Permission configuration method, equipment and medium

Abstract

The invention provides a permission configuration method and device and a medium, and belongs to the technical field of intelligent terminals.The permission configuration method comprises the steps that in response to an access request of an application for sensitive content, a permission configuration pop-up window is displayed, the permission configuration pop-up window comprises an area used for displaying and selecting the sensitive content, and the area is used for displaying and selecting the sensitive content; the first control allows the selected sensitive content to be provided for the application; in response to triggering the first control, determining the selected sensitive content; and allowing an access request of the application to the selected sensitive content.

Description

Technical Field

[0001] The present invention relates to the field of intelligent terminal technology, and in particular to a permission configuration method, device and medium. Background Art

[0002] As a key link in protecting user privacy and security, the management of data permissions has received widespread attention, and an interactive data permission configuration mechanism has emerged.

[0003] The current data permission configuration mechanism usually sets two options, "Allow" and "Deny", for users to choose, where "Allow" and "Deny" are both for the authorization of all data. This mechanism has poor flexibility, especially when it comes to some functions that only require the permission of individual data. Allowing the authorization of all data will bring additional data abuse risks, while denying the authorization of all data will make the function unavailable. Summary of the invention

[0004] In a first aspect, an embodiment of the present application provides a method for configuring permissions, including: In response to an application's request for access to sensitive content, displaying a permission configuration pop-up window, the permission configuration pop-up window comprising an area for displaying and selecting sensitive content, and a first control for allowing the selected sensitive content to be provided to the application; In response to triggering the first control, determining the selected sensitive content; and The application's request to access the selected sensitive content is allowed.

[0005] In some embodiments, the permission configuration pop-up window further includes: a second control that denies providing any sensitive content to the application and / or a third control that allows providing all sensitive content to the application; The method further comprises: In response to triggering the second control or determining that the selected sensitive content is empty, denying the application's access request to any sensitive content; or In response to triggering the third control, the application is allowed to request access to all sensitive contents.

[0006] In some embodiments, the region includes a selection control corresponding to each sensitive content; The method further comprises: In response to triggering the selection control for the first time, selecting sensitive content corresponding to the selection control; In response to triggering the selection control again, the sensitive content corresponding to the selection control is deselected.

[0007] In some embodiments, the permission configuration pop-up window further includes a fourth control for searching the sensitive content; The method further comprises: A search term is input in the fourth control, sensitive content associated with the input search term is determined from the sensitive content, and the sensitive content associated with the input search term is displayed in the area.

[0008] In some embodiments, the permission configuration pop-up window further includes a fifth control for obtaining a class of the sensitive content; The method further comprises: In response to triggering the fifth control, a selected sensitive content type is determined, corresponding sensitive content is acquired from the sensitive content based on the selected sensitive content type, and the corresponding sensitive content is displayed in the area.

[0009] In some embodiments, the second control is set at the top of the permission configuration pop-up window; The method further comprises: In response to triggering the second control, closing the permission configuration pop-up window.

[0010] In some embodiments, in the first permission management mode, the application is an untrusted application, and in the second permission management mode, the application includes an untrusted application and a trusted application, and the method further includes: A sliding instruction in the area is received, and different sensitive contents are displayed in the area based on the sliding instruction.

[0011] In some embodiments, the permission configuration pop-up window is displayed in the lower half of the window.

[0012] In a second aspect, an embodiment of the present application further provides an electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein when the processor executes the program, a permission configuration method as described above is implemented.

[0013] In a third aspect, an embodiment of the present application further provides a non-transitory computer-readable storage medium on which a computer program is stored, and when the computer program is executed by a processor, the permission configuration method as described above is implemented.

[0014] In a fourth aspect, an embodiment of the present application further provides a computer program product, including a computer program, which, when executed by a processor, implements any of the permission configuration methods described above. BRIEF DESCRIPTION OF THE DRAWINGS

[0015] In order to more clearly illustrate the technical solutions in the present invention or related technologies, the following briefly introduces the drawings required for use in the embodiments or related technical descriptions. Obviously, the drawings described below are some embodiments of the present invention. For ordinary technicians in this field, other drawings can be obtained based on these drawings without paying creative work.

[0016] Figure 1 This is one of the interface diagrams for permission configuration in the related art.

[0017] Figure 2 This is the second interface diagram of permission configuration in the related technology.

[0018] Figure 3 This is the third interface diagram for permission configuration in related technologies.

[0019] Figure 4 It is a schematic diagram of the structure of the terminal provided in the embodiment of the present application.

[0020] Figure 5 It is a flowchart of the permission configuration method provided in the embodiment of the present application.

[0021] Figure 6 This is one of the interface diagrams of the window provided in the embodiment of the present application.

[0022] Figure 7 This is the second interface diagram of the window provided in the embodiment of the present application.

[0023] Figure 8 This is the third interface diagram of the window provided in the embodiment of the present application.

[0024] Fig. 9 This is the fourth interface diagram of the window provided in the embodiment of the present application.

[0025] Fig.10 This is the fifth interface diagram of the window provided in the embodiment of the present application.

[0026] Fig.11 This is the sixth interface diagram of the window provided in the embodiment of the present application.

[0027] Fig.12 It is a schematic diagram of the structure of an electronic device provided in an embodiment of the present application. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solution and advantages of the present invention clearer, the technical solution of the present invention will be clearly and completely described below in conjunction with the drawings of the present invention. Obviously, the described embodiments are part of the embodiments of the present invention, not all of the embodiments. Based on the embodiments of the present invention, all other embodiments obtained by ordinary technicians in this field without creative work are within the scope of protection of the present invention.

[0029] The terms "first", "second", etc. in the specification and claims of the present application are used to distinguish similar objects, and are not used to describe a specific order or sequence. It should be understood that the terms used in this way are interchangeable under appropriate circumstances, so that the embodiments of the present application can be implemented in an order other than those illustrated or described here, and the objects distinguished by "first" and "second" are generally of the same type, and the number of objects is not limited. For example, the first object can be one or more. In addition, "and / or" in the specification and claims represents at least one of the connected objects, and the character " / " generally represents that the objects associated with each other are in an "or" relationship.

[0030] As a key link in protecting user privacy and security, the management of data permissions has received widespread attention, and an interactive data permission configuration mechanism has emerged.

