CN101998385B - Data protection method and device for mobile terminal - Google Patents

Abstract

The invention discloses a data protection method and a data protection device of a mobile terminal, relates to information security, and aims to solve the problem that data in an external storage device of the mobile terminal in the prior art is easy to leak or steal. The technical scheme of the invention is as follows: a data protection method of a mobile terminal comprises the following steps: if the data in the external storage equipment of the mobile terminal needs to be protected, acquiring data security indication information; transferring the data needing to be protected in the external storage equipment to a built-in storage area of the mobile terminal according to the data security indication information; protecting the data to be protected transferred to the built-in storage area. The data protection method and device of the mobile terminal provided by the embodiment of the invention are suitable for mobile terminals such as smart phones, MIDs and GPS handheld terminals.

Description

Data protection method and device for mobile terminal

technical field

The present invention relates to information security, in particular to a data protection method and device for a mobile terminal.

Background technique

For mobile terminals such as smartphones, Mobile Internet Devices (MID), and GPS handheld terminals, external storage devices are generally used to expand their own storage areas. The user can store the data not only in the built-in storage area of the mobile terminal, but also in an external storage device.

While enjoying the storage convenience brought by external storage devices, users also face the threat of data security in external storage devices. Because the external storage device is easy to be pulled out from the mobile terminal by others without the permission of the user, the data stored in the external storage device faces the danger of being leaked or stolen.

Contents of the invention

Embodiments of the present invention provide a data protection method and device for a mobile terminal, capable of protecting data in an external storage device of the mobile terminal.

An embodiment of the present invention to solve the above problem is: a data protection method for a mobile terminal, including: if the data in the external storage device of the mobile terminal needs to be protected, obtaining data confidentiality indication information; according to the data confidentiality indication information, the The data in the external storage device is transferred to the built-in storage area of the mobile terminal; and the data to be protected transferred to the built-in storage area is protected.

Another embodiment of the present invention that solves the above problems is: a data protection device for a mobile terminal, comprising:

The first information acquisition module is used to acquire data confidentiality indication information if the data in the external storage device of the mobile terminal needs to be protected;

A first transfer module, configured to transfer the data in the external storage device to the built-in storage area of the mobile terminal according to the data security indication information acquired by the first information acquisition module;

A data protection module, configured to protect the data to be protected transferred to the built-in storage area by the first transfer module.

The data protection method and device of the mobile terminal provided by the embodiments of the present invention transfer the data to be protected in the external storage device to the built-in storage area of the mobile terminal, and perform data transfer to the built-in storage area of the mobile terminal. The protection can realize the protection of the data in the external storage device of the mobile terminal, and improves the security and privacy of the data in the external storage device of the mobile terminal. The embodiments of the present invention solve the problem in the prior art that data is leaked or stolen because the external storage device of the mobile terminal is easily pulled out from the mobile terminal by others.

Description of drawings

In order to more clearly illustrate the technical solutions in the embodiments of the present invention or the prior art, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the accompanying drawings in the following description are only These are some embodiments of the present invention. Those skilled in the art can also obtain other drawings based on these drawings without creative work.

FIG. 1 is a flowchart of a data protection method for a mobile terminal provided by an embodiment of the present invention;

FIG. 2 is a flow chart 1 of a data protection method for a mobile terminal provided by another embodiment of the present invention;

FIG. 3 is a second flowchart of a data protection method for a mobile terminal provided by another embodiment of the present invention;

FIG. 4 is a third flowchart of a data protection method for a mobile terminal provided by another embodiment of the present invention;

FIG. 5 is a first structural schematic diagram of a data protection device for a mobile terminal provided by another embodiment of the present invention;

Fig. 6 is a schematic structural diagram of a first transfer module provided by another embodiment of the present invention shown in Fig. 5;

FIG. 7 is a schematic structural diagram of a data protection module provided by another embodiment of the present invention shown in FIG. 5;

FIG. 8 is a second structural schematic diagram of a data protection device for a mobile terminal provided by another embodiment of the present invention;

FIG. 9 is a third structural schematic diagram of a data protection device for a mobile terminal provided by another embodiment of the present invention.

