Mobile Permission Management via Isolated Application

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The challenge lies in managing permissions for mobile device applications to access device resources securely, particularly due to the lack of granular permission management capabilities and the complexity of monitoring resource access behaviors, which affects consumer trust and privacy.

Innovation Solution

A separate application from the operating system is used to manage and monitor permissions by sending requests to users for access to device resources, allowing users to grant or deny permissions, thereby enhancing security and transparency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If the operating system manages permissions directly, then integration and system control are improved, but adaptability to different devices and versions deteriorates

Engineering Contradiction:
Improvecompatibility with different devicesVSAvoidseparation of permission management
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent extracts the permission management functionality from the operating system and places it in a separate, independent application. This extracted permission manager can then be deployed across different devices and operating system versions without being constrained by OS updates or proprietary implementations, thereby improving adaptability while maintaining manageable complexity through clear separation of concerns.

Inventive Principle:
Principle #2Taking out (Extraction)

2Loss of information

If the operating system provides permission management, then system integration is improved, but transparency and user control deteriorate

Engineering Contradiction:
Improvetransparency of permissions usageVSAvoidindependence of permission application
Core Design Contradiction:
Loss of informationVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary permission management application that sits between the user and the operating system's resource access mechanisms. This intermediary provides enhanced transparency by clearly displaying which applications request which permissions and enabling granular user control. The intermediary maintains manageable complexity by leveraging existing OS permission interfaces while adding a layer of user-friendly oversight and control.

Inventive Principle:
Principle #24Intermediary (Mediator)

3Reliability

If conventional permission management is used, then simplicity is improved, but security and user trust deteriorate

Engineering Contradiction:
Improvesecurity of resource accessVSAvoidgranular permission management
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements dynamic permission management where users can grant, revoke, or modify permissions on-demand based on actual usage context. Rather than static, binary permission states, the system allows flexible adjustment of access rights, enabling enhanced security through continuous user oversight. This dynamic approach manages complexity by providing granular control interfaces that adapt to user needs and application behavior patterns.

Inventive Principle:
Principle #15Dynamics

Data Source

PatentUS9977911B2Methods and systems for managing permissions to access mobile device resources
Publication Date: 2018.05.22 META PLATFORMS INC
  • US9977911B2 patent drawing
  • US9977911B2 patent drawing
  • US9977911B2 patent drawing

AI summary

In an electronic device, a first application sends a request to a second application for access by the first application to a resource of the electronic device, wherein the first and second applications run on an operating system of the electronic device. In response to the first request, the second application is used to ask a user of the electronic device for permission for the first application to access the resource. A first user input is received, providing permission for the first application to access the resource. In response to the first user input, the second application is used to grant permission to the first application to access the resource.