CN103619014A - Method and system preventing application data from leakage - Google Patents

Abstract

Translated fromChinese

本发明提供一种防止应用数据泄露的方法，包括如下步骤：根据输入的加密指令对应用进行加密；检测当前的WIFI热点是否为预设的安全WIFI热点；若否，则封锁所述加密应用的缓存数据的读取权限。本发明还提供对应的系统，能提高移动设备中应用的私密数据的安全性能。

The present invention provides a method for preventing application data from leaking, comprising the steps of: encrypting the application according to an input encryption command; detecting whether the current WIFI hotspot is a preset safe WIFI hotspot; if not, blocking the encryption of the application Read permission for cached data. The invention also provides a corresponding system, which can improve the security performance of the private data applied in the mobile device.

Description

Prevent the method and system that application data is revealed

Technical field

The present invention relates to mobile device safe practice field, particularly relate to a kind of method that prevents that application data from revealing, and a kind of system that prevents that application data from revealing.

Background technology

Mobile device, as the function of smart mobile phone, flat board etc. is become stronger day by day, general application as the individual applications such as QQ, microblogging have the caching function that records individual ID and password, and user just can directly login use without inputting account number cipher when login; Although this function can provide for user the facility of communication and amusement, if lost mobile phone, could serious threat owner personal secrets.

Summary of the invention

Based on this, the invention provides a kind of method and system that prevents that application data from revealing, can improve the security performance of the private data of applying in mobile device.

Prevent the method that application data is revealed, comprise the steps:

According to the encrypted instruction of input, application is encrypted;

Whether detect current WIFI focus is the safe WIFI focus of presetting;

If not, block the data cached authority that reads of described encryption application.

Prevent the system that application data is revealed, it is characterized in that, comprising:

Encrypting module, for being encrypted application according to the encrypted instruction of input;

Whether detection module is the safe WIFI focus of presetting for detection of current WIFI focus;

Lockout module, if be not the safe WIFI focus of presetting for current WIFI focus, blocks the data cached authority that reads of described encryption application.

The above-mentioned method and system that prevents that application data from revealing, is set to safe WIFI focus according to the WIFI focus in instruction part mobile device, and certain applications are encrypted; Under safe WIFI focus, encrypt the data cached addressable of application; Under non-security WIFI focus, encrypt the data cached disable access of application; The present invention is based on the technology of the protection application private data of WIFI; user does not allow access to encrypt the data cached of application under the WIFI of non-security authentication focus; after can preventing mobile phone loss, application data is revealed, thereby reaches the effect of protection user private information.

Accompanying drawing explanation

Fig. 1 is that the present invention prevents method that application data reveals schematic flow sheet in one embodiment.

Fig. 2 is that the present invention prevents system that application data reveals structural representation in one embodiment.

Embodiment

Below in conjunction with embodiment and accompanying drawing, the present invention is described in further detail, but embodiments of the present invention are not limited to this.

As shown in Figure 1, be a kind of schematic flow sheet that prevents the method that application data is revealed of the present invention, comprise the steps:

S11, according to input encrypted instruction to application be encrypted;

A plurality of application are installed in mobile device, can be encrypted for the application of partly recording personal account and password, according to the encrypted instruction of user's input, by being encrypted of corresponding application.

Whether S12, to detect current WIFI focus be the safe WIFI focus of presetting;

The WIFI focus that Real-Time Monitoring current mobile device connects, mates it with safe WIFI focus default in equipment, judge whether current WIFI focus is safe WIFI focus.

S13, if not, blocks the data cached authority that reads of described encryption application;

If the WIFI focus that current mobile device connects is not safe WIFI focus default in equipment, correspondingly block each and encrypt the data cached authority that reads in application, do not allow mobile device to access each and encrypt the data cached of application; User is opening while encrypting application, due to cannot reading cache data, therefore need to re-enter account and password, and the account number cipher information of preserving before can not directly using, therefore can improve the security performance of applying.

By above-mentioned steps, user does not allow access to encrypt the data cached of application under the WIFI of non-security authentication focus, can prevent that again the rear application data of mobile phone loss from being revealed.

In a preferred embodiment, also can comprise the steps:

If current WIFI focus is default safe WIFI focus, the data cached authority that reads of open described encryption application.

If the WIFI focus that current mobile device connects is safe WIFI focus default in equipment, corresponding deblocking each encrypt the data cached authority that reads in application, under safe WIFI region, what user can the application of random access mobile phone is data cached.

