METHOD AND APPARATUS FOR PRIVACY-ORIENTED CODE OPTIMIZATION

• US 20140137264A1
• Filed: 11/09/2012
• Published: 05/15/2014
• Est. Priority Date: 11/09/2012
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: BILOGREVIC, Igor, HUGUENIN, Kevin
• Granted Patent: US 9,792,432 B2
• Time in Patent Office: Days
• US Class Current: 726/27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/60 Protecting data

Abstract

Methods and apparatuses are provided for automatically optimizing application program code for minimized access to privacy data. A privacy-oriented code optimizing module process and/or facilitate a processing one or more code segments, one or more execution logs associated with the one or more code segments, or a combination thereof to determine at least one privacy intrusion signature associated with the one or more code segments. Further, the privacy-oriented code optimizing module determines one or more recommendations for one or more alternate code segments based, at least in part, on the at least one privacy intrusion signature.

Claims

1. A method facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:

a processing of one or more code segments, one or more execution logs associated with the one or more code segments, or a combination thereof to determine at least one privacy intrusion signature associated with the one or more code segments; and

at least one determination of one or more recommendations for one or more alternate code segments based, at least in part, on the at least one privacy intrusion signature.

2. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of one or more code patterns in the one or more code segments,

wherein the one or more code patterns are associated with one or more privacy data accesses; and

wherein the at least one privacy intrusion signature is based, at least in part, on the one or more code patterns.

3. A method of claim 2, wherein the one or more alternate code segments cause, at least in part, one or more alterations in the processing of the privacy data, collecting of the privacy data, storing of the privacy data, accessing of the privacy data, parsing of the privacy data, granularity of the privacy data, or a combination thereof.

4. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a simulation of an execution of the one or more code segments to generate the one or more execution logs;

at least one determination of one or more access patterns in the one or more execution logs,

wherein the one or more access patterns are associated with one or more privacy data accesses; and

wherein the at least one privacy intrusion signature is based, at least in part, on the one or more access patterns.

5. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of one or more reference code segments based, at least in part, on one or more characteristics of the one or more code segments; and

a processing of the one or more reference code segments to cause, at least in part, a generation of one or more reference privacy intrusion signatures.

6. A method of claim 5, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a comparison of the at least one privacy intrusion signature against the one or more reference privacy intrusion signatures; and

at least one determination of the one or more alternate code segments based, at least in part, on the comparison.

7. A method of claim 1, wherein the one or more recommendations are determined based, at least in part, on one or more privacy rules associated with one or more users, one or more service providers, one or more content providers, or a combination thereof.

8. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

at least one determination of one or more potential privacy issues associated with the one or more code segments, based, at least in part, on an identification of one or more function calls accessing privacy data associated with a user; and

a presentation of a user interface comprising one or more indicators, one or more messages, or a combination thereof for indicating the one or more potential privacy issues and the associated one or more code segments.

9. A method of claim 8, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

a presentation of the one or more alternate code segments associated with the one or more code segments; and

at least one determination of one or more inputs from a user to substantially automatically replace the one or more code segments with the one or more alternate code segments.

10. A method of claim 1, wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:

an association of one or more privacy scores with the one or more alternate code segments based, at least in part, on one or more intrusiveness levels associated with the one or more code segments; and

at least one determination of the one or more recommendations based, at least in part, on the one or more privacy scores.

11. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,

process and/or facilitate a processing of one or more code segments, one or more execution logs associated with the one or more code segments, or a combination thereof to determine at least one privacy intrusion signature associated with the one or more code segments; and

determine one or more recommendations for one or more alternate code segments based, at least in part, on the at least one privacy intrusion signature.

12. An apparatus of claim 11, wherein the apparatus is further caused to:

determine one or more code patterns in the one or more code segments,

wherein the one or more code patterns are associated with one or more privacy data accesses; and

wherein the at least one privacy intrusion signature is based, at least in part, on the one or more code patterns.

13. An apparatus of claim 12, wherein the one or more alternate code segments cause, at least in part, one or more alterations in the processing of the privacy data, collecting of the privacy data, storing of the privacy data, accessing of the privacy data, parsing of the privacy data, granularity of the privacy data, or a combination thereof.

14. An apparatus of claim 11, wherein the apparatus is further caused to:

cause, at least in part, a simulation of an execution of the one or more code segments to generate the one or more execution logs;

determine one or more access patterns in the one or more execution logs,

wherein the one or more access patterns are associated with one or more privacy data accesses; and

wherein the at least one privacy intrusion signature is based, at least in part, on the one or more access patterns.

15. An apparatus of claim 11, wherein the apparatus is further caused to:

determine one or more reference code segments based, at least in part, on one or more characteristics of the one or more code segments; and

process and/or facilitate a processing of the one or more reference code segments to cause, at least in part, a generation of one or more reference privacy intrusion signatures.

16. An apparatus of claim 15, wherein the apparatus is further caused to:

cause, at least in part, a comparison of the at least one privacy intrusion signature against the one or more reference privacy intrusion signatures; and

determine the one or more alternate code segments based, at least in part, on the comparison.

17. An apparatus of claim 11, wherein the one or more recommendations are determined based, at least in part, on one or more privacy rules associated with one or more users, one or more service providers, one or more content providers, or a combination thereof.

18. An apparatus of claim 11, wherein the apparatus is further caused to:

determine one or more potential privacy issues associated with the one or more code segments, based, at least in part, on an identification of one or more function calls accessing privacy data associated with a user; and

cause, at least in part, a presentation of a user interface comprising one or more indicators, one or more messages, or a combination thereof for indicating the one or more potential privacy issues and the associated one or more code segments.

19. An apparatus of claim 18, wherein the apparatus is further caused to:

cause, at least in part, a presentation of the one or more alternate code segments associated with the one or more code segments; and

determine one or more inputs from a user to substantially automatically replace the one or more code segments with the one or more alternate code segments.

20. An apparatus of claim 11, wherein the apparatus is further caused to:

cause, at least in part, an association of one or more privacy scores with the one or more alternate code segments based, at least in part, on one or more intrusiveness levels associated with the one or more code segments; and

determine the one or more recommendations based, at least in part, on the one or more privacy scores.

21-48. -48. (canceled)