Methods and apparatus for automated export compliance

• US 8,010,803 B2
• Filed: 02/15/2007
• Issued: 08/30/2011
• Est. Priority Date: 10/12/2006
• Status: Active Grant

• Current Assignee: Software Integrity Group Incorporated
• Original Assignee: Black Duck Software, Inc. (Synopsys Incorporated)
• Inventors: Smith, John J., Golombek, David, Pedersen, Palle Martin, Levin, Douglas A.
• Primary Examiner(s): Cervetti; David Garcia
• Application Number:
  US11/707,672
• Publication Number:
  US 20080091677A1
• Time in Patent Office: 1,657 Days
• Field of Search: 713/150, 713/190, 713/153, 726 22- 25
• US Class Current: 713/190
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

A system and method for determining export requirements for a content file may include examining a content file to identify content used by or included in the content file that is subject to export control, determining, in response to the identified content, export requirements that are applicable to the content file, and providing an indication of the determined export requirements.

Claims

1. A computer having a computer readable memory storing computer readable instructions therein to perform a method for export compliance, the computer readable memory comprising:

instructions to perform a computer-assisted examination of one or more computer software files;

instructions to identify, in response to the examination results, computer software used by or included in the one or more computer software files that is indicative of an encryption algorithm;

instructions to determine, in response to the identified computer software, export requirements applicable to the one or more computer software files; and

instructions to provide an indication of the determined export requirements.

2. The computer of claim 1, further comprising:

instructions to receive information regarding the expected use of the computer software files;

and wherein the instructions to determine further comprise instructions to determine in response to the identified computer software and the received information regarding the expected use.

3. The computer of claim 1, further comprising instructions to identify computer software subject to export control by presenting examination results to a user.

4. The computer of claim 1 further comprising instructions to aggregate the determined export requirements with export requirements applicable to other computer software files.

5. The computer of claim 1 further comprising instructions to aggregate the determined export requirements with export requirements obtained from a publicly available database of export information.

6. A system for export compliance, comprising:

a processor operatively coupled to a data store having one or more computer software files;

a user interface, including display and user input devices; and

the processor configured to provide;

an examination subsystem for performing a computer-assisted examination of the one or more content software files;

an identification subsystem for identifying, in response to the examination results, computer software used by or included in the one or more computer software files that is indicative of an encryption algorithm;

a determination subsystem for determining in response to the identified computer software, export requirements applicable to the one or more computer software files; and

an indication subsystem, for providing an indication of the determined export requirements utilizing the user interface.

7. The system of claim 6 wherein the processor is further configured to provide a receiving subsystem for receiving information regarding the expected use of the computer software files;

and wherein the determining subsystem determines export requirements in response to the identified computer software and received information regarding the expected use.

8. The system of claim 7, wherein the identification subsystem identifies computer software subject to export control by presenting examination results to a user utilizing the user interface, and receiving user input regarding the computer software utilizing the user interface.

9. A computer having a computer readable memory storing computer readable instructions therein to perform a method for export compliance, the computer readable memory comprising:

instructions to perform a computer-assisted examination of a software program;

instructions to identify, in response to the examination results, a portion of the software program indicative of encryption technology included in or used by the software program;

instructions to determine export requirements associated with the encryption technology indicated by the identified portion of the software program; and

instructions to provide an indication of the determined export requirements for the software program.

10. The computer of claim 9, further comprising:

instructions to receive information regarding the expected use of the software program;

and wherein the instructions to determine further comprise instructions to determine export requirements in response to the identified portion of the software program and the received information regarding the expected use.

11. The computer of claim 9 wherein the identified portion is an encryption algorithm.

12. The computer of claim 9 further comprising instructions to identify a portion of the software program without user intervention.

13. A system for export compliance, comprising:

a processor operatively coupled to a data store having a software program;

a user interface, including display and user input devices; and

the processor configured to provide;

an examination subsystem for performing a computer-assisted examination of the software program;

an identification subsystem for identifying, in response to the examination results, a portion of the software program indicative of encryption technology included in or used by the software program;

a determination subsystem for determining export requirements associated with the encryption technology indicated by the identified portion of the software program; and

an indication subsystem for providing an indication of the determined export requirements for the software program utilizing the user interface.

14. The system of claim 13 wherein the processor is further configured to provide a receiving subsystem for receiving information regarding the expected use of the software program;

and wherein the determination subsystem determines export requirements in response to the identified portion of the software program and the received information regarding the expected use.

15. The system of claim 13 wherein the identified portion is an encryption algorithm.

16. The system of claim 13 wherein the identified portion interfaces with an encryption algorithm.

17. The system of claim 13 wherein the identification subsystem identifies a portion of the software program by presenting examination results to a user utilizing the user interface.

18. The system of claim 13, wherein the identification subsystem identifies a portion of the software program without user intervention.