Authority management method and device

Abstract

The invention discloses an authority management method and device, and belongs to the technical field of communication. The authority management method provided by the embodiment of the invention comprises the steps that N authority entries are displayed, each authority entry is used for describing one piece of privacy information associated with a first authority of a first application, and N is a positive integer; receiving a first input for a first permission entry in the N permission entries, wherein the first permission entry corresponds to first privacy information in the N pieces of privacy information; and in response to the first input, granting the first sub-permission to the first application, or stopping granting the first sub-permission to the first application, the first sub-permission being a sub-permission related to the first privacy information in the first permission.

Description

Technical Field

[0001] The present application belongs to the field of communication technology, and specifically relates to a permission management method and device. Background Art

[0002] As people pay more and more attention to the protection of personal privacy information, in order to avoid user information leakage due to the granting of application permissions, electronic devices can limit applications from obtaining unnecessary user information through permission management, thereby ensuring users' needs for privacy security.

[0003] Currently, in the scenario where an electronic device manages application permissions of an application, the electronic device can display a certain application permission of the application and description information of the certain application permission, so that the user can input the certain application permission based on the description information of the certain application permission, so that the electronic device can grant the certain application permission to the application, or stop granting the certain application permission to the application.

[0004] However, since the description information of application permissions displayed by the electronic device may be more professional or more vague, this may cause the user to be unable to accurately know whether the user information to be obtained by the application permissions includes sensitive privacy information, and trigger the electronic device to grant the application permissions to the application. Therefore, the application may obtain the sensitive privacy information, thereby causing the leakage of privacy information. As a result, the security of privacy information protection is poor when the electronic device grants application permissions to the application. Summary of the invention

[0005] The purpose of the embodiments of the present application is to provide a permission management method and device that can solve the problem of poor security in protecting privacy information when an electronic device grants application permissions to an application.

[0006] In a first aspect, an embodiment of the present application provides a permission management method, the method comprising: displaying N permission entries, each permission entry being used to describe a privacy information associated with a first permission of a first application, where N is a positive integer; receiving a first input for a first permission entry among the N permission entries, the first permission entry corresponding to a first privacy information among the N privacy information; in response to the first input, granting a first sub-permission to the first application, or stopping granting the first sub-permission to the first application, the first sub-permission being a sub-permission in the first permission related to the first privacy information.

[0007] In a second aspect, an embodiment of the present application provides a permission management device, which includes: a receiving module, a display module, and a processing module. Among them, the display module is used to display N permission entries, each permission entry is used to describe a privacy information associated with a first permission of a first application, and N is a positive integer. The receiving module is used to receive a first input of a first permission entry among the N permission entries displayed by the display module, and the first permission entry corresponds to a first privacy information among the N privacy information. The processing module is used to grant a first sub-permission to the first application or stop granting the first sub-permission to the first application in response to the first input received by the receiving module. The first sub-permission is a sub-permission in the first permission related to the first privacy information.

[0008] In a third aspect, an embodiment of the present application provides an electronic device, which includes a processor and a memory, wherein the memory stores programs or instructions that can be run on the processor, and when the program or instructions are executed by the processor, the steps of the method described in the first aspect are implemented.

[0009] In a fourth aspect, an embodiment of the present application provides a readable storage medium, on which a program or instruction is stored, and when the program or instruction is executed by a processor, the steps of the method described in the first aspect are implemented.

[0010] In a fifth aspect, an embodiment of the present application provides a chip, comprising a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run a program or instruction to implement the steps of the method described in the first aspect.

[0011] In a sixth aspect, an embodiment of the present application provides a computer program product, which is stored in a storage medium and is executed by at least one processor to implement the steps of the method described in the first aspect.

[0012] In an embodiment of the present application, the electronic device may first display N permission entries, each of which is used to describe a privacy information associated with the first permission of the first application, where N is a positive integer, and then grant the first sub-permission to the first application, or stop granting the first sub-permission to the first application, based on the user's first input to the first permission entry in the N permission entries; wherein the first permission entry corresponds to the first privacy information in the N privacy information, and the first sub-permission is the sub-permission in the first permission related to the first privacy information. Since the electronic device can display N permission entries, and each of the N permission entries is used to describe a privacy information associated with the first permission of the first application, the user can clearly know the specific content of the N privacy information associated with the first permission based on the N permission entries, instead of being unable to know the specific content of the N privacy information associated with the first permission as in the related art. Therefore, the user can make a first input to the first permission entry among the N permission entries, for example, the first permission entry associated with non-sensitive privacy information (i.e., the first privacy information) among the N permission entries is made a first input, so that the electronic device can accurately grant the sub-permission related to the non-sensitive privacy information in the first permission to the first application, instead of directly granting the first permission to the first application, thereby reducing the situation where the first application obtains sensitive privacy information and reducing the probability of leakage of sensitive privacy information. Alternatively, the user can make a first input to the first permission entry among the N permission entries, for example, the first permission entry associated with sensitive privacy information (i.e., the first privacy information) among the N permission entries is made a first input, so that the electronic device can accurately stop granting the sub-permission related to the sensitive privacy information in the first permission to the first application, instead of directly stopping granting the first permission to the first application, thereby ensuring that the first application can obtain the required privacy information while reducing the situation where the first application obtains sensitive privacy information and reducing the probability of leakage of sensitive privacy information. In this way, while ensuring that the first application can obtain the required privacy information, the security of privacy information protection of the electronic device when granting application permissions to the application is improved. BRIEF DESCRIPTION OF THE DRAWINGS

[0013] Figure 1 This is one of the flowcharts of the permission management method provided in the embodiment of the present application;

[0014] Figure 2A This is one of the interface diagrams of the mobile phone interface provided in the embodiment of the present application;

[0015] Figure 2B This is the second interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0016] Figure 2CThis is the third interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0017] Figure 3 This is the second flowchart of the rights management method provided in the embodiment of the present application;

[0018] Figure 4 This is the fourth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0019] Figure 5A This is the fifth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0020] Figure 5B This is the sixth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0021] Figure 6 This is the third flowchart of the permission management method provided in the embodiment of the present application;

[0022] Figure 7 This is the seventh interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0023] Figure 8 This is the fourth flowchart of the rights management method provided in the embodiment of the present application;

[0024] Fig. 9 This is the eighth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0025] Fig.10 This is the fifth flowchart of the rights management method provided in the embodiment of the present application;

[0026] Fig.11 This is the sixth flowchart of the rights management method provided in the embodiment of the present application;

[0027] Fig.12 This is the seventh flowchart of the rights management method provided in the embodiment of the present application;

[0028] Fig.13 This is the ninth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0029] Fig.14A This is the tenth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0030] Fig. 14B This is the eleventh interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0031] Fig.15 This is the eighth flowchart of the rights management method provided in the embodiment of the present application;

[0032] Fig.16A This is the twelfth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0033] Fig. 16B This is the thirteenth interface diagram of the mobile phone interface provided in the embodiment of the present application;

[0034] Fig.17 This is the ninth flowchart of the rights management method provided in the embodiment of the present application;

[0035] Fig.18 It is a schematic diagram of the structure of the rights management device provided in the embodiment of the present application;

[0036] Fig.19 This is one of the hardware structure diagrams of the electronic device provided in the embodiment of the present application;

[0037] Fig. 20 This is the second schematic diagram of the hardware structure of the electronic device provided in the embodiment of the present application. DETAILED DESCRIPTION

[0038] The following will be combined with the drawings in the embodiments of the present application to clearly describe the technical solutions in the embodiments of the present application. Obviously, the described embodiments are part of the embodiments of the present application, rather than all the embodiments. All other embodiments obtained by ordinary technicians in this field based on the embodiments in the present application belong to the scope of protection of this application.

[0039] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the data used in this way can be interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first", "second", etc. are generally of one type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally indicates that the objects associated with each other are in an "or" relationship.

[0040] The following is a detailed description of the permission management method and device provided in the embodiments of the present application through specific embodiments and their application scenarios in conjunction with the accompanying drawings.

[0041] The permission management method provided in the embodiment of the present application can be used in scenarios where an application obtains contact access permission and an application obtains location permission.

[0042] Scenario 1: Application obtains contact access permissions

[0043] Assume that user 1 wants to use application 1 in electronic device 1. Due to the use of a certain function, application 1 needs to obtain contact access rights. N permission items are displayed on the opening interface of application 1. Each permission item is used to prompt the privacy information 1 associated with the contact access rights of application 1. N is a positive integer. Then user 1 can make the first input of obtaining contact access rights in the N permission items. Permission item 1 corresponds to privacy information 1. This allows electronic device 1 to grant contact access sub-rights to application 1, or stop granting contact access sub-rights to application 1. Contact access sub-rights are sub-rights of contact access rights that are related to privacy information 1.

[0044] Scenario 2: Application obtains location permission

[0045] Assume that user 2 wants to use application 2 in electronic device 2. Due to the use of a certain function, application 2 needs to obtain location permission. N permission items are displayed on the opening interface of application 2. Each permission item is used to prompt the privacy information 2 associated with the location permission of application 2. N is a positive integer. Then user 2 can make the first input of the location permission in the N permission items. Permission item 2 corresponds to privacy information 2. So that electronic device 2 can grant the location sub-permission to application 2, or stop granting the location sub-permission to application 2. The contact location sub-permission is a sub-permission of the location permission related to privacy information 2.

[0046] It should be noted that the above-mentioned scenarios 1 to 2 are merely examples of some scenarios to which the embodiments of the present application may be applied. In actual implementation, the embodiments of the present application can also be applied to more scenarios, and the embodiments of the present application are not limited here.

[0047] The execution subject of the rights management method provided in the embodiment of the present application may be a rights management device, and the rights management device may be an electronic device, or a functional module or functional entity in an electronic device. The technical solution provided in the embodiment of the present application is described below using an electronic device as an example.

[0048] Figure 1 A flowchart of a rights management method provided by an embodiment of the present application is shown. Figure 1 As shown, the permission management method provided in the embodiment of the present application may include the following steps 201 to 203.

