Containerized Application Startup Verification for Authorized Host Execution

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Container technologies facilitate unauthorized copying and stealing of applications, leading to security issues and unprotected usage.

Innovation Solution

A method and apparatus for running applications in containers that involve determining host information and verifying it against predetermined conditions, including device fingerprint, image, and authorization validity, ensuring only authorized hosts can run the applications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If container technology is used to run applications, then application deployment convenience and flexibility are improved, but application security and protection are worsened due to easy copying and unauthorized use

Engineering Contradiction:
Improveapplication deployment convenienceVSAvoidapplication security
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements verification of host information (device fingerprint, authorization validity, container quantity) before allowing the container to start. This preliminary verification action ensures that only authorized hosts can run the application, preventing unauthorized copying and use while maintaining the container deployment model. The verification result determines whether the container startup is permitted, thus resolving the security concern before execution begins.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If verification mechanisms are added to prevent unauthorized copying, then application security is improved, but system complexity and overhead are worsened

Engineering Contradiction:
Improveapplication securityVSAvoidverification system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The verification mechanism is segmented into multiple independent sub-conditions: device fingerprint verification, authorization validity period verification, and container quantity verification. Each sub-condition is checked separately, and the overall verification result is determined by combining these independent checks. This segmentation makes the complex verification process more manageable and modular, reducing system complexity while maintaining comprehensive security coverage.

Inventive Principle:
Principle #1Segmentation

3Measurement precision

If multiple verification conditions are checked, then authorization accuracy is improved, but verification time and processing overhead are worsened

Engineering Contradiction:
Improveauthorization accuracyVSAvoidverification time
Core Design Contradiction:
Measurement precisionVSLoss of time

Solution Approach 1:

The patent checks multiple verification conditions (device fingerprint, authorization validity, container quantity) to ensure accurate authorization determination. By performing these comprehensive checks, the system achieves high authorization accuracy to prevent unauthorized use. The multiple conditions work together to provide thorough verification, ensuring that only properly authorized hosts can run the application despite the increased processing time.

Inventive Principle:
Principle #16Partial or excessive action

Data Source

PatentUS20250272148A1Method of running application, eletronic device and storage medium
Publication Date: 2025.08.28 BEIJING BOE TECH DEV CO LTD
  • US20250272148A1 patent drawing
  • US20250272148A1 patent drawing
  • US20250272148A1 patent drawing

AI summary

A method of running an application, an electronic device and a storage medium are provided. The method includes determining host information related to a host; determining whether the host information meets a predetermined condition to obtain a verification result of a container to be started in the host; and starting the container, in response to detecting that the verification result is a pass, so as to run the application in the container.