Patent ID: 8856938
Filing Date: 2014-10-07
Classification: G06F

Abstract:
1. A non-transitory computer-readable storage medium comprising instructions, which when executed by one or more processors during a computer boot, cause the one or more processors to perform the steps of: receiving a request from a target process to access an executable file object, the executable file object being encoded in a computer readable medium; associating the executable file object with a digital signature constructed from a one-way hash of the executable file object contents encrypted with an asymmetric cryptographic private key; decrypting the hash value using a public key; determining if the executable file object is validated or unvalidated based at least in part on a hash of the file object contents embedded in the executable file object, determination of a file object being validated includes determining if the executable file object has changed since its last execution such that a modified file object will fail to start; comparing the hash to a table of revocation manifest entries; determining that the executable file object is unvalidated if the table contains a matching hash entry; and if the executable file object is unvalidated, allowing the target process to execute the executable file object if a privilege cap allows execution of an unvalidated object.