Mobile Terminal Application Security via Preconfigured Operation Rights
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing mobile terminal security methods consume time and resources due to the need for frequent scanning of applications, which affects user experience and efficiency in defending against malicious fee deduction applications.
Innovation Solution
An application processing method that analyzes and sets operation rights for applications before executing fee deduction events, allowing or forbidding the execution based on preconfigured permissions, reducing the need for constant scanning and improving resource usage.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If feature scanning is performed to detect malicious applications, then security reliability is improved, but processing time increases and system resources are occupied
Solution Approach 1:
The patent applies preliminary action by performing feature scanning and extracting malicious application features during the application installation phase rather than during runtime. The extracted features are stored in a virus library for future reference, allowing the system to quickly compare running applications against known malicious patterns without performing full scans each time, thus reducing processing time while maintaining security reliability
Solution Approach 2:
The patent changes the scanning parameter from full application scanning to feature-based pattern matching. By extracting specific features (such as package names, permissions, code signatures) and comparing them against a virus library, the system reduces the computational complexity and time required for security checks while maintaining detection accuracy
2Reliability
If feature scanning is performed to detect malicious applications, then security reliability is improved, but system resource occupation increases
Solution Approach 1:
The system performs resource-intensive feature extraction and analysis during installation rather than during runtime operations. By pre-processing applications and storing their features in a virus library, the system minimizes resource consumption during actual application execution and security monitoring phases
Solution Approach 2:
The patent creates a simplified representation (copy) of application features rather than storing and analyzing complete application binaries. By extracting and storing only relevant feature data (metadata, permissions, code signatures) in the virus library, the system reduces memory and storage requirements while maintaining the ability to detect malicious applications
3Reliability
If continuous scanning is performed to defend against malicious applications, then security reliability is improved, but user experience deteriorates due to frequent interruptions
Solution Approach 1:
The patent implements periodic action by performing security checks at specific intervals and events (installation, updates) rather than continuously. The system scans applications when they are installed or modified, and compares them against the virus library at these discrete points, reducing user interruptions while maintaining security through event-driven monitoring
Solution Approach 2:
The system applies self-service by automatically managing the security scanning process without requiring user initiation or intervention. The antivirus engine automatically scans newly installed applications, compares them against the virus library, and handles malicious applications according to predefined policies, freeing users from manual security management while maintaining protection
Data Source
AI summary
An application processing method and a mobile terminal are provided. The method includes: analyzing an operation right of an application when the application executes an invoking operation for a fee deduction event; allowing the application to execute the invoking operation if the application has an operation right for the fee deduction event; and forbidding the application from executing the invoking operation if the application does not have the operation right for the fee deduction event. In the present disclosure, it is not necessary to scan an application every time the application runs. It is only necessary to determine the operation right of the application, which cuts down processing time and avoids waste of system resources, while at the same time does not require participation of the user and facilitates the user to use. In this way, the user experience is improved.