Method for terminal authority management and terminal

Abstract

The invention provides a method for terminal authority management and a corresponding terminal. The method comprises the following steps: a) monitoring an authority request on the terminal; b) comparing an application which initiates the authority request with an application white list which is maintained on the terminal; c) executing corresponding authority management according to a comparison result.

Description

technical field [0001] The present invention relates to the field of terminal management, more specifically to a method for rights management executed on a terminal and a corresponding terminal. Background technique [0002] With the increasing popularity of mobile terminals, it has become an indispensable and important part of production and life in modern society. Therefore, information security on mobile terminals has become a subject of widespread concern. On the current mainstream mobile terminals (especially smart terminals based on the Android platform), whether the application can use ROOT permissions (similar permissions include (and are not limited to) administrator (Administrator) permissions, etc.), mainly through manual (User) participation method to determine whether to grant ROOT access to the application. [0003] As is well known to those skilled in the art, the ROOT authority usually represents the highest authority on a system. With this authority, a thi...

AI Technical Summary

Problems solved by technology

However, the existing checks for applications requiring ROOT permissions rely too much on human judgment: for professional users, they can take relatively cautious operations from the permission description; for non-professional (ordinary) users, they usually ignore this This permission description leads to over-authorization of applications, which makes some applications obtain ROOT permissions that should not be obtained, and brings potential violations of users' legitimate rights and interests, such as privacy theft, illegal acquisition of location information, and secret feedback of key system data. Behavior

[0004] For example, a malicious map application may request sensitive storage areas (e.g., user identity information, bank account, credit card information, phone book, etc.) from the user when installed and / or run. Read and write permissions, which will lead to sensitive data leakage and damage the interests of users

Images