Application program rights management method, device, storage medium and electronic device

Abstract

The present application discloses a method for managing the rights of an application, including: recording the authorization history information of the application, obtaining the status information of the electronic device, processing the status information according to a first algorithm model, outputting the user status information, processing the authorization history information and the user status information according to a second algorithm model, outputting the rights management information and assigning rights to the application. The present application also provides a rights management device, a storage medium and an electronic device for an application.

Description

Technical Field

[0001] The present application belongs to the technical field of electronic devices, and in particular, relates to a method, device, storage medium and electronic device for managing permissions of an application. Background Art

[0002] With the development of electronic technology, electronic devices such as smartphones are becoming more and more intelligent. Electronic devices can process data through various algorithm models to provide users with various functions. For example, electronic devices can learn the behavioral characteristics of users based on algorithm models to provide users with personalized services.

[0003] In the prior art, the authorization management mechanism for third-party applications of electronic devices is to open the third-party application for the first time. If the third-party application needs additional permissions, it will remind the user whether to authorize. Once the user authorizes, the third-party application will be directly granted the permission and automatically released. Another authorization management method is to open the application, and when a sub-function or sub-service of the application is used, the third-party application will need additional permissions. At this time, the user will also be reminded whether to authorize. The third-party application will then directly take over the permission. According to the above-mentioned electronic device authorization mechanism, third-party applications may monitor user information, resulting in the rampant use of application permissions. Summary of the invention

[0004] The present application provides a method, device, storage medium and electronic device for managing application permissions, which can intelligently assign permissions to applications and improve the security of electronic devices.

[0005] In a first aspect, an embodiment of the present application provides a method for managing permissions of an application, including:

[0006] Recording authorization history information of applications in the electronic device, wherein the authorization history information includes permission authorization records of the applications;

[0007] Acquire current status information of the electronic device, process the status information according to a first algorithm model, and output user status information;

[0008] Processing the authorization history information and user status information according to a second algorithm model, and outputting authority management information;

[0009] Allocate permissions for the application program according to the permission management information.

[0010] In a second aspect, an embodiment of the present application provides a permission management device for an application program, comprising: a recording module, a first processing module, a second processing module, and an allocation module;

[0011] The recording module is used to record the authorization history information of the application in the electronic device, and the authorization history information includes the permission authorization record of the application;

[0012] The first processing module is used to obtain the current state information of the electronic device, process the state information according to the first algorithm model, and output user state information;

[0013] The second processing module is used to process the authorization history information and user status information according to a second algorithm model and output authority management information;

[0014] The allocation module is used to allocate permissions to the application according to the permission management information.

[0015] In a third aspect, an embodiment of the present application provides a storage medium on which a computer program is stored. When the computer program is run on a computer, the computer executes the above-mentioned method for managing permissions of the application program.

[0016] In a fourth aspect, an embodiment of the present application provides an electronic device, including a processor and a memory, wherein the memory stores a plurality of instructions, and the processor loads the instructions in the memory to perform the following steps:

[0017] Recording authorization history information of applications in the electronic device, wherein the authorization history information includes permission authorization records of the applications;

[0018] Acquire current status information of the electronic device, process the status information according to a first algorithm model, and output user status information;

[0019] Processing the authorization history information and user status information according to a second algorithm model, and outputting authority management information;

[0020] Allocate permissions for the application program according to the permission management information.

[0021] The permission management method for an application provided in an embodiment of the present application can record the authorization history information of an application in an electronic device, the authorization history information includes the permission authorization record of the application, obtain the current state information of the electronic device, and process the state information according to a first algorithm model, output the user state information, process the authorization history information and the user state information according to a second algorithm model, output the permission management information, and assign permissions to the application according to the permission management information. The embodiment of the present application can effectively record the permissions required by the user when using the application, and then intelligently assign the permissions of its application to a third-party application according to the current user state information, thereby improving the security of the electronic device. BRIEF DESCRIPTION OF THE DRAWINGS

[0022] In order to more clearly illustrate the technical solutions in the embodiments of the present application, the drawings required for use in the description of the embodiments will be briefly introduced below. Obviously, the drawings described below are only some embodiments of the present application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

[0023] Figure 1 A schematic diagram of an application scenario of the method for managing application permissions provided in an embodiment of the present application.

[0024] Figure 2 A flowchart of a method for managing application permissions provided in an embodiment of the present application.

[0025] Figure 3 Another flowchart of the method for managing application permissions provided in an embodiment of the present application.

[0026] Figure 4 A schematic diagram of the structure of a permission management device for an application provided in an embodiment of the present application.

[0027] Figure 5 Another structural diagram of the permission management device for an application provided in an embodiment of the present application.

[0028] Figure 6 A schematic diagram of the structure of an electronic device provided in an embodiment of the present application.

[0029] Figure 7 Another schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0030] Please refer to the drawings, where the same component symbols represent the same components, and the principles of the present application are illustrated by implementing them in an appropriate computing environment. The following description is based on the illustrated specific embodiments of the present application, which should not be considered as limiting other specific embodiments of the present application that are not described in detail herein.

