CN107332989B - Data protection system and data protection method of mobile terminal - Google Patents

Abstract

The invention discloses a data protection system and a data protection method for a mobile terminal. The data protection system includes: a state detection module and a safety box module. The safety box module includes a safety lock unit, a storage unit and a unique closing unit. Among them, the storage unit can always store the important data of the closing unit and the mobile terminal, and when the mobile terminal is in a normal state, the storage unit is in a normal access state, which is convenient for the normal use of the real owner; when the mobile terminal is in an abnormal state , the safety lock unit can lock the storage unit, and the storage unit is in the locked state. At this time, if a user accesses the storage unit, the identity verification needs to be performed first, and the storage unit can only be processed after the identity verification. access. The technical solution of the present invention can also effectively prevent non-host users from maliciously closing the safety box module, thereby greatly improving the safety performance of the safety box module.

Description

Data protection system and data protection method of mobile terminal

technical field

The present invention relates to the technical field of mobile terminals, in particular to a data protection system and data protection method of a mobile terminal.

Background technique

With the continuous development of information technology, smart terminals have become the electronic devices that are most closely related to people in life and work. From the original mobile terminal to the intelligent mobile terminal, tablet computer, e-book and car navigation equipment in the 3G era, mobile intelligent terminals are becoming more and more popular, and great changes have taken place in both form and function. More and more diverse, more and more functionally rich, more and more intelligent.

In recent years, information security incidents of mobile smart terminals have emerged in an endless stream. How to improve its security and protect end users, communication networks and even national security and social stability has become a problem that the industry and users are very concerned about.

There is more or less confidential or confidential information in the mobile terminal. The current traditional mobile terminal privacy protection is to set a lock screen password on the mobile terminal. Only after entering the correct password can the screen be unlocked and the desktop can be accessed. or degree. However, the security of the existing terminal protection mechanism is low, and once it is attacked by a password, it is extremely easy to cause data leakage in the mobile terminal.

SUMMARY OF THE INVENTION

The present invention aims to solve at least one of the technical problems existing in the prior art, and proposes a data protection system and data protection method for a mobile terminal.

In order to achieve the above object, the present invention provides a data protection system for a mobile terminal, comprising: a state detection module and a safety box module;

The state detection module is used to detect whether the mobile terminal is in an abnormal state;

the safety box module includes a safety lock unit, a storage unit and a unique closing unit;

The safety lock unit is configured to lock the storage unit when the state detection module detects that the mobile terminal is in an abnormal state, so as to restrict the user's access to the storage unit;

The storage unit is used for important data of the mobile terminal;

The closing unit is the only way to control the closing of the safety box module, and the closing unit is stored in the storage unit.

Optionally, the important data includes: a short message with verification code information.

Optionally, it also includes: a short message detection module and a transfer module

The short message detection module is configured to detect whether the short message contains verification code information when the mobile terminal receives a short message;

The transfer module is configured to transfer the short message with the verification code information to the storage unit for storage when the short message detection module detects that the short message contains verification code information.

Optionally, the safety box module further includes: a verification unit;

The verification unit is configured to authenticate the user when the storage unit is in a locked state and the user wants to access the storage unit;

The safety lock unit is further configured to unlock the storage unit after the user passes the identity verification of the verification unit.

Optionally, the verification unit includes: a fingerprint collection subunit and a fingerprint comparison subunit;

The fingerprint collection subunit is used to collect the current fingerprint information of the user;

The fingerprint comparison subunit is used to compare the current fingerprint information with the pre-stored comparison fingerprint information; if the current fingerprint information matches the comparison fingerprint information, the user passes the identity verification; otherwise , the user does not pass authentication.

