Method, device and computer storage medium for controlling the running of an application

• US 10,198,573 B2
• Filed: 04/16/2015
• Issued: 02/05/2019
• Est. Priority Date: 06/13/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Shenzhen Company Limited (Tencent Holdings Limited)
• Inventors: Chen, Shuhua
• Primary Examiner(s): Harris, Christopher C
• Application Number:
  US14/688,812
• Publication Number:
  US 20150220730A1
• Time in Patent Office: 1,391 Days
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57

Abstract

A method for controlling the running of an application includes loading an application to be monitored; running the application loaded herein in a constructed running environment; and, according to a preset running configuration, executing a corresponding operation in the running environment, and processing a system call triggered by the application according to the operation herein. Furthermore, a device for controlling the running of an application includes a loading module configured to load an application to be monitored; a running module configured to run the application loaded herein in a constructed running environment; and a controlling module configured to execute a corresponding operation in the running environment according to a preset running configuration, and process a system call triggered by the application according to the operation herein. The present disclosure can thus ensure that data and applications are controlled and improve security.

Claims

1. A method for controlling a running of an application in a computing device, the method comprising:

loading an application to be monitored;

according to a configuration file, analyzing said application and acquiring assemblies of an application executable file;

triggering and running said application and acquiring an assembly in a running state, and, through a proxy mode, running said assembly in said constructed running environment;

judging that a running assembly triggers a system call;

redirecting said system call, triggered by said running assembly, to said constructed running environment, and executing a corresponding operation according to a preset running configuration;

acquiring an execution result of said corresponding operation, wherein the corresponding operation comprises an operation of encrypting data, a reset operation triggered for the computing device, and an operation of disabling a certain function of said application; and

then processing said system call according to said execution result of said corresponding operation when said execution result of the corresponding operation indicates that the corresponding operation has been successfully completed, after the corresponding operation has been executed according to said preset running configuration;

wherein said preset running configuration is acquired through a control interface set on a processor, said preset running configuration is a configuration distributed by a server, or is a configuration set by a local user.

2. The method for controlling the running of an application according to claim 1, wherein said step of loading an application to be monitored comprises:

reading said application executable file of said application to be monitored; and

redirecting an application programming interface function in said application executable file to said constructed running environment.

3. The method for controlling the running of an application according to claim 1, wherein said step of acquiring an execution result of said corresponding operation, and then processing said system call according to said execution result of said operation comprises:

acquiring the execution result of said corresponding operation generated through executing said corresponding operation; and

according to said execution result of said corresponding operation, disabling or executing said system call.

4. The method for controlling the running of an application according to claim 1, wherein said constructed running environment is a security sandbox.

5. The method for controlling the running of an application according to claim 1, wherein said constructed running environment is an intermediate layer between said application and an operating system, and wherein said operating system is at least one of a set of operating systems comprising Android, iOS, Linux, Windows, and Symbian.

6. The method for controlling the running of an application according to claim 1, wherein said preset running configuration includes configuration information set with respect to data associated with the running of the application or behaviors of the application, so that said data associated with the running of the application or behaviors of the application are effectively controlled according to the preset running configuration.

7. The method for controlling the running of an application according to claim 1, after the step of redirecting said system call, triggered by said running assembly, to said constructed running environment, the method further comprises:

when said system call is recorded in configuration information according to the preset running configuration, processing said system call triggered by said application according to said execution result of said corresponding operation herein when said execution result of the corresponding operation indicates that the corresponding operation has been successfully completed.

8. A device for controlling a running of an application, said device comprising a processor and a memory, the memory configured to store software programs and modules, the processor running said software programs and modules saved in the memory,

wherein the processor is configured to:

load an application to be monitored;

analyze said application according to a configuration file and acquire assemblies of an application executable file;

trigger and run said application and acquire an assembly in a running state, and, through a proxy mode, run said assembly in said constructed running environment;

judge that a running assembly triggers a system call;

redirect said system call, triggered by said running assembly, to said constructed running environment, and execute a corresponding operation according to a preset running configuration;

acquire an execution result of said corresponding operation, wherein the corresponding operation comprises an operation of encrypting data, a reset operation triggered for the computing device, and an operation of disabling a certain function of said application; and

then process said system call according to said execution result of said corresponding operation when said execution result of the corresponding operation indicates that the corresponding operation has been successfully completed, after the corresponding operation has been executed according to said preset running configuration;

wherein said preset running configuration is acquired through a control interface set on a processor, said preset running configuration is a configuration distributed by a server, or is a configuration set by a local user.

