WO2021022433A1

WO2021022433A1 - Application monitoring method and apparatus, and storage medium and electronic device

Info

Publication number: WO2021022433A1
Application number: PCT/CN2019/099169
Authority: WO
Inventors: 崔胜軫; 孙波; 曹奕松
Original assignee: 宇龙计算机通信科技(深圳)有限公司
Priority date: 2019-08-05
Filing date: 2019-08-05
Publication date: 2021-02-11
Also published as: CN114175026A

Abstract

Disclosed are an application monitoring method and apparatus, and a storage medium and a server. The method comprises: when it is detected that an authorized application enables a specified application permission, acquiring an application identifier of the authorized application; determining whether the application identifier is present in a whitelist identifier set; and if the application identifier is not present in the whitelist identifier set, outputting prompt information on the basis of a preset prompt rule. The embodiments of the present application can reduce the privacy leakage risk of a user, and improves the information security of the user.

Description

Application monitoring method, device, storage medium and electronic equipment

Technical field

This application relates to the field of computer technology, and in particular to an application monitoring method, device, storage medium and electronic equipment.

Background technique

In the mobile Internet era, there are more and more applications that can be installed on user terminals (such as smart phones and tablets). These applications can provide users with various services, such as social networking, shopping, news, information recording, and weather inquiries And so on, to meet the different needs of users, but also to facilitate users' life, entertainment and learning.

When an application is installed on a user terminal, access permissions for some applications are usually granted by default (such as turning on the microphone, camera, earpiece, etc.). However, when the installed application is a risky application, it is possible to enable certain or certain application access permissions without the user’s knowledge, and these application access permissions involve user privacy, which will result in the disclosure of user privacy and affect the user Information security.

Summary of the invention

The embodiments of the present application provide an application monitoring method, device, storage medium, and electronic equipment, which can reduce the risk of user privacy leakage and improve user information security. The technical solution is as follows:

In the first aspect, an embodiment of the present application provides an application monitoring method, and the method includes:

When it is monitored that an authorized application opens the specified application permission, acquiring the application identifier of the authorized application;

Determine whether the application identifier exists in the whitelist identifier set;

If the application identifier does not exist in the whitelist identifier set, prompt information is output based on a preset prompt rule.

In a second aspect, an embodiment of the present application provides an application monitoring device, the device including:

The application identification obtaining module is configured to obtain the application identification of the authorized application when it is monitored that the authorized application has opened the specified application permission;

The application identification judgment module is used to judge whether the application identification exists in the whitelist identification set;

The prompt information output module is configured to output prompt information based on a preset prompt rule if the application identifier does not exist in the whitelist identifier set.

In a third aspect, an embodiment of the present application provides a computer storage medium that stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing the application monitoring method described above.

In a fourth aspect, an embodiment of the present application provides an electronic device, which may include: a processor and a memory; wherein the memory stores a computer program, and the computer program is adapted to be loaded by the processor and execute the aforementioned Application monitoring method.

The beneficial effects brought about by the technical solutions provided by some embodiments of the present application include at least:

In one or more embodiments of the present application, when the user terminal monitors that an authorized application opens the specified application permission, it obtains the application identifier of the authorized application, and determines whether the application identifier exists in the whitelist identifier set. If so, then Output prompt information based on preset prompt rules. By judging the risk of an authorized application based on the application identifier, when the authorized application is determined to be a risky application, prompting information is output to the user in a timely manner, which can reduce the risk of user privacy leakage and thereby improve the user's information security.

Description of the drawings

In order to explain the embodiments of the present invention or the technical solutions in the prior art more clearly, the following will briefly introduce the drawings that need to be used in the description of the embodiments or the prior art. Obviously, the drawings in the following description are only These are some embodiments of the present invention. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative work.

FIG. 1 is a schematic flowchart of an application monitoring method provided by an embodiment of the present application;

FIG. 2a is a schematic diagram of opening an authorized application involved in an application monitoring method provided by an embodiment of the present application;

2b is a schematic diagram of a display interface of an authorized application involved in the application monitoring method provided by an embodiment of the present application;

2c is a schematic diagram of a display interface of another authorized application involved in the application monitoring method provided by an embodiment of the present application;

FIG. 3a is a schematic diagram of a kind of prompt information involved in an application monitoring method provided by an embodiment of the present application;

FIG. 3b is a schematic diagram of another prompt information involved in the application monitoring method provided by an embodiment of the present application;

FIG. 3c is a schematic diagram of another prompt information involved in the application monitoring method provided by an embodiment of the present application;

4 is a schematic flowchart of another application monitoring method provided by an embodiment of the present application;

FIG. 5a is a schematic diagram of a prompt setting interface involved in an application monitoring method provided by an embodiment of the present application;

FIG. 5b is a schematic diagram of a setting interface for a reminder light working mode involved in an application monitoring method provided by an embodiment of the present application;

Fig. 6 is a schematic structural diagram of an application monitoring device provided by an embodiment of the present application;

FIG. 7 is a schematic structural diagram of a prompt information output module provided by an embodiment of the present application;

FIG. 8 is a schematic structural diagram of another application monitoring device provided by an embodiment of the present application;

FIG. 9 is a schematic structural diagram of an electronic device provided by an embodiment of the present application.

detailed description

The technical solutions in the embodiments of the present application will be clearly and completely described below in conjunction with the drawings in the embodiments of the present application. Obviously, the described embodiments are only a part of the embodiments of the present application, rather than all of the embodiments. Based on the embodiments in this application, all other embodiments obtained by those of ordinary skill in the art without creative work shall fall within the protection scope of this application.

