Electronic Device Access Authority Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
In IoT environments, users face challenges in managing access authorities for applications, as the purpose of requested access permissions may be unclear, leading to unintended operations and difficulties in recognizing unwanted access, which can result in information leakage or compromise.
Innovation Solution
An electronic device is equipped with a processor that sets and manages access authorities for applications, displaying messages to users for changing permissions and allowing input to adjust these settings, ensuring that applications only access contents with explicit user consent.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the application requests access authority at installation, then the application can access user contents, but the user may not understand the purpose of the access request leading to unintended operations
Solution Approach 1:
The system performs preliminary analysis of the application's manifest file to extract and display the purpose of access authority requests before the user makes a decision. This allows users to understand why the access is needed before granting permission, preventing unintended operations while maintaining application functionality.
Solution Approach 2:
The system introduces an intermediary mechanism that analyzes the application's manifest file and translates technical access requests into user-friendly purpose descriptions. This intermediary layer bridges the gap between application requirements and user understanding, allowing informed consent without compromising access capability.
2Ease of operation
If the user grants access authority to applications, then the application can perform its function, but the user may not recognize unwanted operations leading to information leakage
Solution Approach 1:
The system provides feedback to users by displaying the purpose of access authority requests based on manifest file analysis. This feedback mechanism informs users about what operations the application will perform with the granted access, enabling them to make informed decisions and recognize unwanted operations before they occur.
Solution Approach 2:
The system performs preliminary display of access purpose information before the user grants permission. By showing the intended operations in advance based on manifest analysis, users can evaluate whether the access is appropriate for the application's stated purpose, preventing information leakage from unwanted operations.
3Loss of information
If the system provides detailed access authority information to users, then users can make informed decisions, but the installation process becomes more complex
Solution Approach 1:
The system performs preliminary analysis of the manifest file during the installation process to extract access purpose information. By preparing this information in advance and displaying it automatically, the system provides transparency without requiring complex user interactions or manual analysis, keeping the installation process simple while informative.
Solution Approach 2:
The system uses the application's own manifest file to provide access authority information. By automatically extracting and displaying purpose descriptions from the manifest without requiring external verification or complex processing, the system achieves transparency through a self-service mechanism that adds minimal complexity to the installation process.
Data Source
AI summary
Disclosed is an electronic device including a storage storing contents, a display, and a processor configured to set one or more access authorities of one or more applications for accessing the contents stored in the storage while the one or more applications is installed, based on detecting at least one application of the one or more applications to access the contents, display, on the display, a message requesting changing at least one access authority of the at least one application of the one or more applications for accessing the contents, and based on an input associated with the message, change the at least one access authority of the at least one application of the one or more applications for accessing the contents.