Patent US5757915A successfully refreshed from Google Patents.
US5757915A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Parameterized hash functions for access control
Assignee: Intel Corp
•
Filing: 1995-08-25
•
Granted: 1998-05-26
•
Expires: 2015-08-25
Abstract
Abstract A method and apparatus for access control in a computer system are disclosed. A storage unit receives a block of data having an encrypted executable image and a signature component. A separation unit coupled to the storage unit separates the signature component from the encrypted executable image. A decryption unit coupled to the separation unit decrypts the encrypted executable image using the signature component as a key. This yields an decrypted executable program. An identification unit coupled to the decryption unit locates an identification mark in the decrypted executable program and identifies a composite key assigned to the identification mark. A signature generation unit coupled to the identification unit performs a keyed cryptographic hash algorithm on the decrypted executable program using the composite key as a key. A verification unit coupled to the signature generation unit compares the signature component with the computed keyed cryptographic hash value to verify the source of the block of data and to determine whether it has been modified. If the signature matches the keyed cryptographic hash value, a rights assignment unit coupled to the verification unit assigns appropriate access rights to the decrypted executable program and allows it to be executed by a computer system.
Inventors
- 👤 David W. Aucsmith
- 👤 Robert C. Knauerhase
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-08 11:05
CPC Classifications
G; G06; G06F; G06F21/00; G06F21/60; G06F21/64; G06F21/50; G06F21/51; G06F2211/00; G06F2211/007
Claims Analysis
Total Claims: 17
Claim 1
Independent Claim
57 words
A method for generating an encoded executable image, comprising: performing a cryptographic keyed hash function on an executable program to generate a signature component using a first key having an associated set of access rights assigned to the executable program; and performing an encryption algorithm on the executable program using the signature component as a second key.
Claim 2
Independent Claim
57 words
A method for generating an encoded executable image, comprising: performing a cryptographic keyed hash function on an executable program to generate a signature component using a first key having an associated set of access rights assigned to the executable program; and performing an encryption algorithm on the executable program using the signature component as a second key.
Claim 3
Dependent Claim
22 words
The method of claim 1, wherein performing the cryptographic keyed hash function comprises performing a data encryption standard cipher block chaining algorithm.
Claim 4
Independent Claim
63 words
A method for access control, comprising separating a signature component from an executable image in a block of data; decrypting the executable image into a executable program using the signature component; computing a cryptographic keyed hash value of the executable program using a key; verifying a source of the block of data by comparing the signature component with the cryptographic keyed hash value.
Claim 5
Independent Claim
63 words
A method for access control, comprising separating a signature component from an executable image in a block of data; decrypting the executable image into a executable program using the signature component; computing a cryptographic keyed hash value of the executable program using a key; verifying a source of the block of data by comparing the signature component with the cryptographic keyed hash value.
Claim 6
Dependent Claim
36 words
The method of claim 3 further comprising: finding an identification mark in the executable program; and looking up the key corresponding to the identification mark for performing a cryptographic keyed hash function on the executable program.
Claim 7
Dependent Claim
20 words
The method of claim 3 further comprising assigning rights to the executable program according to rights associated with the key.
Claim 8
Independent Claim
68 words
A device for encoding an executable program, comprising: a signature generation unit that performs a cryptographic keyed hash function on an executable program to generate a signature component using a first key having an associated set of access rights assigned to the executable program; and a first encryption unit, coupled to the signature generation unit, that encrypts the executable program using the signature component as a second key.
Claim 9
Independent Claim
68 words
A device for encoding an executable program, comprising: a signature generation unit that performs a cryptographic keyed hash function on an executable program to generate a signature component using a first key having an associated set of access rights assigned to the executable program; and a first encryption unit, coupled to the signature generation unit, that encrypts the executable program using the signature component as a second key.
Claim 10
Dependent Claim
30 words
The device of claim 6, wherein the signature generation unit further comprises a computation unit and a second encryption unit that performs a data encryption standard cipher block chaining algorithm.
Claim 11
Dependent Claim
102 words
An access controller, comprising: a separation unit that separates a signature component, derived from performing a keyed hash function on a first executable program, from an encrypted executable image in a block of data; a decryption unit, coupled to the separation unit, the decrypts the encrypted executable image into a second executable program with the signature component; a signature generation unit, coupled to the decryption unit, that computes a cryptographic keyed hash value of the second executable program using a key; and a verification unit, coupled to the signature generation unit, that compares the cryptographic keyed hash value with the signature component.
Claim 12
Dependent Claim
102 words
An access controller, comprising: a separation unit that separates a signature component, derived from performing a keyed hash function on a first executable program, from an encrypted executable image in a block of data; a decryption unit, coupled to the separation unit, the decrypts the encrypted executable image into a second executable program with the signature component; a signature generation unit, coupled to the decryption unit, that computes a cryptographic keyed hash value of the second executable program using a key; and a verification unit, coupled to the signature generation unit, that compares the cryptographic keyed hash value with the signature component.
Claim 13
Dependent Claim
27 words
The access controller of claim 8, wherein the signature generation unit further comprises a key storage component that stores the key utilized by the signature generation unit.
Claim 14
Dependent Claim
40 words
The access controller of claim 8 further comprising an identification unit, coupled to the decryption unit, that identifies the key designated to an identification mark in the executable program for computing the cryptographic hash value of the second executable program.
Claim 15
Dependent Claim
33 words
The access controller of claim 8 further comprising a rights assignment unit, coupled to the signature generation unit, that assigns rights to the second executable program according to rights associated with the key.
Claim 16
Dependent Claim
97 words
A computer system, comprising: a bus; a memory, coupled to the bus; and a separation unit that separates a signature component from an encrypted executable image in a block of data, a decryption unit, coupled to the separation unit, the decrypts the encrypted executable image into an executable program with the signature component, a signature generation unit, coupled to the decryption unit, that computes a cryptographic keyed hash value of the executable program using a key, and a verification unit, coupled to the signature generation unit, that compares the cryptographic keyed hash value with the signature component.
Claim 17
Dependent Claim
97 words
A computer system, comprising: a bus; a memory, coupled to the bus; and a separation unit that separates a signature component from an encrypted executable image in a block of data, a decryption unit, coupled to the separation unit, the decrypts the encrypted executable image into an executable program with the signature component, a signature generation unit, coupled to the decryption unit, that computes a cryptographic keyed hash value of the executable program using a key, and a verification unit, coupled to the signature generation unit, that compares the cryptographic keyed hash value with the signature component.
References Cited (Backward Citations)
US5097504A
Cited
US5224160A
Cited
US5052040A
Cited
US5412718A
Cited
US5343527A
Cited
US5530757A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2001-05-25 | 2001-11-24 | 2002-05-26 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2005-05-25 | 2005-11-24 | 2006-05-26 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2009-05-25 | 2009-11-24 | 2010-05-26 | $7700.00 | Window Closed / Lapsed |