US 12,755,017 B2Granted

Software verification device

AssigneeRobert Bosch GmbH

InventorsDominik Germek, Maria Irina Nicolae

Life of this patent

Estimating the term…

Loading patent…

Abstract

A software verification device. The device includes: a rule database having a plurality of rules, each rule containing a criterion regarding one or more software features and a software property, the rule stating that software that satisfies the criterion has the software property, an input interface configured to receive a specification (e.g., source code) of a software, and one or more processors configured to ascertain which of the software features the software has, and to ascertain, on the basis of which software features the software has been ascertained to have, which of the rules contain criteria that are satisfied, and to ascertain, according to the rules that contain criteria that are satisfied, which of the software properties the software has, and to ascertain whether the software properties that the software has been ascertained to have satisfy one or more predetermined requirements.

Claims14

Dependent claims

A software verification device, comprising:

a rule database having a plurality of rules, each rule containing a criterion defined as a logical function of one or more of a plurality of software features and being associated with a respective software property, the rule stating that software that satisfies the criterion has the software property;
an input interface configured to receive a specification of a software package;
an output interface;
one or more processors that are configured to:
execute a plurality of feature-specific verifiers selected from a verifier database, each verifier being configured to determine whether the software package exhibits a respective software feature;
identify, based on the execution, a subset of the plurality of software features that the software package has been ascertained to exhibit;
select, from the rule database, only those rules whose criteria reference exclusively software features included in the identified subset of software features;
execute the selected rules to determine which software properties are satisfied by the software package;
ascertain, based on execution of the selected rules whose criteria are satisfied, which of the software properties are present in the software package;
generate, based on the ascertained software properties, a behavior description of the software package that indicates the software properties determined to be present;
ascertain whether the software properties indicated by the generated behavior description to be present in the software package satisfy one or more predetermined requirements;
and
execute a software package gating operation that, using the output interface;
enables use of the software package by a data processing device when it has been ascertained that indicated by the generated behavior description to be present in the software package satisfy the one or more predetermined requirements;
and
prevent the use of the software package by the data processing device when the one or more predetermined requirements are not satisfied.

13 more elements

A method for verifying software, comprising the following steps:

storing, in a rule database, a plurality of rules, each rule containing a criterion defined as a logical function of one or more of a plurality of software features and being associated with a respective software property, the rule stating that software that satisfies the criterion has the software property;
receiving, by at least one processor, a specification of a software package;
executing, by the at least one processor, a plurality of feature-specific verifiers selected from a verifier database, each verifier being configured to determine whether the software package exhibits a respective software feature;
identifying, based on the execution, a subset of the plurality of software features that the software package has been ascertained to exhibit;
selecting, from the rule database, only those rules whose criteria reference exclusively software features included in the identified subset of software features;
executing the selected rules to determine which software properties are satisfied by the software package;
ascertaining, based on execution of the selected rules whose criteria are satisfied, which of the software properties are present in the software package;
generating, based on the ascertained software properties, a behavior description of the software package that indicates the software properties determined to be present;
ascertaining whether the software properties indicated by the generated behavior description to be present in the software package satisfy one or more predetermined requirements;
and
executing a software package gating operation that:
enables use of the software package by a data processing device when it has been ascertained that the software properties that indicated by the generated behavior description to be present in the software package satisfy the one or more predetermined requirements;
and
prevents the use of the software package by the data processing device when the one or more predetermined requirements are not satisfied.

11 more elements

A non-transitory computer-readable medium on which are stored commands for verifying software, the commands, when executed by a processor, causing the processor to perform the following steps:

storing, in a rule database, a plurality of rules, each rule containing a criterion defined as a logical function of one or more of a plurality of software features and being associated with a respective software property, the rule stating that software that satisfies the criterion has the software property;
receiving, by at least one processor, a specification of a software package;
executing, by the at least one processor, a plurality of feature-specific verifiers selected from a verifier database, each verifier being configured to determine whether the software package exhibits a respective software feature;
identifying, based on the execution, a subset of the plurality of software features that the software package has been ascertained to exhibit;
selecting, from the rule database, only those rules whose criteria reference exclusively software features included in the identified subset of software features;
executing the selected rules to determine which software properties are satisfied by the software package;
ascertaining, based on execution of the selected rules whose criteria are satisfied, which of the software properties are present in the software package;
generating, based on the ascertained software properties, a behavior description of the software package that indicates the software properties determined to be present;
ascertaining whether the software properties indicated by the generated behavior description to be present in the software package satisfy one or more predetermined requirements;
and
executing a software package gating operation that:
enables use of the software package by a data processing device when it has been ascertained that the software properties that indicated by the generated behavior description to be present in the software package satisfy the one or more predetermined requirements;
and
prevents the use of the software package by the data processing device when the one or more predetermined requirements are not satisfied.

11 more elements

Dependencies are inferred from the claim text.

Facts

Application: 18/884,845Filed 13 Sep 2024
Priority: DE 102023209241.721 Sep 2023
Published: US 2025/0103717 A127 Mar 2025
Granted: 6 Oct 2026
Term ends: Not estimatedThe source records don’t support an estimate.

Classification3 codes

G06F 21/566
Computer malware detection or handling, e.g. anti-virus arrangements: dynamic detection, i.e. detection performed at run-time, e.g. emulation,…
G06F 2221/032
Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms: protect output to user by…
G06F
Computing and data processing