CROSS-DOMAIN DATA SHARING WITH PERMISSION CONTROL

• US 20160019104A1
• Filed: 07/17/2014
• Published: 01/21/2016
• Est. Priority Date: 07/17/2014
• Status: Active Grant

• Current Assignee: Blackberry Limited
• Original Assignee: 2236008 Ontario Inc. (Blackberry Limited), Blackberry Limited
• Inventors: Major, Daniel Jonas, Wurster, Glenn Daniel, Tapuska, David Francis, Peters, Ian David
• Granted Patent: US 10,042,680 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 9/543 User-generated data transfer, e.g. clipboards, dynamic data exchange [DDE], object linking and embedding [OLE]

Abstract

An electronic device may maintain separate OS domains associated with security permissions. The OS domain may implement separate corresponding clipboard services. A clipboard agent or clipboard mediator service may receive a clipboard data request from a first application. The clipboard agent may determine which OS domain has most recently processed a store command associated with storing data in a corresponding clipboard service of the OS domain. The clipboard agent associated with the OS domain that most recently stored content may determine whether to send the data from the corresponding clipboard service based at least in part on permissions associated with the OS domain. Security of the clipboard access may be enforced on a per domain basis. Access to clipboard content may be mediated at the time of the request without a need to share data prior to the request.

Claims

1. A method performed on an electronic device, the method comprising:

executing a first clipboard agent in a first operating system (OS) domain, the first clipboard agent associated with a first clipboard service of the first OS domain;

coordinating between the first clipboard agent and a second clipboard agent of a second OS domain regarding clipboard commands in the first OS domain and the second OS domain; and

mediating, at the first clipboard agent, cross-domain access to the first clipboard service based at least in part on permissions associated with the first OS domain.

2. The method of claim 1, further comprising:

receiving, at the first clipboard agent, a store command from a first application, the store command directing the first clipboard service to store content from the first application;

forwarding the store command to the first clipboard service; and

sending, from the first clipboard agent to the second clipboard agent of the second OS domain, a notification regarding the store command.

3. The method of claim 1, further comprising:

receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain;

determining whether the first clipboard service of the first OS domain or a second clipboard service of the second OS domain has most recently stored content;

retrieving the content from the first clipboard service if the first clipboard service has most recently stored the content; and

sending a request to the second clipboard agent of the second OS domain if the second clipboard service has most recently stored the content.

4. The method of claim 1, further comprising:

receiving a notification from the second clipboard agent regarding a store command in the second OS domain; and

storing an indication of the store command responsive to receiving the notification.

5. The method of claim 4, wherein the indication comprises a dummy reference clip stored in the first clipboard service.

6. The method of claim 1, further comprising:

receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and

determining that the first OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and

sending the clipboard request to the first clipboard service.

7. The method of claim 1, further comprising:

receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and

determining that the second OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and

sending a cross-domain request to the second clipboard agent to request content from a second clipboard service in the second OS domain.

8. The method of claim 7, further comprising, prior to sending the cross-domain request to the second clipboard agent:

determining whether to send the cross-domain request to the second clipboard agent based at least in part on whether permissions of the first OS domain allow incoming data from the second OS domain.

9. The method of claim 7, further comprising:

receiving content from the second clipboard agent responsive to the cross-domain request; and

sending the content to the first application.

10. The method of claim 7, further comprising:

receiving an indication from the second clipboard agent that the cross-domain request was rejected; and

presenting a notice of the rejection via a user interface if the first application is active in the user interface.

11. The method of claim 10, wherein the indication that the cross-domain request was rejected comprises receiving null content in response to the cross-domain request.

12. The method of claim 1, further comprising:

receiving a cross-domain request from the second clipboard agent, the cross-domain request associated with a paste command from a second application in the second OS domain; and

determining whether the second application in the second domain has permission to access content from the first clipboard service.

13. The method of claim 12, further comprising:

providing the content to the second clipboard agent responsive to determining that the second application has permission to paste the content; and

providing a rejection to the second clipboard agent responsive to determining that the second application does not permission to paste the content.

