System and method of providing communication security

• US 20020062451A1
• Filed: 05/16/2001
• Published: 05/23/2002
• Est. Priority Date: 09/01/1998
• Status: Abandoned Application

• Current Assignee: TecSec, Incorporated
• Original Assignee: TecSec, Incorporated
• Inventors: Wack, C. Jay, Scheidt, Edward M.
• Application Number:
  US09/858,326
• Publication Number:
  US 20020062451A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/3552 Downloading or loading of personalisation data
• CPC Class Codes: G06Q 20/3829 involving key management
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system
• CPC Class Codes: H04L 2209/08 Randomization, e.g. dummy operations or using noise
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/064 Hierarchical key distribution, e.g. by multi-tier trusted parties
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/007 involving hierarchical structures
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/0891 Revocation or update of secret information, e.g. encryption key update or rekeying
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions

Abstract

A process of checking the authorization and authenticity of an application provided by a user includes authenticating an application authentication file against a domain administrator'"'"'s public membership key. An application executable is then hashed, and the application hash result is compared to an authentication hash contained in the application authentication file. At this point, services are denied to the application if the application hash and the authentication hash do not match. Configuration assignments in the application authentication file are decoded if the application hash and the authentication hash match. The decoded configuration assignments are compared to the user'"'"'s configuration assignments. Services are provided to the application if the result of the decode is favorable. Services are denied to the application if the result of the decode is not favorable.

Claims

1. A process of checking the authorization and authenticity of an application provided by a user, comprising:

authenticating an application authentication file against a domain administrator'"'"'s public membership key;

hashing an application executable;

comparing the application hash result to an authentication hash contained in the application authentication file;

denying services to the application if the application hash and the authentication hash do not match;

decoding configuration assignments in the application authentication file if the application hash and the authentication hash match;

comparing the decoded configuration assignments to the user'"'"'s configuration assignments;

providing services to the application if the result of the decode is favorable; and

denying services to the application if the result of the decode is not favorable.