Fine-grained permission management method and system for Android advertising library

Abstract

The invention discloses a fine-grained permission management method and system for an Android advertisement bank. According to the method, a trained advertisement bank classifier is used to recognize an advertisement bank of a to-be-published application; a package name of the advertisement bank and a permission list of a module are written into a basic property list file of the to-be-published application; when the to-be-published application is installed, the basic property list file is analyzed, and advertisement bank information, permissions of the advertisement bank and permissions of a host application are recorded; when sensitive API calling occurs, a stack judgment permission is called through a recall function to check whether a trigger point is from the advertisement bank or the host application, and whether sensitive API calling is agreed or not is decided according to the permission list of the module; and the permissions of the host application and / or the permissions of the advertisement bank are given or rejected according to an instruction input by a user for managing the permissions of the host application and the permissions of the advertisement bank. Through the fine-grained permission management method and system, fine-grained permission management with higher operability and practicability on the Android advertisement bank compared with existing methods can be realized under the condition of not increasing overhead.

Description

technical field [0001] The invention belongs to the security field of Android advertising library and the technical field of rights management, and more specifically relates to a fine-grained rights management method and system for Android advertising library. Background technique [0002] In the Android environment, user privacy data is closely related to system permissions, and each type of privacy corresponds to a type of permission. It is necessary to ensure that private data can only be accessed by authorized users, and unauthorized users cannot obtain access. Researching appropriate rights management strategies is an important means to achieve this goal. [0003] Due to the particularity of the Android permission mechanism, permission management can only be performed on the application as a whole, and the sharing of permissions between the host application and the advertising library it contains will cause many existing security problems. First of all, the user cannot...

AI Technical Summary

Problems solved by technology

[0006] In view of the above defects or improvement needs of the prior art, the object of the present invention is to provide a fine-grained permission management method and system for the Android advertisement library, thereby solving the problem that there is no effective and easy-to-implement Android advertisement in the prior art. Technical Problems of Fine-grained Permission Management Method for Library

Images