CN1863350A - A method for hierarchical management of intelligent mobile terminal users - Google Patents

Abstract

The invention relates to a method for hierarchical management of intelligent mobile terminal users, which at least sets safety authority as a general user and a high-level user; the general user can only perform the basic call function provided by the intelligent mobile terminal, cannot check privacy data and use advanced operation, and can be used as the user with the lowest security level of the terminal without inputting password authentication; the advanced user can use advanced operation on the intelligent mobile terminal except all functions of a common user, and must perform identity authentication on the advanced user; the method comprises the following steps: the intelligent mobile terminal is a common user by default when the intelligent terminal is started; and when the user needs to enter a high-level user, the user identity authentication is activated by selecting a corresponding function menu from the menu of the intelligent mobile terminal. The method of the invention gives the authority to the users of the intelligent mobile terminal in a grading way, thus meeting the basic use of the users and improving the safety of the intelligent mobile terminal.

Description

A method for hierarchical management of intelligent mobile terminal users

technical field

The invention relates to a mobile terminal user management method, in particular to a method for setting a plurality of users of different levels in an intelligent mobile terminal according to security levels in the field of mobile communication, thereby improving the security of the intelligent mobile terminal.

Background technique

Smart mobile terminals (such as smart phones, hereinafter referred to as smart mobile terminals) are smart mobile terminal devices that have added business functions such as personal digital assistants (PDA, Personal Digital Assistants) on the basis of basic mobile communication voice call functions. With the development of smart mobile terminal technology and communication network technology, smart mobile terminals can perform more and more functions, integrating business functions such as calendar, mail processing, web browsing, and office document processing, and even some with high confidentiality requirements All business documents (such as Word documents, PowerPoint documents, etc.) are stored and used in smart mobile terminals. Displayed with a projector. With the increase of important business functions of smart mobile terminals, users have higher requirements on the security of smart mobile terminals.

At present, most smart mobile terminals do not need user's identity authentication when in use, as long as an effective SIM card, STK card or other mobile communication subscriber identification cards are inserted, anyone can turn on the smart mobile terminal equipment.

Patents in the prior art also attempt to solve the user management security problem of smart mobile terminals. Some smart mobile terminals, such as the Dopod 515 smart phone, can already set the "Enable Phone Lock" function, so that users need to enter a password when using the smart mobile terminal device, thereby improving security. Some smart mobile terminals, such as Haier Caizhixing 1000B mobile phone, etc., can encrypt and store text messages, call records, contacts in the mobile phone, etc. in the mobile phone by setting a password, so as to better protect personal privacy. Siemens, Samsung, Mitsubishi and other companies have already produced mobile phones with fingerprint recognition function. When the phone holder puts his finger on the fingerprint sensor when making a call, the mobile phone can identify whether the fingerprint is consistent with the fingerprint of the mobile phone owner input in advance. The samples agree. Once it is different, the phone holder can't call out, and the phone can avoid being stolen by others.

Chinese patent CN 1172509C provides a kind of user identification module that adopts Universal Serial Bus (USB, Universal Serial Bus) interface, and Chinese patent CN 1477890A (disclosure date on February 25, 2004) provides a kind of using the read-only memory in the mobile phone Save the password, and complete the encrypted storage of the mobile phone number through the password setting. A Chinese patent (CN 1535530A) of Siemens Corporation proposes to be provided with three memory units in the mobile phone, the first memory unit is used for storing user identification information, the second memory unit is used for storing user identification information, and the third memory unit is used for storing user identification information. A memory unit is used to store the user's personal information; if the identification information entered by the mobile phone user matches the stored user identification information, the mobile phone can log into the mobile radio network, but cannot access the user's personal information, including at least one of the following Items of information: phone book, address book, credit card numbers, passwords and/or secret numbers; mobile phone user input identifying information that matches stored user identifying information, allowing access to the user's personal information.

Although these existing technologies have improved the security of smart mobile terminals to a certain extent, there are still some security problems as follows:

(1) Since a smart mobile terminal generally has only one user or role, and this user or role has all the permissions of the smart mobile terminal, and can use all the functions provided by the smart mobile terminal, there are user misoperations that may lead to the failure of the smart mobile terminal system. Risk of data corruption. Although Siemens' patent has two roles of user and user, it only protects the privacy of the user's personal information. For current smart mobile terminals, it is not only the user's personal information that needs to be protected.

