Method for processing security of application and electronic device supporting the same

A method for processing security of an application, the method comprising:

• downloading, at an electronic device, the application from an external server;
• determining, by the electronic device, whether the application downloaded from the external server is authenticated, by analyzing metadata of the application, in response to receiving an installation request or an execution request of the downloaded application;
• in response to determining that the application downloaded from the external server is authenticated, generating, by the electronic device, a first policy file associated with a domain which is accessible to a secure area of the electronic device based on identification information included in the metadata;
• and
• assigning, by the electronic device, the application downloaded from the external server to the domain, which is accessible to the secure area, based on the generated first policy file and a second policy file which is stored in a memory of the electronic device in advance,
• wherein the memory of the electronic device comprises a normal area and the secure area, wherein data stored in the normal area may be shared without security processing while data stored in the secure area is required for the security processing, and
• wherein the domain included in the normal area.

A non-transitory computer-readable recording medium having recorded thereon instructions that, when executed by at least one processor of an electronic device, configure the at least one processor for:

• downloading an application from an external server;
• determining, by the electronic device, whether the application downloaded from the external server is authenticated, by analyzing metadata of the application, in response to receiving an installation request or an execution request of the downloaded application;
• in response to determining that the application downloaded from the external server is authenticated, generating, by the electronic device, a first policy file associated with a domain which is accessible to a secure area of the electronic device based on identification information included in the metadata;
• and
• assigning, by the electronic device, the application downloaded from the external server to the domain, which is accessible to the secure area, based on the generated first policy file and a second policy file which is stored in a memory of the electronic device in advance,
• wherein the memory of the electronic device comprises a normal area and the secure area, wherein data stored in the normal area may be shared without security processing while data stored in the secure area is required for the security processing, and
• wherein the domain included in the normal area.