Operation execution method and apparatus, electronic device, and medium

Abstract

The application discloses an operation execution method, and belongs to the technical field of communication. The method can solve the problem of low security of user privacy information caused by application program stealing the user privacy information. The method comprises the following steps: in the case that a target operation is executed by a target application with a first permission, it is determined whether the target application has a second permission for executing the target operation, the second permission being an access permission of the target application to first data corresponding to the target operation; if the target application does not have the second permission, the target application is intercepted from listening to a first transmission channel, and a target file corresponding to the target operation is saved to a target storage space; a first input of a user is received, and a first operation is executed in response to the first input; wherein the first operation comprises any one of the following: allowing the target application to read the target file, and deleting the target file in the target storage space. The embodiment of the application is applied to the scene of protecting the security of user information.

Description

TECHNICAL FIELD

[0001] The present application belongs to the technical field of communication, and particularly relates to an operation execution method and device, electronic equipment and medium. BACKGROUND

[0002] With the development of electronic technology, the dependence of users on electronic equipment is higher and higher, and the functions of electronic equipment are more and more. At present, the application installed in the electronic equipment needs to have corresponding system permissions to ensure that the user normally uses various functions provided by the application.

[0003] In the related art, in the case that the user needs to use the related function of the application, the electronic equipment can provide a system permission authorization interface for the application, the system permission authorization interface can include a control for granting the application system permissions, and after detecting the triggering operation of the user on the control, the terminal can grant the system permissions to the application. However, after having the system permissions, the application can use the system permissions to implement various functions at any time as needed. For example, after granting the application the system permission of recording, the application can record the user's life conversation in the background.

[0004] Therefore, the method provided by the related art is prone to personal sensitive information leakage risk, resulting in low security of user privacy information. SUMMARY

[0005] The purpose of the embodiments of the present application is to provide an operation execution method and device and electronic equipment, which can solve the problem that the application program in the electronic equipment steals the user's privacy information by using the system permissions that have been obtained, resulting in low security of user privacy information.

[0006] In order to solve the above technical problems, the present application is implemented as follows:

[0007] In a first aspect, the embodiments of the present application provide an operation execution method, which comprises: in the case that a target operation is executed by a target application having a first permission, determining whether the target application has a second permission for executing the target operation, the second permission being an access permission of the target application to first data corresponding to the target operation; if the target application does not have the second permission, intercepting the listening of the target application to a first transmission channel, and saving a target file corresponding to the target operation to a target storage space; receiving a first input of a user, and in response to the first input, executing a first operation; wherein the first operation includes any one of the following: allowing the target application to read the target file, and deleting the target file in the target storage space.

[0008] In a second aspect, the embodiments of the present application provide an operation execution apparatus, which comprises a determining module, an executing module, a storing module and a receiving module, wherein: the determining module is configured to determine whether a target application has a second permission for executing a target operation in a case that the target operation is executed by the target application with a first permission, the second permission being an access permission of the target application to first data corresponding to the target operation; the executing module is configured to intercept listening of a first transmission channel by the target application if the determining module determines that the target application does not have the second permission; the storing module is configured to save a target file corresponding to the target operation to a target storage space; the receiving module is configured to receive a first input of a user; and the executing module is further configured to execute a first operation in response to the first input, the first operation comprising any one of the following: allowing the target application to read the target file and deleting the target file in the target storage space.

[0009] In a third aspect, the embodiments of the present application provide an electronic device, which comprises a processor, a memory and a program or instruction stored in the memory and executable on the processor, the program or instruction being executed by the processor to implement the steps of the method according to the first aspect.

[0010] In a fourth aspect, the embodiments of the present application provide a readable storage medium, which stores a program or instruction, the program or instruction being executed by a processor to implement the steps of the method according to the first aspect.

[0011] In a fifth aspect, the embodiments of the present application provide a chip, which comprises a processor and a communication interface, the communication interface being coupled to the processor, the processor being configured to run a program or instruction to implement the method according to the first aspect.

[0012] In a sixth aspect, the embodiments of the present application provide a computer program product, which is stored in a non-volatile storage medium, the program product being executed by at least one processor to implement the method according to the first aspect.

[0013] In the embodiment of the present application, in the case that the target application executes the target operation, the operation execution device determines whether the target application has the target permission to execute the target operation, and if the target application does not have the target permission, the target application is intercepted from listening to the data transmission channel. By this method, the target application is prevented from being granted the system permission in the related art and directly obtaining the data corresponding to the target operation (such as the video or audio data of the user) after executing the target operation (such as recording) in the background without the user's knowledge. In this way, the target application can be determined whether to have the target permission every time the target application executes the target operation, and the target application is intercepted from listening to the data transmission channel when the target application does not have the target permission, so that the target application cannot obtain the data corresponding to the target operation, thereby preventing the target application from obtaining the user's private information by using the existing system permission silently without the user's knowledge, and improving the security of the user's private information. BRIEF DESCRIPTION OF DRAWINGS

[0014] Figure 1 is a flowchart of an operation execution method provided by an embodiment of the present application;

[0015] Figure 2 is one of the schematic diagrams of the interface to which the operation execution method provided by an embodiment of the present application is applied;

[0016] Figure 3 is another schematic diagram of the interface to which the operation execution method provided by an embodiment of the present application is applied;

[0017] Figure 4 is a third schematic diagram of the interface to which the operation execution method provided by an embodiment of the present application is applied;

[0018] Figure 5 is a structural schematic diagram of an operation execution device provided by an embodiment of the present application;

[0019] Figure 6 is one of the hardware structural schematic diagrams of an electronic device provided by an embodiment of the present application;

[0020] Figure 7 is another hardware structural schematic diagram of an electronic device provided by an embodiment of the present application. DETAILED DESCRIPTION

[0021] The technical solutions in the embodiments of the present application will be described clearly and completely below with reference to the drawings in the embodiments of the present application. Obviously, the described embodiments are only some of the embodiments of the present application, not all the embodiments. Based on the embodiments in the present application, all other embodiments obtained by those of ordinary skill in the art without creative labor fall within the scope of protection of the present application.

