US5224160A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Process for securing and for checking the integrity of the secured programs
Assignee: Fujitsu Technology Solutions GmbH
•
Filing: 1992-03-20
•
Granted: 1993-06-29
•
Expires: 2012-03-20
Abstract
Abstract For securing programs contained in a system storage and for checking their integrity, the programs are in each case coded by a symmetric cryptographic algorithm with the application of a readback secured, secret key, and a check number for each program is simultaneously formed and stored in the storage of the system. For checking the integrity, the programs are then coded again in the same manner and the check number thus obtained in each case is compared with the check number stored at the first coding. It is possible to derive from the result of comparison a criteria for activation or locking the following programs.
Inventors
- 👤 Werner Paulini
- 👤 Dietmar Wessel
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-05 20:28
CPC Classifications
G; G07; G07F; G07F7/00; G07F7/08; G07F7/10; G07F7/1008; G06; G06F; G06F11/00; G06F11/07; G06F11/08; G06F11/10; G06F11/1008; G06F11/1076; G06F12/00; G06F12/14; G06F12/1408; G06F21/00; G06F21/60; G06F21/602; G06F21/64; G06Q; G06Q20/00; G06Q20/30; G06Q20/34; G06Q20/341; G06Q20/355; G06Q20/3552; G06Q20/38; G06Q20/40; G06Q20/409; G06Q20/4097; G06Q20/40975
Claims Analysis
Total Claims: 15
Claim 1
Independent Claim
119 words
In a data processing system having a memory and at least one executable program, a method of protecting against the execution of programs altered without authorization, the method comprising the steps of: storing in said computer system a reference checksum generated on the basis of an authorized version of the at least one program by execution of a predetermined cryptographic algorithm; generating a program checksum on the basis of a version of the at least one program presented for execution in the computer system, by execution of the predetermined cryptographic algorithm; comparing the generated program checksum with the stored reference checksum; and blocking execution of the at least one program when the generated checksum differs from the reference checksum.
Claim 2
Dependent Claim
119 words
In a data processing system having a memory and at least one executable program, a method of protecting against the execution of programs altered without authorization, the method comprising the steps of: storing in said computer system a reference checksum generated on the basis of an authorized version of the at least one program by execution of a predetermined cryptographic algorithm; generating a program checksum on the basis of a version of the at least one program presented for execution in the computer system, by execution of the predetermined cryptographic algorithm; comparing the generated program checksum with the stored reference checksum; and blocking execution of the at least one program when the generated checksum differs from the reference checksum.
Claim 3
Dependent Claim
17 words
The method in accordance with claim 1 wherein the reference checksum is generated using a secret key.
Claim 4
Dependent Claim
18 words
The method in accordance with claim 2 wherein the program checksum is generated using the same secret key.
Claim 5
Dependent Claim
14 words
The method in accordance with claim 3 wherein the algorithm is the DES algorithm.
Claim 6
Dependent Claim
30 words
The method in accordance with claim 1 wherein the data processing system comprises a read protected memory area and wherein the reference checksum is stored in the read protected area.
Claim 7
Dependent Claim
37 words
The method in accordance with claim 1 wherein the system comprises a computer and separate, physically sealed unit electrically connected to the computer and wherein the cryptographic algorithm is stored and executed inside the physically sealed unit.
Claim 8
Dependent Claim
36 words
The method in accordance with claim 1 wherein the sealed unit provides to the computer a binary result indicating whether a program checksum generate with respect to a particular program matches the corresponding stored reference checksum.
Claim 9
Dependent Claim
47 words
The method in accordance with claim 6 wherein the reference check number of a first of a sequence of programs is stored in read only memory in the computer and the reference checksum for at least one other of the programs is stored in the sealed unit.
Claim 10
Dependent Claim
85 words
The method in accordance with claim 1 in a system comprising a plurality of executable programs, including an original loading program which when executed loads other executable programs into the system, wherein a reference checksum is stored for the original loading program and a program checksum is generated, and wherein execution of the original loading program is blocked and no further programs are loaded in the system when the program checksum generated for the loading program differs from the reference checksum for the loading program.
Claim 11
Dependent Claim
69 words
The method in accordance with claim 1 wherein an individual reference checksum is stored for each of a plurality of sequentially executable programs and wherein, upon completion of one program, a checksum is generated for a next program to be executed and execution of the next program is initiated only if the checksum generated for the next program does not differ from the reference checksum for the next program.
Claim 12
Dependent Claim
36 words
The method in accordance with claim 1 wherein the reference checksum and the program checksum are generated on the basis of the total information content of the authorized version and of the version presented for execution.
Claim 13
Dependent Claim
159 words
In a data processing system comprising an administrative computer and at least one target computer and at least one target computer program to be executed on the target computer, a method of protecting against the execution of programs altered without authorization, the method comprising the steps of: generating a reference checksum on the basis of an authorized version of the at least one target computer program by execution of a predetermined cryptographic algorithm in the administrative computer; storing the reference checksum in a portable memory carrier; transferring the carrier to the target computer; generating a program checksum on the basis of a version of the at least one program presented for execution in the target computer, by execution of the predetermined cryptographic algorithm; comparing the generated program checksum with the reference checksum; and executing the at least one program in the target computer only when the comparison indicates that the generated checksum is equal to the corresponding reference checksum.
Claim 14
Dependent Claim
159 words
In a data processing system comprising an administrative computer and at least one target computer and at least one target computer program to be executed on the target computer, a method of protecting against the execution of programs altered without authorization, the method comprising the steps of: generating a reference checksum on the basis of an authorized version of the at least one target computer program by execution of a predetermined cryptographic algorithm in the administrative computer; storing the reference checksum in a portable memory carrier; transferring the carrier to the target computer; generating a program checksum on the basis of a version of the at least one program presented for execution in the target computer, by execution of the predetermined cryptographic algorithm; comparing the generated program checksum with the reference checksum; and executing the at least one program in the target computer only when the comparison indicates that the generated checksum is equal to the corresponding reference checksum.
Claim 15
Dependent Claim
28 words
The method in accordance with claim 12 wherein the portable memory carrier comprises a physically sealed unit and wherein the cryptographic algorithm is stored in the memory carrier.
References Cited (Backward Citations)
DE2650795A1
Cited
US4120030A
Cited
US4433207A
Cited
US4471163A
Cited
US4683553A
Cited
US4740890A
Cited
US4609777A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1996-06-28 | 1996-12-28 | 1997-06-29 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2000-06-28 | 2000-12-28 | 2001-06-29 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2004-06-28 | 2004-12-28 | 2005-06-29 | $7700.00 | Window Closed / Lapsed |