Preventing untrusted script execution
AssigneeInternational Business Machines Corporation
InventorsConstantin Mircea Adam, Richard Jay Cohen, Jeffrey Edward Lammers, Cheng Yi Lee, Brian Peterson, Maja Vukovic, Xiongfei Wei
Life of this patent
Estimating the term…
Abstract
Using a first key, an encrypted file fingerprint is decrypted, the decrypting resulting in a decrypted file fingerprint. Using a hash function on a script file, a script file fingerprint is computed, the script file intended to be executed by an interpreter. Responsive to the script file fingerprint matching the decrypted file fingerprint, the script file is executed.
Claims20
A computer-implemented method comprising:
- decrypting, using a first key, an encrypted file fingerprint, the decrypting resulting in a decrypted file fingerprint;
- computing, using a hash function on a script file, a script file fingerprint, the script file intended to be executed by an interpreter;
- and
- executing, responsive to the script file fingerprint matching the decrypted file fingerprint, the script file.
The computer-implemented method of claim 3, wherein the encrypted fingerprint file is encrypted using a second key, the first key comprising a public key of a public-private key pair, the second key comprising a private key of the public-private key pair.
A computer program product for preventing untrusted script execution, the computer program product comprising:
- one or more computer readable storage media, and program instructions collectively stored on the one or more computer readable storage media, the program instructions comprising:
- program instructions to decrypt, using a first key, an encrypted file fingerprint, the decrypting resulting in a decrypted file fingerprint;
- program instructions to compute, using a hash function on a script file, a script file fingerprint, the script file intended to be executed by an interpreter;
- and
- program instructions to execute, responsive to the script file fingerprint matching the decrypted file fingerprint, the script file.
A computer system comprising one or more processors, one or more computer-readable memories, and one or more computer-readable storage media, and program instructions stored on at least one of the one or more storage devices for execution by at least one of the one or more processors via at least one of the one or more memories, the stored program instructions comprising:
- program instructions to decrypt, using a first key, an encrypted file fingerprint, the decrypting resulting in a decrypted file fingerprint;
- program instructions to compute, using a hash function on a script file, a script file fingerprint, the script file intended to be executed by an interpreter;
- and
- program instructions to execute, responsive to the script file fingerprint matching the decrypted file fingerprint, the script file.
Dependencies are inferred from the claim text.