[0022] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchanged under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described herein, and the objects distinguished by "first", "second", etc. are generally a class and do not limit the number of objects, for example, the first object can be one or more. In addition, "and / or" in the specification and claims indicates at least one of the connected objects, and the character " / ", generally indicates that the objects before and after are in an "or" relationship.

[0023] The operation execution method provided by the embodiments of the present application will be described in detail below in combination with the drawings, specific embodiments and application scenarios.

[0024] The operation execution method provided by the embodiments of the present application can be applied to the scenario of controlling the process of exercising the authority of the application program.

[0025] The operation execution method provided by the embodiments of the present application can be applied to the scenario of controlling the process of exercising the authority of the application program.

[0026] Taking the control of the exercise of the recording authority of the application program as an example. Assuming that an APP in the electronic device has obtained the system authorization of the recording function, the APP can record in the background without the user's knowledge to obtain the user's audio information, so as to monitor the user's life conversation. Further, for some malicious software, it can even steal the user's relevant private information, such as the user's name, address and bank account, etc. through the user's life conversation, so that the user's private information is easily leaked, thereby reducing the security of the user's private information.

[0027] In the embodiments of the present application, when the APP in the electronic device has obtained the system authorization of the recording function and records in the background without the user's knowledge, the operation execution device can determine whether the APP has the second authority, and intercepts the listening of the media transmission channel in the case that the APP does not have the second authority, so as to avoid the APP obtaining the recorded audio information of the user. In this way, even if the APP records in the background without the user's knowledge after the system authorization, it will not directly obtain the user's audio information, thereby improving the security of the user's private information.

[0028] The embodiments of the present application provide a text operation execution method, and the text display method can be applied to an electronic device, Figure 1 A flowchart of the operation execution method provided by the embodiments of the present application is shown. As shown in Figure 1 The operation execution method provided by the embodiments of the present application can include the following steps 101 to 104:

[0029] Step 101: In a case that the target operation is executed by the target application with the first permission, determining whether the target application has a second permission for executing the target operation.

[0030] The first permission is a system permission for the target application to execute the target operation, and the second permission is an access permission of the application to first data corresponding to the target operation.

[0031] In the embodiments of the present application, the target application refers to an application program installed in the electronic device or not installed in the electronic device. For example, the target application can be a video playing application, an instant messaging application, a social application, a game application, and the like. The embodiments of the present application do not limit the specific type of the target application.

[0032] Optionally, in the embodiments of the present application, the target application can include one application or multiple applications.

[0033] In the embodiments of the present application, the target application can implement a certain function through the target operation. For example, the target operation can include at least one of the following: taking a picture using a camera, recording a sound using a receiver, obtaining a geographic position of the electronic device, reading a call record of the electronic device, reading a short message content of the electronic device, and reading body sensor data.

[0034] It should be noted that the target operation can also be other operations not listed in the embodiments of the present application. Further, as long as the application can obtain relevant information of the electronic device or relevant information of the user after executing an operation, the operation can be regarded as the target operation.

[0035] In the embodiments of the present application, the second permission is used to represent whether the application with the system permission has the second permission for executing the target operation, or is used to represent the permission of the application for obtaining (or accessing) the first data corresponding to the target operation in a case that the target operation is executed. That is, the second permission can ensure the controllability of the application for exercising the system permission to execute the target operation on the basis of the system permission (i.e., the first permission).

[0036] In an example, the second permission can include a system permission for using a camera, a system permission for using a microphone, a system permission for reading a call record, a system permission for reading and sending a short message, and a system permission for reading body sensor data. The embodiments of the present application do not limit the content of the target system permission.

[0037] In another example, the second permission can include at least one of the following:

[0038] After the application uses the camera to capture an image or video, the application accesses or obtains the permission of the image or video. After the application uses the microphone or earpiece to record, the application accesses or obtains the permission of the recording file.

[0039] For example, for the application A with the system recording permission, in the case of recording through the earpiece, the operation execution device can determine whether the application A has the permission of executing the recording operation, or obtaining the recording data, to control the whole process of exercising the recording permission.

[0040] It should be noted that the second permission in the embodiments of the present application is different from the system permission (i.e., the first permission). In the related art, the application can actively initiate a pop-up application to request the electronic device to grant the system permission, and after the user agrees to grant the application the relevant system permission, the application can provide the relevant function service. That is, the system permission in the related art can be perceived and applied by the application. However, the second permission provided in the embodiments of the present application is the process of the user or the system controlling the application to exercise the permission after the application is authorized by the system, and the application cannot perceive the existence of the permission. That is, in the case that the second permission corresponding to the application is closed, the application perceives that it has the permission, and will not require the system authorization, and can provide the relevant function service.

[0041] Optionally, in the embodiments of the present application, the operation execution device can determine the second permission of the target application in any of the following cases. For example, the operation execution device can determine the second permission of the target application when the target operation is initiated, when the target operation is started, or when the target operation is executed.

