CN104200159B - Configure the method and device of the authority of application program - Google Patents

Abstract

The invention discloses a method and a device for configuring permissions of application programs. The method includes: the application layer monitors the behavior of installing the application program in the framework layer through the monitoring module, and determines the application program being installed or to be installed through the monitoring module, and obtains the installation type containing the application program and The installation package information of the authority information; when the installation type is determined to be upgrade installation or overwriting, the authority information is used to configure the authority of the application program. The invention can avoid the trouble of reconfiguring the software authority after the user upgrades the software.

Description

Method and device for configuring permissions of application programs

technical field

The invention relates to the technical field of mobile terminals, in particular to a method and device for configuring permissions of application programs.

Background technique

As the most popular mobile operating system in the world, Android already has hundreds of millions of users. When the application programs (software) in the Android system want to perform some key operations, they must apply for corresponding permissions. In view of the fact that many Android system applications will apply for many unnecessary permissions, such as important privacy permissions such as sending text messages and reading contacts, this may bring risks of privacy leakage and property loss to users. Therefore, some security software on the Android platform today provides an application permission management function, and users can configure application permissions according to their own needs to avoid privacy leaks.

However, when the application program with permissions configured by the user is upgraded, the application permissions will be restored to the default configuration, and the user needs to reconfigure all permissions of the application program, which is very troublesome and inhumane for the user.

Contents of the invention

In view of the above problems, the present invention is proposed to provide a method and device for configuring permissions of application programs that overcome the above problems or at least partially solve the above problems.

According to one aspect of the present invention, a method for configuring application permissions is provided, including: the application layer monitors the behavior of installing the application in the framework layer through a monitoring module; The installed application program obtains the installation package information including the installation type and permission information of the application program; when the installation behavior is determined to be upgrade installation or overlay installation through the installation type, the permission information is used to update the application program Permissions are configured.

Preferably, the application layer monitoring the behavior of installing the application program in the framework layer through the monitoring module includes: the application program layer calls the API in the framework layer through the monitoring module to realize the installation of the application program in the framework layer behavior to monitor.

Preferably, obtaining the installation package information including the installation type and permission information of the application program through the monitoring includes: obtaining the APK file containing the installation package information by calling the API in the framework layer; The API message function to obtain the installation type of the application program; analyze the APK file to obtain the function list file of the operating system, and obtain the permission information of the application program from the function list file.

Preferably, the authority information includes: the authority to read short message records, the authority to read contact information, the authority to read call records, the authority to acquire location information, and/or the authority to acquire device information.

Preferably, using the permission information to configure the permission of the application program includes: when the installation behavior is determined to be an upgrade installation or overwriting installation, reading the permission file saved in the previous installation; according to the permission file Configure the permissions of the application.

Preferably, using the permission information to configure the permission of the application program includes: directly using the permission information to configure the permission of the application program, or displaying the permission information to the user, so that the user Based on the permission information, the permission is selected and configured.

Preferably, the authority information used to configure the authority of the application program is saved after the application program was installed last time.

Preferably, the method further includes: setting an application list in advance, the list includes a list of application programs that need to implement the permission configuration scheme; matching the list according to the identification of the application program, if the matching is successful, Then execute the permission configuration scheme for the application program.

Preferably, after the application program is installed, it also includes: the framework layer returns the installation status code to the application program layer; the application program layer judges whether the installation is successful through the installation status code, and if the installation is successful, it will The permission configuration of this installation is saved as an APK file for use in the next installation.

Preferably, the method further includes: monitoring whether the framework layer performs an uninstall operation on the application program through the monitoring module of the application program layer; The permission information file related to the application program is deleted.

According to another aspect of the present invention, a device for configuring application permissions is provided, including: a monitoring unit, configured to use the application layer to monitor the behavior of installing the application in the framework layer; an information acquisition unit, using Determine the application program being installed or to be installed by the monitoring unit, and obtain the installation package information including the installation type and permission information of the application program; the permission configuration unit is used to determine the installation behavior as an upgrade through the installation type During installation or overlay installation, the permission information of the application is used to configure the permission of the application program.