In the description of this application, it should be understood that the terms "first", "second", etc. are only used for descriptive purposes, and cannot be understood as indicating or implying relative importance. In the description of this application, it should be noted that, unless expressly stipulated and defined otherwise, "including" and "having" and any variations thereof are intended to cover non-exclusive inclusions. For example, a process, method, system, product, or device that includes a series of steps or units is not limited to the listed steps or units, but optionally includes unlisted steps or units, or optionally also includes Other steps or units inherent to these processes, methods, products or equipment. For those of ordinary skill in the art, the specific meanings of the above-mentioned terms in this application can be understood under specific circumstances. In addition, in the description of this application, unless otherwise specified, "plurality" means two or more. "And/or" describes the association relationship of the associated objects, indicating that there can be three types of relationships, for example, A and/or B, which can mean: A alone exists, A and B exist at the same time, and B exists alone. The character "/" generally indicates that the associated objects are in an "or" relationship.

The application monitoring method provided in the embodiments of the present application will be described in detail below in conjunction with specific embodiments. The method can be implemented by relying on a computer program and can be run on an application monitoring device based on the von Neumann system. The computer program can be integrated in the application or run as an independent tool application. Wherein, the application monitoring device in the embodiment of the present application may be a user terminal, including but not limited to: a personal computer, a tablet computer, a handheld device, a vehicle-mounted device, a wearable device, a computing device, or other processing devices connected to a wireless modem.

For the convenience of description, the application monitoring device is taken as an example of a user terminal for description in the embodiments of the present application. The operating system of the user terminal includes, but is not limited to, an Android system, an IOS system, and a Windows phone system. In this embodiment, the operating system of the user terminal is an Android system as an example for description.

Please refer to FIG. 1, which provides a schematic flowchart of an application monitoring method for an embodiment of this application. As shown in Fig. 1, the method of the embodiment of the present application may include the following steps:

Step 101: Obtain the application identifier of the authorized application when it is monitored that the authorized application opens the specified application permission.

The authorized application can be understood as when the user terminal runs an application, it may need to call other application permissions to complete the function of the application. For example, when running an e-commerce shopping application, it may require "recording", "navigation", " For functions such as "photograph" and "video", the application program needs to call the application program corresponding to the function to complete the above-mentioned functions, for example, call the camera application to complete the photographing function. At this time, before the application program wants to call the camera application program, it is necessary to grant the application program the permission to call or start the camera application program in advance, that is, the camera application permission. Usually the application permissions are granted to the application when it is first installed. Here, the application is the authorized application. The authorized applications include, but are not limited to, applications developed by a third party and built in the operating system of the user terminal, including some applications, applets, plug-ins, etc. developed by a third party and built in the operating system of the user terminal.

In this embodiment, the specified application permission can be understood as an application permission related to user privacy and information security. The application permission may be an application permission to obtain current user location information, an application permission to read user address book information, It can be the application permission to obtain the chat history in the instant messaging software, or the application permission to use the camera to take the user's current photo.

The application identification may be understood as information that can be used to uniquely identify the application, and the application identification may be the id, package name, version number, etc. of the application. The application identifier may be an application number matched to the application program based on a preset matching rule when the user terminal installs the application. The user terminal allocates an application number when each application is installed, and uses the number as an application identifier to identify the application.

Specifically, when the user terminal installs the authorized application, it first initializes the authorized application, and the initialization includes granting application permissions to the authorized application, allocating processes for the application, etc. The authorized application is running When the user terminal will assign an active process. The user terminal has an authorized application monitoring mechanism, which can be understood to mean that when the authorized application is initialized, a monitoring process for the authorized application can be created at the same time to monitor the active process of the authorized application when it is running, such as monitoring the authorized application Permissions for applications opened. The active process and the listening process of the authorized application are in a level relationship, and the level relationship can be understood as when the authorized application is suspended or uninstalled, the life cycle of the listening process of the authorized application will not be affected .

After the user opens the authorized application on the user terminal, the authorized application will be triggered to start the monitoring mechanism to monitor the status of the authorized application's invoking application permissions. When the user is using the authorized application, the authorized application is triggered to open the designated When applying permissions, the monitoring mechanism detects that the authorized application opens the designated application permissions. At this time, based on the time point when the authorized application opens the designated application permission, query and obtain the application identifier of the authorized application at the current time point in the data log stored locally of the user terminal.

Optionally, the user opening the authorized application on the user terminal may be completed through an external device, for example, the user may select an icon of the authorized application on the display interface of the user terminal through a mouse connected to the user terminal and input an instruction to open the authorized application; It can be the user inputting the corresponding instruction through the keyboard or touchpad connected to the user terminal; it can be the instruction of the user to open the authorized application through voice input (such as voice input to open instant messaging software, etc.); it can be the user through the camera to collect gesture control instructions. The operation of opening a specific authorized application may also be the selection of an icon of the authorized application by touching the screen of the user terminal.

