Application Framework Security Permission Mapping

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing methods for porting applications from one application framework to another, such as from Java 2 Platform, Micro Edition (J2ME) to Connected Device Configuration (CDC), are costly and labor-intensive due to significant differences in security environments and permission systems between frameworks, making it difficult to maintain compatibility and functionality.

Innovation Solution

A system that maps security permissions from one application framework to another, creating a compatible security environment to allow transparent execution of applications across different frameworks, using a mapping interface and security meta-data to configure the new framework's security manager and provide equivalent security behavior.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If applications are ported from one application framework to another, then compatibility and functionality are improved, but the effort and expense increase significantly

Engineering Contradiction:
Improveapplication compatibilityVSAvoidporting effort
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces a compatibility layer that acts as an intermediary between applications and the application framework. This compatibility layer includes a mapping interface that translates security permission requests from the first application framework to the second application framework, allowing applications to execute transparently without modification while maintaining security behavior

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a universal execution environment that can handle applications from multiple different application frameworks simultaneously. The security manager and mapping interface are designed to work with both MIDP and CDC frameworks, providing a unified approach to executing diverse applications without requiring separate porting processes

Inventive Principle:
Principle #6Universality (Multi-functionality)

2Ease of operation

If security permissions are mapped between different application frameworks, then transparent execution is achieved, but the security environment complexity increases

Engineering Contradiction:
Improvetransparent executionVSAvoidsecurity environment
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

A security manager is introduced as an intermediary component that receives security permission requests from applications and translates them between different application frameworks. The security manager maintains the security behavior of the first framework while operating within the second framework's security environment, shielding applications from security complexity

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a virtual copy of the first application framework's security environment within the second framework. By mapping security permissions and creating equivalent security contexts, the system replicates the original security behavior without requiring the actual first framework to be present, thus maintaining transparency while managing complexity

Inventive Principle:
Principle #26Copying

Data Source

PatentUS8943601B1Method and apparatus for executing an application in a different application framework
Publication Date: 2015.01.27 SUN MICROSYSTEMS INC
  • US8943601B1 patent drawing
  • US8943601B1 patent drawing
  • US8943601B1 patent drawing

AI summary

One embodiment of the present invention provides a system that executes an application designed for one application framework in a different application framework. First, the system receives an application designed to operate in the first application framework. The system determines a first set of security permissions used by the application in the first application framework, and maps these security permissions into a second set of security permissions associated with the second application framework. The system then configures the second application framework to provide the second set of security permissions. These steps allow the application to execute transparently in the second application framework with substantially similar security behavior as in the first application framework.