Authenticating or Controlling Software Application on End User Device

Apparatus for authenticating or controlling a software application on an end user device, the apparatus comprising processor circuitry and a storage unit for storing instructions executable by the processor circuitry, whereby the apparatus is operative to:

• a) select a code signing certificate related to an application developer;
• b) select one or more clean files from a database of known clean files signed with the selected code signing certificate;
• c) generate an application developer identification for the application developer on the basis of data extracted from the selected one or more clean files;
• d) add the generated application developer identification and the related code signing certificate to a database of trusted application developer certificates;
• e) compare a signature related to a software application to be installed on an end user device with the respective application developer identification and the code signing certificate for authenticating said signature;
• and
• f) in the event that authentication is successful, performing authentication of the software application code and/or controlling installation and/or operation of the software application.