Patent ID: 8646099
Filing Date: 2014-02-04
Classification: G06F,H04L

Abstract:
1. A method implemented by an aggregator for securing the integrity of, and authenticating the origin and privileges of, a piece of code, wherein the aggregator is the holder of a valid signing certificate and is configured to digitally sign different pieces of code with that valid signing certificate for different code developers, wherein the method comprises: receiving a piece of code from a code developer, inserting revocation code into the received piece of code, wherein the revocation code is only valid for the received piece of code, building a complete piece of code using the received piece of code and the revocation code, digitally signing the complete piece of code using the valid signing certificate held by the aggregator, making the digitally signed complete piece of code retrievable to the code developer, and responsive to receiving a request from a remote device executing the revocation code contained in the digitally signed complete piece of code, checking whether or not privileges previously granted to the digitally signed complete piece of code have since been revoked.