[0031] In the following description, the specific embodiments of the present application will be described with reference to the steps and symbols performed by one or more computers, unless otherwise stated. Therefore, these steps and operations will be mentioned several times as being performed by a computer, and the computer execution referred to herein includes the operation of a computer processing unit by an electronic signal representing data in a structured form. This operation converts the data or maintains it at a location in the memory system of the computer, which can be reconfigured or otherwise change the operation of the computer in a manner familiar to testers in the field. The data structure maintained by the data is a physical location in the memory, which has specific characteristics defined by the data format. However, the principles of the present application are described in the above text, which does not represent a limitation, and testers in the field will understand that the various steps and operations described below can also be implemented in hardware.

[0032] The terms "first", "second", and "third" in this application are used to distinguish different objects, rather than to describe a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or modules is not limited to the listed steps or modules, but some embodiments also include steps or modules that are not listed, or some embodiments also include other steps or modules inherent to these processes, methods, products, or devices.

[0033] refer to Figure 1 , Figure 1 A schematic diagram of an application scenario of the permission management method for an application provided in an embodiment of the present application. The permission management method for the application is applied to an electronic device. A panoramic perception architecture is provided in the electronic device. The panoramic perception architecture is an integration of hardware and software in the electronic device for implementing the permission management method for the application.

[0034] Among them, the panoramic perception architecture includes information perception layer, data processing layer, feature extraction layer, scenario modeling layer and intelligent service layer.

[0035] The information perception layer is used to obtain information about the electronic device itself or information in the external environment. The information perception layer may include multiple sensors. For example, the information perception layer includes multiple sensors such as distance sensors, magnetic field sensors, light sensors, acceleration sensors, fingerprint sensors, Hall sensors, position sensors, gyroscopes, inertial sensors, attitude sensors, barometers, heart rate sensors, etc.

[0036] Among them, the distance sensor can be used to detect the distance between the electronic device and the external object. The magnetic field sensor can be used to detect the magnetic field information of the environment in which the electronic device is located. The light sensor can be used to detect the light information of the environment in which the electronic device is located. The acceleration sensor can be used to detect the acceleration data of the electronic device. The fingerprint sensor can be used to collect the fingerprint information of the user. The Hall sensor is a magnetic field sensor made according to the Hall effect, which can be used to realize the automatic control of the electronic device. The position sensor can be used to detect the current geographical location of the electronic device. The gyroscope can be used to detect the angular velocity of the electronic device in all directions. The inertial sensor can be used to detect the motion data of the electronic device. The attitude sensor can be used to sense the attitude information of the electronic device. The barometer can be used to detect the air pressure of the environment in which the electronic device is located. The heart rate sensor can be used to detect the heart rate information of the user.

[0037] The data processing layer is used to process the data obtained by the information perception layer. For example, the data processing layer can perform data cleaning, data integration, data transformation, data reduction, etc. on the data obtained by the information perception layer.

[0038] Among them, data cleaning refers to cleaning the large amount of data obtained by the information perception layer to eliminate invalid data and duplicate data. Data integration refers to integrating multiple single-dimensional data obtained by the information perception layer into a higher or more abstract dimension to comprehensively process multiple single-dimensional data. Data transformation refers to converting the data type or format of the data obtained by the information perception layer so that the transformed data meets the processing requirements. Data reduction refers to maximizing the reduction of data volume while keeping the original appearance of the data as much as possible.

[0039] The feature extraction layer is used to extract features from the data processed by the data processing layer to extract features included in the data. The extracted features can reflect the state of the electronic device itself, the state of the user, or the environmental state of the environment in which the electronic device is located.

[0040] Among them, the feature extraction layer can extract features or process the extracted features through filtering, packaging, integration and other methods.

[0041] The filtering method refers to filtering the extracted features to delete redundant feature data. The packaging method is used to screen the extracted features. The integration method refers to integrating multiple feature extraction methods together to build a more efficient and accurate feature extraction method for extracting features.

[0042] The scenario modeling layer is used to construct a model based on the features extracted by the feature extraction layer, and the obtained model can be used to represent the state of the electronic device, the state of the user, or the state of the environment, etc. For example, the scenario modeling layer can construct a key value model, a pattern identification model, a graph model, an entity relationship model, an object-oriented model, etc. based on the features extracted by the feature extraction layer.

[0043] The intelligent service layer is used to provide intelligent services to users based on the model constructed by the scenario modeling layer. For example, the intelligent service layer can provide basic application services to users, perform system intelligent optimization for electronic devices, and provide personalized intelligent services to users.

[0044] In addition, the panoramic perception architecture may also include multiple algorithms, each of which can be used to analyze and process data, and the multiple algorithms may constitute an algorithm library. For example, the algorithm library may include Markov algorithm, implicit Dirichlet distribution algorithm, Bayesian classification algorithm, support vector machine, K-means clustering algorithm, K-nearest neighbor algorithm, conditional random field, residual network, long short-term memory network, convolutional neural network, recurrent neural network and other algorithms.

[0045] An embodiment of the present application provides a method for managing the permissions of an application. The executor of the method for managing the permissions of an application may be a permission management device for the application provided in the embodiment of the present application, or an electronic device that integrates the permission management device for the application, wherein the permission management device for the application may be implemented in hardware or software.

[0046] The embodiment of the present application will be described from the perspective of an application rights management device, which can be integrated in an electronic device. The application rights management method includes: recording authorization history information of the application in the electronic device, the authorization history information including the permission authorization record of the application;

[0047] Acquire current status information of the electronic device, process the status information according to a first algorithm model, and output user status information;

[0048] Processing the authorization history information and user status information according to a second algorithm model, and outputting authority management information;

[0049] Allocate permissions for the application program according to the permission management information.

