Smart mobile phone multi-user mode right management method and Rights Management SystemTechnical field
The present invention relates to a kind of right management method, specifically, is a kind of smart mobile phone multi-user mode right management method and Rights Management System.
Background technology
Along with the extensive use of smart mobile phone, application on smart mobile phone is also more and more, and the field relating to is also more and more extensive, in the mobile phone that people are even stored in oneself by a lot of personal information of oneself, business information, the life being greatly convenient for people to, but this also brings a lot of problems.For example, in life, we may run into following several situation:
1, passerby's first is used mobile phone and is made a phone call.
2, the head of a family is child bull machine, is only used for the application of communication and study aspect but want to limit it, does not allow it to play games
3,, in the time appreciating the picture in mobile phone with friend, want that mobile phone is lent to the other side appreciates the picture in mobile phone, but do not want seeing other sensitive information in mobile phone.
4, in working conference, in mobile phone, in certain application (may be working software), there is certain part of sensitive document, want to subordinate or pass round for a look simultaneously, but not wanting to allow it can see the sensitive information in other application.
In sum, smart mobile phone also needs multi-user access mechanism.The operating system of existing smart mobile phone as symbian system be exactly to design for alone family cell phone, other certain operations system is as Windows Phone, iPhone OS and android develop from user's desktop system, they are respectively from MS Windows, OS X, Linux, but these operating systems and unlike desktop system support multi-user.
Summary of the invention
In order to solve existing intelligent mobile phone system and unlike desktop system support multi-user, cannot to realize the rights management of intelligent mobile phone system.The present invention proposes one and is applicable to smart mobile phone multi-user mode Rights Management System and method of operation, by setting different user rights of using, reaches the object of sensitive information in protection mobile phone, and also can realize the quick switching of user right.
Smart mobile phone multi-user mode right management method of the present invention, realize by following step:
Step 1: the operating right of setting user right grade and having;
According to a certain moment user's of smart mobile phone difference, user right grade is divided into 1,2,3,4 level-right users from high to low.
Wherein, 1 level-right user has the unloading of installation application program, access all application program and resource, generate 2,3,4 level-right users, application program and the resource that 2,3,4 level-right users can access and the operating right that switches to 2,3,4 level-right users are set.
2 level-right users only have application program and the resource of thepermission 2 level-right users access ofaccess 1 level-right user setting, generate 3 level-right users, application program and the resource that 3 level-right users can access and the operating right that switches to 1,3,4 level-right users are set.
3 level-right users only have application program and the resource that 3 level-right users that access 1 level-right user or 2 level-right users arrange can access and the operating right that switches to 1,2,4 level-right users;
And 4 level-right users only have application program and the resource of the set permission ofaccess 1 level-right user 4 level-right user access and switch to 1,2 level-right users' operating right.
Step 2: each level-right user's unlocking pin and the application of each level-right user's smart mobile phone and resource access authority are set; When each level-right user's unlocking pin and smart mobile phone application and resource access authority after setting completed, automatically generate profile configuration file; And in 1,2 level-right users' unlocking pin and smart mobile phone application and resource access authority after setting completed, enterstep 3; And in 3 level-right users' unlocking pin and smart mobile phone application and resource access authority after setting completed, directly enterstep 4.
Step 3: by smart mobile phone current time state, select the switching mode between each Permission Levels authority user;
Switching between each level-right user comprises three kinds of modes:
Mode one: while using in smart mobile phone application program, carry out the switching of each level-right by the long shutdown button of pressing;
Mode two: smart mobile phone is in released state, and when homepage in smart mobile phone, switch by long user's switching menu button of pressing shutdown button or click on mobile phone;
Mode three: smart mobile phone is in screen lock state, by selecting unlocking manner to carry out the switching of user class.
In aforesaid way one and mode two, if user, while turning to low rights class user by high Permission Levels user, without verifying, directly entersstep 4; If while turning to high Permission Levels user by low rights class user, need to carry out corresponding Authority Verification, the unlocking pin of setting for the level-right user who needs to switch in input step two, entersstep 4 subsequently; In switching between above-mentioned each level-right user, automatically eliminate and in smart mobile phone, have casual user.