Preferably, the monitoring unit is specifically configured to monitor the behavior of installing the application program in the framework layer by calling the API in the framework layer through the application program layer.

Preferably, the information obtaining unit is specifically configured to: obtain the APK file containing the installation package information by calling the API in the framework layer; obtain the installation type of the application program by calling the API message function in the framework layer; and, The APK file is parsed to obtain the function list file of the operating system, and the permission information of the application program is obtained from the function list file.

Preferably, the authority information includes: the authority to read short message records, the authority to read contact information, the authority to read call records, the authority to acquire location information, and/or the authority to acquire device information.

Preferably, the permission configuration unit is specifically configured to: read the permission file saved in the previous installation when it is determined that the installation behavior is upgrade installation or overwriting installation; configure the permission of the application program according to the permission file .

Preferably, the authority configuration unit is specifically configured to: directly use the authority information to configure the authority of the application program, or display the authority information to the user, so that the user can select the authority based on the authority information configuration.

Preferably, the permission configuration unit uses the permission information saved after the last installation of the application program to configure the permission for this installation.

Preferably, the permission configuration unit matches the application identifier with a preset application list, and if the matching is successful, executes the permission configuration scheme for the application, wherein the application list includes The list of applications that need to implement the permission configuration scheme.

Preferably, it also includes: an installation state determination unit, used to obtain the installation state code from the framework layer, and the application layer judges whether the installation is successful through the installation state code; a permission file storage unit, if the installation is successful , save the permission configuration of this installation as an APK file for the next installation.

Preferably, it also includes: an uninstallation monitoring unit, which monitors whether the framework layer performs an uninstallation operation on the application program through the application program layer; The saved permission information file related to the application program is deleted.

It can be seen that in the technical solution provided by the present invention, by monitoring the behavior of installing the application program, in the case of non-first-time installation, the acquired permission information saved in the previous installation is displayed to the user, and the user does not need to reset each permission. Check, but can conveniently adopt the configuration from the last installation.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the specific embodiments of the present invention are enumerated below.

Description of drawings

Various other advantages and benefits will become apparent to those of ordinary skill in the art upon reading the following detailed description of the preferred embodiment. The drawings are only for the purpose of illustrating a preferred embodiment and are not to be considered as limiting the invention. Also throughout the drawings, the same reference numerals are used to designate the same parts. In the attached picture:

FIG. 1 shows a flowchart of a method for configuring permissions of an application program according to an embodiment of the present invention; and

Fig. 2 shows a schematic diagram of a method for configuring permissions of an application program according to an embodiment of the present invention.

detailed description

Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. Although exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited by the embodiments set forth herein. Rather, these embodiments are provided for more thorough understanding of the present disclosure and to fully convey the scope of the present disclosure to those skilled in the art.

The invention discloses a method for managing the authority information of an application program, which can avoid the trouble of reconfiguring the software authority after the user upgrades the software.

Referring to FIG. 1 , it is a flowchart of a method for configuring application permissions provided by an embodiment of the present invention.

The method includes the following steps:

S101: the application layer monitors the behavior of installing the application program in the framework layer through the monitoring module;

S102: Determine the application program being installed or to be installed by monitoring, and obtain the installation package information including the installation type and permission information of the application program;

S103: When the installation type is used to determine that the installation behavior is non-first-time installation (for example, upgrade installation or overwrite installation), use the permission information to configure the permission of the application program.

Those skilled in the art understand that the operating system includes an application program layer (app layer) and a system framework layer (framework layer). A preferred implementation of the present invention is to improve the app layer and the framework layer, so as to utilize the cooperation of the two layers to manage the permission information of the application program. Specifically, a monitoring module can be added at the app layer to monitor the behavior of installing the application at the framework layer, so that when the application is installed, the installation package information and the installation type of the application can be obtained, so that it is not installed for the first time (such as During upgrade installation or overlay installation), use the parsed permission information to configure the permission of the application.

Referring to FIG. 2 , it is a schematic diagram of an embodiment of a method for configuring application permissions according to an embodiment of the present invention. The monitoring module of the App layer monitors the behavior of installing a specific application program in the framework layer, and analyzes the monitored installation package information to obtain the permission information. When the installation type is not the first installation, it is directly based on the permission information. Configuration of application permissions.

