Systems and Methods for Application Identification

Patent metadata

Field	Value
Publication number	US-2016156602-A1
Application number	US-201615018721-A
Country	US
Kind code	A1
Filing date	Feb 8, 2016
Priority date	Aug 31, 2011
Publication date	Jun 2, 2016
Grant date	—

Abstract

Systems and methods for application identification in accordance with embodiments of the invention are disclosed. In one embodiment, a user device includes a processor and memory configured to store an application, a session manager, an application identifier, and at least one shared library, and the processor is configured by the session manager to communicate the application identifier and the application identifier data to an authentication server and permit the execution of the application in response to authentication of the application by the authentication server.

First claim

What is claimed is:

1 . A method for providing an application with access to a shared library on a user device, the method comprising:
receiving a request for access to a shared library on a user device; verifying provisioning data stored on the user device containing an application identifier; verifying the shared library stored on the user device using a library manifest containing information that can be used to identify and verify the shared library; negotiating a session token key with the shared library using the user device; and providing a session token encrypted with the session token key to the application using the user device, wherein the session token key grants access to the shared library.

2 . The method of claim 1 , wherein the request for access to a shared library received by the user device comprises provisioning data and the name of the shared library.

3 . The method of claim 1 , wherein verifying the provisioning data comprises:
sending the provisioning data to an authentication server; and receiving confirmation from the authentication server.

4 . The method of claim 1 , wherein the library manifest contains at least one private key signature.

5 . The method of claim 1 , wherein the library manifest contains at least one hash of the shared library.

6 . The method of claim 1 , wherein the library manifest contains a private key signature of the contents of the manifest.

7 . The method of claim 1 , wherein the library manifest is encrypted with a manifest key.

8 . The method of claim 1 , wherein negotiating a session token key comprises:
sending a request to the shared library using the user device; receiving data encrypted with the session manager's public key using the user device; sending data encrypted with the shared library's public key to the shared library using the user device; and receiving confirmation from the share library using the user device.

9 . An authentication server, comprising:
a processor; and memory configured to store:
at least one application identifier, where the application identifier is associated with a specific application and with application identifier data;
wherein the processor is configured by an authentication application to:
receive application identifier data and encrypted provisioning data containing an application identifier from a user device;
extract the application identifier from the encrypted provisioning data;
retrieve stored application identifier data associated with the extracted application identifier;
compare at least a portion of the stored application identifier data with the received application identifier data; and
send a message authenticating the application to a user device, when the compared portions of application identifier data match.

10 . The authentication server of claim 9 , wherein the memory is further configured to store cryptographic information associated with the application identifier and the processor is configured to access the application identifier within the encrypted provisioning data using the cryptographic information associated with the application identifier.

11 . The authentication server of claim 9 , wherein:
the application includes at least one file; and the application identifier data comprises information that can be used to authenticate at least one of the files.

12 . The authentication server of claim 11 , wherein the information that can be used to authenticate at least one of the files comprises hashes of part or all of the files.

13 . The authentication server of claim 9 , wherein the application identifier data comprises at least one piece of information selected from the group consisting of:
application name, application version, and application vendor.

14 . The authentication server of claim 9 , wherein the application identifier is further associated with one or more product identifiers that indicate execution platforms with which the application is compatible.

15 . The authentication server of claim 9 , wherein the memory is further configured to store information describing the compatibility and interoperability of software modules using application identifiers.

16 . The authentication server of claim 15 , wherein the software modules comprise shared libraries.

17 . A method for certifying an application for a consumer electronics product, the method comprising:
receiving application identifier data; storing an application identifier on a server so that the application identifier data is associated with the application identifier and application; storing the application identifier on a device; extracting the application identifier from communications sent from the device; retrieving application identifier data associated with the application identifier; and displaying the application identifier and application identifier data in human-readable format.

18 . The method of claim 17 , further comprising:
receiving one or more product identifiers, where each product identifier is associated with an execution platform; validating the application associated with the application identifier on a device including the execution platform identified by the product identifier; and storing an association between the one or more product identifiers and the application identifier on the server.

Assignees

• Sonic Ip Inc

Inventors

• Grab Eric William
• Soroushian Kourosh
• Lin Tung
• Chan Francis Yee-Dug
• Wallin Evan
• Amidei William David

Classifications

• H04L63/0876

  based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint · CPC title

• H04L63/0884

  by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L63/168

  above the transport layer · CPC title

• G06F21/12

  Protecting executable software · CPC title