# US 10,503,930 B2 · NDM file protection method and apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,503,930 B2 - Document ID: US10503930B2 - Status: Granted - Kind: B2 - Application number: 15/332,421 - Filed: 2016-10-24 - Published: 2017-02-09 - Granted: 2019-12-10 - Earliest claimed: 2014-04-25 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Dacheng Zhang - Web page: https://patentgrep.com/patent/US10503930B2 ## CPC - H04L 63/123: {received data contents, e.g. message integrity} - G06F 16/1734: {Details of monitoring file system events, e.g. by the use of hooks, filter drivers, logs} - G06F 21/64: Protecting data integrity, e.g. using checksums, certificates or signatures - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) - G06F: ELECTRIC DIGITAL DATA PROCESSING (computer systems based on specific computational models G06N) ## Abstract Embodiments of the present application provide an NDM file protection method and apparatus. The method includes: a sending device generates integrity information of an NDM file, and sends the NDM file and the integrity information of the NDM file to a receiving device, so that the receiving device verifies, according to the integrity information, whether the NDM file is tampered with. ## Claims ### Claim 1 A method, comprising: generating, by a sending device, integrity information of a negotiable datapath model (NDM) file, wherein generating the integrity information comprises generating signature information for the NDM file and validity information for the NDM file using a first key and using a preset algorithm, wherein the signature information serves as the integrity information, and wherein the validity information comprises a valid period of the NDM file; adding the integrity information and the validity information to a metadata section of the NDM file; and sending, by the sending device, the NDM file with the integrity information of the NDM file to a receiving device, causing the receiving device to verify, according to the integrity information, whether the NDM file has been tampered with. ### Claim 2 (depends on 1) The method according to claim 1, further comprising: generating, by the sending device, the validity information of the NDM file for the receiving device to determine the valid period of the NDM file. ### Claim 3 (depends on 1) The method according to claim 1, further comprising: sending, by the sending device, a certificate and information of the preset algorithm to the receiving device, wherein the certificate comprises a second key, wherein the second key is used to verify the integrity information. ### Claim 4 A method, comprising: receiving, by a receiving device, a negotiable datapath model (NDM) file that is sent by a sending device; after receiving the NDM file, retrieving integrity information of the NDM file from a metadata section of the NDM file; retrieving validity information of the NDM file from the metadata section and determining a valid period of the NDM file according to the validity information; and verifying, by the receiving device, whether the NDM file has been tampered with according to the integrity information. ### Claim 5 (depends on 4) The method according to claim 4, wherein the validity information is generated by the sending device. ### Claim 6 (depends on 5) The method according to claim 5, wherein the integrity information is signature information that is generated by the sending device for the NDM file and the validity information using a first key and using a preset algorithm. ### Claim 7 (depends on 5) The method according to claim 5, further comprising: receiving, by the receiving device, information of the preset algorithm and a certificate that are sent by the sending device, wherein the certificate comprises a second key, wherein the second key is used to verify the integrity information. ### Claim 8 A sending device, comprising: a processor; and a non-transitory computer-readable storage medium storing a program to be executed by the processor, the program including instructions for: generating integrity information and validity information of a negotiable datapath model (NDM) file; adding the integrity information and the validity information to a metadata section of the NDM file; and generating a signed NDM file from the NDM file and the integrity information, wherein the metadata section of the signed NDM file comprises protocol version information of the NDM file, a valid period of the NDM file, and the integrity information of the NDM file; and a transmitter, configured to send the signed NDM file to a receiving device, causing the receiving device to verify, according to the integrity information, whether the NDM file has been tampered with. ### Claim 9 (depends on 8) The sending device according to claim 8, wherein the program further includes instructions for: generating signature information for the NDM file and the validity information using a first key and using a preset algorithm, wherein the signature information serves as the integrity information. ### Claim 10 (depends on 9) The sending device according to claim 9, wherein the transmitter is further configured to send a certificate and information of the preset algorithm to the receiving device, wherein the certificate comprises a second key, wherein the second key is used to verify the integrity information. ### Claim 11 A receiving device, comprising: a receiver, configured to: receive a negotiable datapath model (NDM) file from a sending device; after receiving the NDM file, retrieve integrity information of the NDM file from a metadata section of the NDM file; and retrieve validity information of the NDM file from the metadata section; a processor; and a non-transitory computer-readable storage medium storing a program to be executed by the processor, the program including instructions for: determine a valid period of the NDM file according to the validity information; and verifying, according to the integrity information, whether the NDM file has been tampered with. ### Claim 12 (depends on 11) The receiving device according to claim 11, wherein the validity information is generated by the sending device. ### Claim 13 (depends on 12) The receiving device according to claim 12, wherein the integrity information is signature information that is generated by the sending device for the NDM file and the validity information by using a first key and using a preset algorithm. ### Claim 14 (depends on 13) The receiving device according to claim 13, wherein the receiving device is further configured to receive a certificate and information of the preset algorithm that are sent by the sending device, wherein the certificate comprises a second key, wherein the second key is used to verify the integrity information. ### Claim 15 A system, comprising: a sending device; and a receiving device; wherein the sending device comprises a processor and a non-transitory computer readable storage medium storing instructions, and the processor is configured to execute the instructions to: generate an integrity information and validity information of a negotiable datapath model (NDM) file; add the integrity information and the validity information to a metadata section of the NDM file; generate a signed NDM file from the NDM file and the integrity information, wherein the metadata section of the signed NDM file comprises protocol version information of the NDM file, a valid period of the NDM file, and the integrity information of the NDM file; and send the signed NDM file to the receiving device; and wherein the receiving device is configured to receive the signed NDM file sent by the sending device, and verify, according to the integrity information, whether the NDM file has been tampered with. ### Claim 16 (depends on 15) The system according to claim 15, wherein the processor is further configured to execute the instructions to: generate signature information for the NDM file using a first key and using a preset algorithm, wherein the signature information serves as the integrity information.