Application program
An operating system, when having incorporated data, with a certificate attached, for limiting a function of copying a screen, limits the function of the operating system and when receiving a request for a result of an inspection to determine whether the incorporated data is valid, sends out the result of the inspection in response to the request. An application program makes a request to the operating system for the result of the inspection of the data incorporated in the operating system at startup or return from a background processing. When an inspection result sent from the operating system indicates that the data is invalid, the application program forbids a display control means to display a given screen and instructs the operating system to incorporate a valid data therein. When the inspection result indicates that the data is valid, the application program makes the display means display the given screen.
1. A non-transitory computer-readable storage medium storing:
an operating system having a function of copying a screen shown on a display while an application program is executed on the operating system;
a configuration profile of the operating system to restrict the function of copying, the configuration profile including a public key relating to the application program; and
the application program that is executed on the operating system, the application program including a certificate including a signature, the certificate corresponding to the application program and being independent from a computer, the application program, while being executed on the operating system, causing the computer controlled by the operating system to:
present the certificate included in the application program, to the operating system;
request the operating system to verify the signature included in the certificate with the public key included in the configuration profile incorporated in the operating system in response to starting-up of the application program or to return from a background processing to the application program;
instruct the display to restrict showing the screen of the application program in response to a result showing that a verification of the signature is failure; and
instruct the display to show the screen of the application program in response to a result showing that the verification of the signature is successful.
2. The non-transitory computer-readable storage medium according to claim 1 , wherein
in response to the result showing that the verification of the signature is failure, the application program causes the computer to instruct the operating system to start a client program, the client program being a program for incorporating a new configuration profile into the operating system,
upon receiving an instruction to start the client program, the application program causes the computer to instruct the operating system to start the client program,
the application program causes the computer to execute the client program and to request the application program to supply the new configuration profile,
upon receiving a request from the client program, the application program is configured to supply the new configuration profile to the client program, and
upon receiving the new configuration profile, the computer executing the client program is configured to incorporate the new configuration profile into the operating system.
3. The non-transitory computer-readable storage medium according to claim 1 , wherein
the application program causes the computer to forbid display of the given screen in response to the operating system detecting that an external display device is connected to the computer.
4. A computer comprising:
a processor;
a memory; and
a display, wherein
the memory is configured to store:
an operating system for controlling the computer, the operating system having a function of copying a screen shown on the display while an application program is executed on the operating system;
a configuration profile of the operating system to restrict the function of copying, the configuration profile including a public key relating to the application program; and
the application program that is executed on the operating system, the application program including a certificate including a signature, the certificate corresponding to the application program and being independent from the computer,
the processor executes the application program, which is being executed on the operating system, to:
present the certificate included in the application program, to the operating system;
request the operating system to verify the signature included in the certificate with the public key included in the configuration profile incorporated in the operating system in response to starting-up of the application program or to return from a background processing to the application program;
instruct the display to restrict showing the screen of the application program in response to a result showing that a verification of the signature is failure; and
instruct the display to show the screen of the application program in response to a result showing that the verification of the signature is successful.
5. The computer according to claim 4 , wherein
in response to the result showing that the verification of the signature is failure, the processor executing the application program is configured to instruct the operating system to start a client program, the client program being a program for incorporating a new configuration profile into the operating system,
upon receiving an instruction to start the client program, the processor executing the operating system is configured to start the client program,
the processor executing the client program is configured to request the application program to supply the new configuration profile,
upon receiving a request from the client program, the processor executing the application program is configured to supply the new configuration profile to the client program, and
upon receiving the new configuration profile, the processor executing the client program is configured to incorporate the new configuration profile into the operating system.
6. The computer according to claim 4 , wherein
in response to the operating system detecting that an external display device is connected to the computer, the processor executing the application program is configured to forbid display of the given screen.
7. An executing method of an application program while being executed on an operating system, on a computer controlled by the operating system having a function of copying a screen shown on a display while the application program is executed on the operating system, the computer comprising a memory storing the operating system, the application program and a configuration profile of the operating system to restrict the function of copying, the configuration profile including a public key relating to the application program, the application program including a certificate including a signature, the certificate corresponding to the application program and being independent from the computer, the method comprising:
presenting the certificate included in the application program, to the operating system;
requesting the operating system to verify the signature included in the certificate with the public key included in the configuration profile incorporated in the operating system in response to starting-up of the application program or to return from a background processing of the application program;
instructing the display to restrict showing the screen of the application program in response to a result showing that a verification of the signature is failure; and
instructing the display to show the screen of the application program in response to a result showing that the verification of the signature is successful.
8. The method according to claim 7 , further comprising:
in response to the result showing that the verification of the signature is failure, instructing the operating system to start a client program, the client program being a program for incorporating a new configuration profile into the operating system;
upon receiving an instruction to start the client program, starting the client program by the operating system;
requesting the application program to supply the new configuration profile;
upon receiving a request from the client program executed by the computer, supplying the new configuration profile to the client program; and
upon receiving the new configuration profile, incorporating the new configuration profile into the operating system.
9. The method according to claim 7 , further comprising:
requesting the operating system to forbid display of the given screen in response to the operating system detecting that an external display device is connected to the computer.
10. The non-transitory computer-readable storage medium according to claim 2 , wherein
the application program has a function of a web server,
the client program is a web browser program,
the processor executing the application program is configured to instruct the operating system to start the web browser program for accessing a resource with a URI, the URI being specified by the application program and identifying the web server of the application program,
the processor executing the web browser program is configured to send a HTTP request for requesting a new configuration profile, to the web server.
11. The computer according to claim 5 , wherein
the application program has a function of a web server,
the client program is a web browser program,
the processor executing the application program is configured to instruct the operating system to start the web browser program for accessing a resource with a URI, the URI being specified by the application program and identifying the web server of the application program,
the processor executing the web browser program is configured to send a HTTP request for requesting the new configuration profile, to the web server.
12. The method according to claim 8 , wherein
the application program has a function of a web server,
the client program is a web browser program,
the method further comprising:
instructing the operating system to start the web browser program for accessing a resource with a URI, the URI being specified by the application program and identifying the web server of the application program; and
sending a HTTP request for requesting a new configuration profile, to the web server.
13. The non-transitory computer-readable storage medium according to claim 1 , wherein
the configuration profile includes a second certificate including the public key.
14. The non-transitory computer-readable storage medium according to claim 13 , wherein
the second certificate is a self-signed certificate.