Granted Patent B2

US 12,437,084 · App. 18/075,503 · Granted Oct 7, 2025

Inventors: Juelong Yin (Shanghai, CN); Hao Wang (Shanghai, CN); Dmitry Vladimirovich Krivenok (Dublin, IE); Chaowen Han (Shanghai, CN)

Assignee: Dell Products L.P.

G06F21/602G06F21/54G06F21/57

Abstract

Claims (72)

1. A method comprising:

performing a plurality of software build processes including a process of a pre-release version of a software build, and a process of a release version of the software build,

the process of the pre-release version of the software build comprising:

generating a pre-release version of a software build image;

generating a security-sensitive script, a first encryption key, and specified software components;

encrypting the security-sensitive script with the first encryption key, the specified software components being unencrypted;

inserting the security-sensitive script encrypted with the first encryption key, and the unencrypted specified software components, into the pre-release version of the software build image; and

saving and storing the first encryption key to allow decryption of the encrypted security-sensitive script inserted into the pre-release version of the software build image during testing of the pre-release version of the software build image; and

the process of the release version of the software build comprising:

generating a release version of the software build image;

generating a second encryption key, the second encryption key being different from the first encryption key such that each of the pre-release version of the software build image and the release version of the software build image has its own unique encryption key for encrypting the security-sensitive script;

encrypting the security-sensitive script with the second encryption key;

inserting the security-sensitive script encrypted with the second encryption key, and the unencrypted specified software components, into the release version of the software build image; and

securely deleting the second encryption key to prevent decryption of the encrypted security-sensitive script inserted into the release version of the software build image after releasing the release version of the software build image as a final product.

2. The method of claim 1 wherein encrypting the security-sensitive script with the first encryption key includes encrypting the security-sensitive script using one of a first encryption technique and a second encryption technique, the second encryption technique being different from the first encryption technique.

3. The method of claim 2 wherein encrypting the security-sensitive script with the second encryption key includes encrypting the security-sensitive script using the one of the first encryption technique and the second encryption technique.

4. The method of claim 3 further comprising:

implementing the first encryption technique as a symmetric encryption technique; and

implementing the second encryption technique as an asymmetric encryption technique.

5. The method of claim 1 further comprising:

deploying the pre-release version of the software build image to be executed on a storage system in a development and test environment.

6. The method of claim 5 further comprising:

sending, in a deployment package, the first encryption key for the pre-release version of the software build image to the storage system in the development and test environment,

wherein the first encryption key is detected by the storage system in the deployment package,

wherein the security-sensitive script inserted into the pre-release version of the software build image is decrypted by the storage system with the first encryption key, and

wherein, in response to decryption of the security-sensitive script inserted into the pre-release version of the software build image being successful, the security-sensitive script is executed by the storage system.

7. A system comprising:

a memory; and

processing circuitry configured to execute program instructions out of the memory to:

perform a plurality of software build processes including a process of a pre-release version of a software build, and a process of a release version of the software build,

the process of the pre-release version of the software build comprising:

generating a pre-release version of a software build image;

generating a security-sensitive script, a first encryption key, and specified software components;

encrypting the security-sensitive script with the first encryption key, the specified software components being unencrypted;

inserting the security-sensitive script encrypted with the first encryption key, and the unencrypted specified software components, into the pre-release version of the software build image; and

saving and storing the first encryption key to allow decryption of the encrypted security-sensitive script inserted into the pre-release version of the software build image during testing of the pre-release version of the software build image; and

the process of the release version of the software build comprising:

generating a release version of the software build image;

generating a second encryption key, the second encryption key being different from the first encryption key such that each of the pre-release version of the software build image and the release version of the software build image has its own unique encryption key for encrypting the security-sensitive script;

encrypting the security-sensitive script with the second encryption key;

inserting the security-sensitive script encrypted with the second encryption key, and the unencrypted specified software components, into the release version of the software build image; and

securely deleting the second encryption key to prevent decryption of the encrypted security-sensitive script inserted into the release version of the software build image after releasing the release version of the software build image as a final product.

