Patent ID: 8452970

Claim:
A method of signing code, the method performed at a code signing device, the method comprising: creating a key pair, the key pair comprising a private key and a public key; storing the private key of the key pair; deploying the public key of the key pair; registering an entity, wherein an account record for the entity is created, and wherein credit card information associated with the entity is validated; receiving, at the code signing device, a code signing request from the entity to sign a software application or hash thereof using the private key of the key pair, wherein the private key is associated with a sensitive application programming interface provided on a mobile device, the software application programmed to access the sensitive application programming interface when the software application is run on the mobile device; digitally signing the software application or hash thereof, wherein a digital signature is generated using the private key; and returning the digital signature in response to the code signing request; wherein the code signing request comprises a second digital signature associated with the entity, and wherein the method further comprises successfully verifying the second digital signature before the digitally signing the software application or hash thereof.