Directory-secured packages for authentication of software installation

摘要

A system and method for authenticating the source, integrity, and associated execution controls, of a plurality of software, including but not limited to, installation packages, updates, patches, and other code components, distributed from a plurality of issuers for implementation on a plurality of predetermined recipient information handling systems operating within a network environment. Current file security is improved by automatically filtering software installation packages to ensure that each package component is signed by a trusted and verified issuer, and has not been tampered with, thereby replacing a weak, native trust model based on firewalls, static filters, reactive detection, and cleansing approaches. The method of the invention utilizes directory services, implemented within a network environment, to monitor and verify which software is currently authorized and implemented on one or more information handling systems operating within the network environment, and whether or not software received over a network is authorized to interact with a predetermined information handling system(s) and/or its previously implemented and authorized software.