Sensitive permission control method and device and electronic equipment

Abstract

The invention discloses a sensitive permission control method and device and electronic equipment, capable of realizing finer-grained, more efficient and safer authority control. The sensitive permission control method comprises the steps: performing static analysis on a target application, and determining a mapping relationship between a control of the target application and sensitive permission;intercepting the sensitive permission request of the target application, and obtaining part of behavior information triggering the sensitive permission request; supplementing the partial behavior information according to the mapping relationship between the control and the sensitive permission to obtain complete behavior information; and determining an authority control decision corresponding tothe sensitive authority request according to the complete behavior information, and responding to the sensitive authority request according to the authority control decision. The sensitive permissioncontrol device comprises a static analysis module, an interception module, a supplement module and a control decision module. The electronic equipment includes a memory, a processor, and a computer program stored on the memory and operable on the processor to implement the sensitive permission control method.

Description

technical field [0001] The present invention relates to the technical field of intelligent terminal application software analysis, in particular to a sensitive authority control method, device and electronic equipment. Background technique [0002] With the rapid popularization of smart terminal devices, the number of application software applicable to smart terminals also shows explosive growth. Although the rapid growth of mobile applications has stimulated the continuous innovation of the Internet and the continuous improvement of functions, it has brought excellent user experience to users, but the ensuing problems such as the abuse of application permissions or the leakage of user privacy data have gradually caused It has a relatively serious negative impact, and has attracted more and more users' attention and attention. [0003] In the existing mobile operating systems, the permission system is often used to protect the integrity of the system and user privacy. When ...

AI Technical Summary

Problems solved by technology

[0004] However, the above-mentioned existing fine-grained permission control methods are basically developed around developers, and there are often the following problems: from the perspective of application developers, using code to implement functions, many permission control options based on this division are difficult for users It is not intuitive enough, and it is difficult for users to understand its actual meaning, which may lead to the granting of too many permissions and the abuse of permissions; most fine-grained permission control methods based on accessed data require users to manually identify private data, while finer-grained The permission control method of permission division requires users to participate in the confirmation and authorization of detailed permissions on a large scale. The degree of manual participation is high and the control efficiency is low. Different developers have different development concepts, which often lead to different divisions of permission control paths. Different paths require a lot of energy and cost, and the versatility is poor, so it is not easy to expand

Images