System and Method for Authenticating Code Executing on Computer System

A code authentication method, comprising:

• obtaining information about target code executing on a computer system;
• locating an immediate host code executing on the system using the information, the immediate host code responsible for managing the execution of the target code and maintaining managed information on the target code during execution;
• verifying the managed information associated with the target code;
• and
• making a result of the verification available to a requestor.

A code authentication method, comprising:

• accessing secured information for first code executing on a computer system, the secured information contained in the first code stored on disk in the computer system;
• and
• obtaining an internal requirement from the secured information, the internal requirement being configured to constrain subject code executing on the computer system;
• determining whether the subject code satisfies the internal requirement;
• obtaining a result from the determination;
• and
• making the result available to the requestor.

An Application Programming Interface for a computer system to perform a code authentication method comprising:

• receiving a call from a requester to verify target code executing on the computer system;
• obtaining identity information for the executing target code in response to the call by accessing secured information contained in the target code stored on disk of the computer system;
• determining whether at least a portion of the executing target code has been altered from how the target code is identified by the identify information;
• and
• returning a result to the requester based on the determination.

An Application Programming Interface for performing a code authentication method, the method comprising:

• receiving a call from a requester to verify target code executing on the computer system;
• obtaining identity information for the executing target code in response to the call by accessing secured information contained in the target code stored on disk of the computer system;
• obtaining at least one requirement;
• determining whether the identity information satisfies the at least one requirement;
• and
• returning a result to the requester based on the determination.

An Application Programming Interface for a computer system to perform a code authentication method comprising:

• receiving a call from a requester to verify target code executing on the computer system;
• recursively verifying whether a dynamic state of each host code in a chain of executing code on the computer system is valid based on managed information maintained by each host code;
• verifying whether a dynamic state of the executing target code is valid based on managed information maintained by the host code in the chain responsible for managing execution of the target code;
• and
• returning a result to the requester based on the verification.