WO2020207253A1

WO2020207253A1 - Application permission management method and apparatus, and storage medium and electronic device

Info

Publication number: WO2020207253A1
Application number: PCT/CN2020/081192
Authority: WO
Inventors: 陈仲铭; 何明
Original assignee: Oppo广东移动通信有限公司
Priority date: 2019-04-09
Filing date: 2020-03-25
Publication date: 2020-10-15
Also published as: CN111797381A

Abstract

Disclosed is an application permission management method, comprising: recording authorization history information of an application; obtaining status information of an electronic device, processing the status information according to a first algorithm model, and outputting user status information; processing the authorization history information and the user status information according to a second algorithm model, and outputting permission management information; and allocating permission to the application. The present application also provides an application permission management apparatus, a storage medium and an electronic device.

Description

Application program authority management method, device, storage medium and electronic equipment

Technical field

This application belongs to the technical field of electronic equipment, and in particular relates to a method, device, storage medium, and electronic equipment for rights management of application programs.

Background technique

With the development of electronic technology, electronic devices such as smart phones are becoming more and more intelligent. Electronic equipment can process data through various algorithm models to provide users with various functions. For example, the electronic device can learn the user's behavior characteristics according to the algorithm model, so as to provide the user with personalized service.

Summary of the invention

This application provides a method, device, storage medium, and electronic equipment for managing permissions of an application program, which can intelligently assign permissions for application programs and improve the security of electronic equipment.

In the first aspect, an embodiment of the present application provides a permission management method for an application program, including:

Record the authorization history information of the application in the electronic device, where the authorization history information includes the permission authorization record of the application;

Acquiring current status information of the electronic device, processing the status information according to the first algorithm model, and outputting user status information;

Process the authorization history information and user status information according to the second algorithm model, and output authority management information;

Assign permissions to the application program according to the permission management information.

In a second aspect, an embodiment of the present application provides a permission management device for an application program, including: a recording module, a first processing module, a second processing module, and an allocation module;

The recording module is used to record the authorization history information of the application in the electronic device, the authorization history information includes the permission authorization record of the application;

The first processing module is configured to obtain current state information of the electronic device, process the state information according to a first algorithm model, and output user state information;

The second processing module is configured to process the authorization history information and user status information according to a second algorithm model, and output authority management information;

The allocation module is configured to allocate permissions to the application program according to the permission management information.

In a third aspect, an embodiment of the present application provides a storage medium on which a computer program is stored, and when the computer program runs on a computer, the computer is caused to execute the above-mentioned application program rights management method.

In a fourth aspect, an embodiment of the present application provides an electronic device, including a processor and a memory, the memory stores a plurality of instructions, and the processor loads the instructions in the memory to perform the following steps:

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings that need to be used in the description of the embodiments. Obviously, the drawings in the following description are only some embodiments of the application. For those skilled in the art, other drawings can be obtained based on these drawings without creative work.

FIG. 1 is a schematic diagram of an application scenario of the application permission management method provided by an embodiment of the application.

FIG. 2 is a schematic flowchart of a method for managing application permissions provided by an embodiment of the application.

FIG. 3 is a schematic diagram of another flow chart of the application permission management method provided by an embodiment of the application.

FIG. 4 is a schematic diagram of a structure of an application authority management apparatus provided by an embodiment of the application.

FIG. 5 is a schematic diagram of another structure of an application authority management apparatus provided by an embodiment of the application.

FIG. 6 is a schematic structural diagram of an electronic device provided by an embodiment of the application.

FIG. 7 is a schematic diagram of another structure of an electronic device provided by an embodiment of the application.

detailed description

Please refer to the drawings, in which the same component symbols represent the same components, and the principle of the present application is implemented in an appropriate computing environment for illustration. The following description is based on the exemplified specific embodiments of the present application, which should not be regarded as limiting other specific embodiments that are not described in detail herein.

In the following description, specific embodiments of the present application will be described with reference to steps and symbols executed by one or more computers, unless otherwise stated. Therefore, these steps and operations will be mentioned several times as being executed by a computer. The computer execution referred to in this article includes the operation of a computer processing unit that represents an electronic signal of data in a structured form. This operation converts the data or maintains it in a position in the computer's memory system, which can be reconfigured or otherwise changed the operation of the computer in a manner well known to testers in the art. The data structure maintained by the data is the physical location of the memory, which has specific characteristics defined by the data format. However, the principle of this application is described in the above text, which does not represent a limitation. Testers in the field will understand that the various steps and operations described below can also be implemented in hardware.