Detailed ways

The following will clearly and completely describe the technical solutions in the embodiments of the present invention with reference to the accompanying drawings in the embodiments of the present invention. Obviously, the described embodiments are only some, not all, embodiments of the present invention. Based on the embodiments of the present invention, all other embodiments obtained by persons of ordinary skill in the art without making creative efforts belong to the protection scope of the present invention.

In order to solve the problem in the prior art that data in an external storage device of a mobile terminal is easily leaked or stolen, embodiments of the present invention provide a data protection method and device for a mobile terminal.

As shown in Figure 1, the data protection method of the mobile terminal provided by the embodiment of the present invention includes:

Step 101, if it is necessary to protect the data in the external storage device of the mobile terminal, acquire data security indication information.

In this embodiment, the external storage device described in step 101 may include expansion cards such as SD card (Secure Digital), CF card (Compact Flash), MMC card (MultiMediaCard) and memory stick (Memory Stick), etc. Let me repeat them one by one.

Step 102, according to the data security instruction information, transfer the data to be protected in the external storage device to the built-in storage area of the mobile terminal.

Step 103, protecting the data to be protected transferred to the built-in storage area.

In this embodiment, the process of protecting the data that needs to be protected transferred to the built-in storage area in step 103 may include: setting the password of the storage partition described by the internal storage path information, wherein the storage partition is stored in the built-in storage area of the mobile terminal. zone; or hide the storage partition described by the internal storage path information.

In this embodiment, the protection of the data that needs to be protected transferred to the built-in storage area may include multiple methods, which will not be repeated here.

In this embodiment, the user can save the data in the built-in storage area of the mobile terminal, and can also save the data in an external storage device of the mobile terminal. If there is data that needs to be protected in the external storage device of the mobile terminal, the system of the mobile terminal can obtain the data security indication information; according to the data security indication information, the system of the mobile terminal can transfer the data that needs to be protected in the external storage device to the mobile terminal's The built-in storage area and the protection of the data transferred to the built-in storage area can realize the protection of the data in the external storage device of the mobile terminal.

The data protection method of the mobile terminal provided in this embodiment can transfer the data to be protected in the external storage device to the built-in storage area of the mobile terminal, and protect the data transferred to the built-in storage area of the mobile terminal. The protection of the data in the external storage device of the mobile terminal is realized, and the security and privacy of the data in the external storage device of the mobile terminal are improved. The embodiments of the present invention solve the problem in the prior art that data is leaked or stolen because the external storage device of the mobile terminal is easily pulled out from the mobile terminal by others.

In order to enable those skilled in the art to implement the data protection method of the mobile terminal provided by the embodiment of the present invention, in another embodiment of the present invention, the data protection method of the mobile terminal provided by the embodiment of the present invention is further limited, as shown in Figure 2 As shown, specific steps may include:

Step 201, according to the data in the external storage device, obtain the data protection authority.

In this embodiment, the user can save the data in the built-in storage area of the mobile terminal, and can also save the data in an external storage device of the mobile terminal.

In this embodiment, in step 201, a data protection platform may be set in the mobile terminal, so that when the user has data to be protected in the external storage device, the user obtains the data protection authority. If the data protection authority can be obtained, subsequent data protection operations can be performed.

In this embodiment, to determine whether there is data that needs to be protected in the external storage device, the system of the mobile terminal can be used to automatically scan to obtain the default external storage path information of the system of the mobile terminal, and determine whether the path corresponding to the default external storage information is There is data that needs to be protected; or the system of the mobile terminal directly obtains the external storage path information defined by the user in the mobile terminal system, and determines whether there is data that needs to be protected under the path corresponding to the defined external storage path information.

Step 202, acquiring data confidentiality indication information.

