Patent ID: 9705677
Date: 2017-07-11
CPC Classifications: G06F,H04L

Claim:
1. A method for controlling the execution of code on an endpoint device comprising: receiving a first bitstream at a device, wherein the first bitstream comprises a first encryption engine; obtaining a first key corresponding to the first bitstream, wherein the first key was created by hashing the first bitstream and encrypting the hashed first bitstream; authenticating the first bitstream using hardware at the device operable to access a first secret key specific to the device which is stored in the hardware of the device and is accessible only when the device is executing in secured mode, wherein the device enters an unsecured mode on reset and can only enter the secured mode based on an output of hardware of the device and authenticating the first bitstream comprises: if the second key and the first key match, executing the first bitstream on the device in the secured mode, wherein executing the first bitstream comprises decrypting encrypted digital content associated with the first bitstream using the first encryption engine and the first secret key specific to the device and the execution of the first bitstream is done in secure mode; and if the second key and the first key do not match, comparing the generated fourth key with the third key: and if the fourth key and the third key match, executing the second bitstream on the device in secured mode.