Signed application cards

• US 9,613,221 B1
• Filed: 12/30/2015
• Issued: 04/04/2017
• Est. Priority Date: 12/30/2015
• Status: Expired due to Fees

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Quixey, Inc.
• Inventors: Reed, Russel, Barrientos, Joseph, Glover, Eric
• Primary Examiner(s): Schwartz, Darren B
• Application Number:
  US14/984,537
• Time in Patent Office: 461 Days
• CPC Class Codes: G06F 16/2255 Hash tables
• CPC Class Codes: G06F 16/2455 Query execution
• CPC Class Codes: G06F 16/24578 using ranking
• CPC Class Codes: G06F 16/29 Geographical information databases
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04B 1/40 Circuits
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/01 Protocols
• CPC Class Codes: H04L 9/0861 Generation of secret information including derivation or calculation of cryptographic keys or passwords
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04W 12/041 Key generation or derivation
• CPC Class Codes: H04W 12/043 using a trusted network node as an anchor
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 4/50 Service provisioning or reconfiguring

Abstract

A device that displays signed application cards. The device receives a card object that includes: an application function identifier that identifies an application function of a native application, a digital signature, and a certificate that comprises a public key. The device verifies the authenticity of the digital signature with the public key in the certificate. The device determines that the certificate is signed by a developer of the native application referenced by the card object. The device renders an application card on the display based on the information included in the card object. The application card includes a text string, an image, an audio, and/or an image. The device overlays an indicator onto the application card. The indicator indicates that the authenticity of the digital signature has been verified. The indicator also indicates that the developer of the native application authorized the rendering of the application card.

Claims

1. A card server comprising:

a network communication device;

a storage device that stores;

a card data store that stores card records, wherein each card record comprises a card record identifier (ID) and one or more data fields; and

a key data store that stores a plurality of private keys, each private key being associated with one or more card record IDs; and

a processing device that executes computer-readable instructions that, when executed by the processing device, cause the processing device to;

receive a card request from a mobile computing device, wherein the card request comprises a search query with one or more search terms, wherein the card request includes contextual data from the mobile computing device, and wherein the contextual data includes application data associated with native applications that are installed and execute on the mobile computing device;

generate a consideration set of card records based on the search terms in the search query;

determine a relevance score for each card record in the consideration set;

select a card record from the consideration set based on the relevance scores for the card records in the consideration set;

retrieve the one or more data fields from the selected card record;

identify a private key in the key data store based on the card record ID of the selected card record;

generate a digital signature by signing the one or more data fields retrieved from the selected card record with the identified private key;

generate a card object that comprises the digital signature and the one or more data fields from the selected card record; and

transmit the card object to the mobile computing device.

2. The card server of claim 1, wherein identifying the private key comprises:

querying the key data store with the card record ID of the selected card record; and

receiving the private key associated with the card record ID of the selected card record.

3. The card server of claim 1, wherein generating the digital signature comprises:

generating a hash of the one or more data fields retrieved from the selected card record; and

signing the hash with the identified private key.

4. The card server of claim 1, wherein one of the data fields comprises an application function ID that identifies a function of a first one of the native applications that are installed on the mobile computing device;

and

wherein generating the digital signature comprises signing the application function ID, or a hash of the application function ID with the private key.

5. The card server of claim 1, wherein the key data store further stores a plurality of certificates, each certificate comprises a public key that is associated with one of the private keys;

and

wherein the card object comprises the certificate that corresponds with the private key that is utilized to generate the digital signature.

6. The card server of claim 5, wherein the one or more data fields comprise information regarding an application;

and

wherein the certificate that corresponds with the private key that is utilized to generate the digital signature has been signed by a developer of the application.

7. The card server of claim 1, wherein generating the consideration set of card records comprises:

querying an inverted index that maps keywords to card record IDs with the search terms of the search query; and

receiving the card record IDs that correspond with the search terms of the search query.

8. The card server of claim 1, wherein determining the relevance score comprises:

computing a set of scoring features for the card record; and

determining the relevance score based on the scoring features.

9. The card server of claim 1, wherein selecting the card record comprises selecting the card record with the highest relevance score.

10. The card server of claim 1, wherein selecting the card record comprises selecting a first card record with the highest relevance score, and selecting a second card record with the second highest relevance score;

wherein identifying the private key comprises identifying a first private key based on a first card record ID for the first card record, and identifying a second private key based on a second card record ID for the second card record; and

wherein generating the digital signature comprises generating a first digital signature by signing one or more data fields from the first card record with the first private key, and generating a second digital signature by signing one or more data fields from the second card record with the second private key.