9. The device for controlling the running of an application according to claim 8, wherein said processor is further configured to:

read said application executable file of said application to be monitored; and

redirect an application programming interface function in said application executable file to said constructed running environment.

10. The device for controlling the running of an application according to claim 8, wherein said processor is further configured to:

acquire the execution result of said corresponding operation generated through executing said corresponding operation;

disable or execute said system call according to said execution result of said corresponding operation.

11. The device for controlling the running of an application according to claim 8, wherein said device for controlling the running of an application is a mobile terminal.

12. The device for controlling the running of an application according to claim 11, wherein said mobile terminal is a mobile phone, a personal digital assistant, or an on-board computer.

13. The device for controlling the running of an application according to claim 8, wherein said preset running configuration includes configuration information set with respect to data associated with the running of the application or behaviors of the application, so that said data associated with the running of the application or behaviors of the application are effectively controlled according to the preset running configuration.

14. The device for controlling the running of an application according to claim 8, wherein processor is further configured to execute:

when said system call is recorded in configuration information according to the preset running configuration, processing said system call triggered by said application according to said execution result of said corresponding operation herein when said execution result of the corresponding operation indicates that the corresponding operation has been successfully completed.

15. A non-transitory computer readable storage medium, including computer executable instructions, wherein said computer executable instructions are used for executing a method for controlling a running of an application, wherein the method comprises:

loading an application to be monitored;

according to a configuration file, analyzing said application and acquiring assemblies of an application executable file;

triggering and running said application and acquiring an assembly in a running state, and, through a proxy mode, running said assembly in said constructed running environment;

judging that a running assembly triggers a system call;

redirecting said system call, triggered by said running assembly, to said constructed running environment, and executing a corresponding operation according to a preset running configuration;

acquiring an execution result of said corresponding operation, wherein the corresponding operation comprises an operation of encrypting data, a reset operation triggered for the computing device, and an operation of disabling a certain function of said application; and

then processing said system call according to said execution result of said corresponding operation when said execution result of the corresponding operation indicates that the corresponding operation has been successfully completed, after the corresponding operation has been executed according to said preset running configuration;

wherein said preset running configuration is acquired through a control interface set on a processor, said preset running configuration is a configuration distributed by a server, or is a configuration set by a local user.

16. The non-transitory computer readable storage medium according to claim 15, wherein said step of loading an application to be monitored comprises:

reading said application executable file of said application to be monitored; and

redirecting an application programming interface function in said application executable file to said constructed running environment.

17. The non-transitory computer readable storage medium according to claim 15, wherein said step of acquiring an execution result of said corresponding operation, and then processing said system call according to said execution result of said operation comprises:

acquiring the execution result of said corresponding operation generated through executing said corresponding operation; and

according to said execution result of said corresponding operation, disabling or executing said system call.

18. The non-transitory computer readable storage medium according to claim 15, wherein said constructed running environment is a security sandbox.

19. The non-transitory computer readable storage medium according to claim 15, wherein said preset running configuration includes configuration information set with respect to data associated with the running of the application or behaviors of the application, so that said data associated with the running of the application or behaviors of the application are effectively controlled according to the preset running configuration.

20. The non-transitory computer readable storage medium according to claim 15, after the step of redirecting said system call, triggered by said running assembly, to said constructed running environment, the method further comprises:

when said system call is recorded in configuration information according to the preset running configuration, processing said system call triggered by said application according to said execution result of said corresponding operation herein when said execution result of the corresponding operation indicates that the corresponding operation has been successfully completed.