[0031] The current data permission configuration mechanism can generally be divided into three categories.

[0032] One type of mechanism is to set two options of "Allow" and "Deny" for users to choose. This type of mechanism is commonly seen in the permission configuration other than "Access Pictures" in the Android system, or in the permission configuration other than "Access Pictures" and "Access Contacts" in the IOS system. "Allow" and "Deny" are both for the authorization of all data, that is, selecting "Allow" means authorizing the use of all data, and selecting "Deny" means prohibiting the use of all data. This mechanism has poor flexibility, especially for some functions that only require permissions for individual data. Allowing the authorization of all data will bring additional risks of data abuse, and rejecting the authorization of all data will make the function unavailable.

[0033] The other type is to set three options of "Allow", "Deny" and "Select Data" for users to choose. This type of mechanism is commonly seen in the permission configuration of "Access Pictures" in the Android system, or in the permission configuration of "Access Pictures" and "Access Contacts" in the IOS system. "Allow" and "Deny" are both for the authorization of all data, that is, selecting "Allow" means authorizing the use of all data, and selecting "Deny" means prohibiting the use of all data. "Select Data" allows users to manually select some data to authorize the use of permissions.

[0034] For example, Figure 1 This is one of the interface diagrams for permission configuration in the related technology. Figure 1 The configuration interface of contact permissions is shown as an example, where "Select Contact" is a control for selecting a contact, "Allow access to all contacts" is a control for authorizing all contacts, and the arrow in the upper left corner is used to close the Figure 1 The controls of the contact permission configuration interface (equivalent to denying usage permissions to all contacts) are shown.

[0035] For example, Figure 2 The second interface diagram of permission configuration in related technology. Figure 2 The photo permission configuration interface is shown, where "Select photo..." is a control for selecting photos. Touching this control will enter the picture selector interface to select photos that require authorization. "Allow access to all photos" is a control for authorizing access to all photos, and "Don't allow" is used to deny access to all photos and close the control. Figure 2 The pop-up window interface shown.

[0036] Depend on Figure 1 , 2 It can be seen that although setting the "Select Data" option can enhance the flexibility of data permission management, data selection will jump to a new interface, which will introduce deeper interaction problems and lead to greater interaction costs. For example, the system is required to provide more interaction interfaces (such as a jump selection interface) instead of solving data permission management within one interaction interface, which increases the complexity of interaction and increases the system's resource overhead.

[0037] In addition, due to the high cost of understanding, the frequency of using "Select Data" is not high, and some users may still directly choose "Allow", leading to data abuse.

[0038] Another type is to set three options of "Allow", "Deny" and "Provide Empty Information" for users to choose. For example, Figure 3 This is the third interface diagram of permission configuration in the related technology, such as Figure 3 As shown, "Allow" and "Reject" are both for the authorization of all data, while "Provide Empty Information" means providing a set of blank or invalid information to replace the real data. This mechanism also has the problem of poor flexibility.

[0039] To this end, the present application provides a permission configuration method, which, in response to an application's access request to sensitive content, displays an area for displaying and selecting sensitive content, and a first control that allows the selected sensitive content to be provided to the application, thereby allowing images, contacts or other sensitive content requested by the application to be displayed in the permission configuration interface, and the user can directly select sensitive content in the permission configuration pop-up window without having to jump to an interface for displaying and selecting sensitive content. While achieving fine-grained permission configuration, the interaction level of permission configuration is reduced, making the implementation of permission configuration more intuitive and convenient, and can effectively avoid the problem of data abuse.

[0040] The permission configuration method provided in the embodiments of the present application can be applied to electronic devices, specifically to mobile phones, tablet computers, wearable devices, vehicle-mounted devices, augmented reality (AR) / virtual reality (VR) devices, laptop computers, ultra-mobile personal computers (UMPC), netbooks, personal digital assistants (PDA) and other terminals. It can also be applied to databases, servers and service response systems based on terminal artificial intelligence. The embodiments of the present application do not impose any restrictions on the specific types of terminals.

[0041] For example, the terminal can be a station (STAION, ST) in a WLAN, a cellular phone, a cordless phone, a Session Initiation Protocol (SIP) phone, a Wireless Local Loop (WLL) station, a Personal Digital Assistant (PDA) device, a handheld device with wireless communication function, a computing device or other processing device connected to a wireless modem, a computer, a laptop computer, a handheld communication device, a handheld computing device, and / or other devices for communicating on a wireless system and a next-generation communication system, such as a mobile terminal in a 5G network, a mobile terminal in a future evolved Public Land Mobile Network (PLMN) or a mobile terminal in a future evolved Non-terrestrial Network (NTN), etc.

[0042] As an example but not limitation, when the terminal is a wearable device, the wearable device can also be a general term for wearable devices that are intelligently designed and developed by applying wearable technology to daily wear, such as gloves, watches, AR (Augmented Reality) head-mounted display devices, VR (Virtual Reality) head-mounted display devices or MR (Mixed Reality) head-mounted display devices, etc., which are equipped with far-field communication modules and / or near-field communication modules.

[0043] In some embodiments, the terminal may be a Figure 4 The mobile phone 100 of the hardware structure shown in FIG. Figure 4 As shown, the mobile phone 400 may specifically include: a radio frequency (RF) circuit 410, a memory 420, an input unit 430, a display unit 440, a sensor 450, an audio circuit 460, a short-range wireless communication module 470, a processor 480, and a power supply 490. Those skilled in the art will understand that Figure 4 The structure of the mobile phone 400 shown in the figure does not constitute a limitation on the electronic device, and the electronic device may include more or fewer components than shown in the figure, or combine certain components, or arrange the components differently.

