Authority management method and device and electronic equipment

Abstract

The invention discloses an authority management method and device and electronic equipment, and belongs to the technical field of electronic equipment. The method comprises the steps of intercepting a request for starting a first light application under the condition that the request for starting the first light application is received; starting a second application corresponding to the first light application, wherein the second application is an application installed according to the resource access path information of the first light application; when it is detected that the second application sends the private data acquisition request, the private data acquisition request is responded based on the access authority of the second application, the first light application is a light application carried on the first application, and the access authority of the first application and the access authority of the second application are mutually independent.

Description

Technical Field

[0001] The present application belongs to the technical field of electronic equipment, and specifically relates to a permission management method, device and electronic equipment. Background Art

[0002] Light application technology allows users to use the services of other applications directly on installed applications without downloading other applications. Other applications rely on installed applications in the form of mini-programs or quick applications.

[0003] During operation, light apps need to call user data for business processing, which includes both regular data and data of great value to users, such as user privacy data. Since each light app obtains user privacy data obtained by the installed application it relies on, if the installed application fails to control the light app's acquisition of privacy data, it will cause serious security risks. Summary of the invention

[0004] The purpose of the embodiments of the present application is to provide a permission management method, device and electronic device, which can solve the technical problem of security risks caused by the failure of control over the acquisition of privacy data by light applications.

[0005] In a first aspect, an embodiment of the present application provides a rights management method, the method comprising:

[0006] When receiving a request to start the first light application, start a second application corresponding to the first light application, where the second application is an application installed according to the resource access path information of the first light application;

[0007] In the case of detecting that the second application sends a request for obtaining private data, responding to the request for obtaining private data based on the access rights of the second application;

[0008] Among them, the first light application is a light application carried on the first application, and the access rights of the first application and the second application are independent of each other.

[0009] In a second aspect, an embodiment of the present application provides a rights management device, the device comprising:

[0010] A first interception module, configured to intercept the request to start the first light application when receiving the request to start the first light application;

[0011] A first startup module, used to start a second application corresponding to the first light application, where the second application is an application installed according to the resource access path information of the first light application;

[0012] A first response module, configured to respond to the private data acquisition request based on the access rights of the second application when detecting that the second application sends a private data acquisition request;

[0013] Among them, the first light application is a light application carried on the first application, and the access rights of the first application and the second application are independent of each other.

[0014] In a third aspect, an embodiment of the present application provides an electronic device, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the programs or instructions are executed by the processor, the steps of the method provided in the first aspect are implemented.

[0015] In a fourth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed by a processor, the steps of the method provided in the first aspect are implemented.

[0016] In a fifth aspect, an embodiment of the present application provides a chip, the chip including a processor and a communication interface, the communication interface and the processor are coupled, and the processor is used to run programs or instructions to implement the method provided in the first aspect.

[0017] In a sixth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the method provided in the first aspect.

[0018] In an embodiment of the present application, upon receiving a request to launch the first light application, the request to launch the first light application is intercepted, and a second application corresponding to the first light application is launched. When it is detected that the second application sends a request to obtain privacy data, the request to obtain privacy data is responded to based on the access rights of the second application, so that the function of the first light application can be implemented through the second application, and the security of privacy data can be improved by managing the access rights of the second application independently of the first application carried by the first light application. BRIEF DESCRIPTION OF THE DRAWINGS

[0019] Figure 1 This is one of the flowcharts of the permission management method provided by an embodiment of the present application;

[0020] Figure 2 This is the second flowchart of the rights management method provided by an embodiment of the present application;

[0021] Figure 3 This is the third flow chart of the rights management method provided by an embodiment of the present application;

[0022] Figure 4 It is a schematic diagram of the structure of a rights management device provided by an embodiment of the present application;

[0023] Figure 5 is a schematic diagram of the structure of an electronic device provided by an embodiment of the present application;

[0024] Figure 6 It is a schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0025] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the present application belong to the scope of protection of this application.

[0026] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0027] The following is a detailed description of the permission management method provided in the embodiment of the present application through specific embodiments and their application scenarios in conjunction with the accompanying drawings.