[0049] Step 201: The electronic device displays N permission entries.

[0050] In the embodiment of the present application, each of the above N permission entries is used to describe a privacy information associated with the first permission of the first application, and N is a positive integer.

[0051] Optionally, in an embodiment of the present application, the permission entry may be text information, which is used to describe a privacy information associated with the first permission of the first application. The text information includes but is not limited to Chinese, foreign languages, numbers, symbols, and special symbols. The specific information may be determined according to actual usage requirements, and the embodiment of the present application does not limit this.

[0052] Optionally, in the embodiment of the present application, the first application mentioned above is not limited to chat applications, camera applications, service applications, image processing applications, social applications, short video interactive applications, and medical applications. The specific application can be determined according to actual usage requirements, and the embodiment of the present application does not limit this.

[0053] Optionally, in the embodiment of the present application, the first permission includes but is not limited to contact access permission, location permission, camera shooting permission, wireless network use permission, and physiological characteristic information reading permission. The specific permission can be determined according to actual use requirements, and the embodiment of the present application does not limit this.

[0054] Optionally, in an embodiment of the present application, the N privacy information associated with the first permission may include but is not limited to user information and device information of the electronic device. The one privacy information associated with the first permission may be understood as: a privacy information involved in the first permission. It can be understood that if the first application is granted the first permission, the first application can obtain all the privacy information involved in the first permission.

[0055] The following will use different examples to illustrate the specific content of the privacy information associated with the first permission when the first permission is a different permission.

[0056] Optionally, in an embodiment of the present application, the above-mentioned first permission includes at least one of the following: contact access permission, location permission, camera shooting permission; the above-mentioned N privacy information include at least one of the following: contact information of at least one contact, at least one location information, and at least one captured picture information; each location information is used to indicate the user's geographical location within a time period, and each captured picture information is collected by a camera of the electronic device.

[0057] In some examples, when the first permission includes contact access rights, the N private information includes contact information of at least one contact. The contact information includes but is not limited to the contact name, contact information, and contact avatar. The contact information includes but is not limited to phone number, email address, and home address.

[0058] It can be understood that the above-mentioned contact access permission can be: information acquisition permission for an application to obtain contact information of contacts in an electronic device, that is, if the first application is granted contact access permission, the first application can obtain contact information of contacts in the electronic device.

[0059] In some examples, when the first permission includes location permission, the N privacy information includes at least one location information. Each location information is specifically used to indicate the geographical location of the user within a time period, and each location information may include but is not limited to the province, city, community, location name, and building number.

[0060] It can be understood that the above-mentioned location permission can be: permission for an application to obtain the user's location information, that is, if the first application is granted with the location permission, the first application can obtain the location information in the electronic device.

[0061] In some examples, when the first permission includes camera shooting permission, the N privacy information includes at least one piece of shooting picture information, wherein each piece of shooting picture information may include but is not limited to picture information currently shot by a camera and picture information shot historically by a camera.

[0062] It can be understood that the above-mentioned camera shooting permission can be: permission for an application to use the camera to shoot, that is, if the first application is granted the camera shooting permission, the first application can use the camera to shoot.

[0063] It can be seen that since the first permission can include at least one of contact access permission, location permission and camera shooting permission, after the electronic device displays N permission items, the user can accurately obtain the privacy information associated with at least one of the contact access permission, location permission and camera shooting permission through the N permission items, that is, at least one of the contact's contact information, location information and captured picture information, and accurately control the electronic device to grant the first application the permission required by the user, or stop granting the first application the permission required by the user according to the needs. Therefore, the situation where the first application has permissions that the user does not require because the user cannot accurately know whether the user information to be obtained by the application permission includes sensitive privacy information can be reduced, thereby reducing the situation where the user's privacy is leaked through the first application.

[0064] In some examples, when the first permission includes wireless network use permission, the N pieces of private information include device information of the electronic device, wherein the device information may include but is not limited to a device identification.

[0065] It can be understood that the above network use permission may be: permission for the application to use device information to establish a wireless network connection with other devices.

[0066] In some examples, when the first permission includes permission to read physiological characteristic information, the above-mentioned private information includes but is not limited to the user's fingerprint information, the user's facial features, and the user's voice features.

[0067] Optionally, in an embodiment of the present application, the electronic device may first determine N privacy information associated with the first permission from the electronic device, and then generate a permission entry based on each privacy information, and display each permission entry. The number N may be set by the user, determined by the electronic device, or configured by other devices.

[0068] In some examples, the electronic device may determine all the privacy information associated with the first authority as N pieces of privacy information.

[0069] In other examples, the electronic device may determine N privacy information that meets a predetermined condition from the privacy information associated with the first permission. The predetermined condition may include at least one of the following: the most frequently used top N privacy information, the most recently used top N privacy information, and the number N of the N privacy information may be a default number of the electronic device or a number set by the user.

[0070] In some examples, the electronic device may determine the information content of each piece of N private information as a permission entry to generate N permission entries.

[0071] Exemplarily, assuming that the first permission includes positioning permission, and the N privacy information include at least one location information, such as the location information of "one hour ago: Building b, Community a", the location information of "one day ago: Store d, Mall c", and the location information of "three days ago: Subway station f, City e", then the electronic device can determine the location information of "one hour ago: Building b, Community a" as one permission entry, namely, the permission entry of "one hour ago: Building b, Community a", and determine the location information of "one day ago: Store d, Mall c" as another permission entry, namely, the permission entry of "one day ago: Store d, Mall c", and determine the location information of "three days ago: Subway station f, City e" as one permission entry, namely, the permission entry of "three days ago: Subway station f, City e".

[0072] In some other examples, each of the N privacy information may include at least one sub-privacy information, so that the electronic device may determine the first sub-privacy information in the at least one sub-privacy information in each privacy information as a permission entry to generate N permission entries.

[0073] Exemplarily, assuming that the first permission includes contact access rights, the N privacy information includes contact information of at least one contact, such as “Contact: Zhang San, phone number: 1888888888, email address aaa@bbb.com, home address: District C, City B, Province A” contact information, “Contact: Li Si, phone number: 1355555555, email address ccc@ddd.com, home address: District F, City E, Province D” contact information, “Contact: Wang Wu, phone number: 1877777777, email address kkk@jjj.com, home address: District I, City H, Province G” contact information, then the electronic device can “Contact: Zhang San, phone number: 1888888888, email address aaa@bbb.com, home address: District C, City B, Province A” contact information. ” One sub-privacy information in the contact information is determined as a permission entry, for example, the sub-privacy information of “Contact: Zhang San” is determined as the “Contact: Zhang San” permission entry, and one sub-privacy information in the contact information “Contact: Li Si, telephone number: 1355555555, email address ccc@ddd.com, home address: d province e city f district” is determined as another permission entry, for example, the sub-privacy information of “Contact: Li Si” is determined as the “Contact: Li Si” permission entry, and one sub-privacy information in the contact information “Contact: Wang Wu, telephone number: 1877777777, email address kkk@jjj.com, home address: g province h city i district” is determined as yet another permission entry, for example, the sub-privacy information of “Contact: Wang Wu” is determined as the “Contact: Wang Wu” permission entry.

[0074] Optionally, in an embodiment of the present application, the electronic device may display N permission entries in a first display form, wherein the first display form includes but is not limited to a bubble display form and a bullet screen display form.

[0075] The bubble display format can be understood as follows: the electronic device can display N bubbles, and each of the N bubbles includes a display mode of a permission entry. The bullet screen display format can be understood as follows: the electronic device can display N bullet screens, and each bullet screen includes a display mode of a permission entry.

[0076] Optionally, in the embodiment of the present application, the electronic device may also display an application identifier of the first application.

[0077] In some examples, the application identifier of the first application may be connected to the N permission entries via a line.

[0078] Optionally, in one scenario, when the electronic device displays an application interface of a first application, if the first application requests a first permission from the system of the electronic device, the electronic device may update the application interface to a new interface including N permission entries.

[0079] For example, a mobile phone is used as an example. Figure 2A As shown, the mobile phone displays the application interface 10 of the first application, and the first application requests the first permission from the system of the electronic device; Figure 2B As shown, after the first application requests the first permission from the system of the electronic device, the mobile phone can update the application interface 10 to the interface 11, and the interface 11 includes N bubbles, such as bubble 12, bubble 13, bubble 14 and the application identifier 15 of the first application, wherein the bubble 12 includes the permission entry "first permission entry 1", the bubble 13 includes the permission entry "first permission entry 2", and the bubble 14 includes the permission entry "first permission entry 3", so that the user can make a first input, such as an input to bubble 12; or, as shown in FIG. Figure 2C As shown, after the first application requests the first permission from the system of the electronic device, the mobile phone can update the application interface 10 to interface 16, which includes N barrages, such as barrage 17 and barrage 18, and the barrage 17 includes the "entry 1 of the first permission" permission entry, and the barrage 18 includes the "entry 2 of the first permission" permission entry, so that the user can make a first input, such as input to barrage 17.

[0080] Optionally, in another scenario, when the electronic device displays a system application interface, the electronic device may display at least one application identifier based on a user's click input on an application permission management option in the system application interface, each application identifier being used to indicate an application, the at least one application identifier including an application identifier of a first application, and may display at least one permission identifier based on a user's click input on the application identifier of the first application, each permission identifier being used to indicate a permission of the first application, and may display N permission entries based on the user's input of a permission identifier for indicating the first application in at least one permission identifier.

[0081] The application identifier includes but is not limited to an application icon, an application name, and an application link.

[0082] In some examples, combined Figure 1 ,like Figure 3 As shown, before the above step 201, the permission management method provided in the embodiment of the present application also includes the following steps 301 and 302, and the above step 201 can be specifically implemented by the following step 201a.

[0083] Step 301: The electronic device displays a first application identifier and T permission identifiers.

[0084] In the embodiment of the present application, the first application identifier is used to indicate the first application, each of the T permission identifiers is used to indicate a permission of the first application, and T is a positive integer.