For the convenience of the description of the embodiments of the present application, the following specifically takes the user to select an icon of an authorized application by touching the screen of the user terminal as an example. The user terminal includes a touch screen, and the touch screen has a function of sensing user touch operations. The opening of the authorized application and the triggering of the authorized application to open the specified application permission are both triggered by the user through a touch operation on the user terminal. The structure of the touch screen includes at least three layers: a display, a sensor, and a controller. The display is configured with a flexible display panel and a touch sensor arranged under the flexible display panel. The touch sensor can not only detect the location and area touched by the user but also the pressure of the touch.

For example: as shown in Figure 2a, when the user selects the icon of an authorized application-news on the display layer of the touch screen of the user terminal, when the touch sensor detects the presence of a touch input, the corresponding signal or signals are sent to Controller. The controller processes the signal or multiple signals, and the user terminal recognizes the user's input to open the "news" instruction, and opens the "news" by reading and executing the machine executable instruction corresponding to the control logic to open the "news". The interface after the "news" application is started is shown in Figure 2b. When the "news" application is started, the authorized application is triggered to start a monitoring mechanism to monitor the invocation of the "news" application or the status of opening application permissions. When using the "news application" application to select the first news to be browsed by specifically touching the first news option, the interface of the first news is as shown in Figure 2c. At this time, when the interface of the first news is opened , Will trigger the designated application permission related to user privacy-the application permission to read user address book information, and the monitoring mechanism of the user terminal monitors that the authorized application opens the designated application permission-the application permission to read user address book information. Then the user terminal performs the next operation-based on the time point when the "news" application opens the designated application permissions, query and obtain the application of the "news" application corresponding to the time point "00:19" in the data log stored locally in the user terminal Logo.

In a feasible implementation manner, the way for the user terminal to monitor the authorized application to enable the specified application permissions may be by monitoring whether the application interface (API) of the specified application corresponding to the specified application permission is called at the framework layer of the user terminal system Taking the user terminal system as the Android system as an example, when the authorized application of the user terminal opens the specified application permissions, it will call the interface of the specified application of the Framework framework layer to use the services of the specified application, such as all of the user terminal The authorized application opens the location location permission to locate the current location, it will call the Location Manager (location location) interface of the location application in the Framework layer, and the authorized application can be monitored to open the specified application by monitoring the Location Manager (location location) interface Permissions-location targeting permissions.

Wherein, when the authorized application calls the application interface (API) of the specified application corresponding to the specified application permission in the framework layer of the user terminal system, the user terminal system saves the record of the current call to the application interface (API) in In the corresponding data log, the record includes the call time, the application identification of the authorized application, etc. At this time, the user terminal can obtain the specified application permission from the corresponding data log based on the time point when the authorized application opens the specified application permission. The application identifier of the authorized application corresponding to the time point.

Optionally, the manner in which the user terminal monitors the authorized application to open the specified application permissions may be obtained based on the analysis and processing of threads allocated by the user terminal to the third-party application, may be obtained based on the system log analysis of the user terminal system, or may be based on The application service corresponding to the specified application permission is monitored and so on.

Optionally, when the user terminal starts the authorized application, it establishes a monitoring process that can be used to monitor the authorized application. The monitoring process can monitor multiple specified application permissions opened by the authorized application, or monitor Multiple authorized applications enable designated application permissions to save the resource space of the user terminal.

Step 102: Determine whether the application identifier exists in the whitelist identifier set.

The set of whitelist identifiers includes a totality of application identifiers of at least one whitelist application. The whitelist application may be understood as an authorized application that has been authenticated as safe, and in this embodiment, the whitelist application may be understood as an application that does not involve leaking user privacy during the operation of the whitelist application. In this embodiment, the whitelisted application can be understood as an authorized application that uses the specified application to authenticate as safe by enabling the specified application right, that is, the authorized application does not involve in the running process of the authorized application calling the specified application after the specified permission is turned on Leak user privacy.

The whitelist identification set may be determined by the user terminal based on a security policy. For example, the user terminal is based on a security policy. After the authorized application opens the specified application permissions, the authorized application runs in the sandbox to monitor the authorization Whether the activity process of the application leaks user privacy; it can be determined based on third-party security protection software, for example, users can obtain the latest whitelist identifier on the server by the third-party security protection software, and update the local whitelist identifier set; also It can be added by the user on the whitelist setting interface of the user terminal, etc.

Specifically, based on the obtained application identifiers of the authorized applications, the user terminal invokes threads in the user terminal thread pool to perform matching calculations on the application identifiers in the whitelist identifier set, and when the match is found in the whitelist identifier set When the application identifier exists in the application identifier, the authorized application is determined as a whitelist application; when it is matched that the application identifier does not exist in the whitelist identifier set, the authorized application is determined as a risk application, and Risky applications can be understood as the risk of leaking user privacy in the authorized application in question.

Step 103: If the application identifier does not exist in the whitelist identifier set, output prompt information based on a preset prompt rule.

The preset prompt rule refers to a prompt manner preset by the user terminal, and the preset prompt rule may usually display the prompt information of the specified application opening corresponding to the specified application permission in the form of pictures, text, audio, etc. In this embodiment, the designated application can be understood as an application corresponding to an application permission related to user privacy and information security. The specified application may be a camera, positioning, address book, microphone, etc.