[0028] Figure 1 is a flowchart of a rights management method provided by an embodiment of the present application, such as Figure 1 As shown, an embodiment of the present application provides a rights management method, which may include:

[0029] S110, when receiving a request to start the first light application, intercepting the request to start the first light application;

[0030] S120, starting a second application corresponding to the first light application, where the second application is an application installed according to the resource access path information of the first light application;

[0031] The first application can be any application (APP) installed in the electronic device. The application refers to software installed on the electronic device to improve the deficiencies and personalization of the original system. The operation of the application requires the support of the corresponding operating system, which can include IOS, Android system, etc. The first light application is any light application installed on the first application. The first application can be a platform with a large number of users. Other applications cooperate with the first application and are installed on the first application in the form of light applications, enjoying the user group, resource files, access rights, etc. of the first application.

[0032] The first application can rely on multiple light applications. Light applications can be regarded as applications with light running data. In order to reduce the amount of data development and data maintenance of light applications, the first application usually provides some of its own complex functions to each light application, that is, each light application does not need to configure complex functions locally, and the light application can call the complex functions provided by the first application through the interface provided by the first application. At the same time, during the operation of the light application, it is necessary to call the user's data for business processing. Since the user is the user of the first application, the light application also needs to obtain the user's data through the interface provided by the first application, where the user's data includes both some regular data and some data that is of great value to the user, such as the user's privacy data. The first application can obtain the user's privacy data based on its own access rights, where the user's privacy data includes the user's location information, address book information, device information, account information, transaction information, etc. The light application relying on the first application can call the user's privacy data through the interface provided by the first application.

[0033] For example, the first application is an instant messaging software, and the first application has access rights to obtain the geographic location information of the electronic device. The first light application is a takeaway ordering application installed on the first application, and the takeaway ordering application needs to obtain the geographic location information of the electronic device when performing business processing. The takeaway ordering application can obtain the geographic location information of the electronic device through the first application.

[0034] The user inputs the application identifier of the first light application, which can trigger a request to start the first light application. When the first application performs business processing, it can also trigger a request to start the first light application. The request to start the first light application can be intercepted in advance based on the hook function, and the request to start the first light application can be replaced with a request to start the second application, so that the second application can be started when the request to start the first light application is received.

[0035] The second application is an application installed according to the resource access path information of the first light application, that is, the second application can provide the same display page and business processing functions as the first light application. Unlike the first light application, the second application is an application with a corresponding application name in the installed application list (e.g., package.list) of the electronic device.

[0036] S130, when detecting that the second application sends a request for obtaining private data, responding to the request for obtaining private data based on the access rights of the second application, wherein the first light application is a light application carried on the first application, and the access rights of the first application and the second application are independent of each other.

[0037] After the second application is started, when the second application needs to call private data for business processing during operation, the second application generates a private data acquisition request to obtain the required private data. If the second application has access rights to the private data, the private data acquisition request is responded to so that the second application can access and obtain the private data; if the second application does not have access rights to the private data, the private data acquisition request is not responded to, and the second application is prohibited from accessing and obtaining the private data.

[0038] For example: See Figure 2 The first application 21 is a shopping software, and the first application 21 has access rights to obtain the address book information of the electronic device. The first light application 22 is a group purchase sharing application 22 installed on the first application 21, and the group purchase sharing application 22 needs to obtain the address book information of the electronic device when performing business processing.

[0039] When a request to start the group-buying sharing application 22 is detected, the second application 23 corresponding to the group-buying sharing application 22 is started, and the display interface of the group-buying sharing application 22 is displayed; when it is detected that the group-buying sharing application 22 sends a request to obtain contact book information, the request to obtain contact book information is responded to based on the access rights of the second application 23 to the contact book information.

[0040] In an embodiment of the present application, upon receiving a request to launch the first light application, the request to launch the first light application is intercepted, and a second application corresponding to the first light application is launched. When it is detected that the second application sends a request to obtain privacy data, the request to obtain privacy data is responded to based on the access rights of the second application, so that the function of the first light application can be implemented through the second application, and the security of privacy data can be improved by managing the access rights of the second application independently of the first application carried by the first light application.

