Patent ID: 9059856
Filing Date: 2015-06-16
Classification: G06F,H04L

Abstract:
1. In a computer networking environment that includes a cloud computing environment accessed by plurality of computing systems and at least one publisher computer system, a computer program product comprising at least one storage device having stored computer-executable instructions which, when executed by one or more processors perform a computer-implemented method which, when implemented by the publisher computer system, provides secure storage for a selected software package in the cloud computing environment, the computer-implemented method comprising acts of: generating at the publisher computing system a hash for a selected software package; sending from the publisher computing system a signing request that includes the hash of the selected software package, the signing request being sent to a keying and signing service located at the cloud computing environment and the signing request requesting that the selected software package be signed; receiving at the publisher computing system the digitally signed hash signed with a public key from a public/private key pair generated for the selected software package of the publisher computing system at the keying and signing service; attaching the digitally signed hash to the selected software package at the publisher computing system; the publisher computing system encrypting the selected software package with a symmetric key; and sending from the publisher computing system the symmetric key to the keying and signing service at the cloud computing environment, wherein the symmetric key is encrypted and stored at a secure data store of the cloud computing environment with an encrypted version of the private key from said public/private key pair generated for the selected software package.