Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizen zeoi for the clue delivery! CTOnews.com news on February 5, the State Internet Information Office forwarded the test report on the collection of App personal information on "online shopping" issued by the China Cyberspace Security Association and the National computer Network Emergency Technology Coordination Center on the 2nd. The report selected the "online shopping" App, which ranked among the top 10 downloads in 19 app stores, for testing, including Taobao, JD.com, pinduoduo, Huawei Mall, VIPSHOP, Taote, Mobile Tmall, SUNING, Honor self-selection, and Dangdang.

CTOnews.com learned that the test scenario takes the completion of an online shopping activity as a unit, including three user usage scenarios: starting App, searching for goods, placing orders for shopping, and silent application scenarios in the background.

The test results are as follows:

1. The test subjects selected the "online shopping" App, which ranked among the top 10 app stores in terms of cumulative downloads. The basic information of the 10 App is shown in the table below.

II. Test methods (1) Test environment

This test selects mobile terminals of the same brand and model, installs the same version of Android operating system, deploys 10 App respectively, and operates synchronously in the same network environment.

(2) Test scenario

Take the completion of an online shopping activity as the test unit, including three user usage scenarios: starting App, searching for goods, placing orders for shopping, and silent application scenarios in the background.

(3) content of the test

This test includes three items: system permission call, personal information upload and network upload traffic.

Test results (1) system permission invocation

Tests show that 10 App calls four system permissions such as location, device information, clipboard and application list in four scenarios, but no other permissions such as camera, microphone, address book and so on.

In the scenario of starting App, the one who calls the system permissions the most is pinduoduo (type 4), and the one who calls the system permissions the most is SUNING (357). The details are shown in the table below.

In the scenario of searching for goods, the most kinds of system permissions are called by Taobao (category 3), and the most are called by SUNING (152times). The details are shown in the table below.

In the shopping order scenario, the person who calls the system permissions the most is Tmall (category 3), and the one who calls the system permissions the most is SUNING (255times). The details are shown in the table below.

In the background silence scenario, the person who calls system permissions the most is pinduoduo (category 4), and the one who calls system permissions the most is SUNING (1199). The details are shown in the table below.

(2) upload of personal information

The test found that 10 App uploaded six types of personal information: ① location information, including latitude and longitude, street address, currently connected WiFi MAC address, currently connected base station information, peripheral available WiFi MAC address, etc.; ② unique device identification number, including IMEI (International Mobile device Identification number), IMSI (SIM Card International Mobile user Identification number), Android ID (Android ID), OAID (Open Anonymous device Identifier), mobile phone MAC address, etc. ③ clipboard content information, including merchandise sharing links, recently copied text, etc.; ④ app list information, including installed, running, newly installed and newly uninstalled applications on the phone; ⑤ shopping information, including product search terms, order information, etc.; ⑥ login information, including user ID, login status, etc.

In the launch App scenario, pinduoduo (4 categories) uploads the most kinds of personal information. The details are shown in the table below.

In the search scenario, pinduoduo and Tmall uploaded the most kinds of personal information (both in 4 categories). The details are shown in the table below.

In the shopping order scene, the most types of personal information uploaded are Taobao, JD.com and SUNING (all in 4 categories). The details are shown in the table below.

In the background silence scenario, pinduoduo (category 3) uploads the most kinds of personal information. The details are shown in the table below.

(3) Network upload traffic

The test found that when 10 App users complete an online shopping activity (start App, search for goods, and place orders for shopping), the average amount of data uploaded is SUNING, about 653KB, and the least is Honor, about 115KB. The details are shown in figure 1.

Figure 1 after completing the test of the average upload data flow (in KB) of an online shopping activity, it is found that when 10 App are silent for 12 hours, the mobile phone Tmall with the highest average upload data traffic is about 92KB, and the average minimum is VIPSHOP, about 1.4KB. The details are shown in figure 2.

Figure 2 average upload data flow for 12 hours of silence in the background (unit: KB)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.