Method for the secure interpretation of programs in electronic devices

An electronic device comprising:

• at least one shared interpreter library configured to implement an interpreter engine, to check whether an external interpreted program code section is referred by an interpreted program, to infer at least on first capability for said external interpreted program code section, and to disallow the execution of said external interpreted program code section, if at least on second capability is not a subset of said at least one first capability;
• an installer entity configured to load said interpreted program in said electronic device, to form a stub executable using a prototype stub executable, to associate said stub executable with said interpreted program, to assign said at least one second capability to said stub executable, said stub executable being an application executed within an operating system in said electronic device, and to load said external interpreted program code section in said electronic device;
• and
• an operating system entity configured to execute said stub executable in a separate process context.

A computer program embodied on a computer readable medium, the computer program comprising code for controlling a processor to execute a method comprising:

• loading an interpreted program;
• forming a stub executable using a prototype stub executable, said stub executable being an application executed within an operating system in an electronic device;
• associating said stub executable with said interpreted program;
• assigning at least one second capability to said interpreted program;
• associating said at least one second capability to said stub executable;
• executing said stub executable in separate process context;
• indicating by said stub executable to at least one shared interpreter library said program;
• invoking by said stub executable at least one function in said shared interpreter library to interpret said interpreted program;
• checking whether an external interpreted program code section is referred by the interpreted program;
• loading said external interpreted program code section in said electronic device;
• inferring at least one first capability for said external interpreted program code section;
• and
• disallowing the execution of the said external interpreted program code section if said at least one second capability is not a subset of said at least one first capability.

An electronic device comprising:

• means for providing at least one shared interpreter library and a prototype stub executable in said electronic device;
• means for loading an interpreted program in said electronic device;
• means for forming a stub executable using said prototype stub executable in said electronic device, said stub executable being an application executed within an operating system in said electronic device;
• means for associating said stub executable with said interpreted program in said electronic device;
• means for assigning at least one second capability to said stub executable;
• means for executing said stub executable in said electronic device in a separate process context;
• means for indicating, by said stub executable, to said at least one shared interpreter library said interpreted program;
• means for invoking, by said stub executable, at least one function in said at least one shared interpreter library to interpret said interpreted program;
• means for checking whether an external interpreted program code section is referred by the interpreted program;
• means for loading said external interpreted program code section in said electronic device;
• means for inferring at least one first capability for said external interpreted program code section;
• and
• means for disallowing the execution of said external interpreted program code section if said at least one second capability is not a subset of said at least one first capability.