Mobile App Authentication via Digital Fingerprint Comparison

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

There is a risk of downloading non-genuine or contaminated mobile applications from unverified sources, as invitation links received through SMS, MMS, email, or mobile messaging services may be malicious, compromising the security of mobile devices.

Innovation Solution

A system and method for authenticating mobile applications by registering and comparing application details with a central registry, generating notifications to indicate authenticity, and preventing the installation of unverified applications.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If mobile applications are distributed through private application stores or downloadable HTTP sites, then application accessibility and customization are improved, but the risk of downloading non-genuine or contaminated applications increases

Engineering Contradiction:
Improveapplication distribution flexibilityVSAvoidapplication authenticity
Core Design Contradiction:
Adaptability or versatilityVSReliability

Solution Approach 1:

The system performs preliminary verification of application authenticity by comparing digital fingerprints before installation. The verification server pre-computes and stores digital fingerprints of legitimate applications, and the mobile device checks the fingerprint of received applications against the stored reference before allowing installation, preventing contamination before it occurs.

Inventive Principle:
Principle #10Preliminary action

Solution Approach 2:

A verification server acts as an intermediary between the application distribution source and the mobile device. This intermediary service receives application details from the distribution site, compares them with stored reference data, and returns authenticity verification results to the mobile device, enabling trust in third-party distribution channels.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If application verification is performed through central registry comparison, then application authenticity is improved, but system complexity increases

Engineering Contradiction:
Improveapplication authenticityVSAvoidverification system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent extracts only the essential verification information (digital fingerprints) from the complex application package. Instead of verifying entire applications, the system compares condensed fingerprint data that captures unique application characteristics, significantly reducing verification complexity while maintaining authenticity assurance.

Inventive Principle:
Principle #2Taking out (Extraction)

Solution Approach 2:

The system creates and stores digital fingerprint copies of legitimate applications in advance. These fingerprint copies serve as reference data that can be quickly compared against received applications without requiring complex analysis of the actual application code, simplifying the verification process.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS9762657B2Authentication of mobile applications
Publication Date: 2017.09.12 WORKDAY INC
  • US9762657B2 patent drawing
  • US9762657B2 patent drawing
  • US9762657B2 patent drawing

AI summary

Embodiments of the present invention provide a system, method and computer program product for authenticating a mobile application. According to one embodiment the method comprises registering, by a computer processor of a computer system, the mobile application, wherein the registration includes receiving and storing information associated with the mobile application, receiving, by the computer processor, one or more application details associated with the mobile application from a computing device, comparing, by the computer processor, the received one or more application details associated with the mobile application with the stored information associated with the mobile application, generating, by the computer processor, a notification based on the comparison to indicate authenticity of the mobile application and sending the notification to the computing device.