CN105095702B - A kind of superuser right control method and device - Google Patents

Abstract

The invention discloses a super user authority control method and device, which are used to solve the problem in the prior art that after a terminal equipment obtains the super user authority in an abnormal manner, various hidden safety hazards will be caused in the associated terminal equipment. The method of the present invention includes: the target terminal device sends a super user permission request to other terminal devices associated with the target terminal device; obtains a response message of the associated terminal device to the super user permission request; determines whether the target terminal device can Get superuser privileges. Adopting this scheme can avoid the security problem of threatening other associated terminals due to the illegal acquisition of super user authority by the terminal, and improves the security of the system.

Description

A super user authority control method and device

technical field

The present invention relates to the field of operating systems, in particular to a method and device for controlling authority of a super user.

Background technique

Root refers to the only superuser existing in UNIX systems and UNIX-like systems, which enables users to obtain superuser privileges of the operating system, such as starting or stopping a process, deleting or adding users, adding or disabling hardware, etc. For example, the original mobile phones shipped by mobile phone manufacturers do not have root privileges, and the methods of obtaining root privileges are not officially supported. Generally, the methods of obtaining root privileges are realized by exploiting system loopholes. Therefore, root privileges are usually used to help users bypass the restrictions of mobile phone manufacturers, allowing users to uninstall certain applications pre-installed in mobile phones by mobile phone manufacturers, and to run some applications that require superuser privileges. The act of violating the security of the system by obtaining the authority of the super user through abnormal means. Because the function of the root authority is too powerful, there will be certain risks after the terminal obtains the root authority. For example, after the Android system mobile phone obtains root permission, there will be the following risks:

1. After the mobile phone system obtains the root authority, the Trojan horse virus will use the root authority to attack the system wantonly, causing users to face unnecessary mobile phone security threats.

2. After the mobile phone system obtains the root authority, the system is often unstable due to incomplete root authority and software compatibility, or the basic functions such as making calls, sending text messages, or surfing the Internet will fail.

3. Obtaining the root authority of the mobile phone system means that any software may perform operations on system files, such as deletion and replacement. ES file browser, etc. can perform operations on system files. If the user obtains the root authority of such software, the user may delete important system files by mistake, and then cause system errors.

4. When the mobile phone system is rooted, the mobile phone may no longer enjoy personalized after-sales service, causing unnecessary losses to end users.

5. After the software obtains the root authority, it can perform any privacy operations on the user's mobile phone, such as obtaining the mobile phone number, obtaining the location, sending SMS, etc., resulting in the leakage of the user's private data.

It can be seen that, in related technologies, after a terminal device obtains a superuser authority in an abnormal manner, various security risks may exist in the terminal device. Therefore, there is a lack of corresponding measures in the existing technology to prevent the problem that the associated terminal is obtained the super user authority in an abnormal manner.

Contents of the invention

The present invention provides a super user authority control method and device, which are used to solve the problem in the prior art that after a terminal equipment acquires super user authority in an abnormal manner, various potential safety hazards will be caused to associated terminal equipment.

According to one aspect of the present invention, there is provided a super user permission control method, comprising: the target terminal device sends a super user permission request to other terminal devices associated with the target terminal device; A response message; determine whether the target terminal device can obtain superuser authority according to the response message.

Wherein, obtaining the response message of the associated terminal device to the request of the super user authority specifically includes: acquiring the response message of the super user authority of all the associated terminal devices through the target terminal.

Wherein, obtaining the response message of the associated terminal device to the superuser permission request specifically includes: obtaining the superuser permission response message of all terminal devices associated with itself through each associated terminal device.

Wherein, determining whether the target terminal device can obtain the superuser authority according to the response message specifically includes: the target terminal determines whether to obtain the superuser authority according to the acquired superuser authority response message; , to obtain the super user privilege, otherwise, not to obtain the super user privilege.

Further, the above method further includes: each associated terminal device respectively determines whether to acquire the super user authority according to the super user authority response message obtained by itself; , otherwise, superuser privileges are not obtained.

According to another aspect of the present invention, a super user authority control device is provided, including:

The sending module is used for the target terminal device to send a super user permission request to other terminal devices associated with the target terminal device; the obtaining module is used for obtaining a response message of the associated terminal device to the super user permission request; the first determining module, It is used to determine whether the target terminal device can obtain superuser authority according to the response message.

