System and method for the signing and authentication of configuration settings using electronic signatures
OwnerMark O'Neillinventor
Life of this patent
Estimating the term…
Abstract
A method and system for improving the security associated with configuration files is disclosed. By associating an electronic signature with the configuration file it is possible to verify the privilege of a person either editing a configuration file, or on retrieval of the file prior to processing it is possible to ensure that the settings being implemented were implemented by a verified user.
Claims13
A method of signing a configuration file having one or more configuration settings, the method comprising the steps of:
- a) enabling a user to create a configuration file, the configuration file having a series of configuration settings contained therein,
- b) storing the configuration file, and
- wherein the creation of the configuration file effects the association of a electronic signature with the configuration file, the electronic signature being uniquely identifiable with the user who created the file.
A method of authenticating the validity of any changes or updates to an electronic document which contains configuration settings, the method comprising the steps of:
- a) associating a configuration file with an electronic signature, and
- b) referencing the configuration file, the referencing of the configuration file being effected to retrieve instructions as to how a specific task should be conducted, and
- c) verifying the electronic signature associated with the configuration file, and
- wherein once verified, a use of the configuration settings stored within the configuration file is allowed.
A computer system adapted to provide an improved security of configuration files, the system comprising:
- a) a input/output module adapted to receive instructions from a user and furnish a response to those instructions,
- b) a processor adapted to effect the processing of instructions contained within a configuration file,
- c) a datastore adapted to store a configuration document during periods when the configuration information is not required,
- d) a file system memory adapted to effect a retrieval of the stored configuration document prior to processing of the configurations instructions contained within the configuration document and,
- wherein the retrieval of a document from the datastore and extraction of the instructions contained within that document is effected only after verification of an electronic signature associated with that document.
Dependencies are inferred from the claim text.