Dynamic Access Permission Control via Usage Evaluation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Electronic devices face challenges in effectively controlling and limiting access permissions granted to applications, leading to potential security risks due to applications requesting more permissions than necessary and difficulties in revoking previously granted permissions.
Innovation Solution
An electronic device evaluates access permissions using various criteria, generating notifications to inform users about granting or denying permissions, with evaluations based on historical usage and category-specific algorithms, employing both external and internal machine-learning analyses to improve reliability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If applications are granted broad access permissions to function properly, then application functionality is improved, but security risk increases due to potential personal information leakage
Solution Approach 1:
The system dynamically changes permission parameters based on application behavior patterns. Instead of granting fixed broad permissions, the system adjusts permission scope and duration according to actual usage needs detected through monitoring, transforming static permission allocation into dynamic parameter adjustment that balances functionality and security
Solution Approach 2:
The system implements continuous feedback loops where application permission usage is monitored, evaluated against baseline patterns, and used to adjust future permission decisions. The notification system provides feedback to users about permission requests based on historical behavior analysis, enabling informed permission management that prevents excessive permission granting while maintaining necessary functionality
2Ease of operation
If users are provided with detailed permission control options, then permission management capability is improved, but user operation complexity increases
Solution Approach 1:
The system performs automatic permission evaluation and risk assessment without requiring users to manually analyze each permission request. The machine learning model automatically monitors application behavior, evaluates permission necessity, and generates contextualized notifications, allowing users to benefit from sophisticated analysis without bearing the complexity of implementing it themselves
Solution Approach 2:
The notification system acts as an intermediary between the complex permission control mechanisms and the user. It translates technical permission requests into user-friendly risk assessments and recommendations, mediating between detailed permission control capabilities and simple user interaction by presenting only the most relevant information in an accessible format
3Reliability
If permission monitoring and evaluation systems are implemented, then security control is improved, but system complexity increases
Solution Approach 1:
The permission control system is segmented into distinct functional modules: behavior monitoring components that collect data, machine learning evaluation components that analyze patterns, and notification components that present results to users. This segmentation allows each module to be optimized independently and reduces overall system complexity by creating manageable, specialized components rather than a monolithic complex system
Data Source
AI summary
An electronic device and permission control method are disclosed. The electronic device includes a display, a communication circuitry, a memory and a processor. The processor implements the method, including: receiving a first evaluation regarding usage of an access permission by at least one application from a server, via the communication circuitry, generating usage information indicating historical usage of the access permission by the at least one application, generating a second evaluation of the access permission granted to the at least one application, based at least on the usage information, determining an evaluation result based on at least one of the first evaluation or the second evaluation, and determining whether to display a user notification regarding the access permission, based on the evaluation result.