CN104184750B - A kind of method and system for protecting end-user listening data - Google Patents

Abstract

The invention provides a kind of method and system for protecting end-user listening data, wherein, methods described includes：When network connection be present in server and client：Monitoring server client presence；When monitoring server is to client presence exception, security alarm is carried out to the user data of terminal where client；The client presence is abnormal, including：Client is not online within the time of setting, or client executing deletion is acted.The present invention need not be that terminal increases extra hardware, realize automatic, the advantageously protection to end-user listening data.

Description

A method and system for protecting end user data

technical field

The invention relates to the security field of terminal user data, and relates to a method and system for protecting terminal user data.

Background technique

With the enhancement of mobile phone functions, such as mobile phone cameras, mobile phone taxis, and mobile shopping, users store more and more personal data on mobile phones. Even personal safety hazards.

Based on the increasing willingness of users to protect mobile phone data, mobile phone data security has become a research hotspot. In summary, it generally includes the following mobile phone data security technologies:

1. Configure an additional hardware device for the mobile phone, and the hardware device will detect the distance between itself and the mobile phone. If the distance exceeds the preset value, an alarm message will be sent to reduce the probability of mobile phone users losing their mobile phones;

2. The mobile phone is bound to the SIM card. When the mobile phone detects that the SIM card has changed, it will prompt the user to enter the PIN code. After verifying that the entered PIN code is correct, the updated SIM card will work;

3. Install a biometric identification (such as fingerprint) module on the mobile phone. When the mobile phone is turned on or changes from standby to working state, it needs to identify the correct information through biometric identification before displaying the normal user interface;

4. Install a client program with anti-theft function on the mobile phone, and set a security number that can send messages to the mobile phone when the mobile phone is stolen. At the same time, install the same client program on the mobile phone with the security number. When the user confirms After the mobile phone is stolen, the client program on the mobile phone where the security number is located sends an instruction to the client program of the stolen mobile phone to lock the stolen mobile phone.

There are following problems in the above-mentioned mobile phone data security technology:

For the first type, it not only requires additional configuration of hardware devices, but also requires the user to carry additional hardware devices in order to reduce the loss of mobile phones, and even the additional hardware devices may be lost;

For the second type, the PIN code is not commonly used data by the user, and there is a possibility of being forgotten by the user for the non-used data;

For the third type, the biometric identification module is installed on the mobile phone, which increases the volume and cost of the mobile phone; in addition, the performance requirements of the biometric identification module are high, and once the module fails, the mobile phone cannot be used.

For the fourth type, if the mobile phone where the security number is located needs to communicate with the stolen mobile phone, there needs to be a network connection between the two mobile phones. When there is no network connection between the two mobile phones, the protection of mobile phone data cannot be realized.

Contents of the invention

The present invention provides a method and system for protecting terminal user data to solve the problem of how to provide users with a more convenient terminal user data protection mechanism without changing the hardware of the mobile phone.

In order to solve the above technical problems, the present invention provides a method for protecting terminal user data, the method comprising:

When there is a network connection between the server and the client:

The server monitors the online status of the client;

When the server detects that the online status of the client is abnormal, it will send a security alarm to the user data of the terminal where the client is located;

The online state of the client is abnormal, including: the client is offline within a set time, or the client is deleted.

Optionally, when the abnormal online status of the client includes that the client is offline within the set time, the server monitors that the client is offline within the set time, including:

The server sends a request message to the client within each time unit included in the set time;

If the server does not receive a response message from the client within any time unit, it considers that the client is offline within the set time.

Optionally, the method also includes:

When there is no network connection between the server and the client:

The client on the terminal records user usage habit data, and the user habit data includes: the application program used within a period of time and the location within a period of time;

The client terminal judges whether the user usage habit data matches the user data monitored by the client terminal, and if not, the client terminal performs a protection operation on the user data of the terminal where it is located.

Optionally,

The client logs applications used over a period of time, including:

The client records the period of time each application program runs in the foreground within the preset number of days;

The client counts the records of running the same application program in the foreground during the same time period every day, and uses the program name and time period of the application program as the user's usage habit data;

The position of the client record over a period of time includes:

The client records the location of the terminal in each time period within the preset number of days;

The client counts the records in the same location during the same time period every day, and uses the location and time period as user usage habit data.

