US 12,353,904 B2
System for application protection and non-transitory machine-readable medium for storing program code that provides application protection when executed
Chih-Hsiang Hsiao, Hsinchu (TW); Pei-Lun Suei, Hsinchu (TW); and Yu-Chi Chu, Hsinchu (TW)
Assigned to MEDIATEK INC., Hsinchu (TW)
Filed by MEDIATEK INC., Hsin-Chu (TW)
Filed on Jun. 26, 2022, as Appl. No. 17/849,694.
Claims priority of provisional application 63/324,645, filed on Mar. 29, 2022.
Claims priority of provisional application 63/245,235, filed on Sep. 17, 2021.
Prior Publication US 2023/0090251 A1, Mar. 23, 2023
Int. Cl. G06F 9/455 (2018.01); G06F 21/62 (2013.01)
CPC G06F 9/45558 (2013.01) [G06F 9/45545 (2013.01); G06F 21/6281 (2013.01); G06F 2009/4557 (2013.01); G06F 2009/45587 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A system for application (APP) protection, comprising:
a processor, arranged to execute:
a guest virtual machine (VM), wherein at least one APP runs on the guest VM, and at least one APP protection with at least one identification (ID) of the at least one APP is downloaded to the guest VM;
at least one primary VM;
a hypervisor, comprising:
an install service module, arranged to receive the at least one APP protection with the at least one ID from the guest VM, and copy the at least one APP protection with the at least one ID to the at least one primary VM according to an install service command; and
a launcher module, arranged to launch the at least one APP protection that is copied to the at least one primary VM according to a launch command;
a host VM, arranged to:
receive at least one install command from the guest VM, and generate the install service command to the install service module in the hypervisor according to the at least one install command;
verify the at least one APP protection by the at least one ID and generate at least one verification result;
obtain the at least one ID from the at least one primary VM according to the at least one verification result; and
generate the launch command to the launcher module in the hypervisor according to the at least one ID.