CN103309769A - Operation system starting protection method and device - Google Patents

Abstract

The present invention provides an operating system start-up protection method, comprising: triggering the start-up of the operating system; first calling the start-up protector before starting other application programs; , the operating system is allowed to start other applications, otherwise, only pre-installed security applications are allowed to start during the operating system startup process. The present invention also provides an operating system startup protection device for implementing the aforementioned method. The method and device for protecting the startup of the operating system of the present invention can protect the normal startup of the operating system during the startup process of the computer or mobile terminal, and avoid the situation that multiple startups fail to succeed.

Description

Operating system startup protection method and device

The patent application of the present invention is a divisional application of the Chinese invention patent application with the filing date of June 20, 2011, the application number of 201110166662.2, and the title of "Operating System Boot Protection Method and Device".

technical field

The present invention relates to the technical field of application startup, in particular to an operating system startup protection method and device.

Background technique

Generally, in a computer or a mobile terminal, a user can install various application programs according to his needs. Among them, many application tools can be started automatically when the computer or mobile terminal is turned on. However, problems such as the compatibility between the self-starting application and the operating system, or the compatibility between different self-starting applications, or unexpected errors in the application itself during the startup process may cause the computer or mobile terminal to malfunction. Startup situation. For mobile terminals, especially common smart phones, because the stability of the operating system therein needs to be strengthened, the application program often fails to start normally due to its own abnormality during the self-starting process.

For example, for a smart phone, if a self-starting application is installed on the memory card, and the file system of the memory card fails, the phone may not be able to boot normally. Another example, a self-starting application is deleted abnormally, because the startup path of the self-starting application is usually recorded in the mobile terminal, then the application may be deleted, but the startup path of the application has not been deleted , when the computer is restarted, the operating system cannot find the application program according to the startup path, and a system error will occur, resulting in failure to boot normally.

Because the operating system of a computer or mobile terminal usually cannot automatically identify the cause of the error. Usually, the computer or mobile terminal cannot change the situation that the application cannot be started normally due to the abnormality of the application itself. That is to say, there may be a situation where the repeated startup fails for many times, which will undoubtedly affect the normal use of the computer or mobile terminal and bring inconvenience to the user.

Contents of the invention

The technical problem to be solved by the present invention is to provide an operating system startup protection method and device, which can protect the normal startup of the operating system during the startup process of the computer or mobile terminal, and avoid the situation that multiple startups fail to succeed.

In order to solve the above-mentioned problems, the present invention discloses a method for operating system startup protection, comprising the following steps:

Trigger the operating system to start;

Startup protector is called first before other applications start;

The startup protector judges whether there is a system abnormality during the last system operation. If there is no abnormality, the operating system is allowed to start other applications, otherwise, only the preset security application is allowed to start during the operating system startup process.

Further, the method also includes:

If the preset safety application program is abnormal, the boot protector prohibits the startup of all application programs except the boot protector itself during the restarting process of the operating system.

Further, before the preset security application starts, it also includes:

Verify whether the safety application program has been tampered with, and if tampered with, prohibit the safety application program from starting.

Further, said verifying whether the security application has been tampered with includes:

During the startup process, start the protector to network, obtain the standard data of the safety application program from the server, and compare it with the current data of the safety application program. If the two are different, it means that the safety application program has been tampered with; or

During the startup process, the startup protector obtains the pre-stored standard data of the safety application program from the client, and compares it with the current data of the safety application program. If the two are different, it means that the safety application program has been tampered with.

Further, the pre-set security application acquisition method includes one or more of the following:

Downloaded from the server specified by the boot protector;

A self-starting application that obtains the user's manual confirmation of permission;

Get the application to start automatically when the user sets a restore point;

Get the self-starting applications that were running the last time the system was healthy.

Further, the method also includes:

After the operating system starts up, a list of unstarted applications is displayed.

In order to solve the above problems, the present invention also discloses an operating system startup protection device, comprising:

An operating system startup module, adapted to trigger the startup of the operating system;

A protection call module adapted to first invoke a startup protector before other applications are started;

The startup protector is suitable for judging whether there is a system abnormality during the last system operation. If there is no abnormality, the operating system is allowed to start other applications. Otherwise, only the preset security applications are allowed to start during the operating system startup process. .