[0050] In one embodiment, recording authorization history information of an application in an electronic device includes:

[0051] When an application in the electronic device requests permission for the first time, recording identification information of the permission and identification information of the application;

[0052] The authorization history information is generated according to the identification information of the authority and the identification information of the application program.

[0053] In one embodiment, the current state information of the electronic device includes sensor information, and the state information is processed according to the first algorithm model to output user state information, including:

[0054] Performing vectorization processing on the sensor information to obtain a sensor vector;

[0055] superimposing the sensor vectors to obtain a sensor tensor;

[0056] The sensor tensor is processed according to the first algorithm model to output user status information.

[0057] In one embodiment, the authorization history information and the user status information are processed according to the second algorithm model to output the authority management information, including:

[0058] Performing vectorization processing on the authorization history information to obtain an authorization history vector;

[0059] The authorization history vector and user status information are processed according to the second algorithm model, and authority management information is output.

[0060] In one embodiment, vectorizing the authorization history information to obtain an authorization history vector includes:

[0061] Extracting a word sequence from the authorization history information;

[0062] The word sequence is converted by a pre-configured word embedding model to generate a corresponding vector sequence;

[0063] The authorization history vector is generated according to the vector sequence.

[0064] In one embodiment, the second algorithm model is a Bayesian model.

[0065] In one embodiment, assigning permissions to the application according to the permission management information includes:

[0066] When the application initiates a request to invoke a permission, determining whether the permission is authorized according to the permission management information;

[0067] If so, enable the permissions of the application.

[0068] See also Figure 2 , Figure 2The flowchart of the permission management method of the application provided in the embodiment of the present application is as follows:

[0069] Step 101, record the authorization history information of the application in the electronic device, the authorization history information includes the permission authorization record of the application.

[0070] Among them, the above-mentioned permission authorization records include records of all applications in the electronic device applying for permissions. For example, when installing an application or opening an application for the first time, a dialog box will pop up and the user will decide whether to enable the relevant permissions. When the user agrees, the application can call the changed permissions.

[0071] For example, in electronic devices running the Android system, Android has prepared many optional permissions for applications, including the permission to obtain network status information, the permission to obtain WI-FI network status information, the permission to obtain battery status information, the permission to make calls, the permission to use the camera, the permission to read the user's contact data, the permission to read the user's photo album, the permission to access GPS, the permission to set desktop wallpaper, etc. Generally speaking, different applications require different permissions. For example, desktop beautification applications generally apply for the permission to read the user's photo album and the permission to set desktop wallpaper, and navigation applications generally apply for the permission to access GPS. After obtaining the permission authorized by the user, the application can use the relevant functions. For example, after obtaining the permission to make calls, the application can make calls in the application. If the permission is not obtained, the user needs to manually make a call in the system's dialing interface.

[0072] In one embodiment, the authorization history information of the application includes all permissions applied for by the application, including permissions authorized by the user and permissions rejected by the user.

[0073] Step 102, obtaining current status information of the electronic device, and processing the status information according to a first algorithm model, and outputting user status information.

[0074] In one embodiment, the current state information of the electronic device may include system operation information and sensor information of the electronic device, etc. Among them, the electronic device is equipped with sensors with different functions, and these sensors can detect the current state of the electronic device at any time. As an embodiment of the present application, the motion state of the electronic device can be detected by an acceleration sensor (G-Sensor) and a gyroscope. Among them, the acceleration sensor can be a three-axis linear acceleration sensor, which is used to detect the linear acceleration on three mutually orthogonal axes of the electronic device. The gyroscope is used to detect the speed of rotation of the electronic device on three mutually orthogonal axes. If the values ​​detected by the acceleration sensor and the gyroscope do not change within a unit time, it is considered that the electronic device is in a stationary state. As long as one of the values ​​of the acceleration sensor and the gyroscope changes within a unit time, it can be considered that the electronic device is in a state of motion. In addition, the electronic device can also detect the intensity of the ambient light through a light sensor. The working principles of the acceleration sensor, the gyroscope and the light sensor can refer to the prior art, which will not be repeated here.

[0075] In one embodiment, after obtaining the current state information of the electronic device, the information can be input into the user state prediction model to predict the current state of the user to obtain the current state information of the user. The output result of the user state prediction model can be multiple user states and their corresponding probabilities, and the highest probability can be selected as the prediction result.

[0076] Step 103: Process the authorization history information and user status information according to the second algorithm model, and output authority management information.

[0077] In one embodiment, the second algorithm model may be a Bayesian model, which uses the authorization history information obtained in step 101 and the user status information obtained in step 102 as inputs of the Bayesian model, and outputs authorization management information. The authorization management information includes the determination results of all permissions required by the application, and the determination results may include a first determination result of agreeing to the authorization and a second determination result of disagreeing to the authorization.

[0078] Step 104: assigning permissions to the application program according to the permission management information.

[0079] After the electronic device obtains the permission management information, it transmits it to the system layer of the electronic device to assign permissions to the application. In one embodiment, when an application applies for permission, the permission to be applied for by the application is managed and controlled according to the above-mentioned permission management information. If the authorization is agreed, the system can automatically open the permission to be called directly, so that the user can open the permission without manual operation. Or a check box can be popped up, and the user can choose again whether to open the permission to be called to meet the needs of different users. For example, if the user has a high confidentiality requirement for the permission, the user needs to make further judgments. If the authorization is not agreed, the permission is refused to be opened.