The monitoring of the behavior of installing the application program at the framework layer can be realized through the API of the operating system. API (Application Programming Interface, application programming interface) is a call interface left by the operating system to the application program, and the application program makes the operating system execute the command (action) of the application program by calling the API of the operating system. The interrupt mechanism can be used to monitor the API. Specifically, a hook (hook or hook) mechanism may be used to monitor the interface used to install the application program in the framework layer. Those skilled in the art understand that the hook mechanism allows applications to intercept and process messages or specific events of the operating system. A hook is actually a program segment for processing messages, which is hooked into the system through system calls. Whenever a specific message is sent, before reaching the destination window, the hook program first captures the message, that is, the hook function first obtains control. At this moment, the hook function can process (change) the message, or continue to deliver the message without processing, and can also forcibly end the delivery of the message. In the embodiment of the present invention, a hook mechanism is used to interrupt the process of installing the application program, so as to obtain relevant information before the application program is installed.

The following describes the embodiment of the present invention from three situations: when the application program is installed, after the installation and when it is uninstalled.

(1) Reading, storage and setting of permission information when the application is installed

New applications need to apply for many permissions when they are installed. Application permissions mean that the application has the right to perform certain/some operations. For example, a certain input method provides a smart address book function. When the user enters the first few characters or initials of a contact's pinyin, the input method can automatically display the name of the relevant contact. In order to achieve this function, input The method must declare that it needs to have permission to read the contacts in the phone.

The embodiment of the present invention will analyze the information of the installation package, list the permissions of the installation package, and display it to the user in cooperation with the installation monitoring of the application program.

For example, install a piece of software on the mobile phone of the android system, by calling the API, the APK (installation package) file can be parsed, and the android function manifest file AndroidManifest.xml can be opened to obtain the registered software function permissions. The text meaning represented by the id of this permission is displayed to the user through the pre-installation monitoring UI, and the user can perform operations such as allowing and prohibiting. For example, the listed permissions include: read SMS records (allowed by default), read contact information (allowed by default), read call records (allowed by default), obtain location information (disabled by default), obtain device information (disabled by default) ) and so on, the user can operate on this basis, for example, the user directly adopts the default setting, or changes some options, etc. In addition to displaying the permission information to the user so that the user can select and configure the permission based on the permission information, it is also possible to directly use the permission information to configure the permission of the application program. Those skilled in the art can understand that the permission information used for permission configuration in the current installation process is saved after the last installation of the application program. configuration.

In addition, when the software is installed, the installation behavior of the software, such as overwriting installation, upgrade installation, etc., can be obtained by calling the API. According to different situations, configure and save the saved permissions.

Specifically, the installation type of the application program is obtained by calling the API message function in the framework layer. For example, use API PackageManager.getPackageInfo() to get whether the current installation package has been installed. If it has already been installed, information such as the version number of the installed software is further obtained through this method.

The current behavior is judged by the verification of relevant information such as the version number. If the judged behavior is upgrade installation or overwrite installation, then through the permission file saved in the previous installation, the permission status saved in the last installation of the APK by the user can be read, such as sending SMS-prohibited, obtaining location information-allowed, etc. After reading the permissions, display the permission settings to the user.

(2) Permission preservation after application installation

After the software is installed, the operating system returns a relevant code (code) to determine whether the currently installed package is successful. After obtaining the code, the relevant information represented by the code is obtained through the reflection mechanism. Such as successful installation, failed installation, different signatures, insufficient space, etc.

If the software installation fails, the current APK permissions are not saved.

After the software is installed successfully, you need to save the permission data. In order to set the permission data during the next installation.

(3) Permission processing after the application is uninstalled

Through the monitoring module of the application layer, it is monitored whether the framework layer performs an uninstallation operation on the application program; if it is detected that the application program is uninstalled, the saved permission information file related to the application program is deleted. For example, after the software is uninstalled, the uninstallation behavior is obtained according to the API, and the saved permission data is cleared.