[0044] Combine the following Figure 4 A detailed introduction to the various components of the mobile phone: The RF circuit 410 can be used for receiving and sending signals during information transmission or calls. In particular, after receiving the downlink information of the base station, it is sent to the processor 480 for processing; in addition, the designed uplink data is sent to the base station. Generally, the RF circuit includes but is not limited to an antenna, at least one amplifier, a transceiver, a coupler, a low noise amplifier (Low Noise Amplifier, LNA), a duplexer, etc. In addition, the RF circuit 410 can also communicate with the network and other devices through wireless communication. The above-mentioned wireless communication can use any communication standard or protocol, and the wireless communication can include global system for mobile communications (global system for mobile communications, GSM), general packet radio service (general packet radio service, GPRS), code division multiple access (code division multiple access, CDMA), wideband code division multiple access (wideband code division multiple access, WCDMA), time division code division multiple access (time-division code division multiple access, TD-SCDMA), long term evolution (long term evolution, LTE), new radio (new radio, NR), GNSS, FM, low orbit satellite connection and / or IR technology, etc. The GNSS may include a global positioning system (GPS), a global navigation satellite system (GLONASS), a Beidou navigation satellite system (BDS), a quasi-zenith satellite system (QZSS) and / or a satellite based augmentation system (SBAS), etc.

[0045] The memory 420 can be used to store software programs and modules. The processor 480 executes various functional applications and data processing of the mobile phone by running the software programs and modules stored in the memory 420. The memory 420 may mainly include a program storage area and a data storage area, wherein the program storage area may store an operating system, an application required for at least one function (such as a sound playback function, an image playback function, etc.), etc.; the data storage area may store data created according to the use of the mobile phone (such as pictures, audio data, phone books, etc.), etc. In addition, the memory 420 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one disk storage device, a flash memory device, or other volatile solid-state storage devices. Specifically, the memory 420 may store pictures taken by an electronic device or downloaded via a wireless network.

[0046] The input unit 430 can be used to receive input digital or character information, and to generate key signal input related to the user settings and function control of the mobile phone 400. Specifically, the input unit 430 may include a touch panel 431 and other input devices 432. The touch panel 431, also known as a touch screen, can collect the user's touch operation on or near it (such as the user's operation on the touch panel 431 or near the touch panel 431 using any suitable object or accessory such as a finger, stylus, etc.), and drive the corresponding connection device according to a pre-set program. Optionally, the touch panel 431 may include a touch detection device and a touch controller. Among them, the touch detection device detects the user's touch orientation, detects the signal brought by the touch operation, and transmits the signal to the touch controller; the touch controller receives the touch information from the touch detection device, converts it into the touch point coordinates, and then sends it to the processor 480, and can receive and execute the command sent by the processor 480. In addition, the touch panel 431 can be implemented in various types such as resistive, capacitive, infrared, and surface acoustic waves. In addition to the touch panel 431, the input unit 430 may also include other input devices 432. Specifically, other input devices 432 may include but are not limited to one or more of a physical keyboard, function keys (such as volume control keys, switch keys, etc.), a trackball, a mouse, a joystick, etc.

[0047] The display unit 440 can be used to display information input by the user or information provided to the user and various menus of the mobile phone. The display unit 440 may include a display panel 441. Optionally, the display panel 441 may be configured in the form of a liquid crystal display (LCD), a light emitting diode (LED), an organic light emitting diode (OLED), an active-matrix organic light emitting diode (AMOLED), etc. Further, the touch panel 431 may cover the display panel 441. When the touch panel 431 detects a touch operation on or near it, it is transmitted to the processor 480 to determine the type of touch event. Subsequently, the processor 480 provides a corresponding visual output on the display panel 441 according to the type of touch event. Although in Figure 4 In the embodiment, the touch panel 431 and the display panel 441 are used as two independent components to realize the input and output functions of the mobile phone, but in some embodiments, the touch panel 431 and the display panel 441 can be integrated to realize the input and output functions of the mobile phone.

[0048] The mobile phone 400 may also include at least one sensor 450, such as a light sensor, a motion sensor, and other sensors. Specifically, the light sensor may include an ambient light sensor and a proximity sensor, wherein the ambient light sensor may adjust the brightness of the display panel 441 according to the brightness of the ambient light, and the proximity sensor may turn off the display panel 441 and / or the backlight when the mobile phone is moved to the ear. As a type of motion sensor, the accelerometer sensor can detect the magnitude of acceleration in all directions (generally three axes), and can detect the magnitude and direction of gravity when stationary, which can be used for applications that identify the posture of the mobile phone (such as horizontal and vertical screen switching, related games, magnetometer posture calibration), vibration recognition related functions (such as pedometer, tapping), etc.; as for other sensors that can also be configured in the mobile phone, such as gyroscopes, barometers, hygrometers, thermometers, infrared sensors, etc., they will not be repeated here.

[0049] The audio circuit 460, the speaker 461, and the microphone 462 can provide an audio interface between the user and the mobile phone. The audio circuit 460 can transmit the received audio data to the speaker 461 after converting the received audio data into an electrical signal, which is converted into a sound signal for output; on the other hand, the microphone 462 converts the collected sound signal into an electrical signal, which is received by the audio circuit 460 and converted into audio data, and then the audio data is output to the processor 480 for processing, and then sent to another electronic device through the RF circuit 410, or the audio data is output to the memory 420 for further processing.

[0050] Communication technologies such as Wi-Fi, Bluetooth, and Near Field Communication (NFC) belong to short-range wireless transmission technologies. The mobile phone can help users send and receive emails, browse web pages, access streaming media, etc. through the short-range wireless module 470, which provides users with wireless broadband Internet access. The above-mentioned short-range wireless module 470 may include a Wi-Fi chip, a Bluetooth chip, and an NFC chip. The Wi-Fi chip can realize the function of Wi-Fi Direct connection between the mobile phone 400 and other electronic devices, and can also make the mobile phone 400 work in an AP mode (Access Point mode) that can provide wireless access services and allow other wireless devices to access, or work in a STA mode (Station mode) that can connect to an AP but does not accept wireless devices to access, thereby establishing point-to-point communication between the mobile phone 400 and other Wi-Fi devices.

[0051] The processor 480 is the control center of the mobile phone. It uses various interfaces and lines to connect various parts of the entire mobile phone. By running or executing software programs and / or modules stored in the memory 420, and calling data stored in the memory 420, it executes various functions of the mobile phone and processes data, thereby monitoring the mobile phone as a whole. Optionally, the processor 480 may include one or more processing units; optionally, the processor 480 may include, for example, an application processor (application processor, AP), a modem processor, a graphics processor (graphics processing unit, GPU), an image signal processor (image signal processor, ISP), a controller, a video codec, a digital signal processor (digital signal processor, DSP), a baseband processor, and / or a neural-network processing unit (neural-network processing unit, NPU), etc. Among them, different processing units can be independent devices or integrated in one or more processors.

