Mechanism for determining applicability of software packages for installation

• US 7,530,065 B1
• Filed: 08/13/2004
• Issued: 05/05/2009
• Est. Priority Date: 08/13/2004
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Chang, John R., Ciudad, Jean-Pierre, Novick, Gregory
• Primary Examiner(s): Bullock, Jr.; Lewis A
• Assistant Examiner(s): Wang; Jue S
• Application Number:
  US10/918,614
• Time in Patent Office: 1,726 Days
• Field of Search: 709201-203, 709217-219, 709238-244, 717168-178
• US Class Current: 717/174
• CPC Class Codes: G06F 8/60 Software deployment

Abstract

Mechanism for determining applicability of a software package for installation is described herein. In one embodiment, a process is provided to retrieve authentication information of a component from an installation descriptor file, where the descriptor file describes installation information of the software package. The software package may include one or more components and each component having zero or more sub-components. For at least one sub-component of at least one existing component that has already been installed, an image of the sub-component is authenticated using an authentication key extracted from the authentication information to determine whether the component can be installed based on the existing component. Other methods and apparatuses are also described.

Claims

1. A method for installing a software package, the method comprising:

retrieving authentication information from an installation descriptor file describing installation information of the software package, the software package having one or more components and each component having zero or more sub-components, the one or more components including a component having a first sub-component and a second sub-component, the authentication information including a verification setting for the component, the authentication information including a first authentication setting for the first sub-component, the authentication information including a second authentication setting for the second sub-component, the first authentication setting having a first plurality of keys, and the second authentication setting having a second plurality of keys including a pre-install key and a post-install key, the pre-install key to ensure a prerequisite for installing the software package is satisfied and the post-install key to determine whether a portion of the software package has already been installed;

verifying an existing component corresponding to the component according to the verification setting, wherein the existing component has already been installed;

selecting one of the first plurality of keys if the verification of the existing component is successful;

authenticating a first image of a first existing sub-component corresponding to the first sub-component using the selected key, wherein the first existing subcomponent has already been installed;

authenticating a second image of a second existing sub-component corresponding the second sub-component using more than one of the second plurality of keys including the pre-install key and the post-install key, wherein the authentication of the second image includes a first authentication and a second authentication, the first authentication being based on the pre-install key for ensuring the second existing sub-component satisfying the prerequisite for installing the software package, the second authentication being based on the post-install key for determining the second existing sub-component as the portion of the software package already installed, wherein the second existing sub-component has already been installed and wherein the authentication of the first image and the authentication of the second image being independent of each other;

indicating whether there is a need to install the first sub-component according to the authentication of the first image; and

determining whether to install the first sub-component according to the authentication of the second image if the need to install the first sub-component is determined, wherein the first sub-component is installed if the first authentication fails and the second authentication succeeds.

2. The method of claim 1, wherein the installation descriptor file is an extensible markup language (XML) compatible file.

3. The method of claim 1, wherein the first plurality of keys includes a first key comprising a checksum value of the first sub-component of the existing component, and wherein the authentication of the first image comprises a checksum operation using the checksum value to authenticate the existing component.

4. The method of claim 1 further comprising installing the component based on the existing component according to the determination of the need to install the first sub-component.

5. The method of claim 4, wherein the verification setting includes a first predetermined version retrieved from the installation descriptor file, and wherein the verification of the existing component comprises comparing a version of the existing component with the first determined version.

6. The method of claim 5, wherein the one of the first plurality of keys is selected based on whether the version of the existing component matches the first predetermined version retrieved from the installation descriptor file.

7. The method of claim 5, wherein the verification setting includes a second predetermined version retrieved from the installation descriptor file, and wherein the verification of the existing component further comprising comparing the version of the existing component with the second predetermined version to determine whether the component has already been installed, if the version of the existing component does not match with the first predetermined version.

8. The method of claim 7, further comprising skipping installation of the component if the version of the existing component is greater than or equals to the second predetermined version retrieved from the installation descriptor file.

9. The method of claim 7, further comprising aborting the installation of the software package if the version of the existing component is less than the second predetermined version retrieved from the installation descriptor file.

10. The method of claim 4, wherein the verification of the first existing component further comprising determining whether the verification setting includes a version.

11. The method of claim 10, further comprising:

determining the existing component from installed components if the verification setting includes a version; and

aborting installation of the software package if the existing component corresponding to the component being installed does not exist.

12. The method of claim 10, wherein if the verification setting does not include a version, the method further comprises:

authenticating the first image of the first existing sub-component using at least one of the first plurality of keys, the at least one of the first plurality of keys being other than the selected key, to determine whether the component has already been installed, wherein no need to install the first sub-component is determined if the first image of the first existing sub-component is authenticated successfully using the at least one of the first plurality of keys other than the selected key.

