App Permission Certificate Checks for Special Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current permission management mechanisms in terminal devices allow over-application and malicious use of special permissions, compromising system security and risking user privacy data leakage.
Innovation Solution
Implement a permission management method that requires a special permission certificate during application installation, setting special permissions to an unavailable state if the certificate is missing or invalid, and managing permissions based on valid certificates to ensure legitimate access.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the permission service organization opens the permission to all APPs, then the adaptability of the permission system is improved, but the security of the terminal system deteriorates
Solution Approach 1:
The patent applies preliminary action by requiring APPs to obtain special permission certificates during the installation phase before they can access special permissions. The permission management module checks for the presence and validity of these certificates during installation, preventing unauthorized APPs from obtaining special permissions at runtime. This advance verification mechanism resolves the contradiction by maintaining security through pre-screening while still allowing legitimate APPs to access permissions they need.
2Adaptability or versatility
If the permission service organization opens the permission to all APPs, then the versatility of the permission system is improved, but the risk of leaking privacy data increases
Solution Approach 1:
The patent implements preliminary action by verifying special permission certificates during the APP installation process. The permission management module checks whether the installation package includes a valid special permission certificate before allowing the APP to be installed. This pre-verification prevents unauthorized APPs from obtaining access to privacy data, thereby reducing leakage risk while maintaining permission availability for legitimate applications.
Solution Approach 2:
The patent introduces a special permission certificate as an intermediary mechanism between the APP and the special permissions. This certificate acts as a mediator that verifies the legitimacy of the APP's request for special permissions. The permission management module uses this intermediary to control access, ensuring that only APPs with valid certificates can obtain special permissions, thus protecting privacy data while maintaining system versatility.
3Reliability
If the special permission is set to unavailable state during installation without certificate verification, then the security is improved, but the ease of operation deteriorates
Solution Approach 1:
The patent applies preliminary action by performing certificate verification during the installation phase rather than setting all special permissions to unavailable. The permission management module checks for the presence and validity of special permission certificates before the APP starts running. This approach maintains security by blocking unauthorized access while preserving ease of operation for legitimate APPs that have proper certificates, avoiding unnecessary restrictions on valid applications.
Data Source
AI summary
A method, device, and medium for permission management is disclosed. The method includes obtaining, based on it being detected that an application is being installed, one or more permissions that the application needs to apply for during running, setting, based on the one or more permissions comprising a special permission and based on an installation package of the application not comprising a special permission certificate, the special permission to an unavailable state, and continuing to install the application, where the special permission certificate records a special permission that the application is allowed to apply for during running.