Patent Application
20160140342
The invention relates to security of mobile device, and in particular to a method for indicating an operating environment of a mobile device and a mobile device capable of indicating an operating environment.
The operating system of current mobile devices may have system bugs due to the strong functions, complicated codes and open platform of the system. These bugs will pose a threat to the security of the operating system.
On the other hand, user's information may be leaked when the user downloads and installs malwares (e.g., Trojan, virus). The human-machine interface (e.g., screen, keyboard, etc.) of a mobile device (e.g., a smart cell-phone) is the most important means for enabling an interaction between the user and applications in the mobile device. Therefore, when the user uses the human-machine interface to input information (e.g., private information such as account of bank card and password, etc.), the information may be acquired by malwares.
In the prior art, by running a secure operating system, the malwares are prevented from stealing and distorting private information. The secure operating system refers to a closed operating system running in a secure mode. It provides a credible executing environment for the mobile device and is independent from an operating system in a non-secure mode. The secure operating system can be for example a TEE solution based on the Trust Zone technology of the ARM company. The TEE is a credible executing environment platform in a secure mode. In this platform, under the control of secure code, malwares can not have access to data resource in this secure mode or steal data resource, e.g., user's information. For example, for the human-machine interface, when in the secure mode of mobile device, the human-machine interface is only controlled by the secure system so that users can interact with applications via the human-machine interface in a secure manner. In other words, in the secure mode, the human-machine interface is credible.
As a common interface, the screen of mobile device can be accessed and used by all the programs in the mobile device. Although the reliability of the screen can be ensured under the control of the secure operating system, the security is still facing challenge. For example, the malwares can simulate an operating environment in the secure operating system to confuse the user and steal user's information. Therefore, in order to further increase the security of using mobile device, there is a need for a solution for indicating the operating environment so as to inform the user of the operating environment of current mobile device, including: whether the mobile device is currently in a secure mode, i.e., whether the currently running operating system is a secure operating system (e.g., using reliable indicating information to inform the user that the currently operating human-machine interface is really credible). In addition, due to the presence of plug-in type carriers, a dynamic use of applications will also become a potential threat to user's information. Therefore, informing the user of the operating environment of current mobile device preferably can further comprise indicating the security level of the currently operating applications of the mobile device.
According to an object of the invention, a method for indicating an operating environment of a mobile device is disclosed, comprising the following steps: generating personalized information and storing the personalized information in a storage area that can be only accessed by a secure operating system, and displaying the personalized information on a display area of the mobile device when the mobile device enters the secure operating system so as to inform the user of the currently running operating system.
Preferably, the method further comprises the following step: generating the personalized information based on an input from the user, the personalized information comprising text, image or a combination of text and image.
Preferably, the method further comprises the following step: generating the personalized information when the mobile device is started for the first time.
Preferably, the method further comprises the following step: further displaying a final credibility level of the currently operating application on the display area of the mobile device when the mobile device is running in the secure operating system so as to inform the user of the security of the currently operating application.
Preferably, the final credibility level of application is generated based on the credibility level of application and the credibility level of a carrier of the application, wherein the credibility level of application is based on whether the application has been verified by the secure operating system and/or based on the carrier of the application, and wherein the carrier is a physical secure element or a virtual secure element, and the credibility level of the carrier of the application is based on whether the carrier has been verified by the secure operating system.
Preferably, the method further comprises the following step: storing the credibility level of application, the credibility level of the carrier of the application and an application identifier into a credibility level list, and acquiring the final credibility level of current application according to the credibility level list when an application is chosen and started to server as the current application.
According to another object of the invention, a mobile device capable of indicating an operating environment is disclosed, the mobile device comprising: a personalized information module for generating personalized information and storing the personalized information in a storage area that can be only accessed by an indicator module in a secure operating system, and the indicator module for displaying the personalized information on a display area of the mobile device when the mobile device enters the secure operating system so as to inform the user of the currently running operating system.
Preferably, the personalized information module generates the personalized information based on an input from the user, the personalized information comprising text, image or a combination of text and image.
Preferably, the personalized information module generates the personalized information when the mobile device is started for the first time.
Preferably, the indicator module further displays a final credibility level of the currently operating application on the display area of the mobile device when the mobile device is running in the secure operating system so as to inform the user of the security of the currently operating application.
Preferably, the final credibility level of application is generated based on the credibility level of application and the credibility level of a carrier of the application, wherein, the credibility level of application is based on whether the application has been verified by the secure operating system and/or based on the carrier of the application, and wherein the carrier is a physical secure element or a virtual secure element, and the credibility level of the carrier of the application is based on whether the carrier has been verified by the secure operating system.
Preferably, the indicator module is further used for storing the credibility level of application, the credibility level of the carrier of the application and an application identifier into a credibility level list, and the indicator module is configured to acquire the final credibility level of current application according to the credibility level list when an application is chosen and started to server as the current application.
