Source: https://patents.google.com/patent/CN108476076A/en
Timestamp: 2020-06-05 15:14:32
Document Index: 487081382

Matched Legal Cases: ['application No.62', 'art 710', 'art 710', 'art 710', 'art 710', 'art 710', 'art 710', 'art 710', 'art 710', 'art 710', 'art 1004']

CN108476076A - Resource is detected to access - Google Patents
Resource is detected to access Download PDF
CN108476076A
CN108476076A CN201680076372.XA CN201680076372A CN108476076A CN 108476076 A CN108476076 A CN 108476076A CN 201680076372 A CN201680076372 A CN 201680076372A CN 108476076 A CN108476076 A CN 108476076A
CN201680076372.XA
亚当·理查德·斯基曼
马克西姆·塞辛
戴尔·杜沙姆
迈克尔·乔治·朗格卢瓦
钱尤金
苏修颖·路德维格
贾森·斯科特·卢斯塔尔
2015-10-27 Priority to US201562247154P priority Critical
2015-10-27 Priority to US62/247,154 priority
2016-10-26 Application filed by 黑莓有限公司 filed Critical 黑莓有限公司
2016-10-26 Priority to PCT/US2016/058924 priority patent/WO2017075088A1/en
2018-08-31 Publication of CN108476076A publication Critical patent/CN108476076A/en
230000003139 buffering Effects 0.000 claims description 36
230000007958 sleep Effects 0.000 claims description 3
System, method and software can be used for monitoring resource access.In some respects, electronic equipment determines that application is attempted to access resource on the electronic equipment.Electronic equipment determines the consistency operation of the OS of the foregrounding of the operating system (OS) of application just on an electronic device still just on an electronic device.If using just in foregrounding, approved applications access resource.If using just in consistency operation, notice is generated to indicate that background application is attempted to access resource.
Resource is detected to access
This application claims the U. S. application No.62/247 that on October 27th, 2015 submits, 154 priority, in entirety Appearance is herein incorporated by reference.
This disclosure relates to which detection resource accesses in the electronic device.
Many electronic equipments (for example, mobile device or other communication equipments) allow users to run on a communications device and answer With.Using the resource that can access communication equipment.
Fig. 1 is to show to detect the exemplary schematic diagram that resource accesses in exemplary electronic device.
Fig. 2 is the flow chart for showing the example process for detecting resource access.
Fig. 3 is the flow chart shown for monitoring the example process that backstage resource accesses.
Fig. 4 is the flow chart for showing the example process for monitoring the access to camera preview buffering area.
Fig. 5 shows the example graphical user interface of one resource Access Events of output.
Fig. 6 shows that example scales map.
Fig. 7 shows the example graphical user interface of output time axonometric drawing.
Fig. 8 shows the example graphical user interface of output resource access times.
Fig. 9 shows another example graphical user interface of output resource access times.
Figure 10 is the schematic diagram for the nonlinear scale for showing resource access times.
Figure 11 is the schematic diagram for the comparison for showing that lineal scale indicates and nonlinear scale indicates.
Figure 12 (including Figure 12 A and Figure 12 B) is to show that lineal scale indicates the another of the comparison indicated with nonlinear scale One schematic diagram.
Figure 13 shows the example graphical user interface of output application view.
Figure 14 shows the example graphical user interface of output application specific details view.
Figure 15 shows another example graphical user interface of output application specific details view.
Figure 16 shows the another example graphical user interface of output application specific details view.
Similar reference numeral and label indicate similar element in each attached drawing.
In some cases, the operating system of electronic equipment (for example, mobile device) can be to be set in communication using setting The standby upper permission for accessing resource.In some cases, resource may include can be configured as provide information or service application, Using collection, software, software module, hardware.The example of resource includes camera, microphone, position determination module (for example, Global Positioning Service (GPS) module), associated person information, text or Multimedia Message transceiver module, file and file Deng.
In some cases, when installation in application, whether operating system can requry the users using with access one Or the permission of multiple resources.If user authorizes permission, application can access resource, without further being permitted for user It can.Access to occur with place at any time.In some cases, it attempts to visit in the case of no permission if applied Ask resource, then user can receive notice.However, accessing resource in the case where having permission if applied, user will not connect It is notified.
In some cases, authorizing permission when mounted may be not enough to provide privacy and safety to the user.User may Do not know the environment accessed using the resource carried out.For example, using may be unwitting in the private conference phase in user Between or when midnight open microphone.Therefore, whether user possibly can not determine using just in unauthorized access resource.
In some cases, using can be in the consistency operation of operating system.When and whether user does not know application Just in the consistency operation of operating system.Therefore, when using just in consistency operation, user, which may be unaware that apply, is accessing spy Determine resource.
In some cases, using can be in the unwitting access camera preview buffering area of user.Camera preview Buffering area is stored in the buffering area that camera is in the image file captured by camera when preview mode.In some cases, exist Before taking pictures, camera with capture images and can store the image in preview buffering area.In some cases, it can export (for example, being shown in screen) image so that user can check image before determining to take pictures.When (for example, passing through user's point Hitting or tap) when taking pictures, image file is copied in the file of storage photo instruction camera.If camera does not receive bat According to instruction, then image file be retained in preview buffering area.In some cases, preview buffering can be deleted after taking pictures Image file in area.In some cases, preview buffering can be deleted over time, become or after buffer fills Image file in area.In some cases, although operating system can be grasped with capturing events when taking pictures or shooting video Making system cannot monitor when preview buffering area is accessed.Therefore, user, which may be unaware that apply, is accessing hiding picture Or the preview of video.
In some cases, the access to resource on an electronic device can be monitored.In some cases, it may be determined that Access times of the one or more application to resource in monitoring period of time.In some cases, it may be determined that associated with access Information, for example, access time of resource, the duration, using and when accessing electronic equipment position.In some feelings Under condition, information associated with one or more access can be exported to user.Therefore, user can check that resource accesses note Record, and determine application whether unauthorized access resource.Fig. 1 to Figure 16 and associated description provide the additional of these realizations Details.
