Server-Based Application Permission Management Across Devices
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The dynamic authorization mechanism for application permissions on intelligent electronic devices requires users to repeatedly confirm authorization when the same application is installed on multiple devices, leading to cumbersome operations and poor user experience.
Innovation Solution
An application permission management method that involves an electronic device querying a server for permission authorization records based on an application identifier, allowing configuration of permissions without repeated user confirmations across devices, and supporting single-device, device group, or all-device authorization modes.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If dynamic authorization mechanism is used for application permissions, then security of user privacy and device running is improved, but user experience deteriorates due to repeated manual confirmation operations
Solution Approach 1:
The system performs preliminary authorization by querying the server for permission authorization records before the application actually needs the permission. The electronic device sends a permission query request including application identifier, device identifier, and user account to the server in advance, receives the authorization record, and configures permissions automatically without waiting for user confirmation at the moment of need.
Solution Approach 2:
The server acts as an intermediary between the electronic device and the permission management system. It stores permission authorization records associated with user accounts and device identifiers, and provides these records to electronic devices upon request, enabling automatic permission configuration without direct user intervention on each device.
2Reliability
If manual authorization is required for sensitive permissions, then security control is improved, but operation complexity increases due to dialog box popups
Solution Approach 1:
The electronic device performs self-service by automatically configuring permissions based on authorization records obtained from the server. The device sends permission query requests, receives authorization records, and configures permissions without requiring user interaction through dialog boxes, making the system serve itself rather than requiring manual intervention.
Solution Approach 2:
The permission confirmation operation is extracted from the electronic device and transferred to the server. The server handles the authorization decision-making process by storing and providing authorization records, removing the complex dialog box interaction from the electronic device and replacing it with automatic configuration based on server-provided records.
3Adaptability or versatility
If the same application is installed on multiple devices, then application accessibility is improved, but authorization operations increase due to repeated confirmation requirements
Solution Approach 1:
The permission authorization record stored on the server is universal across multiple devices. The same authorization record associated with a user account can be reused on different electronic devices, allowing the application to function across multiple devices without requiring separate authorization operations for each device.
Solution Approach 2:
The system performs preliminary authorization on the server that is valid across multiple devices. By obtaining the permission authorization record from the server before installing or using the application on each device, users avoid repeated confirmation operations on multiple devices, as the pre-obtained record can be used universally.
Data Source
AI summary
An application permission management method, device, and medium. The method includes obtaining, by an electronic device, operation information of starting, by a user, a first application installed in the electronic device, sending a permission query request for the first application to a server, where the permission query request includes an identifier of the first application, receiving a permission authorization record of the first application sent by the server, and configuring permission of the first application on the electronic device based on the permission authorization record.