Program execution controller and program transfer controller

• US 20040194100A1
• Filed: 06/02/2003
• Published: 09/30/2004
• Est. Priority Date: 06/07/2002
• Status: Abandoned Application

• Current Assignee: Hitachi-Omron Terminal Solutions Corporation (Hitachi, Ltd.)
• Original Assignee: Hitachi-Omron Terminal Solutions Corporation (Hitachi, Ltd.)
• Inventors: Nakayama, Mikihiro, Ogawa, Chiharu, Umezu, Toshikazu, Tomida, Satoru
• Application Number:
  US10/449,699
• Publication Number:
  US 20040194100A1
• Time in Patent Office: Days
• US Class Current: 718/100
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/56 Computer malware detection or handling, e.g. anti-virus arrangements
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: G06F 9/468 Specific access rights for resources, e.g. using capability register

Abstract

This invention addresses to prevent executions or transfers of unauthorized programs in an information processing apparatus.

The information processing apparatus includes following modules: an execution request monitor, a download request monitor, a user name acquiring module, a hash value calculator a program execution controller, a download controller, an execution policy, and a download policy. The program execution controller and the download controller control the execution and the download of programs by referring the execution policy and the download policy in which sets of information of the program name, the hash value and the user name are pre-registered therein as to programs to be permitted of the execution or the download.

Claims

1. A program execution controller controlling an execution of a computer program in an information processing apparatus, comprising:

an execution request monitor configured to monitor an execution request for the computer program and to acquire its program name;

a calculator configured to calculate a hash value of the program to be executed;

an execution policy storage configured to pre-store an execution policy, which determines a standard as to whether or not the execution request is to be permitted, in conjunction with the program name and the hash value; and

a execution controlling module configured to determine whether or not the execution request is permitted based on the execution policy and to control the execution of the program.

2. A program execution controller according to claim 1, further comprising:

a user name acquiring module configured to acquire a user name of a user instructing the execution request;

wherein the execution policy in the execution policy storage is further related to the user name.

3. A program execution controller according to claim 1, further comprising:

an execution log module configured to log a result of controlling of the execution controlling module.

4. A program execution controller according to claim 1, further comprising:

a program acquiring module configured to acquire a computer program and information to be added to the execution policy from a peripheral device; and

an execution policy update module configured to add the information to the execution policy storage.

5. A program execution controller controlling an execution of a computer program in an information processing apparatus, comprising:

a first information processing module executing the computer program;

a second information processing module executing processing except for executing the computer program;

a communication module configured to communicate between the first information processing module and the second information processing module;

wherein the first information processing module includes an execution request monitor configured to monitor an execution request of the computer program;

wherein the second information processing module includes;

an execution policy storage configured to pre-store an execution policy, which determines a standard as to whether or not the execution request is to be permitted; and

a execution controlling module configured to determine whether or not the execution request is permitted based on the execution policy and to control the execution of the program.

6. A program execution controller according to claim 5, further comprising:

a program acquiring module configured to acquire a computer program and information to be added to the execution policy from a peripheral device; and

an execution policy update module configured to add the information to the execution policy storage.

7. A program transfer controller controlling a transfer of a computer program to an information processing apparatus comprising:

a transfer request monitor configured to monitor a transfer request of the computer program and to acquire a program name of the computer program to be transferred;

a calculator configured to calculate a hash value of the program;

a transfer policy storage configured to pre-store a transfer policy, which determines a standard as to whether or not the transfer request is to be permitted, in conjunction with the program name and the hash value; and

a transfer controlling module is configured to determine whether or not the transfer request is permitted based on the transfer policy and to control the transfer of the program.

8. A program transfer controller according to claim 7, further comprising:

a user name acquiring module configured to acquire a user name of a user instructing the transfer request;

wherein the transfer policy in the transfer policy storage is further related to the user name.

9. A program transfer controller according to claim 7, further comprising:

a transfer log module configured to log a result of controlling of the transfer controlling module.

10. A program transfer controller controlling a transfer of a computer program to an information processing apparatus comprising:

a first information processing module configured to control a communication with the information processing apparatus;

a second information processing module executing processing except for communicating with information processing apparatus;

a communication module configured to communicate between the first information processing module and the second information processing module;

wherein the first information processing module includes a transfer request monitor configured to monitor a transfer request of the computer program;

wherein the second information processing module includes;

a transfer policy storage configured to pre-store a transfer policy, which determines a standard as to whether or not the transfer request is to be permitted; and

a transfer controlling module configured to determine whether or not the transfer request is permitted based on the transfer policy and to control the transfer of the program.

11. A program transfer controller according to claim 10, wherein the information processing apparatus controls an execution of the computer program based on an execution policy, which determines whether or not an execution request of the computer program is to be permitted, and

the transfer controlling module transfers the computer program and information determining the execution policy to the information processing apparatus when the transfer request is permitted.

12. A program transfer controller according to claim 10, wherein the information processing apparatus controls a transfer of the computer program based on a transfer policy, which determines whether or not a transfer request of the computer program is to be permitted, and

the transfer controlling module transfers the computer program and information determining the transfer policy to the information processing apparatus when the transfer request is permitted.

13. A program transfer controller according to claim 10, further comprising:

a program acquiring module configured to acquire the computer program and information to be added to the transfer policy from a peripheral device; and

a transfer policy update module configured to add the information to the transfer policy storage.

14. A control method controlling an execution of a computer program in an information processing apparatus comprising:

a first step providing an execution policy, which determines a standard as to whether or not an execution request of the computer program is to be permitted, in conjunction with a program name and a hash value of the computer program;

a second step monitoring an execution request for the computer program and acquiring its program name;

a third step calculating the hash value of the program to be executed;

a fourth step determining whether or not the execution request is permitted based on the execution policy and controlling the execution of the program.

15. A control method controlling a transfer of a computer program to an information processing apparatus comprising:

a first step providing a transfer policy, which determines a standard as to whether or not a transfer request of the computer program is to be permitted, in conjunction with a program name and a hash value of the computer program;

a second step monitoring a transfer request for the computer program and acquiring its program name;

a third step calculating the hash value of the program to be transferred;

a fourth step determining whether or not the transfer request is permitted based on the transfer policy and controlling the transfer of the program.