[0041] In some embodiments, the first application is equipped with multiple light applications, and corresponding application programs are installed for at least two of the multiple light applications. Access permissions can be set for the application programs corresponding to the at least two light applications respectively, so as to manage different light applications separately.

[0042] In some embodiments, the resource access path information points to a resource file of the first application; S120 includes:

[0043] S210, generating a business processing request according to the resource file of the first application, and sending the business processing request to the cloud server corresponding to the first light application, the business processing request is used to trigger the cloud server to respond to the business processing request to obtain corresponding response data;

[0044] S220, receiving response data returned by the cloud server through the first application, performing page rendering based on the response data, and displaying a page corresponding to the response data obtained by page rendering.

[0045] The resource files of the first application can be program codes, pictures, audio, video, layout files, string resources, etc. provided by the first application to the first light application. Before starting the second application, the second application can be pre-configured so that the resource access path of the second application points to the resource files of the first application, so that the resource files used by the first light application are the same as those used by the second application, so as to avoid the second application being unable to implement the functions provided by the first light application.

[0046] The cloud server is a server corresponding to the first light application, and the cloud server can provide users with business processing corresponding to the first light application. The second application replaces the first light application to execute the program code of the first application to generate a business processing request, and sends the business processing request to the cloud server corresponding to the first light application. After the cloud server receives the business processing request, the cloud server responds to the data business processing request to obtain corresponding response data. Receive the response data returned by the cloud server, and render the page based on the response data, and display the page corresponding to the response data obtained by the page rendering, so that the user browses to the page consistent with the page that starts the first light application.

[0047] Optionally, a rendered page corresponding to the response data is displayed in the first application, so that the user can experience the page of opening the first light application in the first application.

[0048] Optionally, a page corresponding to the response data is displayed by rendering, which is different from the display page of the first application, so that the user can see the display page of the first application and the display page of the second application in the multitasking interface for managing the launched application programs.

[0049] By providing a second application different from the first application and responding to a request for obtaining privacy data based on the access rights of the second application, the permission management of the first light application by the first application can be omitted.

[0050] In some embodiments, before S120, the method further includes:

[0051] S310, receiving a first input to a first icon displayed in a first application, where the first icon is an application icon of a first light application;

[0052] S320, in response to the first input, obtaining resource access path information of the first light application and identification information of the first light application;

[0053] S330, establishing a second application, configuring the name attribute of the second application as identification information, and configuring the second application to call a resource file of the first application according to the resource access path information.

[0054] One or more application icons of light applications mounted on the first application may be displayed in the display interface provided by the first application. The first input may be an input for starting the first light application. For example, a single click, double click, long press, or sliding input made by a user on the application icon of the displayed first light application.

[0055] Before the first light application is started for the first time, the second application corresponding to the first light application is not installed. After receiving the first input, in response to the first input, the resource access path information of the first light application is obtained, and the second application corresponding to the first light application is installed according to the resource access path information. After the second application is installed and configured, a request to start the first light application can be directly generated to start the second application. After the second application is installed and configured, it is also possible to wait until a request to start the first light application is received again before starting the second application. That is, after the second application corresponding to the first light application is installed, each time a request to start the first light application is received, the request is intercepted and the second application corresponding to the first light application is started.

[0056] See also Figure 3Different light applications have different corresponding identification information, so different light applications can be distinguished by identification confidence. In S330, the identification information pkg2 of the first light application can be obtained first, and a second application can be newly created, wherein the directory package.xml is used to store information such as the permissions applied for by the application, signatures, and the location of the code. The packages.xml file can be modified, and the identification information pkg2 can be written into the name attribute, and the userId corresponding to the second application is generated and recorded in the userId field. The directory package.list is used to record information such as the application installation location, and the package information of the second application can be added to the directory package.list.

[0057] In S330, the resource access path information includes code resource access path information and static resource access path information. The directory codePath is modified to point to the storage path of the program code of the first application according to the code resource access path information, and the directory resourcePath is modified to point to the storage path of the static resources of the first application according to the static resource access path information. The static resources include pictures, audio, video, layout files, and string resources.