The terms "first", "second" and "third" in this application are used to distinguish different objects, rather than describing a specific order. In addition, the terms "including" and "having" and any variations thereof are intended to cover non-exclusive inclusion. For example, a process, method, system, product, or device that includes a series of steps or modules is not limited to the listed steps or modules, but some embodiments also include steps or modules that are not listed, or some embodiments It also includes other steps or modules inherent to these processes, methods, products, or equipment.

In the prior art, the third-party application authorization management mechanism for electronic devices is to open the third-party application for the first time. If the third-party application requires additional permissions, the user will be reminded whether to authorize or not. Once the user is authorized, the third-party will be subsequently directly granted The application automatically releases the permission. Another way of authorization management is to open the application, when a certain sub-function or sub-business of the application is used, the third-party application will need additional permissions. At this time, the user will also be reminded whether to authorize. Follow-up third-party applications Take over the authority directly. According to the above-mentioned electronic device authorization mechanism, third-party applications may monitor user information, leading to excessive use of application permissions.

For example, once the camera permission is granted to an application in the existing electronic equipment system, the application may monitor the user and other operations, and the camera memory may be activated from time to time to cause the camera to pop up or turn on the camera, in order to prevent third-party application developers Abuse of system permissions to track user common behaviors. This application provides a technical solution to solve the problem of unclear third-party application permissions. It proposes smart application permissions based on electronic devices that can learn user behavior habits , According to the panoramic perception technology to determine whether the user needs authorization at this time, to achieve dynamic and flexible application authorization management.

Referring to FIG. 1, FIG. 1 is a schematic diagram of an application scenario of a method for managing application permissions provided by an embodiment of the application. The permission management method of the application program is applied to an electronic device. The electronic device is provided with a panoramic sensing architecture. The panoramic perception architecture is the integration of hardware and software used to implement the permission management method of the application in an electronic device.

Among them, the panoramic perception architecture includes an information perception layer, a data processing layer, a feature extraction layer, a scenario modeling layer, and an intelligent service layer.

The information perception layer is used to obtain the information of the electronic device itself or the information in the external environment. The information perception layer may include multiple sensors. For example, the information sensing layer includes multiple sensors such as a distance sensor, a magnetic field sensor, a light sensor, an acceleration sensor, a fingerprint sensor, a Hall sensor, a position sensor, a gyroscope, an inertial sensor, a posture sensor, a barometer, and a heart rate sensor.

Among them, the distance sensor can be used to detect the distance between the electronic device and an external object. The magnetic field sensor can be used to detect the magnetic field information of the environment in which the electronic device is located. The light sensor can be used to detect the light information of the environment in which the electronic device is located. The acceleration sensor can be used to detect the acceleration data of the electronic device. The fingerprint sensor can be used to collect the user's fingerprint information. Hall sensor is a kind of magnetic field sensor made according to Hall effect, which can be used to realize automatic control of electronic equipment. The location sensor can be used to detect the current geographic location of the electronic device. Gyroscopes can be used to detect the angular velocity of electronic devices in various directions. Inertial sensors can be used to detect movement data of electronic devices. The attitude sensor can be used to sense the attitude information of the electronic device. The barometer can be used to detect the air pressure of the environment where the electronic device is located. The heart rate sensor can be used to detect the user's heart rate information.

The data processing layer is used to process the data obtained by the information perception layer. For example, the data processing layer can perform data cleaning, data integration, data transformation, and data reduction on the data acquired by the information perception layer.

Among them, data cleaning refers to cleaning up a large amount of data obtained by the information perception layer to eliminate invalid data and duplicate data. Data integration refers to the integration of multiple single-dimensional data acquired by the information perception layer into a higher or more abstract dimension to comprehensively process multiple single-dimensional data. Data transformation refers to the data type conversion or format conversion of the data acquired by the information perception layer, so that the transformed data meets the processing requirements. Data reduction means to minimize the amount of data while maintaining the original appearance of the data as much as possible.

The feature extraction layer is used to perform feature extraction on data processed by the data processing layer to extract features included in the data. The extracted features can reflect the state of the electronic device itself or the state of the user or the environmental state of the environment in which the electronic device is located.

Among them, the feature extraction layer can extract features or process the extracted features through methods such as filtering, packaging, and integration.

The filtering method refers to filtering the extracted features to delete redundant feature data. The packaging method is used to screen the extracted features. The integration method refers to the integration of multiple feature extraction methods to construct a more efficient and accurate feature extraction method for feature extraction.

The scenario modeling layer is used to construct a model based on the features extracted by the feature extraction layer, and the obtained model can be used to represent the state of the electronic device or the state of the user or the environment. For example, the scenario modeling layer can construct key value models, pattern identification models, graph models, entity connection models, object-oriented models, etc. based on the features extracted by the feature extraction layer.

