Back to results
US 10,503,894 B2Granted
Secure process impersonation
AssigneeNCR Corporation
InventorNir Veltman
Life of this patent
Estimating the term…
Abstract
An Operating System (OS) command launcher or loader is newly obfuscated each time a command is successfully processed by the OS command launcher. Moreover, a binary for the OS command launcher is validated each time a command is attempted to be processed for execution by the OS command launcher.
Claims6
A method, comprising:
- identifying a command for execution during a session with an Operating System (OS);
- and
- retrieving an executable for an OS command launcher from a location that is based at least in part on the session;
- validating the executable before processing the executable to launch the command for execution within the OS;
- hashing the executable with a randomly generated key producing a hash value;
- encrypting credentials associated with the session and a path to the location with the randomly generated key producing first encrypted data;
- encrypting the randomly generated key with an OS-provided Key Encryption Key (KEK) producing second encrypted data;
- and
- storing the hash value, the first encrypted data, and the second encrypted data.
6 more elements
A method, comprising:
- identifying a command for execution during a session with an Operating System (OS);
- and
- retrieving an executable for an OS command launcher from a location that is based at least in part on the session;
- and
- validating the executable before processing the executable to launch the command for execution within the OS;
- decrypting a stored encrypted key with an OS-provided Key Encryption Key (KEK) obtaining a key;
- decrypting stored encrypted data with the key obtaining credentials associated with the session and a path to the location;
- wherein validating further includes authenticating the credentials ensuring that the credentials were processed when the session was initiated within the OS;
- wherein authenticating further includes hashing the executable retrieved from the location over the path with the key obtaining a hash value and ensuring that the hash value is equal to a stored hash value;
- and
- generating a new hash value with a new randomly generated key for the executable, producing new encrypted data for the credentials and the path using the new randomly generated key, producing a new encrypted key for the newly generated key using the KEK, and storing the new hash value, the new encrypted data, and the new encrypted key for a subsequent iteration of the method with a second command that is presented for executing within the session.
8 more elements
Dependencies are inferred from the claim text.