Interception Layer for Application Resource Isolation
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for application isolation in multi-process environments on a host computer fail to effectively isolate applications from shared resources and do not address the issue of multiple natively running applications, often requiring virtual machines or custom operating systems.
Innovation Solution
A system and method that provides application isolation without modifying the host operating system or applications, using an interception layer and database to manage resources and intercept system calls, allowing applications to run in a private and isolated environment, maintaining mappings between resources inside and outside the isolated environment.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If virtual machines or custom operating systems are used to achieve application isolation, then application isolation reliability is improved, but device complexity increases
Solution Approach 1:
The patent introduces an interception layer as an intermediary component between applications and the host operating system. This layer intercepts system calls and resource access requests, enabling application isolation without requiring virtual machines or custom operating systems. The interception layer acts as a mediator that maintains isolation reliability while avoiding the complexity of full virtualization environments.
2Ease of operation
If applications share system resources and libraries, then ease of operation is improved, but application isolation reliability deteriorates
Solution Approach 1:
The patent segments resource access by application, creating isolated resource views for each application through the interception layer. System resources and libraries are logically segmented so that each application accesses its own isolated instance, preventing inter-application interference while maintaining the appearance of resource sharing. This segmentation enables both isolation reliability and operational ease.
3Reliability
If an interception layer is introduced to provide application isolation, then application isolation reliability is improved, but device complexity increases
Solution Approach 1:
The interception layer is designed as a universal component that handles multiple functions including system call interception, resource access control, and application isolation management. By consolidating these functions into a single multi-functional layer, the patent reduces overall system architecture complexity compared to using separate virtualization components for each function.
Data Source
AI summary
A system, method, and computer readable medium for maintaining mappings between resources inside an isolated environment and outside the isolated environment for one or more applications. The system may include a plurality of lists of resources requested by the one or more applications during installation and while executing, and a corresponding lists of resources inside the isolated environment. The system may also include a list of resource exceptions, wherein the mappings between resources as requested by the applications and their corresponding values in the isolated environment are maintained subject to the list of exceptions.