Method, system and apparatus for delayed production code signing for heterogeneous artifacts
AssigneeIntel Corporation
InventorMateusz Bronk
Life of this patent
Estimating the term…
Loading patent…
AssigneeIntel Corporation
InventorMateusz Bronk
Estimating the term…
The disclosed embodiments enable applying production nature to a software signature post-build (or even post-release), where the signature type is determined by the existence of a production-signed intermediate CA certificate—either hosted in the cloud (for pure release immutability), or re-ingested into the package (if certain modification are allowed). This allows a so-called deferred issuance of the product release. Even if the CA certificate is to be reinserted into the package, this modification likely affects only the delivery shell (e.g., installer) and may not require format-specific binary changes of, possibly heterogeneous, artifacts therein.
A method to delay production code signing for a software package, the method comprising:
A non-transitory machine-readable medium including instructions which when executed on a processor cause the processor to implement operations comprising:
A system comprising:
Dependencies are inferred from the claim text.