Confirming the identity of integrator applications

• US 10,445,491 B2
• Filed: 11/16/2017
• Issued: 10/15/2019
• Est. Priority Date: 09/19/2013
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: Google LLC (Alphabet Inc.)
• Inventors: Galpin, Michael David, Boekenoogen, Jon Christian, Atwood, Scott Roy, Hamilton, Jeffrey William
• Primary Examiner(s): Pearson, David J
• Application Number:
  US15/815,620
• Publication Number:
  US 20180096131A1
• Time in Patent Office: 698 Days
• CPC Class Codes: G06F 21/44 Program or device authentication
• CPC Class Codes: G06Q 30/0635 Processing of requisition or of purchase orders
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 67/60 Scheduling or organising the servicing of application requests, e.g. requests for application data transmissions using the analysis and optimisation of the required network resources admission control or resource allocation H04L47/70
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807

Abstract

An application service system receives, from a merchant service system, an application program code comprising identifying information. The identifying information is extracted and the application is distributed for operation on a user device. A user interacts with the application, creating an access request that is transmitted to the application service system along with the extracted identifying information. The application service system transmits an access token to the user device comprising the received identifying information. The user device transmits the access token with a service request to the application service system. The application service system compares the identifying information from the access token to the identifying information extracted from the application program code received from the merchant services system. If the identifying information matches, the service request is processed. If the identifying information does not match, the service request is denied and an error message is transmitted to the user device.

Claims

1. A computer-implemented method to verify identities of services making service requests, comprising:

receiving, by one or more computing devices and from a service computing system, service program code;

inserting, by the one or more computing devices in the service program code, identifying information, wherein identifying information enables the system to verify a service request made by a user computing device;

distributing, by the one or more computing devices, the service program code to the user computing device;

receiving, by the one or more computing devices and from the user computing device, the identifying information extracted from the service program code, the service program code being resident on the user computing device, wherein the one or more computing devices are separate from the service system;

transmitting, by the one or more computing devices to the user computing device, an access token comprising the received identifying information extracted from the service program code resident on the user computing device;

receiving, by the one or more computing devices and from the user computing device, the access token and a service request, wherein the service request comprises a request for the service system to perform an action via the one or more computing devices;

determining, by the one or more computing devices, a correspondence between the identifying information from the access token received from the user computing device and the identifying information inserted into the service program code received from the service system; and

in response to determining the correspondence, performing, by the one or more computing devices, the action associated with the service request.

2. The method of claim 1, wherein the service program code comprises computer-readable instructions executable by the user computing device to perform a service.

3. The method of claim 1, wherein determining the correspondence between the identifying information from the access token received from the user computing device and the identifying information inserted into the service program code received from the service computing system comprises detecting a match between the identifying information from the access token and the inserted identifying information.

4. The method of claim 1, wherein the identifying information is required for distribution of the service program code by the one or more computing devices.

5. The method of claim 1, wherein the identifying information comprises one or more of an application identifier, a package name, and a digital signature.

6. The method of claim 1, wherein a service associated with the service program code comprises a service application, a service website, or a shipping service.

7. The method of claim 1, wherein the service request comprises a request for the processing of a financial transaction, a request for shipping information, a request for information from an account of a user maintained by the one or more computing devices, or a request for offers or coupons to be redeemed.

8. The method of claim 1, wherein an access request algorithm on the user computing device is activated in response to the service request being initiated on the user computing device, wherein the access request algorithm identifies and extracts the identifying information from the service program code on the user computing device and transmits the identifying information along with an access request to the one or more computing devices.

9. A computer program product, comprising:

a non-transitory computer-readable medium having computer-executable program instructions embodied thereon that when executed by a computer cause the computer to verify identities of services making service requests, the computer-executable program instructions comprising;

computer-executable program instructions to receive, from a service computing system, service program code;

computer-executable program instructions to insert, in the service program code, identifying information, wherein the identifying information enables the system to verify a service request made by a user computing device;

computer-executable program instructions to distribute the service program code to the user computing device;

computer-executable program instructions to receive an access request from a user computing device, wherein the access request comprises a request for an access token and identifying information extracted from a service program code, and wherein the user computing device extracts the identifying information from service program code resident on the user computing device;

computer-executable program instructions to transmit an access token to the user computing device, wherein the access token comprises the identifying information extracted from the service program code resident on the user computing device;

computer-executable program instructions to receive from the user computing device, a service request, wherein the service request comprises a request to perform an action and the access token; and

computer-executable program instructions to determine a correspondence between the identifying information from the access token received from the user computing device and the identifying information inserted into the service program code associated with the service computing system.

10. The computer program product of claim 9, wherein determining the correspondence between the identifying information from the access token and the identifying information inserted into the service program code comprises detecting a match between the identifying information received from the user computing device and the identifying information inserted into the service system.

11. The computer program product of claim 9, wherein the identifying information is required for distribution of the service program code by the one or more computing devices.

12. The computer program product of claim 9, wherein the identifying information comprises one or more of an application identifier, a package name, and a digital signature.

13. The computer program product of claim 9, wherein a service associated with the service program code comprises a service application, a service website, or a shipping service.

14. The computer program product of claim 9, wherein the service request comprises a request for the processing of a financial transaction, a request for shipping information, a request for information from an account of a user maintained by the one or more computing devices, or a request for offers or coupons to be redeemed.

15. A system for verifying identities of services making service requests, comprising:

a non-transitory storage medium; and

a processor communicatively coupled to the storage medium, wherein the processor executes application code instructions that are stored in the storage medium to cause the system to;

receive, from a service computing system, service program code;

insert, in the service program code, identifying information, wherein the identifying information enables the system to verify a service request made by a user computing device;

distribute the service program code to the user computing device;

receive an access request from the user computing device, wherein the access request comprises a request for an access token and identifying information extracted from the service program code, and wherein the user computing device extracts the identifying information from the service program code resident on the user computing device;

transmit the access token to the user computing device, wherein the access token comprises the received identifying information extracted from the service program code resident on the user computing device;

receive a service request and the access token from the user computing device, wherein the service request comprises a request to perform an action; and

determine a correspondence between the identifying information received from the service program code on the user computing device in the access token and the identifying information inserted into the service program code.

16. The system of claim 15, wherein determining the correspondence between the received identifying information from the access token received from the user computing device and the identifying information inserted into the service program code received from the service computing system comprises detecting a match between the identifying information received from the user computing device and the inserted identifying information.

17. The system of claim 15, wherein the identifying information is required for distribution of the service program code by the one or more computing devices.

18. The system of claim 15, wherein the identifying information comprises one or more of an application identifier, a package name, and a digital signature.

19. The system of claim 15, wherein a service associated with the service program code comprises a service application, a service website, or a shipping service.

20. The system of claim 15, wherein the service request comprises a request for the processing of a financial transaction, a request for shipping information, a request for information from an account of a user maintained by the one or more computing devices, or a request for offers or coupons to be redeemed.