In this embodiment, after the data protection authority is obtained by using the data protection platform, the data protection of the external storage device is performed, and the data confidentiality instruction information is obtained. The user can actively trigger the mobile terminal to obtain data confidentiality instruction information; at the same time, in order to ensure that the user shuts down normally and leaves the mobile terminal without data leakage, the system of the mobile terminal can also obtain data confidentiality instructions before the normal shutdown process information.

In this embodiment, in order to enable the user to protect the data in the external storage device of the mobile terminal again without requiring the user to manually obtain the data confidentiality indication information, step 202 may set the mobile terminal to obtain the data confidentiality indication information periodically.

In this embodiment, the data confidentiality indication information in step 202 may include: external storage path information of data to be protected in the external storage device, internal storage path information for protection of the built-in storage area, and the like.

Step 203, according to the data security indication information, acquire the external storage path information of the data to be protected in the external storage device and the internal storage path information of the built-in storage area.

In this embodiment, the external storage path information of the data to be protected in step 203 may be: the default external storage path information of the mobile terminal system, or the external storage path information defined by the user in the mobile terminal system; The internal storage path information of the storage area may be: the default internal storage path information of the mobile terminal system, or the internal storage path information defined by the user in the mobile terminal system.

Step 204, according to the external storage path information, acquire the data in the external storage device corresponding to the external storage path information.

In this embodiment, in step 204, the mobile terminal obtains the data in the external storage device, and displays the data in the external storage device on the mobile terminal.

Step 205, acquiring information confirming data protection.

In this embodiment, if it is confirmed that the data in the external storage device displayed on the mobile terminal is data that the user needs to protect, step 205 may acquire information confirming data protection.

Step 206, setting the password of the storage partition described by the internal storage path information.

In the data protection method of a mobile terminal provided by another embodiment of the present invention, steps 201 to 205 can avoid the problem of data being leaked or stolen because the external storage device of the mobile terminal is easily pulled out from the mobile terminal by others. In order to also protect the data that needs to be protected transferred to the mobile terminal, this embodiment may also include step 206, setting the password of the storage partition described by the internal storage path information, wherein the storage partition is in the built-in storage area of the mobile terminal . The data in the storage partition of the mobile terminal can be viewed only when the password of the storage partition is correct, which can prevent others from stealing the data that needs to be protected in the mobile terminal. In order to improve the security of mobile terminal data, multiple levels of passwords can also be set in the built-in storage area.

Step 207, transfer the data in the external storage device to the path described by the internal storage path information.

In this embodiment, step 207, the process of transferring the data corresponding to the external storage path information to the path described by the internal storage path information may include:

First, copy the data corresponding to the external storage path information to the path described by the internal storage path information;

Second, perform a first check on the data corresponding to the external storage path information and the data under the path described by the internal storage path information;

Third, if the first verification confirms that the data is complete, delete the data corresponding to the external storage path information.

In the data transfer process in this embodiment, there may be many situations, which will not be repeated here.

In this embodiment, step 207 transfers data. If the file name of the data corresponding to the external storage path information is the same as the file name of the data under the path described by the internal storage path information, the mobile terminal can prompt the user that the file name is the same, and confirm whether the user It is necessary to overwrite or reset the file name of the data file under the path described by the internal storage path information; if the data corresponding to the external storage path information is large and the space in the built-in storage area is not enough, the mobile terminal can prompt the user to clean up the built-in storage area The data.

In order to save the space of the built-in storage area of the mobile terminal, this embodiment may also include:

Step 208, if it is not necessary to protect the data in the built-in storage area of the mobile terminal, acquire data deprivation indication information.

In this embodiment, if the user can guarantee that the data in the external storage device of the mobile terminal will not be stolen or leaked, the user does not need to protect the data in the built-in storage area of the mobile terminal, and the mobile terminal obtains the data deprivation instruction information , and display the data in the built-in storage area on the mobile terminal; the system of the mobile terminal can also obtain the data deprivation instruction information after the normal startup process.

Step 209, acquiring information confirming that data protection is not performed.