Step 4: the application of each Permission Levels authority user smart mobile phone and resource access control of authority;
Call loadapplication () function, the PackageManagerService service providing by Android system, the permission authority of all application and resource in acquisition smart mobile phone, contrast with the profile configuration file generating instep 2, the smart mobile phone application permission authority corresponding with resource not having in profile configuration file forbidden; Meanwhile, in the onRestart at the main interface of Android system (), function call loadapplication () realizes the set smart mobile phone Fumction display of current level-right user.
For the smart mobile phone multi-user mode Rights Management System of above-mentioned smart mobile phone multi-user mode right management method, compriseauthority setting module 1, passwordauthority configuration module 2, userright control module 3, user class authorityrecognition judge module 4,authentication module 5 and user'shandover module 6.
User right grade is divided into from high to low 1,2,3,4 level-right users by described authority settingmodule 1, and set the operating right having for each level-right user.Wherein, 1 level-right user has the unloading of installation application program, access all application program and resource, generate 2,3,4 level-right users, application program and the resource that 2,3,4 level-right users can access and the operating right that switches to 2,3,4 level-right users are set.2 level-right users only have application program and the resource of thepermission 2 level-right users access ofaccess 1 level-right user setting, generate 3 level-right users, application program and the resource that 3 level-right users can access and the operating right that switches to 1,3,4 level-right users are set.3 level-right users only have application program and the resource that 3 level-right users that access 1 level-right user or 2 level-right users arrange can access and the operating right that switches to 1,2,4 level-right users; And 4 level-right users only have application program and the resource of the set permission ofaccess 1 level-right user 4 level-right user access and switch to 1,2 level-right users' operating right.
Passwordauthority configuration module 2 is used for arranging for each level-right user the password of release, is also used for each level-right user to arrange the access rights of application and resource in smart mobile phone; After each level-right user's unlocking pin and the authority setting of the smart mobile phone application that allows to access and resource, automatically generate profile configuration file by passwordauthority configuration module 2.
The smart mobile phone that described userright control module 3 is used for having according to each level-right user who sets in authority configuration module is applied with resource access control of authority smart mobile phone in the time of each level-right user, shows addressable smart mobile phone application and resource.
Wherein, user'shandover module 6 is used for controlling each level-right user's switching mode, is inside set with three kinds of switching modes between each level-right user, is respectively:
A, the long closing key of pressing switch user;
B, user's switching menu button of clicking on mobile phone switch;
C, selection unlocking manner carry out the switching of user class.
Described user class authorityrecognition judge module 4 is used for identifying the use state of current smart mobile phone, and according to the use state of current smart mobile phone, switching mode between the corresponding each level-right user who sets in invoke user switching mode setting module, is specially:
The use state of smart mobile phone comprises three kinds, is respectively:
In A, smart mobile phone, application program is opened while use;
B, smart mobile phone be in released state, but do not use any application program (i.e. the homepage in smart mobile phone);
C, smart mobile phone are in screen lock state.
After user class authorityrecognition judge module 4 is identified above-mentioned three kinds of smart mobile phone states, three kinds of switching modes in corresponding invokeuser handover module 6 respectively; If smart mobile phone, in the time of state A, calls switching mode a; If smart mobile phone, in the time of state B, calls switching mode a and b simultaneously; If smart mobile phone, in the time of C state, calls switching mode c.
The user class authority recognition judgemodule 4 also level-right to current time user and required switching user's level-right judges; If current time user's level-right and required switching user's level-right when switching from high to low, can directly be carried out user's switching; If active user's level-right and the user class authority switched when switching from low to high, enterauthentication module 5; Inauthentication module 5, input is the unlocking pin that required switching level-right user arranges by password authority configuration module, the password arranging for required switching level-right user inauthentication module 5 logarithm input passwords and passwordauthority configuration module 2 compares, if the completing user that is consistent switches; Do not meet and re-enter.