It can be seen that the embodiment of the present invention includes at least two key technical points:

1. Analyze the installation package through the API to analyze the permissions of the installation package; and match the user settings through screening, and display the final permission settings to the user.

2. Take over the installation behavior of the operating system, and map the installation behavior of the system to the pre-installation monitoring through bottom-level injection; take over the code of the installation status, and analyze the status of the code; finally, the correct result will be selected exhibit.

In the technical solution provided by the present invention, by listening to the behavior of installing the application program, in the case of non-first installation, the obtained permission information saved in the previous installation is displayed to the user, and the user does not need to re-check each permission. Instead, it is convenient to adopt the configuration from the previous installation.

It should be noted that the solution of the present invention can only be implemented for specific application programs by presetting the application program list in the terminal. For example, there are 10 apps installed in the mobile phone, and the user hopes that 5 of them can implement the permission configuration scheme provided by the present invention by selecting and setting, and does not want to implement the permission configuration scheme of the present invention for apps that are not selected. Therefore, the embodiment of the present invention may also include: setting an application list in advance, the list includes a list of application programs that need to execute the permission configuration scheme; matching the list according to the identification of the application program, if the matching is successful , then execute the permission configuration scheme for the application program.

Corresponding to the above method, the present invention also provides a device for configuring permissions of application programs. The device can be realized by hardware, software or a combination of software and hardware. The device may refer to a functional module inside the terminal, or may refer to the terminal itself, as long as the terminal includes the function of realizing the device. Wherein, the operating system of the terminal includes a framework layer and an application program layer. The unit includes:

A monitoring unit, configured to use the application layer to monitor the behavior of installing the application in the framework layer;

An information acquisition unit, configured to determine the application program being installed or to be installed through the monitoring unit, and obtain installation package information including the installation type and permission information of the application program;

The authority configuration unit is configured to use the authority information to configure the authority of the application program when the installation type is determined to be upgrade installation or overlay installation.

Preferably, the monitoring unit is specifically configured to monitor the behavior of installing the application program in the framework layer by calling the API in the framework layer through the application program layer.

Preferably, the information obtaining unit is specifically configured to: obtain an APK file containing installation package information by calling an API in the framework layer; and obtain the installation type of the application program by calling an API message function in the framework layer; The APK file is parsed to obtain the function list file of the operating system, and the permission information of the application program is obtained from the function list file.

Preferably, the authority information includes: the authority to read short message records, the authority to read contact information, the authority to read call records, the authority to acquire location information, and/or the authority to acquire device information.

Preferably, the permission configuration unit is specifically configured to: read the permission file saved in the previous installation when it is determined that the installation behavior is upgrade installation or overwriting installation; configure the permission of the application program according to the permission file .

Preferably, the permission configuration unit is specifically configured to: directly use the permission information to configure the permission of the application program, or display the permission information to the user, so that the user can configure the permission based on the permission information Make selection configuration.

Preferably, the permission configuration unit uses the permission information saved after the last installation of the application program to configure the permission for this installation.

Preferably, the permission configuration unit matches the application identifier with a preset application list, and if the matching is successful, executes the permission configuration scheme for the application, wherein the application list includes The list of applications that need to implement the permission configuration scheme.

Preferably, the device also includes:

An installation status determination unit, configured to obtain an installation status code from the framework layer, and the application layer judges whether the installation is successful or not through the installation status code;

The permission file saving unit, if the installation is successful, saves the permission configuration of the installation as an APK file for use in the next installation.

Preferably, the device also includes:

An uninstallation monitoring unit, which monitors whether the framework layer performs an uninstallation operation on the application through the application layer;

The permission deletion unit is configured to delete the stored permission information file related to the application program if it detects that the application program is uninstalled.

The algorithms and displays presented herein are not inherently related to any particular computer, virtual system, or other device. Various generic systems can also be used with the teachings based on this. The structure required to construct such a system is apparent from the above description. Furthermore, the present invention is not specific to any particular programming language. It should be understood that various programming languages can be used to implement the content of the present invention described herein, and the above description of specific languages is for disclosing the best mode of the present invention.

