Secure Download from internet marketplace

• US 9,665,732 B2
• Filed: 07/02/2014
• Issued: 05/30/2017
• Est. Priority Date: 07/02/2014
• Status: Active Grant

• Current Assignee: SAP SE
• Original Assignee: SAP SE
• Inventors: Jayaraman, Aswin Kumar, Trivedi, Vishal, M G, Raghavendra Rao
• Primary Examiner(s): Bates, Kevin
• Assistant Examiner(s): Huang, Chen-Liang
• Application Number:
  US14/322,399
• Publication Number:
  US 20160004850A1
• Time in Patent Office: 1,063 Days
• Field of Search: 709225
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 2221/2129 Authenticate client device independently of the user
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method and system for secure download includes generating a path to a location where a downloadable object is temporarily stored. The method can include receiving a request for a downloadable object, generating one or more unique identifiers, creating a path to the requested object using the unique identifiers, storing a copy of the requested object in a temporary location indicated by the path, and returning the generated path to the requestor. The method can further include receiving a path to a downloadable object and, responsive to a determination that the path is valid, returning the downloadable object. A generated path can be rendered obsolete and its corresponding file removed from the temporary location after a predefined time interval has elapsed. A database of the generated paths and associated files may be periodically checked, and those paths and files that have been stored in the database beyond a pre-definable expiry time can be removed.

Claims

1. A computer-implemented method of providing an object to a specifiable requestor, the method comprising:

receiving, by a processor, a request for the object;

extracting, by the processor, parameters regarding the object and the requestor from the request;

authenticating, by the processor, the requestor;

responsive to the authentication of the requestor, generating, by the processor, at least one unique identifier based on the extracted parameters, wherein the unique identifier encodes at least one of;

an identification of the requested object, an identification of the requestor'"'"'s platform, and a version of the platform;

storing, by the processor, a copy of the requested object in a temporary location;

generating, by the processor, a PLIST file indicating the temporary location of the copy of the requested downloadable object;

generating, by the processor, a path to the copy of the requested object, wherein the path includes the at least one unique identifier, and the path is generated based on the PLIST file; and

returning, by the processor, the path.

2. The method of claim 1, wherein when a predefined time elapses since the generation of the path, the path expires and the PLIST file and the copy of the object are removed from the temporary location.

3. The method of claim 2, wherein the paths and corresponding copy of the object are periodically checked to determine whether to remove them.

4. The method of claim 1, wherein the parameters extracted from the request include at least one of:

an identification of the requested object, an identification of the requestor'"'"'s platform, and a version of the platform.

5. The method of claim 1, wherein the authentication includes determining whether the requestor belongs to a predefined group of users allowed to access the downloadable object.

6. The method of claim 5, wherein the authentication includes determining whether the requestor requests the object after a threshold number of requests.

7. The method of claim 1, wherein the path to the requested object includes syntax of the format:

/the unique identifier/filename.

8. The method of claim 1, further comprising generating a PLIST path to internally locate the copy of the file;

and

wherein two unique identifiers are generated responsive to the authentication of the requestor; and

the path to the requested object includes syntax of the format/a first unique identifier/a second unique identifier/OTA.PLIST.

9. The method of claim 1, wherein returning of the path includes automatically redirecting the requestor based on the path.

10. The method of claim 1, wherein the storing of the copy of the object includes storing an entry including the path to the requested object and a PLIST path with a timestamp of a creation of the entry in a temporary memory index.

11. The method of claim 2, wherein the removal of the copy of the object includes storing a timestamp of a deletion time and a flag signaling the deletion.

12. The method of claim 1, wherein a requestor with a non-expired path to the requested object is authenticated and receives access to the requested object.

20. The system of claim 7, wherein the path to the requested object includes syntax of the format:

/the unique identifier/filename.

13. A non-transitory computer-readable storage device storing program instructions that, when executed, cause an executing device to perform a method for retrieving data from a legacy system, the method comprising:

receiving, by a processor, a request for the object;

extracting, by the processor, parameters regarding the object and the requestor from the request;

authenticating, by the processor, the requestor;

responsive to the authentication of the requestor, generating, by the processor, at least one unique identifier based on the extracted parameters, wherein the unique identifier encodes at least one of;

an identification of the requested object, an identification of the requestor'"'"'s platform, and a version of the platform;

storing, by the processor, a copy of the requested object in a temporary location;

generating, by the processor, a PLIST file indicating the temporary location of the copy of the requested downloadable object;

generating, by the processor, a path to the copy of the requested object, wherein the path includes the at least one unique identifier, and the path is generated based on the PLIST file; and

returning, by the processor, the path.

14. A system comprising:

at least one processor; and

memory storing instructions which, when executed by the at least one processor, result in operations comprising;

receiving a request for the object;

extracting parameters regarding the object and the requestor from the request;

authenticating the requestor;

responsive to the authentication of the requestor, generating at least one unique identifier based on the extracted parameters, wherein the unique identifier encodes at least one of;

an identification of the requested object, an identification of the requestor'"'"'s platform, and a version of the platform;

storing a copy of the requested object in a temporary location;

generating a PLIST file indicating the temporary location of the copy of the requested downloadable object;

generating a path to the copy of the requested object, wherein the path includes the at least one unique identifier, and the path is generated based on the PLIST file; and

returning the path.

15. The system of claim 14, wherein when a predefined time elapses since the generation of the path, the path expires and the PLIST file and the copy of the object are removed from the temporary location.

16. The system of claim 15, wherein the paths and corresponding copy of the object are periodically checked to determine whether to remove them.

17. The system of claim 14, wherein the parameters extracted from the request include at least one of:

an identification of the requested object, an identification of the requestor'"'"'s platform, and a version of the platform.

18. The system of claim 14, wherein the authentication includes determining whether the requestor belongs to a predefined group of users allowed to access the downloadable object.

19. The system of claim 18, wherein the authentication includes determining whether the requestor requests the object after a threshold number of requests.

21. The system of claim 14, wherein the operations further comprise:

generating a PLIST path to internally locate the copy of the file; and

wherein two unique identifiers are generated responsive to the authentication of the requestor; and

the path to the requested object includes syntax of the format/a first unique identifier/a second unique identifier/OTA.PLIST.

22. The system of claim 14, wherein returning of the path includes automatically redirecting the requestor based on the path.

23. The system of claim 14, wherein the storing of the copy of the object includes storing an entry including the path to the requested object and a PLIST path with a timestamp of a creation of the entry in a temporary memory index.

24. The method of claim 16, wherein the removal of the copy of the object includes storing a timestamp of a deletion time and a flag signaling the deletion.