When above-mentioned user class authority recognition judgemodule 4 also switches between each level-right user, eliminate the casual user who exists.
The invention has the advantages that:
1, smart mobile phone multi-user mode right management method of the present invention, according to authority classification needs, set the user of four ranks, and by setting different user rights of using, reach the object of sensitive information in protection mobile phone, and also can realize the quick switching of user right, thereby the user authority management of providing convenience for user;
2, smart mobile phone multi-user mode right management method of the present invention, for user provides 3 kinds of switching modes, user, according to use scenes, realizes easily and quickly and switching.
3, smart mobile phone multi-user mode right management method of the present invention, according to the feature of smart mobile phone self, carries out control of authority based on class of subscriber, and realization impact is little, effect is remarkable.
Accompanying drawing explanation
Fig. 1 smart mobile phone multi-user mode of the present invention right management method flow chart;
Fig. 2 smart mobile phone multi-user mode of the present invention Rights Management System overall structure block diagram.
In figure:
1-authority setting module 2-password authority configuration module 3-user right control module
4-user class authority recognition judgemodule 4 5-authentication module 6-user handover modules
Embodiment
Below in conjunction with accompanying drawing, the present invention will be further described.
Due to the multi-user mode access mechanism in smart mobile phone derive from computer operating system in multi-user access mechanism, but again with conventional computer system in multi-user access concept some do not put with, the multi-user access in computer system refers to: multiple users can use a computer system to do different things simultaneously; And in smart mobile phone, synchronization only has a user can use smart mobile phone.Therefore, the present invention uses at alone family on the basis of mobile phone, and the user who uses mobile phone person to be divided into different brackets, simultaneously for they provide corresponding authority, is realized by following step:
Step 1: the operating right of setting user right grade and having;
According to a certain moment user's of smart mobile phone difference, user right grade is divided into 1,2,3,4 level-right users from high to low, corresponding user is divided into the owner, general user, casual user and visitor respectively;
Wherein, 1 level-right user has the unloading of installation application program, access all application program and resource, generate 2,3,4 level-right users, application program and the resource that 2,3,4 level-right users can access and the operating right that switches to 2,3,4 level-right users are set;
2 level-right users only have application program and the resource of thepermission 2 level-right users access ofaccess 1 level-right user setting, generate 3 level-right users, application program and the resource (scope need allow 1 level-right user application program and the resource of 2 level-right users access) that 3 level-right users can access is set and switches to 1,3,4 level-right users' operating right;
3 level-right users only have application program and the resource that 3 level-right users that access 1 level-right user or 2 level-right users arrange can access and the operating right that switches to 1,2,4 level-right users;
And 4 level-right users only have application program and the resource of the set permission ofaccess 1 level-right user 4 level-right user access and switch to 1,2 level-right users' operating right.
Step 2: each level-right user's unlocking pin and the application of each level-right user's smart mobile phone and resource access authority are set;
For preventing that each level-right user from, in the time using smart mobile phone, cannot enter the main interface of smart mobile phone, or directly entering into 1 level-right user's main interface after screen locking, therefore need each level-right user instep 1 to arrange the password of corresponding release; Common 1 level-right user and 2 level-right users can select safe unlocking manner, as: the unlocking manners such as numerical ciphers, nine grids; Visitor can adopt unlocking manner easy but safely, as: shake, slip release etc. are without the unlocking manner of password.
After password being set for each level-right user, can arrange with resource access authority each level-right user's smart mobile phone application; Wherein, smart mobile phone application comprises with resource access authority: personal information access authority (comprising: note, the rights of using such as contacts list, picture), resource access authority (comprising: the rights of using such as the various transducers such as gravity, WiFi, GPS, bluetooth, camera), system arrange access rights (comprising: the unloading of application program and installation, system date and time is set, setting that default software is set is as rights of using such as input method designs), application program access rights.When each level-right user's unlocking pin and smart mobile phone application and resource access authority after setting completed, automatically generate profile configuration file, completed since then each rank user's initial setting up.In selectedstep 1, after each level-right user, the unlocking pin that also can arrange each level-right user or smart mobile phone application are modified with resource access authority, can automatically generate subsequently new profile configuration file.And in 3 level-right users' unlocking pin and smart mobile phone application and resource access authority after setting completed, directly enterstep 4.