In the description provided herein, numerous specific details are set forth. However, it is understood that embodiments of the invention may be practiced without these specific details. In some instances, well-known methods, structures and techniques have not been shown in detail in order not to obscure the understanding of this description.

Similarly, it should be appreciated that in the foregoing description of exemplary embodiments of the invention, in order to streamline this disclosure and to facilitate an understanding of one or more of the various inventive aspects, various features of the invention are sometimes grouped together in a single embodiment, figure, or its description. This method of disclosure, however, is not to be interpreted as reflecting an intention that the claimed invention requires more features than are expressly recited in each claim. Rather, as the following claims reflect, inventive aspects lie in less than all features of a single foregoing disclosed embodiment. Thus, the claims following the Detailed Description are hereby expressly incorporated into this Detailed Description, with each claim standing on its own as a separate embodiment of this invention.

Those skilled in the art can understand that the modules in the device in the embodiment can be adaptively changed and arranged in one or more devices different from the embodiment. Modules or units or components in the embodiments may be combined into one module or unit or component, and furthermore may be divided into a plurality of sub-modules or sub-units or sub-assemblies. All features disclosed in this specification (including accompanying claims, abstract and drawings) and any method or method so disclosed may be used in any combination, except that at least some of such features and/or processes or units are mutually exclusive. All processes or units of equipment are combined. Each feature disclosed in this specification (including accompanying claims, abstract and drawings) may be replaced by alternative features serving the same, equivalent or similar purpose, unless expressly stated otherwise.

Furthermore, those skilled in the art will understand that although some embodiments described herein include some features included in other embodiments but not others, combinations of features from different embodiments are meant to be within the scope of the invention. and form different embodiments. For example, in the following claims, any of the claimed embodiments may be used in any combination.

The various component embodiments of the present invention may be implemented in hardware, or in software modules running on one or more processors, or in a combination thereof. Those skilled in the art should understand that a microprocessor or a digital signal processor (DSP) can be used in practice to implement some or all functions of some or all of the components in the device for configuring application permissions according to the embodiment of the present invention . The present invention can also be implemented as an apparatus or an apparatus program (for example, a computer program and a computer program product) for performing a part or all of the methods described herein. Such a program for realizing the present invention may be stored on a computer-readable medium, or may be in the form of one or more signals. Such a signal may be downloaded from an Internet site, or provided on a carrier signal, or provided in any other form.

It should be noted that the above-mentioned embodiments illustrate rather than limit the invention, and that those skilled in the art will be able to design alternative embodiments without departing from the scope of the appended claims. In the claims, any reference signs placed between parentheses shall not be construed as limiting the claim. The word "comprising" does not exclude the presence of elements or steps not listed in a claim. The word "a" or "an" preceding an element does not exclude the presence of a plurality of such elements. The invention can be implemented by means of hardware comprising several distinct elements, and by means of a suitably programmed computer. In a unit claim enumerating several means, several of these means can be embodied by one and the same item of hardware. The use of the words first, second, and third, etc. does not indicate any order. These words can be interpreted as names.

The present invention provides the following solutions:

A1. A method for configuring permissions of an application program, comprising:

The application layer monitors the behavior of installing the application program in the framework layer through the monitoring module;

Determine the application program being installed or to be installed through the monitoring, and obtain the installation package information including the installation type and permission information of the application program;

When the installation type determines that the installation behavior is upgrade installation or overlay installation, the permission information of the application is used to configure the permission of the application program.

A2. The method as described in A1, wherein the application layer monitors the behavior of installing the application program in the framework layer through the monitoring module, including:

The application layer invokes the API in the framework layer through the monitoring module to monitor the behavior of installing the application program in the framework layer.

A3. The method as described in A2, wherein the installation package information including the installation type and permission information of the application obtained through the monitoring includes:

Get the APK file containing the installation package information by calling the API in the framework layer;

Obtain the installation type of the application program by calling the API message function in the framework layer;

The APK file is parsed to obtain the function list file of the operating system, and the permission information of the application program is obtained from the function list file.

A4. The method as described in A1, the permission information includes: permission to read SMS records, permission to read contact information, permission to read call records, permission to obtain location information, and/or to obtain device information permission.

