Mobile terminal and application providing method for the same

• US 9,229,741 B2
• Filed: 11/16/2012
• Issued: 01/05/2016
• Est. Priority Date: 06/04/2012
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Park, Hyunsang, Park, Juha, Jeong, Ilwoong
• Primary Examiner(s): Deng, Anna
• Assistant Examiner(s): Wu, Junchun
• Application Number:
  US13/679,008
• Publication Number:
  US 20130326500A1
• Time in Patent Office: 1,145 Days
• Field of Search: 717/177
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/316 by observing the pattern of computer usage, e.g. typical user behaviour
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 2221/2133 Verifying human interaction, e.g., Captcha
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 9/00 Arrangements for program control, e.g. control units program control for peripheral devices G06F13/10
• CPC Class Codes: G06F 9/445 Program loading or initiating bootstrapping G06F9/4401; security arrangements for program loading or initiating G06F21/57
• CPC Class Codes: H04L 63/00 Network architectures or network communication protocols for network security cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00; network architectures or network communication protocols for wireless network security H04W12/00; security arrangements for protecting computers or computer systems against unauthorised activity G06F21/00
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A mobile terminal and application providing method for same are disclosed whereby the method provides a requested application using an application package installer having multiple pieces of signature information. The application providing method comprises: obtaining an application package installer containing multiple pieces of signature information; determining whether signature information corresponding to the mobile terminal is present in the multiple pieces of signature information; and generating, when signature information corresponding to the mobile terminal is present, a signed application package based on the corresponding signature information.

Claims

1. An method for a mobile terminal, comprising:

obtaining an application package installer including an application package for installing a requested application and multiple pieces of signature information;

obtaining, from the application package installer, mapping information between multiple types of devices and the multiple pieces of signature information;

determining, based on the mapping information, whether at least one of the signature information corresponds to a type of the mobile terminal; and

generating, if the at least one of the signature information corresponds to the type of the mobile terminal, a signed application package using one of the at least one of the signature information;

wherein the multiple pieces of signature information comprises each piece of signature information including;

a signature file including a hash value,

a manifest file including hash values, which are obtained by hashing files forming an unsigned application package, and

a signature block file including a certificate for a signature key and a signature for the signature file.

2. The method of claim 1,

wherein the multiple pieces of signature information correspond to multiple types of devices employing different signature schemes, and

wherein the multiple types of devices obtain the signature information from the application package installer.

3. The method of claim 1,

wherein determining whether the at least one of the signature information corresponds to the type of the mobile terminal comprises detecting whether at least one of the multiple pieces of signature information corresponds to the type of the mobile terminal.

4. The method of claim 1, wherein determining whether at least one of the signature information corresponds to the type of the mobile terminal comprises:

detecting whether at least one of the signature information corresponds to the type of the mobile terminal based on the mapping information.

5. The method of claim 1, further comprising outputting, if all of the signature information do not correspond to the type of the mobile terminal, a message indicating absence of the at least one of the signature information corresponding to the type of the mobile terminal.

6. The method of claim 1, further comprising:

detecting validity of the at least one of the signature information; and

installing, if the at least one of the signature information is valid, the requested application using the signed application package.

7. The method of claim 6, further comprising outputting, if the signature information is not valid, a message indicating application installation failure.

16. The method of claim 1, wherein the signature files further comprise hash values generated by hashing at least one of code sections of files in the manifest file and an entirety of the manifest file.

17. The method of claim 1, wherein the hash value further comprises a filename, a hash function name, and a hash result.

18. The method of claim 1, wherein the application package installer further comprises a signature block file comprising data encrypted by a public key that may be utilized to verify the signature file.

8. A mobile terminal, comprising:

a communication unit configured to send and receive data; and

a control unit configured to

obtain an application package installer including an application package for installing a requested application, and multiple pieces of signature information,

obtain, from the application package installer, mapping information between multiple types of devices and the multiple pieces of signature information,

determine, based on the mapping information, whether at least one of the signature information corresponds to a type of the mobile terminal, and

generate, when the at least one of the signature information corresponds to the type of the mobile terminal, a signed application package using one of the at least one of the signature information;

wherein the multiple pieces of signature information comprises each piece of signature information including;

a signature file including a hash value,

a manifest file including hash values, which are obtained by hashing files forming an unsigned application package, and

a signature block file including a certificate for a signature key and a signature for the signature file.

9. The mobile terminal of claim 8, wherein the multiple pieces of signature information correspond to multiple types of devices employing different signature schemes, and wherein the application package installer is used to enable multiple types of devices to obtain the signature information.

10. The mobile terminal of claim 8, wherein the control unit repeatedly checks whether the at least one of the multiple pieces of signature information corresponds to the type of the mobile terminal.

11. The mobile terminal of claim 8, wherein the control unit is further configured to check whether at least one of the signature information corresponds to the type of the mobile terminal based on the mapping information.

12. The mobile terminal of claim 8, further comprising a display unit configured to display information, and the control unit controls, if all of the signature information do not correspond to the type of the mobile terminal, the display unit to output a message indicating absence of the signature information corresponding to the type of the mobile terminal.

13. The mobile terminal of claim 8, wherein the control unit checks validity of the at least one of the signature information, and installs, if the at least one of the signature information is valid, a requested application using the signed application package.

14. The mobile terminal of claim 13, further comprising a display unit configured to display information, and wherein, if the at least one of the signature information is not valid, the control unit controls the display unit to output a message indicating application installation failure.

15. A non-transitory computer-readable medium with instructions therein which upon execution cause at least one processor to:

obtain an application package installer including an application package for installing a requested application, and multiple pieces of signature information;

obtain, from the application package installer, mapping information between multiple types of devices and the multiple pieces of signature information;

determine, based on the mapping information, whether at least one of the signature information corresponds to a type of a mobile terminal; and

generate, when the at least one of the signature information corresponds to the type of the mobile terminal, a signed application package using one of the at least one of the signature information;

wherein the multiple pieces of signature information comprises each piece of signature information including;

a signature file including a hash value,

a manifest file including hash values, which are obtained by hashing files forming an unsigned application package, and

a signature block file including a certificate for a signature key and a signature for the signature file.