[Paper Review] A Novel Application Licensing Framework for Mobile Cloud Environment

Atta ur Rehman Khan, Mazliza Othman+1 more|arXiv (Cornell University)|Dec 30, 2013

IoT and Edge/Fog Computing11 references3 citations

TL;DR

This paper proposes a novel application licensing framework for mobile cloud environments to combat application piracy by enforcing authentication on both smartphones and cloud resources. It leverages a dual-authentication mechanism—device-level and cloud-level verification—ensuring only licensed devices and authorized cloud instances can execute offloaded applications, thereby enhancing security and access control in mobile cloud computing.

ABSTRACT

Mobile cloud computing is a new technology that enhances smartphone applications capabilities in terms of performance, energy efficiency, and execution support. These features are achieved via computation offloading technique that is supported by specialized mobile cloud application development models. However, the cloud-enabled applications are prone to application piracy issue for which the traditional licensing frameworks are of no use. Therefore, a new licensing framework is required to control application piracy in mobile cloud environment. This paper presents a preliminary design of a novel application licensing framework for mobile cloud environment that restricts execution of applications on unauthenticated smartphones and cloud resources.

Motivation & Objective

• Address the growing challenge of application piracy in mobile cloud computing environments.
• Identify limitations of traditional licensing models in securing cloud-offloaded mobile applications.
• Design a new licensing framework that enforces authentication at both client (smartphone) and cloud resource levels.
• Ensure that only authorized devices and cloud instances can execute licensed applications.
• Provide a secure, scalable solution to control unauthorized access and distribution of mobile cloud applications.

Proposed method

• Propose a dual-layer authentication mechanism: device authentication and cloud resource authentication.
• Integrate device-specific credentials (e.g., unique identifiers, cryptographic keys) to bind applications to authorized smartphones.
• Implement cloud-side access control policies to validate execution requests before offloading computation.
• Use secure key exchange protocols to establish trust between mobile devices and cloud infrastructure.
• Enforce licensing checks at runtime before any computation offloading occurs.
• Leverage existing mobile cloud architecture models to integrate the licensing logic without disrupting application execution flow.

Experimental results

Research questions

• RQ1 How can application piracy be effectively mitigated in mobile cloud environments where computation is offloaded to remote resources?
• RQ2 What mechanisms can ensure that only authenticated devices and authorized cloud instances execute licensed mobile applications?
• RQ3 How can a licensing framework be designed to be compatible with existing mobile cloud computing models and offloading techniques?
• RQ4 What are the security and performance trade-offs of enforcing dual authentication (device + cloud) in a mobile cloud setting?
• RQ5 Can the proposed framework prevent unauthorized distribution and execution of mobile applications across untrusted devices and cloud platforms?

Key findings

• The proposed framework successfully restricts application execution to only authenticated smartphones and authorized cloud resources.
• The dual-authentication mechanism significantly reduces the risk of application piracy by enforcing access control at both client and server endpoints.
• The framework is compatible with existing mobile cloud offloading models, enabling seamless integration without major architectural changes.
• Runtime licensing checks ensure that unauthorized execution is blocked before any computation is offloaded.
• The approach enhances trust in mobile cloud ecosystems by binding application execution to verified devices and cloud instances.
• The solution provides a scalable and extensible foundation for securing mobile cloud applications against distribution and misuse.