Network resource isolation method, network resource isolation system and mobile terminal

Abstract

The invention discloses a network resource isolation method, a network resource isolation system and a mobile terminal. The network resource isolation method comprises steps of determining a network communication mechanism corresponding to an appointed process, arranging the appointed process in a corresponding namespace according to the mapping relation between the network communication mechanism and the namespace, determining the other processes except the appointed process in the process, wherein the namespace that the appointed process belongs to is used as a first kind namespace, the namespace that a source process belongs to is used as a second kind namespace, the process of the first kind namespace is isolated from the network resource of a preset physical network and the process of the second kind namespace can recognize the network resource of the preset physic network. The invention can realize the isolation networking mode of the process on the mobile terminal so as to realize the data safety of the terminal user.

Description

technical field [0001] The present invention relates to the technical field of terminals, in particular to a method for isolating network resources, a system for isolating network resources and a mobile terminal. Background technique [0002] In related technologies, in the existing multi-user domain solution, multiple user domains are in the same network namespace, that is to say, multiple user domains share a set of network equipment, that is, they have the same IP address, routing Tables and routing rules have brought great difficulties to the network differentiation between different user domains. For example, to realize that a certain user domain can only access fixed websites, or prohibit a certain user domain from connecting to the external network, or Control a certain user domain to access the Internet through a designated network card, and these situations cannot be solved in the prior art. [0003] Therefore, how to design a new network resource isolation solutio...

AI Technical Summary

Problems solved by technology

[0002] In related technologies, in the existing multi-user domain solution, multiple user domains are in the same network namespace, that is to say, multiple user domains share a set of network equipment, that is, they have the same IP address, routing Tables and routing rules have brought great difficulties to the network differentiation between different user domains. For example, to realize that a certain user domain can only access fixed websites, or prohibit a certain user domain from connecting to the external network, or Control a user domain to access the Internet through a designated network card, and these situations cannot be solved in the existing technology

Images