Device and method for updating code

• US 7,412,480 B2
• Filed: 06/28/2001
• Issued: 08/12/2008
• Est. Priority Date: 06/30/2000
• Status: Expired due to Fees

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Buhler, Peter, Eirich, Thomas, Baentsch, Michael, Hoering, Frank, Weigold, Thomas D.
• Primary Examiner(s): Flynn; Nathan J.
• Assistant Examiner(s): SIDDIQI, MOHAMMAD A
• Application Number:
  US09/894,035
• Publication Number:
  US 20020002703A1
• Time in Patent Office: 2,602 Days
• Field of Search: 709/220, 709/221, 709/222, 709/203, 709/229, 709/201, 713/176, 713/193, 713/181, 713/156, 713/175, 713/194, 713/179, 713/180, 716/170, 716/122, 716/174, 716/100, 717/179, 717/182, 717/176, 717/122, 700/203, 700/204, 700/200
• US Class Current: 709/203
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 2221/033 Test or assess software
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: Y10S 707/99953 Recoverability

Abstract

The invention is directed to a method for a software provider to enable a software-acquiring entity to arrive from an existent first signed piece of code at a second signed piece of code. Both pieces of code were generated at the software provider by use of a first software archive generator under use of generation instructions. The software provider provides to the software-acquiring entity a difference code that comprises the steps necessary to arrive from the first signed piece of code at the second signed piece of code. The difference code is combinable at the software-acquiring entity with the first signed piece of code by a second software archive generator to generate the second signed piece of code. The second software archive generator is therefor to be fed with those generation instructions that were used by the first software archive generator for the generation of both pieces of code.

Claims

1. A computer-implemented method of a software provider (25) enabling a software-acquiring entity (20) to arrive from an existent first signed piece of code (11), which is executable on a machine, at a second signed piece of code (12, 13), which is executable on the machine, both pieces of code (11, 12, 13) having been generated by use of a first software archive generator (2) under use of generation instructions (8), comprising the step of:

providing to said software-acquiring entity (20) a difference code (4, 5), said difference code comprising the steps necessary to arrive from said first signed piece of code (11) at said second signed piece of code (12, 13), said steps further including instructions to amend said first signed piece of code so that a signature belonging to said second signed piece of code is the same signature for a corresponding second signed piece of code existing at the software provider, said difference code (4, 5) is usable at said software-acquiring entity (20); and

amending using said difference code said first signed piece of code (11) by a second software archive generator (7) to generate said second signed piece of code (12, 13), whereby said second software archive generator (7) is fed with those generation instructions (8) that were used by said first software archive generator (2) for the generation of both pieces of code (11, 12, 13),

wherein for more than two nieces of code (11, 12, 13) being stored, the difference code (4, 5) is generated only between a subset of said pieces of code (11, 12, 13) and wherein for arriving from the first piece of code (11) to the second piece of code (13) several difference codes (4, 5) are required, these difference codes (4, 5) are merged to a single difference code to be provided to the software-acquiring entity (20).

2. The computer-implemented method according to claim 1, wherein the generation instructions (8) are provided to the software-acquiring entity (20) by the software provider (25) together with the second software archive generator (7).

3. The computer-implemented method according to claim 1, wherein the pieces of code (11, 12, 13) are signed using a private key (14).

4. The computer-implemented method according to claims 1, wherein the signed pieces of code (11, 12, 13) are stored in a storage unit (1) at the software provider (25).

5. The computer-implemented method according to claims 1, wherein the difference code (4, 5) is created by the first software archive generator (2), while said first software archive generator (2) generates the second signed piece of code (12, 13).

6. The computer-implemented method according to claims 1, wherein the first and second piece of code (11, 12, 13) are identified at the software provider (25) by deriving a corresponding identifier from a request (16) received from the software-acquiring entity (20).

7. A computer-implemented method for a software-acquiring entity (20) to arrive from an existent first signed piece of code (11), which is executable on a machine, at a second signed piece of code (12, 13), which is executable on the machine, both pieces of code (11, 12, 13) having been generated at a software provider (25) by use of a first software archive generator (2) under use of generation instructions (8), comprising the steps of:

sending a code amendment request (16) to said software provider (25) for the delivery of a difference code (4, 5) which comprises the steps necessary to generate from said first signed piece of code (11), said second signed piece of code (12, 13), said steps further including instructions to amend said first signed piece of code so that a signature belonging to said second signed piece is the same signature for a corresponding second signed piece of code existing at the software provider,

receiving said difference code (4, 5),

amending using said difference code (4, 5) said first signed piece of code (11) by use of a second software archive generator (7), thereby generating said second signed piece of code (12, 13), whereby said second software archive generator (7) is fed with those generation instructions (8) that were used by said first software archive generator (2) for the generation of both pieces of code (11, 12, 13),

wherein for more than two nieces of code (11, 12, 13) being stored, the difference code (4, 5) is generated only between a subset of said pieces of code (11, 12, 13) and wherein for arriving from the first piece of code (11) to the second piece of code (13) several difference codes (4, 5) are required, these difference codes (4, 5) are merged to a single difference code to be provided to the software-acquiring entity (20).

8. The computer-implemented method according to claim 7, wherein the generation instructions (8) are received from the software provider (25) together with the second software archive generator (7).

9. The computer-implemented method according to claim 7, wherein the pieces of code (11, 12, 13) are signed by use of a private key (14) and the signature (Sig 11, Sig 12, Sig 13) is verifiable by use of a corresponding public key (15).

10. The computer-implemented method according to claims 7, wherein the first and second piece of code (11, 12, 13) are identified by the software-acquiring entity (20) by giving a corresponding identifier in the code amendment request (16).