Secure versioning of software packages

摘要

To provide a secure installation and execution software environment, locked version numbers are maintained. A locked version number associated with a software program may be stored. When a request is received to update the software program with an update package, a package number of the update package may be compared to the locked version number. The software program may be updated with the update package if the package number is at least as recent as the locked version number, and the updating of the software program with the update package may be restricted if the package number is earlier than the locked version number.

主权项

1. A computer-implemented method for restricting installation and execution of a superseded software program on a computing device, comprising:
storing, in a lockable, physical non-volatile memory of the computing device, a locked version number associated with a software program, wherein write access to the lockable non-volatile memory is restricted for at least some software programs executing on the computing device; receiving a request to update the software program with an update package associated with a package number; comparing, by a processor, the package number with the locked version number; determining, by the processor, whether to update the software program based at least in part on the comparison; updating the software program with the update package when the package number is at least as recent as the locked version number; and restricting the updating of the software program with the update package when the package number is earlier than the locked version number.