Access alert method and electronic device

Abstract

Embodiments of the present application provide an access alert method. The method comprises: upon detecting that a first application accesses a sensitive resource, displaying a display object on a display interface of an electronic device, wherein the display object is used to alert a user that the first application is accessing the sensitive resource, the display object is rendered via a trusted execution environment (TEE), and during the process in which the first application accesses the sensitive resource, the display object is always displayed on a current display interface of the electronic device. According to the method, during the process in which an application accesses a sensitive resource, the access behavior of the application can be presented explicitly and clearly on a display interface of the electronic device, and the presentation is always displayed on an upper layer and is not occluded by other displayed content. The user's level of awareness of the sensitive access behavior of the application can be enhanced.

Description

Method and electronic device for reminding access

[0001] The present application claims priority to the Chinese patent application No. 202410685566.6, filed on May 29, 2024, and entitled "Method and electronic device for reminding access", the content of which is incorporated herein by reference in its entirety. TECHNICAL FIELD

[0002] Embodiments of the present application relate to the field of access reminding, and more particularly, to a method and an electronic device for reminding access. BACKGROUND

[0003] With the gradual enrichment of the functions of applications, more and more applications need to access system sensitive resources such as camera, microphone, geographic location, etc. when performing certain operations. In order to achieve a user's safe and private experience and in response to the user's privacy needs, a reminder needs to be issued to the user when the application accesses the system sensitive resources.

[0004] However, the current reminding method has the problems of unclear expression, weak user perception, weak presentation form, and easy to be covered by other events. SUMMARY

[0005] The present application provides a method and an electronic device for reminding access, by which the access behavior of an application can be presented explicitly and clearly on the display interface of the electronic device during the process of the application accessing sensitive resources, and the presentation is always displayed on the upper layer and is not blocked by other display content. The user's perception of the sensitive access behavior of the application can be enhanced.

[0006] In a first aspect, a method for reminding access is provided, the method being applied to an electronic device, and the method comprising: displaying a display object on a display interface of the electronic device when detecting that a first application accesses a sensitive resource, the display object being used to remind a user that the first application is accessing the sensitive resource, the display object being drawn via a trusted execution environment (TEE), wherein the display object is always displayed on the current display interface of the electronic device during the process of the first application accessing the sensitive resource. In some embodiments, the sensitive resource comprises one or more of location information of the electronic device, a microphone of the electronic device, and a camera of the electronic device.

[0007] In some embodiments, the display object is an indicator element.

[0008] The indication element is a display element used for a specific indication function, which can be an indication dot, an indication icon, an indication number, an indication word, an indication symbol, etc. The display effect of the indication dot can be a bright dot with a color displayed on the screen of the electronic device.

[0009] In the process of application access to the sensitive resource, the application access behavior can be presented on the display interface of the electronic device in a clear and explicit manner, and the presentation is always displayed on the upper layer and is not blocked by other display contents. The perception degree of the user on the sensitive access behavior of the application can be enhanced.

[0010] In combination with the first aspect, in a possible implementation manner, after the object is drawn via the TEE, the object is displayed on the first layer, which is an upper layer, so as to realize that, in the process of the first application accessing the sensitive resource, the display object is always displayed on the current display interface of the electronic device, and the upper layer is an anti-covering layer and / or an anti-tampering layer.

[0011] In some embodiments, after the display object is drawn via the trusted execution environment (TEE), the display object is configured for display in the TEE. Hardware recognizable instructions can be generated through the display configuration, the hardware recognizable instructions are stored in a secure domain, and then the hardware display driver displays the display object on the first layer according to the hardware recognizable instructions.

[0012] The secure domain is a trusted environment area in the system of the electronic device, which can be an area independent of the TEE, can be an area intersecting with the TEE, or can belong to the TEE.

[0013] In some embodiments, the first layer can be the uppermost layer in all layers corresponding to the current display interface of the electronic device.

[0014] The first layer can be a layer specially created by the TEE for displaying the display object.

[0015] In some embodiments, the display object displayed on the first layer is drawn via the TEE, so that the first layer has a security attribute. The security attribute of the first layer can be reflected in that the first layer has access restrictions, for example, the access permission is that the TEE can read and write, and the display subsystem intellectual property (DSS IP) can read. This can prevent the first layer and the display object displayed on the first layer from being tampered.

[0016] In the process of the application accessing the system sensitive resource, the layer of the display object is always the upper layer in all layers corresponding to the current display interface of the electronic device, so that the display object is always displayed on the display interface of the electronic device and can be perceived by the user, and the non-covering of the display object is realized.

[0017] In a possible implementation manner of the first aspect, the display object is displayed in a first window, and the first window is a top window in all windows corresponding to the current display interface of the electronic device.

[0018] In the process of the application accessing the system sensitive resource, the layer of the display object is always the upper layer in all layers corresponding to the current display interface of the electronic device, so that the display object is always displayed on the display interface of the electronic device and can be perceived by the user, and the non-covering of the display object is realized.

[0019] In a possible implementation manner of the first aspect, before the display object is displayed on the display interface of the electronic device, the method further includes: displaying a first dynamic effect in the first interface control when it is detected that the first application accesses the sensitive resource, and the first dynamic effect is used to remind the user that the first application is accessing the sensitive resource; and displaying the display object on the display interface of the electronic device includes: displaying the display object on the display interface of the electronic device when the first dynamic effect is displayed.

[0020] In a possible implementation manner of the first aspect, displaying the first dynamic effect in the first interface control includes: determining whether the first interface control is displayed in the current display interface of the electronic device; and displaying the first dynamic effect in the first interface control when the first interface control is displayed in the current display interface of the electronic device.

[0021] In a possible implementation manner of the first aspect, the first interface control includes a status bar.

[0022] In the process of the application accessing the system sensitive resource, the layer of the display object is always the upper layer in all layers corresponding to the current display interface of the electronic device, so that the display object is always displayed on the display interface of the electronic device and can be perceived by the user, and the non-covering of the display object is realized.

[0023] With reference to the first aspect, in a possible implementation manner, when it is detected that the first application accesses the sensitive resource, the display object is displayed on the display interface of the electronic device, including: when it is detected that the first application accesses the sensitive resource, it is determined according to the access permission information of the first application whether access reminding is needed; and when it is determined that access reminding is needed, the display object is displayed on the display interface of the electronic device.

[0024] With reference to the first aspect, in a possible implementation manner, the determining whether access reminding is needed according to the access permission information of the first application includes: obtaining the access permission information of the first application, the access permission information of the first application being set by a user or set by default by a system; and when the access permission information of the first application includes information indicating that the first application is allowed to access the sensitive resource, it is determined that access reminding is needed.

[0025] In the embodiment of the present application, when it is detected that the application accesses the system sensitive resource, it can be determined according to the access permission information of the application whether the application can successfully access the system sensitive resource (i.e., whether the application is allowed to access the system sensitive resource), and the display of the display object is performed only when the application can successfully access the system sensitive resource, so that the false display of the display object can be avoided.

[0026] With reference to the first aspect, in a possible implementation manner, the color of the display object is a first color, and the first color corresponds to the sensitive resource.

[0027] Similarly, the color presented by the first dynamic effect is a first color, and the first color corresponds to the sensitive resource.

[0028] In the embodiment of the present application, different colors can be used in the presentation of the dynamic effect and / or the display object for the access of different system sensitive resources, so that the user can directly perceive the category of the currently accessed system sensitive resource according to the color of the display object, and the perception degree of the user for the access behavior of the system sensitive resource can be further enhanced.

[0029] With reference to the first aspect, in a possible implementation manner, the method includes: when it is detected that the first application ends accessing the sensitive resource, the display object is removed from the display interface of the electronic device.

[0030] The second aspect provides an electronic device, including: a display module, configured to display a display object on a display interface of the electronic device when it is detected that a first application accesses a sensitive resource, the display object being used to remind a user that the first application is accessing the sensitive resource, wherein the display object is drawn via a trusted execution environment (TEE), and the display object is always displayed on a current display interface of the electronic device in a process in which the first application accesses the sensitive resource.

[0031] In some embodiments, the sensitive resource comprises one or more of location information of the electronic device, a microphone of the electronic device, a camera of the electronic device.

[0032] In some embodiments, the display object is an indication element.

[0033] The indication element is a display element used for a specific indication function, which can be, for example, an indication dot, an indication icon, an indication number, an indication word, an indication symbol, etc.

[0034] In the embodiments of the present application, in the process of application accessing the sensitive resource, the display interface of the electronic device can clearly present the access behavior of the application, and the presentation is always displayed on the upper layer and is not blocked by other display contents. The perception degree of the user on the sensitive access behavior of the application can be enhanced.

[0035] In combination with the second aspect, in a possible implementation manner, after the display object is drawn via the TEE, the display object is displayed on the first layer, which is an upper layer, so as to realize that, in the process of the first application accessing the sensitive resource, the display object is always displayed on the current display interface of the electronic device, and the upper layer is an anti-covering layer and / or an anti-tampering layer.

[0036] In some embodiments, after the display object is drawn via the trusted execution environment (TEE), the display object is configured for display in the TEE. The display configuration can generate hardware recognizable instructions, which are stored in a secure domain. Then, the hardware display driver displays the display object on the first layer according to the hardware recognizable instructions.

[0037] The secure domain is a trusted environment area in the system of the electronic device. The secure domain can be an area independent of the TEE, can be an area intersecting with the TEE, or can belong to the TEE.