The intelligent service layer is used to provide users with intelligent services based on the model constructed by the scenario modeling layer. For example, the intelligent service layer can provide users with basic application services, can perform system intelligent optimization for electronic devices, and can also provide users with personalized intelligent services.

In addition, the panoramic perception architecture may also include multiple algorithms, each of which can be used to analyze and process data, and the multiple algorithms can form an algorithm library. For example, the algorithm library may include Markov algorithm, implicit Dirichlet distribution algorithm, Bayesian classification algorithm, support vector machine, K-means clustering algorithm, K-nearest neighbor algorithm, conditional random field, residual network , Long and short-term memory networks, convolutional neural networks, recurrent neural networks and other algorithms.

The embodiment of the application provides a method for managing the permission of an application program. The execution subject of the method for managing the permission of the application program may be the permission management device of the application program provided in the embodiment of the application, or the permission management device integrated with the application program. Electronic equipment, wherein the permission management device of the application program can be implemented in hardware or software.

The embodiment of the present application will be described from the perspective of the permission management device of the application program, and the permission management device of the application program may be specifically integrated in the electronic device. The permission management method of the application includes: recording the authorization history information of the application in the electronic device, and the authorization history information includes the permission authorization record of the application;

In one embodiment, recording the authorization history information of the application in the electronic device includes:

When the application in the electronic device requests permission for the first time, record the identification information of the permission and the identification information of the application;

The authorization history information is generated according to the identification information of the authority and the identification information of the application.

In an embodiment, the current state information of the electronic device includes sensor information, and processing the state information according to the first algorithm model to output user state information includes:

Performing vectorization processing on the sensor information to obtain a sensor vector;

Superimpose the sensor vectors to obtain a sensor tensor;

The sensor tensor is processed according to the first algorithm model, and user state information is output.

In an embodiment, processing the authorization history information and user status information according to the second algorithm model and outputting authority management information includes:

Vectorize the authorization history information to obtain an authorization history vector;

Process the authorization history vector and user status information according to the second algorithm model, and output authority management information.

In an embodiment, performing vectorization processing on the authorization history information to obtain an authorization history vector includes:

Extract word sequences from the authorization history information;

Convert the word sequence through a pre-configured word embedding model to generate a corresponding vector sequence;

The authorization history vector is generated according to the vector sequence.

In an embodiment, the second algorithm model is a Bayesian model.

In an embodiment, assigning permissions to the application program according to the permission management information includes:

When the application program initiates a request for invoking permission, judging whether the permission is authorized according to the permission management information;

If yes, open the permissions of the application.

Please refer to FIG. 2. FIG. 2 is a schematic flowchart of a method for managing application permissions provided by an embodiment of this application. The application permission management method provided by the embodiment of the application is applied to electronic equipment, and the specific process may be as follows:

Step 101: Record the authorization history information of the application in the electronic device. The authorization history information includes the permission authorization record of the application.

Among them, the above-mentioned permission authorization record includes all the application permission records of the electronic device. For example, when the application is installed or the application is opened for the first time, a dialog box will pop up, and the user will determine whether the relevant permission is enabled. After agreeing, the application can call to change permissions.

For example, among the electronic devices running the Android system, Android has prepared many optional permissions for the application, including the permission to obtain network status information, the permission to obtain WI-FI network status information, the permission to obtain battery status information, and to make calls. Permission to use camera, permission to read user’s contact data, permission to read user’s photo album, permission to access GPS, permission to set desktop wallpaper, etc. Generally speaking, different applications require different permissions. For example, desktop beautification applications generally apply for the permission to read user albums and set desktop wallpapers, and navigation applications generally apply for the permission to access GPS. After the application is authorized by the user to obtain the permission, it can use related functions. For example, the application can make a call in the application after obtaining the permission to make a call. If the permission is not obtained, the user needs to manually log in The dial interface of the system makes a call.

In an embodiment, the authorization history information of the application program includes all the permissions applied for by the application program, including the permissions authorized by the user and the permissions denied by the user.

Step 102: Obtain current state information of the electronic device, process the state information according to the first algorithm model, and output user state information.

In an embodiment, the current state information of the above electronic device may include system operation information and sensor information of the electronic device, and so on. Among them, the electronic device has built-in sensors with different functions, and these sensors can detect the current state of the electronic device at any time. As an embodiment of the present application, the motion state of the electronic device can be detected by an acceleration sensor (G-Sensor) and a gyroscope. The acceleration sensor may be a three-axis linear acceleration sensor, which is used to detect linear accelerations in three mutually orthogonal axes of the electronic device. The gyroscope is used to detect the upward rotation speed of the three mutually orthogonal axes of the electronic device. If the value detected by the acceleration sensor and the gyroscope within a unit time does not change, the electronic device is considered to be in a static state. As long as a value of the acceleration sensor and the gyroscope changes within a unit time, it can be considered that the electronic device is in motion. In addition, the electronic device can also detect the intensity of ambient light through the light sensor. Regarding the working principles of the acceleration sensor, the gyroscope, and the light sensor, reference may be made to the prior art, which will not be repeated here.

