Software installation package with digital signatures

• US 8,464,249 B1
• Filed: 09/17/2009
• Issued: 06/11/2013
• Est. Priority Date: 09/17/2009
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Systems Incorporated (Adobe Inc.)
• Inventors: Goldman, Oliver, Chou, Michael, Bansod, Aditya
• Primary Examiner(s): Chen, Qing
• Application Number:
  US12/562,021
• Time in Patent Office: 1,363 Days
• Field of Search: 717168-178, 705/51, 713176-180
• US Class Current: 717/176
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, create and use software installation packages including digital signatures. In one aspect, a method includes obtaining a first installation package including program content and package information, which includes information stored in a platform independent format and useable in an installation sequence; converting the first installation package into a second installation package stored in a format native to a target platform, the second installation package including at least a portion of the program content and the information useable in the installation sequence, and the converting includes identifying a digital signature native to the target platform and combining the digital signature native to the target platform with a document native to the target platform, the document including at least a portion of the program content; and initiating installation on the target platform with the second, native installation package.

Claims

1. A method comprising:

obtaining, by a computer, a first installation package comprising program content and package information stored in a platform independent format and useable in an installation sequence;

converting, by the computer, the first installation package into a second, native installation package stored in a format native to a target platform, the second, native installation package including at least a portion of the program content and the package information useable in the installation sequence, and the converting includes;

identifying, in the first installation package, a digital signature native to the target platform;

excluding one or more additional digital signatures that are not native to the target platform from inclusion in the second, native installation package;

combining the digital signature native to the target platform with a document that includes at least a portion of the program content and is native to the target platform; and

initiating, by the computer, installation on the target platform with the second, native installation package.

2. The method of claim 1, wherein the converting comprises employing disparate conversion processes based on version information for the first installation package.

3. The method of claim 2, wherein employing the disparate conversion processes comprises:

selecting a template document from multiple different versions based on the version information for the first installation package; and

adding information to a copy of the selected template document for the target platform.

4. The method of claim 1, wherein the obtaining comprises, for each of multiple given platforms:

creating an installation package stored in a format native to the given platform;

generating a digital signature using the installation package stored in the format native to the given platform; and

adding the digital signature to information of a cross-platform installation package to form the first installation package.

5. The method of claim 4, wherein the creating comprises converting, at a first computer controlled by a first party, the cross-platform installation package into the installation package stored in the format native to the given platform, and the generating comprises generating, at a second, different computer, controlled by a second, different party, the digital signature using the installation package stored in the format native to the given platform.

6. A non-transitory computer storage medium encoded with a computer program, the computer program comprising instructions that when executed by a data processing apparatus cause the data processing apparatus to perform operations comprising:

obtaining a first installation package comprising program content and package information stored in a platform independent format and useable in an installation sequence;

converting the first installation package into a second, native installation package stored in a format native to a target platform, the second, native installation package including at least a portion of the program content and the package information useable in the installation sequence, and the converting includes;

identifying, in the first installation package, a digital signature native to the target platform;

excluding one or more additional digital signatures that are not native to the target platform from inclusion in the second, native installation package;

combining the digital signature native to the target platform with a document that includes at least a portion of the program content and is native to the target platform; and

initiating installation on the target platform with the second, native installation package.

7. The non-transitory computer storage medium of claim 6, wherein the converting comprises employing disparate conversion processes based on version information for the first installation package.

8. The non-transitory computer storage medium of claim 7, wherein employing the disparate conversion processes comprises:

selecting a template document from multiple different versions based on the version information for the first installation package; and

adding information to a copy of the selected template document for the target platform.

9. The non-transitory computer storage medium of claim 6, wherein the obtaining comprises, for each of multiple given platforms:

creating an installation package stored in a format native to the given platform;

generating a digital signature using the installation package stored in the format native to the given platform; and

adding the digital signature to information of a cross-platform installation package to form the first installation package.

10. The non-transitory computer storage medium of claim 9, wherein the creating comprises converting, at a first computer controlled by a first party, the cross-platform installation package into the installation package stored in the format native to the given platform, and the generating comprises generating, at a second, different computer, controlled by a second, different party, the digital signature using the installation package stored in the format native to the given platform.

11. A system comprising:

one or more computers operable to interact with a device and perform operations of software package installation, the one or more computers configured to;

obtain a first installation package comprising program content and package information stored in a platform independent format and useable in an installation sequence;

convert the first installation package into a second, native installation package stored in a format native to a target platform, the second, native installation package c including at least a portion of the program content and the package information useable in the installation sequence, and to convert the first installation package, the one or more computers are further configured to;

identify, in the first installation package, a digital signature native to the target platform;

exclude one or more additional digital signatures that are not native to the target platform from inclusion in the second, native installation package;

combine the digital signature native to the target platform with a document that includes at least a portion of the program content and is native to the target platform; and

initiate installation on the target platform with the second, native installation package.

12. The system of claim 11, wherein the one or more computers comprise a server operable to interact with the device through a data communication network, and the device is operable to interact with the server as a client.

13. The system of claim 11, wherein the one or more computers consist of one computer, the device is a user interface device, and the one computer comprises the user interface device.

14. The system of claim 11, wherein, to convert the first installation package, the one or more computers are further configured to utilize disparate conversion processes based on version information for the first installation package.

15. The system of claim 14, wherein, to utilize the disparate conversion processes, the one or more computers are further configured to:

select a template document from multiple different versions based on the version information for the first installation package; and

add information to a copy of the selected template document for the target platform.

16. The system of claim 11, wherein, to obtain the first installation package, for each of multiple given platforms, the one or more computers are further configured to:

create an installation package stored in a format native to the given platform;

generate a digital signature using the installation package stored in the format native to the given platform; and

add the digital signature to information of a cross-platform installation package to form the first installation package.

17. The system of claim 16, wherein, to create the installation package stored in the format native to the given platform, the one or more computers are further configured to convert, at a first computer controlled by a first party, the cross-platform installation package into the installation package stored in the format native to the given platform, and, to generate the digital signature, the one or more computers are further configured to generate, at a second, different computer, controlled by a second, different party, the digital signature using the installation package stored in the format native to the given platform.