Application identity for software products

• US 20050091535A1
• Filed: 06/15/2004
• Published: 04/28/2005
• Est. Priority Date: 10/24/2003
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Noonan, Timothy D., Stritzel, Adam, Li, Eric, Rector, John Austin, Sambotin, Dragos C., Kavalam, Jude Jacob, Probert, David B., Tsuryk, Valeriy
• Application Number:
  US10/868,183
• Publication Number:
  US 20050091535A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06F 8/62 Uninstallation

Abstract

Managing the installation, execution, and removal of application programs by an operating system via an application identity associated with each application program. A method of the invention assigns the application identity to each application program and a resource identity to each resource associated with each application program. The method relates the assigned application identity and resource identity to enable manipulation of the application program and its resources.

Claims

1. A method for managing a plurality of applications on a computing system, said method comprising:

assigning an application identity to an application program, said assigned application identity differentiating the application program from other application programs;

assigning a resource identity to a resource associated with the application program; and

relating the assigned application identity and the assigned resource identity.

2. The method of claim 1, wherein assigning the application identity to the application program comprises assigning the application identity to the application program based on one or more of the following:

a manifest associated with the application program, an assessment of a plurality of files associated with the application program, a hash of the application program, and an installer identity corresponding to an installation program associated with the application program.

3. The method of claim 2, wherein assigning the application identity to the application program further comprises extracting metadata from one or more of the following:

the manifest, the assessment, the hash, and the installer identity.

4. The method of claim 1, wherein assigning the resource identity to the resource comprises assigning the application identity to an operating system object.

5. The method of claim 4, further comprising assigning the operating system object to the application program based on one or more of the following:

the assigned application identity, a manifest associated with the application program, and additional metadata describing the operating system object.

6. The method of claim 1, wherein assigning the resource identity to the resource comprises assigning the resource identity to the application program based on one or more of the following:

the assigned application identity, a manifest associated with the application program, an assessment of the resource, and a hash of the resource.

7. The method of claim 1, further comprising determining an isolation identity for the application program, said isolation identity being associated with at least one other application program having another application identity associated therewith.

8. The method of claim 1, further comprising determining an isolation identity for the application program, said isolation identity being different from another isolation identity of another application program having another application identity associated therewith.

9. The method of claim 1, further comprising:

receiving a request to transition the application program from the assigned application identity to another application identity associated with another application program; and

responsive to the received request, assigning the other application identity to the application program.

10. The method of claim 1, wherein assigning the application identity to the application program comprises determining one or more of the following for the application program:

an application vendor, an application name, an application version, and a checksum.

11. The method of claim 1, wherein assigning the resource identity to the resource comprises including a portion of the assigned application identity with the assigned resource identity

12. The method of claim 1, wherein assigning the resource identity to the resource comprises assigning the resource identity to the resource when the resource is created during execution of the application program.

13. The method of claim 1, further comprising parsing the application program to generate a signature associated with the application program, and wherein assigning the application identity to the application program comprises identifying a pre-assigned application identity for the application program based on the generated signature.

14. The method of claim 1, further comprising:

receiving a request from the application program for an operating system resource;

responsive to the received request, determining whether a particular version of the operating system resource exists for the application program based on the assigned application identity;

providing the application program with the particular version if the particular version exists for the application program responsive to said determining; and

otherwise generating the particular version and providing the generated, particular version to the application program responsive to said determining.

15. The method of claim 1, wherein one or more computer-readable media have computer-executable instructions for performing the method recited in claim 1.

19. The method of claim 16, wherein one or more computer-readable media have computer-executable instructions for performing the method of claim 15.

16. A method of enabling an operating system to protect a resource associated therewith from modification by an application program, the method comprising:

assigning an identity to an application program;

receiving a request from the application program for an operating system resource;

responsive to the received request, determining whether a particular version of the operating system resource exists for the application program based on the identity;

providing the application program with the particular version if the particular version exists for the application program responsive to said determining; and

otherwise generating the particular version and providing the generated, particular version to the application program responsive to said determining.

