Dynamic Application Function Control via Environment Risk Scanning
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Android platform users face severe security threats from viruses, bugs, and malware, especially in payment applications, with existing protective measures limited to increasing complexity and not providing fundamental protection in unsafe environments.
Innovation Solution
A method of dynamically loading application functions based on environment detection, where the security of the mobile platform is assessed, and functions related to financial transactions or payments are disabled if the environment is deemed dangerous, with the user informed to clean the environment to ensure security, using a security module that scans the client's environment, generates a risk score, and receives function codes from a server to load only safe functions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If self-protection functions are implemented by increasing application complexity, then the difficulty in cracking is improved, but fundamental protection in unsafe environments is not provided
Solution Approach 1:
The patent implements environment detection before the application fully executes, scanning for malware, root permissions, and unsafe conditions in advance. This preliminary action identifies threats before they can compromise the application, providing fundamental protection rather than relying on post-compromise response mechanisms.
Solution Approach 2:
The patent introduces an environment detection module as an intermediary between the application and the underlying system. This module acts as a mediator that scans and evaluates the runtime environment, blocking malicious interactions while allowing legitimate operations to proceed, thus providing protection without requiring the entire application to become complex.
2Ease of operation
If all application functions are loaded to provide full functionality, then user convenience is improved, but security risks increase in unsafe environments
Solution Approach 1:
The patent implements dynamic function loading based on environment assessment. After detecting and evaluating the runtime environment, the system selectively loads only those application functions that are safe to execute. This dynamic approach allows the application to adapt its functionality in real-time, providing full functionality in safe environments while automatically restricting risky functions in unsafe environments.
Solution Approach 2:
The patent applies different security policies to different application functions based on their risk profiles. Critical functions such as payment and data export are subject to stricter environment verification, while less sensitive functions may execute with lower verification requirements. This local quality approach ensures that security measures are applied precisely where needed without unnecessarily restricting user convenience for low-risk operations.
3Reliability
If environment detection is implemented to ensure security, then protection effectiveness is improved, but system complexity increases
Solution Approach 1:
The patent divides the environment detection process into separate, modular components: malware scanning, root permission detection, environment evaluation, and function control. Each component performs a specific detection task independently, making the overall system more manageable and maintainable. This segmentation allows the security functionality to be added without requiring a complete system redesign.
Solution Approach 2:
The environment detection module operates autonomously, automatically scanning for threats and making decisions about function execution without requiring manual user intervention. The system self-evaluates its environment and self-regulates its behavior, reducing the operational complexity burden on users while maintaining high security effectiveness.
Data Source
Figure 1
AI summary
The invention discloses a method of dynamically controlling application function at the client, comprising: initiating an application program which merely contains frame function codes; loading a security module after initiating the application program, wherein the security module sends a request regarding scanning configuration file to a server; scanning the application environment of the client according to the configuration file received from the server, and sending the result of scanning to the server so as to generate a risk score; and receiving the function codes that are allowed to be loaded in the current application environment from the server, wherein the function codes are generated by the server based on the generated risk score. The invention also discloses a method of dynamically controlling application function at a server.