Privacy-Aware Notification Filtering for Mobile Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems fail to maintain the privacy of messages once they are received, as notifications can be visible to third parties, compromising the security of private information.
Innovation Solution
A method is implemented where a device receives a message, determines its privacy level, and selects an appropriate notification mode based on this level, ensuring that private messages are notified in a manner that maintains their confidentiality, such as using visual or audio notifications on devices with higher privacy levels or reducing the visibility of message content.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If visual notifications are used to notify message receipt, then notification visibility and user awareness are improved, but message privacy is compromised as third parties can see the notification content
Solution Approach 1:
The notification system applies different quality levels to different parts of the notification display. Sensitive message content is obscured or hidden in public notification areas, while non-sensitive metadata (sender name, time) remains visible. This allows the notification to serve its alert function while protecting privacy by making only certain parts of the notification visible to third parties.
Solution Approach 2:
Instead of displaying full message content in notifications and then trying to hide it, the system inverts the approach by displaying only non-sensitive information by default and selectively revealing sensitive content only under specific conditions (e.g., when the device is locked, when notified privately). The notification system asks 'what should be hidden?' rather than 'what should be shown?'
2Loss of information
If message content is fully displayed in notifications, then notification completeness and information delivery are improved, but security of private information is compromised
Solution Approach 1:
The notification content is segmented into different sensitivity levels: metadata (sender, timestamp, app icon) that can be publicly displayed, and message content that requires privacy protection. The system selectively displays only the non-sensitive segments in public notification areas, while keeping sensitive segments hidden or obscured until appropriate conditions are met.
Solution Approach 2:
The notification system introduces an intermediary layer between the full message content and the public notification display. This intermediary selectively filters and transforms message content, replacing sensitive portions with placeholders or summaries that preserve notification functionality without exposing private information to third parties.
3Device complexity
If traditional notification methods are used, then implementation simplicity is maintained, but privacy protection capability is insufficient
Solution Approach 1:
The notification system dynamically adjusts its behavior based on device state and context. When the device is unlocked and the notification center is actively viewed, more complete information may be displayed. When the device is locked or in public settings, the system automatically reduces notification visibility and obscures sensitive content. This dynamic adaptation allows a single notification system to serve multiple privacy requirements without requiring separate systems.
Data Source
AI summary
The security and privacy are very important aspects of communication. Many technologies have been developed to keeping private messages secure while being transmitted from the sender to the receiver. However, the privacy of the messages can be compromised by notifications of the messages at the receiver. For example, a third party may see a visual notification of private text message displayed on a receiving device, such as a smart phone. Provided herein is an apparatus that receives a message, determines a privacy level of the message, selects a mode of notification of the message based on the determined privacy level of the message, and performs a notification action based on the selected mode of notification.