# US 7,610,273 B2 · Application identity and rating service

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 7,610,273 B2
- Document ID: US7610273B2
- Status: Granted
- Kind: B2
- Application number: 11/085,614
- Filed: 2005-03-22
- Published: 2006-09-28
- Granted: 2009-10-27
- Earliest claimed: 2005-03-22
- Assignees: Microsoft Corporation
- Inventors: Ashok Kuppusamy; Alexander G. Gounares; Elissa E. S. Murphy; Raymond E. Endres
- Web page: https://patentgrep.com/patent/US7610273B2

## CPC

- H04N 21/443: OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
- G06F 21/51: at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
- H04N 7/17318: {Direct or substantially direct transmission and handling of requests}
- H04N 21/252: {Processing of multiple end-users' preferences to derive collaborative data}
- H04N 21/4756: {for rating content, e.g. scoring a recommended movie}
- H04N 21/6581: {Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application}
- G06F 21/16: Program or content traceability, e.g. by watermarking
- Y10S 707/99933: Query processing, i.e. searching
- Y10S 707/99939: Privileged access
- H04N: PICTORIAL COMMUNICATION, e.g. TELEVISION
- G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N)
- Y10S: TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS

## Abstract

Authorization of a file on a computer is provided for using a cryptographic hash of the file or other identifier to find one or more content ratings. Content ratings, coupled with source and publisher ratings, are used to evaluate the file against an authorization policy set up by a user, manufacturer, or corporate IT department. Files which are suspect due to low ratings are not authorized to run on the computer. Files for which little information can be found are left to the user to decide whether to authorize. Rating services provide aggregated content ratings based on editorial or user reviews, and index their searchable ratings based on cryptographic hashes of the files being evaluated. Rating services provide allow lists and exclude lists or may provide individual responses to queries containing cryptographic hashes of files.

## Claims

### Claim 1

A computer-implemented method for authorizing a first file containing computer-executable code, the method comprising:
establishing an authorization policy;
determining a first content-dependent identifier for the first file, wherein the content of the first file includes executable code and the first file is an update or a patch for a second file;
determining a second content-dependent identifier of the second file, the second content-dependent identifier being different from the first content-dependent identifier for the first file;
determining first publisher information for the first file;
determining second publisher information for the second file;
searching for evidence about the first file, wherein when the first publisher information and the second publisher information indicate a same publisher published the first file and the second file, and when the same publisher is trusted, wherein searching comprises a search of one or more rating services based on the second content-dependent identifier;
when the evidence satisfies a condition in accordance with the authorization policy, displaying at least a portion of the evidence, the portion including at least one or more ratings from the one or more rating services and requesting an input from the user;
determining that the first file is unauthorized based on the evidence from the search using the authorization policy and based on the input from the user; and
reducing ability of the unauthorized first file to execute.

### Claim 2 (depends on 1)

The method of claim 1, wherein the authorization policy is a default authorization policy provided by a manufacturer or software provider.

### Claim 3 (depends on 1)

The method of claim 1, wherein searching for evidence comprises searching an allow list and an exclude list.

### Claim 4 (depends on 1)

The method of claim 1, wherein the search is based on information about a publisher of the second file.

### Claim 5 (depends on 1)

The method of claim 1, wherein the search is based on a source address of the second file.

### Claim 6 (depends on 5)

The method of claim 5, wherein the search is based on at least a portion of an IP address.

### Claim 7 (depends on 5)

The method of claim 5, wherein the search is based on at least a portion of a domain name.

### Claim 8 (depends on 1)

The method of claim 1, wherein the first content-dependent identifier comprises a cryptographic hash of the contents of the first file.

### Claim 9 (depends on 1)

The method of claim 1, further comprising:
responsive to determining that the first file is unauthorized, redetermining that the first file is unauthorized based on the authorization policy using additional evidence about the unauthorized first file.

### Claim 10

A system for authorizing a first file containing computer-executable code, the system comprising:
a storage element, configured to store the first file and information about the first file; and
a processor coupled to the storage element and configured
to determine a first content-dependent identifier for the first file, wherein the content of the first file includes executable code and the first file is an update or a patch for a second file,
to determine a second content-dependent identifier of the second file, the second content-dependent identifier being different from the first content-dependent identifier for the first file,
to determine first publisher information for the first file,
to determine second publisher information for the second file,
to search, when the first publisher information and the second publisher information indicate a same publisher published the first file and the second file, and when the same publisher is trusted, a collection of evidence for information about the first file using the second content-dependent identifier, the collection including data from one or more rating services,
to, when the collection of evidence satisfies a condition in accordance with an authorization policy, display at least a portion of the collection of evidence, the portion including at least one or more ratings from the one or more rating services and request an input from the user, and
to determine whether the first file is authorized based on search results and the authorization policy and the input from the user.

### Claim 11 (depends on 10)

The system of claim 10, wherein the second content-dependent identifier is a cryptographic hash of the contents of the second file.

### Claim 12 (depends on 10)

The system of claim 10, wherein the processor is further configured to store information about a publisher of the first file in the storage element, wherein the publisher is determined based on a public key associated with the first file.

### Claim 13 (depends on 1)

The method of claim 1, wherein said determining that the first file is unauthorized further comprises
querying a user as to whether the first file is unauthorized; and
receiving a user input indicating that the first file is unauthorized.

### Claim 14 (depends on 10)

The system of claim 10, wherein the processor is further configured to install, execute or store the first file if the first file is authorized, and to prevent installation, execution or storage of the first file if the first file is unauthorized.