DEVICE, SYSTEM, AND METHOD FOR REPORTING EXECUTION FLOW OF PROGRAM

• US 20080155673A1
• Filed: 09/07/2007
• Published: 06/26/2008
• Est. Priority Date: 12/22/2006
• Status: Active Grant

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Jung, Kyung-im, JUNG, Myung-June, Choi, Hyun-jin
• Granted Patent: US 8,112,630 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 11/3672 Test management

Abstract

A device, system, and method for reporting an execution flow of a program is provided. The system for reporting an execution flow of a program includes a program-providing server that provides a program package having information related a predetermined execution flow, a user device that transmits an execution-flow-reporting message corresponding to a result of measuring and verifying the execution flow integrity of a program package with reference to the information related with execution flow, and an execution-flow-verifying server that limits providing of or execution of a program package by testing the execution-flow-reporting message.

Claims

1. A system for reporting execution flow of a program, the system comprising:

a program-providing server that provides a program package having information related to a predetermined execution flow;

a user device that transmits an execution-flow-reporting message corresponding to a result of measuring and verifying execution flow integrity of the program package with reference to the information related to the predetermined execution flow; and

an execution-flow-verifying server that limits providing or executing of the program package depending upon testing of the execution-flow-reporting message.

2. The system of claim 1, further comprising:

a platform certification authority that identifies a security module in the program-providing server, a security module in the user device, and a security module in the execution-flow-verifying server, and certifies the program-providing server, the user device, and the execution-flow-verifying server by providing a certification for a signature of a verifying key of each of the security modules.

3. The system of claim 1, wherein the program-providing server provides execution-flow-reference information corresponding to the program package to the execution-flow-verifying server in order to test the execution-flow-reporting message.

4. The system of claim 1, wherein the execution-flow-reporting message is electronically signed using a signature key of a security module of the user device, and transmitted to the execution-flow-verifying server.

5. The system of claim 1, wherein the execution-flow-verifying server verifies an electronic signature of the user device in order to determine a source of the execution-flow-reporting message, and determines execution-flow-reporting information based on the execution-flow-reference information and the execution-flow-reporting message.

6. A method of reporting an execution flow of a program, the method comprising:

providing a program package having information related to a predetermined execution flow of the program;

transmitting an execution-flow-reporting message corresponding to a result of measuring and verifying execution flow integrity of a program package with reference to the information related to the execution flow; and

limiting providing of or executing of a program package dependent upon testing of the execution-flow-reporting message.

7. The method of claim 6, further comprising:

identifying a security module included in a program-providing server;

identifying a security module included in the user device;

identifying a security module included in the execution-flow-verifying server; and

certifying the program-providing server, the user device, and the execution-flow-verifying server by providing certifications for signature verifying keys of the security modules.

8. The method of claim 6, wherein the providing of the program package comprises providing execution-flow-reference information corresponding to the program package to the execution-flow-verifying server in order to test the execution-flow-reporting message.

9. The method of claim 6, further comprising electronically signing the execution-flow-reporting message using a signature key of a security module of the user device, and transmitting the signed execution-flow-reporting message to the execution-flow-verifying server.

10. The method of claim 6, further comprising verifying an electronic signature of the user device in order to determine the source of the execution-flow-reporting information, and determining execution-flow-reporting information based on the execution-flow-reference information.

11. The method of claim 6, wherein the testing the execution-flow-reporting message further comprises measuring a start instruction of the program and measuring an end instruction of the program to determine a length of the program.

12. The method of claim 11, further comprising determining whether the measured length of the program is the same as an expected length of the program included in the information related to the predetermined execution flow.

13. The method of claim 12, further comprising limiting execution of the program if the measured length is different from the expected length.

14. The method of claim 12, further comprising not providing the program package if the measured length is different from the expected length.

15. The method of claim 6, further comprising fetching instructions from a main memory in an executable order.

16. The method of claim 15, further comprising checking relative address information of the fetched instruction and comparing the relative address information with the information related to the predetermined execution flow.

17. The method of claim 16, further comprising limiting execution of the program if the relative address information of the fetched instruction does not match a relative address included in the information related to the predetermined execution flow.

18. The method of claim 16, further comprising determining a relative distance value of the relative address information of the fetched instruction and determining whether the determined relative distance value and an expected distance value included in the information related to the predetermined execution flow are the same.

19. The method of claim 18, further comprising limiting execution of the program if the relative distance value and the expected distance value are not the same.

20. The method of claim 18, further comprising not providing the program package if the relative distance value and the expected distance value are not the same.

21. An execution-flow-reporting device, comprising:

a testing module to interpret instructions according to a program package and to process data;

a registering module to store and to process data corresponding to an execution flow;

an operation module to execute instructions according to the program package;

a security module to establish trusts with other devices; and

a control module to control operation processes of the modules,

wherein the device receives the program package and measures, verifies, and/or tests the execution flow of a program contained in the program package to determine proper execution of the program.

22. The device of claim 21, further comprising a reporting module to communicate results of the measured execution flow to the other devices.

23. The device of claim 21, wherein the program package comprises verification reference information corresponding to execution-flow-testing targets included in the program package.