[0080] For example, after launching application A, the application applies for permission to make calls and permission to use the camera. At this time, the electronic device predicts based on the current state of the electronic device that the user is currently at night and playing with the phone in bed in a dark environment. At this time, the output permission management message may include consent for the application to obtain permission to make calls, and disagreement with the application to obtain permission to use the camera.

[0081] As can be seen from the above, the permission management method for applications provided in the embodiments of the present application can record the authorization history information of applications in electronic devices, the authorization history information includes the permission authorization record of the application, obtain the current state information of the electronic device, and process the state information according to the first algorithm model, output the user state information, process the authorization history information and the user state information according to the second algorithm model, output the permission management information, and assign permissions to the application according to the permission management information. The embodiments of the present application can effectively record the permissions required by the user when using the application, and then intelligently assign the permissions of its application to the third-party application according to the current user state information, thereby improving the security of the electronic device and reducing the power consumption of the electronic device.

[0082] The following will further introduce the cleaning method of the present application based on the method described in the above embodiment. Figure 3 , Figure 3 Another flowchart of the permission management method of the application provided in the embodiment of the present application, the permission management method of the application includes:

[0083] Step 201: When an application in an electronic device requests permission for the first time, identification information of the permission and identification information of the application are recorded.

[0084] In one embodiment, the first time an application in the electronic device requests permission can be when the application is installed or when the application is opened for the first time, for example, a dialog box may pop up to allow the user to determine whether to enable the relevant permission. The permission identification information may be the name of the permission, and the application identification information may be the name of the application.

[0085] Step 202: Generate authorization history information according to the identification information of the permission and the identification information of the application.

[0086] The authorization history information includes the application ID and the corresponding permission ID. For example, the permissions applied by application A are the permission to obtain network status information, the permission to obtain WI-FI network status information, and the permission to obtain battery status information. The permissions applied by application B are the permission to make calls, the permission to use the camera, and the permission to read the user's contact data. The permissions applied by application C are the permission to read the user's photo album, the permission to access GPS, the permission to set the desktop wallpaper, etc.

[0087] Step 203, obtaining current sensor information of the electronic device, and processing the sensor information according to the first algorithm model to output user status information.

[0088] For example, the electronic device is equipped with sensors with different functions, which can detect the current state of the electronic device at any time. As an embodiment of the present application, the motion state of the electronic device can be detected by an acceleration sensor (G-Sensor) and a gyroscope. The acceleration sensor can be a three-axis linear acceleration sensor, which is used to detect the linear acceleration of the electronic device on three mutually orthogonal axes. The gyroscope is used to detect the speed of rotation of the electronic device on three mutually orthogonal axes. If the values ​​detected by the acceleration sensor and the gyroscope do not change within a unit time, the electronic device is considered to be in a stationary state. As long as one of the values ​​of the acceleration sensor and the gyroscope changes within a unit time, the electronic device can be considered to be in a state of motion. In addition, the electronic device can also detect the intensity of the ambient light through a light sensor. The working principles of the acceleration sensor, the gyroscope and the light sensor can be referred to the prior art, which will not be elaborated here.

[0089] In one embodiment, after the current sensor information of the electronic device is acquired, the sensor may be input into a user state prediction model to predict the current state of the user, so as to obtain the current state information of the user.

[0090] In one embodiment, processing the sensor information according to the first algorithm model and outputting the user status information may include:

[0091] Performing vectorization processing on the sensor information to obtain a sensor vector;

[0092] superimposing the sensor vectors to obtain a sensor tensor;

[0093] The sensor tensor is processed according to the first algorithm model to output user status information.

[0094] Step 204: vectorize the authorization history information to obtain an authorization history vector.

[0095] In one embodiment, vectorizing the authorization history information to obtain an authorization history vector may include:

[0096] Extracting a word sequence from the authorization history information;

[0097] The word sequence is converted by a pre-configured word embedding model to generate a corresponding vector sequence;

[0098] The authorization history vector is generated according to the vector sequence.

[0099] Specifically, the above-mentioned word embedding model can be configured in an electronic device, so that the electronic device can convert the received word sequence into a vector sequence through the word embedding model. In one embodiment, the electronic device can convert the word sequence into a vector sequence through a pre-trained word embedding model, which can specifically include: determining the first word vector corresponding to each word in the word sequence according to the word table; converting the first word vector corresponding to each word into a second word vector through the word embedding model; and finally generating a vector sequence using the second word vector corresponding to each word.

[0100] It should be noted that the above word embedding model can be an X×Y matrix, X can be used as the dimension after conversion, and Y can be used as the dimension before conversion. In the embodiment of the present application, the dimension Y before conversion can be configured according to the size of the vocabulary, and the dimension X after conversion can usually be smaller than the dimension Y before conversion, so that useful information can be represented in a more compact form for easy processing.

[0101] Step 205: Process the authorization history vector and user status information according to the Bayesian model and output the authority management information.

[0102] The authorization history vector obtained in step 204 and the user status information obtained in step 203 are used as inputs of the Bayesian model, and the output is authorization management information. The authorization management information includes the determination results of all permissions required by the application, and the determination results may include a first determination result of agreeing to the authorization and a second determination result of disagreeing to the authorization.

