Module authentication and binding library extensions
AssigneeNovell, Inc.
InventorsRoger R. Schell, Robert R. Jueneman, Mark G. Gayman
Life of this patent
Estimating the term…
Loading patent…
AssigneeNovell, Inc.
InventorsRoger R. Schell, Robert R. Jueneman, Mark G. Gayman
Estimating the term…
An apparatus, system, and method to provide an initial and an on-going authentication mechanism with which two executable entities may unilaterally or bilaterally authenticate the identity, origin, and integrity of each other. In one instance, the authentication mechanisms are implemented within a dynamically loaded, modular, cryptographic system. The initial authentication mechanism may include digitally signed challenge and possibly encrypted response constructs that are alternately passed between the authenticating and authenticated executable entities. A chain of certificates signed and verified with the use of asymmetric key pairs may also be part of the initial authentication mechanism. Representative asymmetric key pairs include a run-time key pair, a per-instance key pair, and a certifying authority master key pair. The on-going authentication mechanism may include a nonce variable having a state associated therewith. The state may be both time and incidence varying and may be combined in an obfuscating or encrypted manner into data passed between the executable entities. The initial and ongoing authentication mechanisms may have instances implemented without the use of export-regulated cryptography.
An apparatus on a computer readable medium for effecting secure communications between executable entities in a computer system having a processor and a memory device operably connected thereto for storing executable data structures and operational data structures associated therewith, comprising:
A method for effecting secure communications between executable entities in a computer system having a memory and a processor, comprising:
A computer memory storing therein computer instructions capable of creating within a processor executable data structures and operational data structures associated therewith, the executable and operational data structures comprising:
Dependencies are inferred from the claim text.