# US 10,484,356 B2 · Computer system authentication using security indicator > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,484,356 B2 - Document ID: US10484356B2 - Status: Granted - Kind: B2 - Application number: 15/626,850 - Filed: 2017-06-19 - Published: 2017-10-05 - Granted: 2019-11-19 - Earliest claimed: 2006-06-21 - Assignees: eBay Inc. - Applicants: eBay Inc. - Inventors: German Scipioni; Avery Kadison; Naseem Hakim - Web page: https://patentgrep.com/patent/US10484356B2 ## CPC - H04L 63/08: {for authentication of entities (cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32)} - G06F 21/31: User authentication - G06F 21/44: Program or device authentication - G06F 2221/031: Protect user input by software means - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract A method to authenticate an application on a first computer system at a second computer system is disclosed. The first computer system receives an authentication bitmap from a second computer system identifying locations in an application. The first computer system extracts portions of the application based on the identified locations in the bitmap. A hashing algorithm is applied by the first computer system to the extracted portions producing a resultant hash. The resultant hash is transmitted to the second computer system for authentication of the application. ## Claims ### Claim 1 A method comprising: based on receiving a login input in response to user recognition of a locally stored security indicator at a first computer system, establishing a secured connection between the first computer system and a second computer system; receiving, at the first computer system over the secured connection, an authentication bitmap from the second computer system identifying locations in an application stored on the first computer system; extracting, at the first computer system, portions of the application based on the identified locations in the bitmap, applying, at the first computer system, a hashing algorithm to the extracted portions producing a resultant hash; transmitting the resultant hash to the second computer system, the second computer to authenticate the application using the resultant hash; and in response to an authentication result from the second computer system indicating that the application is authentic based on the resultant hash, transmitting, by the first computer system, the login input to the second computer system over the secured connection. ### Claim 2 (depends on 1) The method of claim 1, further comprising, in response to an authentication result from the second computer system indicating that the application is not authentic, providing a notification that the application is closed due to an invalid authentication. ### Claim 3 (depends on 1) The method of claim 1, further comprising, in response to an authentication result from the second computer system indicating that the application is not authentic, providing a notification that the application is restricted based on one or more invalid authentication attempts. ### Claim 4 (depends on 1) The method of claim 1, further comprising presenting a login user interface (UI) to a user of the first computer system prior to the first computer system establishing the secured connection with the second computer system, the login input being received via the login UI. ### Claim 5 (depends on 4) The method of claim 4, wherein the login UI, includes the locally stored security indicator previously selected by the user, the security indicator remaining unknown to the second computer system. ### Claim 6 (depends on 1) The method of claim 1, further comprising performing a consistency check of the application to determine whether tampering has occurred with the application by performing a checksum of an entirety of the application. ### Claim 7 (depends on 1) The method of claim 1, further comprising performing a consistency check of the application to determine whether tampering has occurred with the application by performing a plurality of checksums at multiple predetermined locations of the application. ### Claim 8 A system comprising: one or more hardware processors; and a memory storing instructions that, when executed by the one or more hardware processors, causes the one or more hardware processors to perform operations comprising: based on receiving a login input in response to user recognition of a locally stored security indicator at a first computer system, establishing a secured connection between the first computer system and a second computer system; receiving, at the first computer system over the secured connection, an authentication bitmap from the second computer system identifying locations in an application stored on the first computer system: extracting, at the first computer system, portions of the application based on the identified locations in the bitmap; applying, at the first computer system, a hashing algorithm to the extracted portions producing a resultant hash; transmitting the resultant hash to the second computer system, the second computer to authenticate the application using the resultant hash; and in response to an authentication result from the second computer system indicating that the application is authentic based on the resultant hash, transmitting, by the first computer system, the login input to the second computer system over the secured connection. ### Claim 9 (depends on 8) The system of claim 8, wherein the operations further comprise, in response to an authentication result from the second computer system indicating that the application is not authentic, providing a notification that the application is closed due to an invalid authentication. ### Claim 10 (depends on 8) The system of claim 8, wherein the operations further comprise, in response to an authentication result from the second computer system indicating that the application is not authentic, providing a notification that the application is restricted based on one or more invalid authentication attempts. ### Claim 11 (depends on 8) The system of claim 8, wherein the operations further comprise presenting a login user interface (UI) to a user of the first computer system prior to the first computer system establishing the secured connection with the second computer system, the login input being received via the login UI. ### Claim 12 (depends on 11) The system of claim 11, wherein the login UI includes the locally stored security indicator previously selected by the user, the security indicator remaining unknown to the second computer system. ### Claim 13 (depends on 8) The system of claim 8, wherein the operations further comprise performing a consistency check of the application to determine whether tampering has occurred with the application by performing a checksum of an entirety of the application. ### Claim 14 (depends on 8) The system of claim 8, wherein the operations further comprise performing a consistency check of the application to determine whether tampering has occurred with the application by performing a plurality of checksums at multiple predetermined locations of the application. ### Claim 15 A machine-readable storage device storing instructions that, when executed by one or more hardware processors of a machine, cause the machine to perform operations comprising: based on receiving a login input in response to user recognition of a locally stored security indicator at a first computer system, establishing a secured connection between the first computer system and a second computer system; receiving, at the first computer system over the secured connection, an authentication bitmap from the second computer system identifying locations in an application stored on the first computer system; extracting, at the first computer system, portions of the application based on the identified locations in the bitmap; applying, at the first computer system, a hashing algorithm to the extracted portions producing a resultant hash; transmitting the resultant hash to the second computer system, the second computer to authenticate the application using the resultant hash; and in response to an authentication result from the second computer system indicating that the application is authentic based on the resultant hash, transmitting, by the first computer system, the login input to the second computer system over the secured connection.