CONTROLLING ACCESS BY CODE

摘要

A novel code signing system, computer readable media, and method are provided. The code signing method includes receiving a code signing request from a requestor in order to gain access to one or more specific application programming interfaces (APIs). A digital signature is provided to the requestor. The digital signature indicates authorization by a code signing authority for code of the requestor to access the one or more specific APIs. In one example, the digital signature is provided by the code signing authority or a delegate thereof. In another example, the code signing request may include one or more of the following: code, an application, a hash of an application, an abridged version of the application, a transformed version of an application, a command, a command argument, and a library.

主权项

1. A method of controlling access by code to one or more application programming interfaces (APIs) of a device, the method comprising:
determining whether the code is signed with an authentic digital signature indicating authorization for the code to access one or more specific APIs of the device, wherein the authentic digital signature is generated by an entity that issues authentic digital signatures external to the device; and controlling access by the code to the one or more specific APIs depending on whether the code is signed with the authentic digital signature.