In order to achieve the above object, the present invention provides a data protection method for a mobile terminal. The data protection method for the mobile terminal is based on a data protection system for the mobile terminal. The data protection system for the mobile terminal includes: a state detection module and a safety box module, the safety box module includes a safety lock unit, a storage unit and a unique closing unit, the closing unit is the only way to control the closing of the safety box module;

The data protection method of the mobile terminal includes:

Step S1, the storage unit stores important data of the mobile terminal and the closing unit;

Step S2, the state detection module detects whether the mobile terminal is in an abnormal state;

If it is detected in step S2 that the mobile terminal is in an abnormal state, step S3 is performed;

Step S3, the safety lock unit locks the storage unit to restrict the user's access to the storage unit.

Optionally, the important data includes: a short message with verification code information.

Optionally, the data protection system of the mobile terminal further includes: a short message detection module and a transfer module;

Before the step S1, it also includes:

Step S1a, when the mobile terminal receives a short message, the short message detection module detects whether the short message contains verification code information;

If it is detected in step S1a that the short message contains verification code information, step S1b is executed.

Step S1b, the transfer module transfers the short message with the verification code information to the storage unit for storage.

Optionally, the safety box module further includes: a verification unit;

After the step S3, it also includes:

Step S4, the verification unit performs identity verification on the user when the storage unit is in a locked state and the user wants to access the storage unit;

If the user passes the identity verification in step S4, then execute step S5;

Step S5, the safety lock unit performs an unlocking process on the storage unit.

Optionally, the verification unit includes: a fingerprint collection subunit and a fingerprint comparison subunit;

The step S4 includes:

Step S401, the fingerprint collection subunit collects the current fingerprint information of the user;

Step S403, the fingerprint comparison subunit compares the current fingerprint information with the pre-stored comparison fingerprint information;

If the current fingerprint information matches the reference fingerprint information, the user passes the identity verification; otherwise, the user does not pass the identity verification.

The present invention has the following beneficial effects:

The present invention provides a data protection system and data protection method for a mobile terminal, wherein the data protection system includes: a state detection module and a safety box module, and the safety box module includes a safety lock unit, a storage unit and a unique closing unit. The storage unit can always store the important data of the closing unit and the mobile terminal, and when the mobile terminal is in a normal state, the storage unit is in a normal access state, which is convenient for the normal use of the real owner; when the mobile terminal is in an abnormal state, it is safe to The lock unit can lock the storage unit, and the storage unit is in a locked state. If a user accesses the storage unit at this time, authentication is required first, and the storage unit can only be accessed after passing the authentication.

More importantly, once the storage unit is in the locked state, if the user needs to operate the closing unit, he must first perform authentication to enter the storage unit, thus effectively preventing non-owner users from maliciously closing the safety box module, which is extremely dangerous. The safety performance of the safety box module is greatly improved.

Description of drawings

1 is a schematic structural diagram of a data protection system for a mobile terminal according to Embodiment 1 of the present invention;

2 is a flowchart of a data protection method for a mobile terminal according to Embodiment 2 of the present invention;

FIG. 3 is a flowchart of a data protection method for a mobile terminal according to Embodiment 3 of the present invention.

Detailed ways

In order to make those skilled in the art better understand the technical solutions of the present invention, a data protection system and data protection method for a mobile terminal provided by the present invention are described in detail below with reference to the accompanying drawings.

FIG. 1 is a schematic structural diagram of a data protection system for a mobile terminal according to Embodiment 1 of the present invention. As shown in FIG. 1 , the data protection system for a mobile terminal includes a state detection module 1 and a safety box module 2 .

The state detection module 1 is used to detect whether the mobile terminal is in an abnormal state.

In this embodiment, the state detection module 1 can use the following technical means to detect whether the mobile terminal is in an abnormal state.

1) Detect the number of times that the user continuously inputs the wrong password for unlocking the screen, and judge whether the number of times of consecutively inputting the wrong password exceeds the preset number of times.

If it is determined that the number of times that the user continuously inputs the wrong password exceeds the preset number of times, it is detected that the mobile terminal is in an abnormal state; otherwise, the mobile terminal is in a normal state.