[0085] In some examples, the above permission identifier may include but is not limited to a contact book permission identifier, a location permission identifier, a camera permission identifier, etc. The specific permission identifier may be determined according to actual usage requirements, and the present application embodiment does not limit this.

[0086] In some examples, the electronic device may display the first application identifier in the central area of ​​the display screen, and display a permission identifier in each display area adjacent to the first application identifier, and each permission identifier is connected to the first application identifier via a line.

[0087] For example, Figure 4 As shown, the mobile phone can display a first application identifier, such as application icon 20, in the central area 19 of the display screen, and display T permission identifiers, such as permission identifier 21, permission identifier 22 and permission identifier 23, in the display area adjacent to the application icon 20. The permission identifier 21, permission identifier 22 and permission identifier 23 are respectively connected to the application icon 20 by a line, and the permission identifier 21 is used to indicate a permission of the first application, the permission identifier 22 is used to indicate another permission of the first application, and the permission identifier 23 is used to indicate another permission of the first application.

[0088] Step 302: The electronic device receives a third input of a first authority identifier among the T authority identifiers.

[0089] In the embodiment of the present application, the above-mentioned first permission identifier is used to indicate the above-mentioned first permission.

[0090] In the embodiment of the present application, the third input is used to select the permission identifier required by the user.

[0091] Optionally, in the embodiment of the present application, the third input includes but is not limited to: a user touch-control input to the electronic device through a touch-control device such as a finger or a stylus, or a voice command input by the user, or a specific gesture input by the user, or other feasible input. The specific input can be determined according to actual use requirements and is not limited in the embodiment of the present application.

[0092] In some examples, the touch input may be a single-click input, a double-click input, or any number of click inputs, or may be a long-press input, a short-press input, or the like.

[0093] In some examples, the above-mentioned specific gesture can be any one of a single-click gesture, a sliding gesture, a drag gesture, a pressure recognition gesture, a long press gesture, an area change gesture, a double-press gesture, and a double-click gesture.

[0094] For example, the third input may be a single-click input of the first permission identifier by the user.

[0095] Step 201a: The electronic device displays N permission entries in response to the third input.

[0096] For example, combining Figure 4 ,like Figure 5A As shown, the user can make a third input to the permission identifier 23, for example, click to enter; assuming that the permission identifier 23 is used to indicate the contact access permission of the first application, such as Figure 5B As shown, after the user clicks and inputs the permission identifier 23, the mobile phone can display N bubbles, such as bubble 24, bubble 25, bubble 26 and the application identifier 27 of the first application, and bubble 24, bubble 25, and bubble 26 are all connected to the application identifier 27 of the first application through a connection, wherein bubble 24 includes the "Contact: Zhang San" permission entry, bubble 25 includes the "Contact: Li Si" permission entry, and bubble 26 includes the "Contact: Wang Wu" permission entry, so that the user can make a first input, such as inputting into bubble 24.

[0097] Thus, it can be seen that since the first electronic device can first display the first application identifier and then display T permission identifiers before displaying N permission items, the user can make a third input for a required permission identifier (i.e., the first permission identifier) ​​so that the electronic device can only display the permission entry of the first permission indicated by the first permission identifier, but will not display the permission entries of all the user's permissions. Therefore, the number of displayed permission entries can be reduced, so that the user can quickly find the required permission entries, thereby reducing the time spent by the user in finding the required permission entries. In this way, the convenience of using the electronic device can be improved.

[0098] In an embodiment of the present application, in order to enable the user to clearly know the sensitive permissions among the T permissions indicated by the T permission identifiers, different display methods can also be used to display the permission identifiers used to indicate sensitive permissions and the permission identifiers used to indicate non-sensitive permissions, which will be illustrated by examples below.

[0099] Optionally, in a possible implementation of the present application, Figure 3 ,like Figure 6 As shown, the above step 301 can be specifically implemented through the following step 301a.

[0100] Step 301a: The electronic device displays the first application identifier, displays the second permission identifier in a first display mode, and displays the third permission identifier in a second display mode.

[0101] In the embodiment of the present application, the second permission identifier is a permission identifier among the T permission identifiers used to indicate a sensitive permission, and the third permission identifier is a permission identifier among the T permission identifiers used to indicate a non-sensitive permission.

[0102] Optionally, in an embodiment of the present application, the above-mentioned sensitive permission can be understood as a permission involving the user's relatively private privacy information. Among them, multiple sensitive permission types can be pre-configured in the electronic device, so that the electronic device can determine the sensitive permission whose permission type matches the sensitive permission type from T permissions, and display the second permission identifier in the first display mode.

[0103] Optionally, in the embodiment of the present application, the first display mode may be any one of the following: a mode of displaying in a first color, a mode of displaying in a first size, a mode of marking and displaying with a first special character. The second display mode may be any one of the following: a mode of displaying in a second color, a mode of displaying in a second size, a mode of marking and displaying with a second special character.

[0104] The first color is different from the second color. The first size is different from the second size, for example, the first size may be larger than the second size, or the first size may be smaller than the second size. The first special character is different from the second special character.

[0105] For example, Figure 7 As shown, the mobile phone can display a first application identifier, such as application icon 29, and display T permission identifiers, such as permission identifier 30, permission identifier 31 and permission identifier 32, wherein the mobile phone can display permission identifier 32 in a first display mode (for example, displaying in a first color), and permission identifier 32 is used to indicate sensitive permissions of the first application, and display permission identifier 30 and permission identifier 31 in a second display mode (for example, displaying in a second color), and permission identifier 30 and permission identifier 31 are used to indicate non-sensitive permissions of the first application.

[0106] It should be noted that Figure 7 Different shaded areas are used to indicate different colors.

[0107] Thus, it can be seen that since the electronic device can use different display methods to display the permission identifiers used to indicate sensitive permissions and the permission identifiers used to indicate non-sensitive permissions among T permission identifiers, so that the user can accurately determine the permission identifier used to indicate the sensitive permission of the first application, and carefully determine whether to grant the sensitive permission to the first application, or stop granting the sensitive permission to the first application. Therefore, the possibility that the electronic device mistakenly grants the sensitive permission to the first application or fails to stop granting the sensitive permission to the first application in time due to the user's inability to accurately determine the permission identifier used to indicate the sensitive permission of the first application can be reduced, thereby reducing the probability of the first application obtaining the sensitive permission. In this way, the security of the electronic device can be improved.

[0108] Optionally, in another possible implementation of the present application, in combination with Figure 3 ,like Figure 8 As shown, the above step 301 can be specifically implemented through the following step 301b.

[0109] Step 301b: The electronic device displays the first application identifier, displays the second permission identifier in the first display area of ​​the display screen of the electronic device, and displays the fourth permission identifier in the second display area of ​​the display screen.

[0110] In the embodiment of the present application, the second permission identifier is a permission identifier among the T permission identifiers used to indicate a sensitive permission, and the fourth permission identifier is a permission identifier among the T permission identifiers used to indicate a non-sensitive permission.

[0111] Optionally, in the embodiment of the present application, the display screen of the electronic device may be a folding screen.

[0112] Optionally, in the embodiment of the present application, the first display area may be a preset display area in the display screen, or a screen area of ​​the folding screen. The number of the second display areas may be at least one, and each second display area may be a display area in the display screen that does not overlap with the first display area, for example, each second display area may be adjacent to the first display area, or each second display area may be a screen area in the display screen that is different from the first display area.

[0113] Optionally, in an embodiment of the present application, the number of the fourth permission identifiers may be at least one.

[0114] In some examples, when the number of fourth permission identifiers is at least two, the electronic device may first classify the non-sensitive permissions of the first application to obtain at least one general permission and at least one cautiously granted permission, so that the electronic device can display a fourth permission identifier indicating the at least one general permission in a second display area, and display at least the fourth permission identifier of the at least one cautiously granted permission in another second display area.

[0115] Among them, general permission types and cautiously granted permission types can be preconfigured in the electronic device, so that the electronic device can determine the permissions in the first application whose permission type is the same as the general permission type as at least one general permission, and determine the permissions in the first application whose permission type is the same as the cautiously granted permission type as at least one cautiously granted permission.

[0116] Optionally, in the embodiment of the present application, the electronic device may further display the second permission identifier in a third display manner, and display the fourth permission identifier in a fourth display manner.

[0117] In some examples, the third display mode may be any one of the following: display in a third color, display in a third size, or display by marking with a third special character. The fourth display mode may be any one of the following: display in a fourth color, display in a fourth size, or display by marking with a fourth special character.

[0118] The third color is different from the fourth color. The third size is different from the fourth size, for example, the third size may be larger than the fourth size, or the third size may be smaller than the fourth size. The third special character is different from the fourth special character.

[0119] For example, Fig. 9 As shown, the mobile phone can display a first application identifier, such as application icon 33, and display T permission identifiers, such as permission identifier 34, permission identifier 35, permission identifier 36, permission identifier 37, permission identifier 38 and permission identifier 39, wherein permission identifier 34 and permission identifier 35 respectively indicate a sensitive permission of the first application, and the mobile phone can display permission identifier 34 and permission identifier 35 in a first display area 40 in a third display mode (for example, a display mode of a third color), permission identifier 36 and permission identifier 37 are respectively used to indicate a general permission of the first application, and the mobile phone can display permission identifier 36 and permission identifier 37 in a second display area 41 in a fourth display mode (for example, a display mode of a fourth color), permission identifier 38 and permission identifier 39 are respectively used to indicate a cautious granting permission of the first application, and the mobile phone can display permission identifier 38 and permission identifier 39 in another second display area 42 in a fourth display mode (for example, a display mode of another fourth color).

[0120] It should be noted that Fig. 9 Different shaded areas are used to indicate different colors.

[0121] Optionally, in the embodiment of the present application, the electronic device may also play a first animation in the first display area and a second animation in the second display area, wherein the first animation is different from the second animation.

