Back to results
US 8,818,897 B1Granted
System and method for validation and enforcement of application security
AssigneeRockstar Consortium US LP
InventorsZenon Slodki, Xiaoding Zhao, Cliff Wichmann
Life of this patent
Estimating the term…
Abstract
A system and method for validation and enforcement of application security, wherein the user credentials and the integrity of a target application are verified before the target application is permitted to execute.
Claims20
A method for data processing system application security, the method comprising:
- receiving, by a client machine, a request to execute an installed first application;
- executing, by the client machine, a second application in response to the request;
- generating, by the second application, a signature for the first application;
- comparing, by the second application, the generated signature with a stored signature;
- based on the comparison:
- receiving, by the second application, user credentials;
- generating, by the second application, an authentication message by combining the user credentials, an application identifier corresponding to the installed first application, and the generated signature;
- and
- encrypting, by the second application, the authentication message;
- transmitting, by the client machine using the second application, the authentication message to a server;
- receiving, by the second application, an authorization from the server that is based on a validation by the server;
- determining, by the second application, validity of the authorization received from the server;
- and
- based on the determination, preventing, by the second application, execution of the installed first application.
11 more elements
A non-transitory computer storage medium storing computer executable instructions that, when executed by a computer, causes the computer to perform the steps comprising:
- receiving, by the computer, a request to execute an installed first application;
- executing, by the computer, a second application in response to the request;
- generating, by the second application, a signature for the first application;
- comparing, by the second application, the generated signature with a stored signature;
- based on the comparison:
- receiving, by the second application, user credentials;
- generating, by the second application, an authentication message by combining the user credentials, an application identifier corresponding to the installed first application, and the generated signature;
- and
- encrypting, by the second application, the authentication message;
- transmitting, by the computer using the second application, the authentication message to a server;
- receiving, by the second application, an authorization from the server that is based on a validation by the server;
- determining, by the second application, validity of the authorization received from the server;
- and
- based on the determination, preventing, by the second application, execution of the installed first application.
11 more elements
A data processing system comprising:
- a processor;
- and
- an accessible non-transitory storage medium storing an executable first application and computer executable instructions that, when executed by the processor, causes the processor to perform the operations comprising:
- receiving, by the processor, a request to execute the first application;
- executing, by the processor, a second application in response to the request;
- generating, by the second application, a signature for the first application;
- comparing, by the second application, the generated signature with a stored signature;
- based on the comparison:
- receiving, by the second application, user credentials;
- generating, by the second application, an authentication message by combining the user credentials, an application identifier corresponding to the first application, and the generated signature;
- and
- encrypting, by the second application, the authentication message;
- transmitting, by the processor using the second application, the authentication message to a server;
- receiving, by the second application, an authorization from the server that is based on a validation by the server;
- determining, by the second application, validity of the authorization received from the server;
- and
- based on the determination, preventing, by the second application, execution of the first application.
14 more elements
Dependencies are inferred from the claim text.