[0058] Optionally, cache information in the directory package_cache and the directory package Manager may also be updated to complete the hook of the second application.

[0059] Optionally, a cache storage directory is added to store and read the application data generated by the second application when it is running. Dynamic resources related to the second application in the first application can also be copied and stored in the cache storage directory. For example, cache storage directories data / data / pkg2 and data / user / 0 / pkg2 are added.

[0060] In some embodiments, S110 includes:

[0061] S410, when receiving a request to start a first light app, searching the installed applications for an application having the same identification information as the first light app;

[0062] S420: When a second application having the same identification information as the first light application is obtained through query, the second application is started.

[0063] According to the identification information of the first light application carried in the request for launching the first light application, a second application having the same identification information as the first light application is queried in the installed applications, indicating that the second application corresponding to the first light application has been pre-configured and installed.

[0064] When no second application with the same identification information as the first light application is queried, the preset independent permission management rules for the first application are obtained; if the first light application complies with the preset independent permission management rules, the following steps are performed: S320, resource access path information of the first light application and identification information of the first light application are obtained. If the first light application does not comply with the preset independent permission management rules, the first light application is started in the first application.

[0065] The preset independent permission management rules may be rules pre-set for one or more light applications installed on the first application, so as to determine which light applications need to be managed by setting corresponding application programs through the preset independent permission management rules. For example: a light application whitelist is pre-set, and the identification information of the first light application is found in the light application whitelist, then the first light application is considered to be not compliant with the preset independent permission management rules. For example: a light application blacklist is pre-set, and the identification information of the first light application is found in the light application blacklist, then the first light application is considered to be compliant with the preset independent permission management rules.

[0066] By searching the installed applications for an application with the same identification information as the first light application, it is determined whether to install a second application corresponding to the first light application to replace the first light application for startup.

[0067] In some embodiments, S130 includes:

[0068] S610, when it is detected that the second application sends a private data acquisition request for acquiring the first private data, acquiring access rights for the second application to acquire the first private data;

[0069] S620, displaying an access permission setting option when the access permission for the second application to obtain the first privacy data is not set;

[0070] S630, receiving a second input for an access permission setting option;

[0071] S640, in response to the second input, generating access rights for the second application to obtain the first private data;

[0072] S650: Respond to the request for obtaining the private data based on the second application obtaining the access right to the first private data.

[0073] After the user sets the access right for the second application to obtain the first private data, the second application has the access right to obtain the first private data, or the second application does not have the access right to obtain the first private data. If the user does not set the access right for the second application to obtain the first private data, the access right for the second application to obtain the first private data is empty or the initial value. The user can check at least one of the displayed access right setting options to confirm whether the second application has the access right to obtain the first private data, and then respond to the private data acquisition request based on the second application obtaining the access right for the first private data.

[0074] For example: when the second application is a takeout ordering application, when it is detected that the takeout ordering application sends a privacy data acquisition request for obtaining geolocation data, the takeout ordering application is granted access rights to obtain geolocation data. When the access rights to obtain geolocation data are not set for the takeout ordering application, the access right setting option of "Do you agree to obtain geolocation data" is displayed. After the user makes an input to check "Agree to obtain geolocation data", the takeout ordering application is generated to have access rights to obtain geolocation data, allowing the takeout ordering application to access the geolocation data.

[0075] During the running of the second application, when access permission setting options are generated according to the privacy data that the second application needs to obtain, the access permission setting options are displayed for the user to select, so as to set the second application's access permissions to different privacy data.

[0076] In some embodiments, the method further comprises:

[0077] S710, when displaying an access permission setting page for a second application, receiving a third input of at least one access permission setting option displayed on the access permission setting page;

[0078] S720: In response to the third input, update the access permission of the second application to obtain the private data.

[0079] The access permission setting page may display access permission information of at least one private data, and may also display access permission setting options corresponding to each private data. The user may not only set access permission for obtaining private data during the use of the second application, but may also adjust the access permission setting options on the access permission setting page of the second application to modify the access permission for each private data.

