System and method for verifying integrity of system with multiple components

A verification system for verifying integrity of a software system, comprising:

• a plurality of related object components that form the software system;
• a signed binary description file manager that generates a signed binary description file to store verification and license information of the plurality of related object components;
• and
• a verification agent that verifies itself and the plurality of related object components, wherein the signed binary description file manager associate unique identification (ID) names that represents the plurality of related object components with sets of component license information corresponding to the plurality of related object components in pairs, the associated ID name and component license information pairs being stored in the signed binary description file, the verification agent retrieving license information pertinent to itself and each of the related object components utilizing the signed binary description file, the verification agent verifying the related object components after verifying its own integrity.

A computer readable medium for use in conjunction with a signing system, the computer readable medium including computer readable instructions encoded thereon for:

• receiving a plurality of unique identification (ID) names for a plurality of related components;
• receiving a plurality of sets of component license information of the plurality of related components, each ID name being in correspondence with a set of component license information, each set component license information includes a hash of a corresponding component and related information signed with a key;
• associating each set of component license information along with a corresponding ID name to form an ID name and component license information pair;
• and
• storing the associated pairs in a signed binary description file.