Computer-implemented method and system for protecting a software installation after certification
View Patent ↗A computer-implemented system and method for protecting a software installation after certification are disclosed. The system includes components to determine if a cryptographic value of a digital content set matches with a stored cryptographic value of a validated digital content set, to determine if a cryptographic value of a validation rule set matches with a stored cryptographic value corresponding to a validation requirement, and to display a certification message if the cryptographic value of the digital content set matches with a stored cryptographic value of a validated digital content set and the cryptographic value of the validation rule set matches with a stored cryptographic value corresponding to a validation requirement.
1. A computer-implemented method comprising:
receiving an initial digital content set corresponding to a software installation;
receiving a validation rule set configured to validate said initial digital content set;
running the validation rule set against the initial digital content set to create a validated digital content set when the validation is successful;
creating a first cryptographic value for said validation rule set used to validate said initial digital set for said software installation;
creating a second cryptographic values for the validated digital content set against which the validation rule set was run;
if running the validation rule set against the initial data set was successful, storing the first cryptographic value of the validation rule set and the second cryptographic value of the validated digital content set against which the validation rule set was run;
comparing a cryptographic values of a new digital content set to be installed in a new software installation with the stored second cryptographic value of the validated digital content set against which the validation rule set was run;
comparing a cryptographic value of a new validation rule set configured to validate said new digital content set to be installed with the stored first cryptographic value of the validation rule set used to validate the initial digital content set; and
displaying a certification message for said new software installation if the cryptographic value of the new digital content set match with the stored second cryptographic value of the validated digital content set against which the validation rules set was run and the cryptographic value of the new validation rule set match with the stored first cryptographic value of the validation rule set used to validate the initial digital content set.
2. The computer-implemented method as claimed in claim 1 wherein the new digital content set is digitally signed.
3. The computer-implemented method as claimed in claim 1 wherein the cryptographic values are each MD5 values.
4. The computer-implemented method as claimed in claim 1 wherein the certification message is a certification logo.
5. A non-transitory computer-readable medium having stored thereon a plurality of instructions, the plurality of instructions when executed by a computer, causing the computer to perform:
running the validation rule set against the initial digital content set to create a validated digital content set when the validation is successful;
creating a first cryptographic value for said validation rule set used to validate said initial digital set for said software installation;
creating a second cryptographic value for the validated digital content set against which the validation rule set was run;
if running the validation rule set against the initial data set was successful, storing the first cryptographic value of the validation rule set and the second cryptographic value of the validated digital content set against which the validation rule set was run;
comparing a cryptographic value of a new digital content set to be installed in a new software installation with the stored second cryptographic value of the validated digital content set against which the validation rule set was run;
comparing a cryptographic value of a new validation rule set configured to validate said new digital content set to be installed with the stored first cryptographic value of the validation rule set used to validate the initial digital content set; and
displaying a certification message for said new software installation if the cryptographic value of the new digital content set match with the stored second cryptographic value of the validated digital content set against which the validation rules set was run and the cryptographic value of the new validation rule set match with the stored first cryptographic value of the validation rule set used to validate the initial digital content set.
6. The non-transitory computer-readable medium of claim 5 wherein the new digital content set is digitally signed.
7. The non-transitory computer-readable medium of claim 5 wherein the cryptographic values are each MD5 values.
8. The non-transitory computer-readable medium of claim 5 wherein the certification message is a certification logo.
9. A computer-implemented method comprising:
receiving an initial digital content set corresponding to a software installation;
receiving a validation rule set configured to validate said initial digital content set;
running the validation rule set against the initial digital content set to create a validated digital content set when the validation is successful;
creating a first cryptographic value for said validation rule set used to validate said initial digital set for said software installation;
creating a second cryptographic value for the validated digital content set against which the validation rule set was run;
if running the validation rule set against the initial data set was successful, storing in a certification table the first cryptographic value of the validation rule set and the second cryptographic value of the validated digital content set against which the validation rule set was run;
determining if said certification table is present and, when present, perform:
comparing a cryptographic values of a new digital content set to be installed in a new software installation with the stored second cryptographic value of the validated digital content set against which the validation rule set was run;
comparing a cryptographic values of a new validation rule set configured to validate said new digital content set to be installed with the stored first cryptographic value of the validation rule set used to validate the initial digital content set; and
displaying a certification message for said new software installation if the cryptographic value of the new digital content set match with the stored second cryptographic value of the validated digital content set against which the validation rules set was run and the cryptographic value of the new validation rule set match with the stored first cryptographic value of the validation rule set used to validate the initial digital content set.
10. The computer-implemented method as claimed in claim 9 wherein the new digital content set is digitally signed.
11. The computer-implemented method as claimed in claim 9 wherein the cryptographic values are each MD5 values.
12. The computer-implemented method as claimed in claim 9 wherein the certification message is a certification logo.