Back to results
US 2014/0230031 A1Published application
Secure Configuration of Mobile Application
AssigneeSap SE
InventorsJuergen Schneider, Paul El Khoury, Sami Lechner
Life of this patent
Estimating the term…
Abstract
Secure configuration of a mobile application (“app”) includes sending the required configuration data for the app to the user's mobile computing device in a communication, for example an email with an attachment. A verification value is included in the attachment to protect the authenticity and integrity of the configuration data. A challenge code is issued to the user (or group of users). The challenge code is used to verify the configuration data.
Claims20
A computer-implemented method of configuring an application program of a mobile computing device, the method comprising:
- establishing a secure network connection between the mobile computing device and a server computer system;
- authenticating a user of the mobile computing device against the server computer system via the secure network connection;
- receiving a configuration request via the secure network connection from the mobile computing device, the configuration request indicative of a user's request for configuring the application program;
- and
- in response to receiving the configuration request:
- generating a challenge code;
- sending the challenge code via the secure network connection to the mobile computing device;
- and
- sending configuration data and a verification value from the server computer system to the mobile computing device either via an additional communication channel that is different from the secure network connection or as a separate communication over the same secure network connection,
- whereby the mobile computing device, in response to receiving the configuration data and the verification value, invokes a configuration program module to:
- prompt the user to enter a challenge code via a user interface;
- verify the configuration data using the challenge code entered by the user and the verification value received via the additional communication channel;
- and
- configure the application program using the configuration data in response to verification of the configuration data.
11 more elements
A server system comprising:
- a computer processor;
- a memory;
- and
- a data store having stored therein computer executable program code, which when executed by the computer processor, causes the computer processor to:
- establish a secure network connection between a mobile computing device and the server computer system;
- authenticate a user of the mobile computing device against the server computer system via the secure network connection;
- receive a configuration request via the secure network connection from the mobile computing device, the configuration request indicative of a user's request for configuring the application program;
- and
- in response to receiving the configuration request:
- generate a challenge code by the server computer system;
- send the challenge code via the secure network connection to the mobile computing device;
- and
- send configuration data and a verification value to the mobile computing device via an additional communication channel that is different from the secure network connection, or as a separate communication over the same secure network connection,
- whereby the mobile computing device, in response to receiving the configuration data and the verification value, invokes a configuration program module to:
- prompt the user to enter a challenge code via a user interface;
- verify the configuration data using the challenge code entered by the user and the verification value received via the additional communication channel;
- and
- configure the application program using the configuration data in response to verification of the configuration data.
15 more elements
A non-transitory computer readable storage medium having stored thereon computer executable code, which when executed by a computer causes the computer to:
- establish a secure network connection between a mobile computing device and the server computer system;
- authenticate a user of the mobile computing device against the server computer system via the secure network connection;
- receive a configuration request via the secure network connection from the mobile computing device, the configuration request indicative of a user's request for configuring the application program;
- and
- in response to receiving the configuration request:
- generate a challenge code by the server computer system;
- send the challenge code via the secure network connection to the mobile computing device;
- and
- send configuration data and a verification value to the mobile computing device via an additional communication channel that is different from the secure network connection, or as a separate communication over the same secure network connection,
- whereby the mobile computing device, in response to receiving the configuration data and the verification value, invokes a configuration program module to:
- prompt the user to enter a challenge code via a user interface;
- verify the configuration data using the challenge code entered by the user and the verification value received via the additional communication channel;
- and
- configure the application program using the configuration data in response to verification of the configuration data.
11 more elements
Dependencies are inferred from the claim text.