Optionally, the client judges whether the user usage habit data fits the user data monitored by the client, including:

The client will fit the data monitored in one day in the same time period and the same type as the user's usage habits data with the corresponding user's usage habits data, and calculate the fitting degree;

The client sums the calculated fitting degrees and judges whether the summation result is less than the preset value. If it is smaller than the preset value, it means that the user usage habit data does not match the user data monitored by the client.

Optionally, the client performs a protection operation on user data of its terminal, including:

The client prevents access to user data on the terminal it is on.

In order to solve the above technical problems, the present invention also provides a system for protecting terminal user data, the system includes a server, and the server includes a client status monitoring module and a data protection module, wherein:

The client status monitoring module is used to monitor the online status of the client when there is a network connection between the server and the client, and notify the data protection module when an abnormal online status of the client is detected; the online status of the client is Abnormal, including: the client is offline within the set time, or deletes the client;

The data protection module is configured to give a security alarm to the user data of the terminal where the client is located when the online status of the client is abnormal.

Optionally, the client status monitoring module is configured to detect that the client is not online within a set period of time, including:

Send a request message to the client within each time unit included in the set time;

If no response message is received from the client within any time unit, it is considered that the client is offline within the set time.

Optionally, the system further includes a client located on the terminal, the client includes a terminal loss judgment module and a data protection module, wherein:

The terminal loss judging module is used to record the user usage habit data when there is no network connection between the client and the server, and judge whether the user usage habit data matches the user data detected by the client, and if not, notify the The data protection module; the user habit data includes: the application program used within a period of time and the location within a period of time;

The data protection module is configured to perform a protection operation on the user data of the terminal where the client is located.

Optionally,

The terminal loss judging module is used to record the application programs used within a period of time, including:

Record the time period of each application program running in the foreground within the preset number of days; count the records of running the same application program in the foreground within the same time period every day, and use the program name and time period of the application program as user usage habit data;

The terminal loss judging module is used to record the position in a period of time, including:

Record the location of the terminal in each time period within the preset number of days; count the records of the same location in the same time period every day, and use the location and time period as user usage habit data.

Optionally,

The terminal loss judging module is used for judging whether the user usage habit data and the user data monitored by the client end fit, including:

Fit the data that is in the same time period and the same type as the user's usage habit data monitored in one day with the corresponding user's usage habit data to calculate the degree of fit;

Sum the calculated fitting degrees to determine whether the summation result is less than the preset value. If it is less than the preset value, it means that the user usage habit data does not match the user data monitored by the client.

Optionally, the data protection module is configured to perform protection operations on user data of the terminal where the client is located, including:

Prevent user data from being accessed on the terminal where the client is located.

In the above technical solution, a server is set up to communicate with the client, and the server monitors the status of the client to determine whether the terminal where the client is located is at risk of being lost; Whether the terminal is at risk of being lost. This technical solution does not require user participation, does not need to add additional hardware to the terminal, and realizes automatic and convenient protection of terminal user data.

Description of drawings

FIG. 1 is a flowchart of a method for protecting terminal user data by a server in this embodiment;

FIG. 2 is a flowchart of a method for protecting terminal user data by a client in this embodiment;

FIG. 3 is a block diagram of a server for protecting terminal user data in this embodiment;

FIG. 4 is a block diagram of a client terminal for protecting terminal user data in this embodiment.

Detailed ways

In order to make the purpose, technical solution and advantages of the present invention more clear, the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. It should be noted that, in the case of no conflict, the embodiments in the present application and the features in the embodiments can be combined arbitrarily with each other.