2) Detecting the pressing force of the user's finger on the mobile terminal when the user operates the mobile terminal, and determining whether the pressing force is within a preset range.

If it is determined that the user's pressing force on the mobile terminal is outside the preset range, it is detected that the mobile terminal is in an abnormal state; otherwise, the mobile terminal is in a normal state.

3) Determine whether the mobile terminal is restarted within a short period of time (for example, within 10s) after the mobile terminal is turned off.

If it is determined that the mobile terminal is restarted within a short time after being shut down, it can be detected that the mobile terminal is in an abnormal state; otherwise, the mobile terminal is in a normal state.

It should be noted that, in practical applications, any one of the above three detection means, or a combination of multiple detection means may be used to detect whether the mobile terminal is in an abnormal state. Of course, the user can design a custom condition that triggers the mobile terminal to be in an abnormal state according to the actual situation, so as to detect whether the mobile terminal is in an abnormal state. The specific situation is not described in detail here.

The safety box module 2 in this embodiment includes a safety lock unit 3, a storage unit 4 and a unique closing unit 5. The safety box module 2 in this embodiment is integrated in the mobile terminal in the form of hardware and/or software.

Wherein, the safety lock unit 3 is used to lock the storage unit 4 when the state detection module 1 detects that the mobile terminal is in an abnormal state, so as to restrict the user's access to the storage unit 4; the storage unit 4 is used for important functions of the mobile terminal. Data; the closing unit 5 is the only way to control the closing of the safety box module 2 , and the closing unit 5 is stored in the storage unit 4 .

When the state detection module 1 detects that the mobile terminal is in an abnormal state, the security lock module will lock the storage unit 4 to limit the user's access to the storage unit 4, so that the data located in the storage unit 4 can be effectively Protect.

In addition, since the only closing unit 5 for closing the safety box module 2 is stored in the storage module of the safety box module 2, once the safety box module 2 is opened, if you want to close the function of the safety box module 2, you must first enter the safety box In the storage unit 4 in the storage unit 2, the safety box module 2 is controlled to be closed through the closing unit 5 located in the storage unit 4, so as to effectively prevent other people from directly closing the safety box module 2 from the outside (for example, through the background The program closes the safety box module 2, and deletes the safety box module 2 through the system, which effectively improves the safety performance of the safety box module 2.

It should be noted that, in order to realize real-time and effective protection of the mobile terminal, after the mobile terminal is powered on, the safety box module 2 is automatically opened and operated.

Optionally, the important data stored in the storage unit 4 in the safety box module 2 includes: a short message with verification code information.

With the widespread use of mobile terminals, some important services such as website user registration, user security authentication, mobile terminal number verification, mobile terminal registration and activation services, password modification, and online payment SMS reminders are all bound to mobile terminals. When performing the above-mentioned important services through a mobile terminal, the service provider will first verify the user's identity. Specifically, a short message with a verification code is sent to the bound mobile terminal, and after the user receives the verification code, the user enters the verification code into the service provider's business system for identity verification. Once the illegal element obtains the short message with the verification code, he can disguise himself as a real user and log in to the service provider's business system, thus posing a threat to the security of the user's account.

For this reason, after the mobile terminal receives the short message with the verification code information, it is directly stored in the storage unit 4 in the safety box module 2 to ensure the safety of the short message, thereby ensuring that the mobile terminal is bound to the short message. Security of user accounts.

In this embodiment, optionally, the data protection system further includes: a short message detection module 7 and a transfer module 6 .

The short message detection module 7 is used to detect whether the short message contains verification code information when the mobile terminal receives the short message. Specifically, some templates of short messages with verification code information can be pre-stored in the short message detection module 7, and then the templates are compared with the short messages received by the mobile terminal. If the two can match, it can be detected that the mobile terminal has received The text message contains verification code information; otherwise, it is detected that the text message received by the mobile terminal does not contain verification code information.

