METHOD FOR SECURING A TYPED DATA LANGUAGE, PARTICULARLY IN AN EMBEDDED SYSTEM, AND EMBEDDED SYSTEM FOR IMPLEMENTING THE METHOD

• US 20030028742A1
• Filed: 01/17/2002
• Published: 02/06/2003
• Est. Priority Date: 05/17/2000
• Status: Abandoned Application

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: CP8 Technologies (Thales SA)
• Inventors: Fougeroux, Nicolas, Hameau, Patrice, Landier, Olivier
• Application Number:
  US10/031,226
• Publication Number:
  US 20030028742A1
• Time in Patent Office: Days
• US Class Current: 711/172
• CPC Class Codes: G06F 9/44589 Program code verification, e.g. Java bytecode verification, proof-carrying code high-level semantic checks G06F8/43; testing and debugging software G06F11/36
• CPC Class Codes: G06F 9/45504 Abstract machines for programme code execution, e.g. Java virtual machine [JVM], interpreters, emulators

Abstract

The invention concerns a method and an embedded microchip system (8) for the secure execution of an instruction sequence of a computer application in the form of typed objects or data, particularly written in “Java” language. The memory (1) is organized into a first series of elementary stacks (2, 3) for storing instructions. Each typed object or datum is associated with one or more so-called typing bits specifying the type. These bits are stored in a second series of elementary stacks (4, 5) that correspond one-to-one with with the stacks (2, 3) of the first series. Before executing predetermined types of instructions, a continuous verification is performed, prior to the execution of these instructions, of the matching between a type indicated by the latter and an expected type, indicated by the typing bits. If they do not match, the execution is stopped.

Claims

1. Method for the secure execution of an instruction sequence of a computer application in the form of typed data stored in a first series of given locations in a memory of a computer system, particularly an embedded microchip system, characterized in that additional data called type information elements are associated with each of said typed data, in order to specify the type of these data, in that said type information elements are stored in a second series of given storage locations (4, 5) in said memory (1) of a computer system (8), and in that before the execution of instructions of a predetermined type, a continuous verification is performed, prior to the execution of predetermined instructions, of the matching between a type indicated by these instructions and an expected type indicated by said type information elements stored in said second series of storage locations (4, 5), so that said execution is authorized only when there is match between said types.

2. Method according to claim 1, characterized in that each of said type information elements is constituted by a string of bits stored in storage locations of said second series (4, 5) that correspond one-to-one with storage locations in said first series (2, 3) in which said associated typed data are stored, and the configuration whereof represents one of said types of typed data.

3. Method according to claim 1, characterized in that, said instructions being those of an application written in “

Java”

(registered trademark) language, said typed data are constituted by typed objects, in that said computer system incorporates a piece of software called a “

Java”

virtual machine (5) that manipulates said typed objects, in that said storage locations (2-5) in said memory (1) of the computer system (8) being organized into stacks comprising a given maximum number of levels, each level constituting one of said storage locations, said typed objects are stored in at least a first elementary stack called a data area (2) and a second elementary stack called a local variable area (3), and in that said type information elements are distributed into two additional elementary stacks (4, 5) that correspond one-to-one with said first (2) and second (3) elementary stacks, in order to specify the type of said associated objects stored in said data (2) and local variable (3) areas.

4. Method according to claim 1, characterized in that when there is no match, the execution of said instruction sequence is interrupted and replaced by the execution of instructions corresponding to pre-programmed security measures.

5. Method according to claim 3, characterized in that said type information elements are associated with additional information elements that determine the size of said storage locations in said stacks (2, 3) storing said typed objects, in order to make the size of said stacks variable, based on said objects to be manipulated.

6. Method according to claim 3, characterized in that said type information elements are associated with additional information elements called flags, in order to mark said objects that are associated with them and to indicate whether they should be saved in said stacks (2, 3) or can be erased.

7. Embedded smart card system comprising computer data processing means and storage means for the secure execution of an instruction sequence of a computer application in the form of typed data stored in a first series of given locations in a memory of a computer system, characterized in that said storage means (1) comprise a second series of given locations (4, 5) for storing additional data called type information elements, associated with each of said typed data, in order to specify the type of these data, and verification means (6) for continuously verifying, prior to the execution of predetermined instructions, the matching between a type indicated by these instructions and a type indicated by said type information elements, so as to authorize said execution only when there is a match between said types.

8. System according to claim 7, characterized in that, said first series of given locations in said memory (1) of the embedded microchip system (8) being organized into stacks comprising a given maximum number of levels, each level constituting one of said storage locations, said typed data are stored in at least a first elementary stack called a data area (2) and a second elementary stack called a local variable area (3), and in that said second series of storage locations is also organized into elementary stacks (4, 5) that correspond one-to-one with said first (2) and second (3) elementary stacks.

9. System according to claim 8, characterized in that said type information elements stored in said second series of storage locations (4, 5) are associated with additional information elements that determine the size of said storage locations in said stacks (2, 3) storing said typed data.

10. System according to claim 7, characterized in that said embedded system is a smart card (8).