[0080] It should be noted that the execution subject of the rights management method provided in the embodiment of the present application may be a rights management device. In the embodiment of the present application, the rights management device provided in the embodiment of the present application is described by taking the rights management device executing the rights management method as an example.

[0081] Figure 4 is a schematic diagram of the structure of a rights management device provided by another embodiment of the present application, such as Figure 4 As shown, the rights management device may include:

[0082] A first interception module 201 is used to intercept the request to start the first light application when receiving the request to start the first light application;

[0083] A first starting module 202, used to start a second application corresponding to the first light application, where the second application is an application installed according to the resource access path information of the first light application;

[0084] A first response module 203, configured to respond to the private data acquisition request based on the access rights of the second application when detecting that the second application sends a private data acquisition request;

[0085] Among them, the first light application is a light application carried on the first application, and the access rights of the first application and the second application are independent of each other.

[0086] In an optional example, the resource access path information points to a resource file of the first application, and the first light application is a light application mounted on the first application; the first startup module 202 includes:

[0087] A business processing request generating unit, used to generate a business processing request according to the resource file of the first application, and send the business processing request to the cloud server corresponding to the first light application, the business processing request is used to trigger the cloud server to respond to the business processing request to obtain corresponding response data;

[0088] The page rendering unit is used to receive the response data returned by the cloud server through the first application, and perform page rendering based on the response data, and display the rendered page corresponding to the response data.

[0089] In an optional example, the rights management device further includes:

[0090] A second receiving module is used to receive a first input of an application icon of a first light application displayed in the first application;

[0091] An acquisition module, configured to acquire, in response to a first input, resource access path information of a first light application and identification information of the first light application;

[0092] The installation module is used to establish the second application, configure the name attribute of the second application as identification information, and configure the second application to call the resource file of the first application according to the resource access path information.

[0093] In an optional example, the first response module includes:

[0094] A first acquisition unit is used to acquire access rights for the second application to acquire the first private data when it is detected that the second application sends a private data acquisition request to acquire the first private data;

[0095] A first display unit, configured to display an access permission setting option when the access permission for the second application to obtain the first privacy data is not set;

[0096] A first receiving unit, configured to receive a second input of an access permission setting option;

[0097] A first generating unit, configured to generate, in response to a second input, access rights for a second application to obtain the first private data;

[0098] The first responding unit is configured to obtain access rights to the first private data based on the second application, and respond to a request for obtaining the private data.

[0099] In an optional example, the rights management device further includes:

[0100] A third receiving module is used to receive a third input of at least one access permission setting option displayed on the access permission setting page when the access permission setting page for the second application is displayed;

[0101] The third response module is used to update the access permission of the second application to obtain the private data in response to the third input.

[0102] The rights management device in the embodiment of the present application can be an electronic device, or a component in the electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal, or it can be other devices other than the terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, a vehicle-mounted electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc., and can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), an ATM or a self-service machine, etc., augmented reality (augmented reality, AR), virtual reality (virtual reality, VR) devices, etc., which are not specifically limited in the embodiment of the present application.

[0103] The rights management device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, a BlueOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0104] The rights management device provided in the embodiment of the present application can achieve Figures 1 to 3 To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0105] Alternatively, if Figure 5 As shown, an embodiment of the present application also provides an electronic device 100, including a processor 101 and a memory 102, wherein the memory 102 stores programs or instructions that can be executed on the processor 101, and when the program or instructions are executed by the processor 101, the various steps of the above-mentioned permission management method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, they are not described here.

[0106] It should be noted that the electronic devices in the embodiments of the present application include the above-mentioned mobile electronic devices and non-mobile electronic devices.

[0107] Figure 6 A schematic diagram of the hardware structure of an electronic device to implement an embodiment of the present application.

[0108] The electronic device 1000 includes but is not limited to components such as a radio frequency unit 111, a network module 112, an audio output unit 113, an input unit 114, a sensor 115, a display unit 116, a user input unit 117, an interface unit 118, a memory 119, and a processor 110.

