US 9,135,418 System and method for creating secure applications

4 defendants · 4 suits · updated October 6, 2026

Also cited as U.S. Patent No. 9,135,418 · US9135418B2 · US 9,135,418 B2 · 9135418 · the '418 patent

Congruent Media Resourcing LLC has filed 4 patent-infringement suits on US 9,135,418, "System and method for creating secure applications" since June 10, 2026, 2 of them in the E.D. Tex., against 4 distinct defendants including HiddenLayer, Inc., Imperva, Inc. and Silverfort, Inc.. The patent was granted September 15, 2015 on a priority date of October 10, 2011. Its abstract opens: "A method for generating a secure application is described herein." The examiner cited 4 references during prosecution.

Assignee: Congruent Media Resourcing LLC
Priority date: October 10, 2011
Granted: September 15, 2015
Expires: October 10, 2031
Status: Active
Claims: 20 (3 independent)
Inventors: Christopher Michael Wade, Danilo Tan, John R. Brown, Paul Krzyzanowski, Daniel Gittleman, Robert M Dare
Full text: Google Patents

The suits

4 cases · E.D. Tex. (2) · W.D. Tex. (1) · N.D. Tex. (1)

Filed	Defendant	Plaintiff	Court	Docket
2026-06-10	HiddenLayer, Inc.	Congruent Media Resourcing LLC	W.D. Tex.	7:26-cv-00229
2026-06-10	Imperva, Inc.	Congruent Media Resourcing LLC	E.D. Tex.	2:26-cv-00461
2026-07-30	Silverfort, Inc.	Congruent Media Resourcing LLC	E.D. Tex.	2:26-cv-00643
2026-08-10	Zscaler Inc	Congruent Media Resourcing LLC	N.D. Tex.	3:26-cv-02654

Docket links open the public record on CourtListener. Filing dates are the complaint's.

Independent claims

What is actually asserted, verbatim.

Claim 1

1. A method of operating a secure application, comprising: receiving a request to activate the secure application through an input device, wherein the secure application was created from a target application having a first set of functions associated with a first application behavior and the secure application has a second set of functions that are imposed on the first set of functions and that are associated with a second application behavior; in response to the receipt of the request, forcing the secure application to override the first application behavior with the second application behavior, wherein the second application behavior takes priority over the first application behavior; and via a processing unit, performing the second application behavior.

Claim 9

9. A method of generating a secure application, comprising: via a processor: receiving a target application that is designed to interact with an operating system; configuring the target application by imposing one or more intercepts on the target application, wherein the imposition of the intercepts converts the target application into a secure application that maintains the interaction with the operating system; and repackaging the secure application such that the intercepts are integrated with the secure application and are inseparable from the secure application.

Claim 16

16. A method of remotely managing a secure application, comprising: selecting a secure application installed on a computing device, wherein the secure application was created from a target application by imposing one or more intercepts on the target application; and remotely managing the secure application by enforcing one or more policies against the secure application installed on the computing device such that the behavior of the secure application is modified from and overrides the original behavior of the target application.

Art before the examiner

216 references of record, 4 cited by the examiner.

Everything listed here was before the Office and is what a challenge must go beyond. Art the examiner never saw is where an invalidity search starts.

Examiner-cited

US6063134A — Method to provide a software package and a provider station and a user station realizing the method and a basis software package (Alcatel)
US7069591B1 — System for encrypting data files of application programs (Neil Weicher)
US7287166B1 — Guards for application in software tamperproofing (Purdue Research Foundation)
US7313824B1 — Method for protecting digital content from unauthorized use by automatically and dynamically integrating a content-protection agent (Liquid Machines, Inc.)

