Embedding digital signatures into digital payloads

• US 6,839,846 B2
• Filed: 01/03/2001
• Issued: 01/04/2005
• Est. Priority Date: 01/03/2001
• Status: Active Grant

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Gross, Mark, Shin, Edward B., Mangold, Richard P.
• Primary Examiner(s): Darrow, Justin T.
• Application Number:
  US09/753,870
• Publication Number:
  US 20020087959A1
• Time in Patent Office: 1,462 Days
• Field of Search: 713/176, 713/181, 713/187, 713/190, 713/191
• US Class Current: 713/191
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities

Abstract

A file may be transferred from one processor-based system to another. The file may include executable binary data together with an integrated digital signature. Each time a receiving processor-based system boots, the digital signature is automatically applied to the payload to ensure its authenticity. If the file is determined during the boot process to be corrupted, it may be automatically deleted and replaced with a predecessor file that may be maintained on the receiving system.

Claims

1. A method comprising:

receiving a file including a payload and a digital signature for the payload at a processor-based system; and

automatically applying the digital signature to the payload when the processor-based system boots.

2. The method of claim 1 wherein receiving a file includes receiving a file in a first processor-based system sent by a second processor-based system.

3. The method of claim 1 wherein receiving a file includes receiving a software update.

4. The method of claim 3 wherein receiving a software update includes receiving a software update for a prior software version and preserving the prior software version.

5. The method of claim 2 wherein applying the digital signature includes applying the digital signature to the payload each time the first processor-based system is booted.

6. The method of claim 1 further including determining whether the payload is authentic.

7. The method of claim 6 wherein if the payload is authentic, booting the system.

8. The method of claim 6 wherein if the payload is not authentic, deleting the payload.

9. The method of claim 8 including loading a backup in place of the payload.

10. The method of claim 1 wherein receiving a file includes receiving a payload in the form of executable binary data and applying the digital signature to the executable binary data.

11. An article comprising a medium storing instructions that enable a processor-based system to:

receive a file including a payload and a digital signature for the payload at a processor-based system; and

automatically apply the digital signature to the payload when the processor-based system boots.

12. The article of claim 11 further storing instructions that enable a first processor-based system to receive a file sent by a second processor-based system.

13. The article of claim 11 further storing instructions that enable a processor-based system to receive a software update.

14. The article of claim 13 further storing instructions that enable the processor-based system to receive a software update for a prior software version and preserve the prior software version.

15. The article of claim 12 further storing instructions that enable a first processor-based system to apply the digital signature to the payload each time the first processor-based system is booted.

16. The article of claim 11 further storing instructions that enable the processor-based system to determine whether the payload is authentic.

17. The article of claim 16 further storing instructions that enable the processor-based system to boot if the payload is authentic.

18. The article of claim 16 further storing instructions that enable the system to delete the payload if the payload is not authentic.

19. The article of claim 18 further storing instructions that enable the processor-based system to load a backup in place of the payload.

20. The article of claim 11 further storing instructions that enable the processor-based system to receive a payload in the form of executable binary data and apply the digital signature to the executable binary data.

21. A system comprising:

a processor; and

a storage coupled to said processor storing instructions that enable the system to receive a file including a payload and a digital signature for the payload at said system and automatically apply the digital signature to the payload when said system boots.

22. The system of claim 21 wherein said system is an MP3 player.

23. The system of claim 21 wherein said system is coupled to receive the file from a second processor-based system.

24. The system of claim 21 wherein said storage stores instructions for receiving a software update.

25. The system of claim 24 wherein said storage stores instructions that enable the system to receive a software update for a prior software version and preserve the prior software version.

26. The system of claim 23 wherein said storage stores instructions that enable the system to apply the digital signature to the payload each time the system is booted.

27. The system of claim 21 wherein said storage stores instructions to automatically determine if the payload is authentic.

28. The system of claim 27 wherein said storage stores instructions that enable the system to boot only if the payload is authentic.

29. The system of claim 27 wherein said storage stores instructions that enable the payload to be automatically deleted if the payload is not authentic.

30. The system of claim 29 wherein said storage stores instructions to automatically load a backup in place of the payload when the payload is deleted.