HEADER SECTION DOWNLOAD OF PACKAGE

• US 20160197912A1
• Filed: 09/04/2013
• Published: 07/07/2016
• Est. Priority Date: 09/04/2013
• Status: Active Grant

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Liverance, Fletcher, Poe, Daryl T, Clemenceau, Matthieu
• Granted Patent: US 10,110,594 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/06 specially adapted for file transfer, e.g. file transfer protocol [FTP]
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/22 Parsing or analysis of headers

Abstract

A header section of a package may be downloaded from a server. The header section may be analyzed to determine if a data section of the package is secure and a correct version. The data section of the package is downloaded, if the data section is secure and the correct version. The package is a single file.

Claims

1. A device, comprising:

a download unit to download a header section of a package;

a validation unit to analyze package information extracted from the header section, the package information to include information about a data section of the package; and

an authentication unit to analyze a certificate extracted from the header section, the certificate to verify a source of the data section, wherein

the download unit is to download the data section of the package, if the package information is validated and the certificate is authenticated, and

the package is contained within a single file.

2. The device of claim 1, wherein the download unit determines a separation point between the header and data sections based on a number sequence included in the package.

3. The device of claim 2, wherein,

the download unit pauses a download of the package after the number sequence is downloaded, and

the download unit resumes a download of the package after the package information is validated and the certificate is authenticated.

4. The device of claim 1, wherein the authentication unit is to verify a certification authority (CA) of the certificate when then authentication unit analyzes the certificate.

5. The device of claim 1, wherein the validation unit is to validate the package information if the package information matches a specification of the device.

6. The device of claim 5, wherein the package information includes information about at least one of an operating system (OS) type, a hardware dependency for installation of the package a software dependency for installation of the package, a localized title, a version, a description of the data section, and release notes.

7. The device of claim 1, further comprising:

an install unit to install the package after the data section is downloaded, wherein

the data section includes a data file and a script, and

the install unit is to run the script to install the data file.

8. The device of claim 7, wherein,

the install unit is to decompress the data file before the script is run, and

the install unit is to mark the package as installed in a database, after the package is installed.

9. The device of claim 7, wherein,

the script is customizable based on the data file, and

the script is to be run with permission to at least one of read, modify and execute a data component and execute system calls with administrator privileges.

10. The device of claim 1, wherein,

header section is parsable and downloadable independently of the data section, and

the download unit downloads the package according to a Secure Socket Layer (SSL) protocol.

11. A method, comprising:

downloading, to a device, a header section of a package from a server;

extracting package information and a certificate from the header section;

validating the package information to determine if the package is compatible with the device;

authenticating the certificate to verify the package is from a trusted source; and

downloading a data section of the package, if the package information is validated and the certificate is authenticated.

12. The method of claim 11, wherein,

the device receives a uniform resource locator (URL) from the server to download the package, and

the downloading the header section pauses downloading the package after a number sequence after an end of the header section is downloaded.

13. The method of claim 12, wherein,

the validating includes displaying the package information to a user of the device, the package information to include at least one of a contents and installation requirements of the data section, and

the downloading further resumes downloading the package if the user approves downloading the data section after the package information is displayed.

14. A non-transitory computer-readable storage medium storing instructions that, if executed by a processor of a device, cause the processor to:

download a header section of a package from a server;

analyze the header section to determine if a data section of the package is secure and a correct version; and

download the data section of the package, if the data section is secure and the correct version, wherein

the package is a single file.

15. The non-transitory computer-readable storage medium of claim 14, wherein,

the downloaded data section includes a data file and a script,

the data file is installed according to the script, and

a database is updated to mark the data file as installed.