Executable software security system

• US 20100017623A1
• Filed: 08/17/2009
• Published: 01/21/2010
• Est. Priority Date: 06/28/2005
• Status: Active Grant

• Current Assignee: Mark E. Ogram
• Original Assignee: Mark E. Ogram
• Inventors: Ogram, Mark E.
• Granted Patent: US 8,176,313 B2
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 12/14 Protection against unauthorised use of memory or access to memory
• CPC Class Codes: H04L 9/16 the keys or algorithms being changed during operation

Abstract

A computer system which is configured to load executable programs. This configuration first accepts an operator defined key; withdraws an encrypted executable program from memory; and, using the operator defined key, decrypts the encrypted executable program into a functional executable program. It is this functional executable program which is used by the processing unit. During shutdown, each executable program is checked to see if it was derived from an encrypted executable program; those that aren'"'"'t, are verified as being legitimate by the operator prior to their storage into the memory.

Claims

1. A computer system in a single housing comprising:

a) a memory;

b) a processing unit being configurable by executable commands, said processing unit configured to

1) withdraw an encrypted executable program from said memory,

2) decrypt said encrypted executable program into a functional executable program,

3) operate as defined by the functional executable program; and

,

4) erase the functional executable program when said processing unit is shut down.

2. The computer system according to claim 1, wherein said interface is further configured to:

a) identify an executable program within said processing unit which does not have a encrypted counterpart within said memory;

b) query an operator of said computer system if said executable program is to be saved and receive an authorization response from said operator; and

,

c) based upon said authorization response, selectively,

1) encrypt said executable program into an encrypted executable program, and,

2) store said encrypted executable program within said memory.

3. The computer system according to claim 2, wherein, said interface is further configured to remove said executable program from the memory and the processing unit.

4. The computer system according to claim 2,

a) wherein said interface is further configured to accept a key from said operator;

and,

b) wherein said key is used when said interface operates to encrypt said executable program into an encrypted executable program.

5. The computer system according to claim 4, wherein said interface is further configured to verify said key as being accurate.

6. The computer system according to claim 5, wherein, during operation of said interface to verify said key as being accurate, said interface is further configured to:

a) using said key, decrypt an encrypted template from the memory into a decrypted template; and

,

b) verify the decrypted template as being accurate.

7. The computer system according to claim 6, wherein, during operation of said interface to verify the decrypted template as being accurate, said interface is configured to:

a) present the decrypted template to the operator of said computer;

b) receive an acceptance response from the operator of said computer; and

,

c) based upon said acceptance response, permit said interface to encrypt said executable program into an encrypted executable program.

8. The computer system according to claim 6, wherein, during operation of said interface to verify the decrypted template as being accurate, said interface is configured to:

a) compare said decrypted template to said key and generate a comparison indicia therefrom; and

,

b) based upon said comparison indicia, permit said interface to encrypt said executable program into an encrypted executable program.

9. The computer system according to claim 6, wherein, during operation of said interface to verify the decrypted template as being accurate, said interface is configured to:

a) compare said decrypted template to a predefined template and generate an comparison indicia therefrom; and

,

b) based upon said comparison indicia, permit said interface to encrypt said executable program into an encrypted executable program.

10. A loading system configured to:

a) decrypt an encrypted executable program stored in a long term memory into a functional executable program;

b) communicate said functional executable program to a working memory of a processing unit; and

,

c) delete the functional executable program from said working memory when said functional executable program has completed operation.

11. The loading system according to claim 10, further configured to:

a) identify an executable program within said processing unit which does not have a encrypted counterpart;

b) query an operator if said executable program is to be saved;

c) receive an authorization response from said operator; and

,

d) based upon said authorization response, encrypt said executable program into an encrypted executable program.

12. The loading system according to claim 11, further configured to store said encrypted executable program within a memory.

13. The computer system according to claim 11, wherein an operator defined key is used when said interface operates to encrypt said executable program into an encrypted executable program.

14. The computer system according to claim 13, wherein said interface is further configured to:

a) using said operator defined key, decrypt an encrypted template into a decrypted template; and

,

b) verify the decrypted template as being accurate.

15. A computer system in a single housing comprising:

a) a memory;

b) a processing unit being configurable by executable commands; and

,

c) a loading interface configured to,

1) accept an operator defined key,

2) withdraw an encrypted executable program from said memory,

3) using said operator defined key, decrypt said encrypted executable program into a functional executable program, and,

4) communicate said functional executable program to said processing unit; and

,

d) wherein said processing unit operates said functional executable program and erases said functional executable program when said processing unit is shut down.

16. The computer system according to claim 15, wherein said loading interface is further configured to:

a) identify an executable program within said processing unit which does not have a encrypted counterpart within said memory;

b) query an operator of said computer system if said executable program is to be saved and receive an authorization response from said operator; and

,

c) based upon said authorization response, selectively,

1) using said operator defined key, encrypt said executable program into a second encrypted executable program, and,

2) store the second encrypted executable program in said memory.

17. The computer system according to claim 16, wherein, said interface is further configured to, based on said authorization response, remove said executable program from the memory and the processing unit.

18. The computer system according to claim 16, wherein said downloading interface is further configured:

a) using said key, decrypt an encrypted template from memory into a decrypted template;

b) present the decrypted template to the operator of said computer;

c) receive an acceptance response from the operator of said computer; and

,

d) based upon said acceptance response, permit said interface to encrypt said executable program into an encrypted executable program to verify said key as being accurate.