Multiple Signed Filesystem Application Packages
AssigneeCaterpillar Inc.
InventorsCaleb Jorden, Robert F. Schultz
Life of this patent
Estimating the term…
Abstract
A method and system is provided for file and application management. The method may include configuring a destination system where the method further includes generating a filesystem image including an application file and files necessary for the destination system to execute the application file, generating a cryptographic signature of the filesystem image, transferring the filesystem image and the cryptographic signature to the destination system, cryptographically verifying the filesystem image with the cryptographic signature, and mounting the filesystem image on the destination system in a read-only manner.
Claims20
A method for configuring a destination system, comprising:
- generating, via a system, a filesystem image comprising an application file and files necessary for the destination system to execute the application file;
- generating, via the system, a cryptographic signature file of the filesystem image;
- configuring the filesystem image and the cryptographic signature file to be utilized by the destination system;
- transferring the filesystem image and the cryptographic signature file to the destination system;
- cryptographically verifying the filesystem image by the destination system;
- and
- mounting the filesystem image on the destination system in a read-only manner.
A device, comprising:
- a filesystem comprising a hierarchical structure of directories, each of the directories capable of comprising files and sub-directories;
- an operating system and files necessary for the device to operate an operating system, wherein the files necessary for the device to operate the operating system are stored in at least one of the directories;
- a filesystem image comprising an application file and files necessary for the device to execute the application file, wherein an entire content of the filesystem image remains unmodified within the filesystem image in the device;
- and
- a processor configured to operate the operating system and further configured to execute the application file within the filesystem image.
An apparatus for configuring a system, comprising:
- filesystem means comprising an application file and files necessary for executing the application file in a device;
- means for transferring the filesystem means to the device;
- means for cryptographically verifying the filesystem means;
- means for mounting the filesystem means on the device in a read-only manner;
- and
- means for maintaining an entire content of the filesystem means once the filesystem means is mounted on the device.
Dependencies are inferred from the claim text.