Operating System Installation Program Object Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Malicious applications intercept and deceive users during the installation process on smartphones, making it difficult for users to distinguish between legitimate and malicious applications, leading to security risks.
Innovation Solution
The method involves determining if a process request is for an application installation and directing the installation request to the operating system's own installation program object, bypassing third-party processing objects, ensuring that only the operating system's installation program object is used for installing applications, thereby preventing malicious applications from participating in the installation process.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If the operating system displays a selection dialog box to prompt the user to select an application for installation, then the user is given the freedom to choose which application to install, but malicious applications can be renamed to pretend as security applications and deceive users into installing them
Solution Approach 1:
The patent extracts the installation execution function from the selection dialog box and assigns it exclusively to the operating system's own installation program object. This removes the ability of third-party applications (including malicious ones) to intercept and execute installation requests, while preserving the user's ability to view and select applications through the dialog box interface.
Solution Approach 2:
The operating system's installation program object acts as an intermediary between the user's selection and the actual installation execution. The user selects an application through the dialog box, but the installation request is routed through the OS's trusted installation program, which verifies and executes the installation safely, preventing malicious applications from directly controlling the installation process.
2Adaptability or versatility
If the operating system allows third-party service providers to develop applications based on the operating system, then users gain access to diverse applications and functions, but malicious applications can be developed and distributed that compromise system security
Solution Approach 1:
The patent segments the installation process into two distinct phases: the user interface phase (selection dialog box that can be provided by third-party applications) and the execution phase (installation program object that is exclusively controlled by the operating system). This segmentation allows third-party applications to provide diverse functionality while ensuring that the critical installation execution is performed only by trusted OS components.
Solution Approach 2:
The operating system provides its own installation program object as a self-service mechanism for handling installation requests. Rather than relying on third-party applications to execute installations, the OS maintains and executes its own installation program, ensuring that the installation process itself remains under OS control regardless of which third-party application initiated the request.
3Loss of information
If the operating system uses a selection dialog box for application installation, then the installation process is transparent to the user, but malicious applications with hidden characteristics are difficult to be identified by users
Solution Approach 1:
The patent extracts the execution control from the selection dialog box and assigns it exclusively to the operating system's installation program object. This removes the ability of malicious applications to intercept and manipulate the installation execution, while preserving user visibility through the dialog box. Users can still see what they are selecting, but the execution is safely controlled by the OS.
Data Source
Figure 1~2
Figure 3~4
Figure 5~6
AI summary
The present disclosure provides a method for installing an application comprising: when determining that a current process request is an installation request of a downloaded application, determining (101) an installation program object carried by an operating system itself as a process program object in response to the installation request; and starting up (102) the installation program object carried by the operating system itself to install the downloaded application corresponding to the installation request. According to the present disclosure, if determining the current process request as the installation request of the downloaded application, the installation program object carried by the operating system itself is forced to be selected to install an application corresponding to the current request, so that the malicious application has no opportunity to participate in the process of application installation, thus improving the security of operating systems.