In a preferred embodiment, described default safe WIFI focus can be:

What receive user's input arranges instruction and password, if described password, by authentication, arranges instruction according to described, preserved login password WIFI focus be set to described default safe WIFI focus;

In the present embodiment, can preserve a plurality of WIFI focuses in mobile device, each WIFI focus records login password; User can arrange instruction by input, some WIFI focus is set as safe WIFI focus; When arranging instruction, input need to input password, the security password that the security password of this input is prestored with equipment mates, if the password of input, can be according to the instruction that arranges of input by authentication, corresponding WIFI focus is set to the default safe WIFI focus of mobile device; The present embodiment is inputted the mode of password by reception, can strengthen the fail safe of mobile device.

Further, also comprise step:

When newly-increased WIFI focus, generate the message data that the whether described newly-increased WIFI focus of inquiry user is set to safe WIFI focus;

When mobile device being detected and increased WIFI focus newly, automatically generate the message data that the whether described newly-increased WIFI focus of inquiry user is set to safe WIFI focus, this message data can be the input frame ejecting on mobile device touch-screen, also can be at the interface that touches screen display, specifically can be set by designer; User, by the message data automatically generating, can carry out the setting of safe WIFI focus more quickly and easily when newly-increased WIFI focus.

In a preferred embodiment, the data cached step that reads authority of the described encryption application of described blockade can be:

Obtain the data cached path of depositing of encrypting application described in each;

Monitor the running of described encryption application;

According to the described path of depositing, when data cached described in monitoring described application access, interrupt the data read operation of described application.

In mobile device, under the installation folder of each application, have special-purpose file and store the data cached of this application, in the present embodiment, for each, encrypt application, need obtain its data cached path of depositing; Under non-security WIFI focus, Real-Time Monitoring is encrypted the running of application, according to the described path of depositing, when data cached described in monitoring described application access, interrupt the data read operation of described application, make user under unverified WIFI region, do not allow to access the data cached of this encryption application, prevent data leakage.

As shown in Figure 2, the present invention also provides a kind of system that prevents that application data from revealing, and comprising:

Encryptingmodule 21, for being encrypted application according to the encrypted instruction of input;

A plurality of application are installed in mobile device, can be encrypted for the application of partly recording personal account and password, according to the encrypted instruction of user's input, by being encrypted of corresponding application.

Whetherdetection module 22 is the safe WIFI focus of presetting for detection of current WIFI focus;

The WIFI focus that Real-Time Monitoring current mobile device connects, mates it with safe WIFI focus default in equipment, judge whether current WIFI focus is safe WIFI focus.

Lockout module 23, if be not the safe WIFI focus of presetting for current WIFI focus, blocks the data cached authority that reads of described encryption application;

If the WIFI focus that current mobile device connects is not safe WIFI focus default in equipment, correspondingly block each and encrypt the data cached authority that reads in application, do not allow mobile device to access each and encrypt the data cached of application; User is opening while encrypting application, due to cannot reading cache data, therefore need to re-enter account and password, and the account number cipher information of preserving before can not directly using, therefore can improve the security performance of applying.

By said system, under the WIFI focus of the non-security authentication of user, do not allow access to encrypt the data cached of application, can prevent that again the rear application data of mobile phone loss from being revealed.

In a preferred embodiment, also can comprise: open module 24, if be default safe WIFI focus for current WIFI focus, the data cached authority that reads of open described encryption application;

If the WIFI focus that current mobile device connects is safe WIFI focus default in equipment, corresponding deblocking each encrypt the data cached authority that reads in application, under safe WIFI region, what user can the application of random access mobile phone is data cached.

In a preferred embodiment, described detection module also for:

What receive user's input arranges instruction and password, if described password, by authentication, arranges instruction according to described, the WIFI focus of having preserved login password is set to described default safe WIFI focus.

In the present embodiment, can preserve a plurality of WIFI focuses in mobile device, each WIFI focus records login password; User can arrange instruction by input, some WIFI focus is set as safe WIFI focus; When arranging instruction, input need to input password, the security password that the security password of this input is prestored with equipment mates, if the password of input, can be according to the instruction that arranges of input by authentication, corresponding WIFI focus is set to the default safe WIFI focus of mobile device; The present embodiment is inputted the mode of password by reception, can strengthen the fail safe of mobile device.

