IP Library Granted Patent US 8,417,954
Granted Patent B1
US 8,417,954 · App. 12/369,537 · Granted Apr 9, 2013

Installation image including digital signature

View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,417,954
App. No.
12/369,537
Granted
Apr 9, 2013
Kind
B1
Abstract

A system includes a source including a memory storing: at least two encrypted files making up an installation image, each file encrypted with a key; a metadata file including an index to each key and a hash value for each encrypted file; a signature file providing a digital signature for the metadata file, the metadata file digitally signed with a private certificate; and a public certificate associated with the private certificate.

Claims (51)

1. A system comprising:

a source including a memory, the memory storing:

at least two encrypted files making up an installation image, wherein each of the at least two encrypted files is encrypted with a key;

a metadata file including an index to each key and a hash value for each of the at least two encrypted files;

a signature file providing a digital signature for the metadata file, the metadata file digitally signed with a private certificate; and

a public certificate associated with the private certificate.

2. The system of claim 1 , wherein the source comprises a processor to:

divide the installation image into at least two files;

encrypt each of the at least two files with the key to provide the at least two encrypted files;

determine the hash value for each of the at least two encrypted files;

generate the metadata file including the index to each key and the hash value for each of the at least two encrypted files; and

digitally sign the metadata file with the private certificate to provide the signature file.

3. The system of claim 1 , wherein the source is communicatively coupled to a destination configured to receive the at least two encrypted files, the metadata file, the signature file, and the public certificate through a network.

4. The system of claim 1 , wherein each of the at least two encrypted files comprises between approximately 100 Mbytes and 300 Mbtyes.

5. A system comprising:

a destination including a processor to:

receive at least two encrypted files making up an installation image, wherein each of the at least two encrypted files is encrypted with a key;

receive a metadata file including an index to each key and a hash value for each of the at least two encrypted files;

receive a signature file providing a digital signature for the metadata file, the metadata file digitally signed with a private certificate;

receive a public certificate associated with the private certificate;

authenticate the metadata file based on the signature file and the public certificate;

verify each of the at least two encrypted files based on an associated hash value from the metadata file; and

decrypt each of the at least two encrypted files based on an associated index to each key from the metadata file.

6. The system of claim 5 , wherein the destination comprises a memory storing a key table including each key used to encrypt each of the at least two encrypted files.

7. The system of claim 5 , wherein the processor is to verify that the public certificate is authentic.

8. The system of claim 5 , wherein, to verify each of the at least two encrypted files based on the associated hash value from the metadata file, the processor is to:

calculate a hash value for each of the at least two encrypted files;

compare each calculated hash value to the associated hash value from the metadata file; and

verify that each of the at least two encrypted files has not been modified in response to each calculated hash value matching the associated hash value from the metadata file.

9. The system of claim 5 , wherein the processor is to receive the at least two encrypted files after the metadata file is authenticated.

10. The system of claim 5 , wherein the destination comprises an open architecture platform.

11. A method for distributing an installation image, the method comprising:

dividing an installation image into at least two files;

encrypting, by a processor, each of the at least two files with a key;

determining a hash value for each of the at least two encrypted files;

generating a metadata file including a handle to each key and the hash value for each of the at least two encrypted files;

digitally signing the metadata file with a private certificate to provide a signature file; and

providing the at least two encrypted files, the metadata file, the signature file, and a public certificate associated with the private certificate.

12. The method of claim 11 , further comprising:

receiving the at least two encrypted files, the metadata file, the signature file, and the public certificate;

authenticating the metadata file based on the signature file and the public certificate;

verifying each of the at least two encrypted files based on an associated hash value from the metadata file; and

decrypting each of the at least two encrypted files based on an associated handle to each key from the metadata file.

13. The method of claim 11 , further comprising:

transmitting the at least two encrypted files, the metadata file, the signature file, and the public certificate through a network.

14. The method of claim 12 , wherein verifying each of the at least two encrypted files based on the associated hash value for each encrypted file from the metadata file comprises:

calculating a hash value for each of the at least two encrypted files;

comparing each calculated hash value to the associated hash value from the metadata file; and

verifying each of the at least two encrypted files has not been modified in response to each calculated hash value matching the associated hash value from the metadata file.

15. The method of claim 11 , further comprising:

downloading the at least two encrypted files, the metadata file, the signature file, and the public certificate to an open architecture platform.

Assignments (4)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 24, 2021
From: OT PATENT ESCROW, LLC
To: VALTRUS INNOVATIONS LIMITED
Reel/Frame 055403/0001 →
PATENT ASSIGNMENT, SECURITY INTEREST, AND LIEN AGREEMENT Recorded Jan 26, 2021
From: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP; HEWLETT PACKARD ENTERPRISE COMPANY
To: OT PATENT ESCROW, LLC
Reel/Frame 055269/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Nov 9, 2015
From: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
To: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Reel/Frame 037079/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Feb 11, 2009
From: SAGAL, ABDULLAH METIN; PASCUAL, LUIS ASTUDILLO, JR.
To: HEWLETT-PACKARD DEVELOPMENT COMPANY, L.P.
Reel/Frame 022247/0451 →