Application Isolation via Interception Layer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for application isolation in multi-process environments on a host computer fail to effectively isolate applications from shared resources and do not address the issue of multiple natively running applications, often requiring virtual machines or customized operating systems.
Innovation Solution
A system and method that provides application isolation through an interception layer and database, intercepting system calls and resource access to create a private environment for applications without modifying the host operating system or applications, allowing transparent management of resources like memory, storage, and CPUs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virtual machines or customized operating systems are used to isolate applications, then application isolation effectiveness is improved, but device complexity increases
Solution Approach 1:
The patent introduces an interception layer as an intermediary component between applications and the host operating system. This layer intercepts system calls and resource access requests, applying isolation rules without requiring virtual machines or customized OS. The interception layer acts as a mediator that enforces isolation policies while maintaining compatibility with standard applications and operating systems, thereby improving isolation effectiveness without significantly increasing device complexity.
2Reliability
If virtual environments are deployed to isolate applications, then application crash impact is reduced, but ease of operation deteriorates due to modified host systems
Solution Approach 1:
The patent creates a virtualized resource access model where applications interact with virtualized versions of system resources through the interception layer. Instead of modifying the host OS or requiring virtual machines, the system copies and virtualizes resource access paths, allowing applications to run in isolated logical environments while the underlying host system remains unchanged and fully operational.
3Productivity
If shared resources are accessed by multiple applications, then resource utilization efficiency is improved, but application isolation effectiveness deteriorates
Solution Approach 1:
The patent segments resource access by creating isolated access paths for each application through the interception layer. Each application's resource requests are intercepted, tagged with application identifiers, and routed through isolation rules. This segmentation allows multiple applications to share physical resources while maintaining logical isolation, as each application interacts with its own virtualized resource interface managed by the interception layer.
Data Source
AI summary
A system, method, and computer readable medium for providing application isolation to one or more applications. The system may include an isolated environment including application files and executables, and an interception layer intercepting access to system resources and interfaces. The system may further include an interception database maintaining mapping between the system resources inside the isolated environment and outside, and a host operating system, wherein the isolated environments are saved on at least one of a local and remote storage.