Method for controlling safety of application software and terminal

Abstract

The invention provides a method for controlling the safety of application software and a terminal. The method comprises the steps of: obtaining security policy information of the application software by an executing engine through a security policy engine, and using the security policy information as static security policy information of the application software; registering dynamic security policy information to the executing engine by the application software; generating new security policy information by the executing engine according to the static security policy information and the dynamic security policy information, wherein the declaration in the new security policy information is controlled resources accessed by the application software in the declarations of the static security policy information and the dynamic security policy information; and based on the new security policy information, processing an access request of the application software by the executing engine. The invention combines the security control of an operating system layer with the security control of an application layer to realize the security control of the application software, thereby improving thesecurity control capability and the operatable and manageable capability, and having high security and good expansibility.

Description

technical field [0001] The invention relates to computer technology, in particular to an application software security control method and a terminal. Background technique [0002] Terminal application software security control refers to the control of application software's ability to access controlled resources. Controlled resources are resources that are constrained when accessed. For example, hardware resources (SIM card, camera equipment, recording equipment, U disk, hard disk, encryption card and application programs, etc.), software resources (operating system core layer, application software that can only be used by specific users, etc.) and user private data in the terminal (Contacts, mail, SMS, MMS, download data, certificates, etc.). Only the agreed application software can be authorized to access the resources and user private data in the terminal. [0003] There are various schemes for providing terminal application software security control. Some are applica...

AI Technical Summary

Problems solved by technology

[0007] The present invention provides an application software security control method and a terminal, which are used to solve the problems in the prior art that the application software control method has poor security control capability, low security, low operability and manageability, and poor scalability

Images