Apparatus and method for managing application

Patent metadata

Field	Value
Publication number	US-10678527-B2
Application number	US-201615299989-A
Country	US
Kind code	B2
Filing date	Oct 21, 2016
Priority date	Oct 21, 2015
Publication date	Jun 9, 2020
Grant date	Jun 9, 2020

Abstract

A method for application management and an electronic device therefor are provided. The electronic device includes a memory configured to store a first application, and a processor configured to obtain a request for installing a second application, compare a first identifier corresponding to the first application with a second identifier corresponding to the second application, if the first identifier is the same as the second identifier, compare first signature information corresponding to the first application with second signature information corresponding to the second application, if the first signature information is different from the second signature information, compare the first signature information with additional signature information corresponding to the second application, and if the first signature information is the same as the additional signature information, replace at least a portion of the first application by using at least a portion of the second application.

First claim

What is claimed is:

1. A method for application management of an electronic device, the method comprising:
installing a first application signed with first signature information in a memory;
comparing a first identifier corresponding to the first application with a second identifier corresponding to a second application in response to a request for installing the second application;
based on the first identifier is the same as the second identifier, comparing first signature information corresponding to the first application with second signature information corresponding to the second application;
based on the first signature information is different from the second signature information, comparing the first signature information with additional signature information corresponding to the second application and the additional signature information is obtained based at least on a token corresponding to the second application; and
based on the first signature information is the same as the additional signature information, authenticating the first signature information based on the token and replacing at least a portion of the first application by using at least a portion of the second application.

2. The method of claim 1 , further comprising:
based on the first signature information is the same as the second signature information, replacing the at least a portion of the first application by using the at least a portion of the second application.

3. The method of claim 1 , further comprising:
setting permission of the second application by using permission information included in the token.

4. An electronic device comprising:
a memory configured to store a first application; and
at least one processor configured to:
obtain a request for installing a second application,
compare a first identifier corresponding to the first application with a second identifier corresponding to the second application in response to the request,
based on the first identifier is the same as the second identifier, compare first signature information corresponding to the first application with second signature information corresponding to the second application,
based on the first signature information is different from the second signature information, compare the first signature information with additional signature information corresponding to the second application and the additional signature information is obtained based at least on a token corresponding to the second application, and
based on the first signature information is the same as the additional signature information, authenticate the first signature information based on the token and replace at least a portion of the first application by using at least a portion of the second application.

5. The electronic device of claim 4 , wherein, based on the first signature information is the same as the second signature information, the at least one processor is further configured to replace the at least a portion of the first application by using the at least portion of the second application.

6. The electronic device of claim 4 ,
wherein the token comprises key chain information, and
wherein, based on the first signature information being capable of being authenticated by the key chain information, the at least one processor is further configured to replace the at least a portion of the first application by using the at least a portion of the second application.

7. The electronic device of claim 4 ,
wherein the token comprises key change history information, and
wherein, based on the first signature information being included in the key change history information, the at least one processor is further configured to replace the at least a portion of the first application by using the at least a portion of the second application.

8. The electronic device of claim 4 , wherein, based on the first signature information being different from the second signature information, the at least one processor is further configured to uninstall the first application and to install the second application, based on the token corresponding to the second application.

9. The electronic device of claim 4 , wherein, based on the first application and the second application including a same resource, the at least one processor is further configured to replace the first signature information of the first application with the second signature information.

10. The electronic device of claim 4 , wherein the first identifier corresponds to an application name defined in a designated file of the first application.

11. The electronic device of claim 4 ,
wherein the token comprises a verification value, and
wherein, based on the verification value being obtained by using the first signature information, the at least one processor is further configured to replace the at least a portion of the first application by using the at least a portion of the second application.

12. The electronic device of claim 4 ,
wherein the token comprises a plurality of verification values, and
wherein, based on one of the plurality of verification values being obtained by using the first signature information, the at least one processor is further configured to replace the at least a portion of the first application by using the at least a portion of the second application.

13. The electronic device of claim 4 ,
wherein the token comprises a hash value, and
wherein the at least one processor is further configured to determine integrity of the token by using the hash value.

14. The electronic device of claim 4 ,
wherein the token comprises permission information, and
wherein the at least one processor is further configured to set an allowable permission to the second application based on the permission information.

15. The electronic device of claim 4 ,
wherein the token comprises an application package name as the identification information, and
wherein, based on a package name of the first application being the same as a package name of the second application, the at least one processor is further configured to change an application name of the first application to an application name of the second application.

16. The electronic device of claim 4 , further comprising:
a communication interface,
wherein the at least one processor is further configured to download the second application, which has the second identifier corresponding to the first identifier, from an external device connected through the communication interface.

17. The electronic device of claim 16 , wherein the at least one processor is further configured to send information about whether the first signature information is the same as the second signature information, to the external device or a remote server.

18. The electronic device of claim 4 ,
wherein, based on the result of the first comparison resulting in a determination that the first signature information is different from the second signature information,
the at least one processor is further configured to then compare the first signature information with additional signature information corresponding to the second application, and
wherein the additional signature information is obtained based at least on a token corresponding to the second application.

19. The electronic device of claim 4 ,
wherein, based on the result of the first comparison resulting in a determination that the first signature information is the same as the additional signature information,
the at least on

Assignees

• Samsung Electronics Co Ltd

Inventors

• Oh Myeong Jin
• Kim Moon Kyung
• Kim Kyung Moon
• Lee Jae Young

Classifications

• G06F8/65 Primary

  Updates (security arrangements therefor G06F21/57) · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• G06F21/51

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title

• G06F21/57

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• G06F8/62

  Uninstallation · CPC title