Application integrity verification by SDK
A method is disclosed and includes executing an integrated application comprising an SDK (software development kit) on a user device with a processor. The method includes determining, by the SDK and the processor on the user device, an checksum for the integrated application, validating, by the SDK in the user device, the integrated application using the determined checksum, and responsive to validating the determined checksum, performing, by the integrated application on the user device, an action.
1 . A method comprising:
executing an integrated application comprising an SDK (software development kit) on a user device;
determining, by the SDK and a processor on the user device, a checksum for the integrated application;
validating, by the SDK in the user device, the integrated application using the determined checksum; and
responsive to validating the determined checksum, performing, by the integrated application on the user device, an action,
wherein the method further comprises:
transmitting, by the user device, an application identifier for the integrated application to a remote server computer, and wherein validating the integrated application using the determined checksum comprises:
transmitting, by the user device, the determined checksum to the remote server computer, wherein the remote server computer compares the determined checksum and an original checksum to determine if the determined checksum and the original checksum match, and generates an indication of a match and transmits the indication to the user device; and
receiving, by the user device the indication of the match.
2 . The method of claim 1 , wherein determining the checksum comprises using a hash function to determine the checksum.
3 . The method of claim 1 , wherein the action comprises obtaining access to secure information.
4 . The method of claim 1 , wherein the SDK performs authentication or security functions for the integrated application.
5 . The method of claim 1 , wherein the SDK is developed by an entity that is different than an entity that develops the integrated application.
6 . The method of claim 1 , wherein the method further comprises:
receiving, by the SDK a device attestation from the remote server computer after determining that the determined checksum and the original checksum match, wherein the remote server computer is a secure server computer.
7 . The method of claim 1 ,
wherein the indication of the match is in the form of signed data which can be verified by the user device using a public key associated with a private key that created the signed data.
8 . The method of claim 1 , wherein the integrated application is a banking application.
9 . The method of claim 1 , wherein the SDK includes biometric authentication software.
10 . The method of claim 1 , wherein the integrated application is programmed to conduct a payment transaction.
11 . A method comprising:
executing an integrated application comprising an SDK (software development kit) on a user device;
determining, by the SDK and a processor on the user device, a checksum for the integrated application;
validating, by the SDK in the user device, the integrated application using the determined checksum; and
responsive to validating the determined checksum, performing, by the integrated application on the user device, an action,
wherein the method further comprises:
transmitting, by the user device, an application identifier for the integrated application to a remote server computer, and wherein validating the integrated application using the determined checksum comprises:
receiving an original checksum for the integrated application from the remote server computer; and
comparing the determined checksum and the original checksum to determine if the determined checksum and the original checksum match.
12 . The method of claim 11 , wherein the integrated application is a banking application.
13 . The method of claim 11 , wherein the SDK includes biometric authentication software.
14 . The method of claim 11 , wherein the integrated application is programmed to conduct a payment transaction.
15 . A user device comprising:
a processor; and
a computer readable medium, comprising code for executing operations including:
executing an integrated application comprising an SDK (software development kit) on the user device;
determining, by the SDK and the processor on the user device, a checksum for the integrated application;
validating, by the SDK in the user device, the integrated application using the determined checksum; and
responsive to validating the determined checksum, performing, by the integrated application on the user device, an action,
wherein the operations further comprise:
transmitting an application identifier for the integrated application to a remote server computer, and wherein validating the integrated application using the determined checksum comprises:
receiving an original checksum for the integrated application from the remote server computer; and
comparing the determined checksum and the original checksum to determine if the determined checksum and the original checksum match.
16 . The user device of claim 15 , wherein the user device is a mobile phone.
17 . The user device of claim 15 , wherein the application identifier is stored on the user device.
18 . The user device of claim 15 , wherein the integrated application is a banking application.
19 . The user device of claim 18 , wherein the SDK includes biometric authentication software.