[0042] Optionally, in the embodiments of the present application, the operation execution device can determine whether the target application has the second permission of executing the target operation based on the switch state of the permission control switch corresponding to the target application. For example, the switch device can include an open state or a closed state.

[0043] For example, when the permission control switch corresponding to the target application is in the closed state, it means that the target application has not been explicitly authorized by the user, and it is determined that the target application does not have the second permission. When the permission control switch corresponding to the target application is in the open state, it means that the target application has been explicitly authorized by the user, and it is determined that the target application has the second permission.

[0044] For example, let's take the second permission, recording permission, as an example. Suppose that APP2, after being granted recording permission by the system, performs a recording operation in the background. The execution device can detect the on / off state of the corresponding recording permission control switch to determine whether the recording operation has been explicitly authorized by the user. If the recording permission control switch is off (i.e., the recording operation has not been explicitly authorized by the user), then APP2 is considered not to have permission to access the recorded audio (i.e., the recording file) corresponding to the recording operation.

[0045] Optionally, in this embodiment of the application, before the process of step 101 described above, the operation execution method provided in this embodiment of the application further includes the following steps A1 and A2:

[0046] Step A1: When the permission control interface is displayed, receive the user's second input regarding the target application identifier.

[0047] Step A2: In response to the second input, set a second permission for the target application.

[0048] The target application identifier mentioned above is the application identifier of the target application.

[0049] For example, the aforementioned access control interface can be called an operation control interface. The operation execution device can set corresponding operation control interfaces for different operations to set the second permissions corresponding to different operations. For example, for the recording operation, a background recording control interface can be set to set recording permissions; for the video recording operation, a video recording control interface can be set to set video recording permissions.

[0050] For example, the operation execution device can display the application identifier of a first application with system permissions for the target operation on the operation control interface, and display the permission control switch corresponding to each application identifier, so that the user can view or set the second permissions of one or more applications with system permissions for the operation on the operation control interface.

[0051] For example, the aforementioned operation control interface is used to enable or disable the second permission for the application to perform the target operation. Further, the aforementioned operation control interface can be a recording control interface or a video recording control interface.

[0052] For example, the first application mentioned above may include one or more applications.

[0053] For example, such as Figure 2 As shown in (a), the recording control interface is used as an example. This recording control interface includes application identifiers for APP1, APP2, APP3, and APP4, as well as a control switch corresponding to each application identifier. By default, the control switches corresponding to the above application identifiers are in the off state, as shown in (a).Figure 2 (b) shown in the figure, when the user wants to open the second permission of APP1, the control switch corresponding to APP1 can be clicked to open the second permission.

[0054] It should be noted that the second permission of the application is in a closed state by default after the application is installed in the electronic device, and the user can open the second permission on the operation control interface when needed.

[0055] Step 102: If the target application does not have the second permission, the application's listening to the first transmission path is intercepted, and the target file corresponding to the target operation of the target operation is saved to the target storage space.

[0056] In the embodiment of the application, the target file is a file generated based on the target data obtained after the target application executes the target operation. For example, after the target application executes the recording operation, the recorded audio data can be obtained, and the target file is an audio file generated based on the audio data; after the target application executes the video recording operation, the recorded image data can be obtained, and the target file is a video file generated based on the image data.

[0057] In the embodiment of the application, the first transmission path is a path for transmitting the first data corresponding to the target operation, and the first transmission path can be a media transmission channel. For example, in the case of transmitting the recording collected by the earpiece, the first transmission path can be an audio recording channel; in the case of transmitting the image collected by the camera, the first transmission path can be a camera channel.

[0058] Optionally, in the embodiment of the application, during the execution of the target operation by the target application, when the corresponding data is obtained, the operation execution device transmits the data from the port for collecting the data to the port of the application through the media channel, and during the transmission of the data, the application listens to the media channel in real time to obtain the data to be received.

[0059] Optionally, in the embodiment of the application, when the target application does not have the second permission, the system intercepts the listening of the target application to the first transmission path when the target application initiates the target operation, and saves the data corresponding to the target operation in the protection space of the system.

[0060] For example, when the permission control switch of the target application is in a closed state, the system intercepts the listening of the application to the audio recording channel when the target application initiates the recording operation in the background, and saves the sound actually collected by the microphone in the protection space of the system, so as to ensure that the sound collected by the microphone is stored in a safe area without being stolen by the application without the user's knowledge.

[0061] Similarly, for the behavior of starting the camera to steal the video in the background without the user's knowledge, the system can intercept the application's listening to the camera channel and save the captured video file in the protection control, thereby ensuring that the image collected by the camera is stored in a safe area without being stolen by the application without the user's knowledge.

[0062] Optionally, in the embodiment of the present application, if the target application does not have the second permission, the operation execution device can further perform a first operation.

[0063] The first operation includes any of the following:

[0064] Sending target data to the target application, or not sending data to the target application.

[0065] Optionally, in the embodiment of the present application, the operation execution device can send target data to the target application through a media channel. For example, the target data can include any of the following: a system preset data packet, an empty data packet.

[0066] For example, the operation execution device can detect the switch state of the permission control switch corresponding to the target application when the target operation is performed by the target application, and send target data to the target application or not send data to the target application when the switch state is off.

