Sensor Information Control Unit for Mobile Device Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Mobile communication devices are vulnerable to malicious applications that can access sensitive information collected by sensors, such as accelerometers and gyroscopes, allowing cybercriminals to infer passwords and compromise user privacy.
Innovation Solution
Implementing a Sensor Information Control Unit to manage and control access to sensor information, intercepting requests from applications and enforcing access rules to restrict unauthorized access, especially for sensitive user input actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If sensor information is made freely accessible to applications, then application functionality and ease of operation are improved, but user privacy and security are compromised
Solution Approach 1:
The patent introduces a sensor information control unit as an intermediary component that sits between the sensors and applications. This control unit intercepts, validates, and manages all requests for sensor information, allowing legitimate applications to access needed data while blocking malicious applications from obtaining sensitive information that could be used to infer passwords or personal data.
2Adaptability or versatility
If all applications can access sensor data, then device versatility is improved, but security against malicious applications deteriorates
Solution Approach 1:
The patent implements local quality by applying different access control rules to different applications and different sensor information types. The control unit validates each request individually, granting access only to specific applications for specific sensor data based on predefined security policies, thereby maintaining device versatility while ensuring security through differentiated access control.
3Ease of operation
If sensor access is unrestricted, then ease of operation is improved, but loss of information control increases
Solution Approach 1:
The patent applies preliminary action by establishing security policies and validation rules in advance before any sensor information is accessed. The control unit is pre-configured with rules that determine which applications can access which sensor data under what conditions, allowing the system to automatically enforce information control without requiring real-time user intervention or complex runtime decisions.
Data Source
AI summary
A method for protecting privacy and enhancing security on an electronic device is provided. When sensor information associated with at least one user input action is collected by a sensor in an electronic device hosting a plurality of applications, the method includes intercepting a request to access the sensor information from a requesting application of the plurality of applications, and controlling access to the sensor information associated with the at least one user input action based on the requesting application. By controlling access to the sensor information, leakage of sensitive or secure information to a malicious background application is minimized and privacy and security are enhanced.