CN1144126C - 保护程序流的方法 - Google Patents

保护