[0067] Further, in the case where the operation execution device sends an empty data packet or a preset data packet to the target application, so that the target application cannot obtain real user data, and the target application perceives that it has obtained the corresponding data, it will not initiate the target operation again due to not obtaining the data. It should be noted that the preset data packet is different from the first data corresponding to the target operation, which can be a system default data packet for sending the target application to make the target application mistakenly believe that it has obtained the relevant data.

[0068] Further, in the case where the operation execution device does not send data to the application, the target application cannot obtain the relevant data (i.e. user information) corresponding to the target operation. In this case, if the target application initiates the target operation again to obtain the relevant data, it will be intercepted by the operation execution device again to obtain the data, so the target application cannot steal the user information.

[0069] Example 1, taking the target operation as recording as an example. Assume that APP3 has the system recording permission, but does not have the second permission of the recording operation. If APP3 starts the earpiece and performs the recording operation in the background without the user's knowledge, the system can detect that the corresponding permission control switch is in the off state, sends an empty data packet to APP3, and intercepts the listening of the recording audio channel, thereby avoiding recording and stealing the user's private information without the user's knowledge.

[0070] Example 2, taking the target operation as recording as an example. Assume that APP4 has the system recording permission, but does not have the second permission of the recording operation. If APP4 starts the camera and performs the recording operation in the background without the user's knowledge, the system can detect that the corresponding permission control switch is in the off state, sends an empty data packet to APP4, and intercepts the listening of the camera channel, thereby avoiding recording and stealing the user's private information without the user's knowledge.

[0071] Step 103: receiving the first input of the user.

[0072] Optionally, in the embodiments of the present application, the first input is used to determine whether the target application is allowed to read the target file corresponding to the target operation.

[0073] For example, the first input can include any of the following: touch input, voice input, and other possible inputs.

[0074] Step 104: performing the first operation in response to the first input.

[0075] The first operation includes any of the following: allowing the target application to read the target file, deleting the target file in the target storage space.

[0076] In the operation execution method provided by the embodiments of the present application, in the case of executing the target operation through the target application, the operation execution device determines whether the target application has the second permission of the target operation, and if the target application does not have the second permission, sends the target data to the target application through the first transmission channel, or does not send data to the target application. Through this method, it is avoided that the target application is granted the system permission in the related art, and after performing the target operation (such as recording) in the background without the user's knowledge, the target application can directly obtain the data (such as the user's recording or audio data) corresponding to the target operation. In this way, the target application can be determined whether it has the second permission every time it performs the target operation, and the data corresponding to the target operation is not sent to the target application when it does not have the second permission, thereby avoiding that the target application uses the existing system permission to silently obtain the user's private information without the user's knowledge, thereby improving the security of the user's private information.

[0077] Optionally, in the embodiments of the present application, the process of saving the target file corresponding to the target operation to the target storage space in step 102 can include the following steps A1 and A2.

[0078] Step A1: generating the target file based on the first data corresponding to the target operation.

[0079] Step A2: storing the target file to the target storage space.

[0080] For example, when the target operation is a recording operation, the first data corresponding to the target operation is recorded audio data; when the target operation is a video recording operation, the first data corresponding to the target operation is recorded image data or video data.

[0081] For example, the operation execution device can obtain the first data and the total duration of the first data, encode the first data according to a preset duration step value, and write the encoded first data to a file. For example, taking the first data as recorded audio data, the operation execution device can obtain the audio data and the total duration of the audio data, encode the audio data according to a preset duration step value, and write the encoded first data to an audio file, thereby obtaining an audio file corresponding to the recording.

[0082] Optionally, the target storage space can be a storage space in the electronic device specially used for storing the target file corresponding to the target operation. For example, the target storage space is a system private storage space, and other applications do not have direct access permission to the target storage space. For ease of understanding, the target storage space can be referred to as a protection space.

[0083] For example, the target storage space stores one or more target files corresponding to the target operation.

[0084] For example, taking the target operation as recording, assume that the APP4 has system recording permission but does not have the second permission. If the APP4 performs a recording operation in the background to try to monitor the user's life conversation without the user's knowledge, the operation execution device can obtain the audio data of the recording corresponding to the recording operation, and store the generated audio file in the protection space of the electronic device, so as to avoid the application from stealing the audio file corresponding to the recording operation. In this way, it can be ensured that when the application records in the background without the user's knowledge, the sound collected by the microphone is stored in a safe area and is not stolen by the application, thereby ensuring the security of the user information.

[0085] In another example, the operation execution device can also directly store the first data corresponding to the target operation in the target storage space, so as to directly call the first data in the storage space.

[0086] Further optionally, after step A2, the operation execution method provided in the embodiments of the present application further includes the following step B1 and step B2.

[0087] Step B1: display the file identifier of the target file and the M application identifiers of the M applications.

[0088] In combination with step B1, the process of step 103 can include the following step B2.

[0089] Step B2: receive the first input of the user on the file identifier of the target file.

[0090] The M applications include: an application that listens to the first transmission path in the case of performing the target operation, the target application identifier of the target application is included in the M application identifiers, each application identifier indicates an application, and M is a positive integer.

[0091] Optionally, the operation execution apparatus can display the file identifier and the application identifier on the first interface. For example, the first interface can be system default or variable.

[0092] In an example, the first interface can be the desktop of the electronic device.

[0093] In another example, the first interface is determined by the use state of the electronic device, i.e., the first interface can be the interface currently displayed by the electronic device. For example, when the electronic device is in a lock screen state, the first interface can be a lock screen interface, i.e., the operation execution apparatus can display the file identifier and the application identifier on the lock screen interface. When the electronic device is in a video playing state, the video playing interface is the first interface.