[0122] Exemplarily, assuming that the number of second areas is two, the electronic device can play a first animation in the first display area, such as an animation of thunder and rain, and play a second animation in a second display area (such as a second display area that displays a permission identifier for indicating general permissions), such as a landscape animation of spring flowers, and play another second animation in another second display area (such as a second display area that displays a permission identifier for indicating that permission should be granted with caution), such as a weather animation of a cloudy day.

[0123] It is understandable that the electronic device may further prompt the user that the permission identifier displayed in each display area is used to indicate different permissions by playing different animations in the first display area and the second display area.

[0124] Thus, it can be known that since the electronic device can respectively display the permission identifier indicating sensitive permissions and the permission identifier indicating non-sensitive permissions in different display areas of the display screen, the user can clearly know the permission identifier used to indicate the sensitive permissions of the first application, and carefully determine whether to grant the sensitive permissions to the first application, or stop granting the sensitive permissions to the first application. Therefore, the possibility of the electronic device mistakenly granting the sensitive permissions to the first application, or failing to stop granting the sensitive permissions to the first application in time due to the user's inability to accurately determine the permission identifier used to indicate the sensitive permissions of the first application can be reduced, thereby reducing the probability of the first application obtaining the sensitive permissions. In this way, the security of the electronic device can be improved.

[0125] Optionally, in an embodiment of the present application, after the electronic device displays T permission identifiers, the electronic device may also grant the permission indicated by the permission identifier to the first application, or stop granting the permission indicated by the permission identifier to the first application based on the user's fifth input to the permission identifier.

[0126] In some examples, the electronic device may determine whether to grant the permission indicated by the certain permission identifier to the first application, or to stop granting the permission indicated by the certain permission identifier to the first application, based on the input parameters of the fifth input.

[0127] For example, in a case where the fifth input is a double-click input of a permission identifier by the user, if the first application has not been granted the permission indicated by the permission identifier, the electronic device may light up the permission identifier and grant the permission indicated by the permission identifier to the first application; if the first application has been granted the permission indicated by the permission identifier, the electronic device may gray out the permission identifier and stop granting the permission indicated by the permission identifier to the first application.

[0128] For another example, when the fifth input is a user sliding input on the line between a certain permission identifier and the application identifier of the first application, the electronic device can stop granting the permission indicated by the certain permission identifier to the first application and play an animation of the certain permission identifier flying out of the display screen to increase the interest of the operation.

[0129] For another example, when the fifth input is a long press input of a certain permission identifier by the user, the electronic device can stop granting the permission indicated by the certain permission identifier to the first application and play an animation of the certain permission identifier breaking to increase the interest of the operation.

[0130] In some examples, when one of the above permission identifiers is used to indicate a sensitive permission of the first application, the electronic device may also prompt the user in a first prompting manner, or when one of the above permission identifiers is used to indicate a non-sensitive permission of the first application, the electronic device may also prompt the user in a second prompting manner.

[0131] The first prompting method includes at least one of the following: prompting by first input feedback, and prompting by playing a first sound effect. The second prompting method includes at least one of the following: prompting by second input feedback, and prompting by playing a second sound effect. The first input feedback and the second input feedback are different, and the first sound effect and the second sound effect are different.

[0132] For example, assuming that the first prompt method includes a prompt method with a first input feedback, and the second prompt method includes a prompt method with a second input feedback, then when the above-mentioned permission identifier is used to indicate the sensitive permission of the first application, when the user inputs the certain permission identifier (for example, dragging input), the movement speed of the certain permission identifier is slower, that is, the movement resistance of the certain permission identifier is larger; when the above-mentioned permission identifier is used to indicate the non-sensitive permission of the first application, when the user inputs the certain permission identifier (for example, dragging input), the movement speed of the certain permission identifier is faster, that is, the movement resistance of the certain permission identifier is smaller.

[0133] For another example, assuming that the first prompt method includes a method of prompting by playing a first sound effect, and the second prompt method includes a method of prompting by playing a second sound effect, then when one of the above-mentioned permission identifiers is used to indicate the sensitive permission of the first application, when the user inputs the certain permission identifier, the electronic device can play the sound effects of thunder and rain; when one of the above-mentioned permission identifiers is used to indicate the non-sensitive permission of the first application (such as general permission), when the user inputs the certain permission identifier, the electronic device can play bird sounds; when one of the above-mentioned permission identifiers is used to indicate the non-sensitive permission of the first application (such as cautious granting of permission), when the user inputs the certain permission identifier, the electronic device can play the sound of wind.

[0134] It can be understood that since the electronic device can also prompt the user in different ways when the user inputs a permission identifier indicating different permissions, the user can further clearly know whether the permission indicated by the permission identifier operated by the user is a sensitive permission of the first application, so that the user can carefully determine whether to grant the sensitive permission to the first application, or stop granting the sensitive permission to the first application. In this way, the situation where the electronic device mistakenly grants the sensitive permission to the first application, or fails to promptly stop granting the sensitive permission to the first application due to the user's inability to accurately determine the permission identifier used to indicate the sensitive permission of the first application can be further reduced.

[0135] Step 202: The electronic device receives a first input of a first permission entry among N permission entries.

[0136] In the embodiment of the present application, the first permission entry corresponds to the first privacy information among the N privacy information.

[0137] Optionally, in an embodiment of the present application, the first privacy information includes but is not limited to the contact information, location information, and captured picture information of the contact person.

[0138] In the embodiment of the present application, the first input is used to select the permission item required by the user.

[0139] Optionally, in the embodiment of the present application, the first input includes but is not limited to: a user touch-control input to the electronic device through a touch-control device such as a finger or a stylus, or a voice command input by the user, or a specific gesture input by the user, or other feasible input. The specific input can be determined according to actual use requirements and is not limited in the embodiment of the present application.

[0140] In some examples, the touch input may be a single-click input, a double-click input, or any number of click inputs, or may be a long-press input, a short-press input, or the like.

[0141] In some examples, the above-mentioned specific gesture can be any one of a single-click gesture, a sliding gesture, a drag gesture, a pressure recognition gesture, a long press gesture, an area change gesture, a double-press gesture, and a double-click gesture.

[0142] For example, the first input may be a double-click input of the first permission entry by the user.

[0143] Step 203: In response to the first input, the electronic device grants the first sub-permission to the first application, or stops granting the first sub-permission to the first application.

[0144] In this embodiment of the present application, the first sub-rights are sub-rights in the first right that are related to the first privacy information.

[0145] Optionally, in the embodiment of the present application, the first sub-rights may include at least one of the following: information acquisition rights for the first privacy information, and usage rights for a camera corresponding to the first privacy information.

[0146] In some examples, when the first sub-permission includes information acquisition permission for the first private information, the first sub-permission may be information acquisition permission for all sub-privacy information in the first private information. It is understandable that if the first application is granted the first sub-permission, the first application can acquire all sub-privacy information in the first private information.

[0147] In other examples, when the first sub-permission includes information acquisition permission for the first private information, the first sub-permission may be information acquisition permission for part of the sub-privacy information in the first private information. It is understandable that if the first application is granted the first sub-permission, the first application can acquire part of the sub-privacy information in the first private information.

[0148] In some examples, when the first sub-rights include permission to use a camera corresponding to the first privacy information, the first sub-rights may be permission to use the camera that collects the first privacy information.

[0149] Optionally, in the embodiment of the present application, the above-mentioned stopping granting the first sub-permission to the first application can be understood as: refusing to grant the first sub-permission to the first application, or deleting the first sub-permission from the permissions granted to the first application.

[0150] Optionally, in a possible implementation of the present application, the electronic device may determine whether to grant the first sub-permission to the first application or to stop granting the first sub-permission to the first application based on whether the first application is granted the first sub-permission. Figure 1 ,like Fig.10 As shown, the above step 203 can be specifically implemented through the following step 203a.

[0151] Step 203a: In response to the first input, the electronic device stops granting the first sub-permission to the first application if the first application has been granted the first sub-permission; or grants the first sub-permission to the first application if the first application has not been granted the first sub-permission.

[0152] Optionally, in an embodiment of the present application, the electronic device may first determine whether the input parameters of the first input match the third predetermined input parameters, and when it is determined that the input parameters of the first input match the third predetermined input parameters, if the first application has been granted the first sub-permission, stop granting the first sub-permission to the first application; if the first application has not been granted the first sub-permission, grant the first sub-permission to the first application.

[0153] In some examples, the input parameters may include but are not limited to input duration, input type, input pressure value, and input trajectory. The third predetermined input parameter may include but is not limited to predetermined input duration, predetermined input type, predetermined input pressure value, and predetermined input trajectory.

[0154] In some examples, the input parameter may be an input type, and the third predetermined input parameter may be a predetermined input type.

[0155] The above-mentioned predetermined input type may include but is not limited to a double-click input type and a single-click input type.

[0156] It should be noted that the above “matching” can be understood as: being identical, or the similarity between the two being less than or equal to a preset similarity.

[0157] In this way, it can be seen that since the electronic device can determine whether to stop granting the first subpermission to the first application or to grant the first subpermission to the first application based on whether the first application is granted the first subpermission according to a single input from the user, without the user having to perform multiple operations, it is possible to simplify the user's operations in the process of managing the permissions of the first application and reduce time, thereby improving the management efficiency of the permissions of the first application.

[0158] Optionally, in another possible implementation of the present application, the electronic device may determine whether to grant the first sub-permission to the first application or stop granting the first sub-permission to the first application based on an input parameter of the first input.

[0159] In some examples, the above input parameters may include, but are not limited to, input duration, input type, input pressure value, and input trajectory.

[0160] In some examples, when the input parameter of the first input matches the fourth predetermined input parameter, the electronic device may stop granting the first sub-permission to the first application. The fourth predetermined input parameter may include but is not limited to a predetermined input duration, a predetermined input type, a predetermined input pressure value, and a predetermined input trajectory.

[0161] Exemplarily, assuming that the input parameter of the first input is an input type, the fourth predetermined input parameter is a predetermined input type, and the predetermined input type is a long press input type, the electronic device can stop granting the first sub-permission to the first application when the input type of the first input is a long press input type.

