Api checking device and state monitor
AssigneeNtt Docomo, Inc.
InventorsKen OHTA, Hisatoshi EGUCHI, Tomohiro NAKAGAWA, Atsushi TAKESHITA
Life of this patent
Estimating the term…
Abstract
An API checking device 300 includes an API check request reception unit 301 to receive a determination request to request determination of whether to permit the API call, a state information acquiring unit 303 to acquire state information showing a state of the device 100, a check mode setting unit 305 to set a check mode for the API call on the basis of the state information acquired, a determining unit 307 to determine whether to permit the API call on the basis of the check mode, and a check result outputting unit 309 to output the check result generated by the determining unit 307.
Claims22
An API checking device disposed in a closed execution environment in a device including:
- an open execution environment in which a program other than a trusted program can also be executed freely or under a given restriction;
- and the closed execution environment in which predetermined processing is executed on the basis of an API call that calls an application program interface from the open execution environment and only the trusted program is executed, the API checking device comprising:
- an API check request reception unit configured to receive a determination request to request determination of whether to permit the API call within the closed execution environment from the open execution environment;
- a state information acquiring unit configured to acquire state information showing a state of the device;
- a check mode setting unit configured to set a check mode for the API call on the basis of the state information acquired by the state information acquiring unit;
- a determining unit configured to determine whether to permit the API call on the basis of the check mode set by the check mode setting unit, and to generate a check result of the API call;
- and
- a check result outputting unit configured to output the check result generated by the determining unit.
A state monitor disposed in an open execution environment in a device including:
- the open execution environment in which a program other than a trusted program can also be executed freely or under a given restriction;
- and the closed execution environment in which predetermined processing is executed on the basis of an API call that calls an application program interface from the open execution environment and only the trusted program is executed, the state monitor comprising:
- a state manager configured to acquire a state of the device and maintain state information indicating the acquired state of the device;
- and
- a permission determining unit configured to determine whether to permit the API call within the closed execution environment from the open execution environment on the basis of the state information.
Dependencies are inferred from the claim text.