System and Method for Third Party Creation of Applications for Mobile Appliances

• US 20110276805A1
• Filed: 04/14/2011
• Published: 11/10/2011
• Est. Priority Date: 04/19/2010
• Status: Active Grant

• Current Assignee: Malikie Innovations Limited (Key Patent Innovations Limited)
• Original Assignee: Ondeego Inc.
• Inventors: Singer, Kenneth Chul, Assenmacher, Holger, Nagpal, Aashin
• Granted Patent: US 9,135,434 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

The creation of an application for any mobile appliance, for example Apple'"'"'s iPhone, requires several elements to be present at compile time. In the Apple example of an enterprise application where an entity wishes to develop applications internally for its staff, two of these elements are the source code and a digital certificate. These must be combined in the compiler so that the application may be properly authorized to run in the appliance. Where the owner of the source code and the owner of the digital certificate are not the same, serious concerns arise because each element must be secured. An intermediating system and method are described that allows each party to cooperate securely through a third party escrow service to produce the complied application whilst leaving no unwanted residue of the independent parts.

Claims

1. A computerized system for remotely compiling a program from two or more source input files, at least one input file being from a different supplier than any other, having a processor, memory, and interface components, the system comprising:

a compiler for compiling a computer program;

means for receiving and storing an encrypted input file from an originating sender; and

a decoder for decoding an encrypted input file enabled upon command from the compiler so that a temporary file of the unencrypted source is created for the compiler to read and deleted when the compilation is complete.

2. The computerized system of claim 1 wherein the decoder decodes the encrypted input file in blocks corresponding to the input buffer size of the compiler so that no other part of the unencrypted source file exists outside the compiler.

3. The computerized system of claim 1 wherein the temporary file is deleted after each pass of the compiler so that the unencrypted file exists only when the compiler is actively reading the file.

4. The computerized system of claim 1 wherein the temporary file is the single line of source code currently in use by the compiler, which line is deleted from memory prior to the request for the next line.

5. The computerized system of claim 1 wherein the only encrypted file is a digital certificate whose sole use is to authorize the target user appliance that executes the program object created by the compiler.

6. A method for remotely compiling a program from two or more source input files, at least one input file being from a different supplier than any other, the method comprising:

compiling a computer program using a compiler;

receiving and storing an encrypted input file from an originating sender; and

decoding an encrypted input file enabled upon command from the compiler so that a temporary file of the unencrypted source is created for the compiler to read and immediately deleted when the compilation is complete.

7. The method of claim 6 wherein the encrypted input file is decoded in blocks corresponding to the input buffer size of the compiler so that no other part of the unencrypted source file exists outside the compiler.

8. The method of claim 6 wherein the temporary file is deleted after each pass of the compiler so that the unencrypted file exists only when the compiler is actively reading the file.

9. The method of claim 6 wherein the temporary file is the single line of source code currently in use by the compiler, which line is deleted from memory prior to the request for the next line.

10. The method of claim 6 wherein the only encrypted file is a digital certificate used to authorize the appliance that executes the output program.