Application Permission Mediation for Secure System Function Access

The patent introduces a permission management mechanism that acts as an intermediary between application programs and system functions. Instead of requiring the management program to acquire the highest permission, the system grants specific permissions to application programs through a configuration file. The permission management mechanism checks these permissions before allowing system function invocation, thereby controlling system function access without introducing security risks associated with highest permission acquisition.

The patent merges the permission control settings for multiple application programs into a single configuration file. The configuration file contains permission information for all application programs that need to invoke system functions. The management program reads this configuration file once and applies all permission settings simultaneously, thereby maintaining precise permission control while significantly reducing operation complexity when multiple application programs need to be controlled.

The patent implements preliminary action by pre-configuring all permission settings in a configuration file before the application programs are installed or before system function invocation occurs. The management program reads the configuration file during system initialization or when permission checks are needed, rather than requiring users to repeatedly perform disabling settings. This preliminary configuration maintains precise security control while greatly improving system function invocation efficiency by eliminating frequent user operations.