Wherein, the obtaining module is specifically configured to: use the target terminal to obtain a response message of the super user authority of all associated terminal devices.

Wherein, the obtaining module is specifically configured to: obtain the super user authority response messages of all terminal devices associated with itself through each associated terminal device.

Wherein, the first determining module is specifically used for: the target terminal determines whether to acquire super user authority according to the obtained super user authority response message; when all the super user authority response messages determine to obtain super user authority, obtain super user authority, otherwise, Do not gain superuser privileges.

Further, the above-mentioned device further includes: a second determination module, used for each associated terminal device to determine whether it obtains the super user permission according to the super user permission response message obtained by itself; When all are determined to obtain super user privileges, obtain super user privileges, otherwise, do not obtain super user privileges.

The super user rights control scheme provided by the present invention avoids that after one of the associated terminal devices is granted super user rights, other associated terminals control other terminal devices through super rights and acquire sensitive information of other terminal devices. The problem of data avoids the leakage of user data and improves the security of the system.

Description of drawings

Fig. 1 is the flow chart of the superuser authority control method of the embodiment of the present invention;

Fig. 2 is a structural block diagram of a super user authority control device according to an embodiment of the present invention;

Fig. 3 is a structural block diagram of another super user authority control device according to an embodiment of the present invention.

Detailed ways

In order to solve the problem in the prior art that a user’s access to the authority owned by the superuser in an abnormal way will cause the user to have various security risks, the present invention provides a method, device and system for controlling the authority of the superuser. The following is combined with the accompanying drawings and implementation For example, the present invention will be described in further detail. It should be understood that the specific embodiments described here are only used to explain the present invention, not to limit the present invention.

Fig. 1 is the flow chart of the superuser authority control method of the embodiment of the present invention, as shown in Fig. 1, this method comprises the following steps:

Step 101: the target terminal device sends a superuser permission request to other terminal devices associated with the target terminal device;

Step 102: Obtain a response message of the associated terminal device to the superuser authority request;

Step 103: Determine whether the target terminal device can obtain superuser authority according to the response message.

In the above step 101, the super user authority is root. When a target terminal among the multiple terminal devices associated together has a root authority requirement, it needs to send a root request to all terminal devices associated with it. Specifically, The request can be sent to other associated terminal devices in the form of broadcast.

The above-mentioned step 102 may specifically obtain the response message of the super user authority of all the associated terminal devices through the target terminal; or, each associated terminal device obtains the response message of the super user authority of all the associated terminal devices respectively. That is, when each associated terminal device receives a root permission request from one of the terminal devices, each terminal device responds to the request by agreeing to obtain the root permission or not agreeing to obtain the root permission, and each terminal device The response made by each terminal device in the system will notify other terminal devices associated with it, and the response message can also be sent in the form of broadcast, so that each terminal device has multiple response messages stored in it. And the response messages in each terminal device are the same, so each terminal device can determine whether itself obtains the root authority according to the response message saved by itself, so that the authorization status of each terminal device to the root authority is the same, that is, all obtain the root authority, or All without root privileges.

After the above step 102, after receiving the response messages from other terminal devices, each associated terminal device can store the response messages of each terminal device in the terminal device, specifically, it can be stored in the terminal device in the parameter partition. Since the response messages sent by each terminal device to other terminal devices are consistent, the response messages stored in itself by each associated terminal device, that is, the message of whether to obtain the root authority are consistent.

The above step 103 can be specifically performed through the following two situations:

When the target terminal acquires the superuser authority response messages of all associated terminal devices, the target terminal determines whether it can acquire the superuser authority according to the superuser authority response messages.

In the case that each associated terminal device respectively obtains the super user authority response message of all associated terminal devices, each associated terminal device respectively determines whether to acquire the super user authority according to the super user authority response message.

Specifically, the above-mentioned step of determining whether to obtain the super user authority according to the response message of the terminal device to the super user authority may specifically be: when all the super user authority response messages confirm that the authority can be acquired, the terminal device itself acquires the super user authority, otherwise , without obtaining superuser privileges.

