TOKEN-BASED SCHEME FOR GRANTING PERMISSIONS

摘要

An electronic device comprising: a communication interface configured to perform a wireless communication with an external electronic device or a server; a memory; and at least one processor operatively coupled with the communication interface and the memory, and configured to: install an application by using an installation file associated with the application which is preloaded or downloaded from the external electronic device or the server; grant at least one permission to the application based on a key signing which is included in the installation file; detect whether the installation file includes a permission setting token; if the installation file includes the permission setting token, identify at least one permission associated with the permission setting token, wherein the permission setting token, which is independent of the key signing, is data that defines a permission range for the application to access resources of the electronic device; grant the at least one permission to the application based on the permission setting token; and store, in the memory, the at least one permission which is granted to the application using the permission setting token.