Remote incremental program verification using API definitions

• US 7,231,635 B2
• Filed: 09/12/2003
• Issued: 06/12/2007
• Est. Priority Date: 04/28/2000
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Schwabe, Judith E.
• Primary Examiner(s): An; Weng-Al T.
• Assistant Examiner(s): MITCHELL, JASON D
• Application Number:
  US10/661,043
• Publication Number:
  US 20040153827A1
• Time in Patent Office: 1,369 Days
• Field of Search: 717/124, 717/126, 717/131, 717/177, 714/38, 714/135, 714/1, 714/25, 714/48, 719328-329
• US Class Current: 717/126
• CPC Class Codes: G06F 9/44589 Program code verification, e.g. Java bytecode verification, proof-carrying code high-level semantic checks G06F8/43; testing and debugging software G06F11/36

Abstract

A method of operating a computer system includes providing a program in memory, verifying the program prior to an installation of the program and generating a program fault signal when the verification fails. The program includes at least one program unit, and each program unit includes an Application Programming Interface (API) definition file and an implementation. Each API definition file defines items in its associated program unit that are made accessible to one or more other program units and each implementation includes executable code corresponding to the API definition file. The executable code includes type specific instructions and data. Verification includes determining whether a first program unit implementation is internally consistent, determining whether the first program unit implementation is consistent with a first program unit API definition file associated with the first program unit implementation and generating a program fault signal when the verifying fails. A resource-constrained device includes a memory for providing a remotely verified application software program that includes at least one program unit, each program unit comprising type specific instructions and data. The resource-constrained device also includes a virtual machine that is capable of executing instructions included within the application software program. The remote verification uses an API definition file for each implementation to determine whether a first program unit implementation is internally consistent and to determine whether the first program unit implementation is consistent with a first program unit API definition file associated with the first program unit implementation.

Claims

1. A method of operating a computer system, said method comprising:

providing a program in memory, the program comprising at least one program unit, each program unit comprising an Application Programming Interface (API) definition file and an implementation, each API definition file defining items in its associated program unit that are made accessible to one or more other program units, each implementation comprising executable code corresponding to said API definition file said executable code comprising type specific instructions and data; and

performing a first verification prior to an installation of said program, comprising;

indicating a verification error when a first program unit implementation is not internally consistent; and

indicating a verification error when said first program unit implementation is inconsistent with a first program unit API definition file associated with said first program unit implementation.

2. The method of claim 1, further comprising:

enabling execution of said program after said first verification if no verification error is indicated; and

preventing the execution of said program after said first verification if a verification error is indicated.

3. The method of claim 2, further comprising performing a second verification comprising verifying a second program unit that references said first program unit and makes no items available for one or more other program units, said second verification comprising:

indicating a verification error when the second program unit implementation is not internally consistent; and

indicating a verification error when said second program unit implementation is inconsistent with said first program unit API definition file.

4. The method of claim 3 wherein:

said first program unit comprises at least one additional implementation; and

said second verification comprises determining whether said at least one additional implementation is consistent with said first program unit API definition file.

5. The method of claim 2, further comprising performing a second verification comprising verifying a second program unit that references said first program unit, said second verification comprising:

indicating a verification error when the second program unit implementation is not internally consistent;

indicating a verification error when said second program unit implementation is inconsistent with the second program unit API definition file; and

indicating a verification error when said second program unit implementation is inconsistent with said first program unit API definition file.

6. A method of operating a computer system, said method comprising:

providing a program in memory, the program comprising at least one program unit, each program unit comprising an Application Programming Interface (API) definition file and an implementation, each API definition file defining items in its associated program unit that are made accessible to one or more other program units, each implementation comprising executable code corresponding to said API definition file, said executable code comprising type specific instructions and data; and

performing a first verification prior to execution of said program, comprising;

indicating a verification error when a program unit implementation is not internally consistent;

indicating a verification error when a program unit implementation is inconsistent with its API definition file; and

indicating a verification error when a program unit implementation is inconsistent with the API definition file of a program unit referenced by said program unit.

7. The method of claim 6, further comprising performing a second verification comprising verifying said program after at least one program unit has been verified at least once, said second verification comprising:

indicating a verification error when a program unit implementation is not internally consistent;

indicating a verification error when a program unit implementation is inconsistent with its API definition file; and

indicating a verification error when a program unit implementation is inconsistent with the API definition file of each program unit referenced by said program unit.

8. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for program verification, said method comprising:

providing a program in memory, the program comprising at least one program unit, each program unit comprising an Application Programming Interface (API) definition file and an implementation, each API definition file defining items in its associated program unit that are made accessible to one or more other program units, each implementation comprising executable code corresponding to said API definition file, said executable code comprising type specific instruct ions and data; and

performing a first verification prior to an installation of said program, comprising;

indicating a verification error when a first program unit implementation is not internally consistent;

indicating a verification error when said first program unit implementation is inconsistent with a first program unit API definition file associated with said first program unit implementation.

