System and method for using digital signatures to assign permissions

摘要

According to one embodiment of the invention, a method for setting permission levels is described. First, an application and digital signature is received by logic performing the permission assessment. Then, a determination is made as to what permission level for accessing resources is available to the application based on the particulars of the digital signature. Herein, the digital signature being signed with a private key corresponding to a first public key identifies that the application is assigned a first level of permissions, while the digital signature being signed with a private key corresponding to a second public key identifies the application is assigned a second level of permissions having greater access to the resources of an electronic device than provided by the first level of permissions.

主权项

1. Device comprising:
at least one non-transitory computer readable storage medium with instructions which when executed by at least one processor configure the processor for: receiving an application signed by a digital signature, the application seeking access to one or more resources of an electronic device; processing the application and/or digital signature using a function to render a function result; using a first public key to extract information from the digital signature; using a second public key to extract information from the digital signature; comparing the function result with the information extracted using the first public key; comparing the function result with the information extracted using the second public key; responsive to determination that the function result does not match information extracted by the first or second public key, not granting the application access to the resources of the electronic device; responsive to determination that the function result matches the information extracted using the first public key, granting the application access to one or more resources of the electronic device at a first level of access; and responsive to determination that the function result matches the information extracted using the second public key, granting the application access to one or more resources of the electronic device at a second level of access, the second level of access granting greater access to the resources than the first level of access.