A5. The method as described in A1, said using said authority information to configure the authority of said application program includes:

When it is determined that the installation behavior is an upgrade installation or an overwrite installation, read the permission file saved in the previous installation;

Configure the permissions of the application program according to the permissions file.

A6. In the method described in A1, the configuration of the permission of the application program using the permission information includes:

Directly use the permission information to configure the permission of the application program, or display the permission information to the user, so that the user can select and configure the permission based on the permission information.

A7. The method described in A1, wherein the permission information used to configure the permission of the application program is saved after the application program was installed last time.

A8, the method as described in A1, described method also comprises:

Presetting an application program list, the list includes a list of application programs that need to execute the permission configuration scheme;

Matching is performed with the list according to the identifier of the application program, and if the matching is successful, the permission configuration scheme is executed for the application program.

A9. The method described in A1, after installing the application program, further includes:

The framework layer returns the installation status code to the application layer;

The application layer judges whether the installation is successful through the installation status code, and if the installation is successful, saves the permission configuration of the installation as an APK file for use in the next installation.

A10, the method as described in A1, described method also comprises:

Monitoring whether the framework layer performs an uninstall operation on the application through the monitoring module of the application layer;

If it is detected that the application program is uninstalled, the stored permission information file related to the application program is deleted.

B11. A device for configuring permissions of an application program, comprising:

A monitoring unit, configured to use the application layer to monitor the behavior of installing the application in the framework layer;

An information acquisition unit, configured to determine the application program being installed or to be installed through the monitoring unit, and obtain installation package information including the installation type and permission information of the application program;

A permission configuration unit, configured to use the permission information to configure the permission of the application program when the installation behavior is determined to be upgrade installation or overlay installation according to the installation type.

B12. The device described in B11, wherein the monitoring unit is specifically configured to: call the API in the framework layer through the application program layer, so as to monitor the installation of the application program in the framework layer.

B13, the device as described in B10, the information acquisition unit is specifically used for: by calling the API in the framework layer, obtain the APK file that contains installation package information; By calling the API message function in the framework layer, obtain the application program and the APK file is parsed to obtain a function list file of the operating system, and the permission information of the application program is obtained from the function list file.

B14, the device as described in B11, the authority information includes: the authority to read SMS records, the authority to read contact information, the authority to read call records, the authority to obtain location information, and/or, to obtain device information permission.

B15. The device as described in B11, the authority configuration unit is specifically used for: when determining that the installation behavior is an upgrade installation or overwriting installation, read the authority file saved in the previous installation; App permissions are configured.

B16. In the device described in B11, the authority configuration unit is specifically configured to: directly use the authority information to configure the authority of the application program, or display the authority information to the user, so that the user can configure the authority information in the authority information Based on the selection of permissions to configure.

B17. The device according to B11, wherein the authority configuration unit uses the authority information saved after the application was installed last time to configure the authority for this installation.

B18. The device according to B11, wherein the permission configuration unit matches the application identifier with a preset application list, and if the matching is successful, executes the permission configuration scheme for the application, wherein, The application program list includes a list of application programs that need to execute the permission configuration solution.

B19. The device as described in B11, further comprising:

An installation status determination unit, configured to obtain an installation status code from the framework layer, and the application layer judges whether the installation is successful or not through the installation status code;

The permission file saving unit, if the installation is successful, saves the permission configuration of the installation as an APK file for use in the next installation.

B20. The device as described in B11, further comprising:

An uninstallation monitoring unit, which monitors whether the framework layer performs an uninstallation operation on the application through the application layer;

The permission deletion unit is configured to delete the stored permission information file related to the application program if it detects that the application program is uninstalled.

Claims (14)

1. a kind of method for the authority for configuring application program, it is characterised in that including：

Application layer interrupts the process that ccf layer installs application program, to ccf layer by monitoring module based on hook mechanism The middle behavior for installing the application program is monitored；

Determine installing or application program to be installed by described monitor, get the installation class comprising the application program The installation package informatin of type and authority information, wherein, the authority information is to install last time to preserve after the application program；

When determining installation behavior by the Setup Type for update or covering installation, installed to the power preserved the last time Limit information shows user so that user is direct to authority on the basis of the authority information to be confirmed or be modified.