[0038] In some embodiments, the first layer can be the uppermost layer in all layers corresponding to the current display interface of the electronic device.

[0039] The first layer can be a layer specially created by the TEE for displaying the display object.

[0040] In some embodiments, the display object displayed on the first layer is drawn via the TEE, which makes the first layer have a security attribute, and the security attribute of the first layer can be embodied in that the first layer has access restrictions, for example, the access permissions are: TEE read-write, DSS IP readable. This can prevent the first layer and the display object displayed on the first layer from being tampered with.

[0041] In the embodiments of the present application, in the process of the application accessing the system sensitive resource, the layer on which the display object is displayed is always the upper layer among all the layers corresponding to the current display interface of the electronic device, so that the display object can always be displayed on the display interface of the electronic device and can be perceived by the user, and the non-coverability of the display object display is realized.

[0042] In combination with the second aspect, in a possible implementation manner, the display object is displayed on the first window, and the first window is the top window among all the windows corresponding to the current display interface of the electronic device.

[0043] In the embodiments of the present application, when the display object needs to be displayed, the display object is drawn by newly creating a window, and in the process of the application accessing the system sensitive resource, the window on which the display object is displayed is always the topmost window among the multiple windows corresponding to the current display interface of the electronic device and will not be covered by other display windows, so that the display object can always be displayed on the display interface of the electronic device and can be perceived by the user, and the non-coverability of the display object display is realized.

[0044] In combination with the second aspect, in a possible implementation manner, the electronic device further includes that the display module is specifically used for: displaying a first dynamic effect in a first interface control when it is detected that the first application accesses the sensitive resource, the first dynamic effect being used for reminding the user that the first application is accessing the sensitive resource; and displaying the display object on the display interface of the electronic device when the first dynamic effect is displayed.

[0045] In combination with the second aspect, in a possible implementation manner, the electronic device further includes: a determination module configured to determine whether the first interface control is displayed in the current display interface of the electronic device; and the display module is specifically used for: displaying the first dynamic effect in the first interface control when the first interface control is displayed in the current display interface of the electronic device.

[0046] In combination with the second aspect, in a possible implementation manner, the first interface control includes a status bar.

[0047] In the embodiments of this application, when it is detected that an application accesses a system sensitive resource, the corresponding dynamic effect can be played first to present a prompt, and then the prompt can be presented in the form of a display object, so that the real-time access behavior of the application to the system sensitive resource can be presented more explicitly, and the perception degree of the user to the sensitive access behavior of the application can be further enhanced.

[0048] With reference to the second aspect, in a possible implementation, the determining module is further configured to: when it is detected that the first application accesses the sensitive resource, determine whether access prompting is needed according to the access permission information of the first application; and the display module is further configured to: when it is determined that access prompting is needed, display the display object on the display interface of the electronic device.

[0049] With reference to the second aspect, in a possible implementation, the electronic device further includes: an obtaining module configured to obtain the access permission information of the first application, the access permission information of the first application being set by a user or set by default by a system; and the determining module is specifically configured to: when the access permission information of the first application includes information indicating that the first application is allowed to access the sensitive resource, determine that access prompting is needed.

[0050] In the embodiments of this application, when it is detected that an application accesses a system sensitive resource, whether the application can successfully access the system sensitive resource (i.e., whether the application is allowed to access the system sensitive resource) can be determined according to the access permission information of the application, and the display object is displayed only when the application can successfully access the system sensitive resource, so that the false display of the display object can be avoided.

[0051] With reference to the second aspect, in a possible implementation, the color of the display object is a first color, and the first color corresponds to the sensitive resource.

[0052] Similarly, the color presented by the first dynamic effect is a first color, and the first color corresponds to the sensitive resource.

[0053] In the embodiments of this application, different colors can be used in the presentation of dynamic effects and / or display objects for the access of different system sensitive resources, so that the user can directly perceive the category of the currently accessed system sensitive resource according to the color of the display object, and the perception degree of the user to the access behavior of the system sensitive resource can be further enhanced.

[0054] With reference to the second aspect, in a possible implementation, the display module is further configured to: when it is detected that the first application ends the access to the sensitive resource, cancel the display of the display object on the display interface of the electronic device.

[0055] In a third aspect, an electronic device is provided, which includes a memory and a processor, wherein the memory is configured to store computer program code, and the processor is configured to execute the computer program code stored in the memory to implement the method in the first aspect or any possible implementation manner of the first aspect.

[0056] In a fourth aspect, a computer readable storage medium is provided, which stores a computer program or instructions, and when the computer program or instructions are executed, the method in the first aspect or any possible implementation manner of the first aspect is implemented.

[0057] In a fifth aspect, a chip is provided, which stores instructions, and when the instructions are executed on a device, the chip performs the method in the first aspect or any possible implementation manner of the first aspect.

[0058] In a sixth aspect, a computer program product is provided, which stores a computer program or instructions, and when the computer program or instructions are executed, the method in the first aspect or any possible implementation manner of the first aspect is implemented. BRIEF DESCRIPTION OF DRAWINGS

[0059] FIG. 1 is a structural schematic diagram of an electronic device according to an embodiment of the present application;

[0060] FIG. 2 is a software structure block diagram of an electronic device according to an embodiment of the present application;

[0061] FIG. 3 is a schematic diagram of a method for accessing a reminder;

[0062] FIG. 4 is an interface schematic diagram of a method for accessing a reminder according to an embodiment of the present application;

[0063] FIG. 5 is an interface schematic diagram of another method for accessing a reminder according to an embodiment of the present application;

[0064] FIG. 6 is an interface schematic diagram of another method for accessing a reminder according to an embodiment of the present application;

[0065] FIG. 7 is an interface schematic diagram of a method for setting a privacy permission access of an application according to an embodiment of the present application;

[0066] FIG. 8 is a schematic flowchart of a method for accessing a reminder according to an embodiment of the present application;

[0067] FIG. 9 is a schematic flowchart of another method for accessing a reminder according to an embodiment of the present application;

[0068] FIG. 10 is a functional module schematic diagram of a device for accessing a reminder according to an embodiment of the present application;

[0069] FIG. 11 is a schematic diagram of a method for displaying a display object according to an embodiment of the present application;

[0070] FIG. 12 is a schematic diagram of another method for displaying a display object according to an embodiment of the present application. DETAILED DESCRIPTION

[0071] The technical solutions in the present application will be described below with reference to the drawings. Obviously, the described embodiments are only some of the embodiments of the present application, but not all of the embodiments.

[0072] The technical solutions in the embodiments of the present application will be described below with reference to the drawings. In the description of the embodiments of the present application, unless otherwise specified, " / " represents the meaning of "or", for example, A / B can represent A or B; "and / or" in the present application only describes the association relationship of the associated objects, which means that there can be three relationships, for example, A and / or B, which means that there are three cases of A alone, A and B together, and B alone. In addition, in the description of the embodiments of the present application, "plurality" or "multiple" means two or more than two.

[0073] In the following, the terms "first" and "second" are only for descriptive purposes and should not be construed as indicating or implying relative importance or implicitly indicating the number of the indicated technical features. Therefore, the features defined with "first" and "second" can explicitly or implicitly include one or more features. In the description of the embodiments, unless otherwise specified, the meaning of "multiple" is two or more than two.

[0074] The terms used in the following embodiments are only for the purpose of describing specific embodiments and are not intended to be limiting on the present application. As used in the specification and the appended claims of the present application, the singular forms "a," "an," and "the" are intended to include, for example, the expression "one or more," unless the context clearly indicates otherwise. It should also be understood that in the following embodiments of the present application, "at least one" or "one or more" means one, two or more than two. The term "and / or" is used to describe the association relationship of the associated objects, which means that there can be three relationships; for example, A and / or B, which means that there are three cases of A alone, A and B together, and B alone, where A and B can be singular or plural. The character " / " generally represents an "or" relationship between the associated objects before and after.

[0075] Reference within this specification to "one embodiment" or "an embodiment" or "some embodiments" means that a particular feature, structure, or characteristic described in connection with the embodiment is included in at least one embodiment of the application. The appearances of the phrase "in one or more embodiments" within this specification are not necessarily all referring to the same embodiment, although it can. In addition, the terms "comprises", "comprising", "has", "having", "includes", "including", "contains", "containing" or variations thereof are intended to mean "including but not limited to", unless expressly specified otherwise.

[0076] The method provided by the embodiments of the present application can be applied to electronic devices such as mobile phones, tablet computers, wearable devices, vehicle-mounted devices, augmented reality (AR) / virtual reality (VR) devices, notebook computers, ultra-mobile personal computers (UMPCs), netbooks, personal digital assistants (PDAs), and the like. The embodiments of the present application do not make any limitation on the specific type of electronic device.

[0077] For example, FIG. 1 shows a structural schematic diagram of an electronic device 100. The electronic device 100 can include a processor 110, an external memory interface 120, an internal memory 121, a universal serial bus (USB) interface 130, a charging management module 140, a power management module 141, a battery 142, an antenna 1, an antenna 2, a mobile communication module 150, a wireless communication module 160, an audio module 170, a loudspeaker 170A, a receiver 170B, a microphone 170C, a headset interface 170D, a sensor module 180, a key 190, a motor 191, an indicator 192, a camera 193, a display screen 194, and a subscriber identification module (SIM) card interface 195, etc. The sensor module 180 can include a pressure sensor 180A, a gyroscope sensor 180B, a barometric pressure sensor 180C, a magnetic sensor 180D, an acceleration sensor 180E, a distance sensor 180F, a proximity light sensor 180G, a fingerprint sensor 180H, a temperature sensor 180J, a touch sensor 180K, an ambient light sensor 180L, a bone conduction sensor 180M, etc.

