Dynamic Application Function Control via Environment Risk Scanning

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Android platform users face severe security threats from viruses, bugs, and malware, especially in payment applications, with existing protective measures limited to increasing complexity and not providing fundamental protection in unsafe environments.

Innovation Solution

A method of dynamically loading application functions based on environment detection, where the security of the mobile platform is assessed, and functions related to financial transactions or payments are disabled if the environment is deemed dangerous, with the user informed to clean the environment to ensure security, using a security module that scans the client's environment, generates a risk score, and receives function codes from a server to load only safe functions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If self-protection functions are implemented by increasing application complexity, then the difficulty in cracking is improved, but fundamental protection in unsafe environments is not provided

Engineering Contradiction:
Improvesecurity protection effectivenessVSAvoidapplication complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements environment detection before the application fully executes, scanning for malware, root permissions, and unsafe conditions in advance. This preliminary action identifies threats before they can compromise the application, providing fundamental protection rather than relying on post-compromise response mechanisms.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

The patent introduces an environment detection module as an intermediary between the application and the underlying system. This module acts as a mediator that scans and evaluates the runtime environment, blocking malicious interactions while allowing legitimate operations to proceed, thus providing protection without requiring the entire application to become complex.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Ease of operation

If all application functions are loaded to provide full functionality, then user convenience is improved, but security risks increase in unsafe environments

Engineering Contradiction:
Improveuser convenienceVSAvoidsecurity risks
Core Design Contradiction:
Ease of operationVSObject-affected harmful factors

Solution Approach 1:

The patent implements dynamic function loading based on environment assessment. After detecting and evaluating the runtime environment, the system selectively loads only those application functions that are safe to execute. This dynamic approach allows the application to adapt its functionality in real-time, providing full functionality in safe environments while automatically restricting risky functions in unsafe environments.

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The patent applies different security policies to different application functions based on their risk profiles. Critical functions such as payment and data export are subject to stricter environment verification, while less sensitive functions may execute with lower verification requirements. This local quality approach ensures that security measures are applied precisely where needed without unnecessarily restricting user convenience for low-risk operations.

Inventive Principle:
Principle #3Local quality

3Reliability

If environment detection is implemented to ensure security, then protection effectiveness is improved, but system complexity increases

Engineering Contradiction:
Improvesecurity protection effectivenessVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent divides the environment detection process into separate, modular components: malware scanning, root permission detection, environment evaluation, and function control. Each component performs a specific detection task independently, making the overall system more manageable and maintainable. This segmentation allows the security functionality to be added without requiring a complete system redesign.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The environment detection module operates autonomously, automatically scanning for threats and making decisions about function execution without requiring manual user intervention. The system self-evaluates its environment and self-regulates its behavior, reducing the operational complexity burden on users while maintaining high security effectiveness.

Inventive Principle:
Principle #25Self-service

Data Source

PatentEP3211557B1Method for dynamically controlling application function based on environment detection
Publication Date: 2021.12.29 CHINA UNIONPAY
  • EP3211557B1 patent drawingFigure 1

AI summary

The invention discloses a method of dynamically controlling application function at the client, comprising: initiating an application program which merely contains frame function codes; loading a security module after initiating the application program, wherein the security module sends a request regarding scanning configuration file to a server; scanning the application environment of the client according to the configuration file received from the server, and sending the result of scanning to the server so as to generate a risk score; and receiving the function codes that are allowed to be loaded in the current application environment from the server, wherein the function codes are generated by the server based on the generated risk score. The invention also discloses a method of dynamically controlling application function at a server.