Security technique for an open computing platform system
AssigneeAccess Co., Ltd.
InventorGuy McIlroy
Life of this patent
Estimating the term…
Abstract
The present invention relates to a method for ensuring the security of an open platform. Specifically, the present invention pertains to a method of using a validation program, itself highly secure, to evaluate and securely flag files in software to be loaded and used on palmtop computing devices. The method prevents the infiltration and unauthorized installation of viruses, Trojans, and other known methods of compromising security in an open-platform system. Control of access to the operating system and the operation of applications and macros in a palmtop device is therefore maintained in the user.
Claims17
A method of ensuring the security of an open platform, the method comprising the steps of:
- loading software suitable for securely operating within an open platform environment on a computer system compliant with the open platform environment, the computer system consisting of a host computer and a portable computing device;
- upon loading the software on the computer system, initiating a pre-synchronization scan;
- during the pre-synchronization scan, validating the software by the use of a validator program residing within a secure environment in the computer system such that the validator program scans the software that is loaded in the secure environment;
- wherein the act of scanning and validating comprises running the code in an emulator for the computer system within the secure environment comprising a modified operating system for the emulator to run in, allowing the execution of the code to be examined for any new malicious routines as well as against known malicious signatures;
- marking the software that is loaded as valid or invalid by the use of a flag;
- and,
- automatically denying the software the ability to operate on any environment within the computer system and denying synchronization of the software with the portable computer device if the validator fails to identify said software as valid.
An apparatus for ensuring the security of an open platform comprising:
- a portable computing device coupled to a host computer, wherein the portable computing device is configured to load software from the host computer to the portable computing device for operating on the portable computing device;
- and,
- a validation program residing on the host computer in a secure environment that is configured for:
- validating the software during a pre-synchronization scan by first scanning the software that is loaded in the secure environment;
- wherein the act of scanning and validating comprises running the code in an emulator on the host computer within the secure environment comprising a modified operating system for the emulator to run in, allowing the execution of the code to be examined for any new malicious routines as well as against known malicious signatures;
- marking the software as valid or invalid by the use of a flag;
- and,
- automatically denying the software the ability to operate in any environment on the host computer or portable computing device and denying synchronization of the software with the portable computing device if the validator fails to identify the software as valid.
An apparatus for ensuring the security of an open platform computer system comprising:
- a handheld computing device coupled to a network, wherein the handheld computing device is configured to load software from the network to the handheld computing device for operation on the handheld computing device;
- and,
- a validation program that resides on the network that is configured for:
- validating the software by scanning files of the software in a secure environment on the handheld computing device upon loading the software in any environment on the handheld computing device;
- wherein the act of scanning and validating comprises running code of the software in an emulator within the secure environment for the emulator to run in, allowing the execution of the code to be examined for any new malicious routines as well as against known malicious signatures;
- marking the software as valid or invalid by the use of a flag;
- and,
- automatically denying the software the ability to operate on any environment on the handheld computing device if said validator fails to identify the software as valid.
Dependencies are inferred from the claim text.