[0103] Step 206, when the application initiates a request to call the permission, it is determined whether the permission is authorized according to the permission management information. If so, step 207 is executed. If not, the request is rejected.

[0104] After the electronic device obtains the permission management information, it transmits it to the system layer of the electronic device, and the system layer determines whether the permission is authorized. In one embodiment, when an application initiates a request to call a permission, the permission to be applied for by the application is judged according to the above permission management information. If the authorization is approved, step 207 is executed and the system automatically opens the permission to be called, so that the user can open the permission without manual operation. If it is not approved, the request initiated by the above application to call the permission is directly rejected.

[0105] Step 207, enable the permissions of the application.

[0106] In one embodiment, before enabling the permission of the application, a check box may be popped up for the user to select whether to enable the permission to be called again to meet the needs of different users. For example, if the user has a high confidentiality requirement for the permission, the user needs to make further judgments. If the user does not agree to the authorization, the permission is refused.

[0107] For example, after launching application A, the application applies for permission to make calls and permission to use the camera. At this time, the electronic device predicts based on the current state of the electronic device that the user is currently at night and playing with the phone in bed in a dark environment. At this time, the output permission management message may include consent for the application to obtain permission to make calls, and disagreement with the application to obtain permission to use the camera.

[0108] As can be seen from the above, the permission management method for applications provided in the embodiment of the present application can record the identification information of the permission and the identification information of the application when the application in the electronic device requests permission for the first time, generate authorization history information based on the identification information of the permission and the identification information of the application, obtain the current sensor information of the electronic device, and process the sensor information according to the first algorithm model, output the user status information, vectorize the authorization history information to obtain the authorization history vector, process the authorization history vector and the user status information according to the Bayesian model, output the permission management information, and when the application initiates a request to call the permission, determine whether the permission is authorized based on the permission management information, and if so, enable the permission of the application. The embodiment of the present application can effectively record the permissions required by the user when using the application, and then intelligently allocate the permissions of its application to the third-party application based on the current user status information, thereby improving the security of the electronic device and reducing the power consumption of the electronic device.

[0109] The embodiment of the present application also provides a first algorithm model and a second algorithm model. The first algorithm model is a user state prediction model, which is used to input the current state information of the electronic device into the user state prediction model after obtaining the current state information of the electronic device, and predict the current state of the user to obtain the current state information of the user. The second algorithm model can be a Bayesian model, which is used to take the authorization history information and the user state information as the input of the Bayesian model after obtaining the authorization history information and the user state information, and output it as authorization management information, so that the electronic device can assign permissions to the application according to the permission management information.

[0110] See also Figure 4 , Figure 4 A schematic diagram of a structure of a permission management device for an application provided in an embodiment of the present application. The permission management device 30 for the application includes a recording module 301, a first processing module 302, a second processing module 303 and an allocation module 304;

[0111] The recording module 301 is used to record the authorization history information of the application in the electronic device, and the authorization history information includes the permission authorization record of the application.

[0112] Among them, the above-mentioned permission authorization records include records of all applications in the electronic device applying for permissions. For example, when installing an application or opening an application for the first time, a dialog box will pop up and the user will decide whether to enable the relevant permissions. When the user agrees, the application can call the changed permissions.

[0113] For example, in electronic devices running the Android system, Android has prepared many optional permissions for applications, including the permission to obtain network status information, the permission to obtain WI-FI network status information, the permission to obtain battery status information, the permission to make calls, the permission to use the camera, the permission to read the user's contact data, the permission to read the user's photo album, the permission to access GPS, the permission to set desktop wallpaper, etc. Generally speaking, different applications require different permissions. For example, desktop beautification applications generally apply for the permission to read the user's photo album and the permission to set desktop wallpaper, and navigation applications generally apply for the permission to access GPS. After obtaining the permission authorized by the user, the application can use the relevant functions. For example, after obtaining the permission to make calls, the application can make calls in the application. If the permission is not obtained, the user needs to manually make a call in the system's dialing interface.

[0114] The first processing module 302 is used to obtain the current state information of the electronic device, process the state information according to the first algorithm model, and output user state information.

[0115] In one embodiment, the current state information of the electronic device may include system operation information and sensor information of the electronic device, etc. Among them, the electronic device is equipped with sensors with different functions, and these sensors can detect the current state of the electronic device at any time. As an embodiment of the present application, the motion state of the electronic device can be detected by an acceleration sensor (G-Sensor) and a gyroscope. Among them, the acceleration sensor can be a three-axis linear acceleration sensor, which is used to detect the linear acceleration on three mutually orthogonal axes of the electronic device. The gyroscope is used to detect the speed of rotation of the electronic device on three mutually orthogonal axes. If the values ​​detected by the acceleration sensor and the gyroscope do not change within a unit time, it is considered that the electronic device is in a stationary state. As long as one of the values ​​of the acceleration sensor and the gyroscope changes within a unit time, it can be considered that the electronic device is in a state of motion. In addition, the electronic device can also detect the intensity of the ambient light through a light sensor. The working principles of the acceleration sensor, the gyroscope and the light sensor can refer to the prior art, which will not be repeated here.

[0116] In one embodiment, after the current state information of the electronic device is acquired, the information may be input into a user state prediction model to predict the current state of the user, so as to obtain the current state information of the user.