8. The system of claim 7 wherein the processing circuitry is further configured to execute the program instructions out of the memory to encrypt the security-sensitive script with the first encryption key using one of a first encryption technique and a second encryption technique, the second encryption technique being different from the first encryption technique.

9. The system of claim 8 wherein the processing circuitry is further configured to execute the program instructions out of the memory to encrypt the security-sensitive script with the second encryption key using the one of the first encryption technique and the second encryption technique.

10. The system of claim 9 wherein the first encryption technique is implemented as a symmetric encryption technique, and wherein the second encryption technique is implemented as an asymmetric encryption technique.

11. The system of claim 7 wherein the processing circuitry is further configured to execute the program instructions out of the memory to deploy the pre-release version of the software build image to be executed on a storage system in a development and test environment.

12. The system of claim 11 wherein the processing circuitry is further configured to execute the program instructions out of the memory to send, in a deployment package, the first encryption key for the pre-release version of the software build image to the storage system in the development and test environment, wherein the first encryption key is detected by the storage system in the deployment package, wherein the security-sensitive script inserted into the pre-release version of the software build image is decrypted by the storage system with the first encryption key, and wherein, in response to decryption of the security-sensitive script inserted into the pre-release version of the software build image being successful, the security-sensitive script is executed by the storage system.

13. A computer program product including a set of non-transitory, computer-readable media having instructions that, when executed by processing circuitry, cause the processing circuitry to perform a method comprising:

performing a plurality of software build processes including a process of a pre-release version of a software build, and a process of a release version of the software build,

the process of the pre-release version of the software build comprising:

generating a pre-release version of a software build image;

generating a security-sensitive script, a first encryption key, and specified software components;

encrypting the security-sensitive script with the first encryption key, the specified software components being unencrypted;

inserting the security-sensitive script encrypted with the first encryption key, and the unencrypted specified software components, into the pre-release version of the software build image; and

saving and storing the first encryption key to allow decryption of the encrypted security-sensitive script inserted into the pre-release version of the software build image during testing of the pre-release version of the software build image; and

the process of the release version of the software build comprising:

generating a release version of the software build image;

generating a second encryption key, the second encryption key being different from the first encryption key such that each of the pre-release version of the software build image and the release version of the software build image has its own unique encryption key for encrypting the security-sensitive script;

encrypting the security-sensitive script with the second encryption key;

inserting the security-sensitive script encrypted with the second encryption key, and the unencrypted specified software components, into the release version of the software build image; and

securely deleting the second encryption key to prevent decryption of the encrypted security-sensitive script inserted into the release version of the software build image after releasing the release version of the software build image as a final product.

14. The computer program product of claim 13 wherein encrypting the security-sensitive script with the first encryption key includes encrypting the security-sensitive script with the first encryption key using one of a first encryption technique and a second encryption technique, the second encryption technique being different from the first encryption technique.

15. The computer program product of claim 14 wherein encrypting the security-sensitive script with the second encryption key includes encrypting the security-sensitive script with the second encryption key using the one of the first encryption technique and the second encryption technique.

16. The computer program product of claim 15 wherein the method further comprises:

implementing the first encryption technique as a symmetric encryption technique; and

implementing the second encryption technique as an asymmetric encryption technique.

17. The computer program product of claim 13 wherein the method further comprises:

deploying the pre-release version of the software build image to be executed on a storage system in a development and test environment; and

sending, in a deployment package, the first encryption key for the pre-release version of the software build image to the storage system in the development and test environment,

wherein the first encryption key is detected by the storage system in the deployment package,

wherein the security-sensitive script inserted into the pre-release version of the software build image is decrypted by the storage system with the first encryption key, and

wherein, in response to decryption of the security-sensitive script inserted into the pre-release version of the software build image being successful, the security-sensitive script is executed by the storage system.

Assignments (1)

Continuity (1)

References Cited (12)