The method provided in this embodiment may further include the following steps on the basis of the above steps 101 to 103:

After the target terminal device determines whether to obtain the super user permission according to the super user permission response message, it sends the result of whether to obtain the permission to other terminal devices associated with it; other terminal devices synchronize their own super user permission authorization status according to the result. Based on this, the overall process of the super user authority control method provided in this embodiment may also be: when the target terminal device has a root authority requirement, send a root authority request to each terminal device associated with it, and receive a response message from each terminal device Finally, store the response message, detect each stored response message, and judge whether to obtain the root authority according to these response messages. When the response messages of all associated terminal devices agree to obtain the root permission, it is determined to obtain the root permission, otherwise the root permission is not obtained. If the target terminal device obtains the root authority and sends the authorization result to other terminal devices associated with it at the same time, the authorization result will be used as an indication message for synchronously updating the authorization status of other terminal devices, wherein the synchronous authorization status is the current authorization result To determine to obtain the root authority, each terminal obtains the root authority according to the instruction message. When the authorization result is determined not to obtain the root authority, the target terminal also sends the authorization result to other terminal devices connected to it, and each terminal device determines that each terminal itself does not obtain the root authority after receiving the authorization result.

The super user permission control method of the embodiment of the present invention is further described below through a specific application scenario:

For example, in a related device with a smart watch, smart glasses and a smart phone, when the smart watch has a root permission requirement, the smart watch sends a root permission request to the smart glasses and the smart phone, and the smart glasses and the smart phone receive the root permission After the request, each responds accordingly. Among the associated devices, smart watches, smart glasses, and smart phones will receive response messages from other terminal devices associated with them, and then store their own response messages and received response messages in their own storage modules, so that each terminal The device will store three response messages of smart watch, smart glasses and smart phone. In addition, when the smart phone is about to be turned off or the data cable is plugged in, the smart phone detection module will detect the response message, so as to obtain the response message in time. If there is a response message that does not agree with the authorization in the response messages of the three terminal devices, the three terminal devices do not obtain the root authority. If the three terminal devices agree to obtain the root authority, the smart watch can obtain the root authority, and at the same time The smart watch notifies the synchronization modules of the smart phone and the smart glasses after determining that the root authority can be obtained, and the synchronization modules of the two obtain the root authority respectively after receiving the notification that the authorization is confirmed. This ensures that smart watches, smart glasses, and smart phones obtain root permissions at the same time.

Fig. 2 is a structural block diagram of a superuser authority control device 20 according to an embodiment of the present invention. As shown in Fig. 2, the device 20 includes:

The sending module 21 is used for the target terminal device to send a super user permission request to other terminal devices associated with the target terminal device;

An acquisition module 22, configured to acquire a response message of the associated terminal device to the superuser authority request;

The first determining module 23 is configured to determine whether the target terminal device can obtain super user authority according to the response message.

Wherein, the above acquisition module 22 is specifically used to: obtain the response message of the super user rights of all associated terminal devices through the target terminal; Permission response message.

The above-mentioned first determination module 23 may specifically be used for: the target terminal determines whether it obtains the super user authority according to the obtained super user authority response message;

When all the super user permission response messages confirm that the super user permission is obtained, the super user permission is obtained; otherwise, the super user permission is not obtained.

Further, the above-mentioned device 20 also includes:

The second determining module is used for each associated terminal device to determine whether it obtains the super user permission according to the super user permission response message obtained by itself; the judging module is used for when all the super user permission response messages determine to obtain the super user permission, Obtain superuser privileges, otherwise, do not obtain superuser privileges.

Further, the above-mentioned device 20 may also include:

The second sending module is used to determine whether to obtain the super user permission according to the super user permission response message, and then sends the authorization result to other terminal devices associated with it; the synchronization module is used to synchronize the authorization status of itself according to the authorization result through other terminal devices .

Wherein, the above-mentioned device 20 can also be realized with the specific structure of FIG. 3 , as shown in FIG. 3 , the super-user authority control device of the specific structure specifically includes the following components:

The requesting module 31, the requesting module 35 is configured to send a root request to all terminal devices associated with the terminal when the terminal has a root authority requirement, specifically, the request can be sent in the form of broadcast.

