METHOD AND APPARATUS FOR GENERATING PRIVACY RATINGS FOR APPLICATIONS

• US 20130185804A1
• Filed: 01/18/2012
• Published: 07/18/2013
• Est. Priority Date: 01/18/2012
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Biswas, Debmalya, Perrucci, Gian Paolo, Aad, Imad
• Granted Patent: US 9,721,105 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/033 Test or assess software

Abstract

An approach is provided for generating privacy ratings for applications. A privacy ratings platform determines use information associated with one or more applications executing on one or more devices. By way of example, the use information is determined based, at least in part, on usage data associated with one or more input sources, one or more components, one or more categories of personal information, or a combination thereof associated with the one or more devices. The privacy ratings platform then processes and/or facilitates a processing of the use information to determine one or more privacy ratings for the one or more applications.

Claims

1. A method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:

at least one determination of use information associated with one or more applications executing on one or more devices; and

a processing of the use information to determine one or more privacy ratings for the one or more applications.

2. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination to generate at least one visual representation of the one or more privacy ratings.

3. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a grouping of the one or more applications based, at least in part, on the one or more privacy ratings.

4. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of the use information over one or more periods of time; and

an updating of the one or more privacy ratings over the one or more periods of time.

5. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of the use information based, at least in part, on usage data associated with one or more input sources, one or more components, one or more categories of personal information, or a combination thereof associated with the one or more devices.

6. A method of claim 5, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a visualization of the one or more privacy ratings that indicates, at least in part, one or more privacy impacts associated with the one or more input sources, the one or more components, the one or more categories of personal information, or a combination thereof

7. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a segmentation of the use information according to one or more contexts; and

at least one determination of the one or more privacy ratings with respect to the one or more contexts.

8. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of compliance information for the one or more applications based, at least in part, on one or more privacy policies associated with the one or more devices,

wherein the one or more privacy ratings are further based, at least in part, on the compliance information.

9. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a processing of one or more characteristics of (a) at least one target device, (b) one or more environments in which the at least one target device operates, (c) the use information, or (d) a combination thereof to cause, at least in part, a scaling of the one or more privacy ratings for the at least one target device.

10. A method of claim 9, wherein the use information includes, at least in part, one or more data access requests, one or more responses to the one or more data access requests, metadata associated with the one or more responses, or a combination thereof

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

determine use information associated with one or more applications executing on one or more devices; and

process and/or facilitate a processing of the use information to determine one or more privacy ratings for the one or more applications.

12. An apparatus of claim 11, wherein the apparatus is further caused to:

determine to generate at least one visual representation of the one or more privacy ratings.

13. An apparatus of claim 11, wherein the apparatus is further caused to:

cause, at least in part, a grouping of the one or more applications based, at least in part, on the one or more privacy ratings.

14. An apparatus of claim 11, wherein the apparatus is further caused to:

determine the use information over one or more periods of time; and

cause, at least in part, an updating of the one or more privacy ratings over the one or more periods of time.

15. An apparatus of claim 11, wherein the apparatus is further caused to:

determine the use information based, at least in part, on usage data associated with one or more input sources, one or more components, one or more categories of personal information, or a combination thereof associated with the one or more devices.

16. An apparatus of claim 15, wherein the apparatus is further caused to:

cause, at least in part, a visualization of the one or more privacy ratings that indicates, at least in part, one or more privacy impacts associated with the one or more input sources, the one or more components, the one or more categories of personal information, or a combination thereof.

17. An apparatus of claim 11, wherein the apparatus is further caused to:

cause, at least in part, a segmentation of the use information according to one or more contexts; and

determine the one or more privacy ratings with respect to the one or more contexts.

18. An apparatus of claim 11, wherein the apparatus is further caused to:

determine compliance information for the one or more applications based, at least in part, on one or more privacy policies associated with the one or more devices,

wherein the one or more privacy ratings are further based, at least in part, on the compliance information.

19. An apparatus of claim 11, wherein the apparatus is further caused to:

process and/or facilitate a processing of one or more characteristics of (a) at least one target device, (b) one or more environments in which the at least one target device operates, (c) the use information, or (d) a combination thereof to cause, at least in part, a scaling of the one or more privacy ratings for the at least one target device.

20. An apparatus of claim 19, wherein the use information includes, at least in part, one or more data access requests, one or more responses to the one or more data access requests, metadata associated with the one or more responses, or a combination thereof.

21-48. -48. (canceled)