[0117] The second processing module 303 is used to process the authorization history information and user status information according to a second algorithm model, and output authority management information.

[0118] In one embodiment, the second algorithm model may be a Bayesian model, which uses the authorization history information obtained by the recording module 301 and the user status information obtained by the first processing module 302 as inputs to the Bayesian model, and outputs authorization management information. The authorization management information includes the determination results of all permissions required by the application, and the determination results may include a first determination result of agreeing to the authorization and a second determination result of disagreeing to the authorization.

[0119] The allocation module 304 is used to allocate permissions to the application according to the permission management information.

[0120] After the electronic device obtains the permission management information, it transmits it to the system layer of the electronic device to assign permissions to the application. In one embodiment, when an application applies for permission, the permission to be applied for by the application is managed and controlled according to the above-mentioned permission management information. If the authorization is agreed, the system can automatically open the permission to be called directly, so that the user can open the permission without manual operation. Or a check box can be popped up, and the user can choose again whether to open the permission to be called to meet the needs of different users. For example, if the user has a high confidentiality requirement for the permission, the user needs to make further judgments. If the authorization is not agreed, the permission is refused to be opened.

[0121] In one embodiment, see Figure 5 , Figure 5 A schematic diagram of a structure of a permission management device for an application provided in an embodiment of the present application, wherein the recording module 301 includes: a recording submodule 3011 and a generating submodule 3012;

[0122] The recording submodule 3011 is used to record the identification information of the permission and the identification information of the application when the application in the electronic device requests permission for the first time;

[0123] The generating submodule 3012 is used to generate the authorization history information according to the identification information of the permission and the identification information of the application.

[0124] In one embodiment, the current state information of the electronic device includes sensor information, and the first processing module 302 includes: a first processing submodule 3021 and a first output submodule 3022;

[0125] The first processing submodule 3021 is used to perform vectorization processing on the sensor information to obtain a sensor vector;

[0126] The first output submodule 3022 is used to superimpose the sensor vectors to obtain a sensor tensor, process the sensor tensor according to the first algorithm model, and output user status information.

[0127] In one embodiment, the second processing module 303 includes: a second processing submodule 3031 and a second output submodule 3032;

[0128] The second processing module 3031 is used to perform vectorization processing on the authorization history information to obtain an authorization history vector;

[0129] The second output submodule 3032 is used to process the authorization history vector and user status information according to a second algorithm model, and output authority management information.

[0130] As can be seen from the above, the permission management device of the application in the embodiment of the present application can record the authorization history information of the application in the electronic device, the authorization history information includes the permission authorization record of the application, obtain the current state information of the electronic device, and process the state information according to the first algorithm model, output the user state information, process the authorization history information and the user state information according to the second algorithm model, output the permission management information, and assign permissions to the application according to the permission management information. The embodiment of the present application can effectively record the permissions required by the user when using the application, and then intelligently assign the permissions of its application to the third-party application according to the current user state information, thereby improving the security of the electronic device and reducing the power consumption of the electronic device.

[0131] In the embodiments of the present application, the permission management device of the application and the permission management method of the application in the above embodiments belong to the same concept. Any method provided in the embodiment of the permission management method of the application can be run on the permission management device of the application. The specific implementation process is detailed in the embodiment of the permission management method of the application, which will not be repeated here.

[0132] The term "module" used herein can be regarded as a software object executed on the computing system. The different components, modules, engines and services described herein can be regarded as implementation objects on the computing system. The apparatus and method described herein can be implemented in software, and of course can also be implemented in hardware, all within the scope of protection of this application.

[0133] An embodiment of the present application further provides a storage medium on which a computer program is stored. When the computer program is executed on a computer, the computer executes the above-mentioned method for managing permissions of an application program.

[0134] The embodiment of the present application also provides an electronic device, such as a tablet computer, a mobile phone, etc. The processor in the electronic device will load instructions corresponding to the processes of one or more application programs into the memory according to the following steps, and the processor will run the application programs stored in the memory to implement various functions:

[0135] Recording authorization history information of applications in the electronic device, wherein the authorization history information includes permission authorization records of the applications;

[0136] Acquire current status information of the electronic device, process the status information according to a first algorithm model, and output user status information;

[0137] Processing the authorization history information and user status information according to a second algorithm model, and outputting authority management information;

[0138] Allocate permissions for the application program according to the permission management information.

[0139] In one embodiment, when recording authorization history information of an application in an electronic device, the processor is configured to perform the following steps:

[0140] When an application in the electronic device requests permission for the first time, obtaining identification information of the permission and identification information of the application;

[0141] The authorization history information is generated according to the identification information of the authority and the identification information of the application program.

[0142] In one embodiment, the current state information of the electronic device includes sensor information, and the state information is processed according to the first algorithm model. When outputting the user state information, the processor is configured to perform the following steps:

[0143] Performing vectorization processing on the sensor information to obtain a sensor vector;

[0144] superimposing the sensor vectors to obtain a sensor tensor;

[0145] The sensor tensor is processed according to the first algorithm model to output user status information.

[0146] In one embodiment, when the authorization history information and the user status information are processed according to the second algorithm model and the authority management information is output, the processor is configured to perform the following steps:

[0147] Performing vectorization processing on the authorization history information to obtain an authorization history vector;

[0148] The authorization history vector and user status information are processed according to the second algorithm model, and authority management information is output.

