Private information disclosure consent management system
In an embodiment, a user equipment (UE) is disclosed. The UE comprises a cellular radio transceiver, a non-transitory memory, a processor, a third party application stored in the non-transitory memory, and an application stored in the non-transitory memory. When executed by the processor, the third party application causes the processor to attempt to access confidential information of the UE. When executed by the processor, the application causes the processor to determine a status of consent to release confidential information to the third party application and to take action in response to a determination that the status of consent is consent is not granted to release confidential information to the third party application.
1. A system, comprising:
a consent management hub configured to manage consents associated with a plurality of user devices and a plurality of third party applications from a plurality of third parties; and
a user equipment (UE) located remote to the consent management hub and included among the plurality of user devices, comprising:
a cellular radio transceiver;
a non-transitory memory;
a processor;
a third party application, from among the plurality of third party applications, stored in the non-transitory memory that, when executed by the processor, causes the processor to attempt to access confidential information of the UE; and
an application stored in the non-transitory memory that, when executed by the processor, causes the processor to:
obtain consents associated with the third party application for at least the UE from the consent management hub, the consents at least including consent for the third party application to access the confidential information of the UE;
determine a status of consent to release confidential information to the third party application based on the consents obtained from the consent management hub,
take action in response to a determination that the status of consent is not granted to release confidential information to the third party application;
responsive to receiving a request by the third party application to access the confidential information and determining that the request by the third party application to access the confidential information exceeds the consents associated with the third party application previously obtained by the UE from the consent management hub, presenting a user interface element to obtain consent from a user of the UE for access by the third party application to the confidential information;
responsive to obtaining the consent from the user, transmitting the consent to the consent management hub to modify the consents managed by the consent management hub and associated with the plurality of user devices and the plurality of third party applications from the plurality of third parties; and
generating and presenting a consents interface displaying the consents managed by the consent management hub and associated with the plurality of user devices and the plurality of third party applications from the plurality of third parties, wherein the consents interface orders the consents according to a timestamp of the consents.
2. The user equipment of claim 1 , wherein the action comprises blocking the release of confidential information of the UE to the third party application.
3. The user equipment of claim 1 , wherein the action comprises one of presenting a notification on a display screen of the UE, adding a notification to a notification tray of the UE, or sending a text message to the UE.
4. The user equipment of claim 3 , wherein the action further comprises suspending execution of the third party application until the UE receives an acknowledge input.
5. The user equipment of claim 1 , wherein the application monitors calls by the third party application to application programming interfaces (APIs) provided by two or more of a self-location function of the UE, a contacts function of the UE, a camera function of the UE, a microphone function of the UE, and an email function of the UE, and wherein the application determines the status of consent responsive to detecting that the third party application calls one of the APIs.
6. The user equipment of claim 5 , wherein the application is embedded in an operating system of the UE.
7. The user equipment of claim 5 , wherein the application is stored in a portion of the non-transitory memory outside of a system memory partition and the application is provisioned with a digital certificate that it presents to an operating system of the UE recognizes to execute privileged commands that enable the application to monitor calls by the third party application to the APIs.
8. The user equipment of claim 1 , wherein the application stores information about consents associated with third party applications including one or more consents associated with the third party application.
9. The user equipment of claim 8 , wherein the application invokes an application program interface to read consent records stored in a data store associated with the third party applications to determine the information about the consents associated with the third party applications.
10. The user equipment of claim 8 , wherein the application receives the information about the consents associated with the third party applications from a content management application stored and executed on a content management hub.
11. The user equipment of claim 8 , wherein the application further monitors one or more actions of the third party application.
12. The user equipment of claim 11 , wherein the application determines the status of consent by comparing the one or more actions of the third party application to the information about the one or more consents associated with the third party application.
13. The user equipment of claim 12 , wherein the application determines that the status of consent is not granted to release confidential information to the third party application in response to determining, based on the comparing, that the one or more actions exceed the one or more consents associated with the third party application.
14. The user equipment of claim 8 , wherein the application monitors calls by the third party application to one or more application programming interfaces (APIs) provided by one or more of a self-location function of the UE, a contacts function of the UE, a camera function of the UE, a microphone function of the UE, and an email function of the UE and the application.
15. The user equipment of claim 14 , wherein the application determines the status of consent by comparing monitored calls to the information about the one or more consents associated with the third party application.
16. The user equipment of claim 15 , wherein the application determines that the status of consent is not granted to release confidential information to the third party application in response to determining, based on the comparing, that the monitored calls exceed the one or more consents associated with the third party application.
17. The user equipment of claim 5 , wherein the application determines the status of consent by comparing monitored calls to the information about the one or more consents associated with the third party application.
18. The user equipment of claim 17 , wherein the application determines that the status of consent is not granted to release confidential information to the third party application in response to determining, based on the comparing, that the monitored calls exceed the one or more consents associated with the third party application.
19. The user equipment of claim 1 , wherein the application provides a periodic report to a consent management application stored and executed on a content management hub about consent violation events associated with the third party application.