Methods and Systems for Upgrade and Synchronization of Securely Installed Applications on a Computing Device

• US 20110010699A1
• Filed: 04/08/2010
• Published: 01/13/2011
• Est. Priority Date: 07/09/2009
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: De Atley, Dallas, Cooper, Simon
• Granted Patent: US 8,849,717 B2
• Time in Patent Office: Days
• US Class Current: 717/169
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 2221/2111 Location-sensitive, e.g. geographical location, GPS
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/1095 Replication or mirroring of data, e.g. scheduling or transport for data synchronisation between network nodes
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys

Abstract

Embodiments of the present disclosure provide for upgrades and synchronization of applications installed on a device, such as a mobile device. In one embodiment, a device may include applications purchased and downloaded via a content management system. The device maintains a list or database of applications that are authorized for each device. This list is also replicated in a remote cache that is maintained by an archive host. The device may then synchronize and upgrade these applications across multiple platforms, such as one or more computers that can be coupled to the device or the archive host. The archive host allows for files of the application be provided back to the device. Upon installation, the device can then confirm the authorization and identity of the newly installed application.

Claims

1. A method of installing an application installed on a device, said method comprising:

receiving a request to install an application that has been authorized for the device and installed in a first partition in storage of the device;

retrieving, from an archive, a package of files for the application;

installing the package for the application in a second partition of storage of the device in a container having an identifier that is previously unknown to the program code; and

authorizing again the application installed in the second partition.

2. The method of claim 1, wherein receiving the request to install the application comprises receiving a request to upgrade the application.

3. The method of claim 1, further comprising installing the application on an additional device based on whether the application was authorized for the device.

4. The method of claim 1, wherein authorizing again the application comprises verifying a digital signature of the application.

5. The method of claim 1, wherein retrieving the package comprises retrieving a package of files comprising only data used by the application.

6. The method of claim 1, wherein retrieving the package comprises retrieving a package of files comprising data and documents used by the application.

7. The method of claim 1, wherein retrieving the package comprises retrieving a package of files comprising program code, data, and documents used by the application.

8. A mobile device configured to securely install applications, said device comprising:

at least one storage having a plurality of partitions; and

a processor configured to receive a request to install an application that has been authorized for the device and installed in a first partition in storage of the device, retrieve, from an archive, a package of files for the application, install the files for the application in a second partition of storage of the device in a container having an identifier that is previously unknown to the program code, and authorize again the application installed in the second partition.

9. The device of claim 8, wherein the processor is configured to receive a request to upgrade the application.

10. The device of claim 8, wherein the processor is further configured to request installation of the application on an additional device based on whether the application was authorized for the device.

11. The device of claim 8, wherein the processor is configured to verify a digital signature of the application.

12. The device of claim 8, wherein the processor is configured to retrieve a package of files comprising only data used by the application.

13. The device of claim 8, wherein the processor is configured to retrieve a package of files comprising data and documents used by the application.

14. The device of claim 8, wherein the processor is configured to retrieve a package of files comprising program code, data, and documents used by the application.

15. A method performed by a device, comprising:

receiving an application at the device via a download from a network;

causing authentication and/or authorization information pertaining to said application to be sent to a host for archiving said application;

receiving installation information for said application from said host in response to a need to restore or upgrade said application;

installing said application on said device so as to cause said application to be operable on said device.

16. The method of claim 15 wherein said network is interposed between said device and said host.

17. The method of claim 16 wherein said host is a component of an on-line media store.

18. The method of claim 15 wherein said installation information includes program code of said application.

19. The method of claim 15 wherein said authentication and/or authorization information includes program code of said application.

20. The method of claim 15 further comprising:

receiving said installation information at a second device, said device and said second device associated with a same entity.

21. A machine readable medium containing program code that when processed by a digital processing unit of a device causes a method to be performed by that device, said method comprising:

receiving an application at the device via a download from a network;

causing authentication and/or authorization information pertaining to said application to be sent to a host for archiving said application;

receiving installation information for said application from said host in response to a need to restore or upgrade said application;

installing said application on said device so as to cause said application to be operable on said device.

22. The machine readable medium of claim 21 wherein said network is interposed between said device and said host.

23. The machine readable medium of claim 22 wherein said host is a component of an on-line media store.

24. The machine readable medium of claim 21 wherein said installation information includes program code of said application.

25. The machine readable medium of claim 21 wherein said authentication and/or authorization information includes program code of said application.

26. A method, comprising:

receiving authentication and/or authorization information pertaining to an application for a device, said application having already been downloaded to said device;

verifying said authentication and/or authorization information is correct;

reflecting in an archive that said application is installed on said device; and

,

sending installation information to said device to cause said application to be operable on said device.

27. The method of claim 26 wherein said method is performed by an on-line media store.

28. The method of claim 26 wherein said installation information includes program code of said application.

29. The method of claim 26 wherein said authentication and/or authorization information includes program code of said application.

30. The method of claim 26 further comprising:

sending said installation information to a second device, said device and said second device associated with a same entity.

31. A machine readable medium containing program code that when processed by a digital processing unit of a host causes a method to be performed by that host, said method comprising:

receiving authentication and/or authorization information pertaining to an application for a device, said application having already been downloaded to said device;

verifying said authentication and/or authorization information is correct;

reflecting in an archive that said application is installed on said device; and

,

sending installation information to said device to cause said application to be operable on said device.

32. The machine readable medium of claim 31 wherein said method is performed by an on-line media store.

33. The machine readable medium of claim 31 wherein said installation information includes program code of said application.

34. The machine readable medium of claim 31 wherein said authentication and/or authorization information includes program code of said application.

35. The machine readable medium of claim 31 wherein said method further comprises:

sending said installation information to a second device, said device and said second device associated with a same entity.

36. A device having a processing unit and program code stored on a storage device of said device, said program code to perform a method when executed by said processing unit, said method, comprising:

receiving an application at the device via a download from a network;

causing authentication and/or authorization information pertaining to said application to be sent to a host for archiving said application;

receiving installation information for said application from said host in response to a need to restore or upgrade said application;

installing said application on said device so as to cause said application to be operable on said device.

37. The device of claim 36 wherein said network is interposed between said device and said host.

38. The device of claim 37 wherein said host is a component of an on-line media store.

39. The device of claim 36 wherein said installation information includes program code of said application.

40. The device of claim 36 wherein said authentication and/or authorization information includes program code of said application.

41. A server having a processing unit and program code stored on a storage device of said server, said program code to perform a method of a host that is implemented on said server when executed by said processing unit, said method, comprising:

receiving authentication and/or authorization information pertaining to an application for a device, said application having already been downloaded to said device;

verifying said authentication and/or authorization information is correct;

reflecting in an archive that said application is installed on said device; and

,

sending installation information to said device to cause said application to be operable on said device.

42. The server of claim 41 wherein said method is performed by an on-line media store.

43. The server of claim 41 wherein said installation information includes program code of said application.

44. The server of claim 41 wherein said authentication and/or authorization information includes program code of said application.

45. The server of claim 41 wherein said method further comprises:

sending said installation information to a second device, said device and said second device associated with a same entity.