Managed Application Package Loader and Enforcer
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Enterprises face security vulnerabilities as third-party applications installed on devices can potentially exploit unauthorized access to enterprise resources, despite efforts like SDKs and application wrapping, which require modification and redistribution of code.
Innovation Solution
An enterprise computing environment generates a managed application package that includes a loader and enforcer to execute target applications while enforcing compliance rules, isolating enterprise resources from personal spaces and preventing unauthorized actions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If security libraries are integrated into applications using SDKs, then application security is improved, but application complexity and redistribution requirements increase
Solution Approach 1:
The patent introduces a wrapper application as an intermediary layer between the target application and the enterprise resource management system. This wrapper includes a security manager that intercepts and monitors application operations, enforcing security policies without requiring modifications to the original application code. The wrapper acts as a mediator that provides security functionality while keeping the target application unchanged, thus resolving the contradiction between improving security and avoiding application complexity.
2Object-affected harmful factors
If applications are wrapped with security libraries, then unauthorized access prevention is improved, but application modification and repackage requirements increase
Solution Approach 1:
The wrapper application serves as an intermediary that provides security functionality without requiring modification of the target application. The security manager within the wrapper intercepts system calls and enforces security policies, achieving unauthorized access prevention while keeping the original application intact and avoiding complex modification and repackaging processes.
Solution Approach 2:
The patent creates a wrapper application that copies and extends the functionality of the target application while adding security capabilities. Instead of modifying the original application, a separate wrapper is created that contains the security logic, allowing the original application to remain unchanged while still benefiting from enhanced security through the wrapper's interception and monitoring mechanisms.
3Reliability
If compliance rules are enforced on target applications, then enterprise resource protection is improved, but application functionality restrictions increase
Solution Approach 1:
The security manager enforces compliance rules selectively based on the specific application and its behavior. Rather than imposing blanket restrictions on all applications, the system monitors and enforces only those security policies that are relevant to each application's operations. This partial enforcement approach protects enterprise resources while minimizing unnecessary restrictions on legitimate application functionality.
Solution Approach 2:
The security manager continuously monitors application operations and provides feedback by dynamically enforcing compliance rules based on real-time behavior analysis. When an application attempts an operation that violates security policies, the security manager intercepts and blocks the action, while allowing compliant operations to proceed uninterrupted. This feedback mechanism ensures resource protection while maintaining application versatility for authorized functions.
Data Source
AI summary
Embodiments relate to a managed application package generator that creates an executables file, a resource file, and a manifest file for a managed application. The executables file comprises an executable for a loader that loads a target application into memory. The resource file comprises a public resource for the target application. The manifest file comprises manifest data for the target application.