It should be noted that the above technical means of judging whether the short message contains verification code information by comparing the template with the short message is only an optional technical means in the present invention, which does not limit the technical solution of the present invention. In the present invention, other methods can also be used to detect whether the short message contains verification code information, which will not be exemplified here.

The transfer module 6 is used to transfer the short message with the verification code information to the storage unit 4 for storage when the short message detection module 7 detects that the short message contains verification code information. In this embodiment, the short message containing the verification code information received by the mobile terminal can be transferred to the storage unit 4 in the safe box template through the transfer module 6 for storage.

Optionally, the safety box module 2 also includes: a verification unit 8, which is used to authenticate the user when the storage unit 4 is in a locked state and the user wants to access the storage unit 4; the safety lock unit 3 also uses After the user passes the identity verification of the verification unit 8, the storage unit 4 is unlocked.

The verification unit 8 in the present invention works only after the safety lock unit 3 locks the storage unit 4. If the storage unit 4 is not in the locked state, the verification unit 8 does not work.

Optionally, the verification unit 8 includes: a fingerprint collection subunit 9 and a fingerprint comparison subunit 10; the fingerprint collection subunit 9 is used to collect the current fingerprint information of the user; the fingerprint comparison subunit 10 is used to compare the current fingerprint information with the previous fingerprint information. The stored reference fingerprint information is compared; if the current fingerprint information matches the reference fingerprint information, the user passes the identity verification; otherwise, the user does not pass the identity verification.

It should be noted that the above-mentioned technical means of performing identity verification by means of fingerprint comparison is a preferred solution in the present invention, which will not limit the technical solution of the present invention. In this embodiment, considering that the existing mobile terminals are equipped with fingerprint collection sensors, the functions of the above-mentioned fingerprint collection sub-unit 9 can be realized by the fingerprint collection sensors on the existing mobile terminals, so there is no need for additional separate The fingerprint collection sub-unit 9 is provided, so that the equipment cost can be effectively reduced.

Of course, in the present invention, other identity verification methods may also be used to verify the user's identity, and the specific circumstances will not be exemplified one by one here.

It can be seen from the above that in the data protection system for the mobile terminal provided in this embodiment, the storage unit 4 can always store the important data of the closing unit 5 and the mobile terminal, and when the mobile terminal is in a normal state, the storage unit 4 is in It can be accessed normally, which is convenient for the normal use of the real host; when the mobile terminal is in an abnormal state, the safety lock unit 3 can lock the storage unit 4, and the storage unit 4 is in the locked state. To access the unit 4, the identity verification needs to be performed first, and the storage unit 4 can be accessed only after the identity verification is passed.

More importantly, once the storage unit 4 is in the locked state, if the user needs to operate the closing unit 5, he must first perform identity verification to enter the storage unit 4, thereby effectively preventing non-owner users from maliciously closing the safety box module. 2, thereby greatly improving the safety performance of the safety box module 2.

FIG. 2 is a flowchart of a data protection method for a mobile terminal according to Embodiment 2 of the present invention. As shown in FIG. 2 , the data protection method for a mobile terminal is based on a data protection system for a mobile terminal, and the data protection system for a mobile terminal includes: A detection module and a safety box module, the safety box module includes a safety lock unit, a storage unit and a unique closing unit, and the closing unit is the only way to control the closing of the safety box module.

This data protection method includes:

Step S1, the storage unit stores important data of the mobile terminal and closes the unit.

Step S2, the state detection module detects whether the mobile terminal is in an abnormal state.

If it is detected in step S2 that the mobile terminal is in an abnormal state, step S3 is executed. On the contrary, it indicates that the mobile terminal is in a normal state, and the user can normally access the storage unit in the safety box module.

Step S3, the safety lock unit locks the storage unit to restrict the user's access to the storage unit.

For the description of the above steps S1 to S3, reference may be made to the corresponding content in the foregoing Embodiment 1, and details are not repeated here.