[0052] The mobile phone 400 also includes a power source 490 (such as a battery) for supplying power to various components. Preferably, the power source can be logically connected to the processor 480 through a power management system, so that the power management system can manage functions such as charging, discharging, and power consumption.

[0053] The mobile phone 400 may further include a camera. Optionally, the camera may be located at the front or rear of the mobile phone, which is not limited in the embodiment of the present application.

[0054] Figure 5This is a flowchart of the permission configuration method provided by this application. Figure 5 As shown, the permission configuration method includes the following steps: step 510 and step 520. The steps of the method flow are only a possible implementation of the present application.

[0055] Step 510: In response to an application's request for access to sensitive content, display a permission configuration pop-up window, wherein the permission configuration pop-up window includes an area for displaying and selecting sensitive content, and a first control that allows the selected sensitive content to be provided to the application.

[0056] Specifically, in electronic devices, any application can issue access requests for sensitive content, and the applications here can be social media applications, communication applications, camera and video applications, entertainment applications, shopping applications, tool applications, etc. During the operation of these applications, in order to realize some functions, they will issue access requests for sensitive content required for the function realization.

[0057] For example, a social media application may request access to a user's photos, videos, contacts, and other sensitive content in order to share content with other users or find friends. Another example is that a tool application may request access to a user's contacts, calendar, storage, and other sensitive content in order to facilitate task management, file sharing, and collaboration.

[0058] To implement access requests for sensitive information, specifically, information requesting access rights to sensitive information. When an access request is detected, the electronic device can respond to the access request, and the specific response method is to display a permission configuration pop-up window. It can be understood that the above-mentioned permission configuration pop-up window can be displayed on the interface where the application initiates a sensitive content request. For example, in the A interface of a social media application, the application receives an instruction to access certain sensitive content such as photos, or the application receives an instruction on the A interface to enable the B function and needs to access certain sensitive content such as contacts. In this case, the permission configuration pop-up window can be displayed on the corresponding A interface or B interface.

[0059] Here, the permission configuration pop-up window is a window used for human-computer interaction to implement access permission configuration for sensitive information. In the permission configuration pop-up window, an area is provided for displaying and selecting sensitive content, and a first control is also provided for allowing the selected sensitive content to be provided to the application that issued the access request.

[0060] The area in the permission configuration pop-up window can display the sensitive information requested by the access request. The specific display method can be in the form of a list, or in the form of an array, etc. For example, when the sensitive information is contacts, each contact can be displayed in the form of a list. For another example, when the sensitive information is photos, the thumbnails of the photos can be displayed as elements in the array.

[0061] Moreover, in this area, while displaying sensitive information, a selection method is also provided for each sensitive information. For example, the user can select the sensitive information by touching the sensitive information. Another example is that the user can select the sensitive information by dragging the sensitive information to a designated location in the area. The embodiments of the present application do not specifically limit this.

[0062] It can be understood that the area setting for displaying and selecting sensitive information in the permission configuration pop-up window provides the conditions for users to directly select some sensitive information from all sensitive information for access authorization in a more granular / intuitive form when configuring permissions.

[0063] The first control in the permission configuration pop-up window can be used to provide the selected sensitive content to the application that issued the access request, so that after the user completes the sensitive information selection, the permission configuration of the selected sensitive content can be implemented.

[0064] For example, Figure 6 is one of the interface diagrams of the window provided in the embodiment of the present application. Figure 6 In the interface shown, "XX" refers to an application that issues an access request for sensitive content, such as a social media application. In the case where the "calendar" function of the XX application needs to request permission to access contacts, a permission configuration pop-up window 600 can be displayed in the application interface. The permission configuration pop-up window 600 may include an area 601, and the area 601 is used to display and select sensitive content, that is, to display and select contacts. In addition, there is a first control 610 marked as "OK" in the permission configuration pop-up window 600. After completing the contact selection, the user can click the first control 610 to allow the selected contact to be provided to the XX application.

[0065] Step 520: In response to triggering the first control, determining the selected sensitive content; and allowing the application to request access to the selected sensitive content.

[0066] Specifically, after the permission configuration pop-up window is displayed, the user can select and / or deselect sensitive content in the area in the permission configuration pop-up window, and after completing the selection, trigger the first control. The first control may be triggered by touching the first control, long pressing the first control, etc. The embodiment of the present application does not specifically limit this.

[0067] After detecting the triggering of the first control, the electronic device can respond to the triggering of the first control. The specific response method is to determine the selected sensitive content and allow the application that issues the access request to access the selected sensitive content. At this point, the application that issues the access request can have the authority to access the selected sensitive content.

[0068] It is understandable that after completing the permission configuration, the application that issued the access request can directly access the selected sensitive content with access rights in subsequent operation without requesting the user to configure permissions through a permission configuration pop-up window.

[0069] In the method provided in an embodiment of the present application, in response to an application's request to access sensitive content, an area for displaying and selecting sensitive content and a first control allowing the selected sensitive content to be provided to the application are displayed, whereby the user can directly select sensitive content in the permission configuration pop-up window, thereby achieving fine-grained permission configuration while reducing the interaction level of the permission configuration, making the implementation of permission configuration more intuitive and convenient, and being able to effectively avoid the problem of data abuse.

[0070] It is understandable that in the related art, in response to the application's access request to sensitive content, the electronic device usually needs to interact with the user first to determine whether to allow the application to access the sensitive content. Subsequently, on the premise of determining that the application is allowed to access the sensitive content, the electronic device needs to interact with the user a second time to display various sensitive contents so that the user can select the sensitive content that the application is allowed to access, thereby determining the sensitive content range selected by the user. Then, the application can be allowed to access the sensitive content within the sensitive content range, specifically by calling the interface to obtain the sensitive content within the sensitive content range.

[0071] In the method provided in the embodiment of the present application, in response to the application's access request to sensitive content, the electronic device does not need to go through the stage of interacting with the user in the related art to determine whether to allow access to the sensitive content, but directly displays various sensitive contents so that the user can select the sensitive contents that the application is allowed to access, thereby determining the sensitive content range selected by the user. Then, the application can be allowed to access the sensitive contents within the sensitive content range, and specifically, the sensitive contents within the sensitive content range can be obtained by calling an interface.

