Abstract: Disclosed is a method for generating a privilege-based key using a computer. In the method, a privilege is received from an application, and verified as being associated with the application. The computer cryptographically generates a second key using a first key and the privilege. The second key is provided to the application.

Abstract: According to some aspects, a transport accelerator of a client device may generate a chunk request that is derived from a fragment request and that has transport acceleration metadata. The transport acceleration metadata may indicate that the request is from a transport accelerator and/or indicate a fragment associated with the fragment request. The transport accelerator may receive a signal to cancel one or more chunk requests and/or wait to receive a full fragment. A client application of the client device may generate the signal upon receipt of an HTTP response from a server that complies with a handshaking procedure.

Abstract: According to some aspects, a transport accelerator of a client device may generate a chunk request that is derived from a fragment request and that has transport acceleration metadata. The transport acceleration metadata may indicate that the request is from a transport accelerator and/or indicate a fragment associated with the fragment request. The transport accelerator may receive a signal to cancel one or more chunk requests and/or wait to receive a full fragment. A client application of the client device may generate the signal upon receipt of an HTTP response from a server that complies with a handshaking procedure.

Abstract: Disclosed is a method for generating a privilege-based key using a computer. In the method, a privilege is received from an application, and verified as being associated with the application. The computer cryptographically generates a second key using a first key and the privilege. The second key is provided to the application.

Abstract: Described are techniques and mechanisms for enforcing trust between an application and a library loaded by the application. Very generally stated, the application declares one or more trusted code groups (“TCGs”) of which a library must be a member to be authorized for execution with the application. Libraries that are authorized to assert membership in one or more TCGs include a secure indicator of that membership. As the application executes and attempts to load a library, that libraries membership in a TCG authorized by the application is verified prior to loading the library.

Abstract: A system for processing user interface actions generated from a user interface device, including generating a freshness status for the user interface action. The freshness status indicates a freshness state associated with the user interface action. The freshness status is associated wit the user interface action.

Abstract: System for selectively enabling operating modes of a device. The system includes a method for selectively enabling operating modes of a device during a device initialization, wherein the operating modes comprise a privileged mode and a non-privileged mode. The method includes determining during the device initialization whether the device is to operate in the privileged mode or in both the privileged and non-privileged modes, and enabling the privileged mode if it is determined that the device is to operate only in the privileged mode. The method also includes enabling both the privileged and the non-privileged modes if it is determined that the device is to operate in both the privileged and the non-privileged modes.

Abstract: A system for saving application state history information, containing an historical snap-shot of dynamic application state information associated with execution of a first application on a computing device. The application state history information is saved for use in a subsequent re-launch of the first application.

Abstract: A server for automatically installing a required application responsive to a client device is described. The server comprises an interface agent arranged to receive a first signal from a client wireless device where the first signal comprises an identifier. A retrieval application is arranged to obtain an executable application corresponding to the identifier and an installer application is arranged to install the executable application responsive to the retrieval application obtaining the executable application. The interface agent is arranged to cause execution of the installed executable application.

Abstract: System for dynamic arbitration of a shared resource on a device. A method is provided for arbitrating the allocation of a device resource on a device. The method comprises receiving a request from a requesting application that requests allocation of the device resource, and determining that the device resource is owned by an owning application. The method also comprises associating owner information with requester information to form an arbitration request, wherein the owner information comprises information about the owning application and the requester information comprises information about the requesting application. The method also comprises arbitrating the arbitration request to produce an arbitration decision that indicates whether or not the device resource should be allocated to the requesting application, and allocating the device resource based on the arbitration decision.

Abstract: Methods and apparatuses are provided for dynamic registration of privileged mode hooks in a device that can operate in a privileged mode and a non-privileged mode. A data structure is provided which maps between identifiers and functions. An available slot in the data structure is used to store a pointer associated with a function. The identifier can then be made accessible to non-privileged applications.

Abstract: System for invoking a privileged function in a device. The system includes a method that allows an application to invoke a function on a device, wherein the device includes at least two operating modes comprising a privileged mode and a non-privileged mode, and the function executes in the privileged mode. The method includes receiving a request from the application to invoke the function and determining the operating mode of the application. The method also includes invoking the function using an interrupt, if the application is executing in the non-privileged mode, wherein the function is executed within the same task as the application. The method also includes invoking the function directly, if the application is executing in the privileged mode.

Abstract: System for providing transitions between operating modes of a device. The system includes a method for providing transitions between a privileged and a non-privileged operating mode. The method comprises executing an application in the non-privileged mode, generating an interrupt to request the services of a privileged function, and transitioning to the privileged mode to execute the privileged function, wherein the privileged function is executed as part of the same thread of execution as the application.

Abstract: System for registry-based automatic installation and component handling on a device. A method is provided for automatically processing a component on a device, where the component has a selected component type. The method includes installing a component handler on the device, where the component handler is operable to process components having the selected component type. The method also includes parsing an action list to obtain a component/action pair that identifies the component to be processed by the device, and downloading the component to the device. The method also includes determining that the component has the selected component type, and using the selected component type to activate the component handler to process the component.