[0094] For example, the file identifier of the target file and the application identifier of the M applications can include any of the following: text, icon, picture, shape, etc.

[0095] Optionally, the M applications are applications that have system permissions to perform the target operation, or the M applications are other applications that are currently performing the target operation. For example, the target file corresponds to the M applications, i.e., the target file is associated with the M applications.

[0096] Optionally, the operation execution apparatus can display a first floating control on the first interface, the first floating control including the file identifiers of one or more files in the target storage space, wherein the one or more files include the target file.

[0097] For example, after receiving the input of the file identifier of the target file in the first floating control, the operation execution apparatus displays the second floating control and displays the application identifiers of the M applications corresponding to the target file on the second floating control, so that the user can view the applications that attempt to obtain the target file through the target operation.

[0098] Optionally, the first input can include a touch input, a voice input, or other possible input.

[0099] Further optionally, in the embodiments of the present application, the first input can be an input of dragging the file identifier of the target file to the first region by the user.

[0100] The first region includes a region where the target application identifier is located.

[0101] For example, in the case where the first input is an input of dragging the file identifier of the target file to the first region by the user, the first operation can be to allow the target application to read the target file.

[0102] For example, in the case where the first floating control and the second floating control are displayed, the first region is a display region of the second floating control, and the second region is a display region of the entire display region of the screen except the display region of the second floating control.

[0103] For example, the operation execution apparatus can establish a transmission path between the target applications, and transmit the target file to the target application through the transmission path, so that the target application can read the file content of the target file and process the target file.

[0104] For example, taking the target operation as a recording operation, as shown in (a) of FIG. 31, a control 31 (i.e., a first floating control) is displayed on the desktop of the electronic device in a suspended manner, the control 31 displays the file identifiers of the recording files of “recording 1”, “recording 2”, “recording 3” and “recording 4” in a list form, and the user clicks the file identifier of “recording 4”, as shown in (b) of FIG. 31, the operation execution apparatus displays a control 32 (i.e., a second floating control), and displays the application identifiers of APP1, APP2 and APP3 that attempt to listen to the audio of the “recording 4” in a list form on the control 32. Figure 3 Figure 3 Figure 3

[0105] ​​​Further, in the embodiments of the present application, the first input can be an input of dragging a file identifier of a target file to the second region by the user.

[0106] The second region includes a region other than the region where the target application identifier is located.

[0107] For example, in the case where the first input is an input of dragging a file identifier of a target file to the second region by the user, the first operation can be deleting the target file saved in the target storage space.

[0108] Further, in the case where the first floating control and the second floating control are displayed, the second input can be an input of dragging a file identifier to a target region by the user, and the target input can be a region on the first interface other than the region where the second floating control is located.

[0109] Further, in the case where only the first floating control is displayed, the second input can be an input of dragging a file identifier out of the first floating control by the user.

[0110] For example, in the case where the first input is an input of dragging a file identifier of a target file to the second region by the user, the first operation can be deleting the target file saved in the target storage space. Figure 3 Figure 4 As shown in FIG. 32, the user can drag the file identifier of “recording 4” to a region other than the control 32, at this time, the operation execution apparatus deletes the audio file of “recording 4” from the target storage space, and cancels displaying the file identifier of “recording 4” on the control 31.

[0111] Optionally, in the embodiments of the present application, the operation execution method provided by the present application further includes the following step C1:

[0112] Step C1: if the target application has the second permission, sending first data corresponding to the target operation to the target application through the first transmission path.

[0113] For example, in the case where it is detected that the target application executes the target operation in the background, if the operation execution apparatus confirms that the target application has the second permission to execute the target operation, the application is not intercepted from listening to the first transmission path, and the first data corresponding to the target operation is sent to the target application through the first transmission path, so that the target application can obtain the first data.

[0114] It should be noted that when the target application has the second permission, it means that the target application has been explicitly authorized by the user, and the system allows the target operation initiated by the target application at any time, allows the target application to read and save the target file generated in the process of the target operation, and allows the application to perform any processing on the target file.

[0115] ​For example, taking the recording permission as an example. Assuming that APP2 performs a recording operation in the background after being authorized by the system recording permission, the operation execution apparatus can detect the switch state of the permission control switch corresponding to the recording permission of the APP2 to determine whether the recording operation of the APP2 is explicitly authorized by the user. If it is detected that the permission control switch of the recording permission is in an on state (i.e., the recording operation is explicitly authorized by the user), it is considered that the APP2 has the permission to access the recording audio (i.e., the recording file) corresponding to the recording operation, and the audio data of the recording generated during the recording is transmitted to the target application through the media channel. In this way, the application can only obtain the user's recording in the case of explicit authorization by the user, thereby improving the security of the user's information.

[0116] In the operation execution method provided in the embodiments of the present application, in the case where the target operation is performed by the target application, the operation execution apparatus determines whether the target application has the second permission to perform the target operation. If the target application does not have the second permission, the operation execution apparatus sends the target data to the target application through the first transmission channel, or does not send data to the target application. By this method, it is avoided that the target application, after being granted the system permission in the related art and performing the target operation (such as recording) in the background without the user's knowledge, can directly obtain the data (such as the user's video or audio data) corresponding to the target operation. In this way, the target application can be determined whether it has the second permission every time it performs the target operation, and the data corresponding to the target operation is not sent to the target application when it does not have the second permission, thereby avoiding that the target application, by using the existing system permission, obtains the user's private information silently without the user's knowledge, thereby improving the security of the user's private information.