In some cases, when application attempt access resource when, determine application just the consistency operation of operating system still Just in the foregrounding of operating system.In some cases, notice is generated to remind user's background application to attempt to access resource.This Kind method can allow the user to detect the unauthorized access carried out by background application.Fig. 1 to Figure 16 and associated description Provide the additional detail of these realizations.
In some cases, resource Access Events will can be configured to the access of camera preview buffering area.It can record With the display event.In some cases, notice can be generated to indicate to attempt to access camera preview buffering area.In some cases Under, determine application just in front stage operation still just in running background.Therefore, notice can indicate that background application is attempted to access camera Preview buffering area.This method can allow the user to detect the unauthorized access to camera preview buffering area.Fig. 1 to Figure 16 and Associated description provides the additional detail of these realizations.
Fig. 1 is to show to detect the exemplary schematic diagram 100 that resource accesses in exemplary electronic device 102.Electronic equipment 102 include processing unit 162, communication subsystem 166, user interface 168 and memory 164.Electronic equipment 102 further includes Monitoring modular 130 and Access Events record 140 are accessed using 110, resource 120, resource.Electronic equipment can optionally wrap Include additional, different or less feature.
Exemplary processing unit 162 may include that one or more processing components (are alternatively referred to as " processor " or " centre Manage unit " (CPU)), one or more of processing components are configured as executing and above in association with one disclosed herein or more A one or more processing for realizing description, step or the relevant instruction of action.In some implementations, processing unit 162 can be with It is configured as generating control information (for example, measurement report) or the information to receiving (for example, the control letter from network node Breath) it is responded.Processing unit 162 can be additionally configured to make the wireless resource management of such as cell selection/reselection information (RRM) decision, or triggering measurement report.Processing unit 162 can also include such as random access memory (RAM) and read-only Other accessory parts of memory (ROM).
Example communication subsystem 166 can be configured as the data or control letter provided for being provided by processing unit 162 The wirelessly or non-wirelessly communication of breath.Communication subsystem 166 may include for example：One or more antennas, receiver, transmitter, sheet Ground oscillator, frequency mixer and Digital Signal Processing (DSP) unit.In some implementations, communication subsystem 166 can be supported more Multi output (MIMO) is inputted to transmit.In some implementations, the receiver in communication subsystem 166 can be senior receiver or base Line receiver.Two receivers can be realized using identical, similar or different receiver Processing Algorithm.
Example user interface 168 may include for example below one or more：Display or touch-screen display (example Such as, liquid crystal display (LCD), active display (LED), organic light emitting display (OLED) or MEMS (MEMS) display Device), keyboard or keypad, trace ball, loud speaker or microphone.As shown in Figure 1, example user interface 168 can be configured as and be in Existing application view 152, time axonometric drawing 154 and access notifications 156.Application view 152 indicate show one or more application with And the graphic user interface of the resource accessed by one or more application.Time axonometric drawing 154 indicates display and is monitoring Resource during period accesses the graphic user interface of associated information.The expression of access notifications 156 indicates to the user that resource is visited The graphic user interface that the resource asked or attempted accesses.Fig. 2 to Figure 16 and associated description provide the attached of these realizations Refinement section.
Example memory 164 can be the computer readable storage medium on electronic equipment 102.The example of memory 164 Including volatile memory and nonvolatile memory, magnetic medium, optical medium, random access memory (RAM), read-only deposit Reservoir (ROM), removable media etc..Memory 164 can store the operating system (OS) of electronic equipment 102 and for executing The various other computers for stating one or more processing, step or action can perform software program.
As shown in Figure 1, electronic equipment 102 includes resource 120.The expression of resource 120, which can be configured as, provides information or clothes The application of business, using collection, software, software module, hardware or combinations thereof.Resource 120 may include providing the file of personal information Folder or file are (for example, contact person, photograph image, voice record, videograph, Email, text, voice mail, camera are pre- Look at buffering area and classified papers).Resource 120 can also include hardware component (for example, microphone, camera or GPS module) and Its associated driver or Application Programming Interface (API).
Electronic equipment 102 further includes applying 110.Using 110 include can be configured as access resource 120 in one or Program, module, script, process or the other objects of multiple resources.For example, may be implemented as enterprise Java bean using 110 (EJB).Component when design can have the ability to generate realization when running into different platforms, these platforms are, for example, J2EE (2 platforms of Java, enterprise version), ABAP (quality merchandise application programming) objects or the .NET of Microsoft.In addition, although by showing Go out in the inside of electronic equipment 102, but can remotely store, quote or execute it is associated with application it is one or more into Journey.For example, a part of of application can be the interface for being directed to the web services remotely executed.In addition, using that can be another software The secondary module or submodule of module (not shown).May include employer locally applied, by user in operating system using 110 The third-party application that the enterprise of management applies or downloaded by user.
Electronic equipment 102 further includes that resource accesses monitoring modular 130.Resource access monitoring modular 130 indicate can by with It is set to application that the resource that detection application carries out accesses, using collection, software, software module, hardware.At some In the case of, when the resource in the application access resource 120 in application 110, generate event.The event is reported and is accessed to resource Monitoring modular 130.Resource, which accesses monitoring modular 130, can determine the title of resource, the title of application, the time of access, access Duration, access position or any other information associated with event.In some cases, resource accesses monitoring Module 130 can generate notice in response to the event.In some cases, resource access monitoring modular 130 can will be with event Associated information storage is in Access Events record 140.In some cases, resource accesses monitoring modular 130 and can supervise Resource Access Events are fetched during surveying the period, compile the number of the access carried out to different resource by different application, and are based on The access times of compiling indicate to generate graphic user interface.Fig. 2 to Figure 16 and associated description provide these realizations Additional detail.
