Permission Mapping Mechanism for User-OS Security Translation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current security measures lack an efficient way to configure and convey permission information to users in a human-understandable manner, particularly when executing applications in computing devices, making it difficult for users to grant or deny specific actions requested by applications.
Innovation Solution
A mechanism that translates application-level permissions into user-level permissions presented in a human-understandable format, allowing users to grant or deny permissions through a graphical user interface, with the security framework generating and enforcing OS-level permissions based on user inputs, ensuring applications operate within a restricted environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If application-level permissions are configured at the operating system level, then security control is achieved, but user understandability and ease of configuration deteriorates
Solution Approach 1:
The patent introduces a permission mapping mechanism that acts as an intermediary layer between user-level permissions and OS-level permissions. This mapping translates human-understandable user permissions into technical OS permissions, allowing users to configure security in a comprehensible way while maintaining precise security control at the operating system level.
2Reliability
If detailed application-level permissions are configured, then fine-grained security control is achieved, but configuration complexity and time consumption increases
Solution Approach 1:
The patent pre-establishes a permission mapping table that maps user-level permissions to OS-level permissions before actual permission configuration is needed. This preliminary preparation allows users to quickly select from pre-defined, understandable permission options without having to manually configure complex OS-level permissions, significantly reducing configuration time while maintaining fine-grained control.
3Measurement precision
If permission information is presented in technical OS-level format, then precision of permission definition is improved, but user accessibility and ease of management deteriorates
Solution Approach 1:
The patent changes the parameter representation of permissions from technical OS-level parameters to user-friendly parameters. The permission mapping mechanism transforms precise but technical OS permission parameters into everyday language descriptions that users can easily understand and select, maintaining the precision of permission definitions while dramatically improving user accessibility.
Data Source
AI summary
A user is presented with one or more user-level permissions in a human understandable language, where the one or more user-level permissions represent one or more application-level permissions requested from an application for accessing one or more resources. A security profile is generated having one or more operating system (OS)-level permissions based on at least one of the user-level permissions authorized by the user. The security profile is enforced to restrict the application to accessing the one or more resources based on the OS-level permissions.