In an embodiment, after obtaining the current state information of the electronic device, the information may be input into the user state prediction model to predict the current state of the user to obtain the current state information of the user. Among them, the output result of the aforementioned user state prediction model may be multiple user states and corresponding probabilities, and the highest probability may be selected as the prediction result.

Step 103: Process authorization history information and user status information according to the second algorithm model, and output authority management information.

In an embodiment, the above-mentioned second algorithm model may be a Bayesian model. The authorization history information obtained in step 101 and the user status information obtained in step 102 are used as the input of the Bayesian model, and the output is authorization management information. Wherein, the above authorization management information includes the determination result of all permissions required by the application program, and the determination result may include a first determination result of agreeing to authorization and a second determination result of disagreeing with authorization.

Step 104: Assign permissions to the application according to the permission management information.

After the electronic device obtains the authority management information, it is transmitted to the system layer of the electronic device to assign authority to the application. In one embodiment, when an application program applies for permission, the permission to be applied for by the application program is controlled according to the above-mentioned permission management information. If the authorization is approved, the system can automatically open the permission to be called, so that the user does not need to operate manually. Then you can turn on permissions. Or, a check box can be popped up, and the user can again choose whether to enable the to-be-invoked permission to meet the needs of different users. For example, if the user has a high demand for confidentiality of the authority, the user needs to complete further judgment. If you do not agree to the authorization, refuse to open the permission.

For example, after the application A is started, the application applies for the permission to make calls and the permission to use the camera. At this time, the electronic device predicts that the user is currently playing with a mobile phone on the bed at night and in a dark environment based on the current state of the electronic device. The authorization management letter output at this time may include agreeing to the application to obtain the right to make calls, and disagreeing to the application to obtain the right to use the camera.

It can be seen from the above that the application authority management method provided by the embodiment of the present application can record the authorization history information of the application in the electronic device. The authorization history information includes the authority authorization record of the application, obtains the current state information of the electronic device, and obtains the current status information of the electronic device according to the An algorithm model processes the status information, outputs user status information, processes authorization history information and user status information according to the second algorithm model, outputs permission management information, and assigns permissions to applications based on the permission management information. The embodiment of the application can effectively record the permissions required by the user when using the application. According to the current user status information, the third-party application can then intelligently assign its application permissions, thereby improving the security of the electronic device and reducing Power consumption of electronic equipment.

On the basis of the method described in the foregoing embodiment, the cleaning method of the present application will be further introduced below. Referring to FIG. 3, FIG. 3 is a schematic diagram of another flow chart of an application authority management method provided by an embodiment of the application, and the application authority management method includes:

Step 201: When an application in the electronic device requests permission for the first time, the identification information of the permission and the identification information of the application are recorded.

In one embodiment, the first request for permission for the application in the above electronic device may be when the application is installed, or when the application is opened for the first time. For example, a dialog box may be popped up to allow the user to determine whether the relevant permission is enabled. . The identification information of the authority may be the name of the authority, and the identification information of the application may be the name of the application.

Step 202: Generate authorization history information according to the identification information of the authority and the identification information of the application.

Wherein, the above-mentioned authorization history information includes application program identification and corresponding authority identification. For example, the permission applied by application A is the permission to obtain network status information, the permission to obtain WI-FI network status information, and the permission to obtain battery status information. The permission applied by application B is the permission to make calls and the permission to use the camera. Permission, permission to read the user's contact data, the permissions applied by application C are the permission to read the user's photo album, the permission to access GPS, the permission to set the desktop wallpaper, and so on.

Step 203: Acquire current sensor information of the electronic device, process the sensor information according to the first algorithm model, and output user status information.

For example, electronic devices have built-in sensors with different functions, and these sensors can detect the current state of the electronic device at any time. As an embodiment of the present application, the motion state of the electronic device can be detected by an acceleration sensor (G-Sensor) and a gyroscope. The acceleration sensor may be a three-axis linear acceleration sensor, which is used to detect linear accelerations in three mutually orthogonal axes of the electronic device. The gyroscope is used to detect the upward rotation speed of the three mutually orthogonal axes of the electronic device. If the value detected by the acceleration sensor and the gyroscope within a unit time does not change, the electronic device is considered to be in a static state. As long as a value of the acceleration sensor and the gyroscope changes within a unit time, it can be considered that the electronic device is in motion. In addition, the electronic device can also detect the intensity of ambient light through the light sensor. Regarding the working principles of the acceleration sensor, the gyroscope, and the light sensor, reference may be made to the prior art, which will not be repeated here.