Go to universal description, electronic equipment (for example, electronic equipment 102) can include but is not limited to it is following in any one ：Mobile electronic device, computing device, user equipment, mobile station, subscriber station, portable electronic device, mobile communication equipment, Radio modem or wireless terminal.The example of electronic equipment (for example, electronic equipment 102) may include cellular phone, a Personal data assistant (PDA), smart phone, laptop computer, tablet personal computer (PC), pager, portable computer, Portable gaming device, wearable electronic or with the component for transmitting voice or data via cordless communication network Other mobile communication equipments.Cordless communication network may include on authorizing at least one of frequency spectrum and unlicensed spectrum Radio Link.Term " electronic equipment " can also refer to terminate any hardware or component software of the communication session of user. In addition, term " user equipment ", " UE ", " user equipment devices ", " user agent ", " UA ", " user equipment " and " movement set It is standby " it can synonymously use herein.
Fig. 2 is the flow chart for showing the example process 200 for detecting resource access.Processing 200 can be by communication system Communication equipment in system is realized.For example, processing 200 can be as shown in Figure 1 electronic equipment 102 or another type of system or Module is realized.Example process 200 shown in Fig. 2 can also be realized using additional, less or different operation, described Operation can in the order shown or be executed in different order.
Example process 200 starts at 202, and the monitoring accessed for monitoring resource on an electronic device is determined at 202 Period.In some cases, monitoring period of time can by system manager, electronic equipment user, or combinations thereof configure.One In the case of a little, the monitoring period of time of acquiescence can be arranged by the operating system of electronic equipment.In some cases, when the monitoring of acquiescence Section can by system manager, electronic equipment user, or combinations thereof change.In some cases, it can configure more than one A monitoring period of time, such as one day, one week and one month.
At 204, determine during monitoring period of time using on an electronic device to the access times of resource.In some cases Under, the resource to be monitored can by system manager, electronic equipment user, or combinations thereof configure.In some cases, More than one resource can be configured for monitoring.In some cases, can be monitored with default setting one of operating system Or multiple resources.System manager, electronic equipment user or combinations thereof can add, remove or change the money to be monitored Source.
In some cases, system manager, electronic equipment user or combinations thereof can configure its resource access supervised The one or more application of survey.In some cases, operating system can the one or more application that be monitored with default setting. System manager, electronic equipment user or combinations thereof can add, remove or change the application to be monitored.In some cases Under, the resource that can monitor all applications accesses.In some cases, the subset of application can be monitored, such as is carried from third party The application of confession.In some cases, it when application has the permission for accessing resource, can monitor using the visit to resource It asks.
In some cases, when application access is configured as the resource to be monitored, event can be generated.The event can be with By operating system (for example, resource as shown in Figure 1 accesses monitoring modular 130) capture.It can record and store and is related to event The information of connection.In some cases, it may be determined that timestamp corresponding with event, and can include in institute by the timestamp In the information associated with event of storage.In some cases, it may be determined that the duration corresponding with event.For example, When application access microphone, event can be generated.If microphone is opened 4 seconds, can include by 4 seconds duration In information associated with event.In some cases, it may be determined that the position of electronic equipment corresponding with event.Example Such as, resource is accessed monitoring modular 130 and can be determined using the position determination module (for example, GPS) of electronic equipment when event is sent out The position of electronic equipment when raw.Can include in being stored information associated with event by location information.
In some cases, it may be determined that the adeditive attribute of resource Access Events.For example, it may be determined that accessing answering for resource With just in foregrounding still just in consistency operation.Can include in information associated with event by these attributes.One In the case of a little, resource can be accessed and be supervised by the operating system of electronic equipment, the user of electronic equipment, system manager or combinations thereof It surveys module 130 and is configured to event of the monitoring with one or more particular communities.In some cases, it only monitors, records, is defeated Go out, prevent the event triggered by background application, or executes the combination of aforesaid operations.Fig. 3 and associated description provide use In the additional detail that detection backstage resource accesses.
As another example, it may be determined that the state of equipment, such as idle state or active state.The example of free device Include in sleep, power saving, doze off, the equipment under bedtime or standby mode.The example of free device further includes that locking is set Standby (wherein, for access equipment, needing certification).When the equipment free time, screen protection program can be shown.It is slept when equipment is in Dormancy power saving, is dozed off, bedtime or when standby mode, and the display of equipment can close.When equipment locks, can show Screen locking.Can include in information associated with event by these attributes.In some cases, the operation system of electronic equipment Resource can be accessed monitoring modular 130 and be configured to monitoring with one by system, the user of electronic equipment, system manager or combinations thereof The event of a or multiple particular communities.Event during idle state may be more suspicious, therefore monitored, record, output, resistance Only, or execute aforesaid operations combination.For example, the data sent at night when equipment locks can be considered as abnormal movement, And generation event can be triggered.
In some cases, compound event can be configured.Compound event may include occurring to be more than one in short time frame A resource Access Events.In one example, user can configure compound event, which includes to sensitive information File (for example, including the file of sensitive photo) access and access to the multiple component units in electronic equipment. If these events are happened in the short time frame (for example, 5 seconds) being spaced, generate and capture compound event.At some In the case of, the length of time frame can be configured by operating system, administrator, user or combinations thereof.In some cases, user Compound event can be configured to include the access only carried out by background application.Compound event can be monitored, record, exporting, It prevents, or executes the above combination operated.This method can allow the user to upload in the unwitting prevention of user Sensitive information.
At 206, information associated with the access of at least one resource is exported on an electronic device.In some cases, Information associated with an event or a compound event can be exported on an electronic device.For example, can when accessing resource With outgoing event.Fig. 5 shows the example graphical user interface 500 of one resource Access Events of output.As shown in figure 5, using Intelligent sound logger is in the 5 points of 25 minutes opening microphones of the morning on the 25th of September in 2015.Microphone opens 4 seconds.Such as Fig. 5 Shown, graphic user interface 500 includes time, duration and the position of event associated with resource is accessed.In some feelings Under condition, graphic user interface 500 can also include the map of the position for the event that shows.In some cases, map can be at it It is scaled when being selected.Fig. 6 shows that example scales map 600.In some cases, can by tap, click or it is any its Its user interface action executes selection.