Applicant-cited and other (212)

US5265951A — Card reading terminal having protective shield for input port thereof
US5294782A — Integrated portable device for point of sale transactions
US5357585A — Headphone assembly
US5381348A — Token ring local area network testing apparatus using time delay reflectory
US5484989A — Card reading terminal having protective shield for input port thereof
US5489001A — Differential coupling and compound power system for a vehicle
US5521369A — Card shaped computer peripheral device
US5548478A — Portable computing device having an adjustable hinge
US5548477A — Combination keyboard and cover for a handheld computer
WO1997005551A1 — Method and apparatus for operating resources under control of a security module or other secure processor
US5616906A — Grip held and grip operable data entry device
US5632373A — Protective case for portable computer
US5648760A — Portable messaging and scheduling device with homebase station
US5708560A — Selectively attachable keyboard bracket and lockable holder for a handheld computer
US5872699A — Electronic apparatus, housing for electronic apparatus and housing manufacturing method
US5925873A — Grip held and grip operable data entry device
US6023721A — Method and system for allowing a single-user application executing in a multi-user environment to create objects having both user-global and system global visibility
US6084769A — Docking station with auxiliary heat dissipation system for a docked portable computer
US6104451A — Thin display housing with multiple chambers and fans
US6151606A — System and method for using a workspace data manager to access, manipulate and synchronize network data
US6181553B1 — Arrangement and method for transferring heat from a portable personal computer
US6223815B1 — Cooling unit for cooling a heat-generating component and electronic apparatus having the cooling unit
US6266539B1 — Telephone docking station for personal digital assistant
US6275983B1 — Object-oriented operating system
US6276448B1 — Heat-transfer connector
US20010047363A1 — Apparatus and methods for providing personalized application search results for wireless devices based on user profiles
US20020013852A1 — System for providing content, management, and interactivity for thin client devices
US6449149B1 — Electronic equipment
US20020131404A1 — Method and system for maintaining and distributing wireless applications
US6457030B1 — Systems, methods and computer program products for modifying web content for display via pervasive computing devices
US6473768B1 — System and method for modifying an executing application
US20020172336A1 — Information system with detachable information module
US20030002637A1 — Internet telephone network system, network access method and talking device adapter
US20030090864A1 — Liquid crystal display computer with a removable device frame
US20030130984A1 — System and methods for asynchronous synchronization
US6609199B1 — Method and apparatus for authenticating an open system application to a portable IC device
US6647103B2 — Palm PC dockable phone
US6674640B2 — Increased thermal capability of portable electronic device in stationary or docked mode
US6681238B1 — Method and system for providing a hardware machine function in a protected virtual machine
US20040034853A1 — Mobile download system
US6708221B1 — System and method for globally and securely accessing unified information in a computer network
US20040052343A1 — Telecommunications installation and management system and method
US20040060687A1 — Versatile and ergonomic heat-dissipating stand for attachment to portable computers
US20040078812A1 — Method and apparatus for acquiring media services available from content aggregators
US20040098449A1 — System and method for disseminating information over a communication network according to predefined consumer profiles
US20040128665A1 — Method and system of conditional access to ip service
US20040162092A1 — Telephone management system and method
US6799277B2 — System and method for monitoring software
US20040190256A1 — Heat sink with visible logo
US20050107114A1 — Multi-user mobile telephone
US20050120331A1 — Hosting environment abstraction agents
US20050131885A1 — Information processing apparatus and method, and program
US20050144445A1 — Adapter for secure VoIP communications
US20050149726A1 — Systems and methods for secure client applications
US20050188318A1 — Method and apparatus for providing dynamic information to a user via a visual display
US20050213331A1 — Lighting apparatus
US6952671B1 — Vector quantization with a non-structured codebook for audio compression
US6952617B1 — Handheld computer with detachable handset
US20060030341A1 — Mobile desk phone
US20060085645A1 — Software application integrity verification method and device
US7039041B2 — Operational support system for telecommunication services
US7058088B2 — Data communication program product to rewrite simultaneously firmware of plurality of devices connected to network
US20060143250A1 — System and method for manipulating and managing computer archive files
US20060184788A1 — Multiple factor private portion of an asymmetric key
US20060200658A1 — Agent framework for mobile devices
US7120462B2 — Portable computing, communication and entertainment device with central processor carried in a detachable handset
US7130193B2 — Cabinet having heat radiation function and heat radiation member
US20060277209A1 — Efficient and automatic software application development system for wireless devices
