Establishment of signing pipelines and validation of signed software images
AssigneeDell Products L.P.
InventorsBRADLEY K. GOODMAN, JOSEPH CAISSE, ERIC JOSEPH BRUNO
Life of this patent
Estimating the term…
Abstract
Methods and systems for using signing pipelines to secure endpoint systems are disclosed. Endpoint systems may be secured using signed images that are signed by the signing pipelines. The signing pipelines may be based on validation rules implemented by the endpoint systems. The validation rules may be analyzed to identify how images must be signed based on the validation rules. The manner in which the images must be signed may be used to instantiate the signing pipeline.
Claims20
A method for managing secure execution of software images, the method comprising:
- obtaining a software image of the software images;
- identifying validation rules for the software image;
- performing a signing analysis for the software image using the validation rules to obtain a signing pipeline description;
- instantiating a signing pipeline based on the signing pipeline description;
- and
- obtaining a signed copy of the software image using the signing pipeline.
A non-transitory machine-readable medium having instructions stored therein, which when executed by at least one processor, cause a system to perform operations for managing secure execution of software images, the operations comprising:
- obtaining a software image of the software images;
- identifying validation rules for the software image;
- performing a signing analysis for the software image using the validation rules to obtain a signing pipeline description;
- instantiating a signing pipeline based on the signing pipeline description;
- and
- obtaining a signed copy of the software image using the signing pipeline.
An data processing system, comprising:
- at least one processor;
- and
- a memory coupled to the processor to store instructions, which when executed by the processor, cause the system to perform operations for managing secure execution of software images, the operations comprising:
- obtaining a software image of the software images;
- identifying validation rules for the software image;
- performing a signing analysis for the software image using the validation rules to obtain a signing pipeline description;
- instantiating a signing pipeline based on the signing pipeline description;
- and
- obtaining a signed copy of the software image using the signing pipeline.
Dependencies are inferred from the claim text.