Electronic device for installing application and method of controlling same

Patent metadata

Field	Value
Publication number	US-2016239287-A1
Application number	US-201615044844-A
Country	US
Kind code	A1
Filing date	Feb 16, 2016
Priority date	Feb 16, 2015
Publication date	Aug 18, 2016
Grant date	—

Abstract

An electronic device and method of controlling an electronic device are provided. The electronic device includes a communication module; a processor; and a memory that stores instructions to instruct the processor to install a first application operating only in a first environment, install a second application selectively operating in at least one of the first environment and a second environment, grant access to the first application to first data, the first data being generated while the second application operates in the first environment, deny access to the first application to second data, the second data being generated while the second application operates in the second environment, grant access to the second application to third data, the third data being generated while the first application operates in the first environment, and allocate the second application to at least the second environment without a user's input when the second application is installed.

First claim

What is claimed is:

1 . An electronic device comprising:
a communication module; a processor; and a memory that stores instructions to instruct the processor to: install a first application operating only in a first environment, install a second application selectively operating in at least one of the first environment and a second environment, grant access to the first application to first data, the first data being generated while the second application operates in the first environment, deny access to the first application to second data, the second data being generated while the second application operates in the second environment, grant access to the second application to third data, the third data being generated while the first application operates in the first environment, and allocate the second application to at least the second environment without a user's input when the second application is installed.

2 . The electronic device of claim 1 , wherein the second application includes metadata indicating whether the second application is associated with the second environment.

3 . The electronic device of claim 2 , wherein the processor generates the second environment based on the metadata.

4 . The electronic device of claim 2 , wherein the metadata includes at least one of data, a security level of the second application, and authentication related data for security.

5 . The electronic device of claim 4 , wherein the processor determines whether to allocate the second application to the second environment according to the security level.

6 . The electronic device of claim 1 , wherein the communication module transmits an authentication request for the second application to a security server, and receives an authentication result from the security server in response to the authentication request.

7 . The electronic device of claim 6 , wherein the processor determines whether to allocate the second application to the second environment based on the authentication result, and allocates the second application to the second environment according to the determination of the allocation.

8 . The electronic device of claim 6 , wherein the authentication request includes at least one of a security key and a value encoded by the security key.

9 . The electronic device of claim 1 , wherein the processor controls the displaying of icons for executing applications allocated to the first environment and the second environment on a single screen.

10 . The electronic device of claim 1 , wherein the second environment corresponds with a user identifier.

11 . A method of controlling an electronic device, the method comprising;
installing a first application operating only in a first environment; installing a second application selectively operating in the first environment or a second environment; granting access to the first application to first data, the first data being generated while the second application operates in the first environment; denying access to the first application to second data, the second data being generated while the second application operates in the second environment; granting access to the second application to third data, the third data being generated while the first application operates in the first environment; and allocating the second application to at least the second environment without a user's input when the second application is installed.

12 . The method of claim 11 , wherein the second application includes metadata indicating whether the second application is associated with the second environment.

13 . The method of claim 12 , further comprising generating the second environment based on the metadata.

14 . The method of claim 12 , wherein the metadata includes at least one of data, a security level of the first application, and authentication related data for security.

15 . The method of claim 14 , further comprising determining whether to allocate the second application to the second environment according to the security level.

16 . A method of controlling an electronic device for producing an application, the method comprising:
acquiring an application identifier and a security key; transmitting the application identifier and the security key to a security server; producing an application including metadata indicating whether the application is to be executed in a sandbox; and transmitting the application and the security key to an application market.

17 . An electronic device comprising:
a communication module; a processor; and a memory that stores instructions to instruct the processor to: provide a first area in which at least one application program can operate and a second area having an operation environment which is at least partially different from the first area, access an application market provided by an external service through the communication module at least partially in response to a first input from a user in the first area, download a selected first application from the application market at least partially in response to a second input from the user in the first area, install the downloaded first application in the electronic device, and allocate the downloaded first application to the second area without any input from the user.

18 . The electronic device of claim 17 , wherein the communication module transmits an authentication request for the first application to a security server, and receives a domain identifier from the security server, in response to the authentication request.

19 . The electronic device of claim 17 , wherein the processor allocates the first application to the second area corresponding to the received domain identifier.

20 . The electronic device of claim 18 , wherein the authentication request includes a security key for authentication or a value encoded by the security key.

21 . The electronic device of claim 17 , wherein the communication module receives a domain identifier related to the first application from the application market together with the first application.

22 . The electronic device of claim 21 , wherein the processor allocates the first application to the second area corresponding to the received domain identifier.

23 . The electronic device of claim 21 , wherein the processor controls storing correlation information between the received domain identifier and the domain identifier for management.

24 . The electronic device of claim 21 , wherein the processor determines whether there is a domain corresponding to the received domain identifier.

25 . The electronic device of claim 24 , wherein the processor allocates the first application to the corresponding second area, when the second area corresponds to the received domain identifier, and generates the second area corresponding to the received domain identifier and allocates the first application to the generated second area, when there is no existing domain corresponding to the received domain identifier.

26 . The electronic device of claim 17 , wherein the processor executes a command for the first application related to the second area.

27 . The electronic device of claim 17 , wherein the processor allocates the first application to a first environment or a second environment.

28 . The electronic device of claim 17 , wh

Assignees

• Samsung Electronics Co Ltd

Inventors

• Lim Bum-Taek
• Kim Young-Jip
• Lee Jun-Tae
• Lee Tae-Soo
• Choi Dong-Jin
• Park Joon-Ho
• Seo Young-Su
• Song Hye-Min
• Jung Yu-Jin
• Kodihalli Nandeeshwar

Classifications

• G06F21/6218

  to a system of files or objects, e.g. local or distributed file system or database · CPC title

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F21/44

  Program or device authentication · CPC title

• G06F3/04817

  using icons (graphical or visual programming using iconic symbols G06F8/34) · CPC title

• G06F3/04842

  Selection of displayed objects or displayed text elements (G06F3/0482 takes precedence) · CPC title