Fine-Grained Sensor Data Permission Model for Privacy
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The existing permission model for applications accessing sensor data on electronic devices is coarse-grained, providing indiscriminate access that can compromise security and privacy, especially for sensitive information like faces and location data.
Innovation Solution
Implementing a fine-grained permission model that individuates elements of sensor data, tags them with metadata, and matches these with specific permission sets to restrict access and interactions, using components like individuators, metadata taggers, and restricting functions within the operating system to control and obfuscate sensitive information.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a coarse-grained permission model is used to allow applications broad access to sensor data, then application functionality is improved, but security and privacy are worsened
Solution Approach 1:
The patent segments sensor data into individuated elements (e.g., faces, license plates, text) and applies granular permissions to each element type. This allows the system to provide specific access control for different data categories while maintaining broad application functionality. The segmentation enables the permission system to evaluate and control access at the element level rather than treating all sensor data uniformly.
Solution Approach 2:
The patent implements local quality by applying different permission levels to different individuated elements within the same sensor data stream. For example, an application may have full access to general scene data but restricted access to sensitive elements like faces or license plates. This allows tailored access control that preserves application functionality for non-sensitive data while protecting privacy for sensitive data.
2Reliability
If fine-grained permission control is implemented to restrict access to specific sensor data elements, then security and privacy are improved, but system complexity is worsened
Solution Approach 1:
The patent applies preliminary action by pre-defining permission sets for different types of individuated elements before runtime processing. The system pre-establishes what access levels are appropriate for different data categories (e.g., faces, text, objects), and these pre-configured permission sets are then automatically applied during data processing. This reduces runtime complexity by avoiding ad-hoc permission decisions.
Solution Approach 2:
The patent introduces an intermediary permission management layer between the sensor data stream and the application. This intermediary component (the permission manager) automatically evaluates individuated elements against predefined permission sets and applies appropriate restricting functions. This intermediary handles the complexity of fine-grained control, shielding the application from direct interaction with the complex permission evaluation logic.
3Ease of operation
If manual permission management is required for users to control application access, then user control is improved, but user convenience is worsened
Solution Approach 1:
The patent implements self-service by enabling the system to automatically manage permissions without requiring manual user intervention. The permission manager automatically evaluates sensor data elements, matches them against predefined permission sets, and applies appropriate restricting functions. Users benefit from automatic privacy protection and controlled access without needing to understand or configure complex permission settings, making the system both secure and convenient.
Data Source
AI summary
A computer-implemented method of operating a device is provided. The method comprises operating a sensor to capture a data input, individuating an element of the data input, tagging an individuated element with metadata, matching the metadata with an associated permission set, and applying a restricting function defined in the associated permission set to the individuated element during a process flow to produce augmented reality output data restricted as required by the associated permission set. A device is also provided, comprising a sensor, an individuating component to individuate an element of sensor data from the sensor, a tagging component to tag the individuated element, a matching component to match a tag of the individuated element with a permission of a permission set, and a restricting function component to restrict an application's interaction with the individuated element.