[0072] It can be seen that the method provided in the embodiment of the present application simplifies the permission configuration that requires secondary interactions in the related technology into a more intuitive and convenient permission configuration method that can be implemented with only one interaction, thereby optimizing the user experience of permission configuration and effectively avoiding the problem of data abuse.

[0073] In some embodiments, the permission configuration pop-up window further includes: a second control that denies providing any sensitive content to the application and / or a third control that allows providing all sensitive content to the application; The method further comprises: In response to triggering the second control or determining that the selected sensitive content is empty, denying the application's access request to any sensitive content; or In response to triggering the third control, the application is allowed to request access to all sensitive contents.

[0074] Specifically, in the permission configuration pop-up window, a second control and / or a third control may also be set.

[0075] Among them, the second control is a control for refusing to provide any sensitive content to the application that issued the access request. Regardless of whether the user has selected sensitive information through the area in the permission configuration pop-up window, the second control can be triggered to achieve the denial setting of the application's access to any sensitive content. Here, the way to trigger the second control can be to touch the second control, long press the second control, etc., and the embodiment of the present application does not specifically limit this.

[0076] After detecting the triggering of the second control, the electronic device can respond to the triggering of the second control by rejecting the access request of the application that issued the access request to any sensitive content. Thus, the application that issued the access request does not have the authority to access any sensitive content and cannot access any sensitive content. Figure 6 In the interface shown, a control in the form of a return arrow "<" is provided in the permission configuration pop-up window 600, which is a second control 620 in a display form. When the second control 620 is triggered, regardless of whether sensitive content in area 601 is selected, the access request of the application that issued the access request to any sensitive content is denied and the access request is closed. Figure 6 The permission configuration interface shown.

[0077] In some embodiments, the permission or rejection of the application's access request may also be determined based on the number of selected sensitive contents. For example, when the number of selected sensitive contents is 0 when the first control is triggered, that is, no sensitive contents are selected to allow the application to access, and the application's access request to any sensitive contents needs to be rejected.

[0078] The third control is used to allow all sensitive content to be provided to the application that issued the access request. Regardless of whether the user has selected sensitive information through the area in the permission configuration pop-up window, the third control can be triggered to implement the authorization setting for the application to access all sensitive content. Here, the way to trigger the third control can be to touch the third control, long press the third control, etc., and the embodiment of the present application does not specifically limit this.

[0079] After detecting the triggering of the third control, the electronic device can respond to the triggering of the third control. The specific response method is to allow the application that issued the access request to access all sensitive contents. At this point, the application that issued the access request has the authority to access all sensitive contents and can access any sensitive content. Figure 6 In the interface shown, a control marked "Allow All" is provided in the permission configuration pop-up window 600, which is a third control 630 in a display form. When the third control 630 is triggered, the application that issues the access request is allowed to access all sensitive contents regardless of whether the sensitive contents in the area 601 are selected.

[0080] It is understandable that in the embodiment of the present application, the second control, the third control, the area for selecting sensitive content, and the first control for allowing the selected sensitive content to be provided to the application are all displayed in the permission configuration pop-up window, thereby making the three permission configuration methods of denying access requests to any sensitive content, allowing access requests to all sensitive content, and allowing access requests to selected sensitive content optional methods at the same interaction level in the same permission configuration pop-up window, greatly enhancing the convenience of user permission configuration. For example, in Figure 6 In the pop-up window 600 , the second control 620 , the third control 630 , the area 601 for selecting a contact, and the first control 610 for allowing the selected contact to be provided to the XX application are all displayed in the permission configuration pop-up window 600 .

[0081] In some embodiments, the region includes a selection control corresponding to each sensitive content; The method further comprises: In response to triggering the selection control for the first time, selecting sensitive content corresponding to the selection control; In response to triggering the selection control again, the sensitive content corresponding to the selection control is deselected.

[0082] Specifically, in order to enable selection of sensitive content displayed in the area in the permission configuration pop-up window, a selection control can be set for each sensitive content displayed in the area, that is, in the area, the number of sensitive content and the number of selection controls are the same, and each sensitive content corresponds to a selection control.

[0083] The selection controls here can be in two forms: selected and unselected. The form of the selection control is used to reflect whether the corresponding sensitive content is selected. When the permission configuration pop-up window is first displayed, all the selection controls in this area are in the form of unselected. For example, Figure 6 In the permission configuration pop-up window 600, contacts are sensitive content, and contacts including "Friend 1", "Friend 2", "Friend 3", "Friend 4" and the like are arranged in the area 601 for displaying and selecting contacts, and a selection control 602 in the form of a circle is provided after each contact, wherein a check mark displayed in the circle indicates that the selection control 602 is selected, and a blank displayed in the circle indicates that the selection control 602 is not selected.

[0084] The user can select the sensitive content by triggering the selection control corresponding to the sensitive content that he intends to select. The triggering selection control method here can be touching the selection control, long pressing the selection control, etc., which is not specifically limited in the embodiments of the present application.

[0085] After detecting a trigger on the selection control, the electronic device may respond to the triggering of the selection control. The specific response method is to modify the form of the selection control, thereby controlling the sensitive content of the pronunciation of the selection control to be selected or deselected.

[0086] Since the initial state of all selection controls is selected, for any selection control in the area, when the selection control is triggered for the first time, the state of the selection control is changed to selected, thereby determining that the sensitive content corresponding to the selection control is selected; when the selection control is triggered again, the state of the selection control is changed to unselected, thereby determining that the sensitive content corresponding to the selection control is deselected. When the selection control is subsequently triggered, the state of the selection control can be flipped based on the previous state, thereby modifying the selection state of the sensitive content corresponding to the selection control.

[0087] In the embodiment of the present application, by setting selection controls corresponding to each sensitive content in the area, flexible selection of sensitive content is achieved, which facilitates the user to configure permissions.

[0088] In some embodiments, the permission configuration pop-up window further includes a fourth control for searching the sensitive content; The method further comprises: A search term is input in the fourth control, sensitive content associated with the input search term is determined from the sensitive content, and the sensitive content associated with the input search term is displayed in the area.

[0089] Specifically, in the case where there is a large amount of sensitive content, in order to facilitate users to quickly select sensitive content, a fourth control may be set in the permission configuration pop-up window.