In an embodiment, after acquiring the current sensor information of the electronic device, the sensor may be input to the user state prediction model to predict the user's current state to obtain the user's current state information.

In an embodiment, processing the sensor information according to the first algorithm model and outputting user status information may include:

Superimpose the sensor vectors to obtain a sensor tensor;

Step 204: Perform vectorization processing on the authorization history information to obtain an authorization history vector.

In an embodiment, performing vectorization processing on the authorization history information to obtain an authorization history vector may include:

Extract word sequences from the authorization history information;

The authorization history vector is generated according to the vector sequence.

Specifically, the aforementioned word embedding model can be configured in an electronic device, so that the electronic device can convert the received word sequence into a vector sequence through the word embedding model. In an embodiment, the electronic device may convert the word sequence into a vector sequence through a pre-trained word embedding model, which may specifically include: determining the first word vector corresponding to each word in the word sequence according to the vocabulary; using the word embedding model The first word vector corresponding to each word is converted into a second word vector; finally, the second word vector corresponding to each word is used to generate a vector sequence.

It should be noted that the above word embedding model can be an X×Y matrix, X can be used as the dimension after conversion, and Y can be used as the dimension before conversion. In the embodiment of the present application, the pre-conversion dimension Y can be configured according to the size of the vocabulary, and the post-conversion dimension X can generally be smaller than the pre-conversion dimension Y, so that useful information can be represented in a more compact form for convenient processing.

Step 205: Process the authorization history vector and user status information according to the Bayesian model, and output authority management information.

Among them, the authorization history vector obtained in step 204 and the user state information obtained in step 203 are used as the input of the Bayesian model, and the output is the authorization management information. Wherein, the above authorization management information includes the determination result of all permissions required by the application program, and the determination result may include a first determination result of agreeing to authorization and a second determination result of disagreeing with authorization.

Step 206: When the application program initiates a request for invoking the permission, it is judged according to the permission management information whether the permission is authorized, if so, step 207 is executed, and if not, the request is rejected.

After the electronic device obtains the authority management information, it is transmitted to the system layer of the electronic device, and the system layer determines whether the authority is authorized. In one embodiment, when the application program initiates a request for calling permission, the permission to be applied for by the application is judged according to the above permission management information, and if the authorization is approved, step 207 is executed and the system automatically opens the permission to be called, so that Users do not need to manually operate, can open permissions. If you do not agree, directly reject the above application request for calling permission.

Step 207: Turn on the permission of the application.

In one embodiment, before the permission of the application is opened, a check box may also be popped up, and the user can again choose whether to enable the permission to be invoked, so as to meet the needs of different users. For example, if the user has a high demand for confidentiality of the authority, the user needs to complete further judgment. If you do not agree to the authorization, refuse to open the permission.

As can be seen from the above, the application authority management method provided by the embodiment of the present application can record the identification information of the authority and the identification information of the application when the application in the electronic device requests the authority for the first time, and according to the identification information of the authority and the application The identification information generates authorization history information, obtains the current sensor information of the electronic device, processes the sensor information according to the first algorithm model, outputs user status information, and vectorizes the authorization history information to obtain the authorization history vector, according to Bayesian The model processes the authorization history vector and user status information, and outputs authority management information. When the application initiates a request for calling authority, it judges whether the authority is authorized according to the authority management information, and if so, the application authority is opened. The embodiment of the application can effectively record the permissions required by the user when using the application. According to the current user status information, the third-party application can then intelligently assign its application permissions, thereby improving the security of the electronic device and reducing Power consumption of electronic equipment.

Please refer to FIG. 4, which is a schematic structural diagram of an application authority management apparatus provided by an embodiment of the application. The authority management device 30 of the application program includes a recording module 301, a first processing module 302, a second processing module 303, and a distribution module 304;

The recording module 301 is used to record authorization history information of an application in an electronic device, and the authorization history information includes a permission authorization record of the application.

The first processing module 302 is configured to obtain the current state information of the electronic device, process the state information according to the first algorithm model, and output user state information.

In an embodiment, after obtaining the current state information of the electronic device, the information may be input into the user state prediction model to predict the current state of the user to obtain the current state information of the user.

The second processing module 303 is configured to process the authorization history information and user status information according to the second algorithm model, and output authority management information.

In an embodiment, the above-mentioned second algorithm model may be a Bayesian model. The authorization history information obtained by the recording module 301 and the user status information obtained by the first processing module 302 are used as the input of the Bayesian model, and the output is the authorization management. information. Wherein, the above authorization management information includes the determination result of all permissions required by the application program, and the determination result may include a first determination result of agreeing to authorization and a second determination result of disagreeing with authorization.

