T/TAF 067-2020 Mobile Smart Device and Application Software User Information Protection Implementation Guidelines Part 6: Specification for Application Software Permission

Scope

Main technical content: Mobile intelligent terminal application software provides end users with a wide variety of services with different functions. However, due to the fact that application developers and end users pay less attention to the legitimacy of permission acquisition for mobile intelligent terminal application software, there is currently no clear supervision and reasonable permission security management mechanism. When mobile intelligent terminal application software requires end users to grant Android permissions, there may be cases where permissions are not applied or called reasonably according to the functional needs of the application, resulting in permission abuse and significant security threats, which in turn lead to the risk of user personal information leakage. In summary, in order to provide mobile terminal users with more perfect services, improve the broader development prospects of the entire industry market, and maintain a safe and trustworthy information and communication network environment in China, it is very necessary to promulgate norms for sensitive permissions of mobile intelligent terminal application software. This standard will apply to pre-installed mobile intelligent terminal application software of smart terminal manufacturers and mobile intelligent terminal application software provided by Internet information service providers, actively responding to the general direction of the security environment of China's mobile Internet market and aligning with the healthy and sustainable development path of the mobile intelligent terminal and application industry.

Development Information

Related Standards