Threat control and prevention for android systems

Abstract

A method is provided that determines whether to allow an application (app) for use or restrict the app on a set top box (STB). The method includes the steps of measuring at the STB, one or more resources used by the app; comparing at the STB, one or more thresholds set by an operator; and determining if the one or more resources used by the app exceed one or more thresholds set by the operator. Another method is provided that monitors applications (apps) that are installed a set top box (STB) for illegal or harmful activity by a policy manager. This method includes downloading and copying an app from an external source; installing or uninstalling the app into an application folder; providing a notification informing the policy manager of the installing or uninstalling of the app; and evaluating the app be installed or uninstalled.

What is claimed is: 
     
         1 . A method of monitoring applications (apps) that are installed a set top box (STB) for illegal or harmful activity by a policy manager, the method comprising:
 downloading and copying an app from an external source;   installing or uninstalling the app into an application folder;   providing a notification informing the policy manager of the installing or uninstalling of the app; and   evaluating the app be installed or uninstalled.   
     
     
         2 . The method of  claim 1 , wherein the external source comprises a Google Play Store or a computer. 
     
     
         3 . The method of  claim 1 , wherein the policy manager comprises a package-monitoring module configured to access a policy database to evaluate the app to be installed or uninstalled. 
     
     
         4 . The method of  claim 1 , further comprising:
 determining that the app to be installed or uninstalled constitutes a policy violation.   
     
     
         5 . The method of  claim 4 , wherein the app is a blacklisted app. 
     
     
         6 . The method of  claim 4 , further comprising:
 providing a policy violation report to the policy manager.   
     
     
         7 . The method of  claim 1 , wherein the policy manager comprises a private file monitoring/scan module configured to access a policy database to evaluate the app to be installed or uninstalled. 
     
     
         8 . The method of  claim 7 , wherein evaluating the app comprises monitoring file creation/change events and verifying file names with the policy database. 
     
     
         9 . The method of  claim 7 , wherein the private file monitoring/scan module monitors a private file area and shared file area. 
     
     
         10 . The method of  claim 8 , wherein if a file name contains any keyword which matches a blacklisted app, providing a policy violation report to the policy manager. 
     
     
         11 . The method of  claim 9 , wherein the policy manager comprises a piracy detection module configured to read identifiers in the app to detect if an app includes illegal content. 
     
     
         12 . The method of  claim 11 , wherein the piracy detection module is further configured to report parameters related to playback of illegal or pirated content. 
     
     
         13 . A system for determining whether to allow an application (app) for use or restrict the app on a set top box (STB), the system comprising:
 one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the instructions comprising:   instructions to download and copy an app from an external source;   instructions to install or uninstall the app into an application folder;   instructions to provide a notification informing the policy manager of the installing or uninstalling of the app; and   instructions to evaluate the app be installed or uninstalled.   
     
     
         14 . The system of  claim 13 , wherein the external source comprises a Google Play Store or a computer. 
     
     
         15 . The system of  claim 13 , wherein the policy manager comprises a package-monitoring module configured to access a policy database to evaluate the app to be installed or uninstalled. 
     
     
         16 . The system of  claim 13 , further comprising one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the instructions comprising:
 instructions to determine that the app to be installed or uninstalled constitutes a policy violation.   
     
     
         17 . The system of  claim 13 , wherein the app is a blacklisted app. 
     
     
         18 . The system of  claim 13 , further comprising one or more processors, one or more computer-readable memories, one or more computer-readable tangible storage devices, and instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the instructions comprising:
 instructions to provide a policy violation report to the policy manager.   
     
     
         19 . The system of  claim 13 , wherein the policy manager comprises a private file monitoring/scan module configured to access a policy database to evaluate the app to be installed or uninstalled. 
     
     
         20 . The system of  claim 19 , wherein evaluating the app comprises monitoring file creation/change events and verifying file names with the policy database. 
     
     
         21 . The system of  claim 19 , wherein the private file monitoring/scan module monitors a private file area and shared file area. 
     
     
         22 . The system of  claim 20 , wherein if a file name contains any keyword which matches a blacklisted app, providing a policy violation report to the policy manager. 
     
     
         23 . The system of  claim 22 , wherein the policy manager comprises a piracy detection module configured to read identifiers in the app to detect if an app includes illegal content. 
     
     
         24 . The method of  claim 23 , wherein the piracy detection module is further configured to report parameters related to playback of illegal or pirated content.