Peer To Patent

Home > Archived Applications > 20080301712 > Prior Art > Detail

Pre-Grant Publication Number: 20080301712

Verification of loadable objects

Please help the USPTO examine the application by evaluating the relevance of the publicly submitted prior art to the patent application. Peer To Patent forwards the Top 10 most relevant prior art submissions and their annotations to the USPTO.

Review this prior art and click on the thumbs up (or down) to indicate whether this submission should be forwarded to the USPTO.
If you login then you can add an annotation by typing in the box at the bottom of the screen to comment on the relevance of the prior art to the claims of the patent application.

Prior Art Detail

Annotations(0)

#442Windows XP Software Restriction Policies

Applies to Claims 1,10,11,12,13,14,15,16,17,18,19,2,20,3,4,5,6,7,8,9

Submitted by: Conrad HerrmannLast updated: almost 4 years ago

0 thumbs up 0 thumbs down

Summary / Description

Summary / Description	Windows XP Software Restriction Policies can regulate the loading of software modules based on, among other things, a hash of the executable file.

Basic Information

Type of Prior Art	Online Publication

URL	http://technet.microsoft.com/en...

Author/Creator	Microsoft

Title	Using Software Restriction Policies to Protect Against Unauthorized Software

Publication Date	January 1, 2002

Publisher	Microsoft Technet

Directions to Document Location	Should the link listed above stop working, the article is part of the TechNet Library available at technet.microsoft.com

Additional Information

Notes / To Do

Notes

Excerpt

Excerpt

"Software restriction policies integrate with the operating system and common scripting runtimes to control the running of software at execution."..."A hash rule is a cryptographic fingerprint that uniquely identifies a file regardless of where it is accessed or what it is named. An administrator may not want users to run a particular version of a program. This may be the case if the program has security or privacy bugs, or compromises system stability. With a hash rule, software can be renamed or moved into another location on a disk, but it will still match the hash rule because the rule is based on a cryptographic calculation involving file contents."..."DLL checking is provided as an option for environments that want the highest assurance possible when running programs. While viruses primarily target executables for infection, some target DLLs. To ensure that a program has not been infected by a virus, you can use a set of hash rules that identify the executable and all of its required DLLs."

Relevance

Claims

A method comprising:receiving a request from an application to load a first loadable object into memory;

calculating a first signature value for the first loadable object; and

loading the first loadable object into memory if the first signature value matches one of a plurality of signature values, each of the plurality of signature values being associated with a distinct loadable object.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The method of Claim 1, wherein the first signature value matches one of the plurality of signature values if the first loadable object is an unmodified one of the plurality of distinct loadable objects.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The method of Claim 1, further comprising:if the first signature value does not match one of the plurality of signature values, notifying a user that the first loadable object cannot be loaded.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The method of Claim 3, further comprising:generating a log of loadable objects that failed to load.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The method of Claim 1, wherein the first loadable object is at least one of a program, an application dynamic link library (dll), and a device driver.

Relevance

The referenced article discusses only DLL loading. Windows XP also implements the "driver signing" feature relating to a device driver.

Claim Chart

All

The method of Claim 1, further comprising:calculating the plurality of signature values.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The method of Claim 1, further comprising:storing the plurality of signature values in a storage device.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The method of Claim 1, wherein each of the plurality of signature values is one of a cyclic redundancy check, a checksum, and a cryptographic hash of a loadable object.

Relevance

The referenced product (Windows XP) implements MD5 and SHA-1 cryptographic hashes.

Claim Chart

All

A machine-accessible storage medium including instructions that, when executed by a machine, cause the machine to perform a method, comprising:receiving a request from an application to load a first loadable object into memory;

calculating a first signature value for the first loadable object; and

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The machine-accessible storage medium of Claim 9, wherein the first signature value matches one of the plurality of signature values if the first loadable object is an unmodified one of the plurality of distinct loadable objects.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The machine-accessible storage medium of Claim 9, the method further comprising:if the first signature value does not match one of the plurality of signature values, notifying a user that the first loadable object cannot be loaded.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The machine-accessible storage medium of Claim 11, the method further comprising:generating a log of loadable objects that failed to load.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The machine-accessible storage medium of Claim 9, wherein the first loadable object is at least one of a program, an application dynamic link library (dll), and a device driver.

Relevance

The referenced article discusses only DLL loading. Windows XP also implements the "driver signing" feature relating to a device driver.

Claim Chart

All

The machine-accessible storage medium of Claim 9, the method further comprising:storing the plurality of signature values in a storage device.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

A computing apparatus comprising:a signature value generator to calculate a plurality of signature values, each of the plurality of signature values being calculated for one of a plurality of distinct loadable objects, and to store the plurality of signature values in a storage device;

a comparator connected with the signature value generator, the comparator to compare a first signature value associated with a first loadable object to the plurality of signature values stored in the storage device; and

a loader connected with a main memory and the comparator, the loader to receive a request to load the first loadable object into the main memory, and to load the first loadable object into the main memory if a first signature value associated with the first loadable object matches one of the plurality of signature values.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The computing apparatus of Claim 15, wherein the first signature value matches one of the plurality of signature values if the first loadable object is an unmodified one of the plurality of distinct loadable objects.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The computing apparatus of Claim 15, wherein the comparator is configured to notify a user that the first loadable object cannot be loaded if the first signature value does not match one of the plurality of signature values.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The computing apparatus of Claim 15, wherein the comparator is configured to generate a log of loadable objects that failed to load.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

The computing apparatus of Claim 15, wherein the first loadable object is at least one of a program, an application dynamic link library (dll), and a device driver.

Relevance

The referenced article discusses only DLL loading. Windows XP also implements the "driver signing" feature relating to a device driver.

Claim Chart

All

The computing apparatus of Claim 15, wherein the signature value generator to calculate the first signature value for the first loadable object.

Relevance

The referenced product (Windows XP) implements all the elements of the claim.

Claim Chart

All

0 days left