Library Digest Tracking via Digital Signatures

The patent applies preliminary action by calculating and signing digests of common libraries in advance before deployment. The server computing system calculates digests of common libraries used by software programs and obtains digital signatures of tracking information containing these digests. This allows clients to verify the authenticity and version status of libraries before execution, preventing security vulnerabilities from outdated or tampered versions.

The patent uses an intermediary approach by introducing a server computing system that acts as a trusted mediator between software providers and clients. The server calculates digests, obtains digital signatures from trusted sources, and returns signed tracking information with responses. Clients only need to verify the digital signature and compare digests, which simplifies their verification process while maintaining high security standards.

The patent applies self-service by enabling the server computing system to automatically calculate digests of common libraries and obtain digital signatures without requiring additional verification logic in the software programs. The system retrieves tracking information, calculates current digests, verifies them against signed references, and returns verification results automatically, reducing development effort while ensuring genuineness.

The patent uses feedback by implementing a verification mechanism where clients send requests to the server with tracking information, and the server responds with verification results indicating whether the common library versions are current and authentic. This feedback loop allows systems to identify and update outdated libraries while maintaining backward compatibility for verified versions, reducing security exposures from obsolete libraries.