METHOD OF CERTIFYING MULTIPLE VERSIONS OF AN APPLICATION

• US 20110055672A1
• Filed: 09/01/2009
• Published: 03/03/2011
• Est. Priority Date: 09/01/2009
• Status: Active Grant

• Current Assignee: ESW Holdings, Inc. (ESW Capital, LLC)
• Original Assignee: Ensequence Incorporated
• Inventors: Westerman, Larry Alan, Tait, Mark-Andrew Ray
• Granted Patent: US 8,566,688 B2
• Time in Patent Office: Days
• US Class Current: 714/807
• CPC Class Codes: G06F 11/1004 to protect a block of data words, e.g. CRC or checksum G06F11/1076 takes precedence; security arrangements for protecting computers or computer systems against unauthorized activity G06F21/00
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: H04L 1/0061 Error detection codes
• CPC Class Codes: H04L 2001/0093 Point-to-multipoint

Abstract

A first check code is computed by applying an algorithm to a proper subset of a first body of data. A second check code is computed by applying the algorithm to an equivalent proper subset of a second equivalent body of data. The two check codes are compared. The extent of the proper subset of the first body of data is determined by a semantic analysis of the first body of data. Multiple versions of an application, when the semantic changes between the applications are inconsequential, may then be certified by ignoring the non-significant modifications and ensuring the integrity of the remainder of the content.

Claims

1. In a computer system having a processor and memory, a method for comparing a first body of data and a second equivalent body of data by computing a first check code from the first body of data and a second check code from the second equivalent body of data and comparing the first check code and second check code for equality, characterized in that:

computation of the first check code from the first body of data is performed by applying an algorithm to a proper subset of the first body of data;

computation of the second check code from the second equivalent body of data is performed by applying the algorithm to the equivalent proper subset of the second equivalent body of data; and

the extent of the proper subset is determined from a semantic analysis of the first body of data.

2. The method of claim 1, wherein the proper subset of the first body of data is specified by a mask.

3. The method of claim 2, further including the steps of applying the mask to the first body of data and applying the mask to the second equivalent body of data.

4. The method of claim 1, wherein the first body of data includes one or more semantic sub-elements, the method further including determining an extent of the proper subset of the first body of data by comparing each semantic sub-element of the first body of data with a list of two or more criteria.

5. The method of claim 4, wherein a semantic sub-element is included in the proper subset if modification of the semantic sub-element violates at least one criterion in the list of criteria.

6. The method of claim 1, wherein the first body of data corresponds to a first application, and the second body of data corresponds to a second application, the method further including the step of certifying the second application if the first application is certified and the first check code and second check code are equal.

7. A computer system for comparing a first body of data and a second equivalent body of data comprising:

a memory component configured to store the first body of data and the second equivalent body of data;

a subset selection component configured to select a first proper subset of the first body of data and a second equivalent proper subset of the second equivalent body of data, the extent of the first proper subset and the second equivalent proper subset being determined from a semantic analysis of the first body of data;

a computation component configured to apply an algorithm to the first proper subset of the first body of data to generate a first check code and to apply the algorithm to the second equivalent proper subset of the second equivalent body of data to generate a second check code; and

a check code comparison component configured to compare the first check code and the second check code.

8. The computer system of claim 7, further comprising:

a semantic analysis component configured to perform a semantic analysis on a first body of data;

a criterion selection component configured to select a list of criteria;

a determination component configured to determine if modification of a semantic sub-element of a first body of data violates at least one criterion in a list of criteria; and

a mask generation component configured to generate a mask that includes each and every semantic sub-element of a first body of data for which modification of the semantic sub-element violates at least one criterion in a list of criteria.

9. The computer system of claim 8, wherein the selection component is further configured to select a proper subset of a body of data by using a mask generated by the mask generation component.

10. The computer system of claim 7, further including a certifying component configured to certify a second application, corresponding to the second body of data, when a first application, corresponding to the first body of data, is certified and the first check code and second check code are equivalent.