US 11,768,930 B2Granted

Application authenticity verification in digital distribution systems

AssigneeAtlassian Pty Ltd.

InventorJerry Cheng

Life of this patent

Estimating the term…

Loading patent…

Abstract

Techniques are provided for client application authentication and include receiving a request to authenticate an application and, based on the received request to authenticate the application, sending a request to perform a push communication, including a short-term shared key, to a digital distribution system, wherein the digital distribution system is a distribution source of the application. The digital distribution system attempts to send the push communication including the short-term shared key to the application. The techniques may proceed by receiving a request for resources from the provider client application and determining whether the application has the short-term shared key. When it is determined that the application has provided the short-term shared key, the requested resources to the application may be provided, otherwise, the requested resources may be denied.

Claims20

Dependent claims

A distribution server, comprising:

a plurality of memories configured to store instructions;
and
a plurality of processors coupled with the plurality of memories, the plurality of processors is configured to execute the instructions, which causes one or more of the plurality of processors to perform operations comprising:
in response to a request to download an application on a client device:
transmitting the application to the client device for downloading and installing the application on the client device;
and
storing first identification information for the client device at a distribution system, the first identification information comprising a record of the transmission of the application to the client device including a client device identifier and an authenticated application identifier;
receiving a request to distribute a key to the client device in response to a request for authenticating the application installed on the client device, the request received from an application server system that provides application services for the application installed on the client device and comprising second identification information received from the client device including a device identifier and an application identifier;
and
in response to the received request to distribute the key, comparing the second identification information with the stored first identification information including the client device identifier and the authenticated application identifier corresponding to the previous transmission of the application;
and
in response to a determination that the second identification information corresponds to the first identification information with respect to the record of the transmission of the application, transmitting the key to the client device, the key configured for use by the application installed on the client device to access the application services provided by the application server system.

9 more elements

An application provider server, comprising:

a plurality of memories configured to store instructions;
and
a plurality of processors coupled with the plurality of memories, the plurality of processors is configured to execute the instructions, which causes one or more of the plurality of processors to perform operations comprising:
uploading an application to a distribution system that is configured to transmit the application for downloading on a client device and store first identification information for the client device, the first identification information comprising information that uniquely identifies the client device and the transmitted application;
subsequent to the application being downloaded by the client device from the distribution system, receiving a request to authenticate the application;
and
in response to the received request to authenticate the application, sending a request to the distribution system to transmit a key to the client device for authenticating the application and the client device, the request comprising second identification information received from the client device;
receiving, from the application operating on the client device, a request to access a network resource provided by the application provider server, the request comprising the key received by the client device from the distribution system, wherein the key is received in response to a determination by the distribution system that the distribution system previously transmitted the application to the client device based on using the second information to access stored first information;
and
determining whether to grant access to the network resource using the application from the client device based on verification of the key received from the client device.

7 more elements

A method, comprising:

transmitting, from an application provider server to a distribution server, an application for installation on a client device, wherein the distribution server is configured to store first identification information for the client device, the first identification information comprising information that uniquely identifies the client device and the application;
subsequent to an installation of the application on the client device, receiving, at the application provider server, a request to authenticate the application;
in response to the received request to authenticate the application, sending, from the application provider server to the distribution server, a request to distribute a key to the client device, the request comprising second identification information received from the client device;
receiving, at the application provider server from the client device, a request to access a network resource provided by the application provider server, the request comprising the key transmitted to the client device from the distribution server, the key transmitted to the client device in response a request from the application provider server to the distribution server to cause the key to be sent to the client device from the distribution server, wherein the key is transmitted in response to a determination by the application provider server that the application provider server previously transmitted the application to the client device based on using the second information to access stored first information;
and
determining, by the application provider server, whether to grant access to the network resource using the application from the client device based on verification of the key received from the client device.

3 more elements

Dependencies are inferred from the claim text.

Facts

Application: 17/315,069Filed 7 May 2021 · continuation
Priority: 17 Oct 2017
Published: US 2021/0279323 A19 Sep 2021
Granted: 26 Sep 2023
Term ends: Not estimatedThe source records don’t support an estimate.

Classification6 codes

G06F 21/44
Authentication, i.e. establishing the identity or authorisation of security principals: program or device authentication
H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
G06F 21/51
Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems: at application…
H04L 63/083
For authentication of entities: using passwords