Method for downloading preauthorized applications to desktop computer using secure connection

• US 9,380,040 B1
• Filed: 07/11/2013
• Issued: 06/28/2016
• Est. Priority Date: 07/11/2013
• Status: Active Grant

• Current Assignee: Parallels International GmbH (Corel Holdings LP)
• Original Assignee: Parallels Holdings Limited (HNA Technology Co. Ltd.)
• Inventors: Aplemakh, Alexander, Protassov, Stanislav S., Beloussov, Serguei M.
• Primary Examiner(s): Eskandarnia, Arvin
• Application Number:
  US13/939,295
• Time in Patent Office: 1,083 Days
• Field of Search: 703/203
• US Class Current: 1/1
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 47/824 Applicable to portable or mobile terminals
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/104 Peer-to-peer [P2P] networks
• CPC Class Codes: H04L 67/141 Setup of application sessions admission control or resource allocation in data switching networks H04L47/70
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

A method and computer program product for establishing a connection and downloading server applications on a desktop. A user downloads and installs custom server software with the embedded user credentials data. The software provider customizes software for the user. The key of the digital signature is used as a part of the installation package. The user downloads custom server software and installs it on his desktop over a secure connection. A vendor (or content provider) checks the validity of the user data and registers the application to the user. The application provider has a right to digitally sign the package.

Claims

1. A system for launching a server application on a desktop, the system comprising:

a server for providing server applications, the server receiving data from a mobile device through a network connection;

a content storage for storing a server application;

a content manager accessible by the server;

a connection broker for establishing a secure connection between the server and the mobile device;

a credentials manager for managing the credentials of the user; and

a profile database coupled to the credentials manager,

wherein;

the server downloads a server component application from the content storage;

the mobile device downloads a client component application from the content storage;

the connection broker establishes a connection between the server and the mobile device using the credentials provided by the credential manager; and

the client desktop downloads an application from the server and activates the application;

wherein

the user authenticates the server using the mobile device;

the server requests the credentials when the server receives a request to download the application;

the content manager downloads the server application from the content storage and the user credentials from the credentials manager;

the content storage generates a script for activating the server application on the client desktop using the credentials;

a network address ID of the script is embedded into a package with the server application; and

the client desktop activates the server application from the package using the script accessible using the network address ID.

2. The system of claim 1, wherein the connection between the server and the mobile device is a peer-to-peer connection.

3. The system of claim 1, wherein the connection broker is a proxy server.

4. The system of claim 1, wherein the credentials manager uses a URL to download the credentials.