(2) If the owner of the smart mobile terminal lends the smart mobile terminal to other people to use, he must also tell the user the user authentication information, such as the password, which is equivalent to handing over all the operating rights of the smart mobile terminal to the user. Therefore, some privacy may be leaked, such as SMS records, call records, contacts in the address book and other information, or important business documents stored in the smart mobile terminal, and may also be borrowed by the person who is not authorized by the smart mobile terminal. Browsing the Internet, sending MMS, using business office software and other expensive operations with the permission of the terminal owner, or the borrower intentionally or unintentionally changes the system settings, resulting in the malfunction of the smart mobile terminal.

(3) Although some smart mobile terminals can be set so that users need to input passwords when using smart mobile terminal equipment, the setting information and passwords are all stored in the memory of the smart mobile terminal. When the terminal is "hard-started", that is, when the factory state is restored, all these information will be lost, and the smart mobile terminal will return to the state where it can be used without entering a password.

Therefore, there are certain defects in the prior art, and need to be improved and developed.

Contents of the invention

The purpose of the present invention is to provide a method for hierarchical management of intelligent mobile terminal users, aiming at the disadvantages of poor management security of existing intelligent mobile terminal users, to provide a more secure intelligent mobile terminal user management method, and to propose a The intelligent mobile terminal user hierarchical management method divides the intelligent mobile terminal users into several levels of users according to the authority and the services obtained, and gives different authority to users of different security levels from low to high, and can obtain the services provided by the intelligent mobile terminal. For different ranges of services, users with low security levels cannot perform operations with high security levels, so as to improve the security of smart mobile terminals.

Technical scheme of the present invention is as follows:

A method for hierarchical management of intelligent mobile terminal users, which classifies and sets the users of the intelligent mobile terminal, and sets the security authority to at least general users and advanced users;

Ordinary users can only perform the basic call functions provided by the smart mobile terminal, but cannot view private data and use advanced operations. As users with the lowest security level of the terminal, ordinary users can use it without entering password authentication;

Advanced users, in addition to having all the functions of ordinary users, can use advanced operations on smart mobile terminals, and identity authentication is required for advanced users;

The methods include:

When the smart mobile terminal is started, the default is a general user; when the user needs to enter the advanced user, the user identity authentication is activated by selecting the corresponding function menu in the menu of the smart mobile terminal.

The method described above, wherein, the smart mobile terminal is also provided with a management user, which provides all maintenance and management functions for the smart mobile terminal in addition to the functions used by advanced users on all terminals;

When the user needs to enter the advanced user role, the user identity authentication is activated by selecting the corresponding function menu in the menu of the smart mobile terminal.

The method described above, wherein the management user adopts two-factor identity authentication and simultaneously inputs password and electronic key authentication or fingerprint authentication of the hardware data interface.

The method described above, wherein the smart mobile terminal is provided with a non-volatile safety memory for storing user information and password information, so that these information will not be lost when the smart mobile terminal is turned off or powered off.

The method, wherein, when the user identity authentication is inconsistent, information is written into a log file.

The beneficial effects of the present invention are: the method for hierarchical management of intelligent mobile terminal users provided by the present invention, by granting authority to the user of the intelligent mobile terminal according to the classification, this satisfies the basic use of the user and improves the security of the intelligent mobile terminal In addition, data such as user roles, passwords, and corresponding permissions are stored in the non-volatile security memory in the smart mobile terminal, which ensures that when the smart mobile terminal is out of power or "hard-started" and returns to the factory state, relevant user management The setting will not be changed, and compared with the prior art, the present invention improves the safety and convenience of using the intelligent mobile terminal.

Description of drawings

Fig. 1 is the schematic diagram of the intelligent mobile terminal of the inventive method and supporting electronic key;

Fig. 2 is the flow chart of general user of the present invention entering advanced user or management user;

Fig. 3 is a flow chart of returning a senior user or a management user to a general user in the present invention.

Detailed ways

Various preferred embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings.

There is a principle in the security field, the least service + the least authority = the greatest security. The present invention is based on such a principle, and its core idea is: to propose a hierarchical management method for intelligent mobile terminal users, which divides intelligent mobile terminal users into several levels of users according to the authority and the services obtained, and the difference from low to high Security-level users are given different permissions to obtain different ranges of services provided by smart mobile terminals, and low-security-level users cannot perform high-security-level operations, thereby improving the security of smart mobile terminals.

For the convenience of description without loss of generality, the following examples, but not limited to, classify smart mobile terminal users into general users, advanced users and management users.