9. The program storage device of claim 8, said method further comprising:

enabling execution of said program after said first verification if no verification error is indicated; and

preventing the execution of said program after said first verification if a verification error is indicated.

10. The program storage device of claim 9, said method further comprising performing a second verification comprising verifying a second program unit that references said first program unit and makes no items available for one or more other program units, said second verification comprising:

indicating a verification error when the second program unit implementation is not internally consistent; and

indicating a verification error when said second program unit implementation is inconsistent with said first program unit API definition file.

11. The program storage device of claim 10 wherein:

said first program unit comprises at least one additional implementation; and

said second verification comprises determining whether said at least one additional implementation is consistent with said first program unit API definition file.

12. The program storage device of claim 10, said method further comprising performing a second verification comprising verifying a second program unit that references said first program unit, said second verification comprising:

indicating a verification error when the second program unit implementation is not internally consistent;

indicating a verification error when said second program unit implementation is inconsistent with the second program unit API definition file; and

indicating a verification error when said second program unit implementation is inconsistent with said first program unit API definition file.

13. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for program verification, the method comprising:

providing a program in memory, the program comprising at least one program unit, each program unit comprising an Application Programming Interface (API) definition file and an implementation, each API definition file defining items in its associated program unit that are made accessible to one or more other program units, each implementation comprising executable code corresponding to said API definition tile, said executable code comprising type specific instructions and data; and

performing a first verification prior to execution of said program, comprising;

indicating a verification error when a program unit implementation is not internally consistent;

indicating a verification error when h program unit implementation is inconsistent with its API definition file; and

indicating a verification error when a program unit implementation is inconsistent with the API definition file of a program unit referenced by said program unit.

14. The program storage device of claim 13, said method further comprising performing a second verification comprising verifying said program after at least one program unit has been verified at least once, said second verification comprising:

indicating a verification error when a program unit implementation is not internally consistent;

indicating a verification error when a program unit implementation is inconsistent with its API definition file; and

indicating a verification error when a program unit implementation is inconsistent with the API definition file of each program unit referenced by said program unit.

15. A system, including a processor, for executing a software application, the system comprising:

a computing system that generates executable code, comprising means for providing a program in memory, the program comprising at least one program unit, each program unit comprising an Application Programming Interface (API) definition file and an implementation, each API definition file defining items in its associated program unit that are made accessible to one or more other program units, each implementation comprising executable code corresponding to said API definition file, said executable code comprising type specific instructions and data; and

means for performing a first verification prior to an installation of said program, comprising;

means for indicating a verification error when a first program unit implementation is not internally consistent;

means for indicating a verification error when said first program unit implementation is inconsistent with a first program unit API definition file associated with said first program unit implementation.

16. The computing system of claim 15, further comprising:

means for enabling execution of said program after said first verification if no verification error is indicated; and

means for preventing the execution of said program after said first verification if a verification error is indicated.

17. The computing system of claim 16, further comprising:

means for performing a second verification comprising verifying a second program unit that references said first program unit and makes no items available for one or more other program units, said second verification comprising

means for indicating a verification error when the second program unit implementation is not internally consistent; and

means for indicating a verification error when said second program unit implementation is inconsistent with said first program unit API definition file.

18. The computing system of claim 17 wherein:

said first program unit comprises at least one additional implementation; and

said means for performing a second verification comprises a means for determining whether said at least one additional implementation is consistent with said first program unit API definition file.

19. The computing system of claim 16, further comprising means for performing a second verification comprising verifying a second program unit that references said first program unit, said means for performing said second verification comprising:

means for indicating a verification error when the second program unit implementation is net internally consistent;

means for indicating a verification error when said second program unit implementation is inconsistent with the second program unit API definition file; and

means for indicating a verification error when said second program unit implementation is inconsistent with said first program unit API definition file.

20. A system, including a processor, for executing a software application, the system comprising:

a computing system that generates executable code, comprising means for providing a program in memory, the program comprising at least one program unit, each program unit comprising an Application Programming Interface (API) definition file and an implementation, each API definition file defining items in its associated program unit that are made accessible to one or more other program units, each implementation comprising executable code corresponding to said API definition file, said executable code comprising type specific instructions and data; and

means for performing a first verification prior to execution of said program, comprising;

means for indicating a verification error when a program unit implementation is not internally consistent;

means for indicating a verification error when a program unit implementation is inconsistent with its API definition file; and

means for indicating a verification error when a program unit implementation is inconsistent with the API definition file of each program unit referenced by said program unit.

21. The system of claim 20, further comprising means for performing a second verification comprising verifying said program after at least one program unit has been verified at least once, said means for performing said second verification comprising:

means for indicating a verification error when a program unit implementation is not internally consistent;

means for indicating a verification error when a program unit implementation is inconsistent with its API definition file; and

means for indicating a verification error when a program unit implementation is inconsistent with the API definition file of each program unit referenced by said program unit.