[0109] Those skilled in the art will appreciate that the electronic device 1000 may also include a power source (such as a battery) for supplying power to each component, and the power source may be logically connected to the processor 110 through a power management system, thereby implementing functions such as managing charging, discharging, and power consumption management through the power management system. Figure 6 The electronic device structure shown in the figure does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently, which will not be described in detail here.

[0110] The processor 110 is configured to intercept the request to start the first light application when receiving the request to start the first light application;

[0111] The processor 110 is used to start a second application corresponding to the first light application, where the second application is an application installed according to the resource access path information of the first light application;

[0112] The processor 110 is configured to respond to the private data acquisition request based on the access rights of the second application when detecting that the second application sends a private data acquisition request.

[0113] Optionally, the first light application is a light application mounted on the first application; the processor 110 is used to generate a business processing request according to the resource file of the first application, and send the business processing request to the cloud server corresponding to the first light application, and the business processing request is used to trigger the cloud server to respond to the business processing request to obtain corresponding response data;

[0114] The processor 110 is used to receive response data returned by the cloud server through the first application, and perform page rendering based on the response data, and display the rendered page corresponding to the response data.

[0115] Optionally, the processor 110 is configured to receive a first input to an application icon of a first light application displayed in the first application;

[0116] The processor 110 is configured to obtain, in response to the first input, resource access path information of the first light application and identification information of the first light application;

[0117] The processor 110 is used to establish a second application, configure the name attribute of the second application as identification information, and configure the second application to call a resource file of the first application according to the resource access path information;

[0118] Among them, the first light application is a light application carried on the first application, and the access rights of the first application and the second application are independent of each other.

[0119] Optionally, the processor 110 is configured to obtain access rights for the second application to obtain the first private data when detecting that the second application sends a private data acquisition request for obtaining the first private data;

[0120] The processor 110 is configured to display an access permission setting option when the access permission is not set for the second application to obtain the first privacy data;

[0121] The processor 110 is used to receive a second input of an access permission setting option;

[0122] The processor 110 is configured to generate, in response to the second input, access rights for the second application to obtain the first private data;

[0123] The processor 110 is configured to obtain access rights to the first private data based on the second application, and respond to a request to obtain the private data.

[0124] Optionally, the processor 110 is configured to receive a third input of at least one access permission setting option displayed on the access permission setting page when displaying the access permission setting page for the second application;

[0125] The processor 110 is configured to update, in response to the third input, the access permission for the second application to obtain the private data.

[0126] It should be understood that in the embodiment of the present application, the input unit 114 may include a graphics processor (Graphics Processing Unit, GPU) 1141 and a microphone 1142, and the graphics processor 1141 processes the image data of the static picture or video obtained by the image capture device (such as a camera) in the video capture mode or the image capture mode. The display unit 116 may include a display panel 1161, and the display panel 1161 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 117 includes a touch panel 1171 and at least one of other input devices 1172. The touch panel 1171 is also called a touch screen. The touch panel 1171 may include two parts: a touch detection device and a touch controller. Other input devices 1172 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0127] The memory 119 can be used to store software programs and various data. The memory 119 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory 119 may include a volatile memory or a non-volatile memory, or the memory 119 may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDRSDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous link dynamic random access memory (SLDRAM) and a direct memory bus random access memory (DRRAM). The memory 119 in the embodiment of the present application includes but is not limited to these and any other suitable types of memory.

[0128] The processor 110 may include one or more processing units; optionally, the processor 110 integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor 110.

[0129] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned permission management method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0130] The processor is the processor in the electronic device in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0131] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface and the processor are coupled, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned permission management method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0132] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0133] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned permission management method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0134] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0135] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods of each embodiment of the present application.

[0136] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A rights management method, characterized in that: include: When receiving a request to start the first light application, intercepting the request to start the first light application; Launching a second application corresponding to the first light application, where the second application is an application installed according to the resource access path information of the first light application; In the case of detecting that the second application sends a request for obtaining private data, responding to the request for obtaining private data based on the access rights of the second application; The first light application is a light application installed on the first application, and the access rights of the first application and the second application are independent of each other.