[0078] It is understood that the structures illustrated in the embodiments of this application do not constitute a specific limitation on the electronic device 100. In other embodiments of this application, the electronic device 100 may include more or fewer components than illustrated, or combine some components, or split some components, or have different component arrangements. The illustrated components may be implemented in hardware, software, or a combination of software and hardware.

[0079] Processor 110 may include one or more processing units, such as: application processor (AP), modem processor, graphics processing unit (GPU), image signal processor (ISP), controller, memory, video codec, digital signal processor (DSP), baseband processor, and / or neural network processing unit (NPU), etc. Different processing units may be independent devices or integrated into one or more processors.

[0080] The controller can be the nerve center and command center of the electronic device 100. The controller can generate operation control signals according to the instruction opcode and timing signals to complete the control of fetching and executing instructions.

[0081] The processor 110 may also include a memory for storing instructions and data. In some embodiments, the memory in the processor 110 is a cache memory. This memory can store instructions or data that the processor 110 has just used or that are used repeatedly. If the processor 110 needs to use the instruction or data again, it can retrieve it directly from the memory. This avoids repeated accesses, reduces the waiting time of the processor 110, and thus improves the efficiency of the system.

[0082] In some embodiments, the processor 110 may include one or more interfaces. Interfaces may include an inter-integrated circuit (I2C) interface, an inter-integrated circuit sound (I2S) interface, a pulse code modulation (PCM) interface, a universal asynchronous receiver / transmitter (UART) interface, a mobile industry processor interface (MIPI), a general-purpose input / output (GPIO) interface, a subscriber identity module (SIM) interface, and / or a universal serial bus (USB) interface, etc.

[0083] USB port 130 is a USB standard compliant interface, specifically a Mini USB port, Micro USB port, USB Type-C port, etc. USB port 130 can be used to connect a charger to charge electronic device 100, and can also be used for data transfer between electronic device 100 and peripheral devices. It can also be used to connect headphones for audio playback. This interface can also be used to connect other electronic devices, such as AR devices.

[0084] It is understood that the interface connection relationships between the modules illustrated in the embodiments of this application are merely illustrative and do not constitute a structural limitation on the electronic device 100. In other embodiments of this application, the electronic device 100 may also employ different interface connection methods or combinations of multiple interface connection methods as described in the above embodiments.

[0085] The charging management module 140 receives charging input from a charger. The charger can be a wireless charger or a wired charger. In some wired charging embodiments, the charging management module 140 receives charging input from the wired charger via the USB interface 130. In some wireless charging embodiments, the charging management module 140 receives wireless charging input via the wireless charging coil of the electronic device 100. While charging the battery 142, the charging management module 140 can also supply power to the electronic device via the power management module 141.

[0086] The power management module 141 connects the battery 142, the charging management module 140, and the processor 110. The power management module 141 receives input from the battery 142 and / or the charging management module 140, providing power to the processor 110, internal memory 121, external memory, display screen 194, camera 193, and wireless communication module 160, etc. The power management module 141 can also monitor parameters such as battery capacity, battery cycle count, and battery health status (leakage current, impedance). In some other embodiments, the power management module 141 may also be located within the processor 110. In other embodiments, the power management module 141 and the charging management module 140 may be located in the same device.

[0087] The wireless communication function of electronic device 100 can be realized through antenna 1, antenna 2, mobile communication module 150, wireless communication module 160, modem processor and baseband processor, etc.

[0088] Antenna 1 and antenna 2 are used to transmit and receive electromagnetic wave signals. Each antenna in electronic device 100 can be used to cover one or more communication frequency bands. Different antennas can also be multiplexed to improve antenna utilization. For example, antenna 1 can be multiplexed as a diversity antenna for a wireless local area network. In some other embodiments, the antennas can be used in conjunction with tuning switches.

[0089] The mobile communication module 150 can provide solutions for wireless communication, including 2G / 3G / 4G / 5G, applied to the electronic device 100. The mobile communication module 150 may include at least one filter, switch, power amplifier, low noise amplifier (LNA), etc. The mobile communication module 150 can receive electromagnetic waves via antenna 1, and perform filtering, amplification, and other processing on the received electromagnetic waves before transmitting them to a modem processor for demodulation. The mobile communication module 150 can also amplify the signal modulated by the modem processor and convert it into electromagnetic waves for radiation via antenna 1. In some embodiments, at least some functional modules of the mobile communication module 150 may be housed in the processor 110. In some embodiments, at least some functional modules of the mobile communication module 150 and at least some modules of the processor 110 may be housed in the same device.

[0090] The modem processor may include a modulator and a demodulator. The modulator modulates the low-frequency baseband signal to be transmitted into a mid-to-high frequency signal. The demodulator demodulates the received electromagnetic wave signal into a low-frequency baseband signal. The demodulator then transmits the demodulated low-frequency baseband signal to the baseband processor for processing. After processing by the baseband processor, the low-frequency baseband signal is transmitted to the application processor. The application processor outputs sound signals through an audio device (not limited to speaker 170A, receiver 170B, etc.) or displays images or videos through the display screen 194. In some embodiments, the modem processor may be a separate device. In other embodiments, the modem processor may be independent of the processor 110 and may be housed in the same device as the mobile communication module 150 or other functional modules.

[0091] The wireless communication module 160 can provide solutions for wireless communication applications on the electronic device 100, including wireless local area networks (WLAN) (such as wireless fidelity (Wi-Fi) networks), Bluetooth (BT), global navigation satellite system (GNSS), frequency modulation (FM), near field communication (NFC), and infrared (IR) technologies. The wireless communication module 160 can be one or more devices integrating at least one communication processing module. The wireless communication module 160 receives electromagnetic waves via antenna 2, performs frequency modulation and filtering of the electromagnetic wave signals, and sends the processed signal to processor 110. The wireless communication module 160 can also receive signals to be transmitted from processor 110, perform frequency modulation and amplification, and convert them into electromagnetic waves for radiation via antenna 2.

[0092] In some embodiments, antenna 1 of electronic device 100 is coupled to mobile communication module 150, and antenna 2 is coupled to wireless communication module 160, enabling electronic device 100 to communicate with networks and other devices via wireless communication technology. The wireless communication technology may include Global System for Mobile Communications (GSM), General Packet Radio Service (GPRS), Code Division Multiple Access (CDMA), Wideband Code Division Multiple Access (WCDMA), Time-Division Code Division Multiple Access (TD-SCDMA), Long Term Evolution (LTE), BT, GNSS, WLAN, NFC, FM, and / or IR technologies, etc. The GNSS may include the Global Positioning System (GPS), the Global Navigation Satellite System (GLONASS), the BeiDou Navigation Satellite System (BDS), the Quasi-Zenith Satellite System (QZSS), and / or satellite-based augmentation systems (SBAS).

[0093] Electronic device 100 implements display functions through a GPU, a display screen 194, and an application processor. The GPU is a microprocessor for image processing, connected to the display screen 194 and the application processor. The GPU is used to perform mathematical and geometric calculations and for graphics rendering. Processor 110 may include one or more GPUs, which execute program instructions to generate or modify display information.

[0094] Display screen 194 is used to display images, videos, etc. Display screen 194 includes a display panel. The display panel may be a liquid crystal display (LCD), an organic light-emitting diode (OLED), an active-matrix organic light-emitting diode (AMOLED), a flexible light-emitting diode (FLED), a miniature LED, a microLED, a quantum dot light-emitting diode (QLED), etc. In some embodiments, electronic device 100 may include one or N displays 194, where N is a positive integer greater than 1.

[0095] Electronic device 100 can perform shooting functions through ISP, camera 193, video codec, GPU, display 194 and application processor.

[0096] The ISP (Image Signal Processor) is used to process data fed back from the camera 193. For example, when taking a picture, the shutter is opened, and light is transmitted through the lens to the camera's photosensitive element. The light signal is converted into an electrical signal, and the camera's photosensitive element transmits the electrical signal to the ISP for processing, transforming it into an image visible to the naked eye. The ISP can also perform algorithmic optimization of image noise, brightness, and skin tone. The ISP can also optimize parameters such as exposure and color temperature of the shooting scene. In some embodiments, the ISP can be set in the camera 193.

[0097] Camera 193 is used to capture still images or videos. An object is projected onto a photosensitive element by generating an optical image through the lens. The photosensitive element can be a charge-coupled device (CCD) or a complementary metal-oxide-semiconductor (CMOS) phototransistor. The photosensitive element converts the light signal into an electrical signal, which is then passed to an ISP for conversion into a digital image signal. The ISP outputs the digital image signal to a DSP for processing. The DSP converts the digital image signal into image signals in standard RGB, YUV, or other formats. In some embodiments, the electronic device 100 may include one or N cameras 193, where N is a positive integer greater than 1.

[0098] Digital signal processors (DSPs) are used to process digital signals. Besides digital image signals, they can also process other digital signals. For example, when electronic device 100 selects a frequency, the DSP can perform Fourier transforms on the frequency energy.