Further, the device also includes:

The start-up prohibition module is suitable for verifying that the preset safety application program is abnormal, and when the operating system starts up again, it notifies the start-up protector to prohibit the start-up of all application programs except the start-up protector.

Further, the device also includes:

The security application anomaly detection module is suitable for verifying whether the security application has been tampered with, and if tampered, it indicates that the security application is abnormal.

Further, the security application anomaly detection module includes:

The first comparison unit is suitable for starting the protector to network during the startup process, obtaining the standard data of the safety application program from the server, and comparing it with the current data of the safety application program; or

The second comparing unit is adapted to enable the boot protector to obtain pre-stored standard data of the safety application program from the client and compare it with current data of the safety application program during the start-up process.

Further, the startup protector also includes:

The secure application acquisition unit is adapted to acquire a preset security application, and the acquisition method includes one or more of the following:

Downloaded from the server specified by the boot protector;

Obtain self-starting applications that are manually confirmed by the user;

Obtain the self-starting application when the user sets the recovery point;

Get the self-starting applications that were running the last time the system was healthy.

Further, the device also includes:

The display module is adapted to display a list of unstarted application programs after the operating system is started. Compared with the prior art, the present invention has the following advantages:

The operating system start-up protection method and device of the present invention analyze the last system operation record of the operating system to check whether there is a system abnormality when the operating system is started, and only allow the preset security application to start when an abnormality occurs. Avoid the situation that the operating system cannot be started normally for many times due to the abnormality of the application program in the operating system, and also avoid the need to format the system and lose user information caused by the failure to start.

Further, if the pre-installed security application program is abnormal, only the boot protector is allowed to start during the restarting process of the operating system, so that the operating system can be started sequentially.

Description of drawings

FIG. 1 is a flow chart of Embodiment 1 of the operating system boot protection method of the present invention;

FIG. 2 is a flow chart of Embodiment 2 of the operating system boot protection method of the present invention;

FIG. 3 is a schematic structural diagram of Embodiment 1 of the operating system startup protection device of the present invention;

FIG. 4 is a schematic structural diagram of Embodiment 2 of the operating system startup protection device of the present invention.

Detailed ways

In order to make the above objects, features and advantages of the present invention more comprehensible, the present invention will be further described in detail below in conjunction with the accompanying drawings and specific embodiments.

The operating system start-up protection method and device of the present invention are applied to clients such as computers and mobile phones, and are used to protect the start-up of the clients so that they can be started normally. Specifically, the operating system start-up protection method and device of the present application can be implemented by a computer program, installed in a client, and executed by running a processor.

Referring to Fig. 1, it shows the first embodiment of the operating system startup protection method of the present invention, comprising the following steps:

Step 101, triggering the operating system to start.

The boot operating system can be started according to a user's command or according to a predetermined startup time.

Step 102, firstly invoke the startup protector before other application programs are started.

The boot protector can be pre-installed in clients such as computers or mobile phones, and when the client user starts the operating system of the client, the operating system first calls the boot protector before starting other application programs. Specifically, the startup protector can be added to the startup list of the operating system, and the startup priority of the startup protector can be set. When the operating system starts, the startup protector in the startup list will be started before other applications. prior to booting.

In addition, the startup protector may be invoked preferentially by restricting the startup of other applications, and then start other applications through the startup protector or the operating system after the startup protector is started. For example, after adding the boot protector to the boot list that comes with the operating system, delete all application records in the boot list that come with the operating system except the boot protector, and add other application records to the boot protector , launch other applications through the launch protector.

Step 103, the startup protector analyzes the operation record of the operating system during the last system operation to check whether there is a system abnormality, if no abnormality occurs, the operating system is started normally, otherwise, only the preset The security application starts.

