Secure deployment of a software package

Patent metadata

Field	Value
Publication number	US-12277201-B2
Application number	US-202318363632-A
Country	US
Kind code	B2
Filing date	Aug 1, 2023
Priority date	Aug 1, 2016
Publication date	Apr 15, 2025
Grant date	Apr 15, 2025

Abstract

A method of securely deploying a software package comprises storing validity data describing restricted use of a restricted use token; receiving a command including a URL to deploy a software package; testing validity of the URL based on the validity data; and downloading, when the testing is successful, the software package via a secure channel, wherein the method is performed using one or more processors.

First claim

The invention claimed is:

1. A method of securely deploying a software package, comprising:
storing validity data describing restricted use of a restricted use token comprising a plurality of randomly-selected natural language words;
receiving a command including a URL to deploy a software package;
testing validity of the URL based on the validity data, including verifying that the URL includes the restricted use token;
causing downloading from on the URL, when the testing is successful, the software package via a secure channel,
wherein the method is performed using one or more processors.

2. The method of claim 1 , further comprising:
receiving a request to generate the software package and generating the software package;
generating the restricted use token for deploying the software package.

3. The method of claim 2 , further comprising:
concatenating the restricted use token with a URL root string into a target URL;
sending the target URL to a first device over a first computer network,
the command being received from a second device over a second computer network.

4. The method of claim 1 , the validity data including a use threshold value indicating a number of times the restricted use token may be used or a time window during which the restricted use token remains valid.

5. The method of claim 4 , further comprising:
determining whether use of the restricted use token exceeds the use threshold;
in response to determining that the use of the restricted use token does not exceed the use threshold, determining whether the use of the restricted use token remains within the time window,
the downloading being performed in response to determining that the use of the restricted use token remains within the time window.

6. The method of claim 4 ,
the validity data further including a number of times the restricted use token has been used;
the method further comprising updating the number of times the restricted use token has been used in response to a positive result of the testing.

7. The method of claim 1 ,
the validity data further including one or more previous restricted use tokens,
the testing comprising matching the URL with the one or more previous restricted use tokens.

8. The method of claim 1 , further comprising:
receiving a second command including a second URL;
determining that the second URL is invalid based on the validity data;
closing the secure channel.

9. The method of claim 1 , the testing comprising extracting the restricted use token out of the URL.

10. The method of claim 1 , the downloading comprising sending the software package to a computing device specified in the command.

11. A computer-readable, non-transitory storage medium storing computer-executable instructions, which when executed cause one or more processors to perform a method of securely deploying a software package, the method comprising:
storing validity data describing restricted use of a restricted use token comprising a plurality of randomly-selected natural language words;
receiving a command including a URL to deploy a software package;
testing validity of the URL based on the validity data, including verifying that the URL includes the restricted use token;
causing downloading from on the URL, when the testing is successful, the software package via a secure channel.

12. The computer-readable, non-transitory storage medium of claim 11 , the method further comprising:
receiving a request to generate the software package and generating the software package;
generating the restricted use token for deploying the software package.

13. The computer-readable, non-transitory storage medium of claim 12 , the method further comprising:
concatenating the restricted use token with a URL root string into a target URL;
sending the target URL to a first device over a first computer network,
the command being received from a second device over a second computer network.

14. The computer-readable, non-transitory storage medium of claim 11 , the validity data including a use threshold value indicating a number of times the restricted use token may be used or a time window during which the restricted use token remains valid.

15. The computer-readable, non-transitory storage medium of claim 14 , the method further comprising:
determining whether use of the restricted use token exceeds the use threshold;
in response to determining that the use of the restricted use token does not exceed the use threshold, determining whether the use of the restricted use token remains within the time window,
the downloading being performed in response to determining that the use of the restricted use token remains within the time window.

16. The computer-readable, non-transitory storage medium of claim 14 ,
the validity data further including a number of times the restricted use token has been used;
the method further comprising updating the number of times the restricted use token has been used in response to a positive result of the testing.

17. The computer-readable, non-transitory storage medium of claim 11 ,
the validity data further including one or more previous restricted use tokens,
the testing comprising matching the URL with the one or more previous restricted use tokens.

18. The computer-readable, non-transitory storage medium of claim 11 , the method further comprising:
receiving a second command including a second URL;
determining that the second URL is invalid based on the validity data;
closing the secure channel.

19. The computer-readable, non-transitory storage medium of claim 11 , the testing comprising extracting the restricted use token out of the URL.

20. The computer-readable, non-transitory storage medium of claim 11 , the downloading comprising sending the software package to a computing device specified in the command.

Assignees

• Palantir Technologies Inc

Inventors

• Fox Daniel
• Mance Felix
• Cvitanovic Jelena

Classifications

• G06F21/1014

  to tokens · CPC title

• G06F16/254 Primary

  Extract, transform and load [ETL] procedures, e.g. ETL data flows in data warehouses · CPC title

• G06F16/9566

  URL specific, e.g. using aliases, detecting broken or misspelled links · CPC title

• H04L67/146

  Markers for unambiguous identification of a particular session, e.g. session cookie or URL-encoding · CPC title

• H04L67/34

  involving the movement of software or configuration parameters  (network booting or remote initial program loading [RIPL] G06F9/4416) · CPC title