios, effectively protecting the data of mobile devices in these environments.

[0054] In the several embodiments provided in this application, it should be understood that the disclosed methods, electronic devices, and storage media can be implemented in other ways. For example, the device embodiments described above are merely illustrative; for instance, the division of modules or units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the mutual coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection of devices or units may be electrical, mechanical, or other forms.

[0055] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment, depending on actual needs.

[0056] Furthermore, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit. The integrated unit can be implemented in hardware or as a software functional unit.

[0057] If the integrated unit is implemented as a software functional unit and sold or used as an independent product, it can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or all or part of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) or processor to execute all or part of the steps of the data protection method of the device described in various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0058] The above description is merely an embodiment of this application and does not limit the patent scope of this application. Any equivalent structural or procedural transformations made using the content of this application's specification and drawings, or direct or indirect applications in other related technical fields, are similarly included within the patent protection scope of this application.

Claims

1. A data protection method for a device, characterized in that, The data protection method for the device is applied at the device end, and the data protection method for the device includes: The system monitors messages within the downlink communication frequency band and receives downlink messages associated with the device. In response to a device loss command, the system sends the uplink message to the satellite in a burst manner within the uplink communication frequency band via a button. The satellite then forwards the uplink message to the master control unit, which re-encrypts the uplink message to obtain the downlink message. The master control unit then forwards the downlink message to the satellite, which broadcasts the downlink message within the downlink communication frequency band. The downlink message is parsed to obtain the device data protection instruction; In response to the device data protection command, a data protection policy is executed.

2. The data protection method for the device according to claim 1, characterized in that, The device includes a chip module and an operating system. The chip module is powered independently of the device's power supply or charging status. The execution of a data protection strategy in response to a device data protection command includes: The chip module obtains the location information of the device and sends the location information to the main control terminal. In response to the device data protection command, the operating system is controlled to perform data protection operations; wherein the data protection operations include at least one of the following: turning off the display screen, issuing an audible alarm, and erasing data.

3. The data protection method for the device according to claim 2, characterized in that, The chip module includes a chip unit and a battery unit. The step of obtaining the location information of the device through the chip module and sending the location information to the main control terminal includes: The current state parameters of the battery cell are obtained through the chip unit; The return time interval is determined based on the aforementioned status parameters; Based on the backhaul time interval, the location information of the device is obtained and sent to the master control terminal.

4. The data protection method for the device according to claim 2, characterized in that, The control of the operating system to perform data protection operations includes: Control the operating system to execute the sound alarm; If the device is detected to be running, the operating system is controlled to turn off the display screen. If the current time safety threshold is exceeded and no message carrying a retrieval confirmation instruction associated with the device is detected, the operating system is controlled to perform the data erasure.

5. The data protection method for the device according to claim 4, characterized in that, The control of the operating system to perform the data erasure includes: Control the operating system to destroy the key storage area; The operating system is controlled to perform multiple physical overwrites on the flash memory medium; The operating system is controlled to disconnect the power supply path to the control circuit.

6. A data protection method for a device, characterized in that, The data protection method of the device is applied to the main control terminal, and the data protection method of the device includes: Receive uplink messages associated with the device from the satellite terminal; wherein, in response to a device loss command, the button terminal sends the uplink message to the satellite terminal in a burst manner within the uplink communication frequency band, so that the satellite forwards the uplink message to the master control terminal; The uplink message is re-encrypted to obtain the downlink message; The downlink message is forwarded to the satellite terminal, so that the satellite terminal broadcasts the downlink message in the downlink communication frequency band, so that the device terminal listens for messages in the downlink communication frequency band, receives the downlink message associated with the device terminal, parses the downlink message to obtain the device data protection instruction, and executes the data protection strategy in response to the device data protection instruction.

7. A data protection method for a device, characterized in that, The data protection method of the device is applied to the button end, and the data protection method of the device includes: In response to a device loss command, an uplink message associated with the device is sent to a satellite in a burst manner within the uplink communication frequency band. The satellite then forwards the uplink message to the master control unit, which re-encrypts the uplink message to obtain a downlink message. The master control unit then forwards the downlink message to the satellite, which broadcasts the downlink message within the downlink communication frequency band. The device then listens for messages within the downlink communication frequency band, receives the downlink message associated with the device, parses the downlink message to obtain a device data protection command, and executes a data protection strategy in response to the device data protection command.

8. The data protection method for the device according to claim 7, characterized in that, The step of responding to a device loss command by bursting uplink messages associated with the device to the satellite within the uplink communication band includes: Receive the device identifier and the device data protection command from the device terminal; The device identifier and the device data protection instruction are encapsulated and encrypted to generate the uplink message.

9. An electronic device, characterized in that, The electronic device includes: Memory, used to store executable program code; A processor is configured to call and run the executable program code from the memory, causing the electronic device to perform the data protection method of the device as described in any one of claims 1 to 5, 6, or 7 to 8.

10. A computer-readable storage medium, characterized in that, The computer-readable storage medium stores a computer program that, when executed by a processor, implements the data protection method of the device as described in any one of claims 1 to 5, 6, or 7 to 8.

Images