[0099] Video codecs are used to compress or decompress digital video. Electronic device 100 may support one or more video codecs. Thus, electronic device 100 can play or record videos in various encoding formats, such as Moving Picture Experts Group (MPEG) 1, MPEG2, MPEG3, MPEG4, etc.

[0100] An NPU (Neural Processing Unit) is a computational processor for neural networks (NNs). By borrowing the structure of biological neural networks, such as the transmission patterns between neurons in the human brain, it can rapidly process input information and continuously learn on its own. NPUs enable intelligent cognitive applications in electronic devices, such as image recognition, facial recognition, speech recognition, and text understanding.

[0101] The external storage interface 120 can be used to connect an external memory card, such as a Micro SD card, to expand the storage capacity of the electronic device 100. The external memory card communicates with the processor 110 through the external storage interface 120 to perform data storage functions. For example, music, video, and other files can be saved on the external memory card.

[0102] Internal memory 121 can be used to store computer executable program code, which includes instructions. Processor 110 executes various functional applications and data processing of electronic device 100 by running the instructions stored in internal memory 121. Internal memory 121 may include a program storage area and a data storage area. The program storage area may store the operating system, at least one application required for a function (such as sound playback, image playback, etc.), etc. The data storage area may store data created during the use of electronic device 100 (such as audio data, phonebook, etc.). Furthermore, internal memory 121 may include high-speed random access memory and may also include non-volatile memory, such as at least one disk storage device, flash memory device, universal flash storage (UFS), etc.

[0103] Electronic device 100 can implement audio functions, such as music playback and recording, through audio module 170, speaker 170A, receiver 170B, microphone 170C, headphone jack 170D, and application processor.

[0104] The audio module 170 is used to convert digital audio information into analog audio signals for output, and also to convert analog audio input into digital audio signals. The audio module 170 can also be used for encoding and decoding audio signals. In some embodiments, the audio module 170 may be located in the processor 110, or some functional modules of the audio module 170 may be located in the processor 110.

[0105] The speaker 170A, also known as a "loudspeaker," is used to convert audio electrical signals into sound signals. The electronic device 100 can listen to music or make hands-free calls through the speaker 170A.

[0106] The receiver 170B, also known as the "earpiece," is used to convert audio electrical signals into sound signals. When the electronic device 100 answers a telephone call or voice message, the receiver 170B can be brought close to the ear to listen to the voice.

[0107] Microphone 170C, also known as a "microphone" or "voice transducer," is used to convert sound signals into electrical signals. When making a phone call or sending a voice message, the user can speak by bringing their mouth close to microphone 170C, inputting the sound signal into microphone 170C. Electronic device 100 may have at least one microphone 170C. In some embodiments, electronic device 100 may have two microphones 170C, which, in addition to collecting sound signals, can also perform noise reduction. In other embodiments, electronic device 100 may also have three, four, or more microphones 170C, which can collect sound signals, reduce noise, identify the sound source, and perform directional recording, etc.

[0108] The 170D headphone jack is used to connect wired headphones. The 170D headphone jack can be a USB 130 interface or a 3.5mm Open Mobile Terminal Platform (OMTP) standard interface, a CTIA (Cellular Telecommunications Industry Association of the USA) standard interface.

[0109] Buttons 190 include a power button, volume buttons, etc. Buttons 190 can be mechanical buttons or touch-sensitive buttons. Electronic device 100 can receive button input and generate key signal inputs related to user settings and function control of electronic device 100.

[0110] Motor 191 can generate vibration alerts. Motor 191 can be used for incoming call vibration alerts or for touch vibration feedback. For example, different vibration feedback effects can correspond to touch operations performed on different applications (such as taking photos, playing audio, etc.). Motor 191 can also correspond to different vibration feedback effects for touch operations performed on different areas of the display screen 194. Different application scenarios (such as time reminders, receiving messages, alarm clocks, games, etc.) can also correspond to different vibration feedback effects. The touch vibration feedback effect can also be customized.

[0111] Indicator 192 can be an indicator light, used to indicate charging status, power changes, or to indicate messages, missed calls, notifications, etc.

[0112] The SIM card interface 195 is used to connect a SIM card. The SIM card can be inserted into or removed from the SIM card interface 195 to make contact with and separate from the electronic device 100. The electronic device 100 can support one or N SIM card interfaces, where N is a positive integer greater than 1. The SIM card interface 195 can support Nano SIM cards, Micro SIM cards, SIM cards, etc. Multiple cards can be inserted into the same SIM card interface 195 simultaneously. The multiple cards can be of the same or different types. The SIM card interface 195 is also compatible with different types of SIM cards. The SIM card interface 195 is also compatible with external memory cards. The electronic device 100 interacts with the network through the SIM card to realize functions such as calls and data communication. In some embodiments, the electronic device 100 uses an embedded SIM (eSIM) card. The eSIM card can be embedded in the electronic device 100 and cannot be separated from the electronic device 100.

[0113] It should be understood that the phone cards in the embodiments of this application include, but are not limited to, SIM cards, eSIM cards, universal subscriber identity modules (USIM), universal integrated circuit cards (UICC), etc.

[0114] The software system of electronic device 100 can adopt a layered architecture, event-driven architecture, microkernel architecture, microservice architecture, or cloud architecture. This application embodiment uses the layered architecture Android system as an example to exemplify the software structure of electronic device 100.

[0115] Figure 2 is a software structure block diagram of an electronic device 100 according to an embodiment of this application. The layered architecture divides the software into several layers, each with a clear role and function. Layers communicate with each other through software interfaces. In some embodiments, the Android system is divided into four layers, from top to bottom: the application layer, the application framework layer, the Android runtime and system libraries, and the kernel layer. The application layer may include a series of application packages.

[0116] As shown in Figure 2, the application package may include applications such as camera, gallery, calendar, call, map, navigation, WLAN, Bluetooth, music, video, and SMS.

[0117] The application framework layer provides application programming interfaces (APIs) and a programming framework for applications in the application layer. The application framework layer includes some predefined functions.

[0118] As shown in Figure 2, the application framework layer may include a window manager, content provider, view system, phone manager, resource manager, notification manager, etc.

[0119] The window manager is used to manage windowed applications. It can retrieve screen size, determine the presence of a status bar, lock the screen, and capture screenshots, among other things.

[0120] Content providers store and retrieve data, making that data accessible to applications. This data may include videos, images, audio, made and received phone calls, browsing history and bookmarks, phone books, etc.

[0121] A view system includes visual controls, such as controls for displaying text and controls for displaying images. View systems can be used to build applications. A display interface can consist of one or more views. For example, a display interface including a text notification icon could include views for displaying text and views for displaying images.

[0122] The phone manager is used to provide communication functions for electronic device 100. For example, it manages call status (including connection and disconnection).

[0123] The file explorer provides applications with various resources, such as localized strings, icons, images, layout files, video files, and more.

[0124] The notification manager allows applications to display notifications in the status bar. These notifications can be used to deliver informational messages and can disappear automatically after a short pause, requiring no user interaction. For example, the notification manager can be used to notify users of completed downloads or message alerts. The notification manager can also display notifications as icons or scrolling text in the top status bar, such as notifications from background applications, or as dialog boxes on the screen. Examples include displaying text messages in the status bar, emitting sounds, vibrating electronic devices, and flashing indicator lights.

[0125] The Android Runtime consists of core libraries and a virtual machine. The Android runtime is responsible for the scheduling and management of the Android system.

[0126] The core library consists of two parts: one part is the functionalities that need to be called by the Java language, and the other part is the Android core library.

[0127] The application layer and application framework layer run in a virtual machine. The virtual machine executes the Java files of the application layer and application framework layer as binary files. The virtual machine is used to perform functions such as object lifecycle management, stack management, thread management, security and exception management, and garbage collection.

[0128] System libraries can include multiple functional modules. For example: surface manager, media libraries, 3D graphics processing libraries (e.g., OpenGL ES), 2D graphics engines (e.g., SGL), etc.

[0129] The Surface Manager is used to manage the display subsystem and provides the blending of 2D and 3D layers for multiple applications.

[0130] The media library supports playback and recording of various common audio and video formats, as well as still image files. It supports multiple audio and video encoding formats, such as MPEG4, H.264, MP3, AAC, AMR, JPG, and PNG.

[0131] The 3D graphics processing library is used to implement 3D graphics drawing, image rendering, compositing, and layer processing.

[0132] A 2D graphics engine is a graphics engine for 2D drawing.

[0133] The kernel layer is the layer between hardware and software. The kernel layer contains at least the display driver, camera driver, audio driver, and sensor driver.

[0134] It should be understood that the technical solutions in the embodiments of this application can be used in systems such as Android, iOS, and HarmonyOS.

[0135] The technical solutions of this application embodiment can be applied to electronic devices with display functions, for example. Exemplarily, they can be applied to televisions, desktop computers, laptops, in-vehicle screens, and portable electronic devices such as mobile phones, foldable screens, tablets, cameras, camcorders, video recorders, watches, and wristbands. They can also be applied to other electronic devices with display functions, and to electronic devices in 5G networks or future evolved public land mobile networks (PLMNs), etc. The main application scenario can be a reminder scenario for system resource access of electronic devices.

[0136] To better understand the solution of this application, the relevant terms involved in the embodiments of this application will be introduced below.