In some cases, as shown in figure 5, the graphic user interface of outgoing event further includes user interface object, user Interface object allows users to the user preference that the application for accessing resource shown about graphic user interface is arranged.Example Such as, user can select the user interface object of entitled " notifying me " that will notify to be configured to next application access same asset When generate.User can select the user interface object of entitled " stopping application " to terminate application.User can select title Application is unloaded for the user interface object of " unloading application ".User is also an option that the user interface of entitled " application message " Object inquires the additional information about application, for example, using being source when install, application and other information.
In some cases, as shown in Figure 5 to Figure 6, information associated with event, such as the name of resource can be exported Claim, access time, duration and the position of application, the access of resource.
In some cases, multiple resource Access Events or compound event can be exported in graphical user interfaces.For example, It can show the time axonometric drawing that the resource in monitoring period of time accesses.Fig. 7 shows that the example graph of output time axonometric drawing is used Family interface 700.Graphic user interface 700 shows the number that microphone has already turned in nearest 12 hours.
Graphic user interface 700 includes time shaft portion 702.Time shaft portion 702 includes multiple vertical bars, each vertical bar table Show a microphone Access Events.Time shaft portion 702 further include instruction nearest 12 hours duration when ask scale.When Between scale include that the label of the different time in 24 hours is shown, such as 12 points of morning, 3:00 AM, at 6 points in the morning, at 9 points in the morning Deng.As shown in fig. 7, indicating that each vertical bar of a microphone Access Events is located at position corresponding with time when accessing It sets.The method provides the visual representations for the pattern that resource accesses.For example, item 12 points of morning to dilute between 3:00 AM Be distributed thinly but in the morning 6 points or so be densely distributed, this shows：12 points of morning to seldom accessing Mike between 3:00 AM Wind, but in the morning 6 points or so continually access microphone.In some cases, graphic user interface 700 can be in response to user It acts and scaling view is provided.For example, if user selects the part in time shaft portion 702, corresponding portion can be amplified Point.Can by tap, sliding, click, touch or with any other user action of the user interface interaction of electronic equipment come It is selected.In one example, user can be slidably disposed in the item around at 6 points in the morning, in response, graphic user interface 700 can be presented enlarged view.Enlarged view can amplify the time scale around at 6 points in the morning, therefore can show in more detail Go out the different access in the time portion.
Graphic user interface 700 further includes separate event part 710.Separate event part 710 can be shown to be visited with resource The associated details of separate event or compound event asked.For example, as shown in fig. 7, separate event part 710 show in The morning 4 on October 14th, 2014：47 access the title of the application of microphone.Separate event part 710 include display event when Between, the time portion 712 of duration or combinations thereof.Separate event part 710 further include be shown in event occur when electronics set The map segment 716 of standby position.
In some cases, graphic user interface 700 can allow the user to show in traversal time shaft portion 702 each A event.For example, graphic user interface 700 includes forwarding button 714.It, can be independent when user selects forwarding button 714 Details associated with next event are shown in event section 710.In some cases, user can select time axle portion Divide the item in 702.In response, can be shown in separate event part 710 with the corresponding event phase of selected item Associated details.Other user actions (for example, rolling, dragging) can be used for changing in separate event part 710 The event of display.
In some cases, time axonometric drawing is displayed for during monitoring period of time by the multiple of application access Resource.In these cases, when traversing resource Access Events by time shaft, the name of the application in separate event part 710 Title can remain unchanged, and the title of resource can change.In some cases, time axonometric drawing is displayed for monitoring By multiple resources of multiple application access during period.In these cases, when traversing resource Access Events by time shaft, The title of application in separate event part 710 and the title of resource can change.
In some cases, the number accessed using the resource carried out in monitoring period of time can be exported.In some cases Under, the number that resource accesses can be indicated with lineal scale.In one example, it can be based on accessing during monitoring period of time The number for the access that most applications is carried out, the number that resource access is indicated with lineal scale.Fig. 8 shows output resource The example graphical user interface 800 of access times.As shown in figure 8, graphic user interface 800 be shown in special time period (for example, Nearest 7 days) in four numbers using location resource.Graphical user interface object (for example, horizontal stripe) is opposite for showing In the access times for accessing most applications.As shown in figure 8, having carried out 186 access using 1, this is highest number.Cause This, 186/186 × 100%=100% of this is occupied using the shadow region in the horizontal stripe under 1.97 visits have been carried out using 2 It asks.Therefore, 97/186 × 100%=52% of this is occupied using the shadow region in the horizontal stripe under 2.Using 3 and using 4 points 18 times have not been carried out to access and 3 access.Therefore, the shadow region of the horizontal stripe under the two are applied occupies the 10% of this respectively With 2%.In some cases, shade can be substituted using different graphical representations (for example, coloring).
Fig. 9 shows another example graphical user interface 900 of output resource access times.As shown in figure 9, graphical user The output of interface 900 four numbers using location resource in special time period (for example, nearest 7 days).Graphical user circle In face of being used to show relative to the total access times carried out in monitoring period of time by one using progress as (for example, horizontal stripe) Access times.As shown in figure 9, total access times are 186+97+18+3=303.Therefore, using the shadow region in the horizontal stripe under 1 Domain occupies 186/303 × 100%=61% of this.97 access have been carried out using 2.Therefore, using the moon in the horizontal stripe under 2 Shadow zone domain occupies 97/303 × 100%=32% of this.18 times are carried out respectively using 3 and application 4 to access and 3 access. Therefore, the shadow region of the horizontal stripe under the two are applied occupies the 6% and 1% of this respectively.In some cases, it can use Different graphical representation (for example, coloring) substitutes shade.
