Updating digitally signed active content elements without losing attributes associated with an original signing user

Abstract

A method and system for updating digitally signed active elements without losing attributes associated with an originally signing user. An updating entity determines the identity of an originally signing user from the original digital signature of an active content unit to be updated. Privileges associated with the original active content unit are determined from the original contents of the active content unit, or based on the identity of the originally signing user. The updating entity updates the active content unit with the new software version, and associates the original privileges for the active content unit with the new version of the active content unit. The updating entity stores the identity of the originally creating user in an On Behalf of: field of the updated active content unit. The updated active content unit is digitally signed by the updating entity. When a subsequent software update is received for the previously updated digitally signed active content unit, the updating entity determines that the On Behalf of: field is non-empty, and can then determine whether the previous signer has privileges allowing it to digitally sign for other users, and whether any privileges associated with (e.g. indicated within) the active content unit are available to the user identified in the On Behalf of: field. The privileges associated with subsequent updated version of the active content unit can advantageously be based on the identity of the user contained in the On Behalf of: field.