2. the method as described in claim 1, it is characterised in that the application layer is by monitoring module to pacifying in ccf layer Filling the behavior progress monitoring of the application program includes：

The application layer is realized by monitoring the API in module invocation framenort layer and installs the application program to ccf layer Behavior monitored.

3. method as claimed in claim 2, it is characterised in that described to be got by the monitoring comprising the application program Setup Type and the installation kit information of authority information include：

By the API in invocation framenort layer, obtain comprising the APK file for installing package informatin；

By the API Message functions in invocation framenort layer, the Setup Type of the application program is obtained；

The APK file is parsed, the function list file of operating system is obtained, described answer is got from the function list file With the authority information of program.

4. the method as described in claim 1, it is characterised in that the authority information includes：The authority of short message reading record, reads Authority, the authority for reading message registration, the authority of acquisition positional information for taking associated person information, and/or, obtain facility information Authority.

5. the method as described in claim 1, it is characterised in that methods described also includes：

The application list is pre-set, the list includes the application name for needing to perform the authority configuration scheme It is single；

Matched according to the mark of the application program with the list, if the match is successful, for the application program Perform the authority configuration scheme.

6. the method as described in claim 1, it is characterised in that after the application program is installed, in addition to：

Ccf layer returns to installment state code to application layer；

The application layer judges this time whether installation succeeds, if installed successfully, by this by the installment state code The authority configuration of secondary installation saves as APK file, is installed and used for next time.

7. the method as described in claim 1, it is characterised in that methods described also includes：

By the monitoring module of the application layer, monitor whether the ccf layer carries out unloading behaviour to the application program Make；

Unloading operation is carried out to the application program if listened to, the authority related to the application program of preservation is believed File is ceased to delete.

8. a kind of device for the authority for configuring application program, it is characterised in that including：

Monitoring unit, for utilizing application layer, interrupts the process that ccf layer installs application program, to frame based on hook mechanism The behavior that the application program is installed in rack-layer is monitored；

Information acquisition unit, for determining installing or application program to be installed by the monitoring unit, gets bag The installation package informatin of Setup Type and authority information containing the application program, wherein, the authority information is to install last time Preserved after the application program；

Authority configuration unit, during for determining installation behavior by the Setup Type for update or covering installation, by institute The authority information for stating last time installation preservation shows user so that user directly confirms on the basis of the authority information to authority Or be modified.

9. device as claimed in claim 8, it is characterised in that the monitoring unit specifically for：Pass through the application program API in layer invocation framenort layer, realizes that the behavior for installing the application program to ccf layer is monitored.

10. device as claimed in claim 8, it is characterised in that described information acquiring unit specifically for：Pass through invocation framenort API in layer, is obtained comprising the APK file for installing package informatin；By the API Message functions in invocation framenort layer, obtain described The Setup Type of application program；Also, the APK file is parsed, the function list file of operating system is obtained, it is clear from the function The authority information of the application program is got in monofile.

11. device as claimed in claim 8, it is characterised in that the authority information includes：The authority of short message reading record, Authority, the authority for reading message registration, the authority of acquisition positional information for reading associated person information, and/or, obtain facility information Authority.

12. device as claimed in claim 8, it is characterised in that the authority configuration unit is according to the mark of the application program Know the application list with pre-setting to be matched, if the match is successful, the power is performed for the application program Allocation plan is limited, wherein, described the application list includes needing to perform the application program list of the authority configuration scheme.

13. device as claimed in claim 8, it is characterised in that also include：

Installment state determining unit, for obtaining installment state code from ccf layer, the application layer is installed by described State code, judges this time whether installation succeeds；

Authority storage unit, if this time installed successfully, saves as APK file by the authority configuration of this installation, is used for Next time installs and uses.

14. device as claimed in claim 8, it is characterised in that also include：

Monitoring unit is unloaded, monitors whether the ccf layer carries out unloading behaviour to the application program by the application layer Make；

Authority deletes unit, and unloading operation is carried out to the application program if listened to, for by preservation and the application The related authority information file of program is deleted.