Patent ID: 8745616
Filing Date: 2014-06-03
Classification: G06F,H04L

Abstract:
1. A computer-implemented method for providing digital certificates that certify the integrity and trustworthiness of digitally signed code, the method comprising: receiving a request from a software publisher to sign code, the request comprising: a digital signature that verifies the integrity of the code; prior to signing the code: verifying the integrity of the code received from the software publisher by validating the digital signature received from the software publisher; verifying the trustworthiness of the code received from the software publisher at least in part by testing the code received from the software publisher for vulnerabilities; upon verifying the integrity and trustworthiness of the code, signing the code by generating a single digitally signed trustworthiness certificate for the code that certifies both that the code originates from the software publisher and that the code itself is trustworthy; after signing the code, storing the code within a database; providing the trustworthiness certificate to the software publisher to enable the software publisher to attest that the code is trustworthy; performing periodic reviews of the code stored within the database in order to verify that the code remains trustworthy; wherein each step of the computer-implemented method is performed by a computing device comprising at least one processor.