Information security management method, terminal device, and computer readable storage medium

Abstract

Embodiments of the invention disclose an information security management method, a terminal device, and a computer readable storage medium. The method comprises: receiving a first operation request ofa target application; obtaining a target authority corresponding to the first operation request of the target application; if the target authority is forbidden, returning simulated data to the targetapplication, to make the target application still operate normally under an unauthorized condition; if the target authority is allowed, determining whether to return the simulated data to the targetapplication according to degree of importance of the target authority and operating states of the target application. Through sending the simulated data to the application, the target application canbe ensured to operate normally under an unauthorized condition.

Description

technical field [0001] The present invention relates to the technical field of information security, in particular to an information security management method, a terminal device and a computer-readable storage medium. Background technique [0002] When the user installs an application and uses the entry interface for the first time, various permission requests will always pop up, such as the need to access the address book, the need to access the SMS record, the need to start the camera, and so on. However, not all permission requests of the application are necessary for the application to run, and only some permissions that can activate the functions of the application are necessary. For example, the camera needs to be turned on when the payment software uses the function of scanning the QR code, and the microphone needs to be turned on when the voice input is used. If the corresponding permissions cannot be mobilized, the software functions will definitely be blocked. Si...

AI Technical Summary

Problems solved by technology

[0003] Although users can decide whether to grant application permissions according to their own wishes, many applications now excessively apply for permissions that are not related to the application's own functions for their own benefit, and in order to force users to grant all the permissions they require, they will be rejected when the user refuses. When granting all the permissions it asks for, deny the user service, so in order to be able to use the application, most users will eventually choose to agree

[0004] As a result, authority management loses its own role in the end, and instead legalizes the privacy theft of bad applications, which brings great hidden dangers to users' privacy and property security.

Therefore, there are loopholes in the existing rights management method, which cannot effectively protect the user's privacy and property security.

Images