[0137] 1. Trusted User Interface (TUI)

[0138] TUI refers to providing trusted display and input for secure applications within a trusted execution environment (TEE). Current TUIs adhere to the GP TUI standard from the Global Platform (GP) organization. The GP standard TUI API provides developers of secure applications (TAs) with functional support for user interaction. By calling the GP TUI application programming interface (API) from a trusted application (TA) running in the TEE environment, sensitive data can be securely displayed to the user, and sensitive user input can be obtained. During TUI usage, it ensures that the screen is controlled by the TEE and is isolated from rich execution environments (REEs) and other TAs.

[0139] GP: Global Platform Organization Standard

[0140] As applications become more feature-rich, more and more applications need to access sensitive system resources, such as cameras, microphones, and geolocation, when performing certain operations. In order to provide users with a secure privacy experience and to respond to users' privacy needs, it is necessary to issue a reminder to users when applications access sensitive system resources.

[0141] Figure 3 shows a schematic diagram of an access notification method.

[0142] As shown in Figure 3(a), the electronic device 300 is currently using a map application. During the use of the map application, the electronic device 300 needs to access its location information. At this time, icon 301 is displayed in the status bar of the electronic device 300. This icon 301 is used to remind the user that the map application is accessing the location information of the electronic device 300. The icon 301 is coupled with the status bar. The icon 301 is displayed at the same time as other icons in the status bar, and the display shape is similar to that of other icons in the status bar. It is not distinguished from other icons in the status bar, and the user's perception of the icon 301 is not strong.

[0143] As shown in Figure 3(b), since the icon 301 is coupled with the status bar, when the user hides the status bar of the electronic device 300, even if the map application is currently accessing the location information of the electronic device 300, the icon 301 will also be hidden synchronously with the status bar. This means that when the application accesses the device's system sensitive resources, the behavior of accessing the system sensitive resources will not be presented, and the user will not be able to perceive the application's behavior of accessing the device's system sensitive resources, and the user's privacy and security will not be guaranteed.

[0144] Furthermore, when the current display interface is switched to the immersive display interface of the map application, the status bar is not displayed, and icon 301 is also not displayed.

[0145] Therefore, the above-mentioned access reminder method has problems such as unclear meaning, weak user perception, weak presentation, and easy obscuring by other interfaces.

[0146] In view of this, embodiments of this application provide an access notification method and an electronic device. Through this method and electronic device, during the process of an application accessing sensitive system resources, the application's access behavior can be explicitly and clearly presented on the device's display interface. Furthermore, this presentation is always displayed on top, independent of the status bar and unobstructed by other displayed content. This enhances the user's awareness of sensitive system access behavior, achieving a consumer perception of "transparency and privacy security."

[0147] It should be noted that the embodiments of this application use a mobile phone as an example for description, but this does not limit the types of electronic devices to which the solution of this application can be applied. The electronic device can also be any electronic device with screen display function, such as a tablet, a laptop, a PC screen, a vehicle screen, or a wristband. This application does not limit this.

[0148] For example, Figure 4 shows a schematic diagram of the interface of an access notification method provided in an embodiment of this application.

[0149] As shown in Figure 4(a), the electronic device 400 is currently using the first application. When the user accesses the location information of the electronic device 400 through the first application, the display interface of the electronic device switches to the one shown in Figure 4(b).

[0150] As shown in Figure 4(b), an icon 401 is displayed in the status bar of the electronic device 400. The icon 401 is used to remind the user that the first application is accessing the location information of the electronic device 400. The icon 401 can be displayed in the status bar of the electronic device 400, but the icon 401 does not depend on the status bar.

[0151] In one display method, the icon 401 presents a motion effect from left to right and from large to small in the status bar of the electronic device 400. For example, at the first moment during the motion effect playback, the icon 401 of the first size is displayed in the first position; at the second moment during the motion effect playback, the icon 401 of the second size is displayed in the second position; and at the third moment during the motion effect playback, the icon 401 of the third size is displayed in the third position, wherein the first size is larger than the second size, and the second size is larger than the third size.

[0152] As shown in Figure 4(c), after the animation of icon 401 ends, icon 401 can be displayed in the status bar of electronic device 400 in real time.

[0153] In some embodiments, icon 401 has a color identifier, such as blue or other colors, and the color of icon 401 may be determined according to the interface color of the first application, etc.

[0154] As shown in Figure 4(d), when the user hides the status bar of the electronic device 400, the icon 401 is still displayed in the current display interface of the electronic device 400 and will not be hidden synchronously with the status bar. During the process of the first application accessing the location information of the electronic device 400, the icon 401 is always displayed in the current display interface of the electronic device 400. Only when the first application finishes accessing the location information of the electronic device 400 will the icon 401 be removed from the current display interface of the electronic device 400.

[0155] For example, Figure 5 shows a schematic diagram of the interface of another access notification method provided in an embodiment of this application.

[0156] As shown in Figure 5(a), the electronic device 500 is currently using the first application. When the user calls the microphone of the electronic device 500 through the first application, the display interface of the electronic device 500 switches to the one shown in Figure 5(b).

[0157] As shown in Figure 5(b), an icon 501 is displayed in the status bar of the electronic device 500. The icon 501 is used to remind the user that the first application is accessing the microphone of the electronic device 500. The icon 501 can be displayed in the status bar of the electronic device 500, but the icon 501 is not dependent on the status bar.

[0158] In one display mode, the icon 501 is displayed in the status bar of the electronic device 500 with an animation effect that moves from left to right and from large to small.

[0159] In some embodiments, after detecting the behavior of the first application accessing the microphone of the electronic device 500, the display state of the icon 501 gradually changes from a specific icon to an indicator element. This change process can be seen, for example, in Figure 5(b): at the first moment, the icon 501 is displayed as a microphone icon; when the animation plays to the second moment, the icon 501 is displayed as a smaller microphone icon compared to the first moment; when the animation plays to the third moment, the icon 501 is displayed as an indicator element.

[0160] As shown in Figure 5(c), after the animation of icon 501 ends, icon 501 can be displayed in the status bar of electronic device 500 in real time as an indicator element.

[0161] In some embodiments, icon 501 has a color identifier, such as yellow, or other colors. The color of icon 501 may be determined based on the color corresponding to the microphone, etc.

[0162] In some embodiments, when icon 501 is presented as an indicator element, the color of the indicator element is the same as the color identifier of icon 501.

[0163] In some embodiments, based on (c) in Figure 5, when the user hides the status bar of the electronic device 500, the icon 501 is still displayed in the current display interface of the electronic device 500 and will not be hidden synchronously with the status bar. During the process of the first application accessing the microphone of the electronic device 500, the icon 501 is always displayed in the current display interface of the electronic device 500. Only when the first application ends accessing the microphone of the electronic device 400 will the icon 501 be de-displayed in the current display interface of the electronic device 500.

[0164] For example, Figure 6 shows a schematic diagram of the interface of another access notification method provided in an embodiment of this application.

[0165] As shown in Figure 6(a), the electronic device 600 is currently using the first application. When the user calls the camera of the electronic device 500 through the first application, the display interface of the electronic device 600 switches to the one shown in Figure 6(b).

[0166] As shown in Figure 6(b), an icon 601 is displayed in the status bar of the electronic device 600. The icon 601 is used to remind the user that the first application is accessing the camera of the electronic device 600. The icon 601 can be displayed in the status bar of the electronic device 600, but the icon 601 is not dependent on the status bar.

[0167] In one display mode, the icon 601 presents an animation effect from left to right and from large to small in the status bar of the electronic device 600.

[0168] In some embodiments, after detecting the behavior of the first application accessing the microphone of the electronic device 600, the display state of the icon 601 gradually changes from a specific icon to an indicator element. This change process can be seen, for example, in Figure 6(b): at the first moment, the icon 601 is displayed as a camera icon; when the motion effect plays to the second moment, the icon 601 is displayed as a smaller camera icon compared to the first moment; when the motion effect plays to the third moment, the icon 601 is displayed as an indicator element.

[0169] As shown in Figure 6(c), after the animation of icon 601 ends, icon 601 can be displayed in the status bar of electronic device 600 in real time as an indicator element.

[0170] In some embodiments, icon 601 has a color identifier, such as red, or other colors. The color of icon 601 may be determined according to the color corresponding to the camera, etc.

[0171] In some embodiments, when icon 601 is presented as an indicator element, the color of the indicator element is the same as the color identifier of icon 601.

[0172] As shown in Figure 6(d), when the display interface of the electronic device 600 is switched to the immersive interface of the first application based on Figure 6(c), the status bar is no longer displayed on the display interface of the electronic device 600. At this time, the icon 601 is still displayed in the current display interface of the electronic device 600 and will not disappear synchronously with the disappearance of the status bar. During the process of the first application accessing the camera of the electronic device 600, the icon 601 is always displayed in the current display interface of the electronic device 600. Only when the first application ends accessing the camera of the electronic device 600 will the icon 601 be de-displayed in the current display interface of the electronic device 600.

[0173] In this embodiment, during the process of an application accessing sensitive system resources, the application's access behavior can be presented explicitly and clearly on the device's display interface. This presentation is always displayed on top, independent of the status bar and unobstructed by other displayed content. This enhances the user's awareness of the application's access to sensitive system resources, achieving a "transparent and secure" consumer perception.

[0174] Furthermore, when an application is detected accessing sensitive system resources, a corresponding animated effect can be played as a reminder before the reminder is presented as an indicator element, which can more clearly show the application's real-time access behavior to sensitive system resources.

