Method and apparatus for generating privacy ratings for applications

Patent metadata

Field	Value
Publication number	US-9721105-B2
Application number	US-201213352886-A
Country	US
Kind code	B2
Filing date	Jan 18, 2012
Priority date	Jan 18, 2012
Publication date	Aug 1, 2017
Grant date	Aug 1, 2017

Abstract

An approach is provided for generating privacy ratings for applications. A privacy ratings platform determines use information associated with one or more applications executing on one or more devices. By way of example, the use information is determined based, at least in part, on usage data associated with one or more input sources, one or more components, one or more categories of personal information, or a combination thereof associated with the one or more devices. The privacy ratings platform then processes and/or facilitates a processing of the use information to determine one or more privacy ratings for the one or more applications.

First claim

What is claimed is:

1. A method comprising facilitating a processing of and/or processing (1) data and/or (2) information and/or (3) at least one signal, the (1) data and/or (2) information and/or (3) at least one signal based, at least in part, on the following:
at least one determination of use information associated with one or more applications executing on one or more devices;
a processing of the use information to determine one or more privacy ratings for the one or more applications;
at least one determination of the use information over one or more periods of time; and
an updating of the one or more privacy ratings over the one or more periods of time.

2. A method of claim 1 , wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:
at least one determination to generate at least one visual representation of the one or more privacy ratings.

3. A method of claim 1 , wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:
a grouping of the one or more applications based, at least in part, on the one or more privacy ratings.

4. A method of claim 1 , wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:
at least one determination of the use information based, at least in part, on usage data associated with one or more input sources, one or more components, one or more categories of personal information, or a combination thereof associated with the one or more devices.

5. A method of claim 4 , wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:
a visualization of the one or more privacy ratings that indicates, at least in part, one or more privacy impacts associated with the one or more input sources, the one or more components, the one or more categories of personal information, or a combination thereof.

6. A method of claim 1 , wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:
a segmentation of the use information according to one or more contexts; and
at least one determination of the one or more privacy ratings with respect to the one or more contexts.

7. A method of claim 1 , wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:
at least one determination of compliance information for the one or more applications based, at least in part, on one or more privacy policies associated with the one or more devices,
wherein the one or more privacy ratings are further based, at least in part, on the compliance information.

8. A method of claim 1 , wherein the (1) data and/or (2) information and/or (3) at least one signal are further based, at least in part, on the following:
a processing of one or more characteristics of (a) at least one target device, (b) one or more environments in which the at least one target device operates, (c) the use information, or (d) a combination thereof to cause, at least in part, a scaling of the one or more privacy ratings for the at least one target device.

9. A method of claim 8 , wherein the use information includes, at least in part, one or more data access requests, one or more responses to the one or more data access requests, metadata associated with the one or more responses, or a combination thereof.

10. An apparatus comprising:
at least one processor; and
at least one memory including computer program code for one or more programs,
the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following,
determine use information associated with one or more applications executing on one or more devices;

process and/or facilitate a processing of the use information to determine one or more privacy ratings for the one or more applications;
determine the use information over one or more periods of time; and
cause, at least in part, an updating of the one or more privacy ratings over the one or more periods of time.

11. An apparatus of claim 10 , wherein the apparatus is further caused to:
determine to generate at least one visual representation of the one or more privacy ratings.

12. An apparatus of claim 10 , wherein the apparatus is further caused to:
cause, at least in part, a grouping of the one or more applications based, at least in part, on the one or more privacy ratings.

13. An apparatus of claim 10 , wherein the apparatus is further caused to:
determine the use information based, at least in part, on usage data associated with one or more input sources, one or more components, one or more categories of personal information, or a combination thereof associated with the one or more devices.

14. An apparatus of claim 13 , wherein the apparatus is further caused to:
cause, at least in part, a visualization of the one or more privacy ratings that indicates, at least in part, one or more privacy impacts associated with the one or more input sources, the one or more components, the one or more categories of personal information, or a combination thereof.

15. An apparatus of claim 10 , wherein the apparatus is further caused to:
cause, at least in part, a segmentation of the use information according to one or more contexts; and
determine the one or more privacy ratings with respect to the one or more contexts.

16. An apparatus of claim 10 , wherein the apparatus is further caused to:
determine compliance information for the one or more applications based, at least in part, on one or more privacy policies associated with the one or more devices,
wherein the one or more privacy ratings are further based, at least in part, on the compliance information.

17. An apparatus of claim 10 , wherein the apparatus is further caused to:
process and/or facilitate a processing of one or more characteristics of (a) at least one target device, (b) one or more environments in which the at least one target device operates, (c) the use information, or (d) a combination thereof to cause, at least in part, a scaling of the one or more privacy ratings for the at least one target device.

18. An apparatus of claim 17 , wherein the use information includes, at least in part, one or more data access requests, one or more responses to the one or more data access requests, metadata associated with the one or more responses, or a combination thereof.

Assignees

• Biswas Debmalya
• Perrucci Gian Paolo
• Aad Imad
• Nokia Technologies Oy

Inventors

• Biswas Debmalya
• Perrucci Gian Paolo
• Aad Imad

Classifications

• G06F2221/033

  Test or assess software · CPC title

• G06F21/577 Primary

  Assessing vulnerabilities and evaluating computer system security · CPC title