Electronic device, software provisioning server and methods thereof

A software provisioning server comprising:

• a processor and a transceiver configured to cooperate and provide at least the following operations:
• receive a delegate anti-roll back (ARB) exception associated with software from a second software provisioning server,
• wherein the delegate ARB exception comprises a signature of the delegate ARB exception, a delegate policy for an ARB exception, and a revision number of the software,
• check a validity of the signature of the delegate ARB exception associated with the software from the second software provisioning server;
• in response to determining the signature is valid, determine the ARB exception associated with the software based on the delegate policy and the revision number of the software,
• wherein the ARB exception is for overrunning an ARB enforcement policy in an electronic device, and
• wherein the ARB exception comprises a signature of the ARB exception and the revision number of the software;
• and
• provide the ARB exception to the electronic device.

A method applied to an electronic device, the method comprising:

• obeying, by the electronic device, an anti-roll back (ARB) enforcement policy from a software provisioning server;
• transmitting, by the electronic device, an ARB exception request to the software provisioning server;
• in response to the transmission of the ARB exception request to the software provisioning server, receiving, by the electronic device, an ARB exception associated with software for overrunning the ARB enforcement policy of the electronic device,
• wherein the ARB exception comprises a signature of the ARB exception and a revision number of the software and provides a controlled and secure roll back based on the revision number and the signature of the ARB exception,
• wherein the ARB exception is based on a signature-validated delegate ARB exception associated with the software, the signature-validated delegate ARB exception being associated with a delegate-ARB-exception-transmitting software provisioning server and the software provisioning server,
• wherein the delegate ARB exception comprises a signature of the delegate ARB exception, a delegate policy for the ARB exception, and the revision number of the software, and
• wherein the ARB exception associated with the software is based on the delegate policy and the revision number of the software;
• checking, by the electronic device, validity of the signature of the ARB exception;
• and
• executing, by the electronic device, the software having the revision number so as to overrun the ARB enforcement policy when the signature of the ARB exception is valid.

A method applied to a software provisioning server, the method comprising:

• receiving a delegate anti-roll back (ARB) exception associated with software from a second software provisioning server,
• wherein the delegate ARB exception comprises a signature of the delegate ARB exception, a delegate policy for an ARB exception, and a revision number of the software;
• checking a validity of the signature of the delegate ARB exception associated with the software from the second software provisioning server;
• in response to determining the signature is valid, determining the ARB exception associated with the software based on the delegate policy and the revision number of the software,
• wherein the ARB exception is for overrunning an ARB enforcement policy in an electronic device, and
• wherein the ARB exception comprises a signature of the ARB exception and the revision number of the software;
• and
• providing the ARB exception to the electronic device.