13. The method of claim 1, further comprising:

authenticating the first image of the first existing sub-component using at least one of the first plurality of keys other than the selected key to determine whether the component can be installed based on the existing component;

installing the component if the authentication using the at least one of the first plurality of keys other than the selected key is performed successfully; and

aborting the installation of the software package if the authentication using the at least one of the first plurality of keys other than the selected key is performed unsuccessfully.

14. The method of claim 12, wherein the at least one of the first plurality of keys includes checksum values, and wherein the authentication using the at least one of the first plurality of keys includes a checksum operation using the checksum values.

15. A computer-readable storage medium having executable code to cause a machine to perform a method for installing a software package, the method comprising:

retrieving authentication information of a component from an installation descriptor file describing installation information of the software package, the software package having one or more components and each component having zero or more sub-components, the one or more components including a component having a first sub-component and a second sub-component, the authentication information including a verification setting for the component, the authentication information including a first authentication setting for the first sub-component, the authentication information including a second authentication setting for the second sub-component, the first authentication setting having a first plurality of keys, and the second authentication setting having a second plurality of keys including a pre-install key and a post-install key, the pre-install key to ensure a prerequisite for installing the software package is satisfied and the post-install key to determine whether a portion of the software package has already been installed;

verifying an existing component corresponding to the component according to the verification setting, wherein the existing component has already been installed;

selecting one of the first plurality of keys if the verification of the existing component is successful;

authenticating a first image of a first existing sub-component corresponding to the first sub-component using the selected key, wherein the first existing subcomponent has already been installed;

authenticating a second image of a second existing sub-component corresponding to the second sub-component using more than one of the second plurality of keys including the pre-install key and the post-install key, wherein the authentication of the second image includes a first authentication and a second authentication, the first authentication being based on the pre-install key for ensuring the second existing sub-component satisfying the prerequisite for installing the software package, the second authentication being based on the post-install key for determining the second existing sub-component as the portion of the software package already installed, wherein the second existing sub-component has already been installed and wherein the authentication of the first image and the authentication of the second image being independent of each other;

indicating whether there is a need to install the first sub-component according to the authentication of the first image; and

determining whether to install the first sub-component according to the authentication of the second image if the need to install the first sub-component is determined, wherein the first sub-component is installed if the first authentication fails and the second authentication succeeds.

16. The computer-readable storage medium of claim 15, wherein the installation descriptor file is an extensible markup language (XML) compatible file.

17. The computer-readable storage medium of claim 15, wherein the first plurality of keys includes a first key comprising a checksum value of the first sub-component of the existing component, and wherein the authentication of the first image comprises a checksum operation using the checksum value to authenticate the existing component.

18. The computer-readable storage medium of claim 15, wherein the method further comprising installing the component based on the existing component according to the determination of the need to install the first sub-component.

19. The computer-readable storage medium of claim 18, wherein the verification setting includes a first predetermined version retrieved from the installation descriptor file, and wherein the verification of the existing component comprises comparing a version of the existing component with the first determined version.

20. The computer-readable storage medium of claim 19, wherein the one of the first plurality of keys is selected based on whether the version of the existing component matches the first predetermined version retrieved from the installation descriptor file.

21. The computer-readable storage medium of claim 19, wherein the verification setting includes a second predetermined version retrieved from the installation descriptor file, and wherein the verification of the existing component further comprises comparing the version of the existing component with the second predetermined version to determine whether the component has already been installed, if the version of the existing component does not match with the first predetermined version.

22. The computer-readable storage medium of claim 21, wherein the method further comprises skipping installation of the component if the version of the existing component is greater than or equals to the second predetermined version retrieved from the installation descriptor file.

23. The computer-readable storage medium of claim 21, wherein the method further comprises aborting the installation of the software package if the version of the existing component is less than the second predetermined version retrieved from the installation descriptor file.

24. The computer-readable storage medium of claim 18, wherein the verification of the first existing component further comprises determining whether the verification setting includes a version.

25. The computer-readable storage medium of claim 24, wherein the method further comprises:

determining the existing component from installed components if the verification setting includes a version; and

aborting installation of the software package if the existing component corresponding to the component being installed does not exist.

26. The computer-readable storage medium of claim 24, wherein if the verification setting does not include a version, the method further comprises:

authenticating the first image of the first existing sub-component using at least one of the first plurality of keys, the at least one of the first plurality of keys being other than the selected key, to determine whether the sub-component has already been installed, wherein no need to install the first sub-component is determined if the first image of the first existing sub-component is authenticated successfully using the at least one of the first plurality of keys other than the selected key.