US20060277311A1 — Running Internet applications with low rights
US7184801B2 — Mobile application builder
US20070080823A1 — Techniques for pairing remote controllers with host devices
US20070093243A1 — Device management system
US7236770B2 — System and method for notifying target communication devices of message reception at a message server via log file monitoring
US20070156870A1 — Heartbeat subscriptions
US7243163B1 — System and method for full wireless synchronization of a data processing apparatus with a messaging system
US20070169105A1 — Telephone handset, base and associated method for updating the software of the handset
US20070165654A1 — Method for managing a terminal device
US20070183772A1 — Heat pumped surveillance camera housing and method of manufacturing the same
US7275073B2 — System and method for notifying mobile devices based on device type and network capabilities
US20070239878A1 — Method and apparatus for rendering user accounts portable
US7301767B2 — Electronic equipment including an apparatus for cooling interior of housing
US20070294380A1 — System and method for periodic server-to-client data delivery
US20080060085A1 — Protecting Files on a Storage Device from Unauthorized Access or Copying
US20080070495A1 — Mobile device management
US20080115225A1 — System for allowing multiple users to access preview content
US20080125079A1 — Methods, systems and computer products for remote monitoring and control of application usage on mobile devices
US20080126736A1 — Method and Apparatus for Re-Using Memory Allocated for Data Structures Used by Software Processes
US20080134325A1 — Application program launching method and system for improving security of embedded linux kernel
US20080140969A1 — Method and system for dividing a hard disk drive into multiple host access spaces
US20080201453A1 — Methods and system to create applications and distribute applications to a remote device
US20080222621A1 — Method of Automatically Building a Customised Software Application for a Specific Type of Wireless Computing Device
US20080271014A1 — Lightweight World Switch
US7447799B2 — System and method for automatically updating a wireless device
US20080281953A1 — Managing network components using USB keys
US20090126017A1 — Methods and systems for preventing security breaches
US20090150970A1 — Data Fading to Secure Data on Mobile Client Devices
US7552196B2 — Detecting corrupted data before transmission to a client
US20090187726A1 — Alternate Address Space to Permit Virtual Machine Monitor Access to Guest Virtual Address Space
US7574200B2 — Computing device with environment aware features
US7574177B2 — Remote controller and FM reception arrangement
US7577462B2 — Portable data entry device with a detachable host PDA
US7620001B2 — Communication system and method with mobile devices
US7620392B1 — Method and system for distributing and updating software in wireless devices
US7627343B2 — Media player system
US20100042990A1 — Managing the distribution of client packages
US20100077035A1 — Optimized Polling in Low Resource Devices
US7688952B2 — System and method for obtaining equipment status data over a network
US7702322B1 — Method and system for distributing and updating software in wireless devices
US20100157990A1 — Systems for providing telephony and digital media services
US20100180276A1 — Application partitioning across a virtualized environment
US7778035B2 — Portable electronic apparatus
US7788382B1 — Server initiated synchronization
US20100222097A1 — System and Method for Security on a Mobile Device using Multiple Communication Domains
US7823214B2 — Accessory authentication for electronic devices
US20100328064A1 — Preventing malware attacks in virtualized mobile devices
US20100330961A1 — Providing security in virtualized mobile devices
US20100332635A1 — Migrating functionality in virtualized mobile devices
US20100333088A1 — Virtualized mobile devices
US20100330953A1 — Controlling Usage in Virtualized Mobile Devices
US20110004941A1 — System and method for preventing access to data on a compromised remote device
US20110029779A1 — Information processing apparatus, program, storage medium and information processing system
US7890091B2 — Collaborative data and intelligent synchronization for mobile devices
US20110038120A1 — Heat dissipation in computing device
US20110040607A1 — Added-Revenue off-site targeted internet advertising
US20110058052A1 — Systems and methods for remote camera control
US7912994B2 — Reducing connection time for mass storage class peripheral by internally prefetching file data into local cache in response to connection to host
US20110082900A1 — System and Methods to Store, Retrieve, Manage, Augment and Monitor Applications on Appliances
US20110082789A1 — Vendor payment consolidation system
US20110093583A1 — Triggering actions based on changes in a network connection
US20110145932A1 — System and Method for Remote Management of Applications Downloaded to a Personal Portable Wireless Appliance
US7970386B2 — System and method for monitoring and maintaining a wireless device
US20110179483A1 — Methods for handling a file associated with a program in a restricted program environment
US7992084B2 — Document management apparatus, document management method, document management program, and storage medium
US8000736B2 — User programmable switch for portable data processing devices
US8010701B2 — Method and system for providing virtualized application workspaces
US8051432B2 — Techniques for establishing virtual devices
US8054211B2 — Apparatus and method to facilitate universal remote control