[0117] It should be noted that the operation execution method provided in the embodiments of the present application can be executed by the operation execution apparatus or the control module in the operation execution apparatus for executing the operation execution method. In the embodiments of the present application, the operation execution apparatus is taken as an example to illustrate the operation execution apparatus provided in the embodiments of the present application.

[0118] The operation execution apparatus provided in the embodiments of the present application is as shown in Figure 5 The apparatus 600 includes a determination module 601, an execution module 602, a storage module 603, and a receiving module 604, wherein:

[0119] The determination module 601 is configured to determine whether the target application has a second permission for performing the target operation in a case where the target operation is performed by the target application having the first permission, the second permission being a permission of the target application for accessing first data corresponding to the target operation; the execution module 602 is configured to intercept, if the determination module 601 determines that the target application does not have the second permission, listening of the target application to the first transmission channel; the storage module 603 is configured to save a target file corresponding to the target operation to a target storage space; the receiving module 604 is configured to receive a first input of a user; and the execution module 602 is further configured to perform a first operation in response to the first input received by the receiving module 604, the first operation including any one of the following: allowing the target application to read the target file and deleting the target file in the target storage space.

[0120] Optionally, in an embodiment of the present application, the apparatus 600 further includes a processing module 605.

[0121] The processing module 605 is configured to generate a target file based on the first data corresponding to the target operation; and the storage module 603 is configured to store the target file generated by the processing module 605 to a target storage space.

[0122] Optionally, in an embodiment of the present application, the apparatus 600 further includes a setting module 606, the receiving module 604 is further configured to receive a second input of a user to a target application identifier in a case where a permission control interface is displayed, the target application identifier being an application identifier of the target application; and the setting module 606 is configured to set the second permission for the target application in response to the second input received by the receiving module 604.

[0123] Optionally, in an embodiment of the present application, the apparatus 600 further includes a display module 607, the display module 607 is configured to display a file identifier of the target file generated by the processing module 605 and M application identifiers of M applications, the M applications including applications that listen to the first transmission channel in a case where the target operation is performed, the target application identifier of the target application being included in the M application identifiers, each application identifier indicating an application, and M being a positive integer; and the receiving module 604 is configured to receive a first input of a user to the file identifier displayed by the display module 607.

[0124] Optionally, in an embodiment of the present application, the first input is an input of dragging the file identifier of the target file to a first region, the first region including a region where the target application identifier is located, and the first operation includes allowing the target application to read the target file.

[0125] Optionally, in the embodiment of the present application, the first input is an input of dragging a file identifier of a target file to a second region, the second region includes a region other than the region where the target application identifier is located, and the first operation includes deleting the target file in the target storage space.

[0126] In the operation execution apparatus provided by the embodiment of the present application, in the case of executing a target operation by a target application, the operation execution apparatus determines whether the target application has a second permission to execute the target operation, and if the target application does not have the second permission, sends target data to the target application through a first transmission channel, or does not send data to the target application. By this method, it is avoided that the target application is granted a system permission in the related art and executes a target operation (such as recording) in the background without the user knowing, and then directly obtains data (such as video or audio data of the user) corresponding to the target operation. In this way, each time the target application executes a target operation, it can be determined whether it has the second permission and does not send data corresponding to the target operation to it when it does not have the second permission, thereby avoiding that the target application uses the existing system permission to silently obtain the user's private information without the user knowing, thereby improving the security of the user's private information.

[0127] The operation execution apparatus in the embodiment of the present application can be an apparatus, or a component, an integrated circuit, or a chip in a terminal. The apparatus can be a mobile electronic device or a non-mobile electronic device. Exemplarily, the mobile electronic device can be a mobile phone, a tablet computer, a notebook computer, a palm computer, a vehicle-mounted electronic device, a wearable device, an ultra-mobile personal computer (UMPC), a netbook, or a personal digital assistant (PDA), etc., and the non-mobile electronic device can be a server, a network attached storage (NAS), a personal computer (PC), a television (TV), a teller machine, or a self-service machine, etc., and the embodiment of the present application is not limited specifically.

[0128] The operation execution apparatus in the embodiment of the present application can be an apparatus with an operating system. The operating system can be an Android operating system, an ios operating system, or other possible operating systems, and the embodiment of the present application is not limited specifically.

[0129] The operation execution apparatus provided by the embodiment of the present application can implement Figures 1 to 4 The method embodiment implements various processes, and to avoid repetition, the details are not described here.

[0130] Optionally, as shown in Figure 6 The electronic device 700 includes a processor 701, a memory 702, and a program or instruction stored in the memory 702 and executable on the processor 701. The program or instruction is executed by the processor 701 to implement the processes of the above-mentioned operation execution method embodiments and achieve the same technical effects. To avoid repetition, details are not described here.

[0131] It should be noted that the electronic device in the embodiments of the present application includes the above-mentioned mobile electronic device and non-mobile electronic device.

[0132] Figure 7 A hardware structure schematic diagram of an electronic device according to an embodiment of the present application.

[0133] The electronic device 100 includes, but is not limited to, a radio frequency unit 101, a network module 102, an audio output unit 103, an input unit 104, a sensor 105, a display unit 106, a user input unit 107, an interface unit 108, a memory 109, and a processor 110, etc.

