Device Identifier Access Control via Permission Server
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The excessive access to device identifiers by application programs poses a risk of user privacy leakage and compromises device security, as these identifiers are directly associated with user information.
Innovation Solution
A device identifier access method and apparatus that utilize a permission management server to set and manage access permissions for applications, allowing only authorized access to device identifiers and providing either real or dummy values based on the application's needs and risk level.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If application programs can access device identifiers freely, then application functionality is improved, but user privacy security deteriorates
Solution Approach 1:
The patent introduces a permission management server as an intermediary between application programs and device identifiers. This server receives access requests from applications, verifies permissions, and returns either real device identifiers or dummy values based on authorization results. This mediator architecture enables controlled access that protects user privacy while allowing legitimate applications to function properly.
Solution Approach 2:
The system dynamically changes the parameter of device identifier values returned to applications based on permission verification results. When permission is granted, real device identifiers are returned; when permission is denied or risk level is high, dummy values are returned instead. This parameter change strategy allows the system to adapt access responses to security requirements without blocking legitimate applications.
2Reliability
If access permission management is implemented, then device security is improved, but system complexity increases
Solution Approach 1:
The patent extracts the permission management functionality from the terminal device itself and relocates it to a separate permission management server. This extraction removes the complexity burden from individual terminals while maintaining centralized security control. The server handles all permission verification logic, keeping terminal devices simpler and more efficient.
Solution Approach 2:
The permission management server provides universal permission verification services to multiple application programs across different terminals. By creating a single multi-functional authorization system, the patent avoids duplicating complex permission management logic in each terminal, thereby reducing overall system complexity while maintaining comprehensive security coverage.
3Object-affected harmful factors
If dummy values are provided instead of real device identifiers, then privacy protection is improved, but application functionality may deteriorate
Solution Approach 1:
The system applies partial action by selectively providing dummy values only for device identifiers where permission is denied or risk level is high, while providing real values for identifiers where permission is granted and risk is low. This partial application of dummy values protects privacy where needed without compromising application functionality where real data is necessary.
Solution Approach 2:
The permission management server implements feedback mechanisms to monitor application behavior and permission usage. Based on feedback about application legitimacy and risk levels, the system dynamically adjusts whether to provide real device identifiers or dummy values. This feedback-driven approach ensures that privacy protection measures are applied appropriately without unnecessarily degrading legitimate application functionality.
Data Source
Figure 1
Figure 2
Figure 3~4(b)
AI summary
Embodiments of this application provide a device identifier access method and an apparatus, and relate to the field of communications technologies, so as to reduce a risk of privacy leakage caused by excessive access to a device identifier by an application program, and improve device security of a terminal. The method includes: receiving, by a terminal, request information for accessing a first device identifier by a target application; in response to the request information, determining, by the terminal, first access permission used when the target application accesses the first device identifier, where the first access permission includes one of the following: prohibiting access to the first device identifier, allowing access to a real value of the first device identifier, and allowing access to a dummy value of the first device identifier; and when the first access permission is allowing access to the dummy value of the first device identifier, returning, by the terminal, the dummy value of the first device identifier to the target application, where the dummy value of the first device identifier is obtained after anonymization processing is performed on the real value of the first device identifier.