Step 3: by smart mobile phone current time state, select the switching mode between each Permission Levels authority user;
After completing steps two, need to realize each level-right user by the mode of switching and access application and the resource access that smart mobile phone is corresponding.Therefore in the present invention, the switching between each level-right user comprises three kinds of modes:
Mode one: while using in smart mobile phone certain application program, carry out the switching of each level-right by the long shutdown button of pressing;
Mode two: smart mobile phone is in released state, but while not using any application program (i.e. the homepage in smart mobile phone), switch by long user's switching menu button of pressing shutdown button or click on mobile phone;
Mode three: smart mobile phone is in screen lock state, need to select a kind of user to access mobile phone time, by selecting unlocking manner to carry out the switching of user class;
In aforesaid way one and mode two, if user, while turning to low rights class user by high Permission Levels user,, without verifying (inputting password), directly entersstep 4; If while turning to high Permission Levels user by low rights class user, need to carry out corresponding Authority Verification, the unlocking pin of setting for the level-right user who needs to switch in input step two, entersstep 4 subsequently.
In switching, automatically eliminate casual user between above-mentioned each level-right user.
Step 4: the application of each Permission Levels authority user smart mobile phone and resource access control of authority;
Instep 3, be switched to after each level-right user, call loadapplication () function, and the profile configuration file generating according to each level-right user instep 2, show smart mobile phone application and the resource of each level-right user-accessible, thereby realize inspection and the control of each rank user's smart mobile phone application and access authorization for resource.In above-mentioned loadapplication () function, the PackageManagerService service providing by Android system, the permission authority of all application and resource in acquisition smart mobile phone, and the profile configuration file generating in permission authority by all application and resource in smart mobile phone andstep 2 contrasts, the smart mobile phone application permission authority corresponding with resource not having in profile configuration file forbidden; Simultaneously, in the onRestart at the main interface of Android system (), function call loadapplication () realizes the set smart mobile phone Fumction display of current level-right user, reaches the control of the smart mobile phone operating right of controlling each level-right user.For example: call function is not set in profile configuration file, the application forbidding that therefore can use to smart mobile phone call function permission authority at loadapplication () function, i.e. these application with call function all do not show.
Also propose one for said method the present invention and be applicable to smart mobile phone multi-user mode Rights Management System, compriseauthority setting module 1, passwordauthority configuration module 2, userright control module 3, user class authorityrecognition judge module 4,authentication module 5 and user'shandover module 6.
User right grade is divided into from high to low 1,2,3,4 level-right users by described authority setting module 1, and corresponding user is the owner, general user, casual user and visitor respectively; And set the operating right having for each level-right user.Wherein, 1 level-right user has the unloading of installation application program, access all application program and resource, generate 2,3,4 level-right users, application program and the resource that 2,3,4 level-right users can access and the operating right that switches to 2,3,4 level-right users are set; 2 level-right users only have application program and the resource of the permission 2 level-right users access of access 1 level-right user setting, generate 3 level-right users, application program and the resource (scope need allow 1 level-right user application program and the resource of 2 level-right users access) that 3 level-right users can access is set and switches to 1,3,4 level-right users' operating right; 3 level-right users only have application program and the resource that 3 level-right users that access 1 level-right user or 2 level-right users arrange can access and the operating right that switches to 1,2,4 level-right users; And 4 level-right users only have application program and the resource of the set permission of access 1 level-right user 4 level-right user access and switch to 1,2 level-right users' operating right.
