US 10,503,882 B2 · File execution

Abstract

Methods and systems are described herein to restrict execution of files stored on a computing device. In an example a request to execute a file is intercepted by a security agent on the computing device. The security agent is arranged to determine if metadata stored with the with the file comprises a cryptographic code comprising a function of at least a private key of a security server in communication with the computing device and a first hash value the first hash value being an output of a hash function applied to data associated with the file at a first time. If the security agent determines that the metadata comprises the cryptographic code, it verifies the code with a public key of the security server, obtains a second hash value of the file at a second time and executes the file if the first hash value matches the second hash value.

Claims20

Dependent claims

A method of restricting execution of files stored on a computing device, the method comprising:

intercepting a request to execute a file stored on the computing device;
determining if metadata stored with the file comprises a cryptographic code, the cryptographic code comprising a cryptographic function of at least a private key of a security server in communication with the computing device and a first hash value, the first hash value being an output of a hash function applied to data associated with the file at a first time;
responsive to said metadata comprising the cryptographic code,
verifying said code with a public key of the security server to obtain the first hash value;
obtain a second hash value comprising an output of the hash function applied to the data associated with the file at a second time;
and
executing the file in response to the first hash value matching the second hash value.

4 more elements

A method of restricting execution of files stored on a computing device, the computing device being coupled to a security server via a network, the method comprising:

receiving, at the security server, a request from the computing device over the network, the request comprising a file hash for a file stored on the computing device;
using, at the security server, the file hash as an index to determine if a cryptographic code for the file is accessible to the security server;
responsive to the cryptographic code not being accessible to the security server, computing, at the security server, the cryptographic code as an output of a cryptographic function of at least a private key of the security server and the received file hash;
and
sending the cryptographic code from the security server to the computing device,
wherein the cryptographic code is stored with metadata stored with the file on the computing device and is used to validate the file hash on the computing device to allow execution of the file.

3 more elements

Dependencies are inferred from the claim text.

File execution

Life of this patent

File execution

Life of this patent

Abstract

Claims20