Specifically, the user terminal monitors that an authorized application opens designated application permissions, and the designated application permissions include, but are not limited to, location permissions, microphone access permissions, camera permissions, address book reading permissions, etc., and the application of the authorized application is obtained Identification, by judging that the application identification does not exist in the whitelist identification set, the authorized application is determined to be a risk application, and the user terminal pops up a prompt box in the display area of the screen and displays the specified application permission corresponding to the specified application authority. Information opened.

For example: as shown in Figure 2c, when the user is using the "news application" application, select a news option to browse. The interface diagram of the news is shown in Figure 2c. In this process, when the user selects this news and jumps to the news interface, the user triggers and opens the designated application permission related to user privacy-the application to read user address book information Permission, the monitoring mechanism of the user terminal detects that the authorized application opens the designated application permission-the application permission to read the user address book information. Then obtain the application identifier of the "news" application. After the user terminal matches, it is found that the application identifier does not exist in the whitelist identifier set. The user terminal pops up a prompt box as shown in Figure 3a in the display area of the screen and displays "Please note that the address book is being read."

Optionally, the way for the user terminal to output the prompt information may be to load a corresponding text reminder notification on the current display interface. For example, as shown in Figure 3b, when the application permission set includes the specified application permission-location permission, the user terminal Push the prompt message "Please note that the current positioning is enabled" on the notification bar in the screen display area. The user terminal can also provide the user with related operations based on the prompt information on the notification bar, and the related operations are understandable The user can choose to ignore the prompt information or close the "location" application by clicking the "operation" button shown in FIG. 3c.

Optionally, the way for the user terminal to output the prompt information can be in the form of voice output, for example: the user terminal can voice broadcast "the current designated application (microphone, front camera, positioning, etc.) is enabled"; it can be vibration For example, the user terminal can call the internal vibration motor to prompt with a specific vibration frequency; it can also call the breathing light, flashing light, and fill light on the user terminal.

It should be noted that there are many ways for the user terminal to output the prompt information for starting the specified application, which may be one or more of the above, which is not specifically limited here.

In the embodiment of this application, when the user terminal monitors that an authorized application opens the specified application permission, it obtains the application identifier of the authorized application, and determines whether the application identifier exists in the whitelist identifier set, and if so, based on a preset prompt The rule outputs prompt information. By judging the risk of an authorized application based on the application identifier, when the authorized application is determined to be a risky application, prompting information is output to the user in a timely manner, which can reduce the risk of user privacy leakage and thereby improve the user's information security.

Please refer to FIG. 4, which is a schematic flowchart of another embodiment of an application monitoring method proposed in this application. specific:

Step 201: When it is monitored that an authorized application opens the camera access permission, obtain the application identification of the authorized application.

The camera access permission can be understood as when the authorized application takes a photo of the current environment through the camera, the camera access permission needs to be granted to the authorized application.

Specifically, the user terminal has an authorized application monitoring mechanism. When the user terminal runs at least one authorized application, the authorized application monitoring mechanism can establish monitoring of the authorized application that grants the camera access permission, by monitoring the specified camera access permission. Whether the application interface (API) of the framework layer of the user terminal system is invoked to monitor the state of the at least one authorized application that grants camera access permission to open or invoke the camera access permission, when the user is using the at least one authorized application In the process of triggering the authorization application to enable the camera access permission, for example, the user needs to enable the camera access permission in the process of using the authorized application, scan and recognize the QR code, applet code, barcode, etc., or turn on the camera to take pictures and videos Wait. The authorized application monitoring mechanism of the user terminal detects that the application interface (API) of the camera application in the framework layer of the user terminal system is called. At this time, the authorized application monitoring mechanism feeds back the notification to the user terminal that the authorized application opens the camera access permission , And then obtain the application identifier of the authorized application.

For example, if the user terminal is a mobile phone and the user terminal system is an Android system, the user opens an authorized application on the mobile phone-a shopping application, and the user browses the goods that need to be purchased through the shopping application. The shopping software is used without the user's knowledge. The camera access permission is activated, and the camera is turned on by enabling the camera access permission. In this process, the CameraService interface of the Framework layer of the Android system is called to use the camera application. The authorized application monitoring mechanism of the mobile phone monitors this interface. At this time, it is monitored that the authorized application-shopping application opens the camera access permission, and then the application identification of the shopping application is obtained.

For details on obtaining the application identifier of the authorized application, please refer to specific step 101, which will not be repeated here.

Step 202: Determine whether the application identifier exists in the whitelist identifier set.

For details, refer to step 102, which will not be repeated here.

Step 203: If the application identifier does not exist in the whitelist identifier set, flash an indicator light.

The indicator light may be understood as a light-emitting device such as a breathing light, a flashlight, and a fill light on the user terminal, and the user terminal can control the blinking of the indicator light by calling the program interface corresponding to the indicator light.

Specifically, the user terminal monitors that an authorized application opens the camera access permission to obtain the application identifier of the authorized application, and through judgment, the application identifier does not exist in the whitelist identifier set, and the authorized application is determined as a risk application, Then the indicator light is configured to remind the user that the current authorized application has turned on the camera by means of flashing the indicator light.

Specifically, the user terminal configures the indicator light by configuring the relevant parameters of the reminder light node of each color light on the user terminal system kernel. The relevant parameters include the level state of the reminder light and the brightness value of the reminder light. , Reminder light flashing frequency, etc.

