Patent ID: 7107463

Claim:
A method of generating a new manifest to facilitate upgrading a trusted application on a computing device to a new trusted application, the method comprising: receiving a request to upgrade the trusted application to the new trusted application; receiving one or more new components to be included in the new trusted application; generating a manifest for the new trusted application, wherein the manifest indicates that the one or more new components can be executed in a process space for the new trusted application, and wherein the manifest comprises: a first portion including data representing a unique identifier of the new trusted application; a second portion including data indicating whether a particular one or more binaries can be executed in the process space for the new trusted application; and a third portion that includes data representing an export statement that allows a secret associated with the new trusted application to be exported to a second trusted application, the export statement comprising an identifier of the manifest, an identifier of a manifest of the second trusted application, and a digital signature over the identifier of the manifest and the identifier of the manifest of the second trusted application; and making the manifest available to the computing device where the new trusted application is to be executed.