[0162] As another example, assuming that the input parameters of the first input are the input type and the input trajectory, the fourth predetermined input parameter is the predetermined input type and the predetermined input trajectory, and the predetermined input type is the drag input type, and the predetermined input trajectory is the trajectory of the input end position being located at the edge line of the display screen of the electronic device, then the electronic device can stop granting the first sub-permission to the first application when the input type of the first input is the sliding input type, and the input trajectory of the first input is the trajectory of the input start position being located on the first permission entry, and the input end position being located at the edge line of the display screen of the electronic device. It can be understood that the user can stop granting the first sub-permission to the first application by dragging the first permission entry out of the first input of the display screen of the electronic device.

[0163] As another example, assuming that the input parameter of the first input is an input type, the fourth predetermined input parameter is a predetermined input type, and the predetermined input type is a click input type, the electronic device can stop granting the first sub-permission to the first application when the input type of the first input is a click input type and the first input is an input by the user of a line between the application identifier of the first application and the first permission entry.

[0164] As another example, assuming that the input parameters of the first input are the input type and the input trajectory, the fourth predetermined input parameter is the predetermined input type and the predetermined input trajectory, and the predetermined input type is a sliding input type, and the predetermined input trajectory is a trajectory of a line passing through the application identifier of the first application and the first permission entry, stop granting the first sub-permission to the first application.

[0165] It can be understood that since the electronic device can determine whether to grant the first sub-permission to the first application or stop granting the first sub-permission to the first application based on the input parameters of the first input, and the input parameters of the first input can include multiple input parameters, the user's operation interest in the process of managing the permissions of the first application can be improved.

[0166] The embodiment of the present application provides a permission management method, in which the electronic device can first display N permission entries, each of which is used to describe a privacy information associated with the first permission of the first application, and N is a positive integer, and then, according to the user's first input of the first permission entry in the N permission entries, the first sub-permission is granted to the first application, or the first sub-permission is stopped from being granted to the first application; wherein the first permission entry corresponds to the first privacy information in the N privacy information, and the first sub-permission is the sub-permission in the first permission related to the first privacy information. Since the electronic device can display N permission entries, and each of the N permission entries is used to describe a privacy information associated with the first permission of the first application, the user can clearly know the specific content of the N privacy information associated with the first permission based on the N permission entries, instead of being unable to know the specific content of the N privacy information associated with the first permission as in the related art. Therefore, the user can make a first input to the first permission entry among the N permission entries, for example, the first permission entry associated with non-sensitive privacy information (i.e., the first privacy information) among the N permission entries is made a first input, so that the electronic device can accurately grant the sub-permission related to the non-sensitive privacy information in the first permission to the first application, instead of directly granting the first permission to the first application, thereby reducing the situation where the first application obtains sensitive privacy information and reducing the probability of leakage of sensitive privacy information. Alternatively, the user can make a first input to the first permission entry among the N permission entries, for example, the first permission entry associated with sensitive privacy information (i.e., the first privacy information) among the N permission entries is made a first input, so that the electronic device can accurately stop granting the sub-permission related to the sensitive privacy information in the first permission to the first application, instead of directly stopping granting the first permission to the first application, thereby ensuring that the first application can obtain the required privacy information while reducing the situation where the first application obtains sensitive privacy information and reducing the probability of leakage of sensitive privacy information. In this way, while ensuring that the first application can obtain the required privacy information, the security of privacy information protection of the electronic device when granting application permissions to the application is improved.

[0167] The following will use different examples to illustrate specific solutions for the electronic device to determine the first sub-rights.

[0168] Optionally, in the embodiment of the present application, the first private information is the contact information of the first contact. Figure 1 ,like Fig.11As shown, before "granting the first sub-authority to the first application, or stopping granting the first sub-authority to the first application" in the above step 203, the permission management method provided in the embodiment of the present application also includes the following step 401, and the above step 203 can be specifically implemented through the following step 203b.

[0169] Step 401: In response to a first input, the electronic device determines the information acquisition permission corresponding to the contact information of the first contact in the first permission as a first sub-permission when an input parameter of the first input matches a first predetermined input parameter.

[0170] Optionally, in the embodiment of the present application, the above input parameters may include but are not limited to input duration, input type, input pressure value, and input trajectory. The above first predetermined input parameter may include but is not limited to predetermined input duration, predetermined input type, predetermined input pressure value, and predetermined input trajectory.

[0171] In some examples, the input parameter may be an input type, and the first predetermined input parameter may be a predetermined input type.

[0172] The above-mentioned predetermined input type may include but is not limited to a double-click input type and a single-click input type.

[0173] It should be noted that the above “matching” can be understood as: being identical, or the similarity between the two being less than or equal to a preset similarity.

[0174] Optionally, in the embodiment of the present application, the contact information of the first contact may include but is not limited to the name of the first contact, the contact information of the first contact, and the avatar of the first contact. The contact information of the first contact may include but is not limited to a telephone number, an email address, and a home address.

[0175] Optionally, in the embodiment of the present application, the information acquisition permission corresponding to the contact information of the first contact in the above-mentioned first permission can be understood as: the permission to acquire all information of the contact information of the first contact.

[0176] In an embodiment of the present application, if the input parameter of the first input matches the first predetermined input parameter, it can be considered that the user may need the electronic device to grant the information acquisition permission corresponding to the contact information of the first contact in the first permission to the first application, or stop granting the information acquisition permission corresponding to the contact information of the first contact in the first permission to the first application. Therefore, the electronic device can determine the information acquisition permission corresponding to the contact information of the first contact in the first permission as the first sub-permission.

[0177] Step 203b: The electronic device grants the first sub-authority to the first application, or stops granting the first sub-authority to the first application.

[0178] It should be noted that, for instructions on the electronic device granting the first sub-permission to the first application, or stopping granting the first sub-permission to the first application, reference can be made to the specific description in the above embodiment, and the embodiments of the present application will not be repeated here.

[0179] Thus, it can be seen that since the electronic device determines the information acquisition permission corresponding to the contact information of the first contact in the first permission as the first sub-permission only when the input parameter of the first input matches the first predetermined input parameter, instead of directly determining the information acquisition permission corresponding to the contact information of the first contact in the first permission as the first sub-permission, it can reduce the situation where the permission that the user does not require is determined as the first sub-permission due to user error operation, thereby reducing the situation where the first application obtains the user's privacy information.

[0180] Optionally, in an embodiment of the present application, the first privacy information is the contact information of the first contact, and the contact information of the first contact includes at least one first contact method. Figure 1 ,like Fig.12 As shown, before "granting the first sub-authority to the first application, or stopping granting the first sub-authority to the first application" in the above step 203, the permission management method provided in the embodiment of the present application also includes the following steps 501 to 503, and the above step 203 can be specifically implemented through the following step 203c.

[0181] Step 501: In response to a first input, the electronic device displays M permission sub-entries when an input parameter of the first input matches a second predetermined input parameter.

[0182] In the embodiment of the present application, each of the M permission sub-entries is used to describe the content of a first contact method, and M is a positive integer.

[0183] Optionally, in the embodiment of the present application, the above input parameters may include but are not limited to input duration, input type, input pressure value, and input trajectory. The above second predetermined input parameters may include but are not limited to predetermined input duration, predetermined input type, predetermined input pressure value, and predetermined input trajectory.

[0184] In some examples, the input parameter may be an input type, and the second predetermined input parameter may be a predetermined input type.

[0185] The above-mentioned predetermined input type may include but is not limited to a double-click input type and a single-click input type.

[0186] It can be understood that the second predetermined input parameter is different from the first predetermined input parameter.

[0187] Optionally, in an embodiment of the present application, the electronic device may first determine M first contact methods from the contact information of the first contact, and then generate a permission sub-entry according to each first contact method, and display each permission sub-entry. The number M may be set by the user, determined by the electronic device, or configured by other devices.

[0188] In some examples, the electronic device may determine the information content of each of the M first contact methods as a permission sub-entry, so as to generate M permission sub-entries.

[0189] Exemplarily, assuming that the contact information of the first contact includes the contact information "Contact: Zhang San, phone number: 1888888888, email address aaa@bbb.com, home address: District C, City B, Province A", the electronic device can determine the contact information "phone number: 1888888888" as one permission sub-entry, and determine the contact information "email address aaa@bbb.com" as another permission sub-entry, and determine the contact information "home address: District C, City B, Province A" as yet another permission sub-entry.

[0190] Optionally, in the embodiment of the present application, the electronic device may display the M permission sub-items in a second display form, wherein the second display form includes but is not limited to a bubble display form and a bullet screen display form.

[0191] It can be understood that the second display form and the first display form can be the same or different.

[0192] Optionally, in the embodiment of the present application, the electronic device may also display an application identifier of the first application.

[0193] In some examples, the application identifier of the first application may be connected to the M permission sub-entries via a line.

[0194] For example, combining Figure 2B ,like Fig.13 As shown, when the input parameters of the first input match the second predetermined input parameters, for example, when the input type of the first input is a single-click input type, the mobile phone can update N bubbles to M bubbles, such as bubble 43, bubble 44 and bubble 45, wherein bubble 43 includes the "telephone number: 1888888888" permission sub-entry, bubble 44 includes the "email address aaa@bbb.com" permission sub-entry, and bubble 45 includes the "home address: a province b city c district" permission sub-entry, so that the user can make a second input.

[0195] Step 502: The electronic device receives a second input of a first permission sub-entry among the M permission sub-entries.

[0196] In the embodiment of the present application, the second input is used to select the permission sub-item required by the user.

[0197] Optionally, in the embodiment of the present application, the second input includes but is not limited to: a user touch-control input to the first electronic device through a touch-control device such as a finger or a stylus, or a voice command input by the user, or a specific gesture input by the user, or other feasible input. The specific input can be determined according to actual use requirements and is not limited in the embodiment of the present application.

[0198] In some examples, the touch input may be a single-click input, a double-click input, or any number of click inputs, or may be a long-press input, a short-press input, or the like.

[0199] In some examples, the above-mentioned specific gesture can be any one of a single-click gesture, a sliding gesture, a drag gesture, a pressure recognition gesture, a long press gesture, an area change gesture, a double-press gesture, and a double-click gesture.