Under normal circumstances, the operating system will record the running process by itself through logs or other means, for example, during this running process, whether all applications or processes are normal, whether there are crashes, blue screens and other failures, etc. The boot protector can directly check whether there is any system abnormality by reading the running records stored in the operating system. In addition, the boot protector can also monitor the operating system during its running and record the running status of the operating system. When it is necessary to obtain whether the operating system is abnormal, you can directly check it from the running records recorded by the boot protector. .

The preset security application program can be a trusted application program downloaded by the startup protector from a designated server, or a self-starting application program in the operating system that has been manually confirmed and approved by the user, or a recovery point set by the user. The confirmed self-starting application, or the self-starting application in the last time or when the system was running normally.

Referring to FIG. 2 , it shows Embodiment 2 of the method for protecting the startup of the operating system of the present invention. Further, after step 103, the following steps are also included:

Step 201, if the preset security application program is abnormal, during the re-starting process of the operating system, the startup protector prohibits the startup of all application programs except the startup protector.

Wherein, whether the preset security application program is abnormal is judged by checking whether the preset security application program causes faults such as crash, blue screen, and the like.

Further, the embodiment of the method for protecting the startup of the operating system of the present invention further includes: before starting the preset security application, verifying whether the security application has been tampered with, and prohibiting the startup of the security application if tampered.

By verifying the safety application program before starting, only the safety application program that has not been tampered with is allowed to start, which can ensure the normal start of the operating system and avoid possible abnormalities. Wherein, verifying whether the security application program has been tampered with can be judged by verifying whether the hash value or the MD5 (Message-Digest Algorithm5) value of the security application program are the same. If they are different, it means that the safety application program has been tampered with, so it can be judged that the safety application program is abnormal.

When verifying whether the security application has been tampered with, the boot protector can connect to the Internet during the startup process of the operating system, obtain the standard data of the security application from the server, such as hash value or MD5 value, and compare it with the current data of the security application Yes, if they are different, the security application has been tampered with. In addition, the standard data of the safety application can also be stored in the client in advance, and the boot protector can directly obtain the pre-stored standard data of the safety application from the client, and then compare it with the current data of the safety application.

Further, in the aforementioned embodiment of the operating system startup protection method, the following steps may also be included:

After the operating system is started, if there are unstarted applications, a list of unstarted applications will be displayed.

The user can choose whether to start the application programs in the list according to needs, or detect these application programs to check whether they will cause the startup failure of the operating system. For example, the user selects one of the application programs in the list provided by the startup protector to start, or selects some two or some programs to start, and finds the application that causes the operating system to fail to start normally. program, you can delete the application or repair it and so on.

Referring to Fig. 3, it shows the first embodiment of the operating system startup protection device of the present invention, each module in the device refers to a computer program based on computer language, stored in the client where the operating system is located, and run by the processor .

The operating system startup protection device includes an operating system startup module 10 , a startup protector startup module 20 and a startup protector 30 .

The operating system startup module 10 is adapted to trigger the startup of the operating system.

The protection calling module 20 is adapted to first call the startup protector before other application programs are started.

Start protector 30, suitable for operating system operating records in the last system running process, check whether there is a system abnormality, if there is no abnormality, then start the operating system normally, otherwise, only allow the preset The security application starts.

Referring to Fig. 4, it shows the second embodiment of the operating system startup protection device of the present invention. Further, the device also includes a startup prohibition module 40. If the preset security application program is abnormal, during the restarting process of the operating system, startup The protector prevents all applications from starting except the launch protector.

Further, the embodiment of the operating system startup protection device of the present invention also includes a security application anomaly detection module, which is suitable for verifying whether the security application has been tampered with, and if tampered, it indicates that the security application is abnormal.

The safety application anomaly detection module includes a first comparison unit, which is suitable for starting the protector to network, obtaining standard data of the safety application from the server, and comparing it with the current data of the safety application; or the second comparison The unit is adapted to enable the boot protector to obtain pre-stored standard data of the safety application program from the client and compare it with the current data of the safety application program during the start-up process.

Further, the startup protector 30 also includes a security application acquisition unit, adapted to acquire a preset security application, and the acquisition method includes one or more of the following: downloading from a server designated by the startup protector; obtaining user Manually confirm the self-starting application of the license; obtain the self-starting application when the user sets the recovery point; obtain the self-starting application that was run when the system was running normally last time.

