Secure system for allowing the execution of authorized computer program code

A method of allowing authorized code to execute on a computer system, the method comprising:

• intercepting a request to load a first code module on behalf of a second code module associated with a running process;
• determining if the request is authorized by authenticating the request with reference to a multi-level whitelist;
• and
• allowing the first code module to be loaded into memory of the computer system by granting the request if the request is authorized.

A method of allowing authorized files to execute on a computer system, the method comprising:

• intercepting process creation wherein one or more of the code modules includes a known executable module configured to execute instructions contained within a separate script file;
• if an intercepted process creation request is associated with the known executable module, then determining if a separate script file identified by the intercepted process creation request is authorized if the separate script file is in an approved list;
• and
• allowing the intercepted process creation request if the separate script file was in the approved list.

A method of license enforcement, the method comprising:

• monitoring loading of software applications;
• intercepting the loading of an instance of a software application;
• determining if the number of instances of the software application is greater than a number of authorized instances;
• denying execution of the software application if the number of instances already running of the software application is greater than the number of authorized instances.

A code execution authorization system comprising:

• a plurality of whitelists stored in one or more local files;
• and
• a kernel driver configured to intercept and authenticate code module loading requests and new process creation requests, the kernel driver further configured to:
• monitor requests to modify any one of the plurality of whitelists;
• and
• allow or disallow the modification requests.

A code execution authorization system comprising:

• a plurality of whitelists stored in one or more memory stores;
• a plurality of content authenticators capable of being utilized to validate the integrity of the plurality of whitelists, wherein each of the plurality of content authenticators is assocatied with one of the plurality of whitelists;
• and
• a remote signing server configured to:
• sign each of the plurality of content authenticators to create a plurality of digital signatures;
• and
• verify requests of the remote signing server originating from an authorized code module associated with the code execution authorization system.