| 摘要 |
Method for distribution of software components, comprising the steps of (a) deriving a software component identifier from each relevant relevant software component, (b) putting the relevant software component to an integrity test, (c) creating, by a certificate issuer (5), an integrity certificate comprising integrity test data labeled with the relevant software component's identifier and (d) register, in a certificate register (4), the integrity certificate of the relevant software component. Subsequent steps are (e) deriving, by a user (3), the software component identifier from a selected software component, (f) retrieving, from the certificate register, the integrity certificate of the selected software component guided by its software component identifier, and (g) evaluating the integrity test data as comprised by the integrity certificate of the selected software component. The identifiers and the integrity certificates of all relevant software components preferrably are registered in a certificate register and wherein the integrity certificate of the selected software component is retrieved from said certificate register. Additionally, the identity of the certificate issuer may be verified, e.g. by checking the issuer's digital signature. <IMAGE>
|
