BUSINESS METHOD INCLUDING CHALLENGE-RESPONSE SYSTEM TO SECURELY AUTHENTICATE SOFTWARE APPLICATION PROGRAM INTERFACES (APIs)

Abstract

A system for securely authenticating software Application Program Interfaces (APIs) includes a handshake protocol that is provided to validate whether the parties involved are licensed to use the system which includes rights to Intellectual Property (IP) and corresponding obligations. The handshake is a Challenge-Response protocol that includes several steps. First, a Claimant sends a request to a Verifier requesting access to a function through an API. The Verifier reacts to the request by outputting a Challenge that is sent to the Claimant. The Challenge is also retained by the Verifier for use in its internal calculation to verify the Claimant's response. The Claimant next processes the Challenge using components under the license, known as Hook IP, and issues a Response to the Verifier. The Verifier compares the possibly-correct Candidate Response from the Claimant to the known-correct Target Response and if a match occurs the Verifier allows the Claimant access to the API.

Description

BACKGROUND CROSS REFERENCE TO RELATED APPLICATIONS[0001]This Application claims priority under 35 U.S.C. §119(e) from earlier filed U.S. Provisional Application Ser. Nos. 61 / 719,923 and 61 / 719,928, both filed on Oct. 29, 2012, and both incorporated herein by reference in their entirety.BACKGROUND[0002]1. Technical Field[0003]The present invention relates to secure authentication of access to software capabilities through Application Program Interfaces (APIs). In particular, the present invention relates to the use of a regime to enable software API usage and authentication using a concept known as Hook IP.[0004]2. Related ArtI. Hook IP—General Definition[0005]Hook IP provides a way often to enable access to some patented technology, often as part of a trust establishment mechanism. This means that anyone wanting to implement a software function or API such as Digital Rights Management (DRM) must do so in a way that will be covered by certain “Hook IP” patents. A condition of obtaini...

AI Technical Summary

Benefits of technology

The technical effect of this patent text is to improve the efficiency and accuracy of infrared temperature measurement for non-contact type thermometers, especially for small measurement targets.

Problems solved by technology

Each Hook IP solution is driven by a technical problem.

Problem1 is the secure transfer problem, or the need to provide encryption necessary to protect some Asset.

Trade Secrets can, however, be legally overcome by a party's reverse engineering, which nullifies their enforcement.

The Solution1 regime, without patent rights for enforcement, has very little survivability in a competitive world, and can be substantially ineffective in protecting the Asset.

For a Licensing Entity choosing to use Solution2, there is an uncertain multi-year delay period where the Licensing Entity does not know if it can effectively enforce its control.

The enforcement utility of EPT, however, is confined to the grant period before the patents expire.

For the EPT to be valid at the time of the Licensing Entity's decision to use it, since the patent period of 20 years begins at filing, the patent probably has been granted for some years, leaving an average of only perhaps 8-12 years remaining Once the EPT patents expire, Solution3 has the negative characteristics of Solution1 above, or worse since some copyright or trade secret protection may remain in Solution1, and it will be ineffective in protecting the Asset the Licensing Entity seeks.

Solution3 can therefore have a short useful lifespan.

Solution2 is highly speculative and has limited confident business control for the Licensing Entity until the PPT grant.

Solution1 offers minimal utility with no patent protection available.

Images