Using token-based signing to install unsigned binaries

• US 7,281,132 B2
• Filed: 10/19/2001
• Issued: 10/09/2007
• Est. Priority Date: 10/19/2001
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Bender, Michael S., Stoltz, Benjamin H.
• Primary Examiner(s): ZIA, SYED
• Application Number:
  US10/044,879
• Publication Number:
  US 20030079045A1
• Time in Patent Office: 2,181 Days
• Field of Search: 713/200
• US Class Current: 713/172
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

The present invention provides for token based signing of an unsigned binary which may be a stream of bits (e.g., 0'"'"'s and 1'"'"'s). The unsigned binary is signed using a secret key which resides in a token (e.g., a smart card), which makes the secret key available to the token holder. The unsigned binary is downloaded and verified for authenticity by the token coupled to a computing device. In one embodiment, the downloaded unsigned binary is encrypted. If the unsigned binary is authentic, it may be used to replace the prior firmware on that computing device.

Claims

1. A method for using a smart card to authenticate a downloaded unsigned binary, comprising:

signing an unsigned binary on a first computing device to generate a first signature;

downloading said first signature and said unsigned binary to a temporary buffer on a second computing device;

interfacing a smart card with said second computing device such that the smart card has access to said temporary buffer;

operating said smart card to read said first signature and said unsigned binary from said temporary buffer;

operating said smart card to sign said unsigned binary using a secret key present on said smart card to generate a second signature; and

operating said smart card to compare said first and second signatures,

wherein a common signing methodology is used on both said first computing device and said smart card to respectively generate said first and second signatures, and wherein said secret key present on said smart card is not accessible by said second computing device.

2. The method of claim 1, further comprising:

using said unsigned binary on said second computing device, if said smart card determines that said first and second signatures match.

3. The method of claim 1, further comprising:

rejecting said unsigned binary on said second computing device, if said smart card determines that said first and second signatures do not match.

4. The method of claim 1, wherein said first computing device is a server.

5. The method of claim 1, wherein said common signing methodology utilizes a hash algorithm.

6. The method of claim 1, further comprising:

encrypting said unsigned binary and said first signature.

7. The method of claim 6, further comprising:

decrypting said encrypted unsigned binary and first signature.

8. A computer readable medium having program instructions encoded therein for using a smart card to authenticate a downloaded unsigned binary, comprising:

program instructions for signing an unsigned binary on a first computing device to generate a first signature;

program instructions for downloading said first signature and said unsigned binary to a temporary buffer on a second computing device;

program instructions for interfacing a smart card with said second computing device such that said smart card has access to said temporary buffer;

program instructions for operating said smart card to read said first signature and said unsigned binary from said temporary buffer;

program instructions for operating said smart card to sign said unsigned binary using a secret key present on said smart card to generate a second signature; and

program instructions for operating said smart card to compare said first and second signatures,

wherein a common signing methodology is used on both said first computing device and said smart card to respectively generate said first and second signatures, and wherein said secret key present on said smart card is not accessible by said second computing device.

9. The computer readable medium of claim 8, further comprising:

program instructions for directing said second computing device to use said unsigned binary on said second computing device, if said first and second signatures match.

10. The computer readable medium of claim 8, further comprising:

program instructions for directing said second computing device to reject said unsigned binary on said second computing device, if said first and second signatures do not match.

11. The computer readable medium of claim 8, wherein said first computing device is a server.

12. The computer readable medium of claim 8, wherein said common signing methodology utilizes a hash algorithm.

13. The computer readable medium of claim 8, further comprising:

program instructions for encryting said unsigned binary and said first signature.

14. The computer readable medium of claim 13, further comprising:

program instructions for decrypting said unsigned binary and said first signature.