[0090] Here, the fourth control is a control for searching for sensitive content, such as a search box, a search bar, etc. The user can trigger the fourth control by inputting a search term into the fourth control. Here, the input method of the search term can be keyboard input, handwriting input, voice input, etc., which is not specifically limited in the embodiment of the present application. For example, in Figure 6 In the permission configuration pop-up window 600, a fourth control 640 in the form of a search box marked with "Search for contacts" is provided, and the fourth control 640 can support the input of search terms.

[0091] After the electronic device detects that a search term is input in the fourth control, it can obtain the search term input into the fourth control, and search for each sensitive content, thereby obtaining sensitive content associated with the search term, that is, search results obtained by searching the sensitive content based on the search term. For example, in the case where the sensitive content is a contact, the search term can be the last name, name, etc. of the contact that the user wants to select, and the sensitive content associated with the search term obtained through the search is the contact whose last name or name is consistent with the search term.

[0092] After determining the sensitive content associated with the search term, the sensitive content associated with the search term can be displayed in the area in the permission configuration pop-up window, thereby facilitating the user to quickly select sensitive content from the area in the permission configuration pop-up window.

[0093] For example, Figure 7 This is the second interface diagram of the window provided in the embodiment of the present application. Figure 7 As shown in the figure, the function "Calendar" needs to request permission to access SMS and MMS, and the sensitive content at this time is SMS and MMS. Figure 7 In the interface shown, the permission configuration pop-up window 600 includes an area 601 for displaying and selecting SMS and MMS, and each SMS or MMS in the area 601 corresponds to a selection control 602 for easy selection. In addition, the permission configuration pop-up window 600 is also provided with a first control 610 marked with "OK", a second control 620 in the form of a return arrow "<", a third control 630 marked with "Allow All", and a fourth control 640 displayed as a search box of "Search SMS". By entering the keywords of SMS or the names of the senders and recipients of SMS or MMS as search terms in the fourth control 640, the SMS or MMS can be searched.

[0094] For example, Figure 8 This is the third window interface diagram provided by the embodiment of the present application. Assume that the user is in Figure 6In the fourth control 640 in the interface shown, the search term "father" can be entered to jump to the following Figure 8 The interface shown in Figure 8 In the example, the electronic device searches for contacts associated with "Dad" from all contacts, and displays contacts related to "Dad" in area 601, so that the user can quickly select the contact "Dad" for which access rights need to be configured from a large number of contacts.

[0095] In the method provided in the embodiment of the present application, sensitive content is searched through the fourth control, thereby achieving rapid screening of sensitive content, so that users can quickly select sensitive content, which helps to improve the convenience of permission configuration.

[0096] In some embodiments, the permission configuration pop-up window further includes a fifth control for obtaining a class of the sensitive content; The method further comprises: In response to triggering the fifth control, a selected sensitive content type is determined, corresponding sensitive content is acquired from the sensitive content based on the selected sensitive content type, and the corresponding sensitive content is displayed in the area.

[0097] Specifically, in the case where there is a large amount of sensitive content, a fifth control may be set in the permission configuration window to facilitate users to quickly select sensitive content.

[0098] Here, the fifth control is a control for determining a type of sensitive content, and different fifth controls may correspond to different types of sensitive content. That is, one or more fifth controls may be set in the permission configuration window, and different fifth controls may be used to determine different types of sensitive content. The user may quickly filter sensitive content by triggering the fifth control. Here, the triggering method of the fifth control may be to touch the fifth control, long press the fifth control, etc.

[0099] After detecting the trigger of the fifth control, the electronic device can respond to the triggering of the fifth control. The specific response method is to obtain the sensitive content under the sensitive content type corresponding to the fifth control. Here, the sensitive content type corresponding to the triggered fifth control, that is, the selected sensitive content type. After determining the selected sensitive content type, the sensitive content of the type consistent with the selected sensitive content type can be determined from various sensitive contents, that is, the sensitive content of the type of the selected sensitive content type. Subsequently, such sensitive content can be displayed in the area in the permission configuration pop-up window, thereby facilitating the user to quickly select sensitive content from the area of ​​the permission configuration pop-up window.

[0100] For example, Fig. 9 This is the fourth interface diagram of the window provided in the embodiment of the present application. Fig. 9As shown, in the case where the sensitive content is a contact, there may be three fifth controls 650 in the permission configuration pop-up window 600, namely "recent call contacts", "historical authorized contacts" and "unauthorized contacts". By triggering any one of the three fifth controls 650, the sensitive content type corresponding to the triggered fifth control 650 can be determined, and then the sensitive content under the sensitive content type can be determined and displayed in the area 601 of the permission configuration pop-up window 600. For example, in Fig. 9 In the pop-up window 600, the fifth control 650 marked as "recent call contacts" can be triggered, thereby displaying the contacts belonging to the "recent call contacts", including the "older brother", "sister" and "younger brother" in the recent communication contact category in the area 601, and in the area 601, selection controls 602 are respectively provided for the "older brother", "sister" and "younger brother", so as to facilitate the selection of the contacts that need to be authorized from the "older brother", "sister" and "younger brother".

[0101] For example, Fig.10 This is the fifth window interface diagram provided by the embodiment of the present application. Fig.10 As shown in the figure, "ZZ" refers to the application that issues access requests for sensitive content. In the case where the ZZ application needs to request access to photos and videos, the sensitive content at this time is photos and videos. Fig.10 In the interface shown, the permission configuration pop-up window 600 includes an area 601 for displaying and selecting photos and videos. In addition, in the permission configuration pop-up window 600, there may be three fifth controls 650, namely "Latest", "Photos", and "Album". By triggering any one of the three fifth controls 650, the sensitive content type corresponding to the triggered fifth control 650 can be determined, and then the sensitive content under the sensitive content type can be determined and displayed. For example, in Fig.10 In (a), the fifth control 650 marked as "photo" is triggered, and pictures belonging to "photo" can be displayed in area 601, and when displaying pictures belonging to "photo", they can be displayed in the order in which the photos were taken; Fig.10 In (b), the fifth control 650 marked as "latest" is triggered, and the latest photos and videos taken can be displayed in area 601; Fig.10 In (c), the fifth control 650 marked as "Album" is triggered, and pictures and videos can be displayed in the area 601 in units of albums, for example, three albums of "APP1", "APP2" and "Bluetooth" can be included to facilitate further screening by the user.