17. The method of claim 16, wherein assigning the identity to the application program comprises one or more of the following:

obtaining the identity from a manifest associated with the application program, obtaining the identity from an installation program associated with the application program, and calculating the identity based on an assessment of a plurality of files associated with the application program.

18. The method of claim 16, wherein receiving the request from the application program comprises receiving the request for one or more of the following;

a file, a folder, an object, and an operating system property value.

20. One or more computer-readable media having computer-executable components for managing a plurality of applications on a computing system, said components comprising:

a creator component to assign an application identity to an application program, said assigned application identity differentiating the application program from other application programs;

a revision component to assign a resource identity to a resource associated with the application program; and

an assignment component to relate the assigned application identity and the assigned resource identity.

21. The computer-readable media of claim 20, further comprising a virtualization component to:

receive a request from the application program for an operating system resource;

responsive to the received request, determine whether a particular version of the operating system resource exists for the application program based on the assigned application identity;

provide the application program with the particular version if the particular version exists for the application program responsive to said determining; and

otherwise generate the particular version and provide the generated, particular version to the application program responsive to said determining.

22. The computer-readable media of claim 20, further comprising a group component to determine an isolation identity for the application program, said isolation identity being associated with one or more application programs having application identities associated therewith.

23. The computer-readable media of claim 20, further comprising an impersonation component to:

receive a request to transition the application program from the assigned application identity to another application identity associated with another application program; and

responsive to the received request, assign the other application identity to the application program.

24. A system for managing a plurality of application programs via an application identity associated with each of the plurality of application programs, said system comprising:

an operating system having an operating system resource associated therewith;

a memory area to store an application program and an application identity associated therewith; and

a processor programmed to communicate with the operating system and the memory area to;

receive a request from the application program for the operating system resource;

provide, responsive to the received request, a particular version of the operating system resource to the application program based on the application identity.

25. The system of claim 24, wherein the memory area is further adapted to store an isolation identity associated with the application program, said isolation identity being associated with at least one other application program having another application identity associated therewith.

26. The system of claim 24, wherein the application program has a plurality of resources associated therewith, and wherein the processor is further adapted to communicate with the operating system and the memory area to acquire the application identity of the application program to perform an action over the plurality of resources associated with the application program.

27. The system of claim 26, wherein the processor executes the application program.

28. The system of claim 24, further comprising means for assigning the identity to the application program.

29. The system of claim 24, further comprising means for assigning a resource identity to a resource associated with the application program.

30. A computer-readable medium having stored thereon a data structure representing an identity context associated with a software product, said data structure comprising:

an application identity field storing a value identifying the software product; and

an isolation identity field storing a value associated with a group of software products to which the software product belongs.

31. The computer-readable medium of claim 30, wherein the software product and the group of software products share a common resource.

32. The computer-readable medium of claim 30, further comprising a resource identity field to be associated with a resource created by the software product, said resource identity field storing a value identifying the software product.

33. The computer-readable medium of claim 32, wherein the value stored in the application identity field and the value stored in the resource identity field are the same.

34. The computer-readable medium of claim 32, wherein the resource comprises one or more of the following;

a process, a thread, a file, a system setting, operating system namespace, a name in the operating system namespace, and an operating system object.

35. The computer-readable medium of claim 32, wherein the resource identity field comprises a creator context and a revised context, said creator context storing the value identifying the software product which created the resource and said revised context storing another value representing an identity associated with the resource.

36. The computer-readable medium of claim 30, further comprising a data attribute storing a value identifying a method used to generate the value stored in the application identity field and the value stored in the isolation identity field.

37. The computer-readable medium of claim 36, wherein the data attribute comprises an installer element, said installer element indicating that a specific installation program populated the value stored in the application identity field and the value stored in the isolation identity field.