System and method for providing secure testing aids

• US 6,944,568 B1
• Filed: 12/02/2003
• Issued: 09/13/2005
• Est. Priority Date: 12/02/2003
• Status: Expired due to Fees

• Current Assignee: Douglas Corarito
• Original Assignee: Douglas Corarito
• Inventors: Corarito, Douglas
• Primary Examiner(s): Nghiem, Michael
• Assistant Examiner(s): Pretlow, Demetrius R.
• Application Number:
  US10/707,270
• Time in Patent Office: 651 Days
• Field of Search: 702/122, 702/123, 702/127, 702/119, 717168-173, 455 95-100
• US Class Current: 702/123
• CPC Class Codes: G06F 11/3688 for test execution, e.g. scheduling of test suites
• CPC Class Codes: G06F 15/025 adapted to a specific application
• CPC Class Codes: G06F 21/577 Assessing vulnerabilities and evaluating computer system security
• CPC Class Codes: G06F 2221/034 Test or assess a computer or a system

Abstract

A method for testing utilizing a handheld computer having software which includes a launcher and a multiplicity of previous applications includes the steps exchanging the contents of the internal flash-ROM memory for the contents of an external memory module which contains a testing application and a verification application. The verification application ensures that after the exchange the contents of the flash-ROM memory contains only programs which have been authorized by the testing agency to be present when the test is taken, and that all communications and networking capability of the handheld computer are disabled during testing. At the conclusion of testing the handheld computer is returned to its original configuration by a second exchange between the flash-ROM memory and the external memory module.

Claims

1. A method for testing, utilizing a handheld computer comprising a launcher and a multiplicity of previous applications, the method comprising the steps of:

(a) erasing all of the previous applications in the handheld computer;

(b) loading one or more new applications into the handheld computer;

(c) loading a verification application into the handheld computer;

(d) launching by a proctor of the verification application and verifying whether or not the handheld computer contains only the new applications and the launcher, and proceeding only if it does;

(e) performing the testing with the aid of the new applications;

(f) erasing the new applications from the handheld computer;

(g) restoring the previous applications to the handheld computer.

2. The method of claim 1, wherein the verifying further comprises the steps of performing a checksum calculation on one or more portions of the internal memory, and comparing the resulting checksum to a desired checksum.

3. The method of claim 2, wherein the verifying further comprises comparing a desired key code with a key code generated by the verifying step.

4. The method of claim 3, wherein the verifying further comprises confirming that now network devices of the handheld computer are enabled, and that no communications devices of the handheld computer are enabled.

5. The method of claim 3, wherein the value of the generated key code is a dynamic value.

6. The method of claim 5, wherein the dynamic value is generated by a pseudo-random number generator, comprising a PRNG algorithm, in the handheld computer, and is compared to a value generated by pseudo-random number generator, comprising the PRNG algorithm, outside of the handheld computer.

7. The method of claim 3, wherein the internal memory further comprises a flash ROM memory.

8. The method of claim 7, wherein the external memory further comprises a removable memory module.

9. The method of claim 3, wherein the verification code is different for each of a multiplicity of test centers.

10. The method of claim 3, wherein the verifying is performed by a verification application comprising encryption to some or all of the verification application.

11. The method of claim 3, wherein the new applications further comprises a flight calculator.

12. A method for testing utilizing a handheld computer comprising a launcher and a multiplicity of previous applications, all stored in an internal memory in the form of an old image, and further comprising an external memory which further comprises a new image, the new image further comprising a verification application and one or more new applications, the method comprising the steps of:

(a) exchanging the new image on the external memory with the old image on the internal memory;

(b) launching by a proctor of the verification application and verifying whether or not the handheld computer contains only the new applications and the launcher, and proceeding only if it does;

(c) performing the testing with the aid of the new applications; and

(d) exchanging the old image on the external memory with the new image on the internal memory.

13. The method of claim 12, wherein the verifying further comprises the steps of performing a checksum calculation on one or more portions of the internal memory, and comparing the resulting checksum to a desired checksum.

14. The method of claim 13, wherein the verifying further comprises comparing a desired key code with a key code generated by the verifying step.

15. The method of claim 14, wherein the verifying further comprises confirming that now network devices of the handheld computer are enabled, and that no communications devices of the handheld computer are enabled.

16. The method of claim 14, wherein the value of the generated key code is a dynamic value.

17. The method of claim 16, wherein the dynamic value is generated by a pseudo-random number generator, comprising a PRNG algorithm, in the handheld computer, and is compared to a value generated by pseudo-random number generator, comprising the PRNG algorithm, outside of the handheld computer.

18. The method of claim 14, wherein the internal memory further comprises a flash ROM memory.

19. The method of claim 18, wherein the external memory further comprises a removable memory module.

20. The method of claim 14, wherein the verification code is different for each of a multiplicity of test centers.

21. The method of claim 14, wherein the verifying is performed by a verification application comprising encryption to some or all of the verification application.

22. The method of claim 14, wherein the new applications further comprises a flight calculator.