14. An electronic device, comprising:

one or more processors; and

one or more memory units configured to store instructions, which when executed by at least one of the one or more processors, cause the device to,

execute a first clipboard agent in a first operating system (OS) domain, the first clipboard agent associated with a first clipboard service of the first OS domain,

coordinate between the first clipboard agent and a second clipboard agent of a second OS domain regarding clipboard commands in the first OS domain and the second OS domain, and

mediate, at the first clipboard agent, cross-domain access to the first clipboard service based at least in part on permissions associated with the first OS domain.

15. The electronic device of claim 14, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive, at the first clipboard agent, a store command from a first application, the store command directing the first clipboard service to store content from the first application;

forward the store command to the first clipboard service; and

send, from the first clipboard agent to the second clipboard agent of the second OS domain, a notification regarding the store command.

16. The electronic device of claim 14, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive, at the first clipboard agent, a clipboard request from a first application in the first OS domain;

determine whether the first clipboard service of the first OS domain or a second clipboard service of the second OS domain has most recently stored content;

retrieve the content from the first clipboard service if the first clipboard service has most recently stored the content; and

send a request to the second clipboard agent of the second OS domain if the second clipboard service has most recently stored the content.

17. The electronic device of claim 14, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive a notification from the second clipboard agent regarding a store command in the second OS domain; and

store an indication of the store command responsive to receiving the notification.

18. The electronic device of claim 14, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and

determine that the first OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and

send the clipboard request to the first clipboard service.

19. The electronic device of claim 14, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and

determine that the second OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and

send a cross-domain request to the second clipboard agent to request content from a second clipboard service in the second OS domain.

20. The electronic device of claim 19, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to, prior to sending the cross-domain request to the second clipboard agent:

determine whether to send the cross-domain request to the second clipboard agent based at least in part on whether permissions of the first OS domain allow incoming data from the second OS domain.

21. The electronic device of claim 19, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive content from the second clipboard agent responsive to the cross-domain request; and

send the content to the first application.

22. The electronic device of claim 19, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive an indication from the second clipboard agent that the cross-domain request was rejected; and

present a notice of the rejection via a user interface if the first application is active in the user interface.

23. The electronic device of claim 14, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

receive a cross-domain request from the second clipboard agent, the cross-domain request associated with a paste command from a second application in the second OS domain; and

determine whether the second application in the second domain has permission to access content from the first clipboard service.

24. The electronic device of claim 23, wherein the one or more memory units are further configured to store instructions, which when executed by at least one of the one or more processors, cause the device to:

provide the content to the second clipboard agent responsive to determining that the second application has permission to paste the content; and

provide a rejection to the second clipboard agent responsive to determining that the second application does not permission to paste the content.

25. A non-transitory machine readable medium having stored thereon executable instructions for causing one or more processors to perform operations comprising:

executing a first clipboard agent in a first operating system (OS) domain, the first clipboard agent associated with a first clipboard service of the first OS domain;

coordinating between the first clipboard agent and a second clipboard agent of a second OS domain regarding clipboard commands in the first OS domain and the second OS domain; and

mediating, at the first clipboard agent, cross-domain access to the first clipboard service based at least in part on permissions associated with the first OS domain.

26. The non-transitory machine readable medium of claim 25, said operations further comprising:

receiving, at the first clipboard agent, a store command from a first application, the store command directing the first clipboard service to store content from the first application;

forwarding the store command to the first clipboard service; and

sending, from the first clipboard agent to the second clipboard agent of the second OS domain, a notification regarding the store command.

27. The non-transitory machine readable medium of claim 25, said operations further comprising:

receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and

determining that the first OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and

sending the clipboard request to the first clipboard service.

28. The non-transitory machine readable medium of claim 25, said operations further comprising:

receiving, at the first clipboard agent, a clipboard request from a first application in the first OS domain requesting to retrieve content from the first clipboard service; and

determining that the second OS domain has most recently processed a store command associated with storing content in a corresponding clipboard service of the first and second OS domains; and

sending a cross-domain request to the second clipboard agent to request content from a second clipboard service in the second OS domain.

29. The non-transitory machine readable medium of claim 25, said operations further comprising:

receiving a cross-domain request from the second clipboard agent, the cross-domain request associated with a paste command from a second application in the second OS domain; and

determining whether the second application in the second domain has permission to access content from the first clipboard service.