Method for patching and updating encrypted disk images in a reliable and secure fashion

Patent metadata

Field	Value
Publication number	US-10853495-B2
Application number	US-201916370819-A
Country	US
Kind code	B2
Filing date	Mar 29, 2019
Priority date	Mar 29, 2019
Publication date	Dec 1, 2020
Grant date	Dec 1, 2020

Abstract

Aspects of the present disclosure disclose provide systems and methods for updating, or patching, encrypted image files located at a remote location. More specifically, a content update package that includes encrypted information is received and decrypted. Based on the content update package, a first portion of data in an encrypted image file is located, where the first portion data is to be decrypted and updated based on data in the content update package. The updated data may then be encrypted, verified, and stored. When the updating, or patching, process is complete, the file version located at the remote location is the same as the latest file version. In addition, the updating, or patching, process may be split between multiple operating systems.

First claim

What is claimed is:

1. A system for applying one or more encrypted updates to encrypted content residing at a computing device, the system comprising:
at least one processor; and
at least one memory including instructions which when executed by the at least one processor, causes the at least one processor to:
receive a content update package that includes encrypted data,
decrypt the content update package resulting in at least one of data content or instructions to modify source data,
identify an encrypted portion of source data based on the content update package,
decrypt the encrypted portion of source data resulting in source data,
modify the source data based on the at least one of data content or instructions,
encrypt the modified source data, and
wherein the instructions that cause the at least one processor to decrypt the content update package and decrypt the encrypted portion of source data execute at a first operating system, and the instructions that cause the at least one processor to modify the source data based on the at least one of data content or instructions execute at a second operating system different from the first operating system, wherein the first operating system and the second operating system execute on the computing device.

2. The system of claim 1 , wherein the instructions cause the at least one processor to verify the encrypted modified source data is the same as a gold standard version of the source data.

3. The system of claim 1 , wherein the instructions cause the at least one processor to generate a hash value based on the encrypted modified source data and compare the generated hash value to a hash value associated with a gold standard version of the source data.

4. The system of claim 3 , wherein the instructions cause the at least one processor to determine differences between a gold standard version of the source data and a previous version of the source data, and generate the content update package based on the identified differences.

5. The system of claim 4 , wherein the instructions cause the at least one processor to obtain a gold standard version of the source data if the generated hash value does not match the hash value associated with the gold standard version of the source data.

6. The system of claim 1 , wherein the instructions cause the at least one processor to provide an indication of a version of the source data to a content provider and receive the content update package from the content provider.

7. The system of claim 1 , wherein the source data is associated with a portion of a game image file of a first version, and the content update package includes content associated with updating the game image file to a second version, wherein the second version is an updated and later occurring version of the first version.

8. The system of claim 1 , wherein the instructions cause the at least one processor to update hash data associated with the encrypted modified source data with one or more hashes received in the content update package.

9. A method for applying one or more encrypted updates to encrypted content residing at a computing device, the method comprising:
receiving a content update package that includes encrypted data;
decrypting, in a first operating system, the content update package resulting in at least one of data content or instructions to modify source data;
identifying an encrypted portion of source data based on the content update package;
decrypting, in the first operating system, the encrypted portion of source data resulting in source data;
modifying, in a second operating system, the source data based on the at least one of data content or instructions, wherein the first operating system and the second operating system execute on the computing device;
encrypting the modified source data; and
verifying the encrypted modified source data is the same as a gold standard version of the source data.

10. The method of claim 9 , further comprising:
generating a hash value based on the encrypted modified source data and comparing the generated hash value to a hash value associated with the gold standard version of the source data.

11. The method of claim 10 , further comprising:
obtaining a gold standard version of the source data if the generated hash value does not match a hash value associated with the gold standard version of the source data.

12. The method of claim 9 , further comprising:
determining differences between a gold standard version of the source data and a previous version of the source data; and
generating the content update package based on the identified differences.

13. The method of claim 9 , further comprising:
updating hash data associated with the encrypted modified source data with one or more hash values associated with the gold standard version of the source data.

14. The method of claim 9 , further comprising:
decrypting the content update package with a first encryption key; and
decrypting the encrypted portion of source data with a second encryption key different from the first encryption key.

15. The system of claim 1 , wherein at least one of the first operating system or the second operating system operates on a virtual machine of the computing device.

16. A game console for applying one or more encrypted updates to encrypted gaming content residing at a computing device, the game console comprising:
at least one processor; and
at least one memory including instructions which when executed by the at least one processor, causes the at least one processor to:
receive a content update package, that includes encrypted data, for a game title,
decrypt the content update package resulting in at least one of data content or instructions to modify source data associated with the game title,
identify an encrypted portion of source data based on the content update package,
decrypt the encrypted portion of source data resulting in source data,
modify the source data based on the at least one of data content or instructions,
encrypt the modified source data, and
wherein the instructions that cause the at least one processor to decrypt the content update package and decrypt the encrypted portion of source data execute at a first operating system, and the instructions that cause the at least one processor to modify the source data based on the at least one of data content or instructions execute at a second operating system different from the first operating system, wherein the first operating system and the second operating system execute on the computing device.

17. The game console of claim 16 , wherein the instructions cause the at least one processor to verify the encrypted modified source data is the same as a gold standard version of the source data.

18. The game console of claim 16 , wherein the instructions cause the at least one processor to generate a hash value based on the encrypted modified source data and compare the generated hash value to a hash value associated with a gold standard version of the source data.

19. The game console of claim 18 , wherein the instructions cause the at least one processor to determine differences between a gold standard version of the source data and a previous version of the source data, and generate the content update package based on the identified differences.

20. The game console of claim 19 , wherein the instructions cause the at least one processor to obtain a gold standard version of the source data if the generated hash value does no

Assignees

• Microsoft Technology Licensing Llc

Inventors

• Cooke Simon Lee

Classifications

• H04L9/0643

  Hash functions, e.g. MD5, SHA, HMAC or f9 MAC · CPC title

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• G06F21/57 Primary

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• G06F21/6209

  to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself · CPC title

• G06F8/658

  Incremental updates; Differential updates · CPC title