US8060074B2 — Virtual instance architecture for mobile device management systems
US8086332B2 — Media delivery system with improved interaction
WO2012024418A1 — System containing a mobile communication device and associated docking station
US20120066223A1 — Method and computing device for creating distinct user spaces
US20120079423A1 — Launching an application based on data classification
US20120096365A1 — Providing remote application access using entitlements
US20120102574A1 — Creating distinct user spaces through user identifiers
US20120102564A1 — Creating distinct user spaces through mountable file systems
US20120117274A1 — Communication Protocol For Use With Portable Electronic Devices
US8180893B1 — Component-level sandboxing
US8181264B2 — Method and apparatus for deferred security analysis
WO2012064870A2 — Communication devices, networks, services and accompanying methods
US20120151464A1 — Running Injected Code Prior to Execution of an Application
US20120159567A1 — Contextual role awareness
US20120185767A1 — Modifying application behavior
US20120185879A1 — Dynamic service discovery
US20120210443A1 — Securing and managing apps on a device
US8254902B2 — Apparatus and methods for enforcement of policies upon a wireless device
US8272048B2 — Restriction of program process capabilities
US20120246731A1 — Secure execution of unsecured apps on a device
US20120246484A1 — Secure execution of unsecured apps on a device
US20120296744A1 — Custom stores
US20120304310A1 — Secure execution of unsecured apps on a device
US20120304280A1 — Private and public applications
US20120311010A1 — Mechanism for peer-to-peer file sharing by individual client networking applications
US20120311697A1 — Method for executing an application in a restricted operating environment
US20120309348A1 — Activation solution
US20120311702A1 — System and method for preserving references in sandboxes
US20120324057A1 — Method for providing a target application
US8375369B2 — Run-time code injection to perform checks
US20130063619A1 — Information processing program, information processing apparatus and information processing method
WO2013050602A1 — Method of generating, from an initial package file comprising an application to be secured and an initial configuration file, a package file for securing the application, and associated computer program product and computing device
US20130091543A1 — System and method for creating secure applications
US20130091557A1 — System and method for providing cloud-based cross-platform application stores for mobile computing devices
US20130117805A1 — Techniques to apply and share remote policies on mobile devices
US20130130652A1 — Controlling use of a business environment on a mobile device
US20130132941A1 — Management of mobile applications
US20130145278A1 — Unified notification bar between virtual mobile device and physical mobile device
US20130145448A1 — Lock screens to access work environments on a personal mobile device
US8484728B2 — Managing securely installed applications
US20130254401A1 — Controlling Distribution of Resources on a Network
US20130260730A1 — Custom application container for mobile operating systems and/or devices
US20130260713A1 — Usage metering for custom application containers
US20140007222A1 — Secure execution of enterprise applications on mobile devices
US20140059573A1 — Method and system for identifying and replacing system calls
US20140082641A1 — Enhanced Hook Function for Use with Different Versions of a Dynamically Loaded Library
US20140089376A1 — Control of applications installed on a remote device
US20140089487A1 — Control of a remote computer device
US20140173747A1 — Disabling access to applications and content in a privacy mode
US20140181803A1 — Application wrapping system and method
US20140177839A1 — Secure app-to-app communication
US20140181518A1 — Secure mobile app connection bus
US20140208397A1 — Geographical restrictions for application usage on a mobile device
US20140230011A1 — User Interface for Secure Virtual Document Management System
US20140230008A1 — Method and apparatus for application awareness in a network
US20140250505A1 — Multi-user use of single-user apps
US8832652B2 — Method for customizing software applications
US20140282829A1 — Incremental compliance remediation
US20140280955A1 — Controlling Electronically Communicated Resources
US20140282828A1 — Data Access Sharing
US20140282897A1 — Application program as key for authorizing access to resources
US20140280934A1 — Controlling resources used by computing devices
US20140282929A1 — Controlling physical access to secure areas via client devices in a networked environment
US20140282846A1 — Secondary device as key for authorizing access to resources
US20140282869A1 — Certificate based profile confirmation
US20140282894A1 — Delegating authorization to applications on a client device in a networked environment
US8850424B2 — Processing, modification, distribution of installation packages
US8893298B2 — Network linker for secure execution of unsecured apps on a device
US20150019994A1 — Contextual reference information on a remote device
US8955152B1 — Systems and methods to manage an application
US8955068B1 — Systems and methods for providing strong authentication for web-based applications
US8966574B2 — Centralized operation management
US8978110B2 — Systems and methods for controlling email access
US8977842B1 — Hypervisor enabled secure inter-container communications
US8990116B2 — Preventing execution of tampered application code in a computer system