When there is a network connection between the server and the client, the method shown in Figure 1 can be used to protect the terminal user data by the server, as shown in the figure:

S101 The server monitors the online status of the client;

S102 The server judges whether the online status of the client is abnormal, if yes, execute step S103; if not, execute step S101;

The online status of the client is abnormal, including: the client is not online within the set time, or the client is deleted;

Preferably, the server monitors that the client is not online within a set period of time, including:

The server sends a request message to the client within each time unit included in the set time; if the server does not receive a response message from the client within each time unit, it considers that the client is offline within the set time; assuming The set time is 2 days, the server sends a request message to the client on the first day, if no response message is received from the client, the current client status is set to be offline for 1 day; the server continues to send to the client on the second day Request message, if the response message from the client is still not received, the current client status is set to be offline for 2 days, and the online status of the client is considered abnormal;

Since the client program in the prior art is executed to delete, it can send a message to the server, so the server can monitor whether the message is received from the client, and if it receives the message, it will consider that the client's online status is abnormal; Optionally, when installing the client, the terminal user can set whether to enable the function of "send the message to the server when the client is deleted". If this function is not enabled, the server will not delete the client when it is deleted. Protection operations will be performed on user data, so that end users can delete the client according to their own wishes;

S103 performing a security alarm on the user data of the terminal where the client is located;

Optionally,

When the server can store the terminal user’s emergency contact number, the operator’s customer service system can be notified of the security alarm of the terminal user’s data and the terminal user’s emergency contact number, so that the operator’s customer service system can subsequently notify the user that the terminal may be lost ; or when the operator's user database can record the emergency contact number between the client and the end user where the client is located, the server can send the security alarm of the end user data and the client identification to the operator's customer system, which is convenient for the operator's customer service The system confirms the terminal user according to the client identification, and then notifies the user that his terminal may be lost;

When there is no network connection between the server and the client, the method shown in Figure 2 can be used to protect the terminal user data from the client, as shown in the figure:

S201 The client on the terminal records user usage habit data;

The user habit data includes: the application programs used within a period of time and the location within a period of time;

Preferably, the client records the applications used within a period of time, including:

The client records the period of time each application program runs in the foreground within the preset number of days;

The client counts the records of running the same application in the foreground during the same time period every day, and uses the program name and time period of the application as the user's usage habits data, such as am7:00-am8:00, WeChat, pm 9:00- pm 10:00 Taobao;

Preferably, the client records the location within a period of time, including:

The client records the location of the terminal in each time period within the preset number of days;

The client counts the records in the same location during the same time period every day, and uses the location and time period as user usage habit data;

The client can re-record user usage habits data every preset time (number of days), in case the user usage habits change, resulting in a large deviation between the generated user usage habits data and the actual user usage habits;

S202 The client monitors the user data, and judges whether the user usage habit data matches the user data detected by the client, if not, execute step S203; if it fits, continue to execute step S202;

The client will fit the data of the same time period and the same type as the user's usage habit data monitored in one day with the corresponding user's usage habit data to calculate the fitting degree; the client will sum the calculated fitting degrees and judge Whether the summation result is less than the preset value: If the user habit data includes: am7:00-am8:00, WeChat, pm 9:00-pm 10:00 Taobao, pm7:00-am7:00 Haidian District XX Home; then the customer The application program collected from am 7:00-am8:00, the application program collected from pm 9:00-pm 10:00, the location information collected from pm7:00-am7:00 and the corresponding user habit data For fitting, sum the calculated three fitting degrees, and judge whether the summation result is less than the preset value;

Optionally, the method for summing the degree of fit includes:

Let the total number of user usage habit data be N; the weight of each user’s usage habit data is a _i , which can be set; set the same benchmark score S (such as 10 points) for each user’s usage habit data, according to each user’s usage habits The difference between the data and the same type of data monitored in the same period determines the penalty percentage x _i , x _i can be set, the greater the difference, the greater the set x _i ; then the sum of the fitting results is: For example, the user data monitored by the client in one day is am7:00-am8:00, e-book; pm 9:00-pm 12:00 Taobao; pm7:00-am7:00 Haidian District XX home, when determining x _i , comparing user usage habit data am 7:00-am8:00 WeChat and monitoring data am 7:00-am8:00 QQ chat tools, the difference between the two lies in the use of different applications, and the percentage of deduction points is determined to be 20% according to the difference (if The two applications are WeChat and e-books, and the percentage of points deducted is determined to be greater than 20% based on the difference, because WeChat and QQ chat tools are both instant messaging tools, and the difference between the two is smaller than the difference between WeChat and e-books); compare user Use habit data pm 9:00-pm10:00 Taobao and monitoring data pm 9:00-pm 12:00 Taobao, the difference between the two lies in the usage time of the application is different, the excess time is less than 4 hours, and the percentage of deduction points is determined according to the difference 30%; compare user usage habit data pm7:00-am7:00 XX home in Haidian District with monitoring data pm7:00-am7:00 XX home in Haidian District, the two are the same, and the deduction percentage is determined to be 0;

