System function invoking method and apparatus, and terminal

• US 10,452,867 B2
• Filed: 11/10/2015
• Issued: 10/22/2019
• Est. Priority Date: 05/27/2013
• Status: Active Grant

• Current Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Inventors: Huang, Xi, Wu, Huangwei
• Primary Examiner(s): Najjar, Saleh
• Assistant Examiner(s): Chao, Michael W
• Application Number:
  US14/936,826
• Publication Number:
  US 20160063266A1
• Time in Patent Office: 1,442 Days
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system function invoking method and apparatus, and a terminal are disclosed and are related to the field of computer technologies. The method includes acquiring an installation package of a first application program; granting a first permission of a system to the first application program according to the installation package, where the first permission is used to, when the first application program is in a running state, forbid a second application program from invoking at least one system function; and running the first application program, and forbidding the second application program from invoking the at least one system function. The apparatus includes a first acquiring module, an authorization module, and an invoking module.

Claims

1. A system function invoking method implemented by a terminal device, the method comprising:

acquiring an installation package of a first application program;

acquiring configuration information of a first permission from the installation package, wherein the first permission is not a highest level permission and forbids a second application program from invoking a system function in response to the first application program running;

granting the first permission to the first application program according to the configuration information;

recording the configuration information of the first permission in an installation the of the terminal device; and

forbidding, according to the configuration information, the second application program from invoking the system function in response to the first application program running and independent of user notification.

2. The system function invoking method of claim 1, further comprising acquiring a configuration file comprising disabling information of an application programming interface (API) corresponding to the first permission, wherein forbidding the second application program from invoking the system function comprises forbidding, according to the configuration information, the second application program from invoking the API in response to the first application program running.

3. The system function invoking method of claim 1, wherein the second application program is any application program of all application programs in the terminal device except the first application program.

4. The system function invoking method of claim 1, wherein the second application program is any application program of some application programs in the terminal device other than the first application program.

5. The system function invoking method of claim 1, wherein forbidding the second application program from invoking the system function comprises suspending or ending invocation of the system function in response to the second application program invoking the system function prior to the first application program running.

6. A terminal device comprising:

a storage device; and

a processor coupled to the storage device and configured to;

acquire an installation package of a first application program;

acquire configuration information of a first permission from the installation package, wherein the first permission is not a highest level permission and forbids a second application program from invoking a system function in response to the first application program running;

grant the first permission of a system to the first application program according to the configuration information;

record the configuration information of the first permission in an installation the of the terminal device; and

forbid, according to the configuration information, the second application program from invoking the system function in response to the first application program running.

7. The terminal device of claim 6, wherein the processor is further configured to:

acquire a configuration file comprising disabling information of an application programming interface (API) corresponding to the first permission; and

forbid, according to the configuration information, the second application program from invoking the API in response to the first application program running.

8. The terminal device of claim 6, wherein the second application program is any application program of all application programs in the terminal device except the first application program.

9. The terminal device of claim 6, wherein the second application program is any application program of some application programs in the terminal device other than the first application program.

10. The terminal device of claim 6, wherein the processor is further configured to suspend or end invocation of the system function in response to the second application program invoking the system function prior to the first application program running.

11. A system function invoking method comprising:

configuring a first mode in a system;

acquiring an installation package of a first application program;

acquiring configuration information of a first permission from the installation package, wherein the first permission is not the highest level permission and forbids a second application program from invoking a system function in response to the first application program running;

granting the first permission of a system to the first application program according to the configuration information;

recording the configuration information of the first permission in an installation file of the terminal device;

running the first application program;

configuring the system such that the system is in the first mode in response to the first application program running; and

forbidding, according to the first permission, a second application program from invoking the system function in response to the first application program running.

12. The system function invoking method of claim 11, wherein the second application program is any application program of all application programs in the system except the first application program.

13. The system function invoking method of claim 11, wherein the second application program is any application program of some application programs in the system other than the first application program.

14. The system function invoking method of claim 11, further comprising switching, after forbidding the second application program from invoking the system function, from the first mode to a second mode in response to the first application program exiting running, wherein the second mode allows the second application program to invoke the system function in response to the system being in the second mode.

15. The system function invoking method of claim 11, wherein forbidding the second application program from invoking the system function comprises suspending or ending invocation of the system function in response to the second application program invoking the system function prior to the first application program running.

16. The system function invoking method of claim 11, further comprising notifying the first application program that the system has disabled an application programming interface (API) corresponding to the system function.

17. The system function invoking method of claim 16, wherein forbidding the second application program from invoking the system function comprises:

invoking the API;

searching for disabling information of the API; and

returning a null value or a false value to the second application program in response to finding the disabling information.