In some cases, the number of resource access can be indicated using nonlinear scale.Figure 10 is to show resource The schematic diagram 1000 of the nonlinear scale of access times.For example, as shown in Figure 10, can be indicated using denary logarithm The number that resource accesses.Figure 100 0 includes rating curve 1002 and grading chart (scheme) 1004.Grading chart 1004 is shown It can quantify the number of resource access based on denary logarithm.Rating curve 1002 shows denary logarithm Quantification gradation on figure.The number of quantization can be indicated with the frame of different number.It is, for example, possible to use utilizing pair with 10 bottom of for Five several quantification gradations come indicate 1 to 10 time access, 10 to 100 times access, 100 to 500 times access, 500 to 1000 times visit It asks and the access more than 1000 times.Therefore, if access times are between 1 and 10,1 shade or colour can be used Frame.If access times between 10 and 100, can use 2 shades or colored box.If access times are between 100 And between 500, then 3 shades or colored box can be used.If access times between 500 and 1000, can use 4 A shade or colored box.If access times are more than 1000,4 frames with different shades or color can be used.For example, Blue can be used to indicate that the frame of 1 to 10,10 to 100,100 to 500 or 500 to 1000 access, red can be used to indicate that The frame accessed more than 1000 times.
Figure 11 is the schematic diagram 1100 for the comparison for showing that lineal scale indicates and nonlinear scale indicates.Schematic diagram 1100 Including quantification gradation scale curve 1102, the curve show the quantification gradations according to denary logarithm scale.Schematic diagram 1100 further include table 1104, and this table show times of the access carried out to different resource on foreground and backstage by different application Number.Schematic diagram 1100 includes that nonlinear scale indicates 1106 and lineal scale expression 1108.In nonlinear scale indicates 1106, The length of shaded bar is determined based on access times according to nonlinear scale.For example, 1112 use of dash area is with 10 The logarithm at bottom indicates the number of the access carried out to resource 1 in foreground using 1.Dash area 1114 uses pair bottom of for 10 Number indicates the number of the access carried out in the background to resource 1 using 1.In some cases, can use different shade or Color is illustrated respectively in the number of the access carried out in foreground and backstage.
In lineal scale indicates 1108, the length of shaded bar is determined based on access times according to lineal scale. As shown in figure 11, since there are larger differences between the access times of different application, it is thus possible to be difficult with lineal scale Identify the access times that there is the application (for example, using 2 and 5) of smaller or medium access times to be carried out.
Figure 12 (including Figure 12 A and Figure 12 B) is to show that lineal scale indicates showing for the comparison indicated with nonlinear scale It is intended to 1200.Schematic diagram 1200 includes quantification gradation scale curve 1202, and the curve show according to denary logarithm mark The quantification gradation of degree.Schematic diagram 1200 includes that non-linear piecewise indicates 1204.In non-linear piecewise indicates 1204, one is used Or multiple dash box indicate the access times by nonlinear scale.It is shown in Fig. 10 as before, it is used to indicate the visit of quantization Ask that the quantity of the dash box of number can be determined based on nonlinear scale.For example, dash area 1212 is shown using 1 preceding In platform to the access times of resource 1 between 50 to 100, and dash area 1214 is shown using 1 in the background to resource 1 Access times between 500 to 1000.
Schematic diagram 1200 further includes that non-linear solid bars indicate 1206 and linear solid bars expression 1208.As previously mentioned, can Lineal scale can be difficult with to identify the number for the access that there is the application of smaller or medium access times to be carried out.
In some cases, it can be allowed users to check during monitoring period of time by one using graphic user interface Or the resource that multiple applications carry out accesses.Graphic user interface may include application view and application specific details view.Application view It may include the list of application on electronic equipment.Figure 13 shows the example graphical user interface 1300 of output application view.Such as Shown in Figure 13, application view may include the application icon and Apply Names of each application listed.It in some cases, can be with A line graphical user interface object (for example, icon) is shown under each application.Often row user interface object can indicate to answer With the resource accessed.In some cases, it can be shown whenever application access resource using graphic user interface When whether notice is set.It is, for example, possible to use the clock of grey shows not to be arranged notice, and can be shown using colored clock Go out to be provided with notice.In some cases, user can select notice object for application setting notice.If application access one A individual resource or resource collection, then user notice can be set.Money is accessed in backstage, foreground or combinations thereof if applied Source, then user notice can also be set.In some cases, if provided with notice, resource can accessed in application Shi Tongzhi user.Notice may include the information of time, duration, position accessed etc..
Graphic user interface can also include application specific details view.Application specific details view can indicate to be carried out by individually application The details that access of resource, for example, using the number of access carried out to each resource during monitoring period of time.Figure 14 shows The example graphical user interface 1400 of output application specific details view is gone out.In some cases, user can be in application view Icon or the title of application are clicked to trigger display application specific details view.In some cases, application specific details view can also wrap Include the notice object that can be selected for as application setting notice.As shown in figure 14, application specific details view can show supervising Survey the list of the resource in the period by application access.For each resource, application specific details view shows the access to the resource time Number.As discussed to Figure 12 above in conjunction with Figure 10, the quantity of logarithmic scale shade or colored box that can be based on quantization come Indicate access times.
Figure 15 shows another example graphical user interface 1500 of output application specific details view.In some cases, such as It is discussed above in conjunction with Figure 10, can show that access times are more than the threshold value of configuration using different shade or color.Such as Shown in Figure 15, location resource is had accessed 2351 times in nearest 7 days using 15, has been more than 1000 times.In this case, no A line frame that same shade and color can be used for showing below position.For example, red can be used for being filled in below position Four frames of display, and blue can be used for filling two frames shown below contact person.
Figure 16 shows the another example graphical user interface 1600 of output application specific details view.In some cases, may be used To export the number of both foreground access and background access.Example graphical user interface 1600 includes indicating 1602, the expression 1602 show the quantization number of the access carried out to resource " contact person " in foreground using 17.Example graphical user interface 1600 further include expression 1604, which shows the amount of the access carried out in the background to resource " contact person " using 17 Change number.In some cases, as discussed to Figure 12 above in conjunction with Figure 11, different shades or color can be used to indicate that Access times in the application of front stage operation and the access times of the application in running background.For example, before blue can be used for Platform, purple can be used for backstage.