Classification

G06F21/31primary — User authentication
G06F21/125 — Restricting unauthorised execution of programs by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code
G06F21/126 — Interacting with the operating system
G06F21/53 — Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by executing in a restricted environment, e.g. sandbox or secure virtual machine
G06F21/54 — Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs
G06F21/62 — Protecting access to data via a platform, e.g. using keys or access control rules
G06F21/6218 — Protecting access to data via a platform, e.g. using keys or access control rules to a system of files or objects, e.g. local or distributed file system or database
G06F2221/033 — Test or assess software
G06F2221/2101 — Auditing as a secondary aspect
G06F2221/2107 — File encryption
G06F2221/2111 — Location-sensitive, e.g. geographical location, GPS
G06F2221/2143 — Clearing memory, e.g. to prevent the data from being stolen
G06F2221/2147 — Locking files
G06F2221/2149 — Restricted operating environment
G06F2221/2151 — Time stamp
G06F8/52 — Binary to binary
H04L63/0272 — Virtual private networks
H04W12/086 — Access security using security domains

Family

US9135418B2 — B2 (2015)
US20140317679A1 — A1 (2014)
US20150254457A1 — A1 (2015)
US9165139B2 — B2 (2015)
US8695060B2 — B2 (2014)
US20130091543A1 — A1 (2013)
4 foreign family members: EP2766839A4, WO2013055570A1, KR20140075785A, EP2766839A1

Abstract

A method for generating a secure application is described herein. The method can include the steps of obtaining a target application and decomposing the target application into original files that contain predictable instructions. One or more predictable instructions in the original files may be identified. In addition, the target application may be modified to create the secure application by binding one or more intercepts to the target application. These intercepts can enable the modification of the predictable instructions in accordance with one or more policies such that the behavior of the secure application is different from the original behavior of the target application. Modification of the target application may be conducted without access to the source code of the target application.

Named in one of these suits? A prior-art search is commissioned once and serves every defendant who shares it. The examiner's own search record is free on the tools page, and your first preliminary search is free — one claim, back within 24 hours — so you know whether there is art the Office never saw before anyone pays for more. Flat fees: $2,500$899 for the independent claims, $5,000$1,500 for every asserted claim.

Order a free preliminary search → How much prior art does an IPR petition need?

This page is assembled from public records — federal court dockets and the patent's own file — and is updated as the case list changes. It states what the record shows and is not an opinion on the validity or infringement of any claim. Patent data via Google Patents; docket data via CourtListener.