Secure Extensibility Model for API Trust Assessment

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Users face challenges in distinguishing trustworthy from malicious third-party extensibility modules that access application program interfaces (APIs) in software applications, leading to potential harm from untrustworthy extensions.

Innovation Solution

A secure extensibility access model is implemented to authenticate third-party products by establishing trustworthiness based on various trust indicia, such as identity and reputation, to determine if an extensibility module should be granted access to APIs, with differential access levels and quarantine options.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If APIs are made openly available to anyone, then extensibility and functionality are improved, but security and trustworthiness deteriorate

Engineering Contradiction:

ImproveextensibilityVSAvoidtrustworthiness

Core Design Contradiction:

Adaptability or versatilityVSReliability

Solution Approach 1:

The patent implements differential access control where different levels of API access are granted based on trustworthiness assessment. Trusted extensibility modules receive full API access while untrusted modules receive limited or no access. This local quality differentiation resolves the contradiction by allowing extensibility for trusted parties while maintaining security against untrusted parties.

Inventive Principle:

Principle #3Local quality

Solution Approach 2:

The patent introduces an intermediary trust assessment mechanism that evaluates extensibility modules before granting API access. This intermediary layer (trust assessment system) mediates between the open API interface and the protected host application, resolving the contradiction by filtering access based on trustworthiness while maintaining overall system openness.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If trust assessment mechanisms are implemented, then security is improved, but system complexity increases

Engineering Contradiction:

ImprovesecurityVSAvoidsystem complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent performs trust assessment actions preliminarily, before extensibility modules are allowed to execute or access APIs. By evaluating trustworthiness in advance (checking digital signatures, publisher verification, user permissions), the system establishes security controls beforehand, reducing the need for complex runtime security mechanisms.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent segments the API access control into distinct trust levels and categories. Instead of a single complex permission system, the trust assessment is divided into multiple independent checks (digital signature validation, publisher trust verification, user-granted permissions). This segmentation simplifies the overall system by breaking down complex security into manageable, independent components.

Inventive Principle:

Principle #1Segmentation

Data Source

PatentUS7730539B2Authenticating third party products via a secure extensibility model

Publication Date: 2010.06.01 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

Secure extensibility access to application program interfaces (APIs) is described. Techniques are described in which trust indicia are used determine relative trustworthiness of an extensibility module attempting to access of APIs of an application module. Access to APIs of the application module is managed based upon trustworthiness of the extensibility module.