In this embodiment, if it is confirmed that the data in the built-in storage area displayed on the mobile terminal is data that the user does not need to protect, step 209 may obtain information confirming that data protection is not performed.

Step 210, input the password of the storage partition described by the internal storage path information.

In this embodiment, in order to protect the data transferred to the mobile terminal, this embodiment may further include inputting a password of a storage partition described by the internal storage path information, wherein the storage partition is in a built-in storage area of the mobile terminal. Only with the correct password can the data under the path described by the path information stored inside the mobile terminal be transferred, which can prevent others from stealing the data that needs to be protected in the mobile terminal.

Step 211, transfer the data in the built-in storage area to the external storage device.

In this embodiment, step 211, transferring the data in the built-in storage area to the external storage device may include:

First, copy the data in the built-in storage area to the external storage device;

Second, perform a second check on the data in the built-in storage area and the external storage device;

Third, if the second verification confirms that the data is complete, delete the data in the built-in storage area.

In the data transfer process in this embodiment, there may be many situations, which will not be repeated here.

In this embodiment, step 211 transfers data. If the file name of the data in the external storage device is the same as the file name of the data in the built-in storage area, the mobile terminal can prompt the user that the file name is the same, and confirm whether the user wants to transfer the data to the external storage device. Overwrite or reset the file name in the data file.

In this embodiment, when the mobile terminal cannot obtain the required information, it will not perform any operation on the data.

To sum up, the data protection method of the mobile terminal provided in this embodiment, the process of obtaining data protection authority and protecting data, as shown in FIG. 3 , may include:

Step 301, judging whether the data protection authority can be obtained;

If the data protection authority can be obtained, execute step 302, and save the file that needs to be kept secret under the storage path of the external storage device;

Step 303, judging whether the data security indication information can be obtained;

If the data confidentiality indication information can be obtained, execute step 304, and display on the mobile terminal that the data under the storage path will be operated;

Step 305, judging whether information confirming data protection can be obtained;

If the security operation is performed, step 306 is performed to set the password of the storage partition described by the internal storage path information;

Step 307, automatically transfer the data in the external storage device to the path described by the internal storage path information;

If the data protection authority cannot be obtained, the data confidentiality indication information cannot be obtained, or the information confirming data protection cannot be obtained, perform step 308 and do not perform any operation on the data.

The process of deprotecting data, as shown in Figure 4, may include:

Step 401, judging whether the data deprivation indication information can be obtained;

If the data de-secrecy instruction information can be obtained, step 402 is performed to display the data in the built-in storage area on the mobile terminal;

Step 403, judging whether it is possible to obtain information confirming that data protection is not performed;

If the information without data protection can be obtained, step 404 is performed to input the password of the storage partition described by the internal storage path information;

Step 405, transferring the data in the built-in storage area to the external storage device;

If the data deprivation instruction information cannot be obtained or the information confirming that the data protection is not performed cannot be obtained, step 406 is performed, and no operation is performed on the data.

The data protection method of the mobile terminal provided in this embodiment can transfer the data to be protected in the external storage device to the built-in storage area of the mobile terminal, and protect the data transferred to the built-in storage area of the mobile terminal. The protection of the data in the external storage device of the mobile terminal is realized, and the security and privacy of the data in the external storage device of the mobile terminal are improved. The embodiments of the present invention solve the problem in the prior art that data is leaked or stolen because the external storage device of the mobile terminal is easily pulled out from the mobile terminal by others.

Another embodiment of the present invention provides a data protection device for a mobile terminal, as shown in FIG. 5 , including:

The first information obtaining module 501 is configured to obtain data security indication information if it is necessary to protect data in the external storage device of the mobile terminal.

In this embodiment, the external storage device described in the first information acquisition module 501 may include expansion cards such as SD card (Secure Digital), CF card (Compact Flash), MMC card (MultiMedia Card) and memory stick (Memory Stick) Wait, I won't go into details here.

