System Function Invoking Method and Apparatus, and Terminal

• US 20160063266A1
• Filed: 11/10/2015
• Published: 03/03/2016
• Est. Priority Date: 05/27/2013
• Status: Active Grant

• Current Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Device Company Limited (Huawei Investment & Holding Co., Ltd.)
• Inventors: Huang, Xi, Wu, Huangwei
• Granted Patent: US 10,452,867 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6281 at program execution time, where the protection is within the operating system
• CPC Class Codes: G06F 21/629 to features or functions of an application
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A system function invoking method and apparatus, and a terminal are disclosed and are related to the field of computer technologies. The method includes acquiring an installation package of a first application program; granting a first permission of a system to the first application program according to the installation package, where the first permission is used to, when the first application program is in a running state, forbid a second application program from invoking at least one system function; and running the first application program, and forbidding the second application program from invoking the at least one system function. The apparatus includes a first acquiring module, an authorization module, and an invoking module.

Claims

1. A system function invoking method, comprising:

acquiring an installation package of a first application program;

granting a first permission of a system to the first application program according to the installation package, wherein the first permission is used to forbid a second application program from invoking at least one system function when the first application program is in a running state;

running the first application program; and

forbidding the second application program from invoking the at least one system function.

2. The system function invoking method according to claim 1, wherein, before the granting of the first permission of the system to the first application program according to the installation package, the method further comprises acquiring a configuration file of the first application program from the installation package, and wherein the granting of the first permission of the system to the first application program according to the installation package comprises:

reading configuration information of the first permission from the configuration file; and

granting the first permission of the system to the first application program according to the configuration information.

3. The system function invoking method according to claim 1, wherein the second application program is any application program of all application programs except the first application program in the system.

4. The system function invoking method according to claim 1, wherein the second application program is any application program of some application programs other than the first application program in the system.

5. The system function invoking method according to claim 1, wherein forbidding the second application program from invoking the at least one system function comprises:

suspending or ending the invocation of the system function by the second application program, for each system function of the at least one system function, when the second application program invoked the system function and the system function is currently in an invoked state of being invoked by the second application program; and

forbidding subsequent invocation of the system function by the second application program, for each system function of the at least one system function, when the second application program did not invoke the system function or the second application program invoked the system function but the system function is currently not in the invoked state of being invoked by the second application program.

6. A system function invoking method, comprising:

configuring a first mode in a system;

granting a second permission of the system to a first application program, when the first application program is installed, wherein the second permission is used to enable the system to be in the first mode when the first application program is in a running state, and wherein the first mode is used to forbid a second application program from invoking at least one system function when the system is in the first mode;

running the first application program; and

forbidding the second application program from invoking the at least one system function.

7. The system function invoking method according to claim 6, wherein the second application program is any application program of all application programs except the first application program in the system.

8. The system function invoking method according to claim 6, wherein the second application program is any application program of some application programs other than the first application program in the system.

9. The system function invoking method according to claim 6, wherein after the forbidding of the second application program from invoking the at least one system function, the method further comprises switching the first mode to a second mode when the first application program exits running, wherein the second mode is used to allow the second application program to invoke the at least one system function when the system is in the second mode.

10. The system function invoking method according to claim 6, wherein forbidding the second application program from invoking the at least one system function comprises:

suspending or ending the invocation of the system function by the second application program, for each system function of the at least one system function, when the second application program invoked the system function and the system function is currently in an invoked state of being invoked by the second application program; and

forbidding subsequent invocation of the system function by the second application program, for each system function of the at least one system function, when the second application program did not invoke the system function or the second application program invoked the system function but the system function is currently not in the invoked state of being invoked by the second application program.

11. A system function invoking apparatus, comprising:

a first acquiring module adapted to acquire an installation package of a first application program;

an authorization module adapted to grant a first permission of a system to the first application program according to the installation package acquired by the first acquiring module, wherein the first permission is used to forbid a second application program from invoking at least one system function when the first application program is in a running state; and

an invoking module adapted to run the first application program, and forbid, according to the first permission granted by the authorization module, the second application program from invoking the at least one system function.

12. The system function invoking apparatus according to claim 11, further comprising a second acquiring module adapted to, before the authorization module grants the first permission of the system to the first application program according to the installation package, acquire a configuration file of the first application program from the installation package, wherein the authorization module comprises:

a reading unit adapted to read configuration information of the first permission from the configuration file; and

an authorization unit adapted to grant the first permission of the system to the first application program according to the configuration information read by the reading unit.

13. The system function invoking apparatus according to claim 11, wherein the second application program is any application program of all application programs except the first application program in the system.

14. The system function invoking apparatus according to claim 11, wherein the second application program is any application program of some application programs other than the first application program in the system.

15. The system function invoking apparatus according to claim 11, wherein the invoking module comprises:

a first invoking unit adapted to, for each system function of the at least one system function, when the second application program invoked the system function and the system function is currently in an invoked state of being invoked by the second application program, suspend or end the invocation of the system function by the second application program; and

a second invoking unit adapted to, for each system function of the at least one system function, when the second application program did not invoke the system function or the second application program invoked the system function but the system function is currently not in the invoked state of being invoked by the second application program, forbid subsequent invocation of the system function by the second application program.

16. A system function invoking apparatus, comprising:

a configuring module adapted to configure a first mode in a system;

an authorization module adapted to grant a second permission of the system to a first application program when the first application program is installed, wherein the second permission is used to enable the system to be in the first mode configured by the configuring module when the first application program is in a running state, and wherein the first mode is used to forbid a second application program from invoking at least one system function when the system is in the first mode; and

an invoking module adapted to run the first application program, and forbid, according to the second permission granted by the authorization module, the second application program from invoking the at least one system function.

17. The system function invoking apparatus according to claim 16, wherein the second application program is any application program of all application programs except the first application program in the system.

18. The system function invoking apparatus according to claim 16, wherein the second application program is any application program of some application programs other than the first application program in the system.

19. The system function invoking apparatus according to claim 16,further comprising a switching module adapted to, after the invoking module forbids the second application program from invoking the at least one system function, when the first application program exits running, switch the first mode to a second mode, wherein the second mode is used to allow the second application program to invoke the at least one system function when the system is in the second mode.

20. The system function invoking apparatus according to claim 16, wherein the invoking module comprises:

a first invoking unit adapted to, for each system function of the at least one system function, when the second application program invoked the system function and the system function is currently in an invoked state of being invoked by the second application program, suspend or end the invocation of the system function by the second application program; and

a second invoking unit adapted to, for each system function of the at least one system function, when the second application program did not invoke the system function or the second application program invoked the system function but the system function is currently not in the invoked state of being invoked by the second application program, forbid subsequent invocation of the system function by the second application program.