In this embodiment, when the state detection module detects that the mobile terminal is in an abnormal state, the security lock module locks the storage unit to restrict the user's access to the storage unit, so that the data stored in the storage unit can be locked. effective protection.

In addition, since the only closing unit for closing the safety box module is stored in the storage module of the safety box module, once the safety box module is opened, if you want to close the function of the safety box module, you must first enter the storage module in the safety box module. The safety box module is controlled to be closed by the closing unit located in the storage unit, thereby effectively preventing others from directly closing the safety box module from the outside, and effectively improving the safety performance of the safety box module.

FIG. 3 is a flowchart of a data protection method for a mobile terminal according to Embodiment 3 of the present invention. As shown in FIG. 3 , the data protection method for a mobile terminal is based on a data protection system for a mobile terminal, and the data protection system for a mobile terminal includes: Detection module, safety box module, SMS detection module and transfer module. The safety box module includes a safety lock unit, a verification unit, a storage unit, a unique closing unit, a fingerprint collection sub-unit and a fingerprint comparison sub-unit. The closing unit is the control safety box The only way to close the module, the storage unit is used to store the short message with verification code information received by the closing unit and the mobile terminal.

This data protection method includes:

Step S1a, when the mobile terminal receives the short message, the short message detection module detects whether the short message contains verification code information.

If it is detected in step S1a that the short message contains verification code information, step S1b is executed. On the contrary, the short message is normally stored in the short message module of the mobile terminal.

Step S1b, the transfer module transfers the short message with the verification code information to the storage unit for storage.

Step S1, the storage unit stores a short message with verification code information.

Step S2, the state detection module detects whether the mobile terminal is in an abnormal state.

If it is detected in step S2 that the mobile terminal is in an abnormal state, step S3 is executed. On the contrary, it indicates that the mobile terminal is in a normal state, and the user can normally access the storage unit in the safety box module.

Step S3, the safety lock unit locks the storage unit to restrict the user's access to the storage unit.

Step S4, the verification unit performs identity verification on the user when the storage unit is in a locked state and the user wants to access the storage unit.

Optionally, the verification unit includes: a fingerprint collection subunit and a fingerprint comparison subunit;

Step S4 specifically includes:

Step S401, the fingerprint collection subunit collects the current fingerprint information of the user.

Step S403, the fingerprint comparison subunit compares the current fingerprint information with the pre-stored comparison fingerprint information.

If the current fingerprint information matches the reference fingerprint information, the user passes the authentication; otherwise, the user does not pass the authentication.

If the user passes the identity verification in step S4, it means that the current user is the owner, and then step S5 is performed; otherwise, it indicates that the current user is not the owner, and the safety lock unit maintains the locked state of the storage unit.

Step S5, the safety lock unit unlocks the storage unit.

After the storage unit is unlocked, the owner can access the short message with verification code information located in the storage unit or operate the closing unit.

For the description of the above steps S1a to S5, reference may be made to the corresponding content in the foregoing Embodiment 1, and details are not repeated here.

In order to achieve real-time and effective protection of the mobile terminal, after the mobile terminal is turned on, the safety box module is automatically turned on and running. When the mobile terminal is in a normal state, the storage unit is in a normal access state, which is convenient for the normal use of the real machine owner; When the mobile terminal is in an abnormal state, the safety lock unit can lock the storage unit, and the storage unit is in the locked state. Only then can the storage unit be unlocked and accessed.

In addition, once the storage unit is in the locked state, if the user needs to operate the closing unit, he must first perform authentication to enter the storage unit, thereby effectively preventing non-owner users from maliciously closing the safety box module, thereby greatly reducing the risk of The safety performance of the safety box module has been improved.

It can be understood that the above embodiments are only exemplary embodiments adopted to illustrate the principle of the present invention, but the present invention is not limited thereto. For those skilled in the art, without departing from the spirit and essence of the present invention, various modifications and improvements can be made, and these modifications and improvements are also regarded as the protection scope of the present invention.

