Application Extension Memory Access With Timed Security Mediation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing techniques for managing application extensions are ineffective and inefficient, often lacking proper safeguards for accessing long-term memory, leading to security vulnerabilities.

Innovation Solution

Implementing a method to detect and manage extension requests based on predefined criteria, including terminating or forgoing termination of extensions that do not activate operating system functions within a specified time frame, and managing paths to extensions to enhance security and efficiency.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If extensions are allowed to access long-term memory without safeguards, then ease of operation is improved, but security is worsened

Engineering Contradiction:
Improveextension access to long-term memoryVSAvoidsecurity
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent introduces a system process as an intermediary between the extension and the file system. This mediator monitors extension behavior, enforces time-based criteria, and controls memory access permissions, thereby enabling extensions to operate securely without direct unrestricted access to long-term memory

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If extensions are terminated when not activating OS functions within predefined period, then security is improved, but productivity is worsened

Engineering Contradiction:
ImprovesecurityVSAvoidextension operation continuity
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent implements dynamic termination criteria based on extension behavior patterns. The system monitors whether extensions activate OS functions within predefined time periods and adjusts their operational status accordingly, allowing legitimate extensions to continue while terminating malicious or stalled ones

Inventive Principle:
Principle #15Dynamics

Solution Approach 2:

The system establishes a feedback loop that continuously monitors extension activity and enforces time-based criteria. The system process receives feedback from extensions about their operational status and makes real-time decisions about termination or continuation based on predefined security policies

Inventive Principle:
Principle #23Feedback

3Productivity

If extensions are allowed to operate without time-based criteria, then productivity is improved, but security is worsened

Engineering Contradiction:
Improveextension operationVSAvoidsecurity vulnerabilities
Core Design Contradiction:
ProductivityVSObject-affected harmful factors

Solution Approach 1:

The patent establishes predefined time-based criteria and termination conditions before extensions begin operating. The system process is configured with security policies that specify maximum operation periods and activation requirements, preventing security vulnerabilities before they can manifest

Inventive Principle:
Principle #10Preliminary action

Data Source

PatentEP4650958A1Techniques for securely using an extension of an application
Publication Date: 2025.11.19 APPLE INC
  • EP4650958A1 patent drawingFigure 1A
  • EP4650958A1 patent drawingFigure 1B
  • EP4650958A1 patent drawingFigure 1C

AI summary

The present disclosure generally relates to managing content. Some techniques are for enforcing use of a hardware component in accordance with some embodiments. Other techniques are for managing memory for an extension in accordance with some embodiments. Other techniques are for obtaining a memory location provided to an extension in accordance with some embodiments.