The allocation module 304 is configured to allocate permissions for the application program according to the permission management information.

In one embodiment, please refer to FIG. 5. FIG. 5 is a schematic diagram of a structure of an application authority management apparatus provided in an embodiment of the present application. The recording module 301 includes: a recording submodule 3011 and a generating submodule 3012 ；

The recording submodule 3011 is configured to record the identification information of the authority and the identification information of the application when the application in the electronic device requests permission for the first time;

The generating submodule 3012 is configured to generate the authorization history information according to the identification information of the authority and the identification information of the application.

In an embodiment, the current state information of the electronic device includes sensor information, and the first processing module 302 includes: a first processing sub-module 3021 and a first output sub-module 3022;

The first processing submodule 3021 is configured to perform vectorization processing on the sensor information to obtain sensor vectors;

The first output submodule 3022 is configured to superimpose the sensor vectors to obtain a sensor tensor, process the sensor tensor according to the first algorithm model, and output user state information.

In an embodiment, the second processing module 303 includes: a second processing sub-module 3031 and a second output sub-module 3032;

The second processing module 3031 is configured to perform vectorization processing on the authorization history information to obtain an authorization history vector;

The second output sub-module 3032 is configured to process the authorization history vector and user status information according to the second algorithm model, and output authority management information.

It can be seen from the above that the permission management apparatus of the application in the embodiment of the present application can record the authorization history information of the application in the electronic device. The authorization history information includes the permission authorization record of the application, obtains the current status information of the electronic device, and according to The algorithm model processes the status information, outputs user status information, processes authorization history information and user status information according to the second algorithm model, outputs authority management information, and assigns permissions to applications based on the authority management information. The embodiment of the application can effectively record the permissions required by the user when using the application. According to the current user status information, the third-party application can then intelligently assign its application permissions, thereby improving the security of the electronic device and reducing Power consumption of electronic equipment.

In the embodiment of this application, the permission management device of the application belongs to the same concept as the permission management method of the application in the above embodiment, and the permission management method of the application can be run on the permission management device of the application. For any method, for the specific implementation process, please refer to the embodiment of the permission management method of the application program, which will not be repeated here.

The term "module" used herein can be regarded as a software object executed on the operating system. The different components, modules, engines, and services described in this article can be regarded as implementation objects on the computing system. The devices and methods described herein can be implemented in the form of software, or of course, can also be implemented on hardware, and they are all within the protection scope of the present application.

The embodiment of the present application also provides a storage medium on which a computer program is stored, and when the computer program runs on a computer, the computer is caused to execute the above-mentioned application program authority management method.

The embodiment of the present application also provides an electronic device, such as a tablet computer, a mobile phone, and so on. The processor in the electronic device will load the instructions corresponding to the process of one or more application programs into the memory according to the following steps, and the processor will run the application programs stored in the memory to realize various functions:

In one embodiment, when recording the authorization history information of the application in the electronic device, the processor is configured to perform the following steps:

When the application in the electronic device requests permission for the first time, acquiring the identification information of the permission and the identification information of the application;

In an embodiment, the current state information of the electronic device includes sensor information, the state information is processed according to the first algorithm model, and when the user state information is output, the processor is configured to perform the following steps:

Superimpose the sensor vectors to obtain a sensor tensor;

In an embodiment, the authorization history information and user status information are processed according to the second algorithm model, and when the authority management information is output, the processor is configured to perform the following steps:

In an embodiment, when performing vectorization processing on the authorization history information to obtain an authorization history vector, the processor is configured to perform the following steps:

Extract word sequences from the authorization history information;

The authorization history vector is generated according to the vector sequence.

In an embodiment, the second algorithm model is a Bayesian model.

In an embodiment, when assigning permissions to the application program according to the permission management information, the processor is configured to perform the following steps:

If yes, open the permissions of the application.

Reference to "embodiments" herein means that a specific feature, structure, or characteristic described in conjunction with the embodiments may be included in at least one embodiment of the present application. The appearance of the phrase in various places in the specification does not necessarily refer to the same embodiment, nor is it an independent or alternative embodiment mutually exclusive with other embodiments. Those skilled in the art clearly and implicitly understand that the embodiments described herein can be combined with other embodiments.

Please refer to FIG. 6, the electronic device 400 includes a processor 401 and a memory 402. The processor 401 is electrically connected to the memory 402.

The processor 400 is the control center of the electronic device 400. It uses various interfaces and lines to connect various parts of the entire electronic device. It executes the electronic device by running or loading the computer program stored in the memory 402, and calling the data stored in the memory 402. Various functions of the device 400 and processing data, so as to monitor the electronic device 400 as a whole.

