Application License Verification
AssigneeGoogle Inc.
InventorDaniel Abram Galpin
Life of this patent
Estimating the term…
Abstract
An application may provide an application identifier to a client as part of a validation request. The client may request a validation token from a server using the application identifier and a user token provided by the client. The server may send a validation token to the client which, in turn, may send the validation token to the application. The application may establish a secure connection to the server and present the validation token to the server as part of a validation request. The server may validate the application in response to the validation request. The server's response may indicate that the application or content contained in the application is licensed.
Claims25
A method comprising:
- sending, from an application to a client, an application identifier and a key, wherein the client utilizes the application identifier, the key and a user token to obtain a validation token from a server, the validation token indicating that a first validation has been performed by the server comprising a comparison of the application identifier and the key to values stored in a database accessible by the server;
- receiving, by the application from the client, the validation token;
- establishing, from the application, an encrypted connection to the server using the validation token and the key;
- and
- receiving, by the application, a validation response from the server indicting that a second validation has been performed by the server, the second validation comprising a determination that the encrypted connection was established with the key and a determination that the validation token has not expired.
A method, comprising:
- receiving, by a server, a first request for a validation token from a client, the first request comprising a user token, an application identifier, and a key, wherein the application identifier and the key are received by the client from an application executing on the same device as the client;
- determining, by the server, that the first request is valid by comparing the application identifier, the key, and the user token against a server database;
- providing, by the server, a validation token to the client upon the determination that the first request is valid;
- receiving, by the server, a second request to validate the application via an encrypted connection with the application, the encrypted connection established using the validation token and the key;
- determining, by the server, that the second request is valid by determining the encrypted connection was established with the key and by determining that the validation token has not expired;
- and
- providing a response to the application indicating that the second request is valid.
17-30. (canceled)
A system, comprising:
- a mobile device configured to execute a client and an application;
- and
- wherein the client is configured to:
- receive an application identifier and a key from the application;
- request, from a server, a validation token, wherein the request comprises a user token, the application identifier, and the key;
- receive the validation token from the server indicating that a the server has compared the user token, the key, and the application identifier to values stored in a database accessible by the server;
- and
- wherein the application is configured to:
- provide the application identifier and the key to the client;
- establish an encrypted connection to the server using the validation token and the key;
- and
- receive a validation response from the server indicating that the encrypted connection was established with the key and that the validation token has not expired.
Dependencies are inferred from the claim text.