Header section download of package

• US 10,110,594 B2
• Filed: 09/04/2013
• Issued: 10/23/2018
• Est. Priority Date: 09/04/2013
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Liverance, Fletcher, Poe, Daryl T, Clemenceau, Matthieu
• Primary Examiner(s): Gee, Jason K
• Application Number:
  US14/916,332
• Publication Number:
  US 20160197912A1
• Time in Patent Office: 1,875 Days
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A header section of a package may be downloaded from a server. The header section may be analyzed to determine if a data section of the package is secure and a correct version. The data section of the package is downloaded, if the data section is secure and the correct version. The package is a single file.

Claims

1. A device, comprising:

a processor; and

a non-transitory storage medium storing instructions executable on the processor to;

download a header section of a package contained within a single file;

determine a separation point between the header section and a data section of the package based on a specified sequence included in the package, wherein the specified sequence includes a sequence of repeating numbers;

pause a download of the package in response to detecting the specified sequence and after the specified sequence is downloaded;

analyze package information extracted from the header section, the package information including information about the data section of the package;

analyze a certificate extracted from the header section, the certificate to verify a source of the data section; and

if the package information is validated and the certificate is authenticated, resume a download of the package to download the data section of the package.

2. The device of claim 1, wherein the analyzing of the certificate comprises verifying a certification authority (CA) of the certificate.

3. The device of claim 1, wherein the instructions are executable on the processor to validate the package information if the package information matches a specification of the device.

4. The device of claim 3, wherein the package information includes information about at least one of an operating system (OS) type, a hardware dependency for installation of the package, a software dependency for installation of the package, a localized title, a version, a description of the data section, or release notes.

5. The device of claim 1, wherein the instructions are executable on the processor to:

install the package after the data section is downloaded by running an installation script in the data section, the installation script when run to install data of the data section.

6. The device of claim 5, wherein the instructions are executable on the processor to:

decompress the data before the installation script is run; and

mark the package as installed in a database, after the package is installed.

7. The device of claim 5, wherein:

the installation script is customizable based on the data, and

the installation script is to be run with permission to at least one of read, modify, or execute a data component and execute system calls with administrator privileges.

8. The device of claim 1, wherein:

the header section is parsable and downloadable independently of the data section, and

the instructions are executable on the processor to download the package according to a Secure Socket Layer (SSL) protocol.

9. The device of claim 5, wherein the installation script includes instructions to unpack the data, and the installation script is customized for the data.

10. A method, comprising:

downloading, to a device, a header section of a package from a server, wherein a downloading of the package pauses responsive to detecting a specified sequence after an end of the header section is downloaded, wherein the specified sequence includes a sequence of repeating numbers;

extracting package information and a certificate from the header section;

validating the package information to determine if the package is compatible with the device;

authenticating the certificate to verify the package is from a trusted source; and

resuming, by the device, the downloading of the package, in response to the validating of the package information and the authenticating of the certificate, to download a data section of the package.

11. The method of claim 10, further comprising:

receiving, by the device, a uniform resource locator (URL) from the server to download the package.

12. The method of claim 10, wherein:

the validating includes displaying the package information to a user of the device, the package information to include at least one of contents r installation requirements of the data section, and

wherein the resuming of the downloading of the package is further in response to the user approving downloading the data section after the package information is displayed.

13. The method of claim 10, wherein the downloaded data section of the package includes a data file and an installation script, the method further comprising:

running the installation script to install the data file.

14. The method of claim 13, wherein the installation script includes instructions to unpack the data file, and the installation script is customized for the data file.

15. A non-transitory computer-readable storage medium storing instructions that, if executed by a device, cause the device to:

download a header section of a package from a server, the package being a single file;

pause a download of the package in response to detecting a specified sequence after an end of the header section of the package, wherein the specified sequence includes a sequence of repeating numbers;

analyze the header section to validate the package and determine if a data section of the package is secure;

resume the download of the package to download the data section in response to determining that the package is validated and the data section is secure, wherein the downloaded data section includes data and an installation script; and

run the installation script to install the data.

16. The non-transitory computer-readable storage medium of claim 15, wherein the instructions if executed cause the device to:

update a database to mark the data as installed.