Signed application cards

Patent metadata

Field	Value
Publication number	US-9948461-B2
Application number	US-201715475306-A
Country	US
Kind code	B2
Filing date	Mar 31, 2017
Priority date	Dec 30, 2015
Publication date	Apr 17, 2018
Grant date	Apr 17, 2018

Abstract

A device displays signed application cards. The device receives a card object that includes: an application function identifier that identifies an application function of a native application, a digital signature, and a certificate that comprises a public key. The device verifies the authenticity of the digital signature with the public key in the certificate. The device determines that the certificate is signed by a developer of the native application referenced by the card object. The device renders an application card on the display based on the information included in the card object. The application card includes a text string, an image, an audio, and/or an image. The device overlays an indicator onto the application card. The indicator indicates that the authenticity of the digital signature has been verified. The indicator also indicates that the developer of the native application authorized the rendering of the application card.

First claim

What is claimed is:

1. A card server comprising:
a network communication device;
a storage device that stores:
a card data store that stores a set of card records, wherein each card record includes a card record identifier (ID) and one or more data fields; and
a key data store that stores a plurality of private keys, wherein each private key is associated with one or more card record IDs; and

a processing device that executes computer-readable instructions, wherein the computer-readable instructions, when executed by the processing device, cause the processing device to:
receive a card request from a mobile computing device, wherein:
the card request includes a search query with one or more search terms,
the card request includes contextual data from the mobile computing device, and
the contextual data includes at least one of (i) application data associated with native applications that are installed and execute on the mobile computing device and (ii) a current location of the mobile computing device;

select a card record from the set of card records based on the one or more search terms in the search query;
retrieve at least one data field from the selected card record;
identify a private key in the key data store based on the card record ID of the selected card record;
generate a digital signature by signing the at least one data field retrieved from the selected card record with the identified private key;
generate a card object that comprises the digital signature and the at least one data field from the selected card record; and
transmit the card object to the mobile computing device.

2. The card server of claim 1 , wherein identifying the private key includes:
querying the key data store with the card record ID of the selected card record; and
receiving the private key associated with the card record ID of the selected card record.

3. The card server of claim 1 , wherein generating the digital signature includes:
generating a hash of the at least one data field retrieved from the selected card record and
signing the hash with the identified private key.

4. The card server of claim 1 , wherein:
the at least one data field includes an application function ID that identifies a function of a native application that is installed on the mobile computing device, and
generating the digital signature includes signing the application function ID with the private key or signing a hash of the application function ID with the private key.

5. The card server of claim 1 , wherein:
the key data store stores a plurality of certificates,
each certificate includes a public key that is associated with a private key of the plurality of private keys, and
the card object includes a certificate that corresponds to the identified private key.

6. The card server of claim 5 , wherein:
the at least one data field includes information regarding an application, and
the certificate that corresponds to the identified private key is signed by a developer of the application.

7. The card server of claim 1 , wherein selecting a card record from the set of card records includes:
querying an inverted index that maps keywords to card record IDs with the one or more search terms of the search query, and
receiving the card record IDs that correspond with the one or more search terms of the search query.

8. The card server of claim 1 , wherein:
the card data store, for each card record of the set of card records, stores a popularity score associated with the card record, and
selecting the card record from the set of card records includes selecting the card record based on the popularity score.

9. The card server of claim 1 , wherein:
selecting the card record includes selecting a first card record,
the computer-readable instructions, when executed by the processing device, cause the processing device to select a second card record from the set of card records,
identifying the private key includes identifying a first private key based on a first card record ID for the first card record, and identifying a second private key based on a second card record ID for the second card record, and
generating the digital signature includes signing at least one data field of the second card record with the second private key.

10. A computer-implemented method comprising:
storing, in a storage device of a card server, a card data store that stores a set of card records, wherein each card record includes a card record identifier (ID) and one or more data fields; and
storing, in the storage device, a key data store that stores a plurality of private keys, wherein each private key is associated with one or more card record IDs;
receiving, via a network communication device of the card server, a card request from a mobile computing device, wherein:
the card request comprises a search query with one or more search terms,
the card request includes contextual data from the mobile computing device, and
the contextual data includes at least one of (i) application data associated with native applications that are installed and execute on the mobile computing device and (ii) a current location of the mobile computing device;

selecting a card record from the set of card records based on the one or more search terms in the search query;
retrieving, by the card server, at least one data field from the selected card record;
identifying, by the card server, a private key in the key data store based on the card record ID of the selected card record;
generating, at the card server, a digital signature by signing the at least one data field retrieved from the selected card record with the identified private key;
generating, at the card server, a card object that includes the digital signature and the at least one data field from the selected card record; and
transmitting, via the network communication device, the card object to the mobile computing device.

11. The computer-implemented method of claim 10 , wherein identifying the private key includes:
querying the key data store with the card record ID of the selected card record, and
receiving the private key associated with the card record ID of the selected card record.

12. The computer-implemented method of claim 10 , wherein generating the digital signature includes:
generating a hash of the one or more data fields retrieved from the selected card record, and
signing the hash with the identified private key.

13. The computer-implemented method of claim 10 , wherein:
the at least one data field includes an application function ID that identifies a function of a native application that is installed on the mobile computing device, and
generating the digital signature includes signing the application function ID with the private key or signing a hash of the application function ID with the private key.

14. The computer-implemented method of claim 10 , wherein:
the key data store further stores a plurality of certificates,
each certificate includes a public key that is associated with a private key of the plurality of private keys, and
the card object includes the certificate that corresponds to the identified private key.

15. The computer-implemented method of claim 10 , wherein:
selecting the card record includes selecting a first card record and selecting a second card record,
identifying the private key includes (i) identifying a first private key based on a first card record ID for the first card record and (ii) identifying a second private key based on a second card record ID for the second card record, and
generating the digital

Assignees

• Samsung Electronics Co Ltd

Inventors

• Reed Russel
• Glover Eric
• Barrientos Joseph

Classifications

• G06F21/64 Primary

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• H04B1/40

  Circuits · CPC title

• H04L63/0823

  using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title