Software safety execution system
AssigneeJapan Science and Technology Agency
InventorsKazuhiko Kato, Yoshihiro Oyama
Life of this patent
Estimating the term…
Abstract
A secure software execution mechanism appropriate for software circulation is provided. At a sender site 312, an executable file 332 and a data file 334 processed by the executable file are encapsulated. The remaining two files 336 and 338 do not physically exist in a pot 320 at the sender site, and an archive file 320 is transferred to a receiver site 314. At the receiver site 314, intangible files 336 and 338 within a pot may be mapped to a file 354 in a local file system or a file 356 within another pot 350 and processed using a file 334 in a pot or the mapped file 354 or 356 by executing a program 332, in conformity with the specification of a security policy 340.
Claims15
A secure software execution system in which secure software is executed in a transmitted execution system comprising:
- a pot that includes a file storage unit which stores files, and a file name storage unit, which stores names of files including a file name of a file which is other than those in the file storage unit and which is related to a dynamic file, and wherein the file name of a file which is other than those in the file storage unit and which is related to the dynamic file indicates a file name of a file in an execution system or in another pot;
- and
- a mapping means that translates the file name of a file which is other than those in the file name storage unit and which is related to the dynamic file into a file name of the execution system,
- wherein the mapping means carries out mapping in conformity with a mapping and security policy specification which relates to file accessibility for the pot when executing the executable file,
- the mapping means extracts the file from the file storage unit so that the extracted file is provided to the execution system, before execution or/and when required during execution, and
- the mapping means maps the file name of a file which is other than those in the file storage unit and which is related to the dynamic file, to the file in the execution system or in the another pot, by referring to the file name storage unit.
A recording medium that records a program describing implementation of a mapping means in a computer system, which translates a file name in a file name storage unit in a pot into a file name for an execution system,
- wherein the pot includes a file storage unit which stores files, and a file name storage unit, which stores names of files including a file name of a file which is other than those in the file storage unit and which is related to a dynamic file, wherein the file name of a file which is other than those in the file storage unit and which is related to the dynamic file indicates a file name of a file in another pot;
- wherein the mapping means carries out mapping in conformity with a mapping and security policy specification which relates to file accessibility for the pot when executing the executable file,
- the mapping means extracts the file from the file storage unit so that the extracted file is provided to the execution system, before execution or/and when required during execution, and
- the mapping means maps the file name of a file which is other than those in the file storage unit and which is related to the dynamic file, to the file in the execution system or in the another pot, by referring to the file name storage unit.
Dependencies are inferred from the claim text.