Cross-domain data sharing with permission control

Patent metadata

Field	Value
Publication number	US-2016019104-A1
Application number	US-201414334360-A
Country	US
Kind code	A1
Filing date	Jul 17, 2014
Priority date	Jul 17, 2014
Publication date	Jan 21, 2016
Grant date	—

Abstract

An electronic device may maintain separate OS domains associated with security permissions. The OS domain may implement separate corresponding clipboard services. A clipboard agent or clipboard mediator service may receive a clipboard data request from a first application. The clipboard agent may determine which OS domain has most recently processed a store command associated with storing data in a corresponding clipboard service of the OS domain. The clipboard agent associated with the OS domain that most recently stored content may determine whether to send the data from the corresponding clipboard service based at least in part on permissions associated with the OS domain. Security of the clipboard access may be enforced on a per domain basis. Access to clipboard content may be mediated at the time of the request without a need to share data prior to the request.

First claim

What is claimed is:

1 . A method performed on an electronic device, the method comprising:
executing a first clipboard agent in a first operating system (OS) domain, the first clipboard agent associated with a first clipboard service of the first OS domain; coordinating between the first clipboard agent and a second clipboard agent of a second OS domain regarding clipboard commands in the first OS domain and the second OS domain; and mediating, at the first clipboard agent, cross-domain access to the first clipboard service based at least in part on permissions associated with the first OS domain.

2 . The method of claim 1 , further comprising:
receiving, at the first clipboard agent, a store command from a first application, the store command directing the first clipboard service to store content from the first application; forwarding the store command to the first clipboard service; and sending, from the first clipboard agent to the second clipboard agent of the second OS domain, a notification regarding the store command.

3 . The method of claim 1 , further comprising:
receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain; determining whether the first clipboard service of the first OS domain or a second clipboard service of the second OS domain has most recently stored content; retrieving the content from the first clipboard service if the first clipboard service has most recently stored the content; and sending a request to the second clipboard agent of the second OS domain if the second clipboard service has most recently stored the content.

4 . The method of claim 1 , further comprising:
receiving a notification from the second clipboard agent regarding a store command in the second OS domain; and storing an indication of the store command responsive to receiving the notification.

5 . The method of claim 4 , wherein the indication comprises a dummy reference clip stored in the first clipboard service.

6 . The method of claim 1 , further comprising:
receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and determining that the first OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and sending the clipboard request to the first clipboard service.

7 . The method of claim 1 , further comprising:
receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and determining that the second OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and sending a cross-domain request to the second clipboard agent to request content from a second clipboard service in the second OS domain.

8 . The method of claim 7 , further comprising, prior to sending the cross-domain request to the second clipboard agent:
determining whether to send the cross-domain request to the second clipboard agent based at least in part on whether permissions of the first OS domain allow incoming data from the second OS domain.

9 . The method of claim 7 , further comprising:
receiving content from the second clipboard agent responsive to the cross-domain request; and sending the content to the first application.

10 . The method of claim 7 , further comprising:
receiving an indication from the second clipboard agent that the cross-domain request was rejected; and presenting a notice of the rejection via a user interface if the first application is active in the user interface.

11 . The method of claim 10 , wherein the indication that the cross-domain request was rejected comprises receiving null content in response to the cross-domain request.

12 . The method of claim 1 , further comprising:
receiving a cross-domain request from the second clipboard agent, the cross-domain request associated with a paste command from a second application in the second OS domain; and determining whether the second application in the second domain has permission to access content from the first clipboard service.

13 . The method of claim 12 , further comprising:
providing the content to the second clipboard agent responsive to determining that the second application has permission to paste the content; and providing a rejection to the second clipboard agent responsive to determining that the second application does not permission to paste the content.

14 . An electronic device, comprising:
one or more processors; and one or more memory units configured to store instructions, which when executed by at least one of the one or more processors, cause the device to,
execute a first clipboard agent in a first operating system (OS) domain, the first clipboard agent associated with a first clipboard service of the first OS domain,
coordinate between the first clipboard agent and a second clipboard agent of a second OS domain regarding clipboard commands in the first OS domain and the second OS domain, and
mediate, at the first clipboard agent, cross-domain access to the first clipboard service based at least in part on permissions associated with the first OS domain.

15 . The electronic device of claim 14 , wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:
receive, at the first clipboard agent, a store command from a first application, the store command directing the first clipboard service to store content from the first application; forward the store command to the first clipboard service; and send, from the first clipboard agent to the second clipboard agent of the second OS domain, a notification regarding the store command.

16 . The electronic device of claim 14 , wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:
receive, at the first clipboard agent, a clipboard request from a first application in the first OS domain; determine whether the first clipboard service of the first OS domain or a second clipboard service of the second OS domain has most recently stored content; retrieve the content from the first clipboard service if the first clipboard service has most recently stored the content; and send a request to the second clipboard agent of the second OS domain if the second clipboard service has most recently stored the content.

17 . The electronic device of claim 14 , wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:
receive a notification from the second clipboard agent regarding a store command in the second OS domain; and store an indication of the store command responsive to receiving the notification.

18 . The electronic device of claim 14 , wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:
receive, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from

Assignees

• Blackberry Ltd
• Ontario Inc 2236008

Inventors

• Major Daniel Jonas
• Peters Ian David
• Wurster Glenn Daniel
• Tapuska David Francis

Classifications

• G06F9/543 Primary

  User-generated data transfer, e.g. clipboards, dynamic data exchange [DDE], object linking and embedding [OLE] · CPC title

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title