Application Virtualization Environment for Dependency Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Computer applications face challenges in deploying and executing outside corporate networks due to unmet dependencies, requiring cumbersome VPN connections that may expose security threats.
Innovation Solution
An application virtualization environment that identifies and configures dependencies at runtime, allowing client devices to execute applications without backend connections, while providing a security boundary to isolate virtualized applications from non-virtualized ones.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a VPN connection is established to restore application dependencies, then the application can execute outside the corporate network, but security threats are exposed and the connection becomes cumbersome
Solution Approach 1:
The patent segments the application execution environment by creating a virtualized container that encapsulates the application and its dependencies. This allows the application to run in an isolated environment with its own file system, registry, and system libraries, eliminating the need for VPN connections while maintaining security. The virtualization layer separates the application from the host system, enabling portable execution without exposing the corporate network.
Solution Approach 2:
The patent introduces a virtualization intermediary layer that mediates between the application and the host system. This intermediary captures and redirects system calls, file access requests, and registry operations, allowing the application to access its dependencies through the virtualized environment without direct network connections. The intermediary acts as a secure gateway that prevents unauthorized access while maintaining application functionality.
2Adaptability or versatility
If a VPN connection is established to restore application dependencies, then the application can execute outside the corporate network, but the connection process becomes cumbersome
Solution Approach 1:
The patent performs preliminary action by pre-configuring the virtualized environment with all necessary application dependencies during the virtualization process. File systems, registry keys, system libraries, and configuration settings are captured and packaged into the virtualized container beforehand. This eliminates the need for runtime VPN connections, as all dependencies are already present in the portable virtualized environment.
Solution Approach 2:
The patent creates a copy of the application environment by virtualizing the entire execution context, including file systems, registry, and system libraries. This virtualized copy can be transported and executed on any device without requiring access to the original corporate network resources. The copying process captures the complete dependency structure, enabling seamless execution anywhere.
3Adaptability or versatility
If application dependencies are made accessible to non-virtualized applications, then resource sharing is enabled, but security boundaries are compromised
Solution Approach 1:
The patent applies local quality by providing different access characteristics to different applications. Virtualized applications access resources through the virtualized environment with full permissions, while non-virtualized applications access the same resources through the host system with standard permissions. The virtualization layer creates localized access contexts, allowing each application type to interact with resources according to its security requirements without compromising overall system security.
Data Source
AI summary
The dependencies of an application are identified by intercepting application programming interface calls made by an application. A determination is then made at the runtime of the application as to whether the dependencies of the application are present. If the dependencies are not present, a client device upon which the application is executing is configured such that the dependencies are present and are made available only to the authorized application. If the dependencies are present and the application is authorized to interact with the dependencies, the application is permitted to execute.