[0134] Those skilled in the art can understand that the electronic device 100 can also include a power supply (such as a battery) for supplying power to each component. The power supply can be logically connected to the processor 110 through a power management system, so as to realize the functions of power management, such as charging, discharging, and power consumption management, through the power management system. Figure 7 The electronic device structure shown in the above-mentioned figure does not constitute a limitation on the electronic device. The electronic device can include more or fewer components than the figure, or combine certain components, or different component arrangements, which are not described here.

[0135] The processor 110 is configured to determine whether the target application has a second permission to execute the target operation in the case of executing the target operation through the target application, the second permission being an access permission of the target application to first data corresponding to the target operation. The processor 110 is further configured to intercept the target application from listening to the first transmission channel if it is determined that the target application does not have the second permission. The memory 109 is configured to save a target file corresponding to the target operation to a target storage space. The user input unit 107 is configured to receive a first input of a user. The processor 110 is further configured to execute a first operation in response to the first input received by the user input unit 107, wherein the first operation includes any one of the following: allowing the target application to read the target file, and deleting the target file in the target storage space.

[0136] Optionally, in the embodiment of the present application, the processor 110 is further configured to generate a target file based on the first data corresponding to the target operation; and the memory 109 is configured to store the target file generated by the processor 110 into a target storage space.

[0137] Optionally, in the embodiment of the present application, the user input unit 107 is further configured to receive a second input of a target application identifier from a user in a case where the permission control interface is displayed, the target application identifier being an application identifier of a target application; and the processor 110 is configured to set a second permission for the target application in response to the second input received by the user input unit 107.

[0138] Optionally, in the embodiment of the present application, the display unit 106 is configured to display a file identifier of the target file and M application identifiers of M applications, the M applications including an application that listens to the first transmission path in a case where the target operation is performed, the target application identifier of the target application being included in the M application identifiers, each of the application identifiers indicating an application, and M being a positive integer; and the user input unit 107 is configured to receive a first input of the file identifier displayed by the display unit 106 from a user.

[0139] Optionally, in the embodiment of the present application, the first input is an input of dragging the file identifier of the target file to a first region, the first region including a region where the target application identifier is located, and the first operation includes allowing the target application to read the target file.

[0140] Optionally, in the embodiment of the present application, the first input is an input of dragging the file identifier of the target file to a second region, the second region including a region other than the region where the target application identifier is located, and the first operation includes deleting the target file in the target storage space.

[0141] In the electronic device provided in the embodiments of the present application, in the case that a target operation is performed by a target application, the operation execution device determines whether the target application has a second permission to perform the target operation, and if the target application does not have the second permission, sends target data to the target application through a first transmission path, or does not send data to the target application. By this method, it is avoided that the target application is granted a system permission in the related art and performs the target operation (such as recording) in the background without the user knowing, and the data (such as video or audio data of the user) corresponding to the target operation can be directly obtained. In this way, each time the target application performs the target operation, it can be determined whether it has the second permission and does not send the data corresponding to the target operation to it when it does not have the second permission, so that the target application is prevented from obtaining the private information of the user silently by using the existing system permission without the user knowing, thereby improving the security of the private information of the user.

[0142] It should be understood that in the embodiments of the present application, the input unit 104 can include a graphics processing unit (GPU) 1041 and a microphone 1042. The graphics processing unit 1041 processes image data of a still picture or a video obtained by an image capturing device (such as a camera) in a video capture mode or an image capture mode. The display unit 106 can include a display panel 1061, which can be configured in the form of a liquid crystal display, an organic light-emitting diode, etc. The user input unit 107 includes a touch panel 1071 and other input devices 1072. The touch panel 1071 is also called a touch screen. The touch panel 1071 can include two parts of a touch detection device and a touch controller. The other input devices 1072 can include, but are not limited to, a physical keyboard, function keys (such as volume control keys, on-off keys, etc.), a trackball, a mouse, a joystick, etc., which will not be described here. The memory 109 can be used to store software programs and various data, including but not limited to application programs and an operating system. The processor 110 can integrate an application processor and a modem processor, wherein the application processor mainly processes the operating system, the user interface and the application programs, etc., and the modem processor mainly processes wireless communication. It can be understood that the above-mentioned modem processor can also not be integrated into the processor 110.

[0143] The embodiments of the present application also provide a readable storage medium, which stores a program or instructions, the program or instructions are executed by a processor to realize each process of the above-mentioned operation execution method embodiment, and achieve the same technical effects. To avoid repetition, it will not be described here.

[0144] The processor is the processor in the electronic device described in the above embodiments. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, etc.

[0145] The embodiment of the present application further provides a chip, which comprises a processor and a communication interface, the communication interface is coupled with the processor, the processor is used for running programs or instructions to realize various processes of the operation execution method embodiment and achieve the same technical effects. To avoid repetition, details are not described here.

[0146] It should be understood that the chip mentioned in the embodiment of the present application can also be referred to as a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0147] The embodiment of the present application provides a computer program product, which is stored in a non-volatile storage medium. The program product is executed by at least one processor to realize various processes of the operation execution method embodiment and achieve the same technical effects.

[0148] It should be noted that in this document, the term "comprise", "include" or any other variant thereof is intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements not only includes those elements, but also includes other elements not explicitly listed or inherent to such process, method, article or device. Without more limitations, the element defined by the statement "comprises a" does not exclude the presence of additional identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the method and device in the embodiment of the present application is not limited to the order of performing the functions as shown or discussed, but can also include performing the functions in a substantially simultaneous manner or in the opposite order, for example, the described method can be performed in an order different from that described, and various steps can also be added, omitted or combined. In addition, the features described with reference to certain examples can be combined in other examples.