S203 The client performs a protection operation on user data of its terminal.

The client can prevent the user data of the terminal where it is located from being accessed; the client can receive user instructions to set access-restricted user data, such as address book data, WeChat data, and photo data.

The client itself prohibits user data from being accessed, and can continue to protect end user data when the client loses network connection with the server.

In addition to performing protection operations on the user data of the terminal where the client is located, the client can also obtain terminal information. When there is a network connection between the client and the server, the terminal information is reported to the server, and the terminal information includes: terminal location information. According to the location information of the terminal, the location of the lost terminal can be quickly located, which provides convenience for retrieving the lost terminal.

After the client executes the prohibition operation on user data, if it wants to remove the prohibition operation, the end user can apply to the relevant organization for lifting the ban (for example, the mobile phone user applies to the operator's customer service, and the tablet computer user can apply to the client's The customer service of the manufacturer submits an application for lifting the ban), and at the same time provides an identity certificate, and after the relevant agency verifies the identity, instructs the server to send an instruction to the client to unban user data from being accessed.

This embodiment also provides a system for protecting terminal user data. The system includes a server, and the server includes a client status monitoring module and a data protection module. The composition module diagram of the server is shown in FIG. 3 , wherein,

The client status monitoring module is used to monitor the online status of the client when there is a network connection between the server and the client, and notify the data protection module when an abnormal online status of the client is detected; the online status of the client is Abnormal, including: the client is offline within the set time, or deletes the client;

Optionally, the client status monitoring module is used to monitor that the client is not online within the set time, including: sending a request message to the client within each time unit included in the set time; if within any time unit If none of the response messages from the client are received, the client is considered offline within the set time: Suppose the set time is 2 days, the server sends a request message to the client on the first day, if no response from the client is received message, the current client status is set to be offline for 1 day; the server continues to send request messages to the client on the second day, if the response message from the client is still not received, the current client status is set to be offline for 2 days , and consider that the online status of the client is abnormal;

Optionally, the client state monitoring module is used to monitor the execution of the delete action on the client, including: judging whether a delete notification message sent to the server due to the execution of the delete action on the client is received from the client, and if the If the above message is not found, it is considered that the client has been deleted; when installing the client, the end user can set whether to enable the function of "send the message to the server when deleting the client". If this function is not enabled, all When the client is deleted, the server will not perform protection operations on user data, so that end users can delete the client according to their own wishes;

The data protection module is used to issue a security alarm to the user data of the terminal where the client is located when the online status of the client is abnormal;

Optionally,

When the server can store the terminal user's emergency contact number, the data protection module can notify the operator's customer service system of the security alarm of the terminal user's data and the terminal user's emergency contact number, so as to facilitate the subsequent notification of the operator's customer service system The user's terminal may be lost; or when the operator's user database can record the emergency contact number between the client and the terminal user where the client is located, the data protection module can send the security warning of the terminal user data and the client identification to the operator's customer system, which is convenient for the operator's customer service system to confirm the terminal user according to the client identification, and then notify the user that his terminal may be lost;

The above-mentioned system for protecting terminal user data may also include a client terminal located on the terminal, the client terminal includes a terminal loss judgment module and a data protection module, and the composition module diagram of the client terminal is shown in Figure 4, wherein:

The terminal loss judging module is used to record the user usage habit data when there is no network connection between the client and the server, and judge whether the user usage habit data matches the user data detected by the client, and if not, notify the The data protection module; the user habit data includes: the application program used within a period of time and the location within a period of time;

