Method and apparatus for verifying the integrity of digital objects using signed manifests

Claim 3

The method of claim 1 further comprising storing an attribute of the first object.

Claim 4

The method of claim 1 , wherein associating the first metadata name includes storing in the first manifest section a source of the first object.

Claim 5

The method of claim 1 , wherein associating the first metadata name includes storing within the first manifest section a section of the first object.

Claim 6

The method of claim 1 ,wherein associating the first metadata name comprises specifying a trusted signer.

Claim 7

The method of claim 1 , further comprising generating a signer information section that corresponds to first the manifest section.

Claim 8

The method of claim 6 , wherein generating the signer information section comprises: referencing the first manifest section; storing a third digest identifier of a third digest algorithm within the manifest; and digesting the first manifest section according to the third digest algorithm.

Claim 9

The method of claim 7 , further comprising storing an attribute of the first object not found in the first manifest section.

Claim 10

The method of claim 7 , further comprising generating a signature block that corresponds to the signer information section.

Claim 11

The method of claim 9 , wherein generating the signature block comprises: storing a fourth digest algorithm within the manifest; digesting the signer information according to the fourth digest algorithm; and encrypting the digested signer information with a private key.

Claim 12

The method of claim 1 , further comprising linking the first manifest section with the second manifest section in the same manifest.

Claim 13

A computing-device readable medium having stored thereon sequences of instructions, the sequences of instructions including instructions, which, when executed by a processor, causes the processor to: reference a first object; store a first metadata name for classifying data to be associated with the first object within a first manifest section of a signed manifest; store a first digest identifier of a first digest algorithm within the first manifest section; digest, with the first digest algorithm, a first integrity value for the first object determined with respect to the first metadata name; reference a second object; store a second metadata name for classifying data to be associated with the second object within a second manifest section of the signed manifest; store a second digest identifier of a second digest algorithm within the second manifest section; and digest, with the second digest algorithm, a second integrity value for the second object determined with respect to the second metadata name.

Claim 14

A computing-device readable medium having stored thereon sequences of instructions, the sequences of instructions including instructions, which, when executed by a processor, causes the processor to: reference a first object; store a first metadata name for classifying data to be associated with the first object within a first manifest section of a signed manifest; store a first digest identifier of a first digest algorithm within the first manifest section; digest, with the first digest algorithm, a first integrity value for the first object determined with respect to the first metadata name; reference a second object; store a second metadata name for classifying data to be associated with the second object within a second manifest section of the signed manifest; store a second digest identifier of a second digest algorithm within the second manifest section; and digest, with the second digest algorithm, a second integrity value for the second object determined with respect to the second metadata name.

Claim 15

The computer-readable medium of claim 12 further comprising instructions which, when executed by the processor, causes the processor to generate a first signature information section that corresponds to the first manifest section.

Claim 16

The computer-readable medium of claim 13 , wherein generating the signature information section comprises instructions which, when executed by the processor, causes the processor to: reference the first manifest section; store a third digest identifier of a third digest algorithm; and digest the first manifest section with the third digest algorithm.

Claim 17

The computer-readable medium of claim 14 further comprising instructions which, when executed by the processor, causes the processor to generate a signature block that corresponds to the first signature information section.

Claim 18

The computer-readable medium of claim 15 , wherein generating the signature block comprises instructions which, when executed by the processor, causes the processor to: store a fourth digest identifier of a fourth digest algorithm; digest the first signature information with the fourth digest algorithm; and encrypt the digested signature information with a private key.

Claim 19

An object integrity verification unit comprising: a signed manifest manager to generate a manifest section for each object in a collection of multiple objects, the signed manifest manager further to store a metadata name providing for classifying information associated with an object and a digest identifier corresponding to a specific digest algorithm for the object within each manifest section of a signed manifest having a plurality of manifest sections; and a digest unit, coupled to the signed manifest manager, that digests an integrity value with each digest algorithm within each manifest section, the integrity value instantiating a value for the metadata name and being based at least in part on the metadata name's classification.

Claim 20

An object integrity verification unit comprising: a signed manifest manager to generate a manifest section for each object in a collection of multiple objects, the signed manifest manager further to store a metadata name providing for classifying information associated with an object and a digest identifier corresponding to a specific digest algorithm for the object within each manifest section of a signed manifest having a plurality of manifest sections; and a digest unit, coupled to the signed manifest manager, that digests an integrity value with each digest algorithm within each manifest section, the integrity value instantiating a value for the metadata name and being based at least in part on the metadata name's classification.

Claim 21

The object integrity verification unit of claim 17 , further comprising an encryption/decryption unit, coupled to the signed manifest manager, that encrypts the digested integrity value.

Claim 22

A computer system, comprising: a bus; a processor coupled to the bus; and an object integrity verification unit, including: a signed manifest manager to generate a manifest section for each object in a collection of multiple objects, the signed manifest manager further to store a metadata name providing for classifying information associated with an object and a digest identifier corresponding to a specific digest algorithm for the object within each manifest section of a signed manifest having a plurality of manifest sections; and a digest unit, coupled to the signed manifest manager, that digests an integrity value with the digest algorithm within the manifest section, said integrity value determined with respect to the metadata name.

Claim 23

A computer system, comprising: a bus; a processor coupled to the bus; and an object integrity verification unit, including: a signed manifest manager to generate a manifest section for each object in a collection of multiple objects, the signed manifest manager further to store a metadata name providing for classifying information associated with an object and a digest identifier corresponding to a specific digest algorithm for the object within each manifest section of a signed manifest having a plurality of manifest sections; and a digest unit, coupled to the signed manifest manager, that digests an integrity value with the digest algorithm within the manifest section, said integrity value determined with respect to the metadata name.

Claim 24

The computer system of claim 19 , wherein the object integrity verification unit further comprises an encryption/decryption unit, coupled to the signed manifest manager, that encrypts the digested integrity value.