[0200] For example, the second input may be a single click input.

[0201] In the embodiment of the present application, the above-mentioned first permission sub-item corresponds to the second contact information among the M first contact information.

[0202] Step 503: In response to the second input, the electronic device determines the information acquisition permission corresponding to the second contact method in the first permission as the first sub-permission.

[0203] Optionally, in the embodiment of the present application, the above-mentioned information acquisition authority corresponding to the second contact method can be understood as: acquisition authority of the second contact method.

[0204] Step 203c: The electronic device grants the first sub-authority to the first application, or stops granting the first sub-authority to the first application.

[0205] It should be noted that, for instructions on the electronic device granting the first sub-permission to the first application, or stopping granting the first sub-permission to the first application, reference can be made to the specific description in the above embodiment, and the embodiments of the present application will not be repeated here.

[0206] For example, combining Figure 2B ,like Fig.14A As shown, the user can perform a second input on the bubble 43, such as double-click input; Fig. 14B As shown, after the user double-clicks the bubble 43, the mobile phone can stop granting the first application the information acquisition authority corresponding to the contact information of "phone number: 1888888888" and gray out the bubble 43.

[0207] It should be noted that the mobile phone can also grant the first application the information acquisition authority corresponding to the contact information of "phone number: 1888888888" and light up the bubble 43. Fig. 14B In the figure, the mobile phone stops granting the information acquisition authority corresponding to the contact information of "phone number: 1888888888" to the first application, and grays out the bubble 43 for indication.

[0208] Thus, it can be known that when the first privacy information is the contact information of the first contact, since the electronic device can first display M permission sub-entries when the input parameter of the first input matches the second predetermined input parameter, so that the user can clearly know the specific content of each first contact method included in the contact information of the first contact, so that the user can accurately select the first permission sub-entry indicating non-sensitive privacy information, so that the electronic device can accurately grant the information acquisition permission corresponding to the non-sensitive privacy information to the first application, or no longer grant the information acquisition permission corresponding to the non-sensitive privacy information to the first application. Therefore, while ensuring that the first application can obtain the required privacy information, it can reduce the situation where the first application obtains sensitive privacy information and reduce the probability of leakage of sensitive privacy information. In this way, the security of the electronic device can be improved while ensuring that the first application can obtain the required privacy information.

[0209] Optionally, in the embodiment of the present application, the first privacy information is the first location information. Figure 1 ,like Fig.15 As shown, before "granting the first sub-authority to the first application, or stopping granting the first sub-authority to the first application" in the above step 203, the permission management method provided in the embodiment of the present application also includes the following step 601, and the above step 203 can be specifically implemented through the following step 203d.

[0210] Step 601: The electronic device determines the information acquisition permission corresponding to the first location information in the first permission as the first sub-permission.

[0211] Optionally, in the embodiment of the present application, the above-mentioned information acquisition authority corresponding to the first location information can be understood as: the acquisition authority of the first location information.

[0212] Step 203d: The electronic device grants the first sub-authority to the first application, or stops granting the first sub-authority to the first application.

[0213] It should be noted that, for instructions on the electronic device granting the first sub-permission to the first application, or stopping granting the first sub-permission to the first application, reference can be made to the specific description in the above embodiment, and the embodiments of the present application will not be repeated here.

[0214] For example, Fig.16A As shown, the mobile phone displays N bubbles, such as bubble 46, bubble 47 and bubble 48, bubble 46 includes the permission entry "one hour ago: a community b building", bubble 47 includes the permission entry "one day ago: c mall d store", and bubble 48 includes the permission entry "three days ago: e city f subway station", so that the user can make a first input, such as double-clicking bubble 46. Fig. 16B As shown, after the user double-clicks bubble 46, the mobile phone can stop granting the first application the information acquisition authority corresponding to the location information "one hour ago: community a, building b" and gray out bubble 46.

[0215] As can be seen, since the electronic device can determine the information acquisition permission corresponding to the first location information in the first permission as the first sub-permission, and grant the first sub-permission to the first application, or stop granting the first sub-permission to the first application. Instead of directly granting all location information to the first application, or stopping granting all location information to the first application. Therefore, while ensuring that the first application can obtain the required location information, it is possible to reduce the possibility of the first application obtaining sensitive location information and reduce the probability of leakage of sensitive location information. In this way, the security of the electronic device can be improved while ensuring that the first application can obtain the required privacy information.

[0216] Optionally, in an embodiment of the present application, the first privacy information is first photographed picture information, and the first photographed picture information is collected by a first camera of the electronic device. Figure 1 ,like Fig.17 As shown, before "granting the first sub-authority to the first application, or stopping granting the first sub-authority to the first application" in the above step 203, the permission management method provided in the embodiment of the present application also includes the following step 701, and the above step 203 can be specifically implemented through the following step 203e.

[0217] Step 701: The electronic device determines the camera use permission corresponding to the first camera in the first permission as the first sub-permission.

[0218] In the embodiment of the present application, the first camera includes but is not limited to: a front camera, a rear camera, etc. The specific camera can be determined according to actual use requirements, and the embodiment of the present application does not limit it.

[0219] Step 203e: The electronic device grants the first sub-authority to the first application, or stops granting the first sub-authority to the first application.

[0220] It should be noted that, for instructions on the electronic device granting the first sub-permission to the first application, or stopping granting the first sub-permission to the first application, reference can be made to the specific description in the above embodiment, and the embodiments of the present application will not be repeated here.

[0221] It can be seen that the electronic device determines the camera usage permission corresponding to the first camera in the first permission as the first sub-permission, and grants the first sub-permission to the first application, or stops granting the first sub-permission to the first application. Instead of directly granting all camera usage permissions to the first application, or stopping granting all camera usage permissions to the first application. Therefore, while ensuring that the first application can obtain the required camera usage permission, it can reduce the situation where the first application obtains sensitive image information through the camera, and reduce the probability of leakage of sensitive image information. In this way, the security of the electronic device can be improved while ensuring that the first application can obtain the required privacy information.

[0222] The execution subject of the rights management method provided in the embodiment of the present application may be a rights management device. In the embodiment of the present application, the rights management device provided in the embodiment of the present application is described by taking the rights management device executing the rights management method as an example.

[0223] Fig.18 The schematic diagram of the structure of the rights management device provided by the embodiment of the present application is shown. Fig.18 As shown, the rights management device 800 provided in the embodiment of the present application may include: a display module 801 , a receiving module 802 and a processing module 803 .

[0224] Among them, the display module 801 is used to display N permission entries, each permission entry is used to describe a privacy information associated with the first permission of the first application, and N is a positive integer. The receiving module 802 is used to receive a first input of a first permission entry among the N permission entries displayed by the display module 801, and the first permission entry corresponds to the first privacy information among the N privacy information. The processing module 803 is used to grant the first sub-permission to the first application in response to the first input received by the receiving module 802, or stop granting the first sub-permission to the first application, and the first sub-permission is a sub-permission in the first permission related to the first privacy information.

[0225] The embodiment of the present application provides a permission management device. Since the permission management device can display N permission entries, and each permission entry in the N permission entries is used to describe a privacy information associated with the first permission of the first application, the user can clearly know the specific content of the N privacy information associated with the first permission based on the N permission entries, instead of being unable to know the specific content of the N privacy information associated with the first permission as in the related art. Therefore, the user can make a first input to the first permission entry in the N permission entries, for example, make a first input to the first permission entry associated with non-sensitive privacy information (i.e., the first privacy information) in the N permission entries, so that the permission management device can accurately grant the sub-permission related to the non-sensitive privacy information in the first permission to the first application, instead of directly granting the first permission to the first application, thereby reducing the situation where the first application obtains sensitive privacy information and reducing the probability of leakage of sensitive privacy information. Alternatively, the user can make a first input to the first permission entry among the N permission entries, for example, make a first input to the first permission entry associated with sensitive privacy information (i.e., the first privacy information) among the N permission entries, so that the permission management device can accurately stop granting the sub-permission related to the sensitive privacy information in the first permission to the first application, instead of directly stopping granting the first permission to the first application, thereby ensuring that the first application can obtain the required privacy information while reducing the possibility of the first application obtaining the sensitive privacy information and reducing the probability of leakage of the sensitive privacy information. In this way, while ensuring that the first application can obtain the required privacy information, the security of the privacy information protection of the permission management device when granting the application permission to the application can be improved.

[0226] In a possible implementation, the first permission includes at least one of the following: contact access permission, location permission, and camera shooting permission; the N privacy information include at least one of the following: contact information of at least one contact, at least one location information, and at least one captured picture information; each location information is used to indicate the user's geographical location within a time period, and each captured picture information is collected by a camera of the permission management device 800.

[0227] In a possible implementation, the first privacy information is the contact information of the first contact. The processing module 803 is further configured to, before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application, determine the information acquisition permission corresponding to the contact information of the first contact in the first permission as the first sub-permission if the input parameter of the first input matches the first predetermined input parameter.

[0228] In a possible implementation, the first privacy information is the contact information of the first contact, and the contact information of the first contact includes at least one first contact method. The display module 801 is also used to display M permission sub-entries when the input parameter of the first input matches the second predetermined input parameter before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application. Each permission sub-entry is used to describe the content of a first contact method, and M is a positive integer. The receiving module 802 is also used to receive a second input of a first permission sub-entry among the M permission sub-entries displayed by the display module 801, and the first permission sub-entry corresponds to the second contact method among the M first contact methods. The processing module 803 is also used to determine the information acquisition permission corresponding to the second contact method in the first permission as the first sub-permission in response to the second input received by the receiving module 802.

[0229] In a possible implementation, the first privacy information is the first location information. The processing module 803 is further configured to determine the information acquisition permission corresponding to the first location information in the first permission as the first sub-permission before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application.

[0230] In a possible implementation, the first privacy information is first captured picture information, and the first captured picture information is collected by the first camera of the permission management device 800. The processing module 803 is further configured to determine the camera use permission corresponding to the first camera in the first permission as the first sub-permission before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application.