Ordinary users can only perform basic call functions provided by smart mobile terminals, and cannot perform other operations, such as sending and receiving text messages, nor can they view private data such as contacts in the address book, SMS records, call records, etc. Function. These private information and advanced functions can be encrypted and stored or hidden in the general user state. As a user with the lowest security level of the terminal, it can be used without entering a password for authentication.

Advanced users, in addition to all the functions of general users, can use advanced service functions on smart mobile terminals, such as sending and receiving short messages, multimedia messages, accessing WAP network or GPRS network through browsers, using schedules, tasks, memos, business office software Wait for the function of PDA and so on. Due to the high security level of advanced users, certain identity authentication means are required for control. For example, users need to enter a password or use other identity authentication methods when entering an advanced user role.

Management users, in addition to the functions of all terminals used by advanced users, also have all the maintenance and management functions provided by the smart mobile terminal. It is the user with the highest security level and the greatest authority. It can set the parameters of the smart mobile terminal and network Setting, downloading and updating of system software, synchronizing data with computer via infrared, bluetooth or USB data cable. Due to the highest level of security, there must be a stronger identity authentication method than advanced users. Two-factor authentication can be used. Keys, or personal biometrics such as fingerprints. The management user mainly realizes the management and maintenance function of the smart mobile terminal, because the smart mobile terminal adopts an open commercial operating system, which may require maintenance and management operations such as system upgrades, which is different from traditional mobile phones, so a management user is specially set up for smart mobile terminals. It is necessary for the terminal.

When the smart mobile terminal starts up, it defaults to a general user role, which can satisfy the basic use of the user. When the user needs to enter the advanced user role, select the corresponding function menu in the smart mobile terminal menu to activate user identity authentication. For example, if the password authentication method is adopted, the smart mobile terminal requires the input of the advanced user password. Compare the password entered by the user with the advanced user password stored in the smart mobile terminal, if they are consistent, enter the advanced user role state, if not, then maintain the general user state, give a password error prompt, and optionally perform The information is recorded in the system log of the smart mobile terminal, which is convenient for future inquiries.

In the same principle, if the user needs to enter the management user role, he can activate the user identity authentication by selecting the corresponding function menu in the menu of the smart mobile terminal. key, and then enter the user password. At this time, the user needs to insert the electronic key first. If the smart mobile terminal detects the electronic key, it will prompt the user to enter the password. The internal software of the smart mobile terminal will compare the password entered by the user with the management user password stored in the smart mobile terminal. If they are consistent, enter Management user role status; if the electronic key is not detected by the smart mobile terminal, or if the electronic key is detected but the password entered by the user is inconsistent with the management user password stored in the smart mobile terminal, the current security level user status is still maintained, and the corresponding Error prompt, and optionally record the operation information in the system log for later query.

In order to further improve security, user role and password information can be stored in the non-volatile safety memory in the smart mobile terminal to ensure that these information will not be lost when the smart mobile terminal is turned off or powered off.

In the embodiment of the present invention shown in FIG. 1 , smart mobile terminal users are divided into general users, advanced users and management users. Ordinary users can only perform the basic call functions provided by the smart mobile terminal, and cannot perform other operations, especially cannot view information related to the privacy of the owner of the smart mobile terminal, such as contacts in the address book, SMS records, call records, etc.; advanced users, In addition to all the functions of general users, some advanced functions for terminal use are added to ensure that owners of smart mobile terminals can enjoy all application services; management users, in addition to having all the functions of advanced users for terminal use, also have the smart All maintenance and management functions provided by the mobile terminal.

When the intelligent mobile terminal of the present invention leaves the factory, the users of different security levels of the intelligent mobile terminal, the operations that users of each security level can perform, the passwords of advanced users and management users, etc., can all be stored in the intelligent mobile terminal. in the non-volatile secure memory inside the mobile terminal. If an electronic key with a USB interface is required to manage user identity authentication, the smart mobile terminal also needs to be matched with a corresponding electronic key when it leaves the factory, and the data for managing user identity authentication is stored in the electronic key.

The smart mobile terminal enters the general user status by default when the user turns it on; when the user wants to operate at a higher security level, he can enter the advanced user through the identity authentication method of entering a password; if the user wants to operate at the highest security level, he can insert The electronic key of the USB interface and the two-factor identity authentication method of entering the password enter the management user state; after performing advanced operations, for safety reasons, the user exits the advanced user or management user state and returns to the general user state.