[0149] In one embodiment, when vectorizing the authorization history information to obtain an authorization history vector, the processor is configured to perform the following steps:

[0150] Extracting a word sequence from the authorization history information;

[0151] The word sequence is converted by a pre-configured word embedding model to generate a corresponding vector sequence;

[0152] The authorization history vector is generated according to the vector sequence.

[0153] In one embodiment, the second algorithm model is a Bayesian model.

[0154] In one embodiment, when assigning permissions to the application according to the permission management information, the processor is configured to perform the following steps:

[0155] When the application initiates a request to invoke a permission, determining whether the permission is authorized according to the permission management information;

[0156] If so, enable the permissions of the application.

[0157] Reference to "embodiments" herein means that a particular feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various locations in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment that is mutually exclusive with other embodiments. It is explicitly and implicitly understood by those skilled in the art that the embodiments described herein may be combined with other embodiments.

[0158] See also Figure 6 , the electronic device 400 includes a processor 401 and a memory 402. The processor 401 is electrically connected to the memory 402.

[0159] The processor 400 is the control center of the electronic device 400. It uses various interfaces and lines to connect various parts of the entire electronic device. It executes various functions of the electronic device 400 and processes data by running or loading computer programs stored in the memory 402 and calling data stored in the memory 402, thereby monitoring the electronic device 400 as a whole.

[0160] The memory 402 can be used to store software programs and modules. The processor 401 executes various functional applications and data processing by running the computer programs and modules stored in the memory 402. The memory 402 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, a computer program required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area may store data created according to the use of the electronic device, etc. In addition, the memory 402 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices. Accordingly, the memory 402 may also include a memory controller to provide the processor 401 with access to the memory 402.

[0161] In the embodiment of the present application, the processor 401 in the electronic device 400 will load instructions corresponding to the processes of one or more computer programs into the memory 402 according to the following steps, and the processor 401 will run the computer program stored in the memory 402, thereby realizing various functions, as follows:

[0162] Recording authorization history information of applications in the electronic device, wherein the authorization history information includes permission authorization records of the applications;

[0163] Acquire current status information of the electronic device, process the status information according to a first algorithm model, and output user status information;

[0164] Processing the authorization history information and user status information according to a second algorithm model, and outputting authority management information;

[0165] Allocate permissions for the application program according to the permission management information.

[0166] Please also read Figure 7 In some implementations, the electronic device 400 may further include: a display 403, a radio frequency circuit 404, an audio circuit 405, and a power supply 406. The display 403, the radio frequency circuit 404, the audio circuit 405, and the power supply 406 are electrically connected to the processor 401, respectively.

[0167] The display 403 may be used to display information input by the user or information provided to the user and various graphical user interfaces, which may be composed of graphics, text, icons, videos, and any combination thereof. The display 403 may include a display panel, and in some embodiments, the display panel may be configured in the form of a liquid crystal display (LCD) or an organic light-emitting diode (OLED).

[0168] The radio frequency circuit 404 can be used to send and receive radio frequency signals, so as to establish wireless communication with a network device or other electronic devices through wireless communication, and to send and receive signals between the network device or other electronic devices.

[0169] The audio circuit 405 may be used to provide an audio interface between a user and the electronic device through a speaker and a microphone.

[0170] The power supply 406 may be used to supply power to various components of the electronic device 400. In some embodiments, the power supply 406 may be logically connected to the processor 401 through a power management system, so that the power management system can manage charging, discharging, and power consumption.

[0171] although Figure 7 Not shown, the electronic device 400 may also include a camera, a Bluetooth module, etc., which will not be described in detail here.

[0172] In the embodiment of the present application, the storage medium may be a magnetic disk, an optical disk, a read-only memory (ROM), or a random access memory (RAM).

[0173] In the above embodiments, the description of each embodiment has its own emphasis. For parts that are not described in detail in a certain embodiment, reference can be made to the relevant descriptions of other embodiments.

[0174] It should be noted that, for the permission management method of the application program of the embodiment of the present application, ordinary testers in the field can understand that all or part of the process of implementing the permission management method of the application program of the embodiment of the present application can be completed by controlling the relevant hardware through a computer program, and the computer program can be stored in a computer-readable storage medium, such as stored in the memory of an electronic device, and executed by at least one processor in the electronic device, and the execution process may include the process of the embodiment of the permission management method of the application program. Among them, the storage medium can be a disk, an optical disk, a read-only memory, a random access memory, etc.

[0175] For the rights management device of the application program of the embodiment of the present application, each functional module can be integrated into a processing chip, or each module can exist physically separately, or two or more modules can be integrated into one module. The above-mentioned integrated modules can be implemented in the form of hardware or in the form of software functional modules. If the integrated modules are implemented in the form of software functional modules and sold or used as independent products, they can also be stored in a computer-readable storage medium, such as a read-only memory, a disk or an optical disk.

[0176] The above is a detailed introduction to the permission management method, device, storage medium and electronic device for an application provided in an embodiment of the present application. Specific examples are used in this article to illustrate the principles and implementation methods of the present application. The description of the above embodiments is only used to help understand the method of the present application and its core idea; at the same time, for technical personnel in this field, according to the idea of ​​the present application, there will be changes in the specific implementation method and application scope. In summary, the content of this specification should not be understood as a limitation on the present application.

