Patent ID: 9015837
Filing Date: 2015-04-21
Classification: G06F

Abstract:
1. An auto-update system for verifying an update to data of an electronic device, the auto-update system comprising: memory comprising instructions for verifying the update to the data of the electronic device; and a hardware processor configured to execute the instructions to implement an auto-update module, the auto-update module configured to maintain a restricted list of certificate authority certificates on the electronic device, the restricted list of certificate authority certificates containing two or less certificate authority certificates, each of the two or less certificate authority certificates being associated with a corresponding certificate authority, the auto-update module configured to receive from an update server a server certificate comprising a signature of a certificate authority corresponding to at least one of the two or less certificate authority certificates, the auto-update module configured to establish a secured connection with the update server by verifying the signature of the certificate authority corresponds to at least one of the two or less certificate authority certificates, the auto-update module configured to receive an update from the update server over the secured connection, the update being applicable to a first version of the data installed on a source partition of the electronic device, the update comprising a payload portion and a signature portion, and the signature portion comprising an encrypted expected payload checksum, the auto-update module configured to verify the signature portion by decrypting the encrypted expected payload checksum using a public key stored on the electronic device, the auto-update module configured to apply the update without having to stop running the first version of the data, the update comprising an expected installation checksum associated with applying the update to the first version of the data, the auto-update module configured to determine an actual installation checksum associated with a second version of the data installed on a target partition of the electronic device, the second version of the data comprising the first version of the data with the update applied thereto, and the auto-update module configured to compare the expected installation checksum to the actual installation checksum, and to verify that the installation of the second version of the data was successful based on the comparison.