Method and apparatus for securely executing multiple actions using less than a corresponding multiple of privilege elevation prompts
A method and apparatus for securely executing a plurality of actions requiring elevated privilege using less than a corresponding plurality of prompts for privilege elevation, and in some embodiments, only a single prompt for privilege elevation, comprising: receiving a request to perform a first action requiring an elevated privilege; acquiring the elevated privilege to perform the first action; executing the first action, wherein the first action is executed based on the elevated privilege; receiving a request to perform a second action requiring an elevated privilege; and executing the second action using the elevated privilege acquired for the first action.
1. A computer-implemented method for securely executing a plurality of actions that each require an elevated privilege using a single elevated privilege comprising:
receiving, by at least one processor, a request to perform an action for a first application, wherein performing the action for the first application requires an elevated privilege, the elevated privilege being elevated with respect to a current privilege;
acquiring the elevated privilege to perform the action for the first application;
executing, by at least one processor, the action for the first application, wherein the action is executed based on the elevated privilege;
receiving, by the at least one processor, a request to perform the action for a second application that differs from the first application, wherein performing the action for the second application requires an elevated privilege; and
executing, by the at least one processor, the action for the second application using the elevated privilege acquired for performing the action for the first application.
2. The method of claim 1 , further comprising establishing and verifying security of an inter-process communication (IPC) connection between a client application manager and a client application assistant to be utilized in executing the requests to perform the action.
3. The method of claim 2 , wherein verifying the security of the IPC connection comprises a successful validation of a synchronization message, an authentication message and an authentication response message between the client application manager and the client application assistant across the IPC connection.
4. The method of claim 1 , further comprising validating the action for the second application prior to execution of the action for the second application.
5. The method of claim 1 , wherein the elevated privilege remains for a duration of a secure connection.
6. The method of claim 1 , wherein the action is authenticated using a digital signature.
7. The method of claim 1 , wherein:
executing the action for the first application comprises installing the first application; and
executing the action for the second application comprises installing the second application.
8. An apparatus for securely executing a plurality of actions using single prompt for privilege elevation comprising:
at least one processor; and
a non-transitory computer readable storage medium comprising instructions, which when executed by the at least one processor, cause the apparatus to perform a method comprising:
receiving a request to perform an action for a first application, wherein performing the action for the first application requires an elevated privilege, the elevated privilege being elevated with respect to a current privilege;
acquiring the elevated privilege to perform the action for the first application;
executing the action for the first application, wherein the action is executed based on the acquired elevated privilege;
receiving a second request to perform the action for a second application that differs from the first application, wherein performing the action for the second application requires an elevated privilege; and
executing the action for the second application using the elevated privilege acquired for performing the action for the first application.
9. The apparatus of claim 8 , wherein the method further comprises establishing an inter-process communication (IPC) connection.
10. The apparatus of claim 9 , wherein the method further comprises verifying the security of the IPC connection, wherein verifying comprises a successful validation of a synchronization message, an authentication message and an authentication response message between a client application manager and a client application assistant across the IPC connection.
11. The apparatus of claim 8 , wherein the method further comprises validating the action prior to the execution of the action for the second application.
12. The apparatus of claim 8 , wherein the action is authenticated using a digital signature.
13. The apparatus of claim 8 , wherein:
executing the action for the first application comprises installing the first application; and
executing the action for the second application comprises installing the second application.
14. A non-transitory computer readable medium storing computer instructions that, when executed by at least one processor, cause the at least one processor to perform a method for securely executing a plurality of actions using single prompt for privilege elevation comprising:
receiving a request to download and install a first application, wherein downloading and installing the first application requires an elevated privilege to an administrator level, the elevated privilege being elevated with respect to a current privilege;
acquiring the elevated privilege to for downloading and installing the first application;
downloading and installing the first application based on the acquired elevated privilege for downloading and installing the first application;
receiving a request to download and install a second application that differs from the first application, wherein downloading and installing the second application requires an elevated privilege to the administrator level; and
downloading and installing the second application using the elevated privilege acquired for downloading and installing for the first application.
15. The non-transitory computer readable medium of claim 14 , wherein the method further comprises establishing and verifying security of an inter-process communication (IPC) connection between a client application manager and a client application assistant to be utilized in executing the requests.
16. The non-transitory computer readable medium of claim 15 , wherein verifying the security of the IPC connection comprises a successful validation of a synchronization message, an authentication message and an authentication response message between the client application manager and the client application assistant across the IPC connection.
17. The non-transitory computer readable medium of claim 14 , wherein the method further comprises validating the download and install of the second application prior to execution of the download and the install of the second application.
18. The non-transitory computer readable medium of claim 14 , wherein the elevated privilege remains for a duration of a secure connection.
19. The non-transitory computer readable medium of claim 14 , wherein the download and the install of the second application is authenticated using a digital signature.
20. The non-transitory computer readable medium of claim 14 , wherein: the acquired elevated privilege is specific for the first application.