In this embodiment, the user can actively trigger the mobile terminal to obtain data confidentiality indication information; at the same time, in order to enable the user to shut down normally and leave the mobile terminal without problems such as data leakage, the system of the mobile terminal must be processed before the normal shutdown process. Data privacy indication information may also be obtained.

In this embodiment, in order to enable the user to protect the data in the external storage device of the mobile terminal again, and does not require the user to manually obtain the data confidentiality indication information, the first information acquisition module 501 can be configured to enable the mobile terminal to periodically obtain the data confidentiality indication information .

In this embodiment, the data confidentiality indication information in the first information acquisition module 501 may include: external storage path information of data to be protected in the external storage device, internal storage path information for internal storage area protection, and the like.

The first transfer module 502 is configured to transfer the data to be protected in the external storage device to the built-in storage area of the mobile terminal according to the data security instruction information acquired by the first information acquisition module.

The data protection module 503 is configured to protect the data to be protected transferred to the built-in storage area by the first transfer module.

In this embodiment, the user can save the data in the built-in storage area of the mobile terminal, and can also save the data in an external storage device of the mobile terminal. If there is data that needs to be protected in the external storage device of the mobile terminal, the first information acquisition module 501 can obtain data security indication information; according to the data security indication information, the first transfer module 502 can transfer the data in the external storage device to the mobile terminal In the built-in storage area of the mobile terminal, data protection in the external storage device of the mobile terminal can be realized through the data protection module 503 .

Further, as shown in FIG. 6, the first transfer module 502 may also include:

The second information acquisition sub-module 5021 is configured to acquire the external storage path information of the data to be protected in the external storage device and the internal storage path information of the built-in storage area according to the data security indication information.

In this embodiment, the external storage path information of the data to be protected in the second information acquisition sub-module 5021 can be: the default external storage path information of the mobile terminal system, or the external storage path information defined by the user in the mobile terminal system. Storage path information: The internal storage path information in the built-in storage area may be: the default internal storage path information of the mobile terminal system, or the internal storage path information defined by the user in the mobile terminal system.

The data obtaining sub-module 5022 is configured to obtain the data in the external storage device corresponding to the external storage path information according to the external storage path information obtained by the second information obtaining module.

In this embodiment, the data acquisition sub-module 5022 can acquire data in the external storage device, and display the data in the external storage device on the mobile terminal.

The second transfer sub-module 5023 is configured to transfer the data acquired by the data acquisition module to the path described by the internal storage path information.

In this embodiment, the transfer process of the second transfer submodule 5023 may also include:

First, copy the data in the external storage device to the path described by the internal storage path information;

Second, perform a first check on the data in the copied external storage device and the data under the path described by the internal storage path information;

Third, if the first check confirms that the data is complete, delete the data in the external storage device.

In this embodiment, there may be multiple ways of data transfer, which will not be detailed here.

In this embodiment, the second transfer sub-module 5023, if the file name of the data corresponding to the external storage path information is the same as the file name of the data under the path described by the internal storage path information, the mobile terminal can prompt the user that the file name is the same, confirm Whether the user wants to overwrite or reset the file name of the data file under the path described by the internal storage path information; if the data corresponding to the external storage path information is large and the space in the built-in storage area is insufficient, the mobile terminal can prompt the user to clear the built-in storage data in the area.

Further, as shown in Figure 7, the data protection module 503 may also include:

The password setting submodule 5031 is used to set the password of the storage partition described by the internal storage path information, wherein the storage partition is in the built-in storage area of the mobile terminal;

The partition hiding submodule 5032 is used to hide the storage partition described by the internal storage path information.

In this embodiment, the password setting submodule 5031 and the partition hiding submodule 5032 can be used to protect data.

Further, as shown in FIG. 8, the data protection device for a mobile terminal provided in an embodiment of the present invention may further include:

The authority acquisition module 504 is configured to acquire data protection authority according to the data in the external storage device.

In this embodiment, the user can save the data in the built-in storage area of the mobile terminal, and can also save the data in an external storage device of the mobile terminal.

