Jumping application security system

• US 20040139345A1
• Filed: 10/15/2003
• Published: 07/15/2004
• Est. Priority Date: 10/16/2002
• Status: Active Grant

• Current Assignee: Aramira Corporation
• Original Assignee: Aramira Corporation
• Inventors: Rygaard, Christopher A.
• Granted Patent: US 7,735,134 B2
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/562 Static detection
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A jumping application security system and method provides known safe code for the jumping applications on each jump. A participating host specifies the desired code by describing the desired behavior. The security system provides the specified code on behalf of the host.

Claims

1. A computer implemented jumping application security console that maintains the security of a jumping application that is jumping between one or more hosts connected to the security console, the security console comprising:

a security module that controls the security of a jumping application;

a database that contains one or more pieces of code and a description of each piece of code, wherein each piece of code implements a particular behavior; and

wherein the security module further comprises instructions that replace code from the jumping application that implements a first behavior with a piece of code from the database into the jumping application that implements the first behavior.

2. The console of claim 1, wherein the instructions that replace code further comprises instructions that remove any existing code in the jumping application and then instructions that insert the piece of code that implements the particular behavior into the jumping application.

3. The console of claim 1, wherein the security module further comprises instructions for receiving a request for a piece of code, by a host, that implements a particular behavior for a jumping application.

4. The console of claim 1, wherein instructions to replace the code further comprises instructions that remove the code from the jumping application, instructions that store a list of the code removed from the jumping application and instructions that insert the piece of code into the jumping application based on the list of code removed from the jumping application.

5. A computer implemented jumping application security console that maintains the security of a jumping application that is jumping between one or more hosts connected to the security console, the security console comprising:

means for controlling the security of a jumping application;

means for storing one or more pieces of code and a description of each piece of code, wherein each piece of code implements a particular behavior; and

wherein the security controlling means further comprises means for replacing code from the jumping application that implements a first behavior with a piece of code from the database into the jumping application that implements the first behavior.

6. The console of claim 5, wherein the replacing means further comprises means for removing any existing code in the jumping application and means for inserting the piece of code that implements the particular behavior into the jumping application.

7. The console of claim 5, wherein the security module further comprises means for receiving a request for a piece of code, by a host, that implements a particular behavior for a jumping application.

8. The console of claim 5, wherein the replacing means further comprises means for removing the code from the jumping application, means for storing a list of the code removed from the jumping application and means for inserting the piece of code into the jumping application based on the list of code removed from the jumping application.

9. A computer-implemented method for controlling the security of a jumping application in a jumping application system, the method comprising:

receiving a request for a piece of code that implements a particular behavior for a jumping application; and

replacing code in the jumping application that implements the particular behavior with a piece of code that implements the particular behavior into the jumping application so that the jumping application has the particular behavior when it is executed by a host in the jumping application system.

10. The method of claim 9, wherein replacing the code further comprises removing any existing code in the jumping application and then inserting the piece of code that implements the particular behavior into the jumping application.

11. The method of claim 9, wherein receiving the request further comprises generating a query, by a host to a security console, of the pieces of code contained in a database of the security console and selecting, by the host, the piece of code to be replaced in the jumping application.

12. The method of claim 11, wherein the replacing the code further comprises downloading the piece of code to the host in response to the selection of the piece of code by the host and inserting the piece of code, by the host, into the jumping application to implement the particular behavior.

13. The method of claim 9, wherein replacing the code further comprises removing the code from the jumping application by the security console, storing a list of the code removed from the jumping application and inserting the piece of code into the jumping application by the security console based on the list of code removed from the jumping application.

14. A jumping application security system, comprising:

a security console computer system that control the security of a jumping application in the jumping application security system;

one or more host computers connected to the first computer by a computer network, wherein each host computer executes a jumping application; and

wherein the console further comprises a database that contains one or more pieces of code and a description of each piece of code, wherein each piece of code implements a particular behavior and a security module that comprises instructions that replace code from the jumping application that implements a first behavior with a piece of code from the database into the jumping application that implements the first behavior.

15. The system of claim 14, wherein instructions that replace the code further comprises instructions that remove any existing code in the jumping application and instructions that insert the piece of code that implements the particular behavior into the jumping application.

16. The system of claim 14, wherein the console further comprises instructions that receive a request for a piece of code that implements a particular behavior for a jumping application for a host computer.

17. The system of claim 16, wherein the instructions that receive a request further comprises instructions on the host computer that generate a query of the pieces of code contained in a database of the security console and instructions on the host computer that select the piece of code to be replaced in the jumping application.

18. The system of claim 17, wherein the instructions that replace the code further comprises instructions that download the piece of code to the host computer in response to the selection of the piece of code by the host and instructions on the host computer that insert the piece of code into the jumping application to implement the particular behavior.

19. The system of claim 14, wherein instructions that replace the code further comprises instructions in the security console that remove the code from the jumping application, instructions in the security console that store a list of the code removed from the jumping application and instructions in the security console that insert the piece of code into the jumping application by the security console based on the list of code removed from the jumping application.

20. A server computer for a jumping application security system, the server comprising:

a processor;

a memory connected to the processor;

a database connected to the processor that contains one or more pieces of code and a description of each piece of code, wherein each piece of code implements a particular behavior; and

wherein the memory further comprises instructions that replace code from the jumping application that implements a first behavior with a piece of code from the database into the jumping application that implements the first behavior.

21. The server of claim 20, wherein instructions that replace the code further comprises instructions that remove any existing code in the jumping application and instructions that insert the piece of code that implements the particular behavior into the jumping application.

22. The server of claim 21, wherein the instructions that replace the code further comprises instructions that download the piece of code to the host computer in response to the selection of the piece of code by the host and instructions on the host computer that insert the piece of code into the jumping application to implement the particular behavior.

23. The server of claim 20, wherein instructions that replace the code further comprises instructions in the security console that remove the code from the jumping application, instructions in the security console that store a list of the code removed from the jumping application and instructions in the security console that insert the piece of code into the jumping application by the security console based on the list of code removed from the jumping application.