In some cases, it can accumulate and export the duration of resource access.For example, can accumulate in monitoring period of time Period applies the total duration of the access carried out to resource.Total duration can be exported in graphical user interfaces.As before Face combines Fig. 8 to Figure 16 to be discussed, can indicate total duration based on lineal scale or nonlinear scale.
In some cases, since user may be unaware that backstage resource accesses, the access of backstage resource may be than preceding Taiwan investment source accesses and causes more serious influence to the privacy of user.Therefore, in some implementations, the money of background application can be monitored Source accesses.Can after occurring platform access before advanced warning user, after occurring platform access after notifies user or the two Combination.Fig. 3 is the flow chart shown for monitoring the example process 300 that backstage resource accesses.Processing 300 can be by communicating User equipment in system is realized.For example, processing 300 can be as shown in Figure 1 electronic equipment 102 or another type of system Or module is realized.Example process 300 shown in Fig. 3 can also be realized using additional, less or different operation, institute Stating operation can in the order shown or be executed in different order.
Example process 300 starts at 302, determines that application is just being attempted to access resource on an electronic device at 302.One In the case of a little, when application is attempted to access resource, interacted using Application Programming Interface (API) associated with same resource. It, can be with the operating system of electronic device or the software module run on an operating system when being interacted with API.
At 304, determine application just in the foregrounding of operating system still just in the consistency operation of operating system.One In the case of a little, when using just in running background, transported using backstage with being set to indicate that using associated attribute Row.In some cases, attribute can be checked to determine application just in front stage operation still just in running background.
If it is determined that applying in foregrounding, then handles 300 from 304 and advance to 306, approved applications access money at 306 Source.As previously mentioned, in some cases, foreground accesses not monitored.Alternatively or in combination, monitoring foreground accesses, and can To export the number of foreground access.In some cases, it can configure and whether only monitor background access.
If it is determined that applying in consistency operation, then handles 300 from 304 and advance to 308, notice is generated at 308.Notice refers to Show that background application is attempted to access resource.At 310, notice is exported via the user interface of electronic equipment.As previously mentioned, at some In the case of, notice may include the information of time, duration, position accessed etc..
In some cases, it can be possible to need user to authorize so that background application accesses resource.For example, at 312, Ke Yijie Receive the user's input for indicating whether that approved applications access resource.User's input can be selection to user interface object, tap, It touchs, clicks on, roll or any other user action.If user input instruction approved applications access resource, processing 300 from 312 advance to 314, and approved applications are in background access resource at 314.If user inputs instruction and disapproves application access money Source then handles 300 from 312 and advances to 316, application access resource is prevented at 316.
In some cases, it is to authorize that operating system, user, system manager or combinations thereof, which can configure background access, In the case of be licensed, be licensed in the case of with no authorized or for specific application, specific resources or combinations thereof not by License.
In some cases, access of the monitoring to camera preview buffering area.Fig. 4 is shown for monitoring to camera preview The flow chart of the example process 400 of the access of buffering area.Processing 400 can be realized by the user equipment in communication system.Example Such as, processing 400 can be as shown in Figure 1 electronic equipment 102 or another type of system or module are realized.It is shown in Fig. 4 to show Example processing 400 can also realize that the operation can be in the order shown using additional, less or different operation Or it is executed in different order.
Example process 400 starts at 402, and it is slow to determine that access camera preview is attempted in application on an electronic device at 402 Rush area.In some cases, camera preview buffering area can access it resource being monitored and reported.For example, can be Camera preview buffer configuration event.In some cases, as application access API associated with camera preview buffering area, It can be with trigger event.For example, when using opening camera preview buffering area is attempted, any file in camera preview buffering area is read Or combinations thereof when, can be with trigger event.
At 404, in response to the determination, generates instruction application and attempt to access the logout of camera preview buffering area. Under some cases, as previously mentioned, logout can be accumulated in monitoring period of time.It in some cases, can be for example in the time The logout of accumulation is exported in axonometric drawing or application specific details view.
Alternatively or in combination, it may be necessary to which user permits so that background application accesses camera preview buffering area.For example, At 406, determine application just in the foregrounding of operating system still just in the consistency operation of operating system.In some cases, If using just in foregrounding, permission can be authorized.If it is determined that using just in consistency operation, then at 408, generate logical Know.Notice can indicate that background application is attempted to access camera preview buffering area.As previously mentioned, in some cases, notice can be with Include the information of the time, duration, position that access etc..At 410, exported via the user interface of electronic equipment logical Know.
At 412, user's input is received.User's input may indicate whether that approved applications access camera preview buffering area. User's input can be selection to user interface object, tap, touch, click on, rolling or any other user action. At 414, application access camera preview buffering area is determined whether based on user's input.If user inputs instruction, license is answered With camera preview buffering area is accessed, then can permit accessing.It, can be with if user inputs instruction and disapproves application access resource Denied access.
Theme described in this specification and operation in some can in Fundamental Digital Circuit or computer software, It is realized in firmware or hardware, is included in the description the group of disclosed structure and its equivalent structures or one or more It closes.Some themes described in this specification may be implemented as encoding on computer storage media, for by data processing Device executes or one or more computer programs of the operation of control data processing equipment, that is, the one of computer program instructions A or multiple modules.Computer storage media can be computer readable storage devices, computer-readable memory substrate, it is random or Serial access memory array or equipment, or in which one or more combinations, or may include wherein.In addition, although Computer storage media is not transmitting signal, but computer storage media can be encoded in artificially generated transmitting signal Computer program instructions source or destination.Computer storage media can also be one or more individually physical assemblies or Medium (for example, multiple CD, disk or other storage devices), or be included therein.Computer storage media can be temporary Or non-transitory.
