Application Permission Management via Behavioral Rule Enforcement
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current systems lack fine-grained control over application behavior during runtime, relying on coarse permissions that can lead to security concerns as users may unknowingly grant broad access, allowing applications to misuse resources.
Innovation Solution
A method and system that allow users to define and enforce custom rules for application permissions, monitoring application behavior to ensure compliance with these rules, and providing options to limit actions and set thresholds for contraventions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If coarse permissions are used for application access control, then ease of operation is improved, but security is worsened
Solution Approach 1:
The patent segments permissions into multiple levels: coarse permissions for initial access control and fine-grained rules for specific behaviors. This segmentation allows the system to maintain ease of operation at the permission level while achieving security through detailed rule-based monitoring of application behaviors such as data access patterns, network operations, and device resource usage.
Solution Approach 2:
The system performs preliminary permission granting followed by subsequent behavioral monitoring and rule enforcement. Applications are initially granted necessary permissions to function, then the system proactively monitors their behavior and enforces fine-grained rules to prevent misuse, thereby maintaining both operational ease and security.
2Reliability
If fine-grained control is implemented for application permissions, then security is improved, but device complexity is worsened
Solution Approach 1:
The patent introduces an intermediary permission management system that sits between the application and the operating system's permission framework. This intermediary layer handles fine-grained rule creation, monitoring, and enforcement, thereby implementing security controls without requiring changes to the core OS architecture or application code.
Solution Approach 2:
The system implements continuous feedback loops where application behavior is monitored against defined rules, and violations trigger automated responses such as warnings, permission revocations, or application blocking. This feedback mechanism enables sophisticated security control through a relatively simple rule-based framework that adapts to observed behavior patterns.
3Reliability
If monitoring of application behavior is performed, then security is improved, but loss of time is worsened
Solution Approach 1:
The patent implements monitoring at selective levels rather than comprehensively tracking all application operations. The system monitors only specific behaviors relevant to security rules (such as data access, network operations, and device interactions) while allowing other routine operations to proceed without detailed scrutiny, thereby reducing processing overhead while maintaining security.
Solution Approach 2:
The system employs periodic sampling and event-triggered monitoring rather than continuous real-time tracking of all application activities. Behavior is monitored at intervals or triggered by specific events that may indicate security concerns, reducing the continuous processing burden while maintaining effective security oversight.
Data Source
AI summary
A method comprising: receiving a request from a second application to access information from a first application, said first and second applications installed on a user equipment, and in response to said request, determining whether said second application is operating in accordance with at least one rule.