Patent ID: 8214646

Claim:
A method of processing a signed bundle, the method comprising: receiving the signed bundle at a server, the signed bundle comprising a first plurality of files, a catalog file specifying the first plurality of files and a hash for each of the first plurality of files, and a catalog signature obtained by signing the catalog file; verifying the received signed bundle on the server; generating a server file list specifying at least one file of the first plurality of files to be removed from the signed bundle at the server; and removing the at least one file specified in the server file list from the first plurality of files of the signed bundle to generate a modified signed bundle for sending to a device, the modified signed bundle comprising: a second plurality of files comprising all of the files in the first plurality of files except the at least one file specified in the server file list; the catalog file of the signed bundle, the catalog file not being modified by the server despite removal of the at least one file specified in the server file list from the first plurality of files of the signed bundle, such that the hash of the at least one file specified in the server file list remains in the catalog file; and the catalog signature of the signed bundle, the catalog signature not being modified by the server despite the removal of the at least one file specified in the server file list from the first plurality of files of the signed bundle.