Privacy API Instrumentation for App Data Access Compliance
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing applications face challenges in ensuring that the acquisition of private user information complies with preset user privacy protection rules, necessitating a method to detect and manage privacy information acquisition processes effectively.
Innovation Solution
Perform instrumentation on APIs to determine privacy-related information, store it in a secure digital memory card, and upload it to a server for detection, using a designated application to ensure compliance with privacy rules.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If applications collect private information to portrait users and recommend information streams, then recommendation accuracy is improved, but user privacy protection is compromised
Solution Approach 1:
The patent introduces a privacy detection mechanism as an intermediary between information collection and user portrait building. The system collects privacy-related information (process/thread info, context info, log info) through instrumentation on APIs, stores it in a designated directory, and uses a target process to read and upload this information to a server for compliance detection. This intermediary detection system enables the application to maintain recommendation accuracy while ensuring privacy protection compliance.
2Reliability
If privacy information acquisition is monitored and detected, then privacy protection compliance is improved, but system complexity increases
Solution Approach 1:
The patent segments the privacy detection function into distinct modular components: (1) instrumentation module that performs privacy information instrumentation on APIs in the framework layer, (2) storage module that stores privacy-related information in a designated directory on SD card, (3) execution module that reads the stored information, and (4) upload module that transmits data to the server. This segmentation allows each component to perform its specific function independently, making the overall complex detection system more manageable and maintainable.
3Measurement precision
If privacy-related information is stored and uploaded for detection, then detection accuracy is improved, but information security risks increase
Solution Approach 1:
The patent performs preliminary action by storing privacy-related information in a designated directory on the SD card before uploading to the server. The system uses instrumentation to capture privacy information locally, stores it in a controlled location with restricted access, and then uploads it for detection. This preliminary local storage approach ensures that sensitive information remains on the device under controlled conditions until detection is required, reducing the window of exposure and potential security risks.
Data Source
Figure 1~2
Figure 3~4
Figure 5
AI summary
The present disclosure provides an information acquisition method and device, and a storage medium. The method includes: acquiring (101) privacy-related information when calling, by a target application (App), an application programming interface (API) to acquire privacy information of a terminal, wherein the privacy-related information is associated with a process of the target App acquiring the privacy information; storing (102) the privacy-related information; and reading (103), by a designated App, the privacy-related information stored in a preset time period, and uploading, by the designated App, the privacy-related information read to a server side.