The terminal loss judging module is used to record the application programs used within a period of time, including:

Record the time period of each application running in the foreground within the preset number of days; count the records of running the same application in the foreground within the same time period every day, and use the program name and time period of the application as the user's usage habit data; such as am 7 :00-am8:00, WeChat, pm 9:00-pm 10:00 Taobao;

The terminal loss judging module is used to record the position in a period of time, including:

Record the location of the terminal in each time period within the preset number of days; count the records of the same location in the same time period every day, and use the location and time period as user usage habit data;

The terminal loss judging module can start to re-record the user usage habit data every preset time (days), in case the user usage habits change, causing a large deviation between the generated user usage habit data and the actual user usage habits;

The terminal loss judging module is used for judging whether the user usage habit data and the user data monitored by the client end fit, including:

Fit the data monitored in one day in the same time period and the same type as the user's usage habits data with the corresponding user's usage habits data to calculate the fitting degree; sum the calculated fitting degrees to judge whether the summation result is Less than the preset value, if it is less than the preset value, it means that the user usage habit data does not match the user data monitored by the client;

Optionally, computing the sum of fits includes:

Let the total number of user usage habit data be N; the weight of each user’s usage habit data is a _i , which can be set; set the same benchmark score S (such as 10 points) for each user’s usage habit data, according to each user’s usage habits The difference between the data and the same type of data monitored in the same period determines the penalty percentage x _i , x _i can be set, the greater the difference, the greater the set x _i ; then the sum of the fitting results is: For example, the user data monitored by the client in one day is am7:00-am8:00, e-book; pm 9:00-pm 12:00 Taobao; pm7:00-am7:00 Haidian District XX home, when determining x _i , comparing user usage habit data am 7:00-am8:00 WeChat and monitoring data am 7:00-am8:00 QQ chat tools, the difference between the two lies in the use of different applications, and the percentage of deduction points is determined to be 20% according to the difference (if The two applications are WeChat and e-books, and the percentage of points deducted is determined to be greater than 20% based on the difference, because WeChat and QQ chat tools are both instant messaging tools, and the difference between the two is smaller than the difference between WeChat and e-books); compare user Use habit data pm 9:00-pm10:00 Taobao and monitoring data pm 9:00-pm 12:00 Taobao, the difference between the two lies in the usage time of the application is different, the excess time is less than 4 hours, and the percentage of deduction points is determined according to the difference 30%; compare user usage habit data pm7:00-am7:00 XX home in Haidian District with monitoring data pm7:00-am7:00 XX home in Haidian District, the two are the same, and the deduction percentage is determined to be 0;

The data protection module is used to perform protection operations on the user data of the terminal where the client is located, including preventing the user data of the terminal where the client is located from being accessed, and the user data subject to access restrictions includes address book data, WeChat data and/or photos data.

The above-mentioned terminal loss judging module is also used to obtain terminal information, such as location information, and notify the data protection module of the terminal information;

The data protection module is also used to report the terminal information to the server when there is a network connection between the client and the server, and the server can notify the operator's client system of the terminal information, and quickly locate the lost terminal according to the location information of the terminal It is convenient to find the lost terminal.

In the above-mentioned system for protecting terminal user data configured with the client, the client prohibits the user data from being accessed, and can continue to protect the terminal user data when the client loses the network connection with the server.

Those skilled in the art can understand that all or part of the steps in the above method can be completed by instructing relevant hardware through a program, and the program can be stored in a computer-readable storage medium, such as a read-only memory, a magnetic disk or an optical disk, and the like. Optionally, all or part of the steps in the above embodiments can also be implemented using one or more integrated circuits. Correspondingly, each module/unit in the above embodiments can be implemented in the form of hardware, or can be implemented in the form of software function modules. The form is realized. The present invention is not limited to any specific combination of hardware and software.

It should be noted that the present invention can also have other various embodiments, without departing from the spirit and essence of the present invention, those skilled in the art can make various corresponding changes and deformations according to the present invention, but these Corresponding changes and deformations should belong to the scope of protection of the appended claims of the present invention.