[0175] In addition, different colors can be used to indicate access to different sensitive system resources, so that users can directly perceive the category of the sensitive system resource being accessed based on the color of the indicator element, which can further enhance the user's perception of access to sensitive system resources.

[0176] It should be understood that the embodiments of this application use the location information, microphone and camera of electronic devices as examples of system sensitive resources for illustration, but this does not constitute a limitation on the applicable scenarios of the embodiments of this application. The embodiments provided in this application are also applicable to the process of application accessing other system sensitive resources.

[0177] It should also be understood that: the present application embodiments do not limit the presentation location of the icon used to remind the user that the application is accessing sensitive system resources. For example, it can be presented on the top-level window of the display interface of the electronic device, or it can be presented in the status bar of the electronic device; the present application embodiments do not limit the presentation form of the icon used to remind the user that the application is accessing sensitive system resources. For example, it can be presented in the form of a combination of animation and indicator elements, or it can be presented in the form of indicator elements, or it can be presented in other forms or a combination of other forms.

[0178] Alternatively, the above icons can be replaced with other identifiers, such as numerical identifiers, symbol identifiers, text identifiers, etc.

[0179] The indicator element is a display element used to perform a specific indication function. The indicator element can be, for example, an indicator point, an indicator icon, an indicator number, an indicator text, an indicator symbol, etc. The display effect of the indicator point can be a colored bright spot displayed on the screen of the electronic device.

[0180] For example, Figure 7 shows a schematic diagram of an interface for setting privacy permissions for an application, provided in an embodiment of this application.

[0181] As shown in Figure 7(a), when the user switches the display interface of the electronic device to the control center interface, a first entry point is displayed on the control center interface. The first entry point can be presented as an icon of the system resource being accessed and / or recently accessed, and / or the icon of the corresponding application. The user can switch the display interface of the electronic device to the privacy permission settings interface shown in Figure 7(b) by clicking on the first entry point. In this interface, applications that are accessing sensitive system resources and / or applications that have recently accessed sensitive system resources are displayed, as well as the icons of the sensitive system resources accessed by these applications. For example, when application A on the electronic device is calling the camera, application B is accessing... When location information is displayed and application C has recently accessed the microphone, the corresponding icons for application A and the camera accessed by application A, application B and the location information accessed by application B, and application C and the microphone accessed by application C will be displayed on the screen. When the user clicks on the privacy permission settings entry for application B, the display interface of the electronic device switches to the location information access permission settings interface for application B as shown in Figure 7(c). In this interface, the location information access permission for application B can be set. For example, it can be set to one of several permissions: every time you ask, allow only during use, always allow, or prohibit. The degree of access to location information can also be set, such as access to the precise location.

[0182] For example, FIG8 shows a schematic flowchart of an access notification method 800 provided in an embodiment of the present application.

[0183] As shown in Figure 8, the method 800 includes:

[0184] S801: When a first application is detected accessing a first sensitive resource, a first display object is displayed on the display interface of the electronic device, wherein the first display object is used to remind the user that the first application is accessing the first sensitive resource.

[0185] During the process of the first application accessing the first sensitive resource, the first display object is always displayed on the current display interface of the electronic device.

[0186] In some embodiments, the first display object is drawn via a Trusted Execution Environment (TEE).

[0187] In some embodiments, after the first display object is drawn via a Trusted Execution Environment (TEE), the first display object is configured for display in the TEE. The display configuration can generate hardware-recognizable instructions, which are stored in a security domain. Then, the hardware display driver displays the first display object on a first layer according to the hardware-recognizable instructions. The first layer is an upper layer, which can be an anti-overlay layer and / or an anti-tampering layer.

[0188] In this context, a security domain is a trusted environment area within the system of an electronic device. This security domain can be an area independent of the TEE, an area intersecting with the TEE, or a region belonging to the TEE.

[0189] In some embodiments, the first layer may be the topmost layer among all layers corresponding to the current display interface of the electronic device.

[0190] The first layer can be a layer specifically created by the TEE for displaying the first display object.

[0191] In some embodiments, the first display object displayed on the first layer is drawn via a TEE, which gives the first layer a security attribute. This security attribute can be reflected in the access restrictions on the first layer, such as access permissions being: TEE is readable and writable, and DSS IP is readable. This prevents the first layer and the first display object displayed on the first layer from being tampered with.

[0192] The first application can be, for example, a map application (e.g., Huaban Map), a chat application (e.g., Changlian application), a conferencing application, a video application (e.g., Huawei Video), etc. The first application can also be any application installed on the electronic device, and this application does not limit it in this regard.

[0193] The first sensitive resource may be, for example, the location information of an electronic device, a microphone, a camera, etc., and may also be other system resources, which are not limited in this application.

[0194] In some embodiments, the first display object may be a first indicator element.

[0195] The first indicator element is a display element used to perform a specific indicator function. The first indicator element may be, for example, an indicator point, an indicator icon, an indicator number, an indicator text, an indicator symbol, etc. The display effect of the indicator point may be a colored bright spot displayed on the screen of the electronic device.

[0196] The first display object may have a color corresponding to the first sensitive resource. For example, the first indicator element may be an indicator element with a specific color. The presentation form of the first indicator element and its presentation position on the display interface of the electronic device are not limited.

[0197] In some embodiments, when a first application is detected accessing a first sensitive resource, an animation effect is first displayed on the current display screen of the electronic device to remind the user that the first application is accessing the first sensitive resource. After the animation effect ends, a first display object is displayed on the current display screen of the electronic device to remind the user that the first application is accessing the first sensitive resource.

[0198] In one example, if the system creates a new display interface during the process of the first application accessing the first sensitive resource, the new display interface is located below the first layer in terms of hierarchy. That is to say, during the process of the first application accessing the first sensitive resource, the first display object will not be covered by any display element or display interface.

[0199] In this embodiment, during the process of an application accessing sensitive system resources, the application's access behavior can be presented explicitly and clearly on the device's display interface. This presentation is always displayed on top, independent of the status bar and unobstructed by other displayed content. This enhances the user's awareness of the application's access to sensitive system resources, achieving a "transparent and secure" consumer perception.

[0200] For example, taking the first display object as the first indicator element, Figure 9 shows a schematic flowchart of another access reminder method 900 provided in the embodiments of this application.

[0201] S901: When a first application is detected accessing a first sensitive resource, determine whether a sensitive resource access alert is required. If a sensitive resource access alert is required, execute S902.

[0202] It can be understood that the "detected first application accessing the first sensitive resource" mentioned here refers to the behavior of the first application triggering the access to the first sensitive resource, not that it has already entered the access state.

[0203] In some embodiments, when the behavior of the first application accessing the first sensitive resource is detected, the privacy access permission information of the first application is obtained. If the privacy access permission of the first application allows the first application to access the first sensitive resource, it is determined that a sensitive resource access reminder is required; if the privacy access permission of the first application does not allow the first application to access the first sensitive resource, or does not allow the first application to access the first sensitive resource at the current stage, it is determined that a sensitive resource access reminder is not required.

[0204] The privacy access permissions for the first application can be set by the user or be the system default.

[0205] The first application runs on electronic devices.

[0206] S902: Determine whether a status bar exists in the current display interface of the electronic device. If a status bar exists, execute S903; if a status bar does not exist, execute S904.

[0207] This step can also be described as: determining whether a status bar is displayed on the current display interface of the electronic device.

[0208] S903: Display the first animation in the status bar of the electronic device. After the first animation ends, further execute S904. The first animation is used to remind the user that the first application is accessing the first sensitive resource.

[0209] In some embodiments, the first animation effect may be the dynamic playback of the icon corresponding to the first sensitive resource, for example, the dynamic playback of the icon corresponding to the first sensitive resource from left to right, and / or, the dynamic playback of the icon corresponding to the first sensitive resource from large to small, and / or, the switching playback of the icon corresponding to the first sensitive resource between different presentation forms or different presentation sizes; it may also be other animation effects that can be used to remind the user that the first application is accessing the first sensitive resource, such as text animation effects, symbol animation effects, etc.

[0210] In some embodiments, the status bar can be replaced by other interface controls of the electronic device. For example, the first animation effect can also be displayed in the top-level window of the display interface of the electronic device; the first animation effect can also be displayed in other locations of the display interface of the electronic device, which is not limited in this application.

[0211] S904: Display a first indicator element on the display interface of the electronic device. The first indicator element is used to remind the user that the first application is accessing the first sensitive resource. During the process of the first application accessing the first sensitive resource, the first indicator element is always displayed on the current display interface of the electronic device.

[0212] The explanation for this step is similar to that for S801, and for the sake of brevity, it will not be repeated here.

[0213] In some embodiments, the first indicator element may be an indicator element with a specific color, and the presentation form of the first indicator element and its presentation position on the display interface of the electronic device are not limited.

[0214] The color of the first indicator element can be determined based on the first sensitive resource; when the sensitive resources are different, the corresponding indicator element has a different color.

[0215] In this embodiment, when an application triggers access to sensitive resources, a clear reminder is given in real time. When there is a status bar or other interface controls that can display animations, the animations are given priority to the status bar or other interface controls that can display animations, which can more clearly show the application's real-time access to sensitive system resources. After the animation ends, a corresponding indicator element is displayed. This indicator element is displayed on the upper layer of the display system and is presented throughout the entire process of the application accessing sensitive resources, without being obscured by any newly added interface.

