Multi-signature validation of deployment artifacts
AssigneeCapital One Services, LLC
InventorDiego Lapiduz
Life of this patent
Estimating the term…
Abstract
A computer-implemented method for validating a build artifact may include transmitting the build artifact to each of a plurality of validators. Each of the plurality of validators may be configured to: determine whether the build artifact meets a respective criterion; and in response to a determination that the build artifact meets the respective criterion, generate a respective digital signature associated with the build artifact. The method may further include: verifying each of the respective digital signatures and in response to verifying the respective digital signatures, deploying the build artifact.
Claims20
A computer-implemented method for validating a build artifact, the method comprising:
- transmitting an identical copy of the build artifact to each of a plurality of validators in parallel via a network;
- determining, by a first validator of the plurality of validators, whether the build artifact meets a first criterion;
- generating, by the first validator in response to a determination that the build artifact meets the first criterion, a first digital signature associated with the build artifact and adding the first digital signature to a manifest;
- determining, by a second validator of the plurality of validators, whether the build artifact meets a second criterion;
- generating, by the second validator in response to a determination that the build artifact meets the second criterion, a second digital signature associated with the build artifact and adding the second digital signature to the manifest;
- verifying each of the first and second digital signatures;
- and
- in response to verifying the first and second digital signatures, deploying the build artifact.
A system for validating a build artifact, comprising:
- a memory storing instructions and a database that includes the build artifact;
- and
- a processor operatively connected to the memory and configured to execute the instructions to:
- retrieve and store a plurality of public keys;
- transmit an identical copy of the build artifact to each of a plurality of validators in parallel via a network;
- a first validator configured to:
- determine whether the build artifact meets a first criterion;
- and
- generate, in response to a determination the build artifact meets the first criterion, a first cryptographic signature and add the first cryptographic signature to a manifest associated with the build artifact;
- and
- a second validator configured to:
- determine whether the build artifact meets a second criterion;
- and
- generate, in response to a determination the build artifact meets the second criterion, a second cryptographic signature and add the second cryptographic signature to the manifest;
- wherein the processor is further configured to:
- receive the manifest, wherein the manifest includes the first cryptographic signature and the second cryptographic signature;
- verify the first cryptographic signature and the second cryptographic signature;
- and
- in response to verifying first cryptographic signature and the second cryptographic signature, deploy the build artifact.
Dependencies are inferred from the claim text.