The memory 402 can be used to store software programs and modules. The processor 401 executes various functional applications and data processing by running the computer programs and modules stored in the memory 402. The memory 402 may mainly include a storage program area and a storage data area. The storage program area may store an operating system, a computer program required by at least one function (such as a sound playback function, an image playback function, etc.), etc.; Data created by the use of electronic equipment, etc. In addition, the memory 402 may include a high-speed random access memory, and may also include a non-volatile memory, such as at least one magnetic disk storage device, a flash memory device, or other volatile solid-state storage devices. Correspondingly, the memory 402 may also include a memory controller to provide the processor 401 with access to the memory 402.

In the embodiment of the present application, the processor 401 in the electronic device 400 will load the instructions corresponding to the process of one or more computer programs into the memory 402 according to the following steps, and the processor 401 will run and store the instructions in the memory 402 In order to realize various functions in the computer program, as follows:

Please also refer to FIG. 7. In some embodiments, the electronic device 400 may further include a display 403, a radio frequency circuit 404, an audio circuit 405, and a power supply 406. Among them, the display 403, the radio frequency circuit 404, the audio circuit 405, and the power supply 406 are electrically connected to the processor 401, respectively.

The display 403 may be used to display information input by the user or information provided to the user, and various graphical user interfaces. These graphical user interfaces may be composed of graphics, text, icons, videos, and any combination thereof. The display 403 may include a display panel. In some embodiments, the display panel may be configured in the form of a liquid crystal display (LCD), or an organic light-emitting diode (OLED).

The radio frequency circuit 404 may be used to transmit and receive radio frequency signals to establish wireless communication with network equipment or other electronic equipment through wireless communication, and to transmit and receive signals with the network equipment or other electronic equipment.

The audio circuit 405 may be used to provide an audio interface between the user and the electronic device through a speaker or a microphone.

The power supply 406 can be used to power various components of the electronic device 400. In some embodiments, the power supply 406 may be logically connected to the processor 401 through a power management system, so that functions such as charging, discharging, and power consumption management can be managed through the power management system.

Although not shown in FIG. 7, the electronic device 400 may also include a camera, a Bluetooth module, etc., which will not be repeated here.

In the embodiment of the present application, the storage medium may be a magnetic disk, an optical disc, a read only memory (Read Only Memory, ROM), or a random access memory (Random Access Memory, RAM), etc.

In the above-mentioned embodiments, the description of each embodiment has its own focus. For parts that are not described in detail in an embodiment, reference may be made to related descriptions of other embodiments.

It should be noted that for the permission management method of the application in the embodiment of the present application, ordinary testers in the field can understand that all or part of the process of implementing the permission management method of the application in the embodiment of the present application can be controlled by a computer program. The computer program may be stored in a computer readable storage medium, such as stored in the memory of an electronic device, and executed by at least one processor in the electronic device. The execution process may include applications such as The procedure of the embodiment of the program permission management method. Among them, the storage medium can be magnetic disk, optical disk, read-only memory, random access memory, etc.

For the permission management apparatus of the application program in the embodiment of the present application, its functional modules may be integrated in one processing chip, or each module may exist alone physically, or two or more modules may be integrated in one module. The above-mentioned integrated modules can be implemented in the form of hardware or software functional modules. If the integrated module is implemented in the form of a software function module and sold or used as an independent product, it can also be stored in a computer readable storage medium, such as a read-only memory, a magnetic disk, or an optical disk.

The above describes in detail an application permission management method, device, storage medium, and electronic equipment provided in the embodiments of the present application. Specific examples are used in this article to illustrate the principles and implementation of the present application. The above embodiments The description is only used to help understand the method and core idea of this application; at the same time, for those skilled in the art, according to the idea of this application, there will be changes in the specific implementation and scope of application, in summary , The content of this specification should not be construed as a limitation to this application.

Claims

A permission management method for an application program, wherein the method includes the following steps:

Record the authorization history information of the application in the electronic device, where the authorization history information includes the permission authorization record of the application;

Acquiring current status information of the electronic device, processing the status information according to the first algorithm model, and outputting user status information;

Process the authorization history information and user status information according to the second algorithm model, and output authority management information;

Assign permissions to the application program according to the permission management information.
The method of claim 1, wherein the recording of the authorization history information of the application in the electronic device includes:

When the application in the electronic device requests permission for the first time, record the identification information of the permission and the identification information of the application;

The authorization history information is generated according to the identification information of the authority and the identification information of the application.
The application authority management method according to claim 1, wherein the current state information of the electronic device includes sensor information, and processing the state information according to the first algorithm model to output user state information includes:

Performing vectorization processing on the sensor information to obtain a sensor vector;

Superimpose the sensor vectors to obtain a sensor tensor;