It should be noted that the node refers to a location in the system driver of the user terminal. For the Android system, the location can be seen through a file manager with root permissions. Writing data in this location can facilitate the Framework of the Android system. The application of the framework layer accesses the underlying driver, and then controls the hardware that is the indicator light.

Specifically, the user terminal first obtains the first initial level state and the first initial brightness value of the first color light, and obtains the second initial level state and the second initial brightness value of the second color light.

Wherein, the nodes of the first color light and the second color light in the system kernel of the user terminal correspond to an initial level state and a corresponding initial brightness value. The first color light and the second color light may be one of common color lights (such as red, orange, peach, green, blue, purple, and yellow, etc.), for example, the first color light may be red light , The second color light can be green light. The initial level state can be understood as a high level state and a low level state. Generally, the high level state represents flickering and the low level state represents stop flickering. The initial brightness value refers to the physical quantity corresponding to the initial state of the light, which is used to characterize the physical quantity of the luminous intensity on the surface of the luminous body (indicator lamp). Generally, the initial brightness value ranges from 0 to 255. The initial brightness value The larger the light, the higher the brightness of the color.

In a feasible implementation manner: taking the first color light as red light and the second color light as green light as an example, the user terminal can read the first initial level state and the second color light of the first color light through the read function. An initial brightness value, the second initial level state of the second color light and the second initial brightness value are read, and the above values are obtained and stored in the corresponding global variables. Such as:

Read the value of /sys/class/leds/red/breath through the read function, that is, the first initial level state of the first color light-red light, and save it as Value1, usually the initial state of the first color light is low Status, that is, the value of Value1 is 0, and the first color light is in the state of stopping blinking.

Read the value of /sys/class/leds/red/brightness through the read function, that is, the first initial brightness value of the first color light, and save it as Value2;

Read the value of /sys/class/leds/green/breath through the read function, that is, the second initial level state of the second color light-green light, and save it as Value3, usually the initial state of the second color light is low Status, that is, the value of Value3 is 0, and the second color light is in the state of stopping blinking.

Read the value of /sys/class/leds/green/brightness through the read function, that is, the second initial brightness value of the second color light, and save it as Value4.

Then the user terminal can use the write function to set the first color light to a high level state and set the second color light in the indicator light to a low level state, that is, to set /sys/class/ through the write function The value of leds/red/breath is set to 1, and the value of /sys/class/leds/green/breath is set to 0. So as to control the flickering of the first color light, and gradually increase the brightness value of the first color light from the first initial brightness value, that is, to change the value of /sys/class/leds/red/brightness through the write function The value is accumulated from the initial state value to a fixed value, which is less than 255.

Finally, when the user terminal can use the write function to set the first color light to a low level state and the second color light to a high level state, that is, to set the value of Value1 to 0 through the write function, /sys The value of /class/leds/red/breath is set to 0, and the value of /sys/class/leds/green/breath is set to 1, so as to control the flickering of the second color light and change the brightness of the second color light The value gradually increases from the second initial brightness value, that is, the value of /sys/class/leds/green/brightness is accumulated from the initial state value to a fixed value through the write function, and the fixed value is less than 255 to achieve the indication The light flashes in two colors.

Optionally, the user terminal can set multi-color or single-color flashing of the indicator light, and also set the flashing frequency of the indicator light. For example, you can set the flashing frequency of the green light, that is, read /sys/class/led/green/delay_on through the read function. And the initial value of /sys/class/led/green/delay_off, reset the flashing frequency of the green light through the write function.

In a feasible implementation manner, the way of flashing the reminder light of the user terminal can be set based on the selection instruction input by the user. The user terminal provides the user with a flashing setting interface for the reminder light, and the user can select the corresponding one in the setting interface of the user terminal. The reminder light flashes setting options to determine how the reminder light works.

For example, the user can select the prompt light setting option in the setting interface of the user terminal, and then the user terminal displays the interface shown in Figure 5a in the screen display area, and the interface shown in Figure 5a displays "microphone on prompt" and "camera Turn on reminder, “Phonebook call reminder”, “Unified settings” and other reminder light setting options. If the user needs to set the working mode of the reminder after the authorized application turns on the camera access permission, the user can click on “Camera Enable the prompt" option to trigger the user terminal to display an interface for selecting the prompt light-related options. The interface may be the interface shown in Figure 5b. The user can set the prompt light color, flashing frequency, and prompt on the interface. Options such as the light gradual change time and the initial brightness value of the reminder light, and the user can specifically set the color of the reminder light, flashing frequency, etc. through these options. After completing the setting of the working mode of the prompt light after turning on the camera access permission for the authorized application, the user terminal can be triggered to store the correspondence between the authorized application turning on the camera access permission and the working mode of the prompt light locally, and perform corresponding Setting, when it is detected that the application identifier of the authorized application is not in the whitelist identifier set, it is determined that the authorized application is a risk application, and based on the corresponding relationship, the indicator light flashes to prompt the user of the camera corresponding to the camera access permission Turned on.

Step 204: Receive a shutdown instruction input for the designated application corresponding to the camera access authority, and restore the indicator light to the initial state.

