US5454000A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and system for authenticating files
Assignee: International Business Machines Corp
•
Filing: 1992-07-13
•
Granted: 1995-09-26
•
Expires: 2012-07-13
Abstract
Abstract A system and method for verifying the integrity of files, and in particular executable files on a server workstation in a distributed computing network. In one form, verification is accomplished by selecting random or pseudo-random sections of the file, both as to the location and size, and comparing check code results for those sections with corresponding calculations of check codes for a secure master file. In the context of a network, the objective is to verify the integrity of the executable file, typically located in as unsecure server computer, and once so verified transmit over a relatively secure communication network confidential data to be used by the executable file. The systems and methods for practicing the invention in a distributed computing network involving communication, using relative security protocols, between a dispatcher workstation and a server workstation and resources to generate and compare random or pseudo-random number pairs which define sections of the executable file subject to authentication. The comparison involves check code computations for the sections defined by the number pairs as appears in the server computer file as well as a master executable file in the dispatcher computer. A comparison of the check codes determines the integrity of the executable file in the server computer.
Inventors
- 👤 Barry L. Dorfman
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-02 11:29
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/50; G06F21/51; G06F11/00; G06F11/07; G06F11/08; G06F11/10; G06F21/55; G06F21/56; G06F21/562; G06F21/565
Claims Analysis
Total Claims: 18
Claim 1
Independent Claim
82 words
In a computer system having a processor and memory, a system for authenticating a file stored in memory with the processor, comprising: means for the processor to define random or pseudo-random sections within the file; means for the processor to generate check codes for the defined random or pseudo-random section of the file; and means for the processor to compare generated check codes of the file with check codes for corresponding sections in a master copy of the file to detect inconsistencies.
Claim 2
Dependent Claim
82 words
In a computer system having a processor and memory, a system for authenticating a file stored in memory with the processor, comprising: means for the processor to define random or pseudo-random sections within the file; means for the processor to generate check codes for the defined random or pseudo-random section of the file; and means for the processor to compare generated check codes of the file with check codes for corresponding sections in a master copy of the file to detect inconsistencies.
Claim 3
Dependent Claim
23 words
The system recited in claim 1, wherein the random or pseudo-random sections are defined by a section starting location and section size information.
Claim 4
Dependent Claim
24 words
The system recited in claim 2, wherein the sections are groupings of file bytes defined by a starting location and length in the file.
Claim 5
Dependent Claim
79 words
In a computer having a processor and memory, a method for authenticating a file stored in memory with the processor, comprising the steps of: defining by the processor random or pseudo-random sections within the file; generating by the processor check codes for the defined random of pseudo-random section of the file; and comparing by the processor the generated check codes of the file with check codes for corresponding sections in a master copy of the file to detect inconsistencies.
Claim 6
Dependent Claim
79 words
In a computer having a processor and memory, a method for authenticating a file stored in memory with the processor, comprising the steps of: defining by the processor random or pseudo-random sections within the file; generating by the processor check codes for the defined random of pseudo-random section of the file; and comparing by the processor the generated check codes of the file with check codes for corresponding sections in a master copy of the file to detect inconsistencies.
Claim 7
Dependent Claim
23 words
The method recited in claim 4, wherein the random or pseudo-random sections are defined by a section starting location and section size information.
Claim 8
Dependent Claim
25 words
The method recited in claim 5, wherein the sections are groupings of file bytes defined by a starting location and a length in the file.
Claim 9
Dependent Claim
124 words
In a network of computers having processors, memory and communication resources, a system for authenticating an executable file stored in a memory of the network, comprising: means for establishing communication between a dispatcher computer and a server computer in the network; means for defining random or pseudo-random sections within an executable file stored at the server computer; means for the server computer to generate check codes for the defined random or pseudo-random section of the executable file at the server computer; and means for a computer of the network to compare the generated check codes of the executable file in the server computer with check codes for corresponding sections in a master copy of the executable file in the dispatcher computer to detect inconsistencies.
Claim 10
Dependent Claim
124 words
In a network of computers having processors, memory and communication resources, a system for authenticating an executable file stored in a memory of the network, comprising: means for establishing communication between a dispatcher computer and a server computer in the network; means for defining random or pseudo-random sections within an executable file stored at the server computer; means for the server computer to generate check codes for the defined random or pseudo-random section of the executable file at the server computer; and means for a computer of the network to compare the generated check codes of the executable file in the server computer with check codes for corresponding sections in a master copy of the executable file in the dispatcher computer to detect inconsistencies.
Claim 11
Dependent Claim
36 words
In the system recited in claim 7, wherein the communication is provided by a relatively secure link between a job dispatcher process executing on the dispatcher computer and a partner process executing on the server computer.
Claim 12
Dependent Claim
23 words
The system recited in claim 8, wherein the random or pseudo-random sections are defined by a section starting location and section size information.
Claim 13
Dependent Claim
27 words
The system recited in claim 9, wherein the sections are groupings of executable file bytes defined by a starting location and a length in the executable file.
Claim 14
Dependent Claim
117 words
In a network of computers having processors, memory and communication resources, a method for authenticating an executable file stored in a memory of the network, comprising the steps of: establishing a communication between a dispatcher computer and a server computer in the network; defining random or pseudo-random sections within an executable file stored at the server computer; generating by the server computer check codes for the defined random or pseudo-random section of the executable file; and comparing in a computer of the network the generated check codes of the executable file in the server computer with check codes for corresponding sections in a master copy of the executable file stored in the dispatcher computer to detect inconsistencies.
Claim 15
Dependent Claim
117 words
In a network of computers having processors, memory and communication resources, a method for authenticating an executable file stored in a memory of the network, comprising the steps of: establishing a communication between a dispatcher computer and a server computer in the network; defining random or pseudo-random sections within an executable file stored at the server computer; generating by the server computer check codes for the defined random or pseudo-random section of the executable file; and comparing in a computer of the network the generated check codes of the executable file in the server computer with check codes for corresponding sections in a master copy of the executable file stored in the dispatcher computer to detect inconsistencies.
Claim 16
Dependent Claim
35 words
The method recited in claim 11, wherein the communication is provided by a relatively secure link between a job dispatcher process executing on the dispatcher computer and a partner process executing in the server computer.
Claim 17
Dependent Claim
23 words
The method recited in claim 12, wherein the random or pseudo-random sections are defined by a section starting location and section size information.
Claim 18
Dependent Claim
27 words
The method recited in claim 13, wherein the sections are groupings of executable file bytes defined by a starting location and a length in the executable file.
References Cited (Backward Citations)
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 1998-09-25 | 1999-03-27 | 1999-09-26 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2002-09-25 | 2003-03-27 | 2003-09-26 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2006-09-25 | 2007-03-27 | 2007-09-26 | $7700.00 | Window Closed / Lapsed |