EFFICIENT STORAGE AND TRANSFER OF iOS BINARY FILES

• US 20170046134A1
• Filed: 12/28/2015
• Published: 02/16/2017
• Est. Priority Date: 08/12/2015
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: STRAUB, Christian David
• Granted Patent: US 9,959,100 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 8/30 Creation or generation of source code
• CPC Class Codes: G06F 8/31 Programming languages or programming paradigms
• CPC Class Codes: G06F 8/34 Graphical or visual programming
• CPC Class Codes: G06F 8/36 Software reuse
• CPC Class Codes: G06F 8/71 Version control security arrangements therefor G06F21/57; Configuration management
• CPC Class Codes: G06F 9/46 Multiprogramming arrangements
• CPC Class Codes: H04L 67/00 Network arrangements or protocols for supporting network services or applications user-to-user messaging H04L51/00; network arrangements, protocols or services for supporting real-time applications in data packet communications networks H04L65/00
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A system builds an application. The system receives, by a build server, from an application development server, metadata information of the application and a build request to build the application. The system generates binaries of the application by overlaying the metadata information on binaries of a pre-compiled application. The system then signs the binaries of the application to generate signed binaries of the application, and sends, to the application development server, a corresponding signature and one or more files modified by the signing of the binaries of the application. In one embodiment, the build server stores, on a storage appliance, the corresponding signature, the one or more files modified by the signing of the binaries of the application, and the metadata information of the application.

Claims

1. A computer readable medium having instructions stored thereon that, when executed by a processor, cause the processor to build an application, the building comprising:

receiving, by a build server, from an application development server, metadata information of the application and a build request to build the application;

generating binaries of the application by overlaying the metadata information on binaries of a pre-compiled application;

signing the binaries of the application to generate signed binaries of the application; and

sending, to the application development server, a corresponding signature and one or more files modified by the signing of the binaries of the application.

2. The computer readable medium of claim 1, wherein the build server stores, on a storage appliance, the corresponding signature, the one or more files modified by the signing of the binaries of the application, and the metadata information of the application.

3. The computer readable medium of claim 2, wherein the corresponding signature, the one or more files modified by the signing of the application, and the metadata information of the application are obtained from the storage appliance by an edge server.

4. The computer readable medium of claim 3, wherein the edge server obtains the corresponding signature, the one or more files modified by the signing of the application, and the metadata information of the application, after receiving a request from a mobile device to download the application.

5. The computer readable medium of claim 4, wherein the edge server regenerates the signed binaries of the application by combining the one or more files modified by the signing of the application, the metadata information of the application, and the binaries of the pre-compiled application.

6. The computer readable medium of claim 5, wherein the edge server verifies authenticity of the application by hashing the signed binaries of the application and comparing the resulting signature with the corresponding signature.

7. The computer readable medium of claim 5, wherein the edge server provides the signed binaries of the application to the mobile device that requested to download the application.

8. The computer readable medium of claim 7, wherein the mobile device verifies authenticity of the application by hashing the signed binaries of the application and comparing the resulting signature with the corresponding signature.

9. The computer readable medium of claim 1, wherein the metadata information of the application comprises declarative information of the application.

10. The computer readable medium of claim 1, wherein the binaries of the pre-compiled application are unsigned binaries generated by Xcode.

11. The computer readable medium of claim 1, wherein the overlaying of the metadata information on the binaries of the pre-compiled application includes adding or substituting declarative information in the binaries of the pre-compiled application.

12. A method for building an application, the method comprising:

receiving, by a build server, from an application development server, metadata information of the application and a build request to build the application;

generating binaries of the application by overlaying the metadata information on binaries of a pre-compiled application;

signing the binaries of the application to generate signed binaries of the application; and

sending, to the application development server, a corresponding signature and one or more files modified by the signing of the binaries of the application.

13. The method of claim 12, wherein the build server stores, on a storage appliance, the corresponding signature, the one or more files modified by the signing of the binaries of the application, and the metadata information of the application.

14. The method of claim 13, wherein the corresponding signature, the one or more files modified by the signing of the application, and the metadata information of the application are obtained from the storage appliance by an edge server.

15. The method of claim 14, wherein the edge server obtains the corresponding signature, the one or more files modified by the signing of the application, and the metadata information of the application, after receiving a request from a mobile device to download the application.

16. The method of claim 15, wherein the edge server regenerates the signed binaries of the application by combining the one or more files modified by the signing of the application, the metadata information of the application, and the binaries of the pre-compiled application.

17. The method of claim 16, wherein the edge server verifies authenticity of the application by hashing the signed binaries of the application and comparing the resulting signature with the corresponding signature.

18. The method of claim 16, wherein the edge server provides the signed binaries of the application to the mobile device that requested to download the application.

19. The method of claim 18, wherein the mobile device verifies authenticity of the application by hashing the signed binaries of the application and comparing the resulting signature with the corresponding signature.

20. A system for building an application, the system comprising:

a receiving module that receives, by a build server, from an application development server, metadata information of the application and a build request to build the application;

a generating module that generates binaries of the application by overlaying the metadata information on binaries of a pre-compiled application;

a signing module that signs the binaries of the application to generate signed binaries of the application; and

a sending module that sends, to the application development server, a corresponding signature and one or more files modified by the signing of the binaries of the application.