Broadcast application security

Application metadata received by a broadcast receiver S201 through a broadcast stream can be validated by obtaining a result of a comparison S202 between a reference hash and a hash of the application metadata. The application metadata is validated in response to the obtained result indicating that the reference hash matches the hash of the application metadata S203. If the obtained result does not indicate a match then: an alert may be provided to a user; user approval may be requested to launch the application; or the application may be launched in protected mode. In some embodiments, the hash of the application metadata can be generated, and/or compared to the reference hash, remotely at a server. The hash of the application metadata may be compared to a plurality of reference hashes, where each reference hash is stored with associated validity information defining a time period in which that reference has is valid. These validation methods and systems may improve broadcast security ...