Figure 2 shows the process for a user to enter a power user state or a management user state from a general user state, and Figure 3 shows the process for a user to exit from a power user state or a management user state to return to a general user state. This is achieved through the following steps:

1. As shown in Figure 2, the user turns on the power switch of the smart mobile terminal, and the smart mobile terminal enters the general user state after startup, and the user can perform call operations;

2. If the user wants to perform advanced operations such as sending and receiving text messages and multimedia messages, adding contacts, or using business office software, the user selects the menu with the function of "entering advanced user status" in the menu of the smart mobile terminal, and the smart mobile terminal pops up a message asking for a password. interface, the user enters the password, and the internal software of the smart mobile terminal compares the password entered by the user with the advanced user password stored in the non-volatile safety memory. If the status is inconsistent, it will still maintain the general user status, give a prompt that the password is wrong, and optionally record the operation information in the system log of the smart mobile terminal, so as to facilitate future inquiries.

3. If the user wants to perform the highest-level operations such as intelligent mobile terminal parameter setting, network setting, system software upgrade, etc., the user selects the menu with the function of "entering the management user state" in the intelligent mobile terminal menu, and the intelligent mobile terminal pops up asking to input and insert the electronic key And input the user password interface, the user inserts the electronic key and enters the password, the internal software of the smart mobile terminal detects the electronic key, and exchanges data with the electronic key to check the validity of the electronic key; if the electronic key is not detected or the electronic key is invalid , then a corresponding prompt will be given, and the information will be recorded in the system log of the smart mobile terminal, and the current user status will not be modified; if the electronic key is confirmed to be valid, the password entered by the user will be compared with the management key stored in the non-volatile safety memory. Comparing the user passwords, if they are inconsistent, a corresponding prompt will be given, and the information will be recorded in the system log of the smart mobile terminal, and the current user status will not be modified; if they are consistent, the internal software of the smart mobile terminal will modify the current user role to manage the user status .

4. As shown in Figure 3, if the user is in the advanced user status, after completing the operation, select the menu with the function of "exit advanced user status" in the menu of the smart mobile terminal, and the internal software of the smart mobile terminal will change the current user role to a general user state.

5. As shown in Figure 3, if the user is in the management user state, after the operation, select the menu with the function of "exit management user status" in the menu of the smart mobile terminal, and the internal software of the smart mobile terminal will change the current user role to a general user state.

To sum up, the method of the present invention grants permissions to users of smart mobile terminals by grading, which satisfies the basic use of users and improves the security of smart mobile terminals; in addition, data such as user roles, passwords, and corresponding permissions are stored in the smart mobile terminal. In the non-volatile safety memory in the terminal, it is ensured that when the intelligent mobile terminal is out of power or "hard-started" and returns to the factory state, the relevant settings of user management will not be changed. Compared with the prior art, the present invention improves the intelligence The safety and convenience of mobile terminal use.

It should be understood that the above description of the preferred embodiments of the present invention is more specific, and should not be construed as limiting the scope of the patent protection of the present invention. The scope of patent protection of the present invention should be based on the appended claims.

Claims (5)

1. A method for hierarchical management of smart mobile terminal users, which classifies and sets the users of the smart mobile terminal, and sets security permissions to at least general users and advanced users; Ordinary users can only perform the basic call functions provided by the smart mobile terminal, but cannot view private data and use advanced operations. As users with the lowest security level of the terminal, ordinary users can use it without entering password authentication; Advanced users, in addition to having all the functions of ordinary users, can use advanced operations on smart mobile terminals, and identity authentication is required for advanced users; The methods include: When the smart mobile terminal is started, the default is a general user; when the user needs to enter the advanced user, the user identity authentication is activated by selecting the corresponding function menu in the menu of the smart mobile terminal. 2. The method according to claim 1, characterized in that, the intelligent mobile terminal is also provided with a management user, which provides all maintenance and management functions; When the user needs to enter the advanced user role, the user identity authentication is activated by selecting the corresponding function menu in the menu of the smart mobile terminal. 3. The method according to claim 2, wherein the management user adopts two-factor identity authentication, and simultaneously inputs password and electronic key authentication or fingerprint authentication of the hardware data interface. 4. The method according to any one of claims 1-3, characterized in that the smart mobile terminal is provided with a non-volatile safety memory for storing user information and password information, so that the smart mobile terminal can These information will not be lost in case of shutdown or power failure. 5. The method according to claim 2 or 3, characterized in that, when the user identity authentication is inconsistent, information is written into a log file.

Images