Claims (10)

1. A data protection system for a mobile terminal, comprising: a state detection module and a safety box module; The state detection module is used to detect whether the mobile terminal is in an abnormal state; the safety box module includes a safety lock unit, a storage unit and a unique closing unit; The safety lock unit is configured to lock the storage unit when the state detection module detects that the mobile terminal is in an abnormal state, so as to restrict the user's access to the storage unit; The storage unit is used to store important data of the mobile terminal; The closing unit is the only way to control the closing of the safety box module, and the closing unit is stored in the storage unit. 2 . The data protection system for a mobile terminal according to claim 1 , wherein the important data comprises: a short message with verification code information. 3 . 3. the data protection system of mobile terminal according to claim 2, is characterized in that, also comprises: short message detection module and transfer module; The short message detection module is configured to detect whether the short message contains verification code information when the mobile terminal receives a short message; The transfer module is configured to transfer the short message with the verification code information to the storage unit for storage when the short message detection module detects that the short message contains verification code information. 4. The data protection system of a mobile terminal according to claim 1, wherein the safety box module further comprises: a verification unit; The verification unit is configured to authenticate the user when the storage unit is in a locked state and the user wants to access the storage unit; The safety lock unit is further configured to unlock the storage unit after the user passes the identity verification of the verification unit. 5. The data protection system of a mobile terminal according to claim 4, wherein the verification unit comprises: a fingerprint collection subunit and a fingerprint comparison subunit; The fingerprint collection subunit is used to collect the current fingerprint information of the user; The fingerprint comparison subunit is used to compare the current fingerprint information with the pre-stored comparison fingerprint information; if the current fingerprint information matches the comparison fingerprint information, the user passes the identity verification; otherwise , the user does not pass authentication. 6. A data protection method for a mobile terminal, wherein the data protection method for the mobile terminal is based on a data protection system for the mobile terminal, and the data protection system for the mobile terminal comprises: a state detection module and a safety box module, wherein the The safety box module includes a safety lock unit, a storage unit and a unique closing unit, and the closing unit is the only way to control the closing of the safety box module; The data protection method of the mobile terminal includes: Step S1, the storage unit stores important data of the mobile terminal and the closing unit; Step S2, the state detection module detects whether the mobile terminal is in an abnormal state; If it is detected in step S2 that the mobile terminal is in an abnormal state, step S3 is performed; Step S3, the safety lock unit locks the storage unit to restrict the user's access to the storage unit. 7 . The data protection method for a mobile terminal according to claim 6 , wherein the important data comprises: a short message with verification code information. 8 . 8. The data protection method of a mobile terminal according to claim 7, wherein the data protection system of the mobile terminal further comprises: a short message detection module and a transfer module; Before the step S1, it also includes: Step S1a, when the mobile terminal receives a short message, the short message detection module detects whether the short message contains verification code information; If it is detected in step S1a that the short message contains verification code information, step S1b is performed; Step S1b, the transfer module transfers the short message with the verification code information to the storage unit for storage. 9. The data protection method for a mobile terminal according to claim 6, wherein the safety box module further comprises: a verification unit; After the step S3, it also includes: Step S4, the verification unit performs identity verification on the user when the storage unit is in a locked state and the user wants to access the storage unit; If the user passes the identity verification in step S4, then execute step S5; Step S5, the safety lock unit performs an unlocking process on the storage unit. 10. The data protection method of a mobile terminal according to claim 9, wherein the verification unit comprises: a fingerprint collection subunit and a fingerprint comparison subunit; The step S4 includes: Step S401, the fingerprint collection subunit collects the current fingerprint information of the user; Step S403, the fingerprint comparison subunit compares the current fingerprint information with the pre-stored comparison fingerprint information; If the current fingerprint information matches the reference fingerprint information, the user passes the identity verification; otherwise, the user does not pass the identity verification.

Images