中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

4 records (took 0.017 seconds)

    Process Launch Constraints
    1.
    发明公开
    Process Launch Constraints 审中-公开

    公开(公告)号：US20230393888A1

    公开(公告)日：2023-12-07

    申请号：US18327553

    申请日：2023-06-01

    Applicant: Apple Inc.

    Inventor： David P. Remahl ,  Kyle C. Brogle ,  Robert J. Kendall-Kuppe ,  Pavlo Malynin ,  Geoffrey McCormack

    IPC: G06F9/48 ,  G06F12/14

    CPC classification number: G06F9/485 ,  G06F12/14

    Abstract: A kernel of an operating system receives a request from a parent process (e.g., an exec or spawn system call) to launch a child process that executes a binary. The kernel identifies a process-specific launch constraint, which is a precondition for launching the child process. The kernel evaluates the constraint, which can match against any type of system state or variable, including the process's location on disk, protection on disk, and how the process is to be launched. The kernel can then determine whether to launch the child process, thus permitting the child process to be scheduled for execution by the operating system. Launch constraints can be used both for a child process to impose preconditions on the parent process, and vice versa. Launch constraints can be included in the launch request, embedded in the binary, or located elsewhere, such as in a trust cache in kernel memory.

    Techniques for managing software applications
    2.
    发明授权
    Techniques for managing software applications 有权

    公开(公告)号：US12210612B2

    公开(公告)日：2025-01-28

    申请号：US17664206

    申请日：2022-05-19

    Applicant: Apple Inc.

    Inventor： Geoffrey McCormack ,  Damien P. Sorresso ,  Eric B. Tamura ,  Robert J. Kendall-Kuppe

    IPC: G06F21/51 ,  H04L9/32

    Abstract: Enclosed herein are techniques for securely executing an application. A method can be implemented by an operating system of a computing device, where the computing device includes a file system volume that includes a first data structure, and the method includes the steps of (1) receiving a request to launch the application, where the request references an application archive file that includes a second data structure that: (i) defines an organization of a plurality of files associated with the application, and (ii) includes cryptographic information for verifying the plurality of files and the second data structure; (2) in response to receiving the request: determining whether the second data structure, the plurality of files, or both, are valid using the cryptographic information; and (3) in response to determining that the second data structure, the plurality of files, or both, are valid: associating the second data structure with the first data structure.

Patent Agency Ranking