Specifically, after the user terminal prompts the user that the camera corresponding to the camera access permission is turned on by flashing the indicator light, the user can choose whether to close the designated application corresponding to the camera access permission—the camera application. When the user chooses to close the camera application according to the prompt information, a camera application close instruction can be input to the user terminal. The user terminal receives and responds to the camera application close instruction, sets the camera application to the closed state, and sets all The indicator light returns to the initial state, that is, the indicator light is turned off.

Specifically, the camera application shutdown instruction may be that the user finds the third-party application by selecting the application management in the setting option in the screen display area of the user terminal, and then selects the startup process management of the third-party application, from the first The camera process corresponding to the camera application is found among all the processes of opening the third-party application, and finally, the input is input to the user terminal in a closed manner.

Optionally, the camera application closing instruction may be that the user terminal provides a camera application closing option in the status bar of the screen display area, and the user inputs by selecting the camera shutdown button; it may be the user terminal detecting that the user closes the authorized application The closing of the current camera application triggered by camera access rights; it can be an instruction from the user to close the specified application-camera application through voice input; it can be an instruction from the specified application-camera application that the user collects gesture control instructions input through the camera; Press the designated physical key (power on/off key, volume key, etc.) to input the designated application-camera application instruction, etc.

Specifically, the user terminal adjusts the first color light to the first initial level state and the first initial brightness value, and adjusts the second color light to the second initial level state And the second initial brightness value, so that the indicator light returns to the initial state, that is, the indicator light is turned off.

Taking the above example that the first color light is red light and the second color light is green light as an example, the user terminal sets the value of /sys/class/leds/red/brightness to Value1 through the write function, that is, the first color light- Adjusting the red light to the first initial level state;

Set the value of /sys/class/leds/red/brightness to Value2 through the write function, that is, the first color light-red light is adjusted to the first initial brightness value;

Set the value of /sys/class/leds/green/brightness to Value3 through the write function, that is, adjust the second color light-green light to the second initial level state;

The value of /sys/class/leds/green/brightness is set to Value4 through the write function, that is, the second color light-green light is adjusted to the second initial brightness value.

After completing the above settings, the prompt light returns to the initial state, that is, the indicator light is turned off.

In a feasible implementation manner, the user terminal has an automatic detection function. When the user terminal prompts the user to start the camera application by flashing an indicator light, the user terminal does not receive a close instruction input for the designated application corresponding to the camera access permission within a specified time, and the user terminal turns on the automatic detection function, That is to detect whether the user is currently using the camera application. The detection may be based on the behavior characteristics when the camera application is started. The behavior characteristics may be that after the user terminal authorizes the application to start or invoke the camera application, the display interface will display the imaging interface of the camera. If the current display interface does not display the current In the imaging interface, the user terminal closes the background process of opening the photo gallery; the behavior feature may be that when the user terminal starts the camera application, the user will operate the camera application (for example, focus, adjust exposure, etc.), When the operation is detected, the user terminal closes the background process that the camera is turned on; the behavior characteristic may be that when the user terminal display interface malfunctions due to a malfunction, the user may frequently press the physical buttons (power on/off key, Back button, home button, etc.), at this time, when the user terminal detects the frequent pressing of the physical button operation, the background process that the camera is turned on is turned off, etc.

The following are device embodiments of this application, which can be used to implement the method embodiments of this application. For details not disclosed in the device embodiment of this application, please refer to the method embodiment of this application.

Please refer to FIG. 6, which shows a schematic structural diagram of a positioning device provided by an exemplary embodiment of the present application. The positioning device can be implemented as all or a part of the terminal through software, hardware or a combination of the two. The device 1 includes an application identification acquisition module 11, an application identification judgment module 12, and a prompt information output module 13.

The application identification obtaining module 11 is configured to obtain the application identification of the authorized application when it is monitored that the authorized application opens the specified application permission;

The application identification judgment module 12 is used to judge whether the application identification exists in the whitelist identification set;

The prompt information output module 13 is configured to output prompt information based on a preset prompt rule if the application identifier does not exist in the whitelist identifier set.

Optionally, as shown in FIG. 8, the device 1 further includes:

The application identification acquiring module 14 is used to acquire the application identification of the application when the application is monitored to be started;

The third-party application determining module 15 is configured to determine the application as a third-party application when the application identifier is inconsistent with the system application identifier.

Optionally, when the designated application permission is the camera access permission, the prompt information output module is specifically used for:

Flashing indicator.

Optionally, as shown in FIG. 7, the prompt information output module 13 further includes:

The first control unit 132 is configured to control the first color light in the indicator light to a high level state and the second color light in the indicator light to a low level state. Color lights flicker;

The second control unit 133 is configured to control the flickering of the second color light when the first color light is set to a low level state and the second color light is set to a high level state.

The initial state acquiring unit 131 is configured to acquire the first initial level state and the first initial brightness value of the first color light, and acquire the second initial level state and the second initial brightness value of the second color light .

Optionally, as shown in FIG. 7, the first control unit 132 is specifically configured to:

Controlling the flickering of the first color light and gradually increasing the brightness value of the first color light from the first initial brightness value;

The second control unit 133 is specifically configured to:

Controlling the flickering of the second color light and gradually increasing the brightness value of the second color light from the second initial brightness value.