Term " data processing equipment " covers all types of devices, equipment and the machine for handling data, such as wraps Include programmable processor, computer, system on chip either it is aforementioned it is every in multiple or combination.Described device may include special With logic circuit, such as FPGA (field programmable gate array) or ASIC (application-specific integrated circuit).Other than hardware, the dress It can also includes the code that running environment is created for the computer program discussed to set, for example, constituting processor firmware, agreement It is one or more in stack, data base management system, operating system, cross-platform runtime environment, virtual machine or above-mentioned items Combination code.
Computer program (also referred to as program, software, software application, script or code) can be in any form programming language Speech is write, including compiling or interpretive language, declaratively or program language.Computer program can (but need not) in file system File it is corresponding.Program, which can be stored in, preserves other programs or data (for example, one be stored in marking language document Or multiple scripts) file a part in, be stored in the dedicated single file of program, or be stored in multiple coordination files In (such as file of a part for the one or more modules of storage, subprogram or code).Computer program can be deployed as On a computer or positioned at a website or it is being distributed in multiple websites and by multiple meters of interconnection of telecommunication network It is executed on calculation machine.
Some processing described in this specification and logic flow can be by executing the one of one or more computer programs A or multiple programmable processors execute, to execute action by being operated to input data and generating output.The place Reason and logic flow can also be by dedicated logic circuit (such as FPGA (field programmable gate array) or ASIC (special integrated electricity Road)) it executes, and device can also be embodied as the dedicated logic circuit.
The processor for being adapted for carrying out computer program includes such as general and special microprocessor and any kind of The processor of digital computer.In general, processor will refer to from read-only memory or random access memory or both reception Order and data.Computer may include the one or more of the processor and store instruction and data that are acted according to instruction execution Memory devices.Computer can also include for storing data one or more mass-memory units (for example, disk, Magneto-optic disk or CD), or be operatively coupled to so as to from one or more of mass-memory units receive data or to its Transmission data or reception simultaneously transmit data.However, computer need not have these equipment.Refer to suitable for storage computer program It enables and the equipment of data includes the nonvolatile memory, medium and memory devices of form of ownership, such as deposited including semiconductor Storage device (for example, EPROM, EEPROM, flash memory device etc.), disk (for example, internal hard drive, removable disk etc.), Magneto-optic disk and CD ROM and DVD-ROM disks.In some cases, processor and memory can be by supplementeds Or it is incorporated in.
In order to provide the interaction with user, it can realize that operation, the computer have for defeated to user on computers Go out information display equipment (for example, monitor or another type of display equipment) and keyboard and pointing device (for example, mouse Mark, trace ball, tablet, touch sensitive screen or another type of pointing device), user can be provided by these equipment to computer Input.The equipment of other types can be used for providing the interaction with user；For example, it can be any to be supplied to the feedback of user The sensory feedback of form, for example, visual feedback, audio feedback or touch feedback；And it can be received from user any form of It inputs (including sound, voice or sense of touch).In addition, computer can be sent by the equipment that is used to user document and from The equipment receives document and is interacted with user；For example, by response to being received from the web browser on user client device The request arrived and send webpage to the web browser, interacted with user.
Computer system may include single computing device, or closely operates or usually operate remotely from each otherly each other And the multiple computers usually interacted by communication network.The example of communication network includes LAN (" LAN ") and wide The network and peer-to-peer network of domain net (" WAN "), Internet (for example, internet) including satellite link are (for example, self-organizing is reciprocity Network).The relationship of client and server may be due to running and having client-clothes each other on corresponding computer Be engaged in device relationship computer program and occur.
Although this specification includes many details, these details are not necessarily to be construed as pair range that can be claimed Limitation, but to the description of the distinctive feature of specific example.It can also be in the present specification in the context being implemented separately Described in certain features be combined.On the contrary, the various features described in the context individually realized can also be multiple It individually or with any suitable sub-portfolio is realized in embodiment.
Similarly, although depicting operation in the accompanying drawings with particular order, this is understood not to require these behaviour Make the particular order to show or execute in sequential order, or needs to execute all operations shown to realize desired knot Fruit.Under particular context, it may be advantageous for multitasking and parallel processing.In addition, the various system groups in above-mentioned realization The separation of part is understood not to need such separation in all realizations, and it is to be understood that described program assembly Multiple software product usually can be integrated in single software product or is packaged into together with system.
In addition, without departing from the scope of the present disclosure, it is described and illustrated as discrete or separation in various implementations Technology, system, subsystem and method can combine with other systems, module, techniques or methods or integrated.It is shown or discusses Other projects to be coupled to each other or directly coupling or communicate can be coupled indirectly by certain interface, equipment or intermediate module Or communication, regardless of being electrically, mechanically or in other ways.Those skilled in the art, which can determine, to be changed Become, replace and other examples of change, and can make a change under the premise of not departing from spirit and scope disclosed herein, Other examples replaced and changed.
Although discussed in detail above have been shown, be described and pointed out the basic novel special of the disclosure applied to various realizations Sign, it is to be understood that those skilled in the art can be under the premise of not departing from the intention of the disclosure, in the system A variety of omissions, substitutions and changes are made in form and details.It is wanted in addition, the sequence of method and step is not appeared in right by them The hint of sequence in asking.
Determine that application is attempted to access resource on an electronic device；
Determine that still the electronics is being set for the foregrounding of the application operating system " OS " on the electronic equipment The consistency operation of the standby upper OS；
If the application permits resource described in the application access just in foregrounding；And
If the application just in consistency operation, generates instruction background application and attempts to access the notice of resource.
The notice is exported in the user interface of the electronic equipment；
Reception indicates whether to permit the user of resource described in the application access to input；
If the user input indicate that permitting resource described in the application access, then permit resource described in the application access； And
If the user input indicate that disapproving resource described in the application access, then prevent to provide described in the application access Source.
