公开(公告)号：US20160350529A1

公开(公告)日：2016-12-01

申请号：US14726292

申请日：2015-05-29

Applicant: Apple Inc.

Inventor： Gregory I. Kerr ,  Pierre-Olivier J. Martel ,  Love Hornquist Astrand ,  Peter Kiehtreiber ,  Ivan Krstic

IPC: G06F21/52 ,  G06F21/64

CPC classification number: G06F21/52 ,  G06F21/51 ,  G06F21/64 ,  G06F2221/033

Abstract: According to one embodiment, in response to a request received from an application by a launch module hosted by an operating system and executed by a processor to dynamically load a library, a library validation module hosted by the operating system extracts a first team identifier (ID) from the application, where the first team ID identifies an application provider that provides the application. The library validation module extracts a second team ID from the library, where the second team ID identifies a library provider that provides the library. The first team ID and the second team ID are compared to determine whether the first team ID matches the second team ID. In response to determining that the first team ID matches the second team ID, the launch module launches the library to allow the application communicate with the library; otherwise, the request is denied.

Abstract translation: 根据一个实施例，响应于由操作系统托管并由处理器执行并由处理器执行以动态加载库的从应用程序接收到的请求，由操作系统托管的库验证模块提取第一团队标识符（ID ），其中第一个团队ID标识提供应用程序的应用程序提供程序。 库验证模块从库中提取第二个团队ID，其中第二个团队ID标识提供该库的库提供程序。 比较第一个团队ID和第二个团队ID，以确定第一个团队ID是否与第二个团队ID相匹配。 为了响应确定第一个团队ID与第二个团队ID相匹配，启动模块启动该库以允许应用程序与库通信; 否则，请求被拒绝。

公开(公告)号：US09536080B2

公开(公告)日：2017-01-03

申请号：US14726292

申请日：2015-05-29

Applicant: Apple Inc.

Inventor： Gregory I. Kerr ,  Pierre-Olivier J. Martel ,  Love Hornquist Astrand ,  Peter Kiehtreiber ,  Ivan Krstic

IPC: G06F21/51 ,  G06F21/52 ,  G06F21/64

CPC classification number: G06F21/52 ,  G06F21/51 ,  G06F21/64 ,  G06F2221/033

Abstract: According to one embodiment, in response to a request received from an application by a launch module hosted by an operating system and executed by a processor to dynamically load a library, a library validation module hosted by the operating system extracts a first team identifier (ID) from the application, where the first team ID identifies an application provider that provides the application. The library validation module extracts a second team ID from the library, where the second team ID identifies a library provider that provides the library. The first team ID and the second team ID are compared to determine whether the first team ID matches the second team ID. In response to determining that the first team ID matches the second team ID, the launch module launches the library to allow the application communicate with the library; otherwise, the request is denied.

Abstract translation: 根据一个实施例，响应于由操作系统托管并由处理器执行并由处理器执行以动态加载库的从应用程序接收到的请求，由操作系统托管的库验证模块提取第一团队标识符（ID ），其中第一个团队ID标识提供应用程序的应用程序提供程序。 库验证模块从库中提取第二个团队ID，其中第二个团队ID标识提供该库的库提供程序。 比较第一个团队ID和第二个团队ID，以确定第一个团队ID是否与第二个团队ID相匹配。 为了响应确定第一个团队ID与第二个团队ID相匹配，启动模块启动该库以允许应用程序与库通信; 否则，请求被拒绝。