Optionally, as shown in FIG. 8, the device further includes:

The prompt information closing module 14 is configured to receive a closing instruction input for the designated application corresponding to the designated application permission, and close the prompt information.

Optionally, the prompt information closing module is specifically used for:

Restore the indicator light to the initial state.

Optionally, the prompt information output module 13 is specifically used for:

Adjust the first color light to the first initial level state and the first initial brightness value, and adjust the second color light to the second initial level state and the second initial Brightness value.

It should be noted that when the application monitoring device provided in the above embodiment executes the application monitoring method, only the division of the above functional modules is used as an example for illustration. In actual applications, the above functions can be allocated by different functional modules as needed. , Divide the internal structure of the device into different functional modules to complete all or part of the functions described above. In addition, the application monitoring device and the application monitoring method embodiments provided by the above embodiments belong to the same concept, and the implementation process is detailed in the method embodiments, which will not be repeated here.

The serial numbers of the foregoing embodiments of the present application are for description only, and do not represent the superiority of the embodiments.

The embodiment of the present application also provides a computer storage medium. The computer storage medium may store a plurality of instructions, and the instructions are suitable for being loaded by a processor and executed as described in the embodiment shown in FIG. 1 to FIG. 5b. For the application monitoring method, the specific execution process can refer to the specific description of the embodiment shown in FIG. 1 to FIG. 5b, which is not repeated here.

The present application also provides a computer program product that stores at least one instruction, and the at least one instruction is loaded by the processor and executed by the application monitoring of the embodiment shown in the above-mentioned FIG. 1 to FIG. 5b. For the specific execution process of the method, refer to the specific description of the embodiment shown in FIG. 1 to FIG. 5b, which will not be repeated here.

Please refer to FIG. 9, which provides a schematic structural diagram of an electronic device according to an embodiment of this application. As shown in FIG. 9, the server 1000 may include: at least one processor 1001, at least one network interface 1004, a user interface 1003, a memory 1005, and at least one communication bus 1002.

Among them, the communication bus 1002 is used to implement connection and communication between these components.

The user interface 1003 may include a display screen (Display) and a camera (Camera), and the optional user interface 1003 may also include a standard wired interface and a wireless interface.

Among them, the network interface 1004 may optionally include a standard wired interface and a wireless interface (such as a WI-FI interface).

The processor 1001 may include one or more processing cores. The processor 1001 uses various excuses and lines to connect various parts of the entire server 1000, and executes the server by running or executing instructions, programs, code sets, or instruction sets stored in the memory 1005, and calling data stored in the memory 1005. Various functions and processing data of 1000. Optionally, the processor 1001 may adopt at least one of digital signal processing (Digital Signal Processing, DSP), Field-Programmable Gate Array (Field-Programmable Gate Array, FPGA), and Programmable Logic Array (Programmable Logic Array, PLA). A kind of hardware form to realize. The processor 1001 may integrate one or a combination of a central processing unit (CPU), a graphics processing unit (GPU), a modem, and the like. Among them, the CPU mainly processes the operating system, user interface, and application programs; the GPU is used to render and draw the content that the display needs to display; the modem is used to process wireless communication. It is understandable that the above-mentioned modem may not be integrated into the processor 1001, but may be implemented by a chip alone.

The memory 1005 may include random access memory (RAM) or read-only memory (Read-Only Memory). Optionally, the memory 1005 includes a non-transitory computer-readable storage medium. The memory 1005 may be used to store instructions, programs, codes, code sets or instruction sets. The memory 1005 may include a storage program area and a storage data area, where the storage program area may store instructions for implementing the operating system and instructions for at least one function (such as touch function, sound playback function, image playback function, etc.), Instructions used to implement the foregoing method embodiments, etc.; the storage data area can store the data involved in the foregoing method embodiments. Optionally, the memory 1005 may also be at least one storage device located far away from the foregoing processor 1001. As shown in FIG. 9, the memory 1005 as a computer storage medium may include an operating system, a network communication module, a user interface module, and an application monitoring application program.

In the server 1000 shown in FIG. 10, the user interface 1003 is mainly used to provide an input interface for the user to obtain data input by the user; and the processor 1001 may be used to call the application monitoring application stored in the memory 1005 and execute The following operations:

In one embodiment, when the specified application permission is the camera access permission, the processor 1001 executes the output prompt information based on the preset prompt rule, and specifically performs the following operations:

Flashing indicator.

In an embodiment, the processor 1001 is executing the blinking indicator light, and specifically executes the following operations:

When the first color light in the indicator light is set to a high level state and the second color light in the indicator light is set to a low level state, controlling the first color light to flash;

When the first color light is set to a low level state and the second color light is set to a high level state, the second color light is controlled to flicker.

In one embodiment, when the processor 1001 sets the first color light in the indicator light to a high level and sets the second color light in the indicator light to a low level, the processor 1001 controls the Before the first color light flashes, perform the following operations:

Acquire a first initial level state and a first initial brightness value of the first color light, and acquire a second initial level state and a second initial brightness value of the second color light.

In an embodiment, the processor 1001 is performing the controlling the flickering of the first color light, and specifically performs the following operations:

The controlling the flashing of the second color light includes:

In an embodiment, the processor 1001 further performs the following operations after executing the output of prompt information based on the preset prompt rule:

Receive a close instruction input for the designated application corresponding to the designated application permission, and close the prompt message.