2. The method according to claim 1, characterized in that The resource access path information points to a resource file of the first application; and the starting of the second application corresponding to the first light application includes: Generate a business processing request according to the resource file of the first application, and send the business processing request to the cloud server corresponding to the first light application, wherein the business processing request is used to trigger the cloud server to respond to the business processing request and obtain corresponding response data; The response data returned by the cloud server is received through the first application, and a page is rendered based on the response data to display a rendered page corresponding to the response data.

3. The method according to claim 1, characterized in that: Before starting the second application corresponding to the first light application, the method further includes: Receiving a first input to a first icon displayed in the first application, where the first icon is an application icon of the first light application; In response to the first input, acquiring resource access path information of the first light application and identification information of the first light application; The second application is established, a name attribute of the second application is configured as the identification information, and the second application is configured to call a resource file of the first application according to the resource access path information.

4. The method according to claim 1, characterized in that: The step of, in the case of detecting that the second application sends a private data acquisition request, responding to the private data acquisition request based on the access rights of the second application, includes: In a case where it is detected that the second application sends a private data acquisition request for acquiring the first private data, acquiring access rights for the second application to acquire the first private data; In the case where the access permission for the second application to obtain the first privacy data is not set, displaying an access permission setting option; receiving a second input of the access permission setting option; In response to the second input, generating access permission for the second application to obtain the first private data; The private data acquisition request is responded to based on the second application obtaining the access right to the first private data.

5. The method according to claim 4, characterized in that The method further comprises: In a case where the access permission setting page for the second application is displayed, receiving a third input of at least one access permission setting option displayed on the access permission setting page; In response to the third input, the access permission for the second application to obtain the private data is updated.

6. A rights management device, characterized in that: include: A first interception module, configured to intercept the request to start the first light application when receiving the request to start the first light application; A first starting module, used to start a second application corresponding to the first light application, where the second application is an application installed according to the resource access path information of the first light application; A first response module, configured to respond to the private data acquisition request based on the access rights of the second application when detecting that the second application sends the private data acquisition request; The first light application is a light application installed on the first application, and the access rights of the first application and the second application are independent of each other.

7. The rights management device according to claim 6, characterized in that: The resource access path information points to the resource file of the first application; The first startup module includes: A business processing request generating unit, configured to generate a business processing request according to the resource file of the first application, and send the business processing request to the cloud server corresponding to the first light application, wherein the business processing request is used to trigger the cloud server to respond to the business processing request and obtain corresponding response data; A page rendering unit is used to receive the response data returned by the cloud server through the first application, perform page rendering based on the response data, and display a rendered page corresponding to the response data.

8. The rights management device according to claim 7, characterized in that: The rights management device also includes: A second receiving module is configured to receive a first input of a first icon displayed in the first application, where the first icon is an application icon of the first light application; an acquisition module, configured to acquire, in response to the first input, resource access path information of the first light application and identification information of the first light application; The installation module is used to establish the second application, configure the name attribute of the second application to be the identification information, and configure the second application to call the resource file of the first application according to the resource access path information.

9. The rights management device according to claim 6, characterized in that: The first response module comprises: A first acquisition unit is configured to acquire access rights for the second application to acquire the first private data when it is detected that the second application sends a private data acquisition request to acquire the first private data; a first display unit, configured to display an access permission setting option when the access permission for the second application to obtain the first privacy data is not set; A first receiving unit, configured to receive a second input of the access permission setting option; A first generating unit, configured to generate, in response to the second input, access rights for the second application to obtain the first private data; The first responding unit is configured to obtain access rights to the first private data based on the second application, and respond to the private data acquisition request.

10. The rights management device according to claim 9, characterized in that: The rights management device also includes: a third receiving module, configured to receive, when displaying the access permission setting page for the second application, a third input of at least one access permission setting option displayed on the access permission setting page; A third response module is configured to update the access permission of the second application to obtain the private data in response to the third input.

11. An electronic device, characterized in that: It comprises a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the programs or instructions are executed by the processor, the steps of the rights management method as described in any one of claims 1 to 5 are implemented.

Images