Isolation of non-secure software from secure software to limit virus infection

• US 5,802,275 A
• Filed: 06/22/1994
• Issued: 09/01/1998
• Est. Priority Date: 06/22/1994
• Status: Expired due to Term

• Current Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Blonder, Greg E.
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Wright, Norman M.
• Application Number:
  US08/263,850
• Time in Patent Office: 1,532 Days
• Field of Search: 395/575, 395/700, 395/186, 395/187.01, 395/188.01, 380/4, 380/3, 380/25, 380/50, 380/23, 364/286.4, 364/286.5, 364/286.3
• US Class Current: 726/23
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 2207/7219 Countermeasures against side channel or fault attacks
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress

Abstract

A personal digital assistant (PDA) receives and executes both encrypted and unencrypted programs. Encrypted programs are fairly secure from virus infection, while unencrypted programs are not. To prevent contamination of the PDA with infected encrypted programs, only those encrypted programs that are keyed to the individual PDA'"'"'s unique device identifier can be decrypted and executed by that PDA. To prevent non-secure programs from corrupting secure programs and their data, programs that were received unencrypted are prevented from modifying programs that were received encrypted as well as data generated by their execution. When a user suspects a virus infection, the user pushes a special button on the PDA that prevents execution of programs that were received unencrypted and hence are suspected of being infected, while allowing continued execution of programs that were received encrypted and hence are presumed to be secure.

Claims

1. A program-execution apparatus comprising:

means for receiving both encrypted programs and unencrypted programs;

means for storing the received programs;

means for executing the stored programs; and

means for selectively preventing the executing means from executing the stored programs that were received unencrypted, while allowing the executing means to execute the stored programs that were received encrypted.

2. The apparatus of claim 1 wherein:

the preventing and allowing means comprise

a manually-actuatable actuator that, when actuated, prevents the executing means from executing the stored programs that were received unencrypted.

3. The apparatus of claim 1 having a unique apparatus identifier, wherein

the executing means execute only unencrypted programs;

and

the apparatus further comprises

means for decrypting into unencrypted programs only those of the received encrypted programs that are encrypted via an encryption arrangement that is based on said unique apparatus identifier.

4. The apparatus of claim 1 wherein execution of a program may modify another program, further comprising:

means for preventing the programs that were received unencrypted from modifying the programs that were received encrypted.

5. The apparatus of claim 1 wherein execution of a program may modify either another program or data generated by the other program, wherein:

the storing means include

means for storing data generated by execution of the stored programs by the executing means;

means for identifying both those stored programs that were received encrypted and those stored data that were generated by execution of the programs that were received encrypted; and

means for preventing the programs that were received unencrypted from modifying both the identified programs and the identified data.

6. A program-execution apparatus having a unique apparatus identifier and comprising:

a receiver for receiving both encrypted programs and unencrypted programs;

a decryption engine for decrypting, into unencrypted programs, only those of the encrypted programs that are encrypted via an encryption arrangement that is based on said unique apparatus identifier;

a memory for storing both the received programs and data generated by execution of the received programs;

a processor for executing only unencrypted said stored programs, wherein execution of an unencrypted stored program may modify either another stored program or data generated by the other stored program;

means for identifying both those stored programs that were received encrypted and those stored data that were generated by execution of the programs that were received encrypted;

means for preventing the programs that were received unencrypted from modifying both the identified programs and the identified data; and

means for selectively preventing the processor from executing the stored programs not identified by the identifying means while allowing the processor to execute the stored programs identified by the identifying means.

7. The apparatus of claim 6 wherein:

the preventing and allowing means comprise

a manually-activable actuator that, when actuated, prevents the processor from executing the stored programs not identified by the identifying means.

8. The apparatus of claim 6 wherein:

the apparatus is portable, and

the receiver is a wireless receiver.

9. The apparatus of claim 8 wherein:

the portable apparatus is a personal digital assistant, and

the wireless receiver is an infrared receiver.