27. The computer-readable storage medium of claim 15, wherein the method further comprises:

authenticating the first image of the first existing sub-component using at least one of the first plurality of keys other than the selected key to determine whether the sub-component can be installed based on the existing sub-component;

installing the sub-component if the authentication using the at least one of the first plurality of keys other than the selected key is performed successfully; and

aborting the installation of the software package if the authentication using the at least one of the first plurality of keys other than the selected key is performed unsuccessfully.

28. The computer-readable storage medium of claim 26, wherein the at least one of the first plurality of keys includes a checksum values, and wherein the authentication using the at least one of the first plurality of keys includes a checksum operation using the checksum values.

29. An apparatus for installing a software package, the apparatus comprising:

a storage to store an installation descriptor file to describe installation information of the software package, the software package including one or more components and each of the components having zero or more sub-components, the one or more components including a component having a first sub-component and a second sub-component, the authentication information including a verification setting for the first component, the authentication information including a first authentication setting for the first sub-component, the authentication information including a second authentication setting for the second sub-component, the first authentication setting having a first plurality of keys, and the second authentication setting having a second plurality of keys including a pre-install key and a post-install key, the pre-install key to ensure a prerequisite for installing the software package is satisfied and the post-install key to determine whether a portion of the software package has already been installed; and

a processor coupled to the storage to execute an installer to retrieve the authentication information from the installation descriptor file,

to verify an existing component corresponding to the component according to the verification setting, the existing component has already been installed,

to select one of the first plurality of keys if the verification of the existing component is successful,

to authenticate a first image of a first existing sub-component corresponding to the first sub-component using the selected key, the first existing subcomponent has already been installed,

to authenticate a second image of a second existing sub-component corresponding to the second sub-component using more than one of the second plurality of keys including the pre-install key and the post-install key, wherein the authentication of the second image includes a first authentication and a second authentication, the first authentication being based on the pre-install key for ensuring the second existing sub-component satisfying the prerequisite for installing the software package, the second authentication being based on the post-install key for determining the second existing sub-component as the portion of the software package already installed, wherein the second existing sub-component has already been installed,

to determine a need to install the first sub-component according to the authentication of the first image, and

to determine whether to install the first sub-component according to the authentication of the second image if the need to install the first sub-component is determined, wherein the first sub-component is installed if the first authentication fails and the second authentication succeeds.

30. The apparatus of claim 29, wherein the installation descriptor file is an extensible markup language (XML) compatible file.

31. The apparatus of claim 29, wherein the first plurality of keys include a first key comprising a checksum value of the first sub-component of the existing component, and wherein the installer performs a checksum operation on the first image using the checksum value to authenticate the first image.

32. The apparatus of claim 29, wherein the installer installs the component based on the existing component according to the determination to install the first sub-component.

33. The apparatus of claim 32, wherein the installer further authenticates the first image of the first existing sub-component using at least one of the first plurality of keys other than the selected key to determine whether the component has already been installed, wherein the installer determines no need to install the first sub-component if the first image of the first existing sub-component is authenticated successfully using the at least one of the first plurality of keys other than the selected key and wherein the installer skips the installation of the component if the authentication using the at least one of the first plurality of keys other than the selected key is performed successfully.

34. The apparatus of claim 32, wherein the installation descriptor file is downloaded from a server over a network without downloading the actual software package, and wherein the software package is downloaded from the server only if the authentication using the first key is performed successfully by the installer.

35. A hardware apparatus for installing a software package, the apparatus comprising:

means for retrieving authentication information from an installation descriptor file describing installation information of the software package, the software package having one or more components and each component having zero or more sub-components, the one or more components including a component having a first sub-component and a second sub-component, the authentication information including a verification setting for the first component, the authentication information including a first authentication setting for the first sub-component, the authentication information including a second authentication setting for the second sub-component, the first authentication setting having a first plurality of keys, and the second authentication setting having a second plurality of keys, including a pre-install key and a post-install key, the pre-install key to ensure a prerequisite for installing the software package is satisfied and the post-install key to determine whether a portion of the software package has already been installed;

means for verifying an existing component corresponding to the component according to the verification setting, wherein the existing component has already been installed;

means for selecting one of the first plurality of keys if the verification of the existing component is successful;

means for authenticating a first image of a first existing sub-component corresponding to the first sub-component using the selected key, the first existing subcomponent has already been installed;

