Abstract: The present application discloses a method, system, and device for executing system calls. The method includes obtaining, by one or more processors, a request to execute a system call, the request to execute the system call being made by an executor to execute the system call, determining, by the one or more processors, whether the executor to execute the system call has an access permission for the system call, and in response to determining that the executor has the access permission for the system call, permitting, by the one or more processors, the executor to execute the system call.

Abstract: A method for accessing a restricted application programming interface (API) is disclosed, including: receiving, from a first application, a request to access the restricted API, the restricted API not supported by the first application; determining whether the first application is authorized by a provider of the restricted API to access the restricted API; and granting, in response to the determination that the first application is authorized by the provider of the restricted API to access the restricted API, the first application access to the restricted API.

Abstract: Inter-device service access is disclosed including issuing, by a source device running a first program, an access request by the first program for a specific service, and transmitting, by the source device running the first program, the access request through an inter-device link to a target device that provides the specific service, the target device being configured to receive the access request, forward the received access request to a second program running on the target device, the second program executing a corresponding service function.

Abstract: Isolating application data access is disclosed including receiving a request from a first application to access data of a second application, determining whether the first application is in a domain that has access authorization to the data of the second application, in response to a determination that the first application is in a domain that has access authorization to the data of the second application, permitting the first application to perform the access operation, and in response to a determination that the first application is not in a domain that has access authorization to the data of the second application, denying the first application permission to perform the access operation.

Abstract: Inter-device service access is disclosed including issuing, by a source device running a first program, an access request by the first program for a specific service, and transmitting, by the source device running the first program, the access request through an inter-device link to a target device that provides the specific service, the target device being configured to receive the access request, forward the received access request to a second program running on the target device, the second program executing a corresponding service function.

Abstract: The present application discloses a method, system, and device for executing system calls. The method includes obtaining, by one or more processors, a request to execute a system call, the request to execute the system call being made by an executor to execute the system call, determining, by the one or more processors, whether the executor to execute the system call has an access permission for the system call, and in response to determining that the executor has the access permission for the system call, permitting, by the one or more processors, the executor to execute the system call.

Abstract: A method for accessing a restricted application programming interface (API) is disclosed, including: receiving, from a first application, a request to access the restricted API, the restricted API not supported by the first application; determining whether the first application is authorized by a provider of the restricted API to access the restricted API; and granting, in response to the determination that the first application is authorized by the provider of the restricted API to access the restricted API, the first application access to the restricted API.

Abstract: Inter-device service access is disclosed including issuing, by a source device running a first program, an access request by the first program for a specific service, and transmitting, by the source device running the first program, the access request through an inter-device link to a target device that provides the specific service, the target device being configured to receive the access request, forward the received access request to a second program running on the target device, the second program executing a corresponding service function.

Abstract: Isolating application data access is disclosed including receiving a request from a first application to access data of a second application, determining whether the first application is in a domain that has access authorization to the data of the second application, in response to a determination that the first application is in a domain that has access authorization to the data of the second application, permitting the first application to perform the access operation, and in response to a determination that the first application is not in a domain that has access authorization to the data of the second application, denying the first application permission to perform the access operation.