Granted Patent B2

US 12,407,519 · App. 17/869,298 · Granted Sep 2, 2025

Inventors: James Seibel (Boston, MA); Kevin LaFlamme (Boston, MA); Fred Koschara (Boston, MA); Reinhard Schumak (Boston, MA); Jeremy Debate (Boston, MA)

Assignee: Malikie Innovations Limited

H04L9/3234G06F21/53G06F21/606H04L63/061H04L63/0853H04L63/0876H04L67/10

Abstract

Claims (68)

1. A method of providing an execution environment in a computing device, comprising:

loading a plurality of trusted applications into a memory of the computing device;

maintaining, in the memory, a plurality of communication associations;

detecting an attempt to communicate with a recipient application by an originating application, the recipient application being selected from the plurality of trusted applications;

searching through the plurality of communication associations for a communication association comprising an identifier of the recipient application and an identifier of the originating application;

when the communication association comprising the identifier of the recipient application and the identifier of the originating application is not found, disallowing the communication; and

when the communication association comprising the identifier of the recipient application and the identifier of the originating application is found,

identifying a message for transmission between the originating application and the recipient application,

generating a key based on the identifier of the recipient application and a unique file-specific identifier of a file system,

writing the identified message to a file, the contents of the file encrypted using the generated key;

transmitting, using the generated key, the file with the identified message to the recipient application,

receiving the generated key at the recipient application for decrypting the message, and

reading the file and decrypting the message, by the recipient application, using the generated key.

2. The method of claim 1 further comprising loading at least one untrusted application into the execution environment, the at least one untrusted application being prevented from communicating with any of the trusted applications.

3. The method of claim 1 wherein the transmitting comprises:

transmitting the generated key to the recipient application from a keystore application, the keystore application operable to store and retrieve the plurality of communication associations.

4. The method of claim 1 wherein the transmitting comprises:

designating an IPC (Interprocess Communication) channel between a transmitting application of the trusted applications and the recipient application;

encrypting the identified message using the generated key;

transmitting the encrypted message to the recipient application from the originating application; and

transmitting the generated key to the recipient application from a keystore application, the keystore application operable to store and retrieve the plurality of communication associations.

5. The method of claim 1 wherein detecting the attempt to communicate identifies file accesses, IPC accesses and network accesses for each of the trusted applications, the trusted applications defining a set of trusted applications operable for communication only with other applications in the set of trusted applications exclusive of other applications in the memory outside the set of trusted applications.

6. The method of claim 5 wherein detecting an attempt to communicate further comprises wrapping the applications in the set of trusted applications, and leaving the other applications in the memory outside the set of trusted applications unmodified, the wrapped applications operable in the execution environment responsive to an unmodified operating system.

7. The method of claim 1 further comprising storing designated communication associations of one or more of the trusted applications in an association table accessible by a keystore application, the keystore application configured to receive an identifier of a trusted application and indicate if a communication association exists with another application in the execution environment.

8. The method of claim 7 wherein the association table includes entries, each entry having an indication of one of the plurality of the trusted applications and an identifier of one or more applications to which the one of the plurality of trusted applications may communicate.

9. A computing device for providing an execution environment, comprising:

a memory; and

a processor;

wherein the memory and the processor cooperate to:

load a plurality of trusted applications into the memory;

maintain, in the memory, a plurality of communication associations;

detect an attempt to communicate with a recipient application by an originating application, the recipient application being selected from the plurality of trusted applications;

searching through the plurality of communication associations for a communication association comprising an identifier of the recipient application and an identifier of the originating application;

when the communication association comprising the identifier of the recipient application and the identifier of the originating application is not found, disallowing the communication; and

when the communication association comprising the identifier of the recipient application and the identifier of the originating application is found,

identifying a message for transmission between the originating application and the recipient application,

generating a key based on the identifier of the recipient application and a unique file-specific identifier of a file system,

writing the identified message to a file, the contents of the file encrypted using the generated key;

transmitting, using the generated key, the file with the identified message to the recipient application, and

receiving the generated key at the recipient application for decrypting the message, and

reading the file and decrypting the message, by the recipient application, using the generated key.

10. The computing device of claim 9 , wherein the memory and the processor further cooperate to load at least one untrusted application into the execution environment, the at least one untrusted application being prevented from communicating with any of the trusted applications.

11. The computing device of claim 9 wherein the transmitting comprises:

transmitting the generated key to the recipient application from a keystore application, the keystore application operable to store and retrieve the plurality of communication associations.

12. The computing device of claim 9 wherein the transmitting comprises:

designating an IPC (Interprocess Communication) channel between a transmitting application of the trusted applications and the recipient application;

encrypting the identified message using the generated key;

transmitting the encrypted message to the recipient application from the originating application; and

transmitting the generated key to the recipient application from a keystore application, the keystore application operable to store and retrieve the plurality of communication associations.

13. The computing device of claim 9 wherein detecting the attempt to communicate identifies file accesses, IPC accesses and network accesses for each of the trusted applications, the trusted applications defining a set of trusted applications operable for communication only with other applications in the set of trusted applications exclusive of other applications in the memory outside the set of trusted applications.

14. The computing device of claim 13 wherein detecting an attempt to communicate further comprises wrapping the applications in the set of trusted applications, and leaving the other applications in the memory outside the set of trusted applications unmodified, the wrapped applications operable in the execution environment responsive to an unmodified operating system.

15. The computing device of claim 9 , wherein the memory and the processor further cooperate to store designated communication associations of one or more of the trusted applications in an association table accessible by a keystore application, the keystore application configured to receive an identifier of a trusted application and indicate if a communication association exists with another application in the execution environment.

16. The computing device of claim 15 wherein the association table includes entries, each entry having an indication of one of the plurality of the trusted applications and an identifier of one or more applications to which the one of the plurality of trusted applications may communicate.

17. A non-transitory computer readable medium having stored thereon executable code for execution by a processor of a computing device, the executable code comprising instructions for:

loading a plurality of trusted applications into a memory of the computing device;

maintaining, in the memory, a plurality of communication associations;

detecting an attempt to communicate with a recipient application by an originating application, the recipient application being selected from the plurality of trusted applications;

searching through the plurality of communication associations for a communication association comprising an identifier of the recipient application and an identifier of the originating application;

when the communication association comprising the identifier of the recipient application and the identifier of the originating application is not found, disallowing the communication; and

when the communication association comprising the identifier of the recipient application and the identifier of the originating application is found,

identifying a message for transmission between the originating application and the recipient application,

generating a key based on the identifier of the recipient application and a unique file-specific identifier of a file system,

writing the identified message to a file, the contents of the file encrypted using the generated key;

transmitting, using the generated key, the file with the identified message to the recipient application, and

receiving the generated key at the recipient application for decrypting the message, and

reading the file and decrypting the message, by the recipient application, using the generated key.

18. The non-transitory computer readable medium of claim 17 , wherein the executable code comprising instructions for storing designated communication associations of one or more of the trusted applications in an association table accessible by a keystore application, the keystore application configured to receive an identifier of a trusted application and indicate if a communication association exists with another application in the execution environment.

19. The non-transitory computer readable medium of claim 18 , wherein each communication association of the plurality of communication associations comprises an entry of the associations table, the entry comprising both a first identifier for a first application and a second identifier for a second application, the first application and the second application being selected from the plurality of trusted applications.

Assignments (3)

Continuity (2)

References Cited (229)