means for authenticating a second image of a second existing sub-component corresponding to the second sub-component using more than one of the second plurality of keys including the pre-install key and the post-install key, wherein the authentication of the second image includes first authentication and a second authentication, the first authentication being based on the pre-install key for ensuring the second existing sub-component satisfying the prerequisite for installing the software package, the second authentication being based on the post-install key for determining the second existing sub-component as the portion of the software package already installed, the second existing sub-component has already been installed and wherein the authentication of the first image and the authentication of the second image being independent of each other;

means for determining a need to install the first sub-component according to the authentication of the first image; and

means for determining whether to install the first sub-component according to the authentication of the second image if the need to install the first sub-component is determined, wherein the first sub-component is installed if the first authentication fails and the second authentication succeeds.

36. A data processing system, comprising:

a processor; and

a memory coupled to the processor having instructions that, when executed from the memory, cause the processor to perform operations including,

retrieving authentication information from an installation descriptor file describing installation information of the software package, the software package having one or more components and each component having zero or more sub-components, the one or more components including a component having a first sub-component and a second sub-component, the authentication information including a verification setting for the first component, the authentication information including a first authentication setting for the first sub-component, the authentication information including a second authentication setting for the second sub-component, the first authentication setting having a first plurality of keys, and the second authentication setting having a second plurality of keys including a pre-install key and a post-install key, the pre-install key to ensure a prerequisite for installing the software package is satisfied and the post-install key to determine whether a portion of the software package has already been installed;

verifying an existing component corresponding to the component according to the verification setting, the existing component has already been installed;

selecting one of the first plurality of keys if the verification of the existing component is successful;

authenticating an first image of a first existing sub-component corresponding to the first sub-component using the selected key, the first existing subcomponent has already been installed;

authenticating a second image of a second existing sub-component corresponding to the second sub-component using more than one of the second plurality of keys including the pre-install key and the post-install key, wherein the authentication of the second image includes a first authentication and a second authentication, the first authentication being based on the pre-install key for ensuring the second existing sub-component satisfying the prerequisite for installing the software package, the second authentication being based on the post-install key for determining the second existing sub-component as the portion of the software package already installed, the second existing sub-component has already been installed and wherein the authentication of the first image and the authentication of the second image being independent of each other;

determining a need to install the first sub-component according to the authentication of the first image; and

determining whether to install the first sub-component according to the authentication of the second image if the need to install the first sub-component is determined, wherein the first sub-component is installed if the first authentication fails and the second authentication succeeds.

37. A method for installing a software package, the method comprising:

downloading from a server over a network a package metadata (PKM) file describing installation of the software package without downloading the software package, the package meta data file including authentication information for the installation, the software package including one or more components and each of the components having zero or more sub-components, the one or more components including a component having a first sub-component and a second sub-component, the authentication information including a verification setting for the first component, the authentication information including a first authentication setting for the first sub-component, the authentication information including a second authentication setting for the second sub-component, the first authentication setting having a first plurality of keys, and the second authentication setting having a second plurality of keys including a pre-install key and a post-install key, the pre-install key to ensure a prerequisite for installing the software package is satisfied and the post-install key to determine whether a portion of the software package has already been installed;

verifying an existing component corresponding to the component according to the verification setting, the existing component has already been installed;

selecting one of the first plurality of keys if the verification of the existing component is successful;

authenticating a first image of a first existing sub-component corresponding to the first sub-component using the selected key, the first existing subcomponent has already been installed;

authenticating a second image of a second existing sub-component corresponding to the second sub-component using more than one of the second plurality of keys including the pre-install key and the post-install key, wherein the authentication of the second image includes a first authentication and a second authentication, the first authentication being based on the pre-install key for ensuing the second existing sub-component satisfying the prerequisite for installing the software package, the second authentication being based on the post-install key for determining the second existing sub-component as the portion of the software package already installed, the second existing sub-component has already been installed and wherein the authentication of the first image and the authentication of the second image being independent of each other;

determining a need to install the first sub-component according to the authentication of the first image;

determining whether to install the first sub-component according to the authentication of the second image if the need to install the first sub-component is determined, wherein the first sub-component is installed if the first authentication fails and the second authentication succeeds; and

downloading at least a portion of the software package from the server to be installed if the first image of the first existing sub-component is authenticated successfully using the selected key retrieved from the PKM file.

38. The method of claim 37, wherein the PKM file is an extensible markup language (XML) compatible file.

39. The method of claim 37, wherein the first plurality of keys include a first key comprising a checksum value of the first sub-component of the existing component, and wherein the authentication of the first image includes a checksum operation using the checksum value to authenticate the existing component.