SECURE DOWNLOAD FROM INTERNET MARKETPLACE

• US 20160004850A1
• Filed: 07/02/2014
• Published: 01/07/2016
• Est. Priority Date: 07/02/2014
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP SE
• Inventors: Jayaraman, Aswin Kumar, Trivedi, Vishal, M G, Raghavendra Rao
• Granted Patent: US 9,665,732 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method and system for secure download includes generating a path to a location where a downloadable object is temporarily stored. The method can include receiving a request for a downloadable object, generating one or more unique identifiers, creating a path to the requested object using the unique identifiers, storing a copy of the requested object in a temporary location indicated by the path, and returning the generated path to the requestor. The method can further include receiving a path to a downloadable object and, responsive to a determination that the path is valid, returning the downloadable object. A generated path can be rendered obsolete and its corresponding file removed from the temporary location after a predefined time interval has elapsed. A database of the generated paths and associated files may be periodically checked, and those paths and files that have been stored in the database beyond a pre-definable expiry time can be removed.

Claims

1. A downloading system, comprising:

a download handler that receives a request for a file stored in the system and moves a copy of the requested file to a temporary location;

a property list (PLIST) generator communicatively coupled to the download helper and configured to generate a unique identifier and a path based on the unique identifier, the path indicating the temporary location where the file is stored;

a MIME repository that stores the copy of the requested file, the copy being accessible by the path generated by the PLIST generator; and

a file handler that receives the path, retrieves the copy of the file indicated by the path, and returns the copy of the file.

2. The system of claim 1, wherein the MIME repository stores:

(i) original files that are not accessible outside of the downloading system, and (ii) copies of the original files that are accessible by the path generated by the download handler.

3. The apparatus of claim 1, wherein the MIME repository is periodically checked to remove those copies of files and associated paths that are obsolete.

4. The apparatus of claim 2, wherein copies of files and associated paths created before a predetermined time are considered obsolete.

5. A computer-implemented method of providing an object to a specifiable requestor, the method comprising:

receiving, by a processor, a request for the object;

extracting, by the processor, parameters regarding the object and the requestor from the request;

authenticating, by the processor, the requestor;

responsive to the authentication of the requestor, generating, by the processor, at least one unique identifier based on the extracted parameters;

generating, by the processor, a path to the requested object, wherein the path includes the at least one unique identifier; and

returning, by the processor, the path.

6. The method of claim 5, further comprising:

storing, by the processor, a copy of the requested object in a temporary location;

generating, by the processor, a PLIST file indicating the temporary location of the copy of the requested downloadable object;

wherein the path is generated based on the PLIST file.

7. The method of claim 5, wherein when a predefined time elapses since the generation of the path, the path expires and the PLIST file and the copy of the object are removed from the temporary location.

8. The method of claim 7, wherein the paths and corresponding copy of the object are periodically checked to determine whether to remove them.

9. The method of claim 5, wherein the parameters extracted from the request include at least one of:

an identification of the requested object, an identification of the requestor'"'"'s platform, and a version of the platform.

10. The method of claim 5, wherein the authentication includes determining whether the requestor belongs to a predefined group of users allowed to access the downloadable object.

11. The method of claim 10, wherein the authentication includes determining whether the requestor requests the object after a threshold number of requests.

12. The method of claim 5, wherein the path to the requested object includes syntax of the format:

/the unique identifier/filename.

13. The method of claim 5, further comprising generating a PLIST path to internally locate the copy of the file;

and

wherein two unique identifiers are generated responsive to the authentication of the requestor; and

the path to the requested object includes syntax of the format /a first unique identifier/a second unique identifier/OTA.PLIST.

14. The method of claim 5, wherein returning of the path includes automatically redirecting the requestor based on the path.

15. The method of claim 6, wherein the storing of the copy of the object includes storing an entry including the copy of the object and its associated path and PLIST path with a timestamp of a creation of the entry in a temporary memory index.

16. The method of claim 7, wherein the removal of the copy of the object includes storing a timestamp of a deletion time and a flag signaling the deletion.

18. The method of claim 5, wherein a requestor with a non-expired path to the request object is authenticated and receives access to the object.

17. A computer-implemented method of providing an object to a specifiable requestor, the method comprising:

receiving, by a download handler, a request for the object;

extracting, by the download handler, parameters regarding the object and the requestor from the request;

authenticating, by the download handler, the requestor;

responsive to the authentication of the requestor, generating, by the download handler, a unique identifier based on the extracted parameters;

storing, by the download handler, a copy of the object in a temporary location;

generating, by the download handler, a path to the requested object, wherein the path includes the unique identifier;

receiving, by a file handler, the path to the object;

extracting, by the file handler, parameters indicating the object from the path;

responsive to a determination, by the file handler, that the path leads to a downloadable object, reading an application (IPA) file corresponding to the path; and

returning, by the file handler, the requested object.

19. A non-transitory computer-readable storage device storing program instructions that, when executed, cause an executing device to perform a method for retrieving data from a legacy system, the method comprising:

receiving, by a processor, a request for the object;

extracting, by the processor, parameters regarding the object and the requestor from the request;

authenticating, by the processor, the requestor;

responsive to the authentication of the requestor, generating, by the processor, at least one unique identifier based on the extracted parameters;

generating, by the processor, a path to the requested object, wherein the path includes the at least one unique identifier; and

returning, by the processor, the path.

20. A non-transitory computer-readable storage device storing program instructions that, when executed, cause an executing device to perform a method for retrieving data from a legacy system, the method comprising:

receiving, by a download handler, a request for the object;

extracting, by the download handler, parameters regarding the object and the requestor from the request;

authenticating, by the download handler, the requestor;

responsive to the authentication of the requestor, generating, by the download handler, a unique identifier based on the extracted parameters;

storing, by the download handler, a copy of the object in a temporary location;

generating, by the download handler, a path to the requested object, wherein the path includes the unique identifier;

receiving, by a file handler, the path to the object;

extracting, by the file handler, parameters indicating the object from the path;

responsive to a determination, by the file handler, that the path leads to a downloadable object, reading an application (IPA) file corresponding to the path; and

returning, by the file handler, the requested object.