SECURE SOFTWARE UPDATES

• US 20170142079A1
• Filed: 10/19/2016
• Published: 05/18/2017
• Est. Priority Date: 11/12/2004
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: WYSOCKI, Christopher R., WARD, Alan
• Granted Patent: US 9,948,617 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 21/101 by binding digital rights to specific entities
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Improved techniques to update software in electronic devices that are already in use are disclosed. In one embodiment, software can be updated in a secure and controlled manner using cryptography. The authenticity of the updated software as well as its appropriateness for the particular electronic device can be confirmed prior to update. The software can also be updated on a per module basis. In one embodiment, a server hosts software updates for various electronic devices, and supplies the appropriate software update to the electronic devices via a data network.

Claims

1. A method for upgrading a specific version of a software module installed at an electronic device, the method comprising:

at a computing device having a list that includes an updated version identifier that is associated with an updated version of the software module that is stored at a server device;

in response to determining that the electronic device is connected to the computing device;

determining whether the updated version of the software module is installed at the electronic device by comparing a specific version identifier that is associated with the specific version of the software module to the updated version identifier;

upon determining that the updated version of the software module is not installed at the electronic device;

transmitting a request to the server device for the updated version of the software module,

receiving the updated version of the software module from the server device, wherein the updated version of the software module is encrypted by a unique encryption key that is associated with the electronic device,

decrypting the updated version of the software module to form an unencrypted updated version of the software module, and

causing the unencrypted updated version of the software module to be installed at the electronic device.

2. The method of claim 1, wherein the unique encryption key is a counterpart of a private key that is used by the computing device to decrypt the updated version of the software module.

3. The method of claim 2, wherein the private key is stored at the computing device.

4. The method of claim 1, wherein the computing device and the server device are connected through a first data link, and the electronic device and the computing device are connected through a second data link that is different from the first data link.

5. The method of claim 4, wherein the second data link is at least one of a wired connection or a wireless communication protocol.

6. The method of claim 1, wherein the request for the updated version of the software module includes the specific version identifier and the unique encryption key.

7. The method of claim 1, wherein the method further comprises, subsequent to decrypting the updated version of the software module:

authenticating the updated version of the software module by verifying a digital signature associated with the updated version of the software module.

8. A system for updating a specific version of a software module installed at an electronic device, the system comprising:

at least one processor; and

at least one memory storing instructions that, when executed by the at least one processor, cause the system to;

in response to determining that the electronic device is connected to the system, wherein the system includes a list having an updated version identifier that is associated with an updated version of the software module that is stored at a server device;

determine whether the updated version of the software module is installed at the electronic device by comparing a specific version identifier that is associated with the specific version of the software module to the updated version identifier; and

upon determining that the updated version of the software module is not installed at the electronic device;

transmit a request to the server device for the updated version of the software module,

receive the updated version of the software module from the server device, wherein the updated version of the software module is encrypted by a unique encryption key that is associated with the electronic device,

decrypt the updated version of the software module to form an unencrypted updated version of the software module, and

cause the unencrypted updated version of the software module to be installed at the electronic device.

9. The system of claim 8, wherein the unique encryption key is a counterpart of a private key that is used by the system to decrypt the updated version of the software module.

10. The system of claim 9, wherein the private key is stored at the system.

11. The system of claim 8, wherein the system and the server device are connected through a first data link, and the electronic device and the system are connected through a second data link that is different from the first data link.

12. The system of claim 11, wherein the second data link is at least one of a wired connection or a wireless communication protocol.

13. The system of claim 8, wherein the request for the updated version of the software module includes the specific version identifier and the unique encryption key.

14. The system of claim 8, wherein, subsequent to decrypting the updated version of the software module, the at least one processor further causes the system to:

authenticate the updated version of the software module by verifying a digital signature associated with the updated version of the software module.

15. A non-transitory computer storage medium containing instructions that, when executed by one or more processors of a computing device, cause the computing device to:

in response to determining that an electronic device is connected to the computing device, wherein the computing device includes a list having an updated version identifier that is associated with an updated version of a software module that is stored at a server device;

determine whether the updated version of the software module is installed at the electronic device by comparing a specific version identifier that is associated with a specific version of the software module to the updated version identifier; and

upon determining that the updated version of the software module is not installed at the electronic device;

transmit a request to the server device for the updated version of the software module,

receive the updated version of the software module from the server device, wherein the updated version of the software module is encrypted by a unique encryption key that is associated with the electronic device,

decrypt the updated version of the software module to form an unencrypted updated version of the software module, and

cause the unencrypted updated version of the software module to be installed at the electronic device.

16. The non-transitory computer storage medium of claim 15, wherein the unique encryption key is a counterpart of a private key that is used by the computing device to decrypt the updated version of the software module.

17. The non-transitory computer storage medium of claim 16, wherein the private key is stored at the computing device.

18. The non-transitory computer storage medium of claim 15, wherein the computing device and the server device are connected through a first data link, and the electronic device and the computing device are connected through a second data link that is different from the first data link.

19. The non-transitory computer storage medium of claim 15, wherein the request for the updated version of the software module includes the specific version identifier and the unique encryption key.

20. The non-transitory computer storage medium of claim 15, wherein, subsequent to decrypting the updated version of the software module, the one or more processors further causes the computing device to:

authenticate the updated version of the software module by verifying a digital signature associated with the updated version of the software module.