Android Data Flow Tracking Filter for User Privacy Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
ANDROID operating system users lack control and awareness over how third-party applications use their private data, as there is no mechanism to track or monitor the flow of sensitive information once permissions are granted.
Innovation Solution
A data flow tracking filter using a message filter model is implemented to track sensitive data through I/O channels like files and sockets, intercepting system calls to alert users if data attempts to leave the device, with message filters operating at the kernel level for enhanced security and efficiency.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If application-defined permissions are granted to third-party applications, then applications can access user data, but users lose control and awareness of how their data is used
Solution Approach 1:
The patent implements a feedback mechanism where the system monitors and reports data flow from applications to users in real-time. The monitoring component tracks data accesses and the notification component alerts users about specific data operations, creating a closed-loop feedback system that restores user awareness while maintaining application functionality.
Solution Approach 2:
The patent introduces an intermediary monitoring system that sits between the application and the data. This intermediary component intercepts data access requests, logs them, and presents them to users for approval or information, acting as a mediator that enables both application access and user control.
2Reliability
If no data tracking mechanism is implemented, then system complexity remains low, but users cannot identify malicious applications or control data flow
Solution Approach 1:
The patent divides the data tracking system into distinct modular components: a monitoring component that tracks data flows, a logging component that records operations, and a notification component that alerts users. This segmentation allows the system to achieve comprehensive security monitoring while maintaining manageable complexity through modular design.
Solution Approach 2:
The intermediary monitoring system acts as a layer between applications and the operating system, intercepting and analyzing data flows without requiring fundamental changes to the underlying system architecture. This approach enhances security while adding complexity only where necessary for monitoring functions.
3Reliability
If comprehensive data monitoring is implemented, then user control and security are improved, but system performance and processing overhead increase
Solution Approach 1:
The patent extracts only the essential data flow information needed for security monitoring, rather than capturing and processing all system operations. The monitoring component selectively tracks data accesses to sensitive resources, extracting relevant security-critical information while ignoring unrelated operations, thus maintaining protection capability with reduced processing overhead.
Data Source
AI summary
Security features of an ANDROID® operating system device using a data flow tracking filter are described. The data flow tracking filter uses a message filter model to track sensitive data in the ANDROID® operating system device through I/O channels to provide users with control over when the data attempts to leave the device through a network interface, thus exposing how third party applications use user private data. The data tracking filter also enables operating at the kernel level so intercept of all standard channels of communication is possible.