For preventing that each level-right user is in the time using mobile phone, after screen locking, cannot enter the main interface of smart mobile phone, or directly enter into 1 level-right user's main interface, therefore each level-right user arranges the password of release by passwordauthority configuration module 2 for each level-right user; Passwordauthority configuration module 2 has unlock password mode and non-unlock password mode can be selected, and common 1 level-right user and 2 level-right users can select safe unlock password mode, as: the unlocking manners such as numerical ciphers, nine grids; Visitor can adopt non-unlock password mode easy but that fail safe is low, as: shake, slip release etc. are without the mode that cracks of password.
Passwordauthority configuration module 2 is also used for the each level-right user who sets inauthority setting module 1 to arrange in smart mobile phone the access rights of application and resource; Wherein, smart mobile phone application comprises with access authorization for resource: personal information rights of using (comprising: note, the rights of using such as contacts list, picture), resource access rights of using (comprising: the rights of using such as the various transducers such as gravity, WiFi, GPS, bluetooth, camera), system setup and use authority (comprising: the unloading of application program and installation, system date and time is set, setting that default software is set is as rights of using such as input method designs), application program rights of using.
After above-mentioned each level-right user's unlocking pin and the authority setting of the smart mobile phone application that allows to access and resource, automatically generate profile configuration file by passwordauthority configuration module 2.
Described user right control module 3 is used for the smart mobile phone application that has according to each level-right user who sets in authority setting module 1 and resource access control of authority smart mobile phone in the time of each level-right user, shows addressable smart mobile phone application and resource; Concrete mode is: user right control module 3 is called loadapplication () function, and according to generating profile configuration file by password authority configuration module 2, be presented at the application of the smart mobile phone that can access and the resource that in password authority configuration module 2, arrange for current level-right user, thereby realize inspection and the control of each rank user's smart mobile phone application and access authorization for resource.In above-mentioned loadapplication () function, the PackageManagerService service providing by Android system, the permission authority of all application and resource in acquisition smart mobile phone, and the profile configuration file generating in permission authority by all application and resource in smart mobile phone and password authority configuration module 2 contrasts, the smart mobile phone application not having in profile configuration file is forbidden with the corresponding permission authority of access authorization for resource; Simultaneously, realize by total onRestart () the function call loadapplication () of Android system the smart mobile phone application that can access each level-right user in authority setting module 1 and show with resource function, reach each level-right user's smart mobile phone application and the control of resource access authority.
Described user'shandover module 6 is used for controlling each level-right user's switching mode, is inside set with three kinds of switching modes between each level-right user, is respectively:
A, the long closing key of pressing switch user;
B, user's switching menu button of clicking on mobile phone switch;
C, selection unlocking manner carry out the switching of user class.
Described user class authorityrecognition judge module 4 is used for identifying the use state of current smart mobile phone, and according to the use state of current smart mobile phone, switching mode between the corresponding each level-right user who sets in invoke user switching mode setting module, is specially:
The use state of smart mobile phone comprises three kinds, is respectively:
In A, smart mobile phone, application program is opened while use;
B, smart mobile phone be in released state, but do not use any application program (i.e. the homepage in smart mobile phone);
C, smart mobile phone are in screen lock state.
After user class authorityrecognition judge module 4 is identified above-mentioned three kinds of smart mobile phone states, three kinds of switching modes in corresponding invokeuser handover module 6 respectively; If smart mobile phone, in the time of state A, calls switching mode a; If smart mobile phone, in the time of state B, calls switching mode a and b simultaneously; If smart mobile phone, in the time of C state, calls switching mode c.
The user class authorityrecognition judge module 4 also level-right to current time user and required switching user's level-right judges; If current time user's level-right and required switching user's level-right when switching from high to low, can directly be carried out user's switching; If active user's level-right and the user class authority switched when switching from low to high,enter authentication module 5; Inauthentication module 5, input is the unlocking pin that required switching level-right user arranges by password authority configuration module,authentication module 5 compares the password arranging for required switching level-right user in input password and passwordauthority configuration module 2, if the completing user that is consistent switches; Do not meet and re-enter.
When above-mentioned user class authorityrecognition judge module 4 also switches between each level-right user, eliminate the casual user who exists.