[0216] Furthermore, different colors can be used in the animation and / or indicator elements for accessing different system sensitive resources, so that users can directly perceive the category of the system sensitive resource being accessed based on the color of the indicator element, which can further enhance the user's perception of the system sensitive resource access behavior.

[0217] For example, taking the first display object as the first indicator element, Figure 10 shows a functional module diagram of an access reminder device 1000 provided in an embodiment of this application.

[0218] As shown in Figure 10, the device 100 includes:

[0219] The detection module 1010 is used to detect the behavior of applications accessing sensitive system resources.

[0220] The scheduling module 1020 is used to determine whether a sensitive resource access alert is needed when the first application is detected accessing the first sensitive resource.

[0221] In some embodiments, the scheduling module 1020 includes an acquisition module 1011 and a determination module 1012, wherein:

[0222] The acquisition module 1011 is used to acquire the privacy access permission information of the first application when the behavior of the first application accessing the first sensitive resource is detected.

[0223] The privacy access permission information of the first application may include, for example, one or more of the following: allowing the first application to access the first sensitive resource, disallowing the first application to access the first sensitive resource, allowing the first application to access the first sensitive resource during the use of the first application, and allowing the first application to access the first sensitive resource within a specific time period. The privacy access permission information of the first application may also include other permission information, which is not limited in this application.

[0224] The determination module 1012 is used to determine whether a sensitive resource access reminder is needed based on the privacy access permission information of the first application.

[0225] In some embodiments, when the privacy access permissions of the first application allow the first application to access the first sensitive resource, the determining module 1012 determines that a sensitive resource access reminder is required; when the privacy access permissions of the first application do not allow the first application to access the first sensitive resource, or do not allow the first application to access the first sensitive resource at the current stage, the determining module 1012 determines that a sensitive resource access reminder is not required.

[0226] In some embodiments, the determining module 1012 is further configured to determine whether there is a status bar or other interface controls that can display animation effects in the current display interface of the electronic device.

[0227] The animation display module 1030 is used to display a first animation effect in the status bar or other interface control that can display animation effects when a sensitive resource access reminder is required and the current display interface of the electronic device has a status bar or other interface control that can display animation effects.

[0228] For an explanation of the first motion effect, please refer to the description of S903 in the embodiment shown in Figure 9. For the sake of brevity, it will not be repeated here.

[0229] The animation display module 1030 can also be used to send a first instruction message to the scheduling module 1020 after the first animation effect has finished playing. The first instruction message is used to indicate that the first animation effect has finished playing.

[0230] The scheduling module 1020 is also used to send a second instruction to the instruction module after the animation display module 1010 finishes playing the first animation (i.e. after receiving the first instruction information mentioned above). The second instruction is used to instruct the instruction module 1040 to display the first instruction element.

[0231] The indication module 1040 is used to display the first indication element through the display module after receiving the second indication information sent by the scheduling module 1020.

[0232] For an explanation of the first indicator element, please refer to the description of S904 in the embodiment shown in Figure 9. For the sake of brevity, it will not be repeated here.

[0233] To better understand the non-overridability of the first display object, taking the first display object as the first indicator element as an example, Figure 11 illustrates a schematic diagram of a method for displaying an indicator element provided in an embodiment of this application. This method is implemented by multiple modules located in a Trusted Execution Environment (TEE) and multiple modules located in a Rich Execution Mode (REE). The TEE includes a privacy protection module, a privacy capability interface, and a privacy capability driver; the REE includes a scheduling module and a secure display service driver. Specifically, the method includes:

[0234] S1101: When the scheduling module determines that a sensitive resource access alert is required, it sends an instruction to the privacy protection module to display the first indicator element. This instruction can also be described as an instruction to open the first indicator element.

[0235] In some embodiments, the scheduling module sends an instruction to the privacy protection module to display the first indicator element when the first animation playback ends.

[0236] This step can be understood as follows: when the scheduling module determines that a sensitive resource access alert is required, the scheduling module will output the instruction of the first indicator element to the TEE side.

[0237] S1102: When the privacy protection module receives the instruction to display the first indicator element, it sends an instruction to add a layer to the secure display service driver located in the REE by calling the privacy capability interface. The added layer is used to display the first indicator element.

[0238] In some embodiments, after the privacy protection module calls the privacy capability interface, the privacy capability interface calls the REE's secure display service driver to add layers through the privacy proxy.

[0239] S1103: When the security display service driver receives an instruction to add a layer, it adds the layer and sends the added layer to the security display service.

[0240] The added layer is the upper layer, which can be an anti-overwrite layer and / or an anti-tampering layer.

[0241] S1104: The privacy capability interface obtains information about the first indicator element by calling the privacy capability driver; and sends the information about the first indicator element to the security display service.

[0242] The information of the first indicator element may include one or more of the following: the size of the first indicator element, the color of the first indicator element, and the display position of the first indicator element. The information of the first indicator element may also include the display information of other indicator elements.

[0243] S1103 and S1104 can be executed simultaneously or not simultaneously.

[0244] S1105: After receiving information about the added layer and the first indicator element, the security display service draws the first indicator element according to the information of the first indicator element and displays the first indicator element on the added layer, and displays the added layer on the display screen.

[0245] In some embodiments, after the first indicator element is drawn via a Trusted Execution Environment (TEE), a display configuration is performed on the first indicator element within the TEE. This display configuration generates hardware-recognizable instructions, which are then used by the hardware display driver (e.g., the secure display service shown in Figure 11) to display the first indicator element on an added layer according to these hardware-recognizable instructions. Similarly, when the scheduling module determines that the display of an indicator element needs to be canceled, the process for canceling the display of the indicator element can be as follows:

[0246] (1) When the first indicator element is currently displayed, the scheduling module sends an instruction to the privacy protection module to cancel the display of the first indicator element when it determines that there is no need to remind the sensitive resource access. This instruction can also be described as an instruction to turn off the first indicator element.

[0247] (2) When the privacy protection module receives the instruction to cancel the display of the first indicator element, it sends the instruction to delete the layer displaying the first indicator element to the security display service driver located in the REE by calling the privacy capability interface.

[0248] In some embodiments, after the privacy protection module calls the privacy capability interface, the privacy capability interface calls the REE's secure display service driver through the privacy proxy to delete the layer displaying the first indicator element.

[0249] (3) When the security display service driver receives an instruction to delete the layer displaying the first indicator element, it deletes the layer displaying the first indicator element; at the same time, it notifies the security display service to cancel the display of the layer displaying the first indicator element.

[0250] In this embodiment of the application, when it is necessary to display an indicator element, the Trusted Execution Environment (TEE) calls the Secure Display Service driver to draw a layer for displaying the first indicator element. This layer is controlled by the TEE. Based on the characteristics of the TEE, during the Trusted User Interaction (TUI) process, the display screen of the electronic device is controlled by the TEE, which enables the layer displaying the first indicator element to always be displayed on the upper layer during the trusted interaction process and will not be covered by other display interfaces, thereby achieving the non-coverage of the first indicator element display. The trusted interaction process can be understood as the process of the application accessing the system's sensitive resources, that is, the process that requires sensitive resource access reminders.

[0251] For example, taking a first display object as the first indicator element, Figure 12 shows a schematic diagram of another method for displaying a display object provided in an embodiment of this application. This method is implemented by the coordination of a scheduling module 1210, a window service module 1220, and a display module 1230. Specifically, the method includes:

[0252] S1201: When the scheduling module 1210 determines that a sensitive resource access reminder is needed, it sends an instruction to the window service module 1220 to display the first indicator element. This instruction can also be described as an instruction to open the first indicator element.

[0253] In some embodiments, when the first animation playback ends, the scheduling module 1210 sends an instruction to the window service module 1220 to display the first indicator element.

[0254] S1202: When the window service module 1220 receives an instruction to display the first indicator element, it creates a top-level layer; further, the display module 1230 displays the first indicator element on the top-level layer.

[0255] In this embodiment of the application, when a display object needs to be displayed, the display object is drawn by creating a new window. During the process of the application accessing sensitive system resources, the window displaying the display object is always the topmost window among the multiple windows corresponding to the current display interface of the electronic device, and will not be covered by other display interfaces, thereby achieving the non-coverage of the display object.

[0256] Similarly, when the scheduling module determines that the display of an indicator element needs to be canceled, the process of canceling the display of the indicator element can be as follows:

[0257] (1) When the scheduling module 1210 determines that it does not need to provide a sensitive resource access reminder, it sends an instruction to the window service module 1220 to cancel the display of the first indicator element. This instruction can also be described as an instruction to close the first indicator element.

[0258] (2) When the window service module 1220 receives the instruction to cancel the display of the first indicator element, it deletes the current top-level window; correspondingly, the display module 1230 cancels the display of the top-level window.

[0259] One or more modules or units described herein can be implemented in software, hardware, or a combination of both. When any of the above modules or units are implemented in software, the software exists as computer program instructions and is stored in memory. A processor can be used to execute the program instructions and implement the above method flow. The processor can include, but is not limited to, at least one of the following: a central processing unit (CPU), a microprocessor, a digital signal processor (DSP), a microcontroller unit (MCU), or an artificial intelligence processor, etc., and various computing devices that run software. Each computing device may include one or more cores for executing software instructions to perform calculations or processing. The processor can be built into a SoC (System-on-a-Chip) or an application-specific integrated circuit (ASIC), or it can be a separate semiconductor chip. In addition to the cores for executing software instructions to perform calculations or processing, the processor may further include necessary hardware accelerators, such as field-programmable gate arrays (FPGAs), PLDs (programmable logic devices), or logic circuits that implement dedicated logic operations.

