Anonymous server based user settings protection

Patent metadata

Field	Value
Publication number	US-9825971-B2
Application number	US-201314779072-A
Country	US
Kind code	B2
Filing date	Apr 24, 2013
Priority date	Apr 24, 2013
Publication date	Nov 21, 2017
Grant date	Nov 21, 2017

Abstract

Systems and methods for verifying an application data modification are described herein. In one example, a method includes detecting modified application data in a computing device and determining the modified application data did not originate from an automatic program. The method also includes sending an identifier and the modified application data to a signing server. Furthermore, the method includes receiving encrypted data comprising the identifier and the modified application data from the signing server. Additionally, the method includes storing the encrypted data in the computing device.

First claim

What is claimed is:

1. A method for verifying an application data modification comprising:
detecting modified application data in a computing device;
determining the modified application data did not originate from an automatic program;
sending an identifier and the modified application data to a signing server;
receiving encrypted data comprising the identifier and the modified application data from the signing server; and
storing the encrypted data in the computing device.

2. The method of claim 1 , wherein determining the modified application data did not originate from the automatic program comprises:
sending an alphanumeric string to a user based on contact information; and
receiving the alphanumeric string as input.

3. The method of claim 2 , comprising sending the alphanumeric string to the user via an email message or a text message.

4. The method of claim 1 , wherein determining the modified application data did not originate from the automatic program comprises:
requesting a challenge-response test from the signing server;
receiving a challenge-response test; and
detecting a correct response to the challenge-response test.

5. The method of claim 4 , wherein the challenge-response test comprises a completely automated public turing test to tell computers and humans apart test.

6. The method of claim 1 , wherein storing the encrypted data in the computing device comprises storing the encrypted data in a registry.

7. The method of claim 1 , wherein the modified application data comprises a modified default home page or a modified default search provider.

8. A computing device for verifying an application data modification comprising:
a processor to execute processor executable code;
a storage device that stores processor executable code, wherein the processor executable code, when executed by the processor, causes the processor to:
detect modified application data in a computing device;
request a challenge-response test from a signing server to determine that the modified application data did not originate from an automatic program;
send an identifier and the modified application data to a signing server in response to a correct response to the challenge-response test;
receive encrypted data comprising the identifier and the modified application data from the signing server; and
store the encrypted data in the computing device.

9. The computing device of claim 8 , wherein the modified application data comprises a modified default home page or a modified default search provider.

10. The computing device of claim 8 , wherein the challenge-response test comprises a completely automated public turing test to tell computers and humans apart test.

11. The computing device of claim 8 , wherein the processor is to:
send an alphanumeric string to a user based on contact information; and
receive the alphanumeric string as input.

12. The computing device of claim 11 , wherein the processor is to send the alphanumeric string to the user via an email message or a text message.

13. An apparatus for verifying an application data modification comprising computer hardware configured to:
detect modified application data in a computing device;
determine the modified application data did not originate from an automatic program;
send an identifier and the modified application data to a signing server;
receive encrypted data comprising the identifier and the modified application data from the signing server; and
store the encrypted data in the computing device.

14. The apparatus of claim 13 , wherein the computer hardware is configured to determine the modified application data did not originate from the automatic program by:
sending an alphanumeric string to a user based on contact information; and
receiving the alphanumeric string as input.

15. The apparatus of claim 13 , wherein the computer hardware is configured to determine the modified application data did not originate from the automatic program by:
requesting a challenge-response test from the signing server;
receiving a challenge-response test; and
detecting a correct response to the challenge-response test.

16. The apparatus of claim 13 , wherein the computer hardware is configured to store the encrypted data in the computing device by storing the encrypted data in a registry.

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Chen Shuo
• Xu Zhenbin
• Li Boxin

Classifications

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• H04L63/14

  for detecting or protecting against malicious traffic · CPC title

• G06F21/56

  Computer malware detection or handling, e.g. anti-virus arrangements · CPC title

• G06F2221/2103

  Challenge-response · CPC title

• H04N21/8166

  involving executable data, e.g. software (arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34) · CPC title