[0231] In a possible implementation, the display module 801 is further used to display a first application identifier and T permission identifiers before displaying N permission entries, wherein the first application identifier is used to indicate a first application, and each permission identifier is used to indicate a permission of the first application, and T is a positive integer. The receiving module 802 is further used to receive a third input of a first permission identifier among the T permission identifiers displayed by the display module 801, wherein the first permission identifier is used to indicate a first permission. The display module 801 is specifically used to display N permission entries in response to the third input received by the receiving module 802.

[0232] In a possible implementation, the display module 801 is specifically used to display the second permission identifier in a first display mode, and to display the third permission identifier in a second display mode; wherein the second permission identifier is a permission identifier among T permission identifiers used to indicate sensitive permissions, and the third permission identifier is a permission identifier among T permission identifiers used to indicate non-sensitive permissions.

[0233] In one possible implementation, the display module 801 is specifically used to display a second permission identifier in a first display area of ​​a display screen of the permission management device 800, and to display a fourth permission identifier in a second display area of ​​the display screen; wherein the second permission identifier is an authority identifier among T authority identifiers used to indicate sensitive authority, and the fourth authority identifier is an authority identifier among T authority identifiers used to indicate non-sensitive authority.

[0234] In a possible implementation, the processing module 803 is specifically used to stop granting the first sub-permission to the first application when the first application has been granted the first sub-permission; or to grant the first sub-permission to the first application when the first application has not been granted the first sub-permission.

[0235] The rights management device in the embodiment of the present application can be an electronic device, or a component in the electronic device, such as an integrated circuit or a chip. The electronic device can be a terminal, or other devices other than a terminal. Exemplarily, the electronic device can be a mobile phone, a tablet computer, a laptop computer, a PDA, a vehicle-mounted electronic device, a mobile Internet device (Mobile Internet Device, MID), an augmented reality (augmented reality, AR) / virtual reality (virtual reality, VR) device, a robot, a wearable device, an ultra-mobile personal computer (ultra-mobile personal computer, UMPC), a netbook or a personal digital assistant (personal digital assistant, PDA), etc., and can also be a server, a network attached storage (Network Attached Storage, NAS), a personal computer (personal computer, PC), a television (television, TV), a teller machine or a self-service machine, etc., which is not specifically limited in the embodiment of the present application.

[0236] The rights management device in the embodiment of the present application may be a device having an operating system. The operating system may be an Android operating system, an iOS operating system, or other possible operating systems, which are not specifically limited in the embodiment of the present application.

[0237] The rights management device provided in the embodiment of the present application can achieve Figures 1 to 17 To avoid repetition, the various processes implemented by the method embodiment are not described here.

[0238] Alternatively, if Fig.19As shown, an embodiment of the present application also provides an electronic device 900, including a processor 901 and a memory 902, wherein the memory 902 stores programs or instructions that can be executed on the processor 901, and when the program or instructions are executed by the processor 901, the various steps of the above-mentioned permission management method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, they are not repeated here.

[0239] It should be noted that the electronic devices in the embodiments of the present application include the above-mentioned mobile electronic devices and non-mobile electronic devices.

[0240] Fig. 20 A schematic diagram of the hardware structure of an electronic device to implement an embodiment of the present application.

[0241] The electronic device 100 includes but is not limited to components such as a radio frequency unit 101, a network module 102, an audio output unit 103, an input unit 104, a sensor 105, a display unit 106, a user input unit 107, an interface unit 108, a memory 109, and a processor 110.

[0242] Those skilled in the art will appreciate that the electronic device 100 may also include a power source (such as a battery) for supplying power to various components, and the power source may be logically connected to the processor 110 through a power management system, thereby implementing functions such as managing charging, discharging, and power consumption management through the power management system. Fig. 20 The electronic device structure shown in the figure does not constitute a limitation on the electronic device. The electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently, which will not be described in detail here.

[0243] The display unit 106 is used to display N permission entries, each permission entry is used to describe a privacy information associated with the first permission of the first application, and N is a positive integer.

[0244] The user input unit 107 is used to receive a first input of a first permission entry among the N permission entries, where the first permission entry corresponds to a first privacy information among the N privacy information.

[0245] The processor 110 is configured to grant a first sub-permission to a first application in response to a first input, or stop granting the first sub-permission to the first application, where the first sub-permission is a sub-permission in the first permission related to the first privacy information.

[0246] The embodiment of the present application provides an electronic device, since the electronic device can display N permission entries, and each permission entry in the N permission entries is used to describe a privacy information associated with the first permission of a first application, so that the user can clearly know the specific content of the N privacy information associated with the first permission based on the N permission entries, instead of being unable to know the specific content of the N privacy information associated with the first permission as in the related art. Therefore, the user can make a first input to the first permission entry in the N permission entries, for example, make a first input to the first permission entry associated with non-sensitive privacy information (i.e., the first privacy information) in the N permission entries, so that the electronic device can accurately grant the sub-permission related to the non-sensitive privacy information in the first permission to the first application, instead of directly granting the first permission to the first application, thereby reducing the situation where the first application obtains sensitive privacy information and reducing the probability of leakage of sensitive privacy information. Alternatively, the user can make a first input to the first permission entry among the N permission entries, for example, make a first input to the first permission entry associated with sensitive privacy information (i.e., the first privacy information) among the N permission entries, so that the electronic device can accurately stop granting the sub-permission related to the sensitive privacy information in the first permission to the first application, instead of directly stopping granting the first permission to the first application, thereby ensuring that the first application can obtain the required privacy information while reducing the possibility of the first application obtaining the sensitive privacy information and reducing the probability of leakage of the sensitive privacy information. In this way, the security of the electronic device can be improved while ensuring that the first application can obtain the required privacy information.

[0247] Optionally, in an embodiment of the present application, the first privacy information is contact information of the first contact person.

[0248] The processor 110 is also used to determine the information acquisition permission corresponding to the contact information of the first contact in the first permission as the first sub-permission when the input parameter of the first input matches the first predetermined input parameter before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application.

[0249] Optionally, in an embodiment of the present application, the first privacy information is contact information of a first contact person, and the contact information of the first contact person includes at least one first contact method.

[0250] The processor 110 is also used to display M permission sub-entries when the input parameter of the first input matches the second predetermined input parameter before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application, each permission sub-entry is used to describe the content of a first contact method, and M is a positive integer.

[0251] The user input unit 107 is further configured to receive a second input to a first permission sub-entry among the M permission sub-entries, where the first permission sub-entry corresponds to a second contact method among the M first contact methods.

[0252] The processor 110 is further configured to, in response to the second input, determine the information acquisition permission corresponding to the second contact method in the first permission as the first sub-permission.

[0253] Optionally, in an embodiment of the present application, the first privacy information is the first location information.

[0254] The processor 110 is further configured to determine, as the first sub-authority, the information acquisition authority corresponding to the first location information in the first permission before granting the first sub-authority to the first application or stopping granting the first sub-authority to the first application.

[0255] Optionally, in an embodiment of the present application, the first privacy information is first captured picture information, and the first captured picture information is collected by a first camera of the electronic device.

[0256] The processor 110 is further configured to determine the camera use permission corresponding to the first camera in the first permission as the first sub-permission before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application.

[0257] Optionally, in an embodiment of the present application, the display unit 106 is further used to display a first application identifier and T permission identifiers before displaying N permission entries, where the first application identifier is used to indicate a first application, and each permission identifier is used to indicate a permission of the first application, and T is a positive integer.

[0258] The user input unit 107 is further used to receive a third input of a first authority identifier among the T authority identifiers, where the first authority identifier is used to indicate a first authority.

[0259] The display unit 106 is specifically configured to display N permission entries in response to the third input.

[0260] Optionally, in the embodiment of the present application, the display unit 106 is specifically configured to display the second permission identifier in a first display manner, and to display the third permission identifier in a second display manner.

[0261] Among them, the above-mentioned second permission identifier is a permission identifier used to indicate a sensitive permission among the T permission identifiers, and the above-mentioned third permission identifier is a permission identifier used to indicate a non-sensitive permission among the T permission identifiers.

[0262] Optionally, in the embodiment of the present application, the display unit 106 is specifically configured to display the second permission identification in a first display area of ​​a display screen of the electronic device, and to display the fourth permission identification in a second display area of ​​the display screen.

[0263] Among them, the above-mentioned second permission identifier is a permission identifier used to indicate a sensitive permission among the T permission identifiers, and the above-mentioned fourth permission identifier is a permission identifier used to indicate a non-sensitive permission among the T permission identifiers.

[0264] Optionally, in an embodiment of the present application, the processor 110 is specifically configured to stop granting the first sub-permission to the first application when the first application has been granted the first sub-permission; or, grant the first sub-permission to the first application when the first application has not been granted the first sub-permission.

[0265] It should be understood that in the embodiment of the present application, the input unit 104 may include a graphics processor (Graphics Processing Unit, GPU) 1041 and a microphone 1042, and the graphics processor 1041 processes the image data of a static picture or video obtained by an image capture device (such as a camera) in a video capture mode or an image capture mode. The display unit 106 may include a display panel 1061, and the display panel 1061 may be configured in the form of a liquid crystal display, an organic light emitting diode, etc. The user input unit 107 includes a touch panel 1071 and at least one of other input devices 1072. The touch panel 1071 is also called a touch screen. The touch panel 1071 may include two parts: a touch detection device and a touch controller. Other input devices 1072 may include, but are not limited to, a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, and a joystick, which will not be repeated here.