Claims

1. A method for managing application permissions, characterized in that: The method comprises the following steps: Recording authorization history information of applications in the electronic device, the authorization history information includes permission authorization records of the applications; the authorization history information of the applications includes all permissions applied for by the applications, including permissions authorized by the user and permissions rejected by the user; Acquire current state information of the electronic device, and process the state information according to the first algorithm model to output user state information, wherein the output user state information includes multiple user states and their corresponding probabilities, and select the one with the highest probability as the prediction result; Processing the authorization history information and user status information according to the second algorithm model, and outputting permission management information; wherein the permission management information includes determination results of all permissions required by the application, and the determination results include a first determination result of agreeing to the authorization and a second determination result of disagreeing to the authorization; Allocating permissions to the application according to the permission management information includes: when the application applies for permissions, managing the permissions to be applied for by the application according to the above permission management information, and if the authorization is agreed, the system will automatically enable the permissions to be called; if the authorization is not agreed, the permission will be refused to be enabled.

2. The method for managing application permissions according to claim 1, characterized in that: Record the authorization history information of applications in electronic devices, including: When an application in the electronic device requests permission for the first time, recording identification information of the permission and identification information of the application; The authorization history information is generated according to the identification information of the authority and the identification information of the application program.

3. The method for managing application permissions according to claim 1, wherein the current status information of the electronic device includes sensor information, characterized in that: Processing the state information according to the first algorithm model and outputting the user state information includes: Performing vectorization processing on the sensor information to obtain a sensor vector; superimposing the sensor vectors to obtain a sensor tensor; The sensor tensor is processed according to the first algorithm model to output user status information.

4. The method for managing application rights according to claim 1, characterized in that: The authorization history information and the user status information are processed according to the second algorithm model, and the authority management information is output, including: Performing vectorization processing on the authorization history information to obtain an authorization history vector; The authorization history vector and user status information are processed according to the second algorithm model, and authority management information is output.

5. The method for managing application rights according to claim 4, characterized in that: Vectorizing the authorization history information to obtain an authorization history vector includes: Extracting a word sequence from the authorization history information; The word sequence is converted by a pre-configured word embedding model to generate a corresponding vector sequence; The authorization history vector is generated according to the vector sequence.

6. A permission management device for an application, characterized in that: The device comprises: a recording module, a first processing module, a second processing module and a distribution module; The recording module is used to record the authorization history information of the application in the electronic device, wherein the authorization history information includes the permission authorization record of the application; the authorization history information of the application includes all permissions applied for by the application, including permissions authorized by the user and permissions rejected by the user; The first processing module is used to obtain the current state information of the electronic device, and process the state information according to the first algorithm model to output user state information, wherein the output user state information includes multiple user states and their corresponding probabilities, and the one with the highest probability is selected as the prediction result; The second processing module is used to process the authorization history information and the user status information according to the second algorithm model, and output the permission management information; wherein the permission management information includes the determination results of all permissions required by the application program, and the determination results include a first determination result of approving the authorization and a second determination result of not agreeing to the authorization; The allocation module is used to allocate permissions to the application according to the permission management information, including: when the application applies for permissions, the permissions to be applied for by the application are managed and controlled according to the above permission management information. If the authorization is agreed, the system will automatically enable the permissions to be called; if the authorization is not agreed, the permissions will be refused to be enabled.

7. The device for managing application rights according to claim 6, characterized in that: The recording module comprises: Record submodules and generate submodules; The recording submodule is used to record the identification information of the permission and the identification information of the application when the application in the electronic device requests permission for the first time; The generating submodule is used to generate the authorization history information according to the identification information of the permission and the identification information of the application.

8. The apparatus for managing application rights according to claim 6, wherein the current status information of the electronic device includes sensor information, characterized in that: The first processing module includes: a first processing submodule and a first output submodule; The first processing submodule is used to perform vectorization processing on the sensor information to obtain a sensor vector; The first output submodule is used to superimpose the sensor vectors to obtain a sensor tensor, process the sensor tensor according to the first algorithm model, and output user status information.

9. A storage medium having a computer program stored thereon, characterized in that: When the computer program is executed on a computer, the computer is enabled to execute the method for managing the rights of an application program according to any one of claims 1 to 5.

10. An electronic device, comprising a processor and a memory, wherein the memory stores a plurality of instructions, characterized in that: The processor loads the instructions in the memory for executing the following steps: Recording authorization history information of applications in the electronic device, the authorization history information includes permission authorization records of the applications; the authorization history information of the applications includes all permissions applied for by the applications, including permissions authorized by the user and permissions rejected by the user; Acquire current state information of the electronic device, and process the state information according to the first algorithm model to output user state information, wherein the output user state information includes multiple user states and their corresponding probabilities, and select the one with the highest probability as the prediction result; Processing the authorization history information and user status information according to the second algorithm model, and outputting permission management information; wherein the permission management information includes determination results of all permissions required by the application, and the determination results include a first determination result of agreeing to the authorization and a second determination result of disagreeing to the authorization; Allocating permissions to the application according to the permission management information includes: when the application applies for permissions, managing the permissions to be applied for by the application according to the above permission management information, and if the authorization is agreed, the system will automatically enable the permission to be called; if the authorization is not agreed, the permission will be refused to be enabled.

Images