Patent ID: 8893268
Filing Date: 2014-11-18
Classification: G06F,H04L

Abstract:
1. A method for preventing permission re-delegation among applications, comprising: accepting a message requesting access to a user-controlled resource from a requester application at a deputy application; reducing a first permissions list of the deputy application to a second permissions list, wherein the second permissions list comprises an overlap of permissions between the deputy application and the requester application; sending the message from the deputy application to a computing system via an application programming interface (API), wherein the computing system is configured to reject the message if the second permissions list of the deputy application does not permit access to the user-controlled resource; and rejecting a second message requesting access to the user-controlled resource if a third permissions list comprising an overlap of the second permissions list and a permissions list of a second requester application does not permit access to the user-controlled resource.