Centralized operation management
AssigneeApple Inc.
InventorsPeter Kiehtreiber, Jacques A. Vidrine, Christopher S. Linn, Randy D. Saldinger, Braden J. Thomas
Life of this patent
Estimating the term…
Abstract
A novel security framework that is part of an operating system of a device is provided. The framework includes a security assessor that performs security policy assessments for different operations that need to be performed with respect to an application executing on the device. Examples of such operations include the installation of the application, execution of the application, and the opening of content files (e.g., opening of documents) by the application.
Claims22
A method for assessing security of operations performed by an operating system executing on a device, the method comprising:
- receiving a request to install an application downloaded by the device;
- identifying whether a tag identifier associated with the downloaded application includes a portion that indicates that a security assessment has not been performed on the downloaded application;
- performing the security assessment based on the existence of the portion of the tag identifier;
- and
- if the downloaded application passes the security assessment, (i) allowing installation of the downloaded application and (ii) removing the portion of the tag identifier for the downloaded application to indicate that further security assessments should not be performed, thereby reducing an amount of memory associated with storing of the downloaded application.
A method for assessing security of operations performed by an operating system executing on a device, the method comprising:
- receiving a request to install an application downloaded by the device;
- determining whether the downloaded application is associated with a quarantine bit that indicates that a security assessment has not been performed on the downloaded application;
- performing the security assessment when the quarantine bit indicates that a security assessment has not been performed on the downloaded application;
- and
- if the downloaded application passes the security assessment, (i) allowing installation of the downloaded application and (ii) removing the quarantine bit for the downloaded application to indicate that further security assessments should not be performed.
A non-transitory machine readable medium storing a program which when executed by at least one processing unit of a device assesses security of operations performed by an operating system of the device, the program comprising sets of instructions for:
- receiving a request to install an application downloaded by the device;
- identifying whether a tag identifier associated with the downloaded application indicates that a security assessment has not been performed on the downloaded application;
- performing the security assessment based on the existence of the tag identifier;
- and
- when the downloaded application passes the security assessment, (i) allowing installation of the downloaded application and (ii) removing the tag identifier to indicate that further security assessments should not be performed on the downloaded application.
Dependencies are inferred from the claim text.