[0102] Fig.11 This is the sixth interface diagram of the window provided in the embodiment of the present application. Fig.11As shown, for the case where the function "Calendar" of the XX application needs to request permission to access contacts, there may be multiple fifth controls 650 in the permission configuration pop-up window 600, namely "City A", "City B", "City C", "City D", "Certificate", "ID Card", "Document", and "Bank Card". The formation of the fifth control here can be based on historical search terms, that is, each search term can be used as a sensitive content type to facilitate users to quickly search. By triggering any one of the above-mentioned fifth controls, the sensitive content type corresponding to the triggered fifth control can be determined, and then the sensitive content under the sensitive content type can be determined and displayed.

[0103] In the method provided in the embodiment of the present application, a class of sensitive content is obtained through the fifth control, thereby achieving rapid screening of sensitive content, so that users can quickly select sensitive content, which helps to improve the convenience of permission configuration.

[0104] In some embodiments, the second control is set at the top of the permission configuration pop-up window; The method further comprises: In response to triggering the second control, closing the permission configuration pop-up window.

[0105] Specifically, in order to simplify the control settings in the permission configuration pop-up window so that users can trigger the controls in the permission configuration pop-up window more quickly and conveniently, in the embodiment of the present application, the second control is functionally reused. That is, in addition to being used to refuse to provide any sensitive content to the application, the second control can also be used to close the permission configuration pop-up window to exit the permission configuration process.

[0106] Therefore, after detecting that the second control is triggered, the electronic device responds to the triggering of the second control by not only rejecting the application's access request to any sensitive content, but also closing the permission configuration pop-up window and exiting the permission configuration process.

[0107] In addition, in order to better fit the user's operating habits and facilitate the user to close the permission configuration pop-up window by triggering the second control, the second control can be set at the top of the permission configuration pop-up window, for example Figure 6 , 7 In the example, the second control can be set in the form of an exit arrow on the left side of the top of the permission configuration pop-up window. For example, the second control can also be set in the form of a " " is set in the right side of the top of the permission configuration pop-up window.

[0108] In some embodiments, it is possible to determine whether it is necessary to execute any of the permission configuration methods described in this application when an application initiates a sensitive content request based on the permission management mode of the electronic device. For example, in the first permission management mode, the permission configuration method described in this application is only required to be executed when the application is an untrusted application, and in the second permission management mode, the permission configuration method described in this application needs to be executed regardless of whether the application is an untrusted application or a trusted application. It can be understood that the first permission management mode can be a loose permission management, that is, allowing trusted applications to access sensitive content unconditionally, and the second permission management mode can be a strict permission management mode, that is, not allowing any application to access sensitive content without authorization. Thereby, more permission management mode options can be provided for electronic devices. For example, the first permission management mode can be executed on some public electronic devices, and the second permission management mode can be executed on private electronic devices.

[0109] In some embodiments, the method further comprises: A sliding instruction in the area is received, and different sensitive contents are displayed in the area based on the sliding instruction.

[0110] Specifically, in the case where there is a lot of sensitive content, but the area in the permission configuration pop-up window is limited and cannot display all the sensitive content at once, the user can input sliding instructions to the electronic device by sliding up and down, sliding left and right, or dragging the scroll bar in the area.

[0111] When a sliding instruction in the area is received, the electronic device can update the sensitive content displayed in the area based on the sliding direction of the sliding instruction. It is understandable that the sensitive content displayed in the area is different before and after the sensitive content displayed in the area is updated based on the launching direction of the sliding instruction. For example, after receiving a sliding instruction to slide downward, the sensitive content displayed in the area can be updated to the sensitive content arranged before the sensitive content originally displayed, and after receiving a sliding instruction to slide upward, the sensitive content displayed in the area can be updated to the sensitive content arranged after the sensitive content originally displayed.

[0112] In some embodiments, the permission configuration pop-up window is displayed in the lower half of the window.

[0113] Here, the window refers to the display interface of the electronic device. Displaying the permission configuration pop-up window in the lower half of the window, that is, realizing the display of the permission configuration pop-up window in the form of a bottom pop-up window, can realize the display of the permission configuration pop-up window without leaving the current display interface, and the setting of the bottom pop-up window is also closer to the user's finger operation area, especially in the one-handed operation scenario, the user can easily touch the controls in the permission configuration pop-up window without moving the finger significantly, so the permission setting based on the permission configuration pop-up window is more convenient and easy.

[0114] In some embodiments, the permission configuration method includes the following steps: In an electronic device, when any application sends an access request to sensitive content for the first time, the electronic device can respond to the access request by displaying a permission configuration pop-up window in the lower half of the window.

[0115] The permission configuration pop-up window may include an area that can display and select sensitive content. In addition, the permission configuration pop-up window may include a first control, which is a control that allows the selected sensitive content to be provided to the application. The area can cooperate with the first control to implement selective permission configuration. Specifically, the user can select sensitive content in the area and trigger the first control. Accordingly, the electronic device allows the application to request access to the selected sensitive content in response to triggering the first control.

[0116] In addition, the permission configuration pop-up window may also include a second control and a third control, wherein the second control is used to deny the provision of any sensitive content to the application, and the third control is used to allow the provision of all sensitive content to the application. In the case of triggering the second control, the electronic device may deny the application's access request to any sensitive content; in addition, in the case of triggering the third control, the electronic device may allow the application's access request to all sensitive content.

[0117] Furthermore, the permission configuration pop-up window may also include a fourth control, which is used to search for sensitive content. The fourth control may cooperate with the region to narrow the selection range of sensitive content. Specifically, the user may input a search term to trigger the fourth control, and accordingly, the electronic device displays sensitive content associated with the search term in the region in response to triggering the fourth control.

[0118] In addition, the permission configuration pop-up window may also include a fifth control, which is used to obtain a type of sensitive content. The fifth control may cooperate with the region to narrow the selection range of sensitive content. Specifically, the fifth control may be triggered by the user, and accordingly, the electronic device displays sensitive content under the sensitive content type corresponding to the fifth control in the region in response to triggering the fifth control.

