Application Activation via Resident Intermediary Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for activating applications from a browser to a dedicated application lack assurance against fraudulent installations and rely on OS functions, which can lead to activation of tampered or unauthorized applications.
Innovation Solution
An information processing apparatus and method that uses a resident application to install and activate a target application based on unique identification information, such as a hash value, without relying on OS functions, ensuring verification of the application's authenticity before activation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If OS functions are used to activate applications from browser to dedicated application, then the activation process is simplified, but the system becomes vulnerable to fraudulent installations and tampered applications
Solution Approach 1:
The patent introduces a resident application as an intermediary between the browser and the target application. The resident application receives the deep link from the browser, verifies the target application's authenticity using identification information, and then activates it. This intermediary layer prevents direct activation of potentially fraudulent applications while maintaining user convenience.
Solution Approach 2:
The system performs preliminary verification of the target application's authenticity before activation. The resident application checks the identification information (such as hash values or digital signatures) of the target application against stored reference information. This preliminary action ensures that only authenticated applications are activated, preventing fraudulent installations.
2Productivity
If deep link is used for direct transition to specific application screen, then user guidance efficiency is improved, but security against unauthorized applications is compromised
Solution Approach 1:
The resident application serves as a mediator that intercepts deep links before they directly activate target applications. It extracts identification information from the deep link, verifies authenticity, and then proceeds with activation only if verification succeeds. This maintains the efficiency of deep links while adding security validation.
Solution Approach 2:
The system implements a feedback mechanism where the resident application verifies the target application's identification information and provides feedback on whether activation should proceed. Based on the verification result, the system either activates the application or blocks activation, preventing unauthorized applications from being launched.
3Speed
If application activation is performed without verification, then the activation speed is increased, but the risk of activating tampered applications increases
Solution Approach 1:
The verification of application authenticity is performed as a preliminary action before activation. The resident application checks the identification information (hash values, digital signatures) of the target application against stored reference data. This preliminary verification adds minimal overhead while effectively preventing tampered applications from being activated.
Solution Approach 2:
The patent replaces the traditional OS-based application activation mechanism with a verification-based system. Instead of directly activating applications through OS functions, the system uses cryptographic verification methods (hash comparison or digital signature validation) to authenticate applications before activation, substituting mechanical trust with verifiable authentication.
Data Source
AI summary
At least one processor cause an information processing apparatus to act as the following units. A first installation unit installs a first application. A second installation unit installs a second application for activating the first application. An acquisition unit acquires identification information unique to the first application installed by the first installation unit. An acceptance unit accepts a request for activation of the first application which uses a deep link. A first determination unit, in a case where the acceptance unit accepts a request for activation, determines whether or not to activate, by the second application, the first application by using the identification information acquired by the acquisition unit. An activation unit activates, by the second application, the first application based on a result of the determination by the first determination unit.