Security protection domain-based testing framework

Patent metadata

Field	Value
Publication number	US-8959485-B2
Application number	US-201213532586-A
Country	US
Kind code	B2
Filing date	Jun 25, 2012
Priority date	Mar 20, 2012
Publication date	Feb 17, 2015
Grant date	Feb 17, 2015

Abstract

Methods and apparatus for security protection domain-based testing. A testing framework enables the same certification tests to be run across different protection domains or operation modes, and on different platforms or devices. The testing framework may, for example, be directed to testing implementations of the Java Platform, Micro Edition (Java ME®) using Connected Device Configuration (CDC) or Connected Limited Device Configuration (CLDC) as the configuration layer and Mobile Information Device Profile (MIDP) as the profile layer. Different Mobile Information Device Profile (MIDP) specifications (e.g., MIDP 2.x and MIDP 3.x specifications) may be supported. The testing framework may be deployed in the context of compatibility testing and technology compatibility kits (TCKs). The testing framework may, for example, be applied in compatibility testing for Java ME® platform technology implementations.

First claim

What is claimed is:

1. A method for testing platform implementations, comprising:
performing, by a testing device, for a platform implementation under test:
obtaining a set of permissions according to a particular profile specification, wherein the particular profile specification defines a particular profile, wherein a profile provides APIs for supporting a category of devices and is included in a platform stack that provides a platform runtime environment for the category of devices;
mapping the permissions according to the particular profile specification to another profile specification, wherein said mapping is performed according to a set of permission mapping rules for mapping permissions between the particular profile and the other profile;
adding results of said mapping to the set of permissions, wherein said results are permissions according to the other profile specification, wherein after said adding, the set of permissions comprises permissions according to both the particular profile specification and the other profile specification;
determining a plurality of protection domain descriptions that each correspond to a respective protection domain supported by the particular profile specification or by the other profile specification, wherein the protection domains specify different operation modes for the APIs provided by the particular profile or the other profile;
subsequent to said adding and subsequent to said determining, editing and validating the plurality of protection domain descriptions according to the set of permissions that includes permissions according to both the particular profile specification and the other profile specification; and
for each of the determined plurality of protection domains implemented by the platform implementation under test, determining, from a suite of tests, one or more tests that are to be executed on the platform implementation under test and queuing the one or more tests for execution on the platform implementation under test under the respective protection domain such that tests are queued to test the platform implementation under test operating in each of the different operation modes for the protection domains corresponding to the determined plurality of protection domain descriptions according to both the particular profile specification and the other profile specification.

2. The method as recited in claim 1 , wherein said editing and validating a plurality of protection domain descriptions according to the set of permissions comprises, for each of the plurality of protection domains that is implemented by the platform implementation under test:
editing the respective protection domain description, wherein said editing comprises, for each permission in the set of permission, marking the respective permission as Allowed, User, or Not Permitted in the respective protection domain description; and
validating the respective protection domain description according to one or more validation criteria.

3. The method as recited in claim 1 , wherein said determining, from a suite of tests, one or more tests that are to be executed on the platform implementation under test comprises, for each test in the suite of tests:
determining if the test is applicable to the platform implementation under test; and
determining if permissions specified in a respective test description for the test match permissions specified in the protection domain description of the current protection domain;
wherein the test is not queued for execution if the test not applicable to the platform implementation under test or if the permissions specified for the test do not match the permissions specified for the current protection domain.

4. The method as recited in claim 3 , wherein said editing the respective protection domain description is performed via input to a user interface.

5. The method as recited in claim 3 , wherein the platform implementation under test is a Java Platform, Micro Edition (Java ME®) platform implementation.

6. The method as recited in claim 1 , wherein the particular profile specification is a Mobile Information Device Profile (MIDP) specification, and wherein the other profile specification is a different version of the MIDP specification.

7. The method as recited in claim 1 , wherein the platform stack further includes a configuration that is below the profile in the platform stack and that provides a basic set of libraries and APIs for the platform implementation.

8. The method as recited in claim 7 , wherein the configuration is one of Connected Device Configuration (CDC) or Connected Limited Device Configuration (CLDC).

9. A system comprising:
at least one processor; and
a memory storing program instructions, wherein the program instructions are executable by the at least one processor to:
obtain a set of permissions according to a particular profile specification, wherein the particular profile specification defines a particular profile, wherein a profile provides APIs for supporting a category of devices and is included in a platform stack that provides a platform runtime environment for the category of devices;
map the permissions according to the particular profile specification to another profile specification, wherein said mapping is performed according to a set of permission mapping rules for mapping permissions between the particular profile and the other profile;
add results of said mapping to the set of permissions, wherein said results are permissions according to the other profile specification, wherein after said adding, the set of permissions comprises permissions according to both the particular profile specification and the other profile specification;
determine a plurality of protection domain descriptions that each correspond to a respective protection domain supported by the particular profile specification or by the other profile specification, wherein the protection domains specify different operation modes for the APIs provided by the particular profile or the other profile;
subsequent to said adding and subsequent to said determining, edit and validate the plurality of protection domain descriptions according to the set of permissions that includes permissions according to both the particular profile specification and the other profile specification; and
for each of the determined plurality of protection domains that is implemented by the platform implementation under test, determine, from a suite of tests, one or more tests that are to be executed on the platform implementation under test and queue the one or more tests for execution on the platform implementation under test under the respective protection domain such that tests are queued to test the platform implementation under test operating in each of the different operation modes for the protection domains corresponding to the determined plurality of protection domain descriptions according to both the particular profile specification and the other profile specification.

10. The system as recited in claim 9 , wherein, to edit and validate a plurality of protection domain descriptions according to the set of permissions, the program instructions are executable by the at least one processor to, for each of the plurality of protection domains that is implemented by the platform implementation under test:
obtain input editing the respective protection domain description, where said input specifies, for each permission in the set of permission, a respective permission of Allowed, User, or Not Permitted in the respective protection domain description; and
validate the respective protection domain description according to one or more validation criteria.

Assignees

• Kvartskhava Boris
• Isaenko Vasily
• Alexeev Alexander
• Oracle Int Corp

Inventors

• Kvartskhava Boris
• Isaenko Vasily
• Alexeev Alexander

Classifications

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F11/36 Primary

  Prevention of errors by analysis, debugging or testing of software · CPC title

• G06F11/3698

  Environments for analysis, debugging or testing of software · CPC title

• G06F11/3664

  Physics · mapped topic