Apparatus and method for running multiple instances of a same application in mobile devices

Patent metadata

Field	Value
Publication number	US-9575740-B2
Application number	US-201514601821-A
Country	US
Kind code	B2
Filing date	Jan 21, 2015
Priority date	Jan 21, 2015
Publication date	Feb 21, 2017
Grant date	Feb 21, 2017

Abstract

An apparatus and method for isolating at least one of a plurality of applications included in an electronic device are provided. The method includes selecting at least one of the plurality of applications included in the electronic device, preprocessing the at least one selected application so as to be at least one modified application included in a sandbox isolating the at least one selected applications from others of the plurality of applications, and installing the at least one modified application on the electronic device so as to be executed only according to the sandbox.

First claim

What is claimed is:

1. A method for isolating at least one of a plurality of applications included in an electronic device, the method comprising:
selecting at least one of the plurality of applications included in the electronic device;
moving and processing the at least one selected application in a sandbox isolating the at least one selected application from others of the plurality of applications so as to be at least one modified application, the sandbox providing data isolation for processing of the at least one selected application; and
installing and executing the at least one modified application on the electronic device so as to be executed only according to the sandbox, the sandbox providing runtime isolation for execution of the at least one selected application.

2. The method of claim 1 , wherein the selecting of the at least one of the plurality of applications included in the electronic device comprises:
displaying the at least one of the plurality of applications on the electronic device; and
receiving a user input indicating the at least one selected application from among the displayed at least one of the plurality of applications.

3. The method of claim 1 ,
wherein the processing of the at least one selected application comprises isolating an application file corresponding to the at least one selected application to be the at least one modified application included in the sandbox, and
wherein the at least one modified application includes at least one of a modified application manifest or a modified Dalvik Executable (DEX) file.

4. The method of claim 3 , wherein the isolating of the application file corresponding to the at least one selected application comprises:
extracting an application manifest corresponding to the application file;
modifying the application manifest to be the modified application manifest; and
storing the modified application manifest so as to correspond to the at least one modified application included in the sandbox.

5. The method of claim 4 , wherein the modifying of the application manifest comprises:
modifying at least one of a descriptor or a reference included in the application manifest,
wherein the at least one of the descriptor or the reference may correspond to at least one of a process name, a file name, a memory location, a device, an address, a pointer, or an operating system component.

6. The method of claim 4 , wherein the modifying of the application manifest comprises:
at least one of adding or modifying at least one of an application permission or an operating system component,
wherein the at least one of the application permission and the operating system component may be defined when the at least one selected application is at least one of installed or downloaded.

7. The method of claim 3 ,
wherein the isolating of the application file corresponding to the at least one selected application comprises containerizing a DEX file corresponding to the at least one selected application to be the modified DEX file, and
wherein the DEX file may include Dalvik bytecode.

8. The method of claim 7 ,
wherein the containerizing of the DEX file comprises at least one of replacing or modifying at least one process included in the Dalvik bytecode with at least one proxy method configured to provide the data isolation and runtime isolation for execution of the at least one selected application, and
wherein the at least one modified process controls at least one of transmitting or receiving of messages by the at least one selected application.

9. The method of claim 7 ,
wherein the containerizing of the DEX file comprises inserting an object into a class hierarchy of the Dalvik bytecode, and
wherein the object controls at least one of transmitting or receiving of messages by the at least one selected application.

10. The method of claim 3 ,
wherein the isolating of the application file corresponding to the at least one selected application to be the at least one modified application included in the sandbox comprises packaging the at least one modified application manifest and the at least one modified DEX file into a modified application package corresponding to the modified application, and
wherein the modified application package includes a certificate indicating integrity of the modified application package.

11. An apparatus for isolating at least one of a plurality of applications included in an electronic device, the apparatus comprising:
a display configured to:
display the plurality of applications included in the electronic device, and
receive a user input selecting at least one of the plurality of applications;

a processor configured to:
move and preprocess the at least one selected application in a sandbox isolating the at least one selected application from others of the plurality of applications so as to be at least one modified application, the sandbox providing data isolation for preprocessing of the at least one selected application, and
install and execute the at least one modified application on the electronic device so as to be executed only according to the sandbox, the sandbox providing runtime isolation for execution of the at least one selected application; and

a memory configured to store the at least one modified application.

12. The apparatus of claim 11 , further comprising an input/output (I/O) interface configured to receive a user input indicating the at least one selected application from among the displayed plurality of applications.

13. The apparatus of claim 11 ,
wherein the processor is further configured to isolate an application file corresponding to the at least one selected application to be the at least one modified application included in the sandbox, and
wherein the at least one modified application includes at least one of a modified application manifest or a modified Dalvik Executable (DEX) file.

14. The apparatus of claim 13 , wherein the processor is further configured to:
extract an application manifest corresponding to the application file,
modify the application manifest to be the modified application manifest, and
store the modified application manifest so as to correspond to the at least one modified application included in the sandbox in the memory.

15. The apparatus of claim 14 ,
wherein the processor is further configured to modify at least one of a descriptor or a reference included in the application manifest, and
wherein the at least one of the descriptor or the reference may correspond to at least one of a process name, a file name, a memory location, a device, an address, a pointer, or an operating system component.

16. The apparatus of claim 14 ,
wherein the processor is further configured to at least one of add or modify at least one of an application permission or an operating system component, and
wherein the at least one of the application permission or the operating system component may be defined when the at least one selected application is at least one of installed or downloaded.

17. The apparatus of claim 13 ,
wherein the processor is further configured to containerize a DEX file corresponding to the at least one selected application to be the modified DEX file, and
wherein the DEX file may include Dalvik bytecode.

18. The apparatus of claim 17 ,
wherein the processor is further configured to at least one of replace or modify at least one process included in the Dalvik bytecode with at least one proxy method configured to provide the data isolation and runtime isolation for execut

Assignees

• Samsung Electronics Co Ltd

Inventors

• Sankaranarasimhan Manikandan
• Swaney William
• Havin Victor
• Ishihara Toru

Classifications

• G06F21/53 Primary

  by executing in a restricted environment, e.g. sandbox or secure virtual machine · CPC title

• G06F8/61 Primary

  Installation · CPC title