Further, the device further includes a display module adapted to display a list of unstarted application programs after the operating system is started.

The operating system start-up protection method and device of the present invention analyze the last system operation record of the operating system to check whether there is a system abnormality when the operating system is started, and only allow the preset security application to start when an abnormality occurs. Avoid the situation that the operating system cannot be started normally for many times due to the abnormality of the application program in the operating system, and also avoid the need to format the system and lose user information caused by the failure to start.

Further, if the pre-installed security application program is abnormal, only the boot protector is allowed to start during the restarting process of the operating system, so that the operating system can be started sequentially.

Each embodiment in this specification is described in a progressive manner, each embodiment focuses on the difference from other embodiments, and the same and similar parts of each embodiment can be referred to each other. As for the device embodiment, since it is basically similar to the method embodiment, the description is relatively simple, and for related parts, please refer to the part of the description of the method embodiment.

The operating system start-up protection method and device provided by the present invention have been described above in detail. In this paper, specific examples are used to illustrate the principle and implementation of the present invention. The descriptions of the above embodiments are only used to help understand the method of the present invention. and its core idea; at the same time, for those of ordinary skill in the art, according to the idea of the present invention, there will be changes in the specific implementation and scope of application. limits.

Claims (10)

1. an os starting guard method is characterized in that, may further comprise the steps:

The trigger action system starts;

Before other application program launchings, at first call the starting protection device;

Described starting protection device judges in the upper subsystem operational process system exception whether occurs, if occur unusually then allowing other application programs of os starting, otherwise the security application that then only allows to preset in the os starting process starts.

2. the method for claim 1 is characterized in that, described method also comprises:

If the security application that presets occurs unusual, then in the start-up course, the starting protection device is forbidden all application program launchings except starting protection device self to operating system again.

3. the method for claim 1 is characterized in that, also comprises before the security application that presets starts:

Whether the authenticating security application program is tampered, if be tampered, forbids that then this security application starts.

4. method as claimed in claim 3 is characterized in that, whether described authenticating security application program is tampered and comprises:

In start-up course, the starting protection device is networked, and obtains the normal data of security application from server, and compares with the current data of security application, if the two difference illustrates that then security application is tampered; Or

In start-up course, the starting protection device obtains the normal data of pre-stored security application from client, and compares with the current data of security application, if the two difference illustrates that then security application is tampered.

5. the method for claim 1 is characterized in that, the described security application acquisition methods that presets comprise following one or more:

From the server of starting protection device appointment, download and obtain;

Obtain the manual self-starting application program of confirming license of user;

Obtain the self-starting application program when the user arranges recovery point;

The self-starting application program of moving when obtaining the subsystem normal operation.

6. method as claimed in claim 1 or 2 is characterized in that, described method also comprises:

After os starting is finished, show not start the application list.

7. an os starting protective device is characterized in that, comprising:

The os starting module is suitable for the trigger action system and starts;

The protection calling module is suitable at first calling the starting protection device before other application program launchings;

The starting protection device is suitable for judging in the upper subsystem operational process system exception whether occurs, if occur unusually then allowing other application programs of os starting, otherwise the security application that then only allows to preset in the os starting process starts.

8. device as claimed in claim 7 is characterized in that, described device also comprises:

The No starting module is suitable for verifying that the security application that presets occurs unusual, and then in the start-up course, notice starting protection device is forbidden all application program launchings except starting protection device self to operating system again.

9. device as claimed in claim 7 is characterized in that, described device also comprises:

Whether security application abnormality detection module is suitable for the authenticating security application program and is tampered, if be tampered, illustrates that then security application occurs unusual.

10. device as claimed in claim 9 is characterized in that, described security application abnormality detection module comprises:

The first comparing unit is suitable in start-up course, and the starting protection device is networked, and obtains the normal data of security application from server, and compares with the current data of security application; Or

The second comparing unit is suitable in start-up course, and the starting protection device obtains the normal data of pre-stored security application from client, and compares with the current data of security application.

Images