In this embodiment, the authority acquisition module 504 can set up a data protection platform on the mobile terminal, so that when the user has data to be protected in the external storage device, the user can acquire the data protection authority. If the data protection authority can be obtained, subsequent data protection operations can be performed.

In this embodiment, to determine whether there is data that needs to be protected in the external storage device, the system of the mobile terminal can be used to automatically scan to obtain the default external storage path information of the system of the mobile terminal, and determine whether the path corresponding to the default external storage information is There is data that needs to be protected; or the system of the mobile terminal directly obtains the external storage path information defined by the user in the mobile terminal system, and determines whether there is data that needs to be protected under the path corresponding to the defined external storage path information.

The first confirmation information acquisition module 505 is configured to acquire information confirming data protection according to the data to be protected in the data security indication information acquired by the first information acquisition module 501 .

In this embodiment, if it is confirmed that the data in the external storage device displayed on the mobile terminal is data that the user needs to protect, the first confirmation information obtaining module 505 may obtain information confirming data protection.

Further, in order to save the space of the built-in storage area of the mobile terminal, as shown in FIG. 9, the data protection device for the mobile terminal provided by the embodiment of the present invention may further include:

The third information obtaining module 506 is configured to obtain data deprivation indication information if the data in the built-in storage area does not need to be protected.

In this embodiment, if the user can ensure that the data in the external storage device of the mobile terminal will not be stolen or leaked, the user does not need to protect the data in the built-in storage area of the mobile terminal, and the third information acquisition module 506 can obtain Data deprivation instruction information, and display the data in the built-in storage area on the mobile terminal; the system of the mobile terminal can also obtain the data deprivation instruction information after the normal startup process.

The second confirmation information obtaining module 507 is configured to obtain information confirming that the data in the built-in storage area does not need to be protected.

In this embodiment, if it is confirmed that the data in the built-in storage area displayed on the mobile terminal is data that the user does not need to protect, the second confirmation information obtaining module 507 may obtain information confirming that data protection is not performed.

A password input module 508, configured to input the password of the path described in the internal storage path.

In this embodiment, in order to protect the data transferred to the mobile terminal, this embodiment may further include inputting a password of a storage partition described by the internal storage path information, wherein the storage partition is in a built-in storage area of the mobile terminal. Only with the correct password can the data under the path described by the path information stored inside the mobile terminal be transferred, which can prevent others from stealing the data that needs to be protected in the mobile terminal.

The third transfer module 509 is configured to transfer the data in the built-in storage area to the external storage device according to the data deprivation instruction information acquired by the third information acquisition module.

In this embodiment, the third transfer module 509 may include:

First, copy the data in the built-in storage area to the external storage device;

Second, perform a second check on the data copied to the built-in storage area and the data in the external storage device;

Third, if the second verification confirms that the data is complete, delete the data in the built-in storage area.

In the data transfer process in this embodiment, there may be many situations, which will not be repeated here.

In this embodiment, the third transfer module 509, if the file name of the data in the external storage device is the same as the file name of the data in the built-in storage area, the mobile terminal can prompt the user that the file name is the same, and confirm whether the user wants to transfer the data to the external storage device. The data file in the device is overwritten or the file name is reset.

In this embodiment, when the mobile terminal cannot obtain the required information, it will not perform any operation on the data.

The data protection device of the mobile terminal provided by this embodiment can transfer the data to be protected in the external storage device to the built-in storage area of the mobile terminal, and protect the data transferred to the built-in storage area of the mobile terminal. The protection of the data in the external storage device of the mobile terminal is realized, and the security and privacy of the data in the external storage device of the mobile terminal are improved. The embodiments of the present invention solve the problem in the prior art that data is leaked or stolen because the external storage device of the mobile terminal is easily pulled out from the mobile terminal by others.

The data protection method and device for a mobile terminal provided by the embodiments of the present invention are applicable to mobile terminals such as smart phones, MIDs, and GPS handheld terminals.

