Flexible authorization access control method, related apparatus, and system

An electronic device, comprising:

• one or more processors;
• and
• a memory coupled to the one or more processors and configured to store computer program code, wherein the computer program code comprises computer instructions that, when executed by the one or more processors, cause the electronic device to perform the following operations:
• obtaining an access request that is sent by a third device in a plurality of electronic devices and is used by an invoker in the third device to invoke an invokee in the electronic device to access a first resource in the electronic device;
• wherein the access request includes an identifier of the invoker in the third device, an identifier of the invokee and an identifier of the first resource, the first resource is a hardware resource that includes at least one of a camera, a fingerprint sensor, an audio device, a display, a motor, or a flash, and wherein the invoker is a first application (APP), the invokee is a second APP or a functional component, each of the first APP and second APP is a program entity that implements a plurality of functions, and the functional component is a program entity that implements a single function;
• determining a second device in the plurality of electronic devices in one or more of the following cases:
• the electronic device is not configured with a first module configured to receive a first operation, the electronic device is configured with the first module and executes a first task by using the first module, the electronic device is in a screen-locked state, or a distance between the electronic device and a user is greater than a first value;
• sending an authorization request to the second device, wherein the authorization request is used to request the user to grant a first permission, and the first permission comprises at least one of a permission to invoke the invokee in the electronic device, or a permission to access the first resource in the electronic device;
• receiving an authorization result sent by the second device, wherein the authorization result indicates that the user has granted the first permission;
• and
• invoking the invokee in response to the authorization result to access the first resource.

A non-transitory computer-readable storage medium, comprising instructions that, when run on an electronic device, cause by the electronic device is enabled to perform:

• obtaining an access request that is sent by a third device in a plurality of electronic devices and is used by an invoker in the third device to invoke the invokee in the first device to access a first resource in the first device, wherein the access request includes an identifier of the invoker in the third device, an identifier of the invokee and an identifier of the first resource, the first resource is a hardware resource that includes at least one of a camera, a fingerprint sensor, an audio device, a display, a motor, or a flash, and wherein the invoker is a first application (APP), the invokee is a second APP or a functional component, each of the first APP and second APP is a program entity that implements a plurality of functions, and the functional component is a program entity that implements a single function;
• determining a second device in the plurality of electronic devices in one or more of the following cases:
• the first device is not configured with a first module configured to receive a first operation, the first device is configured with the first module and executes a first task by using the first module, the first device is in a screen-locked state, or a distance between the first device and a user is greater than a first value;
• sending an authorization request to the second device, wherein the authorization request is used to request the user to grant a first permission, and the first permission comprises at least one of a permission to invoke the invokee in the first device, or a permission to access the first resource in the first device;
• receiving an authorization result sent by the second device, wherein the authorization result indicates that the user has granted the first permission;
• and
• invoking the invokee in response to the authorization result to access the first resource.