App Data Access Control via User Permission Gate
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile electronic devices lack a common storage area for applications to access data, relying on content providers which may infringe on user privacy, as users wish to control access to their data.
Innovation Solution
An electronic device system that requests permission from users before allowing access to data categories, presenting the requesting application's identity and allowing users to explicitly permit or deny access, using a processor to determine and enforce access permissions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If content providers are used to share data between applications, then data accessibility between applications is enabled, but user privacy control is compromised
Solution Approach 1:
The patent introduces a content provider as an intermediary component that mediates between the hosting application and requesting applications. This content provider acts as a gateway that manages data access requests, allowing the system to enable data sharing while maintaining user privacy control through explicit permission mechanisms.
Solution Approach 2:
The patent implements preliminary action by requiring explicit user permission before any data access occurs. The system presents a user interface that asks for permission to access specific data categories, and only after user approval does the system proceed to grant access rights. This preliminary permission check prevents privacy infringements before they can occur.
2Object-affected harmful factors
If explicit user permission is required for data access, then user privacy control is improved, but system complexity increases
Solution Approach 1:
The patent applies segmentation by dividing data access into discrete categories and permissions. Instead of a monolithic access control system, the system segments data into specific categories (e.g., contact information, media files) and manages permission for each category independently. This modular approach simplifies the overall complexity while maintaining comprehensive privacy control.
Solution Approach 2:
The content provider is designed with multi-functionality, serving multiple purposes: it manages permission requests, filters data access, and interfaces with both hosting and requesting applications. By making the content provider a universal component that handles multiple access control functions, the system reduces overall complexity despite the added permission requirements.
3Adaptability or versatility
If data access permission is granted to requesting applications, then data sharing capability is improved, but unauthorized access risk increases
Solution Approach 1:
The patent implements feedback mechanisms where the content provider continuously monitors and responds to data access requests. When a requesting application attempts to access data, the content provider receives the request, checks permissions, and provides feedback by either granting or denying access. This feedback loop ensures that only authorized applications can access data, maintaining security while enabling legitimate data sharing.
Solution Approach 2:
The access permission system is dynamic rather than static. Permissions can be granted, revoked, or modified based on user choices and application needs. The system dynamically adjusts access rights in real-time, allowing data sharing capability to adapt while maintaining security through active permission management rather than fixed access controls.
Data Source
AI summary
An electronic device includes a requesting application and a hosting application. When the requesting application requests permission from the hosting application to access a category of data, the device identifies the requesting application and the permission request. The device awaits a user input to determine whether the user will permit the requesting application's request to be granted.