Software export compliance

• US 20080091677A1
• Filed: 02/15/2007
• Published: 04/17/2008
• Est. Priority Date: 10/12/2006
• Status: Active Grant

• Current Assignee: Black Duck Software, Inc. (Synopsys Incorporated)
• Original Assignee: Black Duck Software, Inc. (Synopsys Incorporated)
• Inventors: Smith, John, Levin, Douglas, Pedersen, Palle, Golombek, David
• Granted Patent: US 8,010,803 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A system and method for determining export requirements for a content file may include examining a content file to identify content used by or included in the content file that is subject to export control, determining, in response to the identified content, export requirements that are applicable to the content file, and providing an indication of the determined export requirements.

Claims

1. A method for export compliance, comprising:

performing a computer-assisted examination of one or more content files;

in response to the examination results, identifying content used by or included in the one or more content files that is indicative of content subject to export control;

determining, in response to the identified content, export requirements applicable to the one or more content files; and

providing an indication of the determined export requirements.

2. The method of claim 1, further comprising:

receiving information regarding the expected use of the content file;

and wherein the determining step further comprises determining in response to the identified content and the received information regarding the expected use.

3. The method of claim 1 wherein the content is computer software.

4. The method of claim 3 wherein the content subject to export control is an encryption algorithm.

5. The method of claim 1, further comprising, identifying content subject to export control by presenting examination results to a user.

6. The method of claim 1 further comprising aggregating the determined export requirements with export requirements applicable to other content files.

7. The method of claim 1 further comprising aggregating the determined export requirements with export requirements obtained from a publicly available database of export information.

8. A system for export compliance, comprising:

an examination subsystem for performing an examination of one or more content files;

an identification subsystem for identifying in response to examination results content used by or included in the one or more content files that is indicative of content subject to export control;

a determination subsystem for determining in response to the identified content, export requirements applicable to the one or more content files; and

an indication subsystem, for providing an indication of the determined export requirements.

9. The system of claim 8, further comprising a receiving subsystem for receiving information regarding the expected use of the content file;

and wherein the determining subsystem determines export requirements in response to the identified content and received information regarding the expected use.

10. The system of claim 9 wherein the content is computer software.

11. The system of claim 10 wherein the content subject to export control is an encryption algorithm.

12. The system of claim 9, wherein the identification subsystem identifies content subject to export control by presenting examination results to a user, and receiving user input regarding the content.

13. A method for export compliance, comprising:

examining a software program;

identifying a portion of the software program indicative of encryption technology included in or used by the software program;

determining export requirements associated with the encryption technology indicated by the identified portion of the software program; and

providing an indication of the determined export requirements for the software program.

14. The method of claim 13, further comprising:

receiving information regarding the expected use of the software program;

and wherein the determining step further comprises determining export requirements in response to the identified portion of the software program and the received information regarding the expected use.

15. The method of claim 13 wherein the identified portion is an encryption algorithm.

18. The method of claim 13, further comprising, identifying a portion of the software program without user intervention.

16. (canceled)

17. (canceled)

19. A system for export compliance, comprising:

an examination subsystem for examining a software program;

an identification subsystem for identifying a portion of the software program indicative of encryption technology included in or used by the software program;

a determination subsystem for determining export requirements associated with the encryption technology indicated by the identified portion of the software program; and

an indication subsystem for providing an indication of the determined export requirements for the software program.

20. The system of claim 19, further comprising a receiving subsystem for receiving information regarding the expected use of the software program;

and wherein the determination subsystem determines export requirements in response to the identified portion of the software program and the received information regarding the expected use.

21. The system of claim 19 wherein the identified portion is an encryption algorithm.

22. The system of claim 19 wherein the identified portion interfaces with an encryption algorithm.

23. The system of claim 19 wherein the identification subsystem identifies a portion of the software program by presenting examination results to a user.

24. The system of claim 19, wherein the identification subsystem identifies a portion of the software program without user intervention.

25-36. -36. (canceled)