SELECTIVELY EXPOSING BASE CLASS LIBRARIES BASED ON APPLICATION EXECUTION CONTEXT

• US 20130219523A1
• Filed: 04/02/2013
• Published: 08/22/2013
• Est. Priority Date: 06/14/2010
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Singh, Yashwardhan, Nadimpalli, Srinivas, Kidambi, Srivatsan
• Granted Patent: US 8,813,258 B2
• Time in Patent Office: Days
• US Class Current: 726/30
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 9/44536 Selecting among different versions
• CPC Class Codes: G06F 9/449 Object-oriented method invocation or resolution

Abstract

Allowing access to APIs based on application context. A method includes determining an application context for an application. A layer is determined for a base class library. Layers of the base class library are defined by one or more developer defined attributes associated with an API, where the API is included in the base class library. The base class library is divided into layers based on the developer defined attributes. The one or more attributes define which application contexts can access the API. If the layer matches the application context then access by the application to the API is allowed.

Claims

1. In a computing environment, a system for allowing access to APIs based on application context, the system comprising:

one or more processors;

one or more computer readable media coupled to the one or more processors, wherein the one or more computer readable media comprise computer executable instructions that when executed by at least one processor cause the system to perform the following;

determining a first application context for a first application;

determining a first layer for a single base class library included in a single runtime deployed on a device, the single runtime exposing different subsets of available API surfaces of the single runtime to different applications such that some applications have richer API support when using the single runtime than other applications using the same single runtime, and wherein layers of the base class library are defined by one or more developer defined attributes associated with APIs, the APIs being included in the base class library, wherein the base class library is divided into layers based on the developer defined attributes, the developer defined attributes defining applications to which a given API of the single base class layer is exposed, such that the one or more attributes define which application contexts can access the given API;

determining that the first layer matches the first application context and allowing access by the first application to one or more API in the first layer;

determining a second application context for a second application that is different than the first application;

determining a second layer for the single base class library included in the single runtime deployed on the device; and

determining that the second layer matches the application context and allowing access by the second application to one or more API in the second layer of the single base class library while restricting access to one or more APIs included in the first layer of the single base class library that are not also included in the second layer of the single base class library such that the first application has richer API support than the second application.

2. The system of claim 1, wherein the base class library is a managed code base class library that requires and will only execute under the management of a Common Language Runtime virtual machine.

3. The system of claim 1, further comprising computer executable instructions stored on the one or more computer readable media that when executed by at least one processor cause the system to enforce security restrictions by not allowing one or more applications access the API based the one or more application contexts of the one or more applications.

4. The system of claim 1, further comprising computer executable instructions stored on the one or more computer readable media that when executed by at least one processor causes the system to install the base class library on a mobile device.

5. The system of claim 1, wherein performing the acts creates a plurality of logical views of the same base class library such that the base class library is used to support a plurality of application models.

6. The system of claim 1, wherein portions of the base class library are annotated with the developer defined attributes.

7. The system of claim 6, wherein at least one layer is left totally un-annotated with a developer defined attribute, such that the lack of annotations defines the at least one layer.

8. The system of claim 6, wherein annotations are performed at type and method levels.

9. The system of claim 6, wherein annotations at a containing type level apply to all the contained members.

10. In a computing environment, a system for defining allowed access to APIs based on application context, the system comprising:

one or more processors;

one or more computer readable media coupled to the one or more processors, wherein the one or more computer readable media comprise computer executable instructions that when executed by at least one processor cause the system to perform the following;

determining a first application context for a first application;

determining one or more first APIs in a single base class library of a single runtime that should be available to the first application;

adding the one or more first APIs to a first layer for the base class library, the first layer for the base class library being a layer accessible to the first application, wherein adding the one or more first APIs to the first layer comprises defining one or more developer defined attributes associated with the first APIs, wherein the base class library is divided into layers based on the developer defined attributes, the developer defined attributes defining applications to which the one or more APIs of the single base class layer are exposed such that the one or more attributes define which application contexts can access the one or more APIs

determining a second application context for a second application;

determining one or more second APIs in the single base class library of the single runtime that should be available to the second application;

adding the one or more second APIs to a second layer for the base class library, wherein adding the one or more second APIs to the second layer comprises defining one or more developer defined attributes associated with the second APIs such that the second application can access the one or more API in the second layer of the single base class library but cannot access one or more APIs included in the first layer of the single base class library that are not also included in the second layer of the single base class library such that the first application has richer API support than the second application.

11. The system of claim 10, wherein the base class library is a managed code base class library that requires and will only execute under the management of a Common Language Runtime virtual machine.

12. The system of claim 10, further comprising computer executable instructions stored on the one or more computer readable media that when executed by at least one processor cause the system to define security restrictions based on the developer defined attributes by not allowing one or more applications access the API based the one or more application contexts of the one or more applications.

13. The system of claim 10, further comprising computer executable instructions stored on the one or more computer readable media that when executed by at least one processor causes the system to install the base class library on a mobile device.

14. The system of claim 10, wherein performing the acts creates a plurality of logical views of the same base class library such that the base class library is used to support a plurality of application models.

15. The system of claim 14, wherein portions of the base class library are annotated with the developer defined attributes.

16. The system of claim 14, wherein at least one layer is left totally un-annotated with a developer defined attribute, such that the lack of annotations defines the at least one layer.

17. The system of claim 14, wherein annotations are performed at type and method levels.

18. The system of claim 14, wherein annotations at a containing type level apply to all the contained members.

19. In a computing environment, a computer readable storage medium coupled to the one or more processors, wherein the one or more computer readable media comprise computer executable instructions that when executed by at least one processor cause the system to perform the following:

determining a first application context for a first application;

determining a first layer for a single base class library included in a single runtime deployed on a device, the single runtime exposing different subsets of available API surfaces of the single runtime to different applications such that some applications have richer API support when using the single runtime than other applications using the same single runtime, and wherein layers of the base class library are defined by one or more developer defined attributes associated with APIs, the APIs being included in the base class library, wherein the base class library is divided into layers based on the developer defined attributes, the developer defined attributes defining applications to which a given API of the single base class layer is exposed, such that the one or more attributes define which application contexts can access the given API;

determining that the first layer matches the first application context and allowing access by the first application to one or more API in the first layer;

determining a second application context for a second application that is different than the first application;

determining a second layer for the single base class library included in the single runtime deployed on the device; and

determining that the second layer matches the application context and allowing access by the second application to one or more API in the second layer of the single base class library while restricting access to one or more APIs included in the first layer of the single base class library that are not also included in the second layer of the single base class library such that the first application has richer API support than the second application.

20. The computer readable storage medium of claim 19, wherein the base class library is a managed code base class library that requires and will only execute under the management of a Common Language Runtime virtual machine.