Response module 32, the response module 32 is used to respond to the root permission request when the terminal device receives the root permission request, agree to obtain root permission or disagree to obtain root permission, and send a response message associated with it For other terminal devices together, the response message can also be sent in the form of broadcast.

A storage module 33, the storage module 33 is used for storing the response messages of each device in the terminal device after receiving the response messages of other terminal devices, which may specifically be stored in the parameter partition. Since the response results sent by each terminal device are consistent, all the response results stored in the device by each associated terminal device are consistent. Thus, it is ensured that the devices associated together obtain the root authority or do not obtain the root authority at the same time.

A detection module 34, the detection module 34 is used to detect each response message stored in the device, and judge whether to obtain the root authority according to these response messages. When all the terminal devices associated together agree to obtain the root authority, the terminal device will be authorized, otherwise it will not be authorized. If the device gets root permission. At the same time, the synchronization module 35 of other associated terminal devices is notified to synchronize the authorization state, that is, to notify other terminals that the root authority can be obtained or not root authority can be obtained according to the authorization result.

Synchronization module 35, the synchronization module 35 is used to notify other devices to obtain root authority when the associated terminal equipment agrees to obtain root authority, and at this time the synchronization modules of other terminal equipment start to update their own synchronously. Root authority authorization status, that is, to obtain root authority itself, to ensure that its root authority status is consistent with the root authority status of other devices.

The present invention provides a super user authority control scheme, which can ensure that the associated users only have two states of obtaining super user authority at the same time and not obtaining super user authority at the same time. , leading to the problem that other associated users control other users through super authority and obtain sensitive data of other users, avoiding user data leakage, thereby improving system security.

Obviously, those skilled in the art can make various changes and modifications to the present invention without departing from the spirit and scope of the present invention. In this way, if these modifications and variations of the present invention belong to the claims of the present invention and their equivalents

Within the scope of the same technology, the present invention also intends to cover these changes and modifications.

Claims (6)

1. A super user authority control method, characterized in that, comprising: The target terminal device sends a superuser permission request to other terminal devices associated with the target terminal device; Acquiring a response message of the associated terminal device to the superuser permission request; determining whether the target terminal device can acquire superuser authority according to the response message; Obtaining the response message of the associated terminal device to the superuser permission request specifically includes: Obtain the super user permission response messages of all terminal devices associated with itself through each associated terminal device; The method also includes: Each associated terminal device determines whether it obtains the super user right according to the super user right response message obtained by itself; When all the super user authority response messages determine to acquire the super user authority, acquire the super user authority; otherwise, do not acquire the super user authority. 2. The method according to claim 1, wherein obtaining the response message of the associated terminal device to the super user permission request specifically comprises: The target terminal obtains a response message of the super user rights of all associated terminal devices. 3. The method according to claim 2, wherein determining whether the target terminal device can acquire superuser authority according to the response message specifically comprises: The target terminal determines whether it obtains super user authority according to the obtained super user authority response message; When all the super user authority response messages determine to acquire the super user authority, acquire the super user authority; otherwise, do not acquire the super user authority. 4. A super user authority control device, characterized in that, comprising: A sending module, configured for the target terminal device to send a super user permission request to other terminal devices associated with the target terminal device; An obtaining module, configured to obtain a response message of the associated terminal device to the superuser permission request; A first determining module, configured to determine whether the target terminal device can obtain superuser authority according to the response message; The acquisition module is specifically used for: Obtain the super user permission response messages of all terminal devices associated with itself through each associated terminal device; The device also includes: The second determining module is used for each associated terminal device to determine whether itself obtains the super user authority according to the super user authority response message obtained by itself; A judging module, configured to acquire the super user authority when all the super user authority response messages determine to acquire the super user authority, otherwise, not acquire the super user authority. 5. The device according to claim 4, wherein the acquiring module is specifically used for: The target terminal obtains a response message of the super user rights of all associated terminal devices. 6. The device according to claim 5, wherein the first determining module is specifically configured to: The target terminal determines whether it obtains super user authority according to the obtained super user authority response message; When all the super user authority response messages determine to acquire the super user authority, acquire the super user authority; otherwise, do not acquire the super user authority.