[0266] The memory 109 can be used to store software programs and various data. The memory 109 may mainly include a first storage area for storing programs or instructions and a second storage area for storing data, wherein the first storage area may store an operating system, an application program or instructions required for at least one function (such as a sound playback function, an image playback function, etc.), etc. In addition, the memory 109 may include a volatile memory or a non-volatile memory, or the memory 109 may include both volatile and non-volatile memories. Among them, the non-volatile memory may be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically erasable programmable read-only memory (EEPROM), or a flash memory. The volatile memory may be a random access memory (RAM), a static random access memory (SRAM), a dynamic random access memory (DRAM), a synchronous dynamic random access memory (SDRAM), a double data rate synchronous dynamic random access memory (DDRSDRAM), an enhanced synchronous dynamic random access memory (ESDRAM), a synchronous link dynamic random access memory (SLDRAM) and a direct memory bus random access memory (DRRAM). The memory 109 in the embodiment of the present application includes but is not limited to these and any other suitable types of memory.

[0267] The processor 110 may include one or more processing units; optionally, the processor 110 integrates an application processor and a modem processor, wherein the application processor mainly processes operations related to an operating system, a user interface, and application programs, and the modem processor mainly processes wireless communication signals, such as a baseband processor. It is understandable that the modem processor may not be integrated into the processor 110.

[0268] An embodiment of the present application also provides a readable storage medium, on which a program or instruction is stored. When the program or instruction is executed by a processor, the various processes of the above-mentioned permission management method embodiment are implemented, and the same technical effect can be achieved. To avoid repetition, it will not be repeated here.

[0269] The processor is the processor in the electronic device described in the above embodiment. The readable storage medium includes a computer readable storage medium, such as a computer read-only memory ROM, a random access memory RAM, a magnetic disk or an optical disk.

[0270] An embodiment of the present application further provides a chip, which includes a processor and a communication interface, wherein the communication interface is coupled to the processor, and the processor is used to run programs or instructions to implement the various processes of the above-mentioned permission management method embodiment, and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0271] It should be understood that the chip mentioned in the embodiments of the present application can also be called a system-level chip, a system chip, a chip system or a system-on-chip chip, etc.

[0272] An embodiment of the present application provides a computer program product, which is stored in a storage medium. The program product is executed by at least one processor to implement the various processes of the above-mentioned permission management method embodiment and can achieve the same technical effect. To avoid repetition, it will not be repeated here.

[0273] It should be noted that, in this article, the terms "comprise", "include" or any other variant thereof are intended to cover non-exclusive inclusion, so that the process, method, article or device including a series of elements includes not only those elements, but also includes other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise one..." do not exclude the presence of other identical elements in the process, method, article or device including the element. In addition, it should be pointed out that the scope of the methods and devices in the embodiments of the present application is not limited to performing functions in the order shown or discussed, and may also include performing functions in a substantially simultaneous manner or in reverse order according to the functions involved, for example, the described method may be performed in an order different from that described, and various steps may also be added, omitted, or combined. In addition, the features described with reference to certain examples may be combined in other examples.

[0274] Through the description of the above implementation methods, those skilled in the art can clearly understand that the above-mentioned embodiment methods can be implemented by means of software plus a necessary general hardware platform, and of course by hardware, but in many cases the former is a better implementation method. Based on such an understanding, the technical solution of the present application, or the part that contributes to the prior art, can be embodied in the form of a computer software product, which is stored in a storage medium (such as ROM / RAM, a disk, or an optical disk), and includes a number of instructions for a terminal (which can be a mobile phone, a computer, a server, or a network device, etc.) to execute the methods described in each embodiment of the present application.

[0275] The embodiments of the present application are described above in conjunction with the accompanying drawings, but the present application is not limited to the above-mentioned specific implementation methods. The above-mentioned specific implementation methods are merely illustrative and not restrictive. Under the guidance of the present application, ordinary technicians in this field can also make many forms without departing from the purpose of the present application and the scope of protection of the claims, all of which are within the protection of the present application.

Claims

1. A rights management method, characterized in that: include: Displaying N permission entries, each of which is used to describe a piece of privacy information associated with a first permission of a first application, where N is a positive integer; Receiving a first input of a first permission entry among the N permission entries, the first permission entry corresponding to a first privacy information among the N privacy information; In response to the first input, a first sub-permission is granted to the first application, or the first sub-permission is no longer granted to the first application, where the first sub-permission is a sub-permission in the first permission related to the first privacy information.

2. The method according to claim 1, characterized in that The first permission includes at least one of the following: contact access permission, location permission, and camera shooting permission; The N pieces of privacy information include at least one of the following: contact information of at least one contact, at least one piece of location information, and at least one piece of captured picture information; each piece of location information is used to indicate the geographical location of the user within a time period, and each piece of captured picture information is collected by a camera of the electronic device.

3. The method according to claim 1 or 2, characterized in that: The first private information is the contact information of the first contact person; Before granting the first sub-permission to the first application, or before stopping granting the first sub-permission to the first application, the method includes: When the input parameter of the first input matches the first predetermined input parameter, the information acquisition permission corresponding to the contact information of the first contact in the first permission is determined as the first sub-permission.

4. The method according to claim 1 or 2, characterized in that: The first private information is contact information of a first contact person, and the contact information of the first contact person includes at least one first contact method; Before granting the first sub-permission to the first application, or before stopping granting the first sub-permission to the first application, the method includes: In the case where the input parameter of the first input matches the second predetermined input parameter, M permission sub-entries are displayed, each permission sub-entry is used to describe the content of a first contact method, and M is a positive integer; receiving a second input of a first permission sub-entry among the M permission sub-entries, wherein the first permission sub-entry corresponds to a second contact method among the M first contact methods; In response to the second input, the information acquisition permission corresponding to the second contact method in the first permission is determined as the first sub-authority.

5. The method according to claim 1 or 2, characterized in that: The first private information is first location information; Before granting the first sub-permission to the first application, or before stopping granting the first sub-permission to the first application, the method includes: The information acquisition permission corresponding to the first location information in the first permission is determined as the first sub-authority.

6. The method according to claim 1 or 2, characterized in that: The first privacy information is first photographed picture information, and the first photographed picture information is collected by a first camera of the electronic device; Before granting the first sub-permission to the first application, or before stopping granting the first sub-permission to the first application, the method includes: The camera use permission corresponding to the first camera in the first permission is determined as the first sub-permission.

7. The method according to claim 1, characterized in that Before displaying the N permission entries, the method further includes: Displaying the first application identifier and T permission identifiers, where the first application identifier is used to indicate the first application, each permission identifier is used to indicate a permission of the first application, and T is a positive integer; Receiving a third input of a first permission identifier among the T permission identifiers, where the first permission identifier is used to indicate the first permission; The display of N permission entries includes: In response to the third input, the N permission entries are displayed.

8. The method according to claim 7, characterized in that The display of T permission identifiers includes: The second permission identification is displayed in a first display mode, and the third permission identification is displayed in a second display mode; Among them, the second permission identifier is a permission identifier used to indicate a sensitive permission among the T permission identifiers, and the third permission identifier is a permission identifier used to indicate a non-sensitive permission among the T permission identifiers.

9. A rights management device, characterized in that: The rights management device comprises: a display module, a receiving module and a processing module; The display module is used to display N permission entries, each of which is used to describe a piece of privacy information associated with the first permission of the first application, and N is a positive integer; The receiving module is configured to receive a first input of a first permission entry among the N permission entries displayed by the display module, wherein the first permission entry corresponds to a first privacy information among the N privacy information; The processing module is configured to grant a first sub-permission to the first application or stop granting the first sub-permission to the first application in response to the first input received by the receiving module, wherein the first sub-permission is a sub-permission in the first permission related to the first privacy information.

10. The device according to claim 9, characterized in that The first permission includes at least one of the following: contact access permission, location permission, and camera shooting permission; The N pieces of privacy information include at least one of the following: contact information of at least one contact, at least one piece of location information, and at least one piece of captured picture information; each piece of location information is used to indicate the geographical location of the user within a time period, and each piece of captured picture information is collected by a camera of the electronic device.

11. The device according to claim 9 or 10, characterized in that The first private information is the contact information of the first contact person; The processing module is further configured to, before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application, determine, when an input parameter of the first input matches a first predetermined input parameter, an information acquisition permission corresponding to the contact information of the first contact in the first permission as the first sub-permission.

12. The device according to claim 9 or 10, characterized in that The first private information is contact information of a first contact person, and the contact information of the first contact person includes at least one first contact method; The display module is further configured to display M permission sub-entries before granting the first sub-permission to the first application or before stopping granting the first sub-permission to the first application, when the input parameter of the first input matches the second predetermined input parameter, each permission sub-entry is used to describe the content of a first contact method, and M is a positive integer; The receiving module is further configured to receive a second input of a first permission sub-item among the M permission sub-items displayed by the display module, wherein the first permission sub-item corresponds to a second contact method among the M first contact methods; The processing module is further configured to, in response to the second input received by the receiving module, determine the information acquisition permission corresponding to the second contact method in the first permission as the first sub-permission.

13. The device according to claim 9 or 10, characterized in that The first private information is first location information; The processing module is further configured to determine, as the first sub-authority, an information acquisition authority corresponding to the first location information in the first permission before granting the first sub-authority to the first application or stopping granting the first sub-authority to the first application.

14. The device according to claim 9 or 10, characterized in that The first privacy information is first photographed picture information, and the first photographed picture information is collected by a first camera of the electronic device; The processing module is further configured to determine, as the first sub-permission, a camera usage permission corresponding to the first camera in the first permission before granting the first sub-permission to the first application or stopping granting the first sub-permission to the first application.

15. The device according to claim 9, characterized in that The display module is further used to display the first application identifier and T permission identifiers before displaying the N permission entries, wherein the first application identifier is used to indicate the first application, each permission identifier is used to indicate a permission of the first application, and T is a positive integer; The receiving module is further configured to receive a third input of a first permission identifier among the T permission identifiers displayed by the display module, wherein the first permission identifier is used to indicate the first permission; The display module is specifically configured to display the N permission entries in response to the third input received by the receiving module.

16. The device according to claim 15, characterized in that The display module is specifically used to display the second authority identification in a first display mode, and to display the third authority identification in a second display mode; Among them, the second permission identifier is a permission identifier used to indicate a sensitive permission among the T permission identifiers, and the third permission identifier is a permission identifier used to indicate a non-sensitive permission among the T permission identifiers.

Images