In a preferred embodiment, described detection module also for:

When newly-increased WIFI focus, generate the message data that the whether described newly-increased WIFI focus of inquiry user is set to safe WIFI focus;

When mobile device being detected and increased WIFI focus newly, automatically generate the message data that the whether described newly-increased WIFI focus of inquiry user is set to safe WIFI focus, this message data can be the input frame ejecting on mobile device touch-screen, also can be at the interface that touches screen display, specifically can be set by designer; User, by the message data automatically generating, can carry out the setting of safe WIFI focus more quickly and easily when newly-increased WIFI focus.

In a preferred embodiment, described lockout module also for:

Obtain the data cached path of depositing of encrypting application described in each;

Monitor the running of described encryption application;

According to the described path of depositing, when data cached described in monitoring described application access, interrupt the data read operation of described application;

In mobile device, under the installation folder of each application, have special-purpose file and store the data cached of this application, in the present embodiment, for each, encrypt application, need obtain its data cached path of depositing; Under non-security WIFI focus, Real-Time Monitoring is encrypted the running of application, according to the described path of depositing, when data cached described in monitoring described application access, interrupt the data read operation of described application, make user under unverified WIFI region, do not allow to access the data cached of this encryption application, prevent data leakage.

The present invention prevents the method and system that application data is revealed, and according to the WIFI focus in instruction part mobile device, is set to safe WIFI focus, and certain applications are encrypted; Under safe WIFI focus, encrypt the data cached addressable of application; Under non-security WIFI focus, encrypt the data cached disable access of application; The present invention is based on the technology of the protection application private data of WIFI; user does not allow access to encrypt the data cached of application under the WIFI of non-security authentication focus; after can preventing mobile phone loss, application data is revealed, thereby reaches the effect of protection user private information.

The above embodiment has only expressed several execution mode of the present invention, and it describes comparatively concrete and detailed, but can not therefore be interpreted as the restriction to the scope of the claims of the present invention.It should be pointed out that for the person of ordinary skill of the art, without departing from the inventive concept of the premise, can also make some distortion and improvement, these all belong to protection scope of the present invention.Therefore, the protection range of patent of the present invention should be as the criterion with claims.

Claims (10)

1. prevent the method that application data is revealed, it is characterized in that, comprise the steps:

According to the encrypted instruction of input, application is encrypted;

Whether detect current WIFI focus is the safe WIFI focus of presetting;

If not, block the data cached authority that reads of described encryption application.

2. prevent according to claim 1 the method that application data is revealed, it is characterized in that,

If current WIFI focus is default safe WIFI focus, the data cached authority that reads of open described encryption application.

3. prevent according to claim 1 the method that application data is revealed, it is characterized in that, what receive user's input arranges instruction and password, if described password is by authentication, according to described instruction is set, the WIFI focus of having preserved login password is set to described default safe WIFI focus.

4. prevent according to claim 3 the method that application data is revealed, it is characterized in that, also comprise step:

When newly-increased WIFI focus, generate the message data that the whether described newly-increased WIFI focus of inquiry user is set to safe WIFI focus.

5. prevent according to claim 1 the method that application data is revealed, it is characterized in that, the data cached step that reads authority of the described encryption application of described blockade is:

Obtain the data cached path of depositing of encrypting application described in each;

Monitor the running of described encryption application;

According to the described path of depositing, when data cached described in monitoring described application access, interrupt the data read operation of described application.

6. prevent the system that application data is revealed, it is characterized in that, comprising:

Encrypting module, for being encrypted application according to the encrypted instruction of input;

Whether detection module is the safe WIFI focus of presetting for detection of current WIFI focus;

Lockout module, if be not the safe WIFI focus of presetting for current WIFI focus, blocks the data cached authority that reads of described encryption application.

7. prevent according to claim 6 the system that application data is revealed, it is characterized in that, also comprise open module, if be default safe WIFI focus for current WIFI focus, the data cached authority that reads of open described encryption application.

8. prevent according to claim 6 the system that application data is revealed, it is characterized in that, described detection module also for:

What receive user's input arranges instruction and password, if described password, by authentication, arranges instruction according to described, the WIFI focus of having preserved login password is set to described default safe WIFI focus.

9. prevent according to claim 8 the system that application data is revealed, it is characterized in that, described detection module also for:

When newly-increased WIFI focus, generate the message data that the whether described newly-increased WIFI focus of inquiry user is set to safe WIFI focus.

10. prevent according to claim 6 the system that application data is revealed, it is characterized in that, described lockout module also for:

Obtain the data cached path of depositing of encrypting application described in each;

Monitor the running of described encryption application;

According to the described path of depositing, when data cached described in monitoring described application access, interrupt the data read operation of described application.

Images