The sensor tensor is processed according to the first algorithm model, and user state information is output.
The application authority management method according to claim 1, wherein processing the authorization history information and user status information according to the second algorithm model to output authority management information includes:

Vectorize the authorization history information to obtain an authorization history vector;

Process the authorization history vector and user status information according to the second algorithm model, and output authority management information.
The method of claim 4, wherein the vectorization processing on the authorization history information to obtain the authorization history vector comprises:

Extract word sequences from the authorization history information;

Convert the word sequence through a pre-configured word embedding model to generate a corresponding vector sequence;

The authorization history vector is generated according to the vector sequence.
The method of claim 1, wherein the second algorithm model is a Bayesian model.
The method for managing permissions of an application program according to claim 1, wherein assigning permissions to the application program according to the permission management information comprises:

When the application program initiates a request for invoking permission, judging whether the permission is authorized according to the permission management information;

If yes, open the permissions of the application.
A permission management device for an application program, wherein the device includes: a recording module, a first processing module, a second processing module, and a distribution module;

The recording module is used to record the authorization history information of the application in the electronic device, the authorization history information includes the permission authorization record of the application;

The first processing module is configured to obtain current state information of the electronic device, process the state information according to a first algorithm model, and output user state information;

The second processing module is configured to process the authorization history information and user status information according to a second algorithm model, and output authority management information;

The allocation module is configured to allocate permissions to the application program according to the permission management information.
The application authority management device according to claim 8, wherein the recording module comprises: a recording sub-module and a generating sub-module;

The recording submodule is configured to record the identification information of the authority and the identification information of the application when the application in the electronic device requests the authority for the first time;

The generating submodule is configured to generate the authorization history information according to the identification information of the authority and the identification information of the application.
8. The permission management apparatus for an application program according to claim 8, wherein the current state information of the electronic device includes sensor information, wherein the first processing module includes: a first processing submodule and a first output submodule;

The first processing sub-module is configured to perform vectorization processing on the sensor information to obtain sensor vectors;

The first output sub-module is configured to superimpose the sensor vector to obtain a sensor tensor, process the sensor tensor according to the first algorithm model, and output user state information.
8. The application authority management device according to claim 8, wherein the second processing module comprises: a second processing sub-module and a second output sub-module;

The second processing module is configured to perform vectorization processing on the authorization history information to obtain an authorization history vector;

The second output sub-module is configured to process the authorization history vector and user status information according to the second algorithm model, and output authority management information.
8. The permission management device of an application program according to claim 8, wherein the second algorithm model is a Bayesian model.
A storage medium having a computer program stored thereon, wherein when the computer program runs on a computer, the computer is caused to execute the method for managing the authority of an application program according to any one of claims 1 to 7.
An electronic device includes a processor and a memory, the memory stores a plurality of instructions, wherein the processor loads the instructions in the memory to perform the following steps:

Record the authorization history information of the application in the electronic device, where the authorization history information includes the permission authorization record of the application;

Acquiring current status information of the electronic device, processing the status information according to the first algorithm model, and outputting user status information;

Process the authorization history information and user status information according to the second algorithm model, and output authority management information;

Assign permissions to the application program according to the permission management information.
The electronic device according to claim 14, wherein, when recording authorization history information of an application in the electronic device, the processor is configured to perform the following steps:

When the application in the electronic device requests permission for the first time, acquiring the identification information of the permission and the identification information of the application;

The authorization history information is generated according to the identification information of the authority and the identification information of the application.
The electronic device according to claim 14, wherein the current state information of the electronic device includes sensor information, wherein the state information is processed according to the first algorithm model, and when the user state information is output, the processor is configured to execute the following step:

Performing vectorization processing on the sensor information to obtain a sensor vector;

Superimpose the sensor vectors to obtain a sensor tensor;

The sensor tensor is processed according to the first algorithm model, and user state information is output.
The electronic device according to claim 14, wherein the authorization history information and user status information are processed according to the second algorithm model, and when the authority management information is output, the processor is configured to perform the following steps:

Vectorize the authorization history information to obtain an authorization history vector;

Process the authorization history vector and user status information according to the second algorithm model, and output authority management information.
The electronic device according to claim 17, wherein, when the authorization history information is vectorized to obtain an authorization history vector, the processor is configured to perform the following steps:

Extract word sequences from the authorization history information;

Convert the word sequence through a pre-configured word embedding model to generate a corresponding vector sequence;

The authorization history vector is generated according to the vector sequence.
The electronic device according to claim 14, wherein the second algorithm model is a Bayesian model.
The electronic device according to claim 14, wherein, when assigning permissions to the application program according to the permission management information, the processor is configured to perform the following steps:

When the application program initiates a request for invoking permission, judging whether the permission is authorized according to the permission management information;

If yes, open the permissions of the application.