3. according to the method described in claim 1, further including：It receives at the electronic equipment and is accessed for monitoring backstage resource Configuration, wherein being applied described in the configuration instruction or at least one of the resource.
4. according to the method described in claim 1, further including：It receives at the electronic equipment and is accessed for monitoring backstage resource Configuration, wherein whether the configuration instruction needs user's input to permit the application when accessing the money in consistency operation Source.
5. according to the method described in claim 1, further including：Described apply before the OS is exported on the electronic equipment First number of access that platform is carried out when operating and described apply the access carried out in the consistency operation of the OS Second number.
6. a kind of method, including：
Determine that application is attempted to access camera preview buffering area on an electronic device；And
In response to the determination, generates and indicate that the application is attempted to access the logout of the camera preview buffering area.
7. according to the method described in claim 6, further including：
In response to the logout, generates and indicate that the application is attempted to access the notice of the camera preview buffering area；
Reception indicates whether to permit the user of camera preview buffering area described in the application access to input；And
It is inputted based on the user to determine whether camera preview buffering area described in the application access.
Determine that still the electronics is being set for the foregrounding of the application operating system " OS " on the electronic equipment The consistency operation of the standby upper OS；And
Wherein, it is described notice be in response in determine it is described application just generated in consistency operation.
9. a kind of electronic equipment, including：
At least one hardware processor is coupled in communication with the memory, and is configured as：
It determines to apply and attempts to access resource on the electronic equipment；
10. electronic equipment according to claim 9, wherein at least one hardware processor is additionally configured to：
11. electronic equipment according to claim 9, wherein at least one hardware processor is additionally configured to：Institute The configuration for receiving at electronic equipment and being accessed for monitoring backstage resource is stated, wherein being applied described in the configuration instruction or the resource At least one of.
12. electronic equipment according to claim 9, wherein at least one hardware processor is additionally configured to：Institute State the configuration for receiving at electronic equipment and being accessed for monitoring backstage resource, wherein the configuration instruction whether need user's input with Permit the application when accessing the resource in consistency operation.
13. electronic equipment according to claim 9, wherein at least one hardware processor is additionally configured to：Institute It states and exports first number for applying the access carried out in the foregrounding of the OS on electronic equipment and described answer Second number of the access carried out when used in the consistency operation of the OS.
14. a kind of electronic equipment, including：
It determines to apply and attempts to access camera preview buffering area on the electronic equipment；And
15. electronic equipment according to claim 14, wherein at least one hardware processor is additionally configured to：
16. electronic equipment according to claim 15, wherein at least one hardware processor is additionally configured to：
17. a kind of computer-readable medium, including instruction, described instruction makes computing device execution include below when executed Operation：
18. computer-readable medium according to claim 17, the operation further include：
19. computer-readable medium according to claim 17, the operation further include：It is received at the electronic equipment The configuration accessed for monitoring backstage resource, wherein being applied described in the configuration instruction or at least one of the resource.
20. computer-readable medium according to claim 17, the operation further include：It is received at the electronic equipment The configuration accessed for monitoring backstage resource, wherein whether the configuration instruction needs user's input to permit the application to work as The resource is accessed when consistency operation.
21. a kind of method, including：
Determine whether the electronic equipment is in idle condition；
If the electronic equipment is not at idle state, permit resource described in the application access；And
If the electronic equipment is in idle condition, generates instruction background application and attempt to access the notice of resource.
22. according to the method for claim 21, wherein the idle state includes lock-out state, standby mode, sleep mould It is one or more in formula, bedtime pattern, battery saving mode or doze mode.
CN201680076372.XA 2015-10-27 2016-10-26 Resource is detected to access CN108476076A (en)
US201562247154P true 2015-10-27 2015-10-27
US62/247,154 2015-10-27
PCT/US2016/058924 WO2017075088A1 (en) 2015-10-27 2016-10-26 Detecting resource access
CN108476076A true CN108476076A (en) 2018-08-31
ID=58562218
CN201680076372.XA CN108476076A (en) 2015-10-27 2016-10-26 Resource is detected to access
US (1) US20170118611A1 (en)
EP (1) EP3369192A4 (en)
CN (1) CN108476076A (en)
CA (1) CA3003428A1 (en)
WO (1) WO2017075088A1 (en)
KR20190021559A (en) * 2017-08-23 2019-03-06 삼성전자주식회사 Method for controlling the permission of application program and electronic device
US20190130107A1 (en) * 2017-10-26 2019-05-02 Futurewei Technologies, Inc. Method and apparatus for managing hardware resource access in an electronic device
FR2984049B1 (en) * 2011-12-12 2014-06-20 Oberthur Technologies Restriction of access to terminal resources
US20140007106A1 (en) 2012-07-02 2014-01-02 Arnold S. Weksler Display and Terminate Running Applications
2016-10-26 CN CN201680076372.XA patent/CN108476076A/en active Search and Examination
2016-10-26 US US15/335,355 patent/US20170118611A1/en active Pending
2016-10-26 EP EP16860713.3A patent/EP3369192A4/en active Pending
2016-10-26 WO PCT/US2016/058924 patent/WO2017075088A1/en active Application Filing
2016-10-26 CA CA3003428A patent/CA3003428A1/en active Pending
EP3369192A1 (en) 2018-09-05
US20170118611A1 (en) 2017-04-27
WO2017075088A1 (en) 2017-05-04
CA3003428A1 (en) 2017-05-04
EP3369192A4 (en) 2019-05-15
US10505965B2 (en) 2019-12-10 User behavioral risk assessment
US20190356659A1 (en) 2019-11-21 Methods and systems for persistent cross-application mobile device identification
JP2017216689A (en) 2017-12-07 Safety service and emergency service
CN105324778B (en) 2019-04-16 For virtual machine being dispatched to the mthods, systems and devices of safety container
US20180336016A1 (en) 2018-11-22 Multi-tenant, tenant-specific applications
US10432671B2 (en) 2019-10-01 Dynamic policy injection and access visualization for threat detection