Secure system for allowing the execution of authorized computer program code

A method of allowing authorized code to execute on a computer system, the method comprising:

• intercepting, by a kernel driver of the computer system, a request to create a process associated with a code module;
• determining, by the kernel driver, whether to authorize the request by causing a cryptographic hash value of the code module to be authenticated with reference to a whitelist database remote from the computer system and maintained by a trusted service provider, the remote whitelist database containing cryptographic hash values of approved code modules, which are known not to contain viruses or malicious code;
• allowing the code module to be loaded and executed within the computer system if the cryptographic hash value matches one of the cryptographic hash values of approved code modules within the remote whitelist database;
• and
• wherein the kernel driver is implemented in one or more processors and one or more computer-readable storage media associated with the computer system, the one or more computer-readable storage media having instructions tangibly embodied therein representing the kernel driver that are executable by the one or more processors.

A code execution authorization system comprising:

• a kernel driver of a computer system implemented in one or more computer processors of the computer system and one or more computer-readable storage media associated with the computer system, the one or more computer-readable storage media having instructions tangibly embodied therein representing the kernel driver that are executable by the one or more computer processors, the kernel driver operable to perform a method of allowing authorized code to execute on the computer system comprising:
• intercepting a request to create a process associated with a code module;
• determining whether to authorize the request by causing a cryptographic hash value of the code module to be authenticated with reference to the global whitelist database hosted by a trusted service provider, the global whitelist database containing cryptographic hash values of approved code modules, which are known not to contain viruses or malicious code;
• and
• allowing the code module to be loaded and executed within the computer system if the cryptographic hash value matches one of the cryptographic hash values of approved code modules within the global whitelist database.

A program storage device readable by a computer system, tangibly embodying a program of instructions executable by one or more computer processors of the computer system to perform method steps for allowing authorized code to execute on the computer system comprising:

• intercepting a request to create a process associated with a code module;
• determining whether to authorize the request by causing a cryptographic hash value of the code module to be authenticated with reference to a whitelist database remote from the computer system and maintained by a trusted service provider, the remote whitelist database containing cryptographic hash values of approved code modules, which are known not to contain viruses or malicious code;
• and
• allowing the code module to be loaded and executed within the computer system if the cryptographic hash value matches one of the cryptographic hash values of approved code modules within the remote whitelist database.