Mobile App Privacy Risk Rating System
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Users of mobile platforms are often unaware of the privacy risks associated with applications, as some applications may access personal information for reasons unrelated to their stated purpose, whether due to malicious intent or sloppy programming, leading to potential invasions of privacy.
Innovation Solution
A method and system for evaluating and rating privacy risks of mobile platform applications by determining discrepancies between their intended and actual purposes, using static and dynamic assessments to calculate a weighted privacy score, which can be personalized based on user preferences, allowing users to make informed decisions about downloading and using applications.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If applications are provided with access to personal information to fulfill their stated purpose, then application functionality is improved, but privacy risk increases
Solution Approach 1:
The system performs preliminary assessment of applications before they are installed or executed on mobile devices. It analyzes application code, permissions requests, and intended functionality in advance to evaluate privacy risks, allowing users to make informed decisions about whether to grant access or install the application.
Solution Approach 2:
The system introduces an intermediary layer between applications and user personal information. This intermediary component (the privacy risk assessment system) mediates by evaluating whether an application's requested access to personal information is justified by its stated purpose, acting as a buffer that protects users from unauthorized access while still allowing legitimate applications to function.
2Ease of operation
If applications access personal information without user awareness, then application operation is simplified, but user privacy is compromised
Solution Approach 1:
The system provides feedback to users about the privacy risks associated with applications before they install or execute them. By displaying privacy risk assessments and explanations of what personal information an application intends to access, the system enables users to make informed decisions while maintaining ease of application operation through transparent information disclosure.
3Measurement precision
If privacy risk assessment is performed manually, then assessment accuracy is improved, but processing time increases
Solution Approach 1:
The system replaces manual privacy risk assessment with automated computer-based analysis. It uses programmatic evaluation of application code, automated parsing of permission requests, and algorithmic assessment of privacy risks, substituting the mechanical manual review process with an automated information processing system that achieves both accuracy and speed.
Data Source
AI summary
Methods and systems for evaluating and rating privacy risks posed by applications intended for deployment on mobile platforms. Validating the “intent” of a mobile platform application vis-à-vis its impact on user privacy, as viewed from an end-user's perspective allows those end-users to make better-informed decisions concerning the downloading, installation and/or operation of mobile platform applications. In making such assessments user preferences can be taken into account. Privacy scores are provided through sales channels for the applications, thereby affording potential users the opportunity to assess whether they wish to incur the associated privacy risk, before purchasing a subject application.