# US 10,122,759 B2 · Centralized operation management > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,122,759 B2 - Document ID: US10122759B2 - Status: Granted - Kind: B2 - Application number: 14/827,166 - Filed: 2015-08-14 - Published: 2016-05-19 - Granted: 2018-11-06 - Earliest claimed: 2012-02-03 - Assignees: Apple Inc. - Applicants: Apple Inc. - Inventors: Peter Kiehtreiber; Jacques A. Vidrine; Christopher S. Linn; Randy D. Saldinger; Braden J. Thomas - Web page: https://patentgrep.com/patent/US10122759B2 ## CPC - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - G06F 21/51: at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability - H04L 63/1433: {Vulnerability analysis} - H04L 63/1441: {Countermeasures against malicious traffic (countermeasures against attacks on cryptographic mechanisms H04L9/002)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A novel security framework that is part of an operating system of a device is provided. The framework includes a security assessor that performs security policy assessments for different operations that need to be performed with respect to an application executing on the device. Examples of such operations include the installation of the application, execution of the application, and the opening of content files (e.g., opening of documents) by the application. ## Claims ### Claim 1 A method for assessing security of operations performed by an operating system executing on a device, the method comprising: receiving a request to install an application downloaded by the device; identifying whether a tag identifier associated with the downloaded application includes a portion that indicates that a security assessment has not been performed on the downloaded application; performing the security assessment based on the existence of the portion of the tag identifier; and if the downloaded application passes the security assessment, (i) allowing installation of the downloaded application and (ii) removing the portion of the tag identifier for the downloaded application to indicate that further security assessments should not be performed, thereby reducing an amount of memory associated with storing of the downloaded application. ### Claim 2 (depends on 1) The method of claim 1, wherein the requested installation is one of a plurality of operations assessed by a centralized security assessor provided by the operating system. ### Claim 3 (depends on 1) The method of claim 1, wherein the tag identifier further indicates that the application is downloaded from an external source. ### Claim 4 (depends on 1) The method of claim 1, wherein the requested installation is disallowed when the security assessment indicates that the downloaded application fails to comply with a security policy. ### Claim 5 (depends on 1) The method of claim 1, wherein removing the portion of the tag identifier for the downloaded application comprises removing a quarantine bit in the tag identifier to no longer indicate that a security assessment has not been performed on the downloaded application. ### Claim 6 (depends on 1) The method of claim 1, wherein the security assessment is bypassed when the tag identifier indicates that a previous security assessment has already been performed on the downloaded application based on the portion of the tag identifier having been removed. ### Claim 7 (depends on 6) The method of claim 6, wherein the requested installation is allowed when the tag identifier indicates that the downloaded application complies with a security policy based on the portion of the tag identifier having been removed. ### Claim 8 (depends on 6) The method of claim 6, wherein the requested installation is disallowed when the tag identifier indicates that the downloaded application fails to comply with a security policy. ### Claim 9 A method for assessing security of operations performed by an operating system executing on a device, the method comprising: receiving a request to install an application downloaded by the device; determining whether the downloaded application is associated with a quarantine bit that indicates that a security assessment has not been performed on the downloaded application; performing the security assessment when the quarantine bit indicates that a security assessment has not been performed on the downloaded application; and if the downloaded application passes the security assessment, (i) allowing installation of the downloaded application and (ii) removing the quarantine bit for the downloaded application to indicate that further security assessments should not be performed. ### Claim 10 (depends on 9) The method of claim 9, wherein the security assessment is bypassed when the downloaded application is not associated with the quarantine bit. ### Claim 11 (depends on 9) The method of claim 9, wherein the security assessment is based on a user input to override the quarantine bit associated with the downloaded application. ### Claim 12 (depends on 9) The method of claim 9, wherein the security assessment is based on security policies that specify rules for handling external data objects. ### Claim 13 (depends on 9) The method of claim 9, wherein the quarantine bit further indicates that the downloaded application is received from an external source. ### Claim 14 (depends on 13) The method of claim 13 further comprising: downloading the application from the external source; associating the quarantine bit with the downloaded application; and storing the downloaded application. ### Claim 15 (depends on 14) The method of claim 14, wherein associating the downloaded application with the quarantine bit comprises appending the quarantine bit to the downloaded application. ### Claim 16 (depends on 14) The method of claim 14, wherein storing the downloaded application comprises recording the downloaded application in a tag table that maintains a list of tagged applications. ### Claim 17 (depends on 9) The method of claim 9, further comprising: associating the quarantine bit with the application when the application is downloaded to indicate that the security assessment has not been performed on the downloaded application. ### Claim 18 (depends on 17) The method of claim 17, wherein the operating system implements a security policy that prevents installation of applications associated with a quarantine bit and allows installation of applications that are not associated with a quarantine bit. ### Claim 19 A non-transitory machine readable medium storing a program which when executed by at least one processing unit of a device assesses security of operations performed by an operating system of the device, the program comprising sets of instructions for: receiving a request to install an application downloaded by the device; identifying whether a tag identifier associated with the downloaded application indicates that a security assessment has not been performed on the downloaded application; performing the security assessment based on the existence of the tag identifier; and when the downloaded application passes the security assessment, (i) allowing installation of the downloaded application and (ii) removing the tag identifier to indicate that further security assessments should not be performed on the downloaded application. ### Claim 20 (depends on 19) The non-transitory machine readable medium of claim 19, wherein the program further comprises a set of instructions for disallowing installation of the downloaded application when the security assessment indicates that the downloaded application fails to comply with a security policy. ### Claim 21 (depends on 19) The non-transitory machine readable medium of claim 19, wherein the tag identifier indicates that the application is downloaded from an external source. ### Claim 22 (depends on 19) The non-transitory machine readable medium of claim 19, wherein the set of instructions for modifying the tag identifier comprises a set of instructions for removing a quarantine bit in the tag identifier to no longer indicate that a security assessment has not been performed on the downloaded application.