IP Library › Granted Patent US 10,198,597
Granted Patent B2
US 10,198,597 · App. 15/167,352 · Granted Feb 5, 2019

Managing mobile application security

Inventors: Vijay Ekambaram (Chennai, IN); Nitin Gupta (Saharanpur, IN); Vikas Joshi (Bangalore, IN)
Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATION
G06F21/629G06F21/45G06F21/57G06F2221/033
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,198,597
App. No.
15/167,352
Granted
Feb 5, 2019
Kind
B2
Abstract

One embodiment provides a method, the method including: utilizing at least one processor to execute computer code that performs the steps of: identifying one or more access permissions of an application associated with an electronic device; identifying, based on the access permissions, information accessible to the application; analyzing user information within with the accessible information; determining, based on the analyzing, at least one personal exposure risk; and providing to a user, based on the at least one information exposure risk, at least one proposed solution. Other aspects are described and claimed.

Claims (51)

1. A method comprising:

utilizing at least one processor to execute computer code that performs the steps of:

identifying one or more access permissions of an application associated with an electronic device;

identifying, based on the one or more access permissions, information accessible to the application from each of the one or more access permissions;

analyzing the information to determine whether the information corresponds to high privacy information, wherein the analyzing comprises cross referencing the information from each of the one or more access permissions with one another to identify whether a combination of cross referenced information is associated with the high privacy information;

determining, responsive to determining that the information corresponds to high privacy information via the cross-referencing, at least one personal exposure risk; and

providing to a user, based on the at least one information exposure risk, a visual indication that the application is associated with at least one personal exposure risk.

2. The method of claim 1 , wherein said determining at least one exposure risk is based on a privacy level.

3. The method of claim 2 , wherein the privacy level is at least one of: user adjustable and based on at least one setting on the electronic device.

4. The method of claim 1 , further comprising, generating a ranked list of the at least one exposure risk based on at least one of: information type, user preference, application type, and privacy level settings.

5. The method of claim 4 , further comprising: displaying, on a display device, the ranked list.

6. The method of claim 1 , further comprising providing, based on the determining, at least one proposed solution, wherein the at least one proposed solution comprises, at least one of: cancel application installation, modify application installation, modify contact information, modify user specific information, and create decoy information.

7. The method of claim 1 , further comprising providing, based on the determining, at least one proposed solution, wherein the at least one proposed solution comprises a plurality of proposed solutions; and

wherein the proposed solutions are ranked in order of effectiveness.

8. The method of claim 1 , further comprising:

dynamically identifying risks associated with specific applications based on a factor selected from the group consisting of: the analyzed user information and user input; and

notifying a user of the identified risks associated with each specific application.

9. The method of claim 8 , wherein the notifying comprises, displaying, on a display device, visual indicators identifying one or more applications having an exposure risk above a predetermined threshold.

10. An apparatus comprising:

at least one processor; and

a non-transitory computer readable storage medium having computer readable program code embodied therewith and executable by the at least one processor, the computer readable program code comprising:

computer readable program code that identifies one or more access permissions of an application installed on an electronic device;

computer readable program code that identifies, based on the one or more access permissions, information accessible to the application from each of the one or more access permissions;

computer readable program code that analyzes the information to determine whether the information corresponds to high privacy information, wherein the analyzing comprises cross referencing the information from each of the one or more access permissions with one another to identify whether a combination of cross referenced information is associated with the high privacy information;

computer readable program code that determines, responsive to determining that the information corresponds to high privacy information via the cross-referencing, at least one personal exposure risk; and

computer readable program code that provides to a user, based on the at least one information exposure risk, a visual indication that the application is associated with at least one personal exposure risk.

11. A computer program product comprising:

a non-transitory computer readable storage medium having computer readable program code embodied therewith, the computer readable program code comprising:

computer readable program code that identifies one or more access permissions of an application installed on an electronic device;

computer readable program code that identifies, based on the one or more access permissions, information accessible to the application from each of the one or more access permissions;

computer readable program code that analyzes the information to determine whether the information corresponds to high privacy information, wherein the analyzing comprises cross referencing the information from each of the one or more access permissions with one another to identify whether a combination of cross referenced information is associated with the high privacy information;

computer readable program code that determines, responsive to determining that the information corresponds to high privacy information via the cross-referencing, at least one personal exposure risk; and

computer readable program code that provides to a user, based on the at least one information exposure risk, a visual indication that the application is associated with at least one personal exposure risk.

12. The computer program product of claim 11 , wherein said determination of at least one exposure risk is based on a privacy level.

13. The computer program product of claim 12 , wherein the privacy level is at least one of: user adjustable and based on at least one setting on the electronic device.

14. The computer program product of claim 11 , further comprising, computer readable program code that generates a ranked list of the at least one exposure risk based on at least one of: information type, user preference, application type, and privacy level settings.

15. The computer program product of claim 14 , further comprising: computer readable program code that displays, on a display device, the ranked list.

16. The computer program product of claim 11 , further comprising providing, based on the determining, at least one proposed solution, wherein the proposed solution comprises, at least one of: cancel application installation, modify application installation, modify contact information, modify user specific information, and create decoy information.

17. The computer program product of claim 11 , further comprising providing, based on the determining, at least one proposed solution, wherein the at least one proposed solution comprises a plurality of proposed solutions; and

wherein the proposed solutions are ranked in order of effectiveness.

18. The computer program product of claim 11 , further comprising:

computer readable program code that identifies risks associated with specific applications based on the analyzed user information; and

computer readable program code that notifies a user of the identified risks associated with each specific application.

19. The computer program product of claim 18 , wherein the notification comprises, displaying, on a display device, visual indicators, identifying one or more applications having an exposure risk above a predetermined threshold.

20. A method comprising:

identifying at least two applications installed on an electronic device that share a commonality;

identifying access permissions of the at least two applications;

identifying, based on the one or more access permissions, information accessible to the application from each of the one or more access permissions;

analyzing the information to determine whether the information corresponds to high privacy information, wherein the analyzing comprises cross referencing the information from each of the one or more access permissions with one another to identify whether a combination of information is associated with the high privacy information;

determining, based on the permissions of the at least two applications, at least one information exposure risk, wherein the determining comprises identifying, by accessing privacy level settings associated with the electronic device, whether the access permissions provide access to high privacy information via the cross-referencing; and

providing to a user, based on the at least one information exposure risk, a visual indication regarding whether the at least two applications are associated with the at least one information exposure risk.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 27, 2016
From: EKAMBARAM, VIJAY; GUPTA, NITIN; JOSHI, VIKAS
To: INTERNATIONAL BUSINESS MACHINES CORPORATION
Reel/Frame 038739/0643 →
Continuity (1)
Related Publication 20170344750A1 · Nov 30, 2017
Cited By (2)
US 12,489,776 US 12,634,293