File security protection method and apparatus

Abstract

The invention provides a file security protection method and apparatus. The method comprises the steps of initializing a kernel controller in a Linux kernel, and loading a first virtual operation system and a second virtual operation system one by one; when the first virtual operation system receives a private file opening instruction triggered by a user, switching the current operation system to the second virtual operation system through the kernel controller, and halting the first virtual operation system, wherein the private file opening instruction is triggered based on description information of a private file stored in a first storage space; and opening the private file stored in a second storage space and associated with the description information in the second virtual operation system, wherein the first storage space and the second storage space are invisible for each other. According to the method and the apparatus, the private file can be effectively prevented from being stolen by a malicious program in a viewing process, so that the security of the private file is improved.

Description

technical field [0001] The invention relates to the technical field of mobile communication, in particular to a file security protection method and device. Background technique [0002] With the development of mobile communication technology, mobile terminals such as mobile phones are more and more widely used in people's life. However, with the proliferation of malicious software and Trojan horse viruses, the problems of user information security and privacy protection are becoming increasingly prominent. Users' personal information on mobile terminals is often stolen maliciously, such as private pictures being screenshotted, input passwords being stolen by keyloggers, etc. With the rise of services such as mobile payment, it is necessary to prevent passwords, user bank account numbers and other personal information from being maliciously stolen The problem of theft is even more imminent. [0003] In the prior art, in order to solve the above problems, the ARM TrustZone te...

AI Technical Summary

Problems solved by technology

[0004] However, the ARM TrustZone technology uses the s bit on the central processing unit (Central Processing Unit, CPU) to manage the security zone and the non-security zone, and the security zone is configured in the ROM (Read-Only Memory, read-only memory) of the CPU. Due to the limited storage space of the ROM of the CPU, limited by the space of the ROM, the operating system in the security zone is usually a very simplified system with limited functions, and some large files cannot be effectively protected by storing them in the ROM of the CPU.

In addition, because the security zone established based on the CPU has high requirements for programming languages, the programming in this security zone is all using C language, which has many restrictions in use, which is very inconvenient and troublesome to debug, and is not suitable for large-scale applications.

Images