11. A computer-implemented method comprising:

storing, in a storage device of a card server, a card data store that stores card records, wherein each card record comprises a card record identifier (ID) and one or more data fields; and

storing, in the storage device, a key data store that stores a plurality of private keys, each private key being associated with one or more card record IDs;

receiving, via a network communication device of the card server, a card request from a mobile computing device, wherein the card request comprises a search query with one or more search terms, wherein the card request includes contextual data from the mobile computing device, and wherein the contextual data includes application data associated with native applications that are installed and execute on the mobile computing device;

generating, at a processing device of the card server, a consideration set of card records based on the search terms in the search query;

determining, at the processing device, a relevance score for each card record in the consideration set;

selecting, by the processing device, a card record from the consideration set based on the relevance scores for the card records in the consideration set;

retrieving, by the processing device, the one or more data fields from the selected card record;

identifying, by the processing device, a private key in the key data store based on the card record ID of the selected card record;

generating, at the processing device, a digital signature by signing the one or more data fields retrieved from the selected card record with the identified private key;

generating, at the processing device, a card object that comprises the digital signature and the one of more data fields from the selected card record; and

transmitting, via the network communication device, the card object to the mobile computing device.

12. The computer-implemented method of claim 11, wherein identifying the private key comprises:

querying the key data store with the card record ID of the selected card record; and

receiving the private key associated with the card record ID of the selected card record.

13. The computer-implemented method of claim 11, wherein generating the digital signature comprises:

generating a hash of the one or more data fields retrieved from the selected card record; and

signing the hash with the identified private key.

14. The computer-implemented method of claim 11, wherein one of the data fields comprises an application function ID that identifies a function of a first one of the native applications that are installed on the mobile computing device;

and

wherein generating the digital signature comprises signing the application function ID, or a hash of the application function ID with the private key.

15. The computer-implemented method of claim 11, wherein the key data store further stores a plurality of certificates, each certificate comprises a public key that is associated with one of the private keys;

and

wherein the card object comprises the certificate that corresponds with the private key that is utilized to generate the digital signature.

16. The computer-implemented method of claim 11, wherein selecting the card record comprises selecting a first card record with the highest relevance score, and selecting a second card record with the second highest relevance score;

wherein identifying the private key comprises identifying a first private key based on a first card record ID for the first card record, and identifying a second private key based on a second card record ID for the second card record; and

wherein generating the digital signature comprises generating a first digital signature by signing one or more data fields from the first card record with the first private key, and generating a second digital signature by signing one or more data fields from the second card record with the second private key.

17. A mobile computing device comprising:

a display;

a non-transitory memory that stores computer-readable instructions, and one or more native applications that are installed and execute on the mobile computing device;

a transceiver; and

a computing processor that executes computer-readable instructions that, when executed by the computing processor, cause the computing processor to;

gather contextual data of the mobile computing device, wherein the contextual data includes application data associated with the native applications that are installed on the mobile computing device;

generate a card request that includes (i) a search query with one or more search terms and (ii) the contextual data;

transmit the card request via the transceiver to a remote card server;

receive a card object from the remote card server in response to transmitting the card request, wherein the card object comprises;

an application function identifier that identifies an application function in one of the native applications;

a digital signature; and

a certificate that comprises a public key;

determine that the card object comprises the digital signature;

verify the authenticity of the digital signature with the public key in the certificate;

determine that the certificate is signed by a developer of the native application referenced by the card object;

render an application card on the display based on the information included in the card object, the application card comprises a text string, an image, an audio, and/or an image; and

overlay an indicator onto the application card, the indicator indicates that the authenticity of the digital signature has been verified and that the developer of the native application authorized the rendering of the application card.

18. The mobile computing device of claim 17, wherein the certificate comprises one or more conditions;

and wherein verifying the authenticity of the digital signature comprises determining that the one or more conditions specified in the certificate are satisfied.

19. The mobile computing device of claim 18, wherein one of the one or more conditions specifies a value for a data field;

and wherein verifying the authenticity of the digital signature comprises determining whether the card object includes the value specified by the condition.

20. The mobile computing device of claim 18, wherein one of the one or more conditions defines a geographic perimeter;

and wherein verifying the authenticity of the digital signature comprises determining that a geographic location referenced by the card object is within the geographic perimeter defined by the condition.