[0119] Fig.12 An example of a physical structure diagram of an electronic device is shown in FIG. Fig.12 As shown, the electronic device may include: a processor 1210, a communication interface 1220, a memory 1230 and a communication bus 1240, wherein the processor 1210, the communication interface 1220, and the memory 1230 communicate with each other through the communication bus 1240. The processor 1210 may call the logic instructions in the memory 1230 to execute the permission configuration method, which includes: In response to an application's request for access to sensitive content, displaying a permission configuration pop-up window, the permission configuration pop-up window comprising an area for displaying and selecting sensitive content, and a first control for allowing the selected sensitive content to be provided to the application; In response to triggering the first control, determining the selected sensitive content; and The application's request to access the selected sensitive content is allowed.

[0120] In addition, the logic instructions in the above-mentioned memory 1230 can be implemented in the form of a software functional unit and can be stored in a computer-readable storage medium when it is sold or used as an independent product. Based on this understanding, the technical solution of the present application can be essentially or partly embodied in the form of a software product that contributes to the relevant technology. The computer software product is stored in a storage medium, including several instructions to enable a computer device (which can be a personal computer, a server, or a network device, etc.) to perform all or part of the steps of the method described in each embodiment of the present application. The aforementioned storage medium includes: U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), disk or optical disk, etc. Various media that can store program codes.

[0121] On the other hand, the present application also provides a computer program product, the computer program product includes a computer program, the computer program can be stored on a non-transitory computer-readable storage medium, when the computer program is executed by a processor, the computer can execute the permission configuration method provided by the above methods, the method includes: In response to an application's request for access to sensitive content, displaying a permission configuration pop-up window, the permission configuration pop-up window comprising an area for displaying and selecting sensitive content, and a first control for allowing the selected sensitive content to be provided to the application; In response to triggering the first control, determining the selected sensitive content; and The application's request to access the selected sensitive content is allowed.

[0122] In another aspect, the present application further provides a non-transitory computer-readable storage medium having a computer program stored thereon, and when the computer program is executed by a processor, the permission configuration method provided by the above methods is implemented, and the method includes: In response to an application's request for access to sensitive content, displaying a permission configuration pop-up window, the permission configuration pop-up window comprising an area for displaying and selecting sensitive content, and a first control for allowing the selected sensitive content to be provided to the application; In response to triggering the first control, determining the selected sensitive content; and The application's request to access the selected sensitive content is allowed.

[0123] The device embodiments described above are merely illustrative, wherein the units described as separate components may or may not be physically separated, and the components displayed as units may or may not be physical units, that is, they may be located in one place, or they may be distributed on multiple network units. Some or all of the modules may be selected according to actual needs to achieve the purpose of the scheme of this embodiment. Ordinary technicians in this field can understand and implement it without paying creative labor.

[0124] Through the description of the above implementation methods, those skilled in the art can clearly understand that each implementation method can be implemented by means of software plus a necessary general hardware platform, and of course, can also be implemented by hardware. Based on this understanding, the above technical solution is essentially or the part that contributes to the relevant technology can be embodied in the form of a software product, and the computer software product can be stored in a computer-readable storage medium, such as ROM / RAM, a disk, an optical disk, etc., including a number of instructions for a computer device (which can be a personal computer, a server, or a network device, etc.) to execute the methods described in each embodiment or some parts of the embodiment.

[0125] Finally, it should be noted that the above embodiments are only used to illustrate the technical solutions of the present application, rather than to limit it. Although the present application has been described in detail with reference to the aforementioned embodiments, those skilled in the art should understand that they can still modify the technical solutions described in the aforementioned embodiments, or make equivalent replacements for some of the technical features therein. However, these modifications or replacements do not deviate the essence of the corresponding technical solutions from the spirit and scope of the technical solutions of the embodiments of the present application.

Claims

1. A permission configuration method, comprising: In response to an application's request for access to sensitive content, displaying a permission configuration pop-up window, the permission configuration pop-up window comprising an area for displaying and selecting sensitive content, and a first control for allowing the selected sensitive content to be provided to the application; In response to triggering the first control, determining the selected sensitive content; as well as The application's request to access the selected sensitive content is allowed.

2. The permission configuration method according to claim 1, wherein: The permission configuration pop-up window further includes: a second control for refusing to provide any sensitive content to the application and / or a third control for allowing all sensitive content to be provided to the application; The method further comprises: In response to triggering the second control or determining that the selected sensitive content is empty, denying the application's access request to any sensitive content; or In response to triggering the third control, the application is allowed to request access to all sensitive contents.

3. The permission configuration method according to claim 1, wherein: The area includes selection controls corresponding to each sensitive content; The method further comprises: In response to triggering the selection control for the first time, selecting sensitive content corresponding to the selection control; In response to triggering the selection control again, the sensitive content corresponding to the selection control is deselected.

4. The permission configuration method according to claim 1, wherein: The permission configuration pop-up window also includes a fourth control for searching the sensitive content; The method further comprises: A search term is input in the fourth control, sensitive content associated with the input search term is determined from the sensitive content, and the sensitive content associated with the input search term is displayed in the area.

5. The permission configuration method according to claim 1, wherein: The permission configuration pop-up window also includes a fifth control for obtaining a type of sensitive content; The method further comprises: In response to triggering the fifth control, a selected sensitive content type is determined, corresponding sensitive content is acquired from the sensitive content based on the selected sensitive content type, and the corresponding sensitive content is displayed in the area.

6. The permission configuration method according to claim 2, wherein: The second control is set at the top of the permission configuration pop-up window; The method further comprises: In response to triggering the second control, closing the permission configuration pop-up window.

7. The permission configuration method according to claim 1, wherein: In the first permission management mode, the application is an untrusted application, and in the second permission management mode, the application includes an untrusted application and a trusted application, and the method further includes: A sliding instruction in the area is received, and different sensitive contents are displayed in the area based on the sliding instruction.

8. The permission configuration method according to any one of claims 1 to 7, wherein: The permission configuration pop-up window is displayed in the lower half of the window.

9. An electronic device, comprising a memory, a processor, and a computer program stored in the memory and executable on the processor, wherein the processor implements the permission configuration method according to any one of claims 1 to 8 when executing the computer program.

10. A non-transitory computer-readable storage medium having a computer program stored thereon, wherein the computer program, when executed by a processor, implements the permission configuration method according to any one of claims 1 to 8.

Images