Debug Port Control via USB and Screen Lock Status
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users face security risks when their terminal devices, such as smartphones, are lost or stolen, as third parties can access data through debug ports without authorization, compromising information security.
Innovation Solution
A method and apparatus that detect the status of a USB port and screen on a terminal device, controlling the debug port based on the screen's locked state, ensuring it remains disabled unless the screen is successfully unlocked, thereby enhancing security policies and preventing unauthorized access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the debug port is enabled for data access, then user data can be accessed conveniently, but information security is compromised when the device is lost or stolen
Solution Approach 1:
The debug port's enabled/disabled state is dynamically changed based on the screen lock status. When the screen is locked, the debug port is automatically disabled; when the screen is unlocked, the debug port can be enabled. This dynamic state change resolves the contradiction by adapting the port's accessibility to the current security state of the device.
Solution Approach 2:
The system continuously monitors the screen lock status and uses this feedback to control the debug port's state. The feedback mechanism ensures that the debug port responds appropriately to changes in device security state, enabling data access only when the device is in a secure unlocked state.
2Reliability
If the debug port remains disabled when screen is locked, then information security is improved, but data access capability is reduced
Solution Approach 1:
The debug port transitions from a static disabled state to a dynamic state that responds to screen lock conditions. The port is disabled when the screen is locked to ensure security, but can be enabled when the screen is unlocked to restore data access capability, thus resolving the adaptability issue.
Solution Approach 2:
The operational parameter (enabled/disabled state) of the debug port is changed based on the screen lock status parameter. This parameter change allows the system to optimize both security and accessibility by adjusting the port's state according to the current device state.
3Ease of operation
If third-party tools can access the device, then ease of operation is improved for developers, but security is compromised when the device is compromised
Solution Approach 1:
The system takes preliminary anti-action by disabling the debug port before any unauthorized access can occur. When the screen is locked, the debug port is automatically disabled, preventing third-party tools from accessing the device even if they are installed or available.
Solution Approach 2:
The screen lock status acts as an intermediary mechanism between the user and the debug port. This intermediary controls the port's accessibility, allowing legitimate users to access data when unlocked while blocking access for unauthorized third parties when locked.
Data Source
Figure 1
Figure 2
Figure 3~4
AI summary
The present invention discloses a method and an apparatus for controlling a debug port of a terminal device. The method for controlling a debug port includes: detecting a status of a universal serial bus port of a terminal device; when the universal serial bus port is connected to a computer, detecting whether a screen of the terminal device is in a secure screen-locked state; and controlling a debug port of the terminal device when the screen is in the secure screen-locked state. According to the method and apparatus for controlling a debug port in the present invention, security policy completeness of a terminal device can be improved, and security of user information on the terminal device is effectively ensured.