Claims (10)

1. A method for protecting end user data, characterized in that the method comprises: When the terminal user installs the client, he enables the function of sending a message to the server when the client is deleted; storing the emergency contact number of the terminal user in the server or recording the emergency contact number of the terminal user where the client is located; When there is a network connection between the server and the client: the server monitors the online status of the client; When the server detects that the deletion action is performed on the client, it notifies the operator's customer service system of the security warning of the terminal user data and the emergency contact number, or notifies the operator of the security warning of the terminal user data and the identity of the client customer service system. 2. The method of claim 1, further comprising: When there is no network connection between the server and the client: The client on the terminal records user usage habit data, and the user usage habit data includes: the application program used within a period of time and the location within a period of time; The client terminal judges whether the user usage habit data matches the user data monitored by the client terminal, and if not, the client terminal performs a protection operation on the user data of the terminal where it is located. 3. The method of claim 2, wherein The client logs applications used over a period of time, including: The client records the period of time each application program runs in the foreground within the preset number of days; The client counts the records of running the same application program in the foreground during the same time period every day, and uses the program name and time period of the application program as the user's usage habit data; The position of the client record over a period of time includes: The client records the location of the terminal in each time period within the preset number of days; The client counts the records in the same location during the same time period every day, and uses the location and time period as user usage habit data. 4. The method according to claim 3, wherein the client determines whether the user usage habit data fits with the user data monitored by the client, comprising: The client will fit the data monitored in one day in the same time period and the same type as the user's usage habits data with the corresponding user's usage habits data, and calculate the fitting degree; The client sums the calculated fitting degrees and judges whether the summation result is less than the preset value. If it is smaller than the preset value, it means that the user usage habit data does not match the user data monitored by the client. 5. The method according to claim 2, wherein the client performs a protection operation on user data of its terminal, comprising: The client prevents access to user data on the terminal it is on. 6. A system for protecting terminal user data, characterized in that the system includes a server, the server includes a client state monitoring module and a data protection module, and the server stores the emergency contact number of the client user or records the The emergency contact number of the end user where the client is located, among which: The client status monitoring module is used to monitor the online status of the client when the server and the client have a network connection, and notify the data protection module when a deletion action is detected on the client; The data protection module is configured to notify the operator customer service system of the security alarm of the terminal user data and the emergency contact number when receiving the notification from the client status monitoring module, or notify the security alarm of the terminal user data and the emergency contact number Notify the operator's customer service system of the identification of the above client; Wherein, when the client is installed, the function of sending a message to the server when the client is deleted is enabled. 7. The system according to claim 6, further comprising a client on a terminal, said client comprising a terminal loss judgment module and a data protection module, wherein: The terminal loss judging module is used to record the user usage habit data when there is no network connection between the client and the server, and judge whether the user usage habit data matches the user data detected by the client, and if not, notify the The data protection module; the user usage habit data includes: the application program used within a period of time and the location within a period of time; The data protection module is configured to perform a protection operation on the user data of the terminal where the client is located. 8. The system of claim 7, wherein: The terminal loss judging module is used to record the application programs used within a period of time, including: Record the time period of each application program running in the foreground within the preset number of days; count the records of running the same application program in the foreground within the same time period every day, and use the program name and time period of the application program as user usage habit data; The terminal loss judging module is used to record the position in a period of time, including: Record the location of the terminal in each time period within the preset number of days; count the records of the same location in the same time period every day, and use the location and time period as user usage habit data. 9. The system of claim 8, wherein: The terminal loss judging module is used for judging whether the user usage habit data and the user data monitored by the client end fit, including: Fit the data that is in the same time period and the same type as the user's usage habit data monitored in one day with the corresponding user's usage habit data to calculate the degree of fit; Sum the calculated fitting degrees to determine whether the summation result is less than the preset value. If it is less than the preset value, it means that the user usage habit data does not match the user data monitored by the client. 10. The system according to claim 7, wherein the data protection module is configured to perform a protection operation on the user data of the terminal where the client is located, comprising: Prevent user data from being accessed on the terminal where the client is located.