In one embodiment, when the processor 1001 executes the closing of the prompt information, it specifically executes the following operations:

Restore the indicator light to the initial state.

In an embodiment, the processor 1001 specifically performs the following operations when performing the restoration of the indicator light to the initial state:

In this embodiment, when the user terminal monitors that an authorized application opens the specified application permission, it obtains the application identifier of the authorized application, and determines whether the application identifier exists in the whitelist identifier set, and if so, based on preset prompt rules Output prompt information. By judging the risk of an authorized application based on the application identifier, when the authorized application is determined to be a risky application, prompting information is output to the user in a timely manner, which can reduce the risk of user privacy leakage and thereby improve the user's information security.

A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing relevant hardware through a computer program. The program can be stored in a computer readable storage medium. During execution, it may include the procedures of the above-mentioned method embodiments. Wherein, the storage medium can be a magnetic disk, an optical disc, a read-only storage memory or a random storage memory, etc.

The above-disclosed are only the preferred embodiments of the application, which of course cannot be used to limit the scope of rights of the application. Therefore, equivalent changes made according to the claims of the application still fall within the scope of the application.

Claims

An application monitoring method, characterized in that the method includes:

When it is monitored that an authorized application opens the specified application permission, acquiring the application identifier of the authorized application;

Determine whether the application identifier exists in the whitelist identifier set;

If the application identifier does not exist in the whitelist identifier set, prompt information is output based on a preset prompt rule.
The application monitoring method according to claim 1, wherein when the designated application permission is camera access permission, the outputting prompt information based on a preset prompt rule comprises:

Flashing indicator.
The application monitoring method according to claim 2, wherein the flashing indicator light comprises:

When the first color light in the indicator light is set to a high level state and the second color light in the indicator light is set to a low level state, controlling the first color light to flash;

When the first color light is set to a low level state and the second color light is set to a high level state, the second color light is controlled to flicker.
The method of claim 3, wherein when the first color light in the indicator light is set to a high level and the second color light in the indicator light is set to a low level, the control Before the first color light flashes, it also includes:

Acquire a first initial level state and a first initial brightness value of the first color light, and acquire a second initial level state and a second initial brightness value of the second color light.
The method according to claim 4, wherein the controlling the flickering of the first color light comprises:

Controlling the flickering of the first color light and gradually increasing the brightness value of the first color light from the first initial brightness value;

The controlling the flashing of the second color light includes:

Controlling the flickering of the second color light and gradually increasing the brightness value of the second color light from the second initial brightness value.
The method according to claim 4, wherein after the prompt information is output based on a preset prompt rule, the method further comprises:

Receive a close instruction input for the designated application corresponding to the designated application permission, and close the prompt message.
The method according to claim 6, wherein the closing the prompt information comprises:

Restore the indicator light to the initial state.
The method according to claim 7, wherein said restoring said indicator light to an initial state comprises:

Adjust the first color light to the first initial level state and the first initial brightness value, and adjust the second color light to the second initial level state and the second initial Brightness value.
An application monitoring device, characterized in that the device includes:

The application identification obtaining module is configured to obtain the application identification of the authorized application when it is monitored that the authorized application has opened the specified application permission;

The application identification judgment module is used to judge whether the application identification exists in the whitelist identification set;

The prompt information output module is configured to output prompt information based on preset prompt rules if the application identifier does not exist in the whitelist identifier set.
The application monitoring device according to claim 9, wherein when the designated application permission is camera access permission, the prompt information output module is specifically configured to:

Flashing indicator.
The application monitoring device according to claim 10, wherein the prompt information output module comprises:

The first control unit is configured to control the first color when the first color light in the indicator light is set to a high level state and the second color light in the indicator light is set to a low level state Lights flicker

The second control unit is configured to control the flashing of the second color light when the first color light is set to a low level state and the second color light is set to a high level state.
The application monitoring device according to claim 11, wherein the prompt information output module further comprises:

The initial state acquiring unit is configured to acquire the first initial level state and the first initial brightness value of the first color light, and acquire the second initial level state and the second initial brightness value of the second color light.
The application monitoring device according to claim 12, wherein the first control unit is specifically configured to:

Controlling the flickering of the first color light and gradually increasing the brightness value of the first color light from the first initial brightness value;

The second control unit is specifically configured to:

Controlling the flickering of the second color light and gradually increasing the brightness value of the second color light from the second initial brightness value.
The application monitoring device according to claim 12, wherein the device further comprises:

The prompt information closing module is configured to receive a closing instruction input for the specified application corresponding to the specified application permission, and close the prompt information.
The application monitoring device according to claim 14, wherein the prompt information closing module is specifically configured to:

Restore the indicator light to the initial state.
The application monitoring device according to claim 15, wherein the prompt information output module is specifically configured to:

Adjust the first color light to the first initial level state and the first initial brightness value, and adjust the second color light to the second initial level state and the second initial Brightness value.
A computer storage medium, wherein the computer storage medium stores a plurality of instructions, and the instructions are suitable for being loaded by a processor and executing the application monitoring method according to any one of claims 1-8.
An electronic device, characterized by comprising: a processor and a memory; wherein the memory stores a computer program, and the computer program is adapted to be loaded by the processor and executed as claimed in any one of claims 1 to 8. The application monitoring method.