Computer implemented method and a computer system to prevent security problems in the use of digital certificates in code signing and a computer program product thereof

• Main Authors: De Los Santos Sergio, Guzman Sacristan Antonio, Alonso Cebrian Jose Maria, Barroso Berrueta David, De La Rosa Tero
• Format: Patent
• Language: English
• Published: 25.04.2017
• Subjects: CALCULATING; COMPUTING; COUNTING; ELECTRIC COMMUNICATION TECHNIQUE; ELECTRIC DIGITAL DATA PROCESSING; ELECTRICITY; PHYSICS; TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHICCOMMUNICATION

A computer implemented method including a software distributor signing via a first server at least one software file using a digital certificate with a digital signature and at least one user via a computing device acquiring a copy of the signed software file. The digital certificate to be used is previously recorded in a second server in communication with the first server, the digital certificate to be recorded being provided by the software distributor upon a registration of the latter in the second server and including information obtained from a trust certificate chain associated to the digital certificate when performing the registration. The second server generates, upon a request made by the software distributor, a hashstamp of the signed software file.