[0149] Those skilled in the art can clearly understand the above-mentioned embodiment method can be realized by means of software and the necessary general hardware platform, of course, also can be through hardware, but many cases the former is the better embodiment. Based on such understanding, the technical solutions of the present application essentially or say the part of the contribution to the prior art can be embodied in the form of software products, the computer software product is stored in a storage medium (such as ROM / RAM, magnetic disc, optical disc), including a number of instructions to make a terminal (may be a mobile phone, computer, server, air conditioner, or network equipment, etc.) executes the method described in various embodiments of the present application.

[0150] The embodiments of the present application are described above in combination with the drawings, but the present application is not limited to the above-mentioned specific embodiments, the above-mentioned specific embodiments are only illustrative, but not limited, those skilled in the art can make many forms without departing from the purpose of the present application and the scope protected by the claims under the inspiration of the present application, all belong to the protection of the present application.

Claims

1. A method of operating an execution, characterized by, The method comprises: In a case where a target operation is executed by a target application with a first permission, determining whether the target application has a second permission for executing the target operation, the second permission being an access permission of an application to first data corresponding to the target operation, and the first permission being a system permission of the target application for executing the target operation; If the target application does not have the second permission, intercepting listening of the target application to a first transmission channel, and saving a target file corresponding to the target operation to a target storage space, the target storage space being a system private storage space, and the first transmission channel being a channel for transmitting the first data corresponding to the target operation; Receiving a first input of a user; In response to the first input, executing a first operation; The first operation comprises any one of the following: allowing the target application to read the target file, and deleting the target file in the target storage space.

2. The method of claim 1, wherein, The saving of the target file corresponding to the target operation to the target storage space comprises: Generating a target file based on the first data corresponding to the target operation; Storing the target file to the target storage space.

3. The method of claim 1, wherein, Before the determining of whether the target application has the second permission for executing the target operation, the method further comprises: In a case where a permission control interface is displayed, receiving a second input of a user to a target application identifier, the target application identifier being an application identifier of the target application; In response to the second input, setting the second permission for the target application.

4. The method of claim 2, wherein, After the storing of the target file to the target storage space, the method further comprises: Displaying a file identifier of the target file and M application identifiers of M applications, the M applications comprising: applications that listen to the first transmission channel in a case where the target operation is executed, and the target application identifier of the target application being included in the M application identifiers, each application identifier indicating an application, and M being a positive integer; The receiving of the first input of the user comprises: Receiving a first input of a user to the file identifier of the target file.

5. The method of claim 4, wherein, The first input is an input of dragging the file identifier of the target file to a first region, the first region comprising a region where the target application identifier is located, and the first operation comprising: allowing the target application to read the target file.

6. The method of claim 4, wherein, The first input is an input of dragging the file identifier of the target file to a second region, the second region comprising: a region other than the region where the target application identifier is located, and the first operation comprising: deleting the target file in the target storage space.

7. An operation execution device characterized by comprising: The apparatus comprises a determining module, an executing module, a storing module and a receiving module, wherein: The determining module is configured to, in a case where a target operation is executed by a target application with a first permission, determine whether the target application has a second permission for executing the target operation, the second permission being an access permission of an application to first data corresponding to the target operation, and the first permission being a system permission of the target application for executing the target operation; The execution module is configured to, if the determination module determines that the target application does not have the second permission, intercept listening of the target application to a first transmission path, the first transmission path being a path for transmitting first data corresponding to the target operation. The storage module is configured to save a target file corresponding to the target operation to a target storage space, the target storage space being a storage space private to the system. The receiving module is configured to receive a first input of a user. The execution module is further configured to perform a first operation in response to the first input. The first operation includes any one of the following: allowing the target application to read the target file, and deleting the target file in the target storage space.

8. The apparatus of claim 7, wherein, The apparatus further includes a processing module. The processing module is configured to generate a target file based on first data corresponding to the target operation. The storage module is specifically configured to store the target file generated by the processing module to a target storage space.

9. The apparatus of claim 7, wherein, The apparatus further includes a setting module. The receiving module is further configured to receive a second input of a user to a target application identifier in a case where a permission control interface is displayed, the target application identifier being an application identifier of the target application. The setting module is configured to set a second permission for the target application in response to the second input received by the receiving module.

10. The apparatus of claim 8, wherein, The apparatus further includes a display module. The display module is configured to display a file identifier of the target file generated by the processing module, and M application identifiers of M applications, the M applications including applications that listen to the first transmission path in a case where the target operation is performed, the target application identifier of the target application being included in the M application identifiers, each application identifier indicating an application, and M being a positive integer. The receiving module is specifically configured to receive a first input of a user to the file identifier displayed by the display module.

11. The apparatus of claim 10, wherein, The first input is an input of dragging the file identifier of the target file to a first region, the first region including a region where the target application identifier is located, and the first operation includes allowing the target application to read the target file.

12. The apparatus of claim 10, wherein, The first input is an input of dragging the file identifier of the target file to a second region, the second region including a region other than the region where the target application identifier is located, and the first operation includes deleting the target file in the target storage space.

13. An electronic device, comprising: The apparatus includes a processor, a memory, and a program or instructions stored on the memory and executable on the processor, the program or instructions being executed by the processor to implement steps of the operation execution method according to any one of claims 1-6.

14. A computer-readable storage medium, characterized in that, The readable storage medium stores a program or instructions, the program or instructions being executed by a processor to implement steps of the operation execution method according to any one of claims 1-6.

Images