Loading patent…
AssigneeIntertrust Technologies Corporation
InventorsVictor H. Shear, W. Olin Sibert, David M. Van Wie
Estimating the term…
Secure computation environments are protected from bogus or rogue load modules, executables and other data elements through use of digital signatures, seals and certificates issued by a verifying authority. A verifying authority--which may be a trusted independent third party--tests the load modules or other executables to verify that their corresponding specifications are accurate and complete, and then digitally signs the load module or other executable based on tamper resistance work factor classification. Secure computation environments with different tamper resistance work factors use different verification digital signature authentication techniques (e.g., different signature algorithms and/or signature verification keys)--allowing one tamper resistance work factor environment to protect itself against load modules from another, different tamper resistance work factor environment. Several dissimilar digital signature algorithms may be used to reduce vulnerability from algorithm compromise, and subsets of multiple digital signatures may be used to reduce the scope of any specific compromise.
A security method comprising:
A software verifying method comprising:
A method of authenticating a load module comprising:
A method of distinguishing between trusted and untrusted load modules comprising:
A method of increasing the security of a virtual distribution environment comprising plural interoperable protected processing environments having different security levels, the method comprising:
A first protected processing environment comprising:
A method for protecting a first computing arrangement surrounded by a first tamper resistant barrier having a first security level, the method including:
A method as in claim 19 wherein the preventing step comprises:
A method of protecting computing arrangements comprising:
A computer security method comprising:
A software verifying method comprising:
A method of authenticating an executable comprising:
A method of distinguishing between trusted and untrusted executables comprising:
A method of increasing the security of plural interoperable secure execution spaces having different security levels, the method comprising:
A protected processing environment comprising:
A method for protecting a first computing arrangement surrounded by a first tamper resistant barrier having a first security level, the method including:
A method of protecting computing arrangements comprising:
Dependencies are inferred from the claim text.