# US 2017/0286644 A1 · Protection Method and Device for Application Data > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2017/0286644 A1 - Document ID: US20170286644A1 - Status: Published application - Kind: A1 - Application number: 15/507,622 - Filed: 2015-04-02 - Published: 2017-10-05 - Earliest claimed: 2014-09-01 - Assignees: Zte Corporation - Applicants: ZTE Corporation - Inventors: Zhenjiang DONG; Wei WANG - Web page: https://patentgrep.com/patent/US20170286644A1 ## CPC - G06F 21/12: Protecting executable software - G06F 11/3017: {where the computing system is implementing multitasking (multiprogramming arrangements G06F9/46; allocation of resources G06F9/50)} - G06F 11/302: {where the computing system component is a software system} - G06F 21/60: Protecting data - G06F 21/6245: {Protecting personal data, e.g. for financial or medical purposes} - G06F 2221/2123: Dummy operation - G06F 2221/2127: Bluffing - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A protection method and device for application data are provided. The method includes: acquiring a data request sent by a monitored application, wherein the data request is used for requesting data in a first data source in which data needing protection is stored (S302); and redirecting the data request from the first data source to a second data source, wherein the second data source is used to store false data of the data needing protection (S304). ## Claims ### Claim 1 A protection method for application data, comprising: acquiring a data request sent by a monitored application, wherein the data request is used for requesting data in a first data source in which data needing protection is stored; and redirecting the data request from the first data source to a second data source, wherein the second data source is used to store false data of the data needing protection. ### Claim 2 (depends on 1) The method as claimed in claim 1, wherein the data request comprises: a first data request for requesting internal data; or a second data request for requesting external data, wherein the internal data is data stored by the monitored application, and the external data is data of at least one application in an operating system except for the monitored application. ### Claim 3 (depends on 2) The method as claimed in claim 2, wherein in a case where the first data request for requesting internal data is acquired, redirecting the data request from the first data source to the second data source comprises: modifying, when the operating system calls the monitored application, a specified parameter, which is included in an internal data source to identify the first data source, into a first parameter for indicating the second data source; and redirecting the data request to the second data source according to the first parameter for indicating the second data source. ### Claim 4 (depends on 2) The method as claimed in claim 2, wherein in a case where the second data request for requesting external data is acquired, redirecting the data request from the first data source to the second data source comprises: acquiring a second parameter for identifying a data source from an external data resource; modifying the parameter for identifying the data source to a parameter for indicating the second data source; and redirecting the data request to the second data source according to the parameter for indicating the second data source. ### Claim 5 (depends on 4) The method as claimed in claim 4, wherein the second parameter comprises: a Universal Resource Identifier (URI). ### Claim 6 (depends on 4) The method according to claim 4, wherein the first data resource corresponds to a plurality of second data sources. ### Claim 7 (depends on 6) The method as claimed in claim 6, wherein correspondence of the first data resource to the plurality of second data sources is realized in the following way: when data indicated by a second identifier is queried using a query command, setting a returned value of the query command to be null, wherein an application which receives the returned value does not respond to the returned value if the returned value of the query command is null. ### Claim 8 A protection device for application data, comprising a hardware processor arranged to execute the following program modules: an acquisition module arranged to acquire a data request sent by a monitored application, wherein the data request is used for requesting data in a first data source in which data needing protection is stored; and a redirecting module arranged to redirect the data request from the first data source to a second data source, wherein the second data source is used to store false data of the data needing protection. ### Claim 9 (depends on 8) The device as claimed in claim 8, wherein the acquisition module is arranged to acquire the data request sent by the monitored application when the data request at least comprises at least one of: a first data request for requesting internal data; or a second data request for requesting external data, wherein the internal data is data stored by the monitored application, and the external data is data of at least one application in an operating system except for the monitored application. ### Claim 10 (depends on 9) The device as claimed in claim 9, wherein in a case where the first data request for requesting internal data is acquired, the redirecting module comprises: a first modification unit arranged to modify, when the operating system calls the monitored application, a specified parameter, which is included in an internal data source to identify the first data source, into a first parameter for indicating the second data source; and a first redirecting unit arranged to redirect the data request to the second data source according to the first parameter for indicating the second data source. ### Claim 11 (depends on 9) The device as claimed in claim 9, wherein in a case where the second data request for requesting external data is acquired, the redirecting module comprises: an acquisition unit arranged to acquire a second parameter for identifying a data source from an external data resource; a second modification unit arranged to modify the parameter for identifying the data source to a parameter for indicating the second data source; and a second redirecting unit arranged to redirect the data request to the second data source according to the parameter for indicating the second data source. ### Claim 12 The method according to clam 5, wherein the first data resource corresponds to a plurality of second data sources. ### Claim 13 (depends on 12) The method as claimed in claim 12, wherein correspondence of the first data resource to the plurality of second data sources is realized in the following way: when data indicated by a second identifier is queried using a query command, setting a returned value of the query command to be null, wherein an application which receives the returned value does not respond to the returned value if the returned value of the query command is null. ### Claim 14 (depends on 11) The device as claimed in claim 11, wherein the second parameter comprises: a Universal Resource Identifier (URI). ### Claim 15 The device according to clam 11, wherein the first data resource corresponds to a plurality of second data sources. ### Claim 16 The device according to clam 14, wherein the first data resource corresponds to a plurality of second data sources. ### Claim 17 (depends on 15) The device as claimed in claim 15, wherein correspondence of the first data resource to the plurality of second data sources is realized in the following way: when data indicated by a second identifier is queried using a query command, setting a returned value of the query command to be null, wherein an application which receives the returned value does not respond to the returned value if the returned value of the query command is null. ### Claim 18 (depends on 16) The device as claimed in claim 16, wherein correspondence of the first data resource to the plurality of second data sources is realized in the following way: when data indicated by a second identifier is queried using a query command, setting a returned value of the query command to be null, wherein an application which receives the returned value does not respond to the returned value if the returned value of the query command is null.