METHOD, DEVICE AND COMPUTER STORAGE MEDIUM FOR CONTROLLING THE RUNNING OF AN APPLICATION

• US 20150220730A1
• Filed: 04/16/2015
• Published: 08/06/2015
• Est. Priority Date: 06/13/2013
• Status: Active Grant

• Current Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Original Assignee: Tencent Technology Company Limited (Tencent Holdings Limited)
• Inventors: Chen, Shuhua
• Granted Patent: US 10,198,573 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/566 Dynamic detection, i.e. detection performed at run-time, e.g. emulation, suspicious activities
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57

Abstract

A method for controlling the running of an application includes loading an application to be monitored; running the application loaded herein in a constructed running environment; and, according to a preset running configuration, executing a corresponding operation in the running environment, and processing a system call triggered by the application according to the operation herein. Furthermore, a device for controlling the running of an application includes a loading module configured to load an application to be monitored; a running module configured to run the application loaded herein in a constructed running environment; and a controlling module configured to execute a corresponding operation in the running environment according to a preset running configuration, and process a system call triggered by the application according to the operation herein. The present disclosure can thus ensure that data and applications are controlled and improve security.

Claims

1. A method for controlling a running of an application in a computing device, the method comprising:

loading an application to be monitored;

running said application loaded herein in a constructed running environment; and

according to a preset running configuration, executing a corresponding operation in said running environment, and processing a system call triggered by said application according to said operation herein.

2. The method for controlling the running of an application according to claim 1, wherein said step of loading an application to be monitored comprises:

reading an application executable file of said application to be monitored; and

re-directing an application programming interface function in said application executable file to said constructed running environment.

3. The method for controlling the running of an application according to claim 1, wherein said step of running said application loaded herein in a constructed running environment comprises:

according to a configuration file, analyzing said application so as to acquire assemblies of said application executable file; and

triggering and running said application so as to acquire an assembly in a running state, and, through a proxy mode, running said assembly in said constructed running environment.

4. The method for controlling the running of an application according to claim 3, wherein said step of, according to a preset running configuration, executing a corresponding operation in said running environment, and processing a system call triggered by said application according to said operation herein comprises:

judging whether a running assembly triggers a system call, and if it does, then re-directing said system call, triggered by said assembly, to said running environment, and executing a corresponding operation according to said preset running configuration; and

acquiring an execution result of said operation, and processing said system call according to said execution result.

5. The method for controlling the running of an application according to claim 4, wherein said step of acquiring an execution result of said operation, and processing said system call according to said execution result comprises:

acquiring the execution result generated through executing said operation; and

according to said execution result, disabling or executing said system call.

6. The method for controlling the running of an application according to claim 1, wherein said constructed running environment is a security sandbox.

7. The method for controlling the running of an application according to claim 1, wherein said constructed running environment is an intermediate layer between said application and an operating system, and wherein said operating system is at least one of a set of operating systems comprising Android, iOS, Linux, Windows, and Symbian.

8. A device for controlling a running of an application, said device comprising:

a loading module configured to load an application to be monitored;

a running module configured to run said application loaded herein in a constructed running environment; and

a controlling module configured to execute a corresponding operation in said running environment according to a preset running configuration, and process a system call triggered by said application according to said operation herein.

9. The device for controlling the running of an application according to claim 8, wherein said loading module further comprises:

a reading unit configured to read an application executable file of said application to be monitored; and

a re-direction setting unit configured to re-direct an application programming interface function in said application executable file to said constructed running environment.

10. The device for controlling the running of an application according to claim 8, wherein said running module further comprises:

an analyzing unit configured to analyze said application according to a configuration file so as to acquire assemblies of said application executable file; and

a proxy unit, configured to trigger and run said application so as to acquire an assembly in a running state, and, through a proxy mode, run said assembly in said constructed running environment.

11. The device for controlling the running of an application according to claim 10, wherein said controlling module further comprises:

a judging unit, a re-directing unit, and a processing unit, wherein;

the judging unit is configured to judge whether a running assembly triggers a system call, and if it does, then notify the re-directing unit;

the re-directing unit is configured to re-direct said system call, triggered by said assembly, into said running environment, and execute a corresponding operation according to said preset running configuration; and

the processing unit is configured to acquire an execution result of said operation, and process said system call according to said execution result.

12. The device for controlling the running of an application according to claim 11, wherein said processing unit further comprises:

a result acquiring unit configured to acquire the execution result generated through executing said operation;

a call processing unit configured to disable or execute said system call according to said execution result.

13. The device for controlling the running of an application according to claim 8, wherein said device for controlling the running of an application is a mobile terminal.

14. The device for controlling the running of an application according to claim 13, wherein said mobile terminal is a mobile phone, a personal digital assistant, or an on-board computer.

15. A non-transitory computer readable storage medium, including computer executable instructions, wherein said computer executable instructions are used for executing a method for controlling a running of an application, wherein the method comprises:

loading an application to be monitored;

running said application loaded herein in a constructed running environment; and

according to a preset running configuration, executing a corresponding operation in said running environment, and processing a system call triggered by said application according to said operation herein.

16. The non-transitory computer readable storage medium according to claim 15, wherein said step of loading an application to be monitored comprises:

reading an application executable file of said application to be monitored;

re-directing an application programming interface function in said application executable file to said constructed running environment.

17. The non-transitory computer readable storage medium according to claim 15, wherein said step of running said application loaded herein in a constructed running environment comprises:

according to a configuration file, analyzing said application so as to acquire assemblies of said application executable file; and

triggering and running said application so as to acquire an assembly in a running state, and, through a proxy mode, running said assembly in said constructed running environment.

18. The non-transitory computer readable storage medium according to claim 17, wherein said step of, according to a preset running configuration, executing a corresponding operation in said running environment, and processing a system call triggered by said application according to said operation herein comprises:

judging whether a running assembly triggers a system call, and if it does, then re-directing said system call, triggered by said assembly, to said running environment, and executing a corresponding operation according to said preset running configuration; and

acquiring an execution result of said operation, and processing said system call according to said execution result.

19. The non-transitory computer readable storage medium according to claim 18, wherein said step of acquiring an execution result of said operation, and processing said system call according to said execution result comprises:

acquiring the execution result generated through executing said operation; and

according to said execution result, disabling or executing said system call.

20. The non-transitory computer readable storage medium according to claim 15, wherein said constructed running environment is a security sandbox.