[0260] When the modules or units described herein are implemented in hardware, the hardware may be any one or any combination of a CPU, microprocessor, DSP, MCU, artificial intelligence processor, ASIC, SoC, FPGA, PLD, application-specific digital circuit, hardware accelerator, or non-integrated discrete device, which may run the necessary software or perform the above method flow independently of software.

[0261] When the modules or units described herein are implemented using software, they can be implemented, in whole or in part, in the form of a computer program product. The computer program product includes one or more computer instructions. When the computer program instructions are loaded and executed on a computer, all or part of the processes or functions described in the embodiments of this application are generated. The computer can be a general-purpose computer, a special-purpose computer, a computer network, or other programmable device. The computer instructions can be stored in a computer-readable storage medium or transmitted from one computer-readable storage medium to another. For example, the computer instructions can be transmitted from one website, computer, server, or data center to another website, computer, server, or data center via wired (e.g., coaxial cable, fiber optic, digital subscriber line (DSL)) or wireless (e.g., infrared, wireless, microwave, etc.) means. The computer-readable storage medium can be any available medium that a computer can access or a data storage device such as a server or data center that integrates one or more available media. The available medium can be a magnetic medium (e.g., floppy disk, hard disk, magnetic tape), an optical medium (e.g., DVD), or a semiconductor medium (e.g., solid-state disk (SSD)).

[0262] Those skilled in the art will recognize that the units and algorithm steps of the various examples described in conjunction with the embodiments disclosed herein can be implemented in electronic hardware, or a combination of computer software and electronic hardware. Whether these functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of this application.

[0263] Those skilled in the art will understand that, for the sake of convenience and brevity, the specific working processes of the systems, devices, and units described above can be referred to the corresponding processes in the foregoing method embodiments, and will not be repeated here.

[0264] In the several embodiments provided in this application, it should be understood that the disclosed systems, apparatuses, and methods can be implemented in other ways. For example, the apparatus embodiments described above are merely illustrative; for instance, the division of units is only a logical functional division, and in actual implementation, there may be other division methods. For example, multiple units or components may be combined or integrated into another system, or some features may be ignored or not executed. Furthermore, the coupling or direct coupling or communication connection shown or discussed may be through some interfaces; the indirect coupling or communication connection between apparatuses or units may be electrical, mechanical, or other forms.

[0265] The units described as separate components may or may not be physically separate. The components shown as units may or may not be physical units; that is, they may be located in one place or distributed across multiple network units. Some or all of the units can be selected to achieve the purpose of this embodiment according to actual needs.

[0266] In addition, the functional units in the various embodiments of this application can be integrated into one processing unit, or each unit can exist physically separately, or two or more units can be integrated into one unit.

[0267] If the aforementioned functions are implemented as software functional units and sold or used as independent products, they can be stored in a computer-readable storage medium. Based on this understanding, the technical solution of this application, in essence, or the part that contributes to the prior art, or a portion of the technical solution, can be embodied in the form of a software product. This computer software product is stored in a storage medium and includes several instructions to cause a computer device (which may be a personal computer, server, or network device, etc.) to execute all or part of the steps of the methods described in the various embodiments of this application. The aforementioned storage medium includes various media capable of storing program code, such as USB flash drives, portable hard drives, read-only memory (ROM), random access memory (RAM), magnetic disks, or optical disks.

[0268] The above description is merely a specific embodiment of this application, but the scope of protection of this application is not limited thereto. Any variations or substitutions that can be easily conceived by those skilled in the art within the scope of the technology disclosed in this application should be included within the scope of protection of this application. Therefore, the scope of protection of this application should be determined by the scope of the claims.

Claims

A method of accessing a reminder, characterized by The method is applied to an electronic device, and the method comprises: displaying a display object on a display interface of the electronic device when detecting that a first application accesses a sensitive resource, the display object being used to remind a user that the first application is accessing the sensitive resource, the display object being drawn via a trusted execution environment (TEE) to achieve the display object being displayed on a current display interface of the electronic device during a process in which the first application accesses the sensitive resource. The method of claim 1, wherein The display object is displayed on a first layer after being drawn via the TEE, the first layer being an upper layer to achieve the display object being displayed on the current display interface of the electronic device during the process in which the first application accesses the sensitive resource, the upper layer being an anti-covering layer and / or an anti-tampering layer. The method according to claim 1 or 2, characterized in that, Before the display object is displayed on the display interface of the electronic device, the method further comprises: displaying a first dynamic effect in a first interface control when detecting that the first application accesses the sensitive resource, the first dynamic effect being used to remind the user that the first application is accessing the sensitive resource; the display object being displayed on the display interface of the electronic device comprises: displaying the display object on the display interface of the electronic device when the display of the first dynamic effect ends. The method according to claim 3, characterized in that The first dynamic effect being displayed in the first interface control comprises: determining whether the first interface control is displayed in a current display interface of the electronic device; displaying the first dynamic effect in the first interface control when the first interface control is displayed in the current display interface of the electronic device. The method according to claim 4, characterized in that The first interface control comprises a status bar. The method according to any one of claims 1 to 5, characterized in that The display object being displayed on the display interface of the electronic device when detecting that the first application accesses the sensitive resource comprises: detecting a behavior in which the first application accesses the sensitive resource, and determining whether access reminding is needed according to access permission information of the first application; displaying the display object on the display interface of the electronic device when it is determined that access reminding is needed. The method according to claim 6, characterized in that The access permission information of the first application being obtained comprises: obtaining access permission information of the first application, the access permission information of the first application being set by a user or set by default by a system; when the access permission information of the first application comprises information indicating that the first application is allowed to access the sensitive resource, it is determined that access reminding is needed. The method according to any one of claims 1 to 7, characterized in that The display object comprises an indication element. The method according to any one of claims 1 to 8, characterized in that The sensitive resource comprises one or more of location information of the electronic device, a microphone of the electronic device, and a camera of the electronic device. The electronic device comprises: The method according to any one of claims 1 to 9, characterized in that ​ The method according to any one of claims 1 to 10, characterized in that ​ An electronic device, characterized by comprising: ​ The display module is configured to display a display object on a display interface of the electronic device when it is detected that the first application accesses the sensitive resource, the display object being used to remind a user that the first application is accessing the sensitive resource, the display object being drawn via a trusted execution environment (TEE) to achieve The display object is always displayed on a current display interface of the electronic device in a process in which the first application accesses the sensitive resource. The electronic device of claim 12, wherein, The display object is displayed on a first layer after being drawn via the TEE, the first layer being an upper layer to achieve that the display object is always displayed on a current display interface of the electronic device in a process in which the first application accesses the sensitive resource, the upper layer being an anti-covering layer and / or an anti-tampering layer. The electronic device according to claim 12 or 13, characterized in that, The display module is specifically configured to: display a first dynamic effect in a first interface control when it is detected that the first application accesses the sensitive resource, the first dynamic effect being used to remind a user that the first application is accessing the sensitive resource; and display the display object on a display interface of the electronic device when display of the first dynamic effect ends. The electronic device of claim 14, wherein The electronic device further includes: a determination module configured to determine whether the first interface control is displayed in a current display interface of the electronic device; The display module is specifically configured to: display the first dynamic effect in the first interface control when the first interface control is displayed in the current display interface of the electronic device. The electronic device of claim 15, wherein The first interface control includes a status bar. The electronic device according to any one of claims 12 to 16, wherein The determination module included in the electronic device is further configured to: determine, when it is detected that the first application accesses the sensitive resource, whether access reminding is needed according to access permission information of the first application; The display module is further specifically configured to: display the display object on a display interface of the electronic device when it is determined that access reminding is needed. The electronic device of claim 17, wherein The electronic device further includes: an acquisition module configured to acquire access permission information of the first application, the access permission information of the first application being set by a user or set by default by a system; The determination module is specifically configured to determine that access reminding is needed when the access permission information of the first application includes information used to indicate that the first application is allowed to access the sensitive resource. The electronic device of any one of claims 12-18, wherein A color of the display object is a first color, the first color corresponding to the sensitive resource. The electronic device of any one of claims 12-19, wherein The display module is further configured to: cancel display of the display object on a display interface of the electronic device when it is detected that the first application ends accessing the sensitive resource. The electronic device of any one of claims 12-20, wherein The display object includes an indication element. The electronic device of any one of claims 12-21, wherein The sensitive resource includes one or more of location information of the electronic device, a microphone of the electronic device, and a camera of the electronic device. An electronic device, characterized by comprising: The electronic device includes: one or more processors; one or more memories; and and one or more computer programs, wherein the one or more computer programs are stored in the one or more memories, the one or more computer programs including instructions that, when executed by the one or more processors, cause the electronic device to perform the method of any one of claims 1-11. A computer-readable storage medium, characterized by, The storage medium has stored therein a program or instructions, which, when executed, implement the method of any one of claims 1-11. A chip characterized by The chip has stored therein instructions, which, when executed, implement the method of any one of claims 1-11. A computer program product, characterized in that The computer program product has stored therein a program or instructions, which, when executed, implement the method of any one of claims 1-11.

Images