The above is only a specific embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Anyone skilled in the art can easily think of changes or substitutions within the technical scope disclosed in the present invention. Should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be based on the protection scope of the claims.

Claims (7)

1. the data guard method of a portable terminal is characterized in that, comprising:

Protect the data in the External memory equipment of portable terminal if desired, obtain the data confidentiality indication information; The described data confidentiality indication information that obtains comprises: setting makes portable terminal regularly obtain the data confidentiality indication information;

According to described data confidentiality indication information, the data that need protection in the described External memory equipment are transferred in the built-in memory block of described portable terminal;

The described data that need protection in the described built-in memory block are transferred in protection;

Described method also comprises: if the data in the described built-in memory block that do not need protection are obtained data and removed secret indication information;

Remove secret indication information according to described data, the data in the described built-in memory block are transferred in the described External memory equipment.

2. the data guard method of portable terminal according to claim 1 is characterized in that, and is described according to described data confidentiality indication information, the data that need protection in the described External memory equipment transferred in the built-in memory block of described portable terminal, comprising:

According to described data confidentiality indication information, obtain the exterior storage routing information of the data that need protection in the described External memory equipment, and the storage inside routing information of described built-in memory block;

According to described exterior storage routing information, obtain the data in the described External memory equipment of described exterior storage routing information correspondence;

Data in the described External memory equipment are transferred under the path of described storage inside routing information description.

3. the data guard method of portable terminal according to claim 1 is characterized in that, the described data that need protection in the described built-in memory block are transferred in described protection, comprising:

The password of the partition holding of described storage inside routing information description is set, and wherein, described partition holding is in the built-in memory block of portable terminal; Perhaps

Hide the partition holding that described storage inside routing information is described.

4. according to the data guard method of any described portable terminal in the claim 1 to 3, it is characterized in that, also comprise:

The exterior storage routing information of the described data that need protection is: the exterior storage routing information that the system of described portable terminal is given tacit consent to, perhaps the exterior storage routing information that defines in the system of described portable terminal of user;

The storage inside routing information of described built-in memory block is: the storage inside routing information that the system of described portable terminal is given tacit consent to, perhaps the storage inside routing information that defines in the system of described portable terminal of user.

5. the data protecting device of a portable terminal is characterized in that, comprising:

First information acquisition module for the data of protecting the External memory equipment of portable terminal if desired, obtains the data confidentiality indication information; Described first information acquisition module specifically is used for, and arranges to make portable terminal regularly obtain the data confidentiality indication information;

First shift module for the data confidentiality indication information that obtains according to described first information acquisition module, is transferred to the data that need protection in the described External memory equipment in the built-in memory block of described portable terminal;

Data protection module is transferred to described data that need protection in the described built-in memory block for the protection of described first shift module;

Described device also comprises: the 3rd information acquisition module, if the data of the described built-in memory block that is used for not needing protection are obtained data and are removed secret indication information;

The 3rd shift module is used for removing secret indication information according to the data that described the 3rd information acquisition module obtains, and the data in the described built-in memory block are transferred in the described External memory equipment.

6. the data protecting device of portable terminal according to claim 5 is characterized in that, described first shift module comprises:

Second information is obtained submodule, is used for according to described data confidentiality indication information, obtains the exterior storage routing information of the data that need protection in the described External memory equipment, and the storage inside routing information of described built-in memory block;

Data are obtained submodule, are used for the exterior storage routing information that obtains according to the second information acquisition module, obtain the data in the described External memory equipment of described exterior storage routing information correspondence;

Second shifts submodule, is used for the data that data acquisition module obtains are transferred under the path of described storage inside routing information description.

7. the data protecting device of portable terminal according to claim 5 is characterized in that, described data protection module comprises:

Password arranges submodule, and for the password of the partition holding that described storage inside routing information description is set, wherein, described partition holding is in the built-in memory block of portable terminal;

The subzone hiding submodule is used for hiding the partition holding that described storage inside routing information is described.

Images