Remote image signing
Methods, systems, and computer readable media can be operable to facilitate the remote signing of images created at a signing client. An image can be output from a signing client to a remote signing server, and the signing server can identify, from information carried by the image, one or more signatures needed by the image and/or encoding algorithm(s) to be applied to the image. The signing server can encode the image using the requested encoding algorithm(s) and/or can add requested signature(s) to the image, and the signing server can output the signed image to one or more designated targets.
1. A method comprising:
receiving, at a signing server, an image from a signing client, wherein the image comprises a first header that is generated by the signing client, wherein the first header comprises an identification of one or more receiving devices and an identification of one or more signatures and one or more encoding algorithms associated with each respective one receiving device of the one or more receiving devices, wherein the one or more signatures and one or more encoding algorithms comprise one or more signatures and one or more encoding algorithms that are required for processing the image by a device type that is associated with each respective one receiving device of the one or more receiving devices, wherein the signing client determines a device type that is associated with each respective one receiving device based upon the identification of the respective one receiving device, and wherein the one or more signatures and one or more encoding algorithms associated with each respective one receiving device of the one or more receiving devices are determined by the signing client based upon an entry within a table that comprises an association between the device type associated with the respective one receiving device and the one or more signatures and one or more encoding algorithms associated with each respective one receiving device;
for each respective one of the one or more receiving devices, and based on the information within the first header:
determining, at the signing server, a key and encoding algorithm associated with the respective one receiving device;
retrieving the one or more signatures identified within the first header;
removing the first header from the received image;
encoding the received image according to the key and encoding algorithm;
adding a second header to the image, wherein the second header comprises the one or more signatures; and
outputting the image comprising the second header to the receiving device.
2. The method of claim 1 , wherein the one or more identified signatures comprise one or more signatures required by the receiving device before the receiving device can process the image.
3. The method of claim 1 , further comprising:
wherein the image comprises a plurality of sub-images;
wherein the first header identifies one or more of the plurality of sub-images for which signatures are to be generated;
generating a signature for each of the one or more identified sub-images based upon the key; and
adding a header to each of the one or more identified sub-images, wherein each header comprises the signature generated for the associated sub-image.
4. The method of claim 1 , further comprising:
wherein the image comprising the second header is output to storage;
receiving a request for the image comprising the second header from the receiving device; and
outputting the image comprising the second header from storage to the receiving device.
5. The method of claim 1 , further comprising:
wherein the image comprising the second header comprises an update to a previous embodiment of the image;
wherein the image comprising the second header is output to storage; and
if the receiving device has not previously received the update to the previous embodiment of the image, outputting the image comprising the second header from storage to the receiving device.
6. The method of claim 1 , wherein the key associated with the receiving device is determined by identifying the key from a table, the table comprising one or more associations between devices and keys.
7. An apparatus comprising:
an interface configured to be used to receive an image from a signing client, wherein the image comprises a first header that is generated by the signing client, wherein the first header comprises an identification of a receiving device and an identification of one or more signatures and one or more encoding algorithms associated with the receiving device, wherein the one or more signatures and one or more encoding algorithms comprise one or more signatures and one or more encoding algorithms that are required for processing the image by a device type that is associated with the receiving device, wherein the signing client determines a device type that is associated with the receiving device based upon the identification of the receiving device, and wherein the one or more signatures and one or more encoding algorithms associated with the receiving device are determined by the signing client based upon an entry within a table that comprises an association between the device type associated with the receiving device and the one or more signatures and one or more encoding algorithms associated with the receiving device;
one or more modules configured to:
based on the information within the first header, determine a key and encoding algorithm associated with the receiving device;
retrieve the one or more signatures identified within the first header;
remove the first header from the received image;
encode the received image according to the key and encoding algorithm;
add a second header to the image, wherein the second header comprises the one or more signatures; and
an interface configured to be used to output the image comprising the second header to the receiving device.
8. The apparatus of claim 7 , wherein the one or more identified signatures comprise one or more signatures required by the receiving device before the receiving device can process the image.
9. The apparatus of claim 7 , wherein the image comprises a plurality of sub-images and the first header identifies one or more of the plurality of sub-images for which signatures are to be generated, and the one or more modules are further configured to:
generate a signature for each of the one or more identified sub-images based upon the key; and
add a header to each of the one or more identified sub-images, wherein each header comprises the signature generated for the associated sub-image.
10. The apparatus of claim 7 , further comprising:
an interface configured to be used to output the image comprising the second header to storage;
wherein, upon receiving a request for the image comprising the second header from the receiving device, the image comprising the second header is output from storage to the receiving device.
11. The apparatus of claim 7 , further comprising:
storage configured to store a table comprising one or more associations between devices and keys;
wherein the key associated with the receiving device is determined by identifying the receiving device and associated key from the table.
12. One or more non-transitory computer readable media having instructions operable to cause one or more processors to perform the operations comprising:
receiving, at a signing server, an image from a signing client, wherein the image comprises a first header that is generated by the signing client, wherein the first header comprises an identification of a receiving device and an identification of one or more signatures and one or more encoding algorithms associated with the receiving device, wherein the one or more signatures and one or more encoding algorithms comprise one or more signatures and one or more encoding algorithms that are required for processing the image by a device type that is associated with the receiving device, wherein the signing client determines a device type that is associated with the receiving device based upon the identification of the receiving device, and wherein the one or more signatures and one or more encoding algorithms associated with the receiving device are determined by the signing client based upon an entry within a table that comprises an association between the device type associated with the receiving device and the one or more signatures and one or more encoding algorithms associated with the receiving device;
based on the information within the first header, determining, at the signing server, a key and encoding algorithm associated with the receiving device;
retrieving the one or more signatures identified within the first header;
removing the first header from the received image;
encoding the received image according to the key and encoding algorithm;
adding a second header to the image, wherein the second header comprises the one or more signatures; and
outputting the image comprising the second header to the receiving device.
13. The one or more non-transitory computer-readable media of claim 12 , wherein the one or more identified signatures comprise signatures required by the receiving device before the receiving device can process the image.
14. The one or more non-transitory computer-readable media of claim 12 , wherein the instructions are further operable to cause one or more processors to perform the operations comprising:
wherein the image comprises a plurality of sub-images;
wherein the first header identifies one or more of the plurality of sub-images for which signatures are to be generated;
generating a signature for each of the one or more identified sub-images based upon the key; and
adding a header to each of the one or more identified sub-images, wherein each header comprises the signature generated for the associated sub-image.
15. The one or more non-transitory computer-readable media of claim 12 , wherein the instructions are further operable to cause one or more processors to perform the operations comprising:
wherein the image comprising the second header is output to storage;
receiving a request for the image comprising the second header from the receiving device; and
outputting the image comprising the second header from storage to the receiving device.
16. The one or more non-transitory computer-readable media of claim 12 , wherein the instructions are further operable to cause one or more processors to perform the operations comprising:
wherein the image comprising the second header comprises an update to a previous embodiment of the image;
wherein the image comprising the second header is output to storage; and
if the receiving device has not previously received the update to the previous embodiment of the image, outputting the image comprising the second header from storage to the receiving device.
17. The one or more non-transitory computer-readable media of claim 12 , wherein the key associated with the receiving device is determined by identifying the key from a table, the table comprising one or more associations between devices and keys.