File processing method and terminal device

1. A file processing method, comprising:

receiving, by a first terminal device, an encrypted file from a second terminal device;

storing, by the first terminal device, the encrypted file;

receiving, by the first terminal device, an access instruction for the encrypted file;

obtaining, by the first terminal device, a current security state; and

when the current security state is higher than or equal to a first security state, decrypting, by the first terminal device, the encrypted file by using a decryption key, wherein

the first security state is a security state corresponding to the decryption key.

2. The method according to claim 1 , wherein

before receiving the encrypted file from the second terminal device, the method further comprises:

receiving, by the first terminal device, an obtaining request from the second terminal device;

obtaining, by the first terminal device, the first security state of the first terminal device in response to the obtaining request; and

sending, by the first terminal device, the first security state to the second terminal device.

3. The method according to claim 2 , further comprising:

obtaining, by the first terminal device, an encryption key and the decryption key in response to the obtaining request;

sending, by the first terminal device, the encryption key to the second terminal device; and

establishing, by the first terminal device, a correspondence between the first security state and the decryption key; and

after receiving the encrypted file from the second terminal device, the method further comprises:

establishing, by the first terminal device, a correspondence between the encrypted file and the decryption key.

4. The method according to claim 2 , wherein before receiving the access instruction for the encrypted file, the method further comprises:

receiving, by the first terminal device, the decryption key from the second terminal device; and

establishing, by the first terminal device, a correspondence between the encrypted file and the decryption key, and establishing a correspondence between the first security state and the decryption key.

5. The method according to claim 2 , wherein after obtaining the current first security state of the first terminal device, the method further comprises:

obtaining, by the first terminal device, a signature for the first security state, wherein

sending the first security state to the second terminal device comprises:

sending, by the first terminal device, the first security state, the signature for the first security state, and a device certificate of the first terminal device to the second terminal device.

6. The method according to claim 1 , further comprising:

when the current security state is lower than the first security state:

prompting, by the first terminal device, that the encrypted file cannot be accessed and prompting for a reason why the encrypted file cannot be accessed; and

outputting, by the first terminal device, a security configuration function button based on the current security state.

7. A file processing method, comprising:

sending, by a second terminal device, an obtaining request to a first terminal device;

receiving, by the second terminal device, a first security state of the first terminal device in response to the obtaining request sent to the first terminal device;

determining, by the second terminal device and based on the first security state, whether the second terminal device is allowed to send a file to the first terminal device;

when the second terminal device determines, based on the first security state, that the second terminal device is allowed to send the file to the first terminal device, encrypting, by the second terminal device, the file by using an encryption key; and

sending, by the second terminal device, the encrypted file to the first terminal device.

8. The method according to claim 7 , wherein before determining whether the second terminal device is allowed to send the file to the first terminal device, the method further comprises:

receiving, by the second terminal device, the encryption key sent by the first terminal device in response to the obtaining request.

9. The method according to claim 7 , wherein before encrypting the file by using the encryption key, the method further comprises:

generating, by the second terminal device, the encryption key and a decryption key; and

after generating the encryption key and the decryption key, sending, by the second terminal device, the decryption key to the first terminal device.

10. The method according to claim 7 , wherein receiving the first security state of the first terminal device comprises:

receiving, by the second terminal device, the first security state of the first terminal device, a signature, and a device certificate of the first terminal device, wherein the signature is a signature for the first security state;

verifying, by the second terminal device, the signature based on the first security state and the device certificate of the first terminal device; and

if the verification succeeds, determining, by the second terminal device based on the first security state, whether the second terminal device is allowed to send the file to the first terminal device.

11. The method according to claim 7 , wherein determining whether the second terminal device is allowed to send the file to the first terminal device comprises:

prompting, by the second terminal device, for a security state of the first terminal device based on the first security state, and prompting whether the second terminal device is allowed to send the file to the first terminal device; and

when the second terminal device receives a sending allowed operation of a user, determining, by the second terminal device, that the second terminal device is allowed to send the file to the first terminal device; or

when the second terminal device receives a sending cancelled operation of the user, determining, by the second terminal device, that the second terminal device is not allowed to send the file to the first terminal device.

12. The method according to claim 7 , wherein determining whether the second terminal device is allowed to send the file to the first terminal device comprises:

determining, by the second terminal device, whether the first security state is higher than or equal to a preset security state; and

when the first security state is higher than or equal to the preset security state, determining, by the second terminal device, the second terminal device is allowed to send the file to the first terminal device; or

when the first security state is lower than the preset security state, determining, by the second terminal device, that the second terminal device is not allowed to send the file to the first terminal device.

13. The method according to claim 7 , further comprising:

when determining that the second terminal device is not allowed to send the file to the first terminal device, sending, by the second terminal device, prompt information to the first terminal device, wherein the prompt information is used to prompt for a reason for canceling sending of the file to the first terminal device.

14. The method according to claim 13 , further comprising:

when determining that the second terminal device is not allowed to send the file to the first terminal device, outputting, by the second terminal device, a reason option for canceling sending of the file to the first terminal device; and

receiving, by the second terminal device, a selection operation performed by the user on the reason option, wherein

the prompt information comprises a reason for selecting the selection operation.

15. The method according to claim 7 , wherein before sending the obtaining request to the first terminal device, the method further comprises:

receiving, by the second terminal device, a data sending instruction used to send the file to the first terminal device;

determining, by the second terminal device, whether the file is data of a preset protection type; and

if the file is the data of the preset protection type, sending, by the second terminal device, the obtaining request to the first terminal device.

16. The method according to claim 7 , wherein before sending the obtaining request to the first terminal device, the method further comprises:

outputting, by the second terminal device, a file sending mode option;

receiving, by the second terminal device, a selection operation performed by the user on an option of a secure file sending mode in the file sending mode option; and

entering, by the second terminal device, the secure file sending mode in response to the selection operation, wherein

sending the obtaining request to the first terminal device comprises:

sending, by the second terminal device, the obtaining request to the first terminal device in the secure file sending mode.

17. A first device, comprising:

a processor; and

a memory storing instructions that, when executed by the processor, cause the first device to:

send an obtaining request to a second device;

receive a first security state of the second device in response to the obtaining request sent to the second device;

determine, based on the first security state, whether the first device is allowed to send a file to the second device;

when the first device determines, based on the first security state, that the first device is allowed to send the file to the second device, encrypt the file by using an encryption key; and

send the encrypted file to the second device.

18. The first device according to claim 17 , wherein determining whether the first device is allowed to send the file to the second device comprises:

prompting for a security state of the second device based on the first security state, and prompting whether the first device is allowed to send the file to the second device; and

when the first device receives a sending allowed operation of a user, determining that the first device is allowed to send the file to the second device; or

when the first device receives a sending cancelled operation of a user, determining that the first device is not allowed to send the file to the second device.

19. The first device according to claim 17 , wherein determining whether the first device is allowed to send the file to the second device comprises:

determining whether the first security state is higher than or equal to a preset security state; and

when the first security state is higher than or equal to the preset security state, determining the first device is allowed to send the file to the second device; or

when the first security state is lower than the preset security state, determining that the first device is not allowed to send the file to the second device.

20. The first device according to claim 17 , wherein the first device is further caused to:

receive the encryption key sent by the second device in response to the obtaining request.