Method and apparatus for transmitting contents with limited system permissions

• US 8,370,957 B2
• Filed: 12/04/2007
• Issued: 02/05/2013
• Est. Priority Date: 12/05/2006
• Status: Expired due to Fees

• Current Assignee: Electronics and Telecommunications Research Institute, Samsung Electronics Co. Ltd.
• Original Assignee: Electronics and Telecommunications Research Institute, Samsung Electronics Co. Ltd.
• Inventors: Kim, Kang-Hee, Lim, Yong-Gwan, Koo, Yong-Bon, Jung, Yung-Joon, Kim, Jae-Myoung, Lim, Dong-Hyouk
• Primary Examiner(s): Barron, Jr., Gilberto
• Assistant Examiner(s): ALMEIDA, DEVIN E
• Application Number:
  US11/999,218
• Publication Number:
  US 20080134304A1
• Time in Patent Office: 1,890 Days
• Field of Search: 726/4
• US Class Current: 726/30
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs

Abstract

Provided is a method for transmitting contents with limited system permissions. In the method, a content request is received from a client terminal. A download descriptor is transmitted to the client terminal in response to the content request, the download descriptor including information about the authentication and permission of the client terminal system that can be managed in the contents. A content transmission request is received from the client terminal that has received the download descriptor. Contents are transmitted to the client terminal in response to the content transmission request.

Claims

1. A method for executing contents with a system permission in a client terminal, the method comprising:

transmitting a content download request to a content server;

receiving a download descriptor from the content server, the download descriptor including information about the authentication and permission of a client terminal system that can be managed in the requested contents;

transmitting a content transmission request to the content server in accordance with the download descriptor;

receiving contents corresponding to the content transmission request from the content server;

authenticating the received contents using the download descriptor;

installing the received contents; and

executing the installed contents in accordance with the system permission included in the download descriptor,

wherein the download descriptor comprises permission information associated with reading/writing a file in the client terminal, an extent of execution of an object and a task in a process, and an availability of a socket.

2. The method of claim 1, wherein the contents are programs that are installed and executed in the client terminal.

3. The method of claim 1, wherein transmitting the content download request comprises requesting the download contents using a Uniform Resource Identifier (URI) of the contents included in the download descriptor.

4. The method of claim 1, wherein installing the received contents comprises:

confirming the authentication for the received contents using authentication information included in the download descriptor; and

installing the authenticated contents upon completion of the content authentication.

5. The method of claim 1, further comprising transmitting report information to a report server.

6. The method of claim 5, wherein the report information indicates a success or failure associated with the receipt of the contents.

7. The method of claim 1, wherein the download descriptor comprises electronic signatures of the contents, the electronic signatures created using Secure Hash Algorithm 1.

8. The method of claim 2, wherein transmitting the content download request comprises requesting the download contents using a Uniform Resource Identifier (URI) of the contents included in the download descriptor.

9. A client terminal for executing contents with a system permission, the terminal comprising:

a transmitting unit configured to transmit a content download request and a content transmission request to a content server;

a receiving unit configured to receive a download descriptor and contents corresponding to the content transmission request from the content server, the download descriptor including information about the authentication and permission of a client terminal system that can be managed in the requested contents;

a processing circuitry configured to authenticate the received contents using the download descriptor, install the received contents, and execute the installed contents in accordance with the system permission included in the download descriptor,

wherein the download descriptor comprises permission information associated with reading/writing a file in the client terminal, an extent of execution of an object and a task in a process, and an availability of a socket.

10. The client terminal of claim 9, wherein the contents are programs that are installed and executed in the client terminal.

11. The client terminal of claim 9, wherein the transmitting unit is configured to transmit the content transmission request using a Uniform Resource Identifier of the contents included in the download descriptor.

12. The client terminal of claim 9, further comprising reporting circuitry configured to transmit report information to a report server.

13. The client terminal of claim 12, wherein the report information indicates a success or failure associated with the receipt of the contents.

20. The client terminal of claim 10, wherein the transmitting unit is configured to transmit the content transmission request using a Uniform Resource Identifier of the contents included in the download descriptor.

14. A system comprising:

a content server; and

a client terminal configured to;

transmit a content download request and a content transmission request to the content server;

receive a download descriptor and contents corresponding to the content transmission request from the content server, the download descriptor including information about the authentication and permission of a client terminal system that can be managed in the requested contents;

authenticate the received contents using the download descriptor;

install the received contents; and

execute the installed contents in accordance with the system permission included in the download descriptor,

wherein the download descriptor comprises permission information associated with reading/writing a file in the client terminal, an extent of execution of an object and a task in a process, and an availability of a socket.

15. The system of claim 14, wherein the contents are programs that are installed and executed in the client terminal.

16. The system of claim 14, wherein the client terminal requests the download contents using a Uniform Resource Identifier of the contents included in the download descriptor.

17. The system of claim 14, the content server comprising a report server, wherein the client terminal is further configured to transmit report information to the report server.

18. The system of claim 17, wherein the report information indicates a success or failure associated with the receipt of the contents.

19. The system of claim 14, the content server further comprising a download server.

21. The system of claim 15, wherein the client terminal requests the download contents using a Uniform Resource Identifier of the contents included in the download descriptor.