Process Launch Constraints
    7.
    发明公开

    公开(公告)号:US20230393888A1

    公开(公告)日:2023-12-07

    申请号:US18327553

    申请日:2023-06-01

    Applicant: Apple Inc.

    CPC classification number: G06F9/485 G06F12/14

    Abstract: A kernel of an operating system receives a request from a parent process (e.g., an exec or spawn system call) to launch a child process that executes a binary. The kernel identifies a process-specific launch constraint, which is a precondition for launching the child process. The kernel evaluates the constraint, which can match against any type of system state or variable, including the process's location on disk, protection on disk, and how the process is to be launched. The kernel can then determine whether to launch the child process, thus permitting the child process to be scheduled for execution by the operating system. Launch constraints can be used both for a child process to impose preconditions on the parent process, and vice versa. Launch constraints can be included in the launch request, embedded in the binary, or located elsewhere, such as in a trust cache in kernel memory.

    SECURE DELIVERY OF ASSETS TO A TRUSTED DEVICE

    公开(公告)号:US20190227784A1

    公开(公告)日:2019-07-25

    申请号:US16147295

    申请日:2018-09-28

    Applicant: Apple Inc.

    Abstract: Embodiments described herein provide a system and method for secure delivery of assets to a trusted device. Multiple levels of verification are implemented to enable components of a software update and asset delivery system to verify other components within the system. Furthermore, updates are provided only to client devices that are authorized to receive such updates. In one embodiment, the specific assets provided to a client device during a software update can be tailored to the client device, such that individual client devices can receive updated versions of software asset at a faster or slower rate than mass market devices. For example, developer or beta tester devices can receive pre-release assets, while enterprise devices can receive updates at a slower rate relative to mass market devices.

    Secure delivery of assets to a trusted device

    公开(公告)号:US11144297B2

    公开(公告)日:2021-10-12

    申请号:US16147295

    申请日:2018-09-28

    Applicant: Apple Inc.

    Abstract: Embodiments described herein provide a system and method for secure delivery of assets to a trusted device. Multiple levels of verification are implemented to enable components of a software update and asset delivery system to verify other components within the system. Furthermore, updates are provided only to client devices that are authorized to receive such updates. In one embodiment, the specific assets provided to a client device during a software update can be tailored to the client device, such that individual client devices can receive updated versions of software asset at a faster or slower rate than mass market devices. For example, developer or beta tester devices can receive pre-release assets, while enterprise devices can receive updates at a slower rate relative to mass market devices.

Patent Agency Ranking