SYSTEMS AND METHODS FOR CREATING AND EXECUTING FILES

• US 20090064134A1
• Filed: 08/30/2007
• Published: 03/05/2009
• Est. Priority Date: 08/30/2007
• Status: Abandoned Application

• Current Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Original Assignee: Citrix Systems, Inc. (Cloud Software Group)
• Inventors: Cox, David P.
• Application Number:
  US11/847,803
• Publication Number:
  US 20090064134A1
• Time in Patent Office: Days
• US Class Current: 717/178
• CPC Class Codes: G06F 21/51 at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
• CPC Class Codes: G06F 21/54 by adding security routines or objects to programs
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures

Abstract

The invention generally relates to systems and methods for creating and executing files. In one embodiment, the file includes an executable program, a parameter for use by the executable program in subsequent operation, and an identifier that includes at least a first attribute computed from the executable program but not from the parameter. The first attribute is for facilitating subsequent detection of changes to the executable program but not for facilitating detection of changes to the parameter.

Claims

1. A file comprising:

an executable program;

a parameter for use by the executable program in subsequent operation; and

an identifier comprising at least a first attribute computed from the executable program but not from the parameter, the first attribute facilitating subsequent detection of changes to the executable program but not facilitating detection of changes to the parameter.

2. The file of claim 1, wherein the file is configured to be downloaded over a network connection.

3. The file of claim 1, wherein the first attribute is a cryptographic digest of at least a portion of the executable program.

4. The file of claim 1, wherein the identifier is a digital signature.

5. The file of claim 1, wherein the file is a Portable Executable (PE) format file.

6. The file of claim 5, wherein the identifier is an Attribute Certificate.

7. The file of claim 5, wherein the parameter is stored at a location selected from the group consisting of an entry in an Attribute Certificate Table of the file, the file CheckSum field of the Windows-specific fields of the header of the file, and an area past the end of the last section in the file.

8. The file of claim 1, wherein the identifier further comprises the parameter.

9. The file of claim 1, wherein the parameter is present in the file before the file is downloaded to a user.

10. The file of claim 1, wherein the parameter is added to the file after the user initiates a download of the file.

11. A method for creating a program file, the method comprising:

associating, with an executable program, a parameter for use by the executable program in subsequent operation; and

computing, from the executable program but not from the parameter, a first attribute for an identifier, the first attribute facilitating subsequent detection of changes to the executable program but not facilitating detection of changes to the parameter.

12. The method of claim 11 further comprising downloading the program file over a network connection.

13. The method of claim 11, wherein the parameter is associated with the executable program after the computation of the first attribute.

14. The method of claim 11, wherein the parameter is associated with the executable program after a user initiates a download of the program file.

15. The method of claim 11, wherein associating the parameter with the executable program comprises replacing a placeholder in the program file with the parameter.

16. The method of claim 11, wherein associating the parameter with the executable program comprises writing the parameter into the program file.

17. The method of claim 11, wherein computing the first attribute comprises computing a cryptographic digest of at least a portion of the executable program.

18. The method of claim 11, wherein the identifier is a digital signature.

19. The method of claim 11, wherein the program file is a Portable Executable (PE) format file.

20. The method of claim 19, wherein the identifier is an Attribute Certificate.

21. The method of claim 19 further comprising storing the parameter at a location within the program file selected from the group consisting of an entry in an Attribute Certificate Table of the program file, the file CheckSum field of the Windows-specific fields of the header of the program file, and an area past the end of the last section in the program file.

22. The method of claim 11 further comprising storing the parameter within the identifier.

23. A method for executing a file, the method comprising:

reading a first attribute of an identifier associated with a file;

reading an executable program from the file;

computing a second attribute from the executable program;

comparing the first attribute and the second attribute;

executing the executable program when the first attribute and the second attribute match; and

while executing the executable program, utilizing at least one parameter from the file,

wherein the first attribute and the second attribute are computed from the executable program but not from the parameter.

24. The method of claim 23, wherein the file is downloaded over a network.

25. The method of claim 23, wherein the first attribute and the second attribute each comprise a cryptographic digest of at least a portion of the executable program.

26. The method of claim 23, wherein the identifier is a digital signature.

27. The method of claim 23, wherein the file is a Portable Executable (PE) format file.

28. The method of claim 27, wherein the identifier is an Attribute Certificate.

29. The method of claim 27, wherein the at least one parameter is stored at a location selected from the group consisting of an entry in an Attribute Certificate Table of the file, the file CheckSum field of the Windows-specific fields of the header of the file, and an area past the end of the last section in the file.

30. The method of claim 23, wherein the at least one parameter is stored within the identifier.

31. A system for creating a program file, the system comprising:

a modification module configured to associate, with an executable program, a parameter for use by the executable program in subsequent operation; and

a file generation module configured to compute, from the executable program but not from the parameter, a first attribute for an identifier, the first attribute facilitating subsequent detection of changes to the executable program but not facilitating detection of changes to the parameter.

32. The system of claim 31, wherein the modification module is configured to associate the parameter with the executable program after the file generation module computes the first attribute.

33. The system of claim 31, wherein the modification module is configured to associate the parameter with the executable program after a user initiates a download of the program file.

34. The system of claim 31, wherein the modification module is configured to replace a placeholder in the program file with the parameter.

35. The system of claim 31, wherein the modification module is configured to write the parameter into the program file.

36. The system of claim 31, wherein the first attribute is a cryptographic digest of at least a portion of the executable program.

37. The system of claim 31, wherein the identifier is a digital signature.

38. The system of claim 31, wherein the program file is a Portable Executable (PE) format file.

39. The system of claim 38, wherein the identifier is an Attribute Certificate.

40. The system of claim 38, wherein the modification module is configured to store the parameter at a location within the program file selected from the group consisting of an entry in an Attribute Certificate Table of the program file, the file CheckSum field of the Windows-specific fields of the header of the program file, and an area past the end of the last section in the program file.

41. The system of claim 31, wherein the modification module is configured to store the parameter within the identifier.