Abstract: Methods and systems for securing endpoint devices are disclosed. Overtime, the functionality of endpoint devices may be modified as new software is developed. To secure endpoint devices, software images of the new software may be verified prior to execution. Information usable to verify the software images may be stored in a database. A set of rules may be used to verify the trustworthiness of the software images based on the content of the database. Another set of rules may be used to verify the content of the database.

Abstract: Systems, devices, and methods for managing data processing systems are disclosed. The data processing systems may provide computer implemented services based on communications between the data processing systems. To manage the data processing systems, a signing framework may be enforced to interpret and/or resolve operations invoked by the communications. The signing framework may be used by data processing systems to reduce the likelihood of undesired use and/or interaction with the data processing systems caused by unsecure communications.

Abstract: Methods and systems for verifying authority in distributed systems are disclosed. Authority may be delegated to various entities within a distributed system to invoke performance of operations within the distributed systems. To verify that authority has been delegated, a security framework may be used that limits computing resource consumption for the verifications. The computing resource consumption may be limited by using cryptographically verifiable data structures that establish chains of delegation of authority. The cryptographically verifiable data structures may be limited in size and content to reduce the computational cost for implementing the security framework.