Method for preventing Android phone short message verification code from stealing

Abstract

The invention discloses a method for preventing an Android phone short message verification code from stealing. According to the method, stain labels are effectively added for verification code data, array structures, array operations, string operations and inter-process data transfer mechanisms related to short message verification code data in a system are modified, file reading and writing corresponding operations (reading and writing of short message database) are modified when the verification code data are secondly stored, the stain labels cannot lose in the spreading process and are extracted when verification codes are transmitted through (short messages or networks), and transmission of the verification code data is prevented based on established rules, so that stealing of the phone short message verification code is prevented. According to the method, accuracy of event detection is ensured based on a protection mode of a data stream, system overhead is low as compared with other methods, and the method can further be used for protection of private data of other types except for the phone short message verification code.

Description

technical field [0001] The invention belongs to the field of mobile data security, and in particular relates to a method for preventing SMS verification codes of Android mobile phones from being stolen. Background technique [0002] At present, smartphones are intercepted and malicious software that steals SMS verification codes emerges in an endless stream. Many mobile phone applications may be bundled with such malicious software, which allows users to steal SMS verification code information without knowing it. As a very common security verification method in China, more and more websites and applications use SMS verification codes to facilitate users to reset passwords (including login passwords and payment passwords). All are regarded as an effective means of safe payment, once stolen, it will probably bring serious economic losses to users. [0003] In systems prior to Android version 4.4, malware can obtain SMS verification codes prior to users by improving its abilit...

AI Technical Summary

Problems solved by technology

The problem with this type of method is that it can only protect the short messages read from the short message database, but cannot prevent the attack method of directly obtaining the content of the short message from the broadcast channel (and sending it out) when receiving the short message

Therefore, none of the existing methods can prevent the SMS verification code from being stolen

Images