Those skilled in the art will comprehend various aspects of the invention more clearly after reading the specific embodiments of the invention with reference to the accompanying drawings. It will be appreciated by those skilled in the art that the drawings are merely used for explaining the technical solutions of the invention in connection with the specific embodiments, and are not intended to limit the scope of protection of the invention, wherein
The specific embodiments of the invention will be further described in detail hereinafter with reference to the accompanying drawings. In the following description, for an illustrative purpose, many specific details are described so as to provide a thorough understanding of one or more aspects of the embodiments. However, it is obvious to those skilled in the art that one or more aspects of various embodiments can be implemented with these specific details provided to a less degree. Therefore, the following description should not be considered as limiting; rather, the scope of protection is defined by the appended claims.
a second step: displaying the personalized information on a display area of the mobile device when the mobile device enters the secure operating system so as to inform the user of the currently running operating system.
In an embodiment, the personalized information in the storage area can be only accessed by an indicator module in the secure operating system so that the personalized information is prevented from being acquired by malwares.
In an embodiment, the personalized information can be generated based on an input from the user, wherein the personalized information comprises text, image or a combination of text and image. The personalized information is generated by the user and thus has unique characteristic. Therefore, such information is prevented from being faked by malwares in a non-secure mode to fraud users. As an example, such personalized information can be drawings edited by users, patterns chosen by users, images captured by users and texts input by users (e.g., user's favorite food and animal).
In an embodiment, the personalized information is generated when the mobile device is started for the first time. When the mobile device is started for the first time, since the mobile device is not yet used, it is therefore credible and secure, and the security of the input personalized information can be ensured.
In an embodiment, the display area can be a particular area set on the screen of the mobile device.
In an embodiment, a final credibility level of the currently operating application is further displayed on the display area of the mobile device when the mobile device is running in the secure operating system so as to inform the user of the security of the currently operating application. For example, the personalized information can be displayed on the left of the display area, and the final credibility level of application can be displayed on the right of the display area. The final credibility level of application represents the ability of anti-distorting, anti-leaking, anti-faking and anti-attack. In this way, the user is aware of the security of the currently operating application so that the user will heighten his/her vigilance when facing an application having a low credibility level and further confirm whether the application to be operated is the application he/she needs.
The final credibility level of application is generated based on the credibility level of application and the credibility level of a carrier of the application.
The credibility level of application is based on whether the application has been verified by the secure operating system and/or based on the carrier of the application, wherein the carrier is a physical secure element or a virtual secure element. By way of example, for the same application, if the application is in the physical secure element, it has a higher credibility level than the application in the virtual secure element. This is because the physical secure element further comprises an independent hardware which has a higher security and is anti-physical attack. The specific classification of the credibility level of application can be divided differently as actually required. As an example, the credibility level of application can be divided into three levels, i.e., low, intermediate and high, wherein an application that has been verified by the secure operating system on the secure element (SIM card, smart card, etc.) has a high credibility level, an application that has been verified by the secure operating system on the virtual secure element (VSE, virtual secure element) has an intermediate credibility level, and an application that has not been verified by the secure operating system has a low credibility level.
The credibility level of the carrier of the application is based on whether the carrier has been verified by the secure operating system.
By doing so, the invention can determine the actual credibility level of an application (i.e., the final credibility level of application) considering both the credibility level of application (the credibility of the application itself) and the credibility level of the carrier of application (the credibility of the environment in which the application actually operates). For example, when an application having a high credibility level operates in an environment having a low credibility level, the actual credibility level of application can be determined as an intermediate credibility level.
In an embodiment, the credibility level of application, the credibility level of the carrier of the application and an application identifier can be stored into a credibility level list. When an application is chosen and started to serve as the current application, the final credibility level of the current application is acquired according to this credibility level list. As an example, the final credibility level of the current application can be shown in the way of text (e.g., a text “high” shown in the display area represents a high credibility level, “intermediate” represents an intermediate credibility level, and “low” represents a low credibility level), image, etc., and the level can be represented by colors.
It is understood that the various aspects and/or embodiments described herein are merely examples, and other aspects and/or embodiments can be used. Modifications in terms of structures and functions can be made without departing from the scope of the disclosure. In addition, while specific features or aspects of the embodiment are disclosed in relation to one of many embodiments, these features or aspects can be combined with one or more other features or aspects of other embodiments, as is desired or advantageous for any given or specific application.
| Number | Date | Country | Kind |
|---|---|---|---|
| 201310255179.0 | Jun 2013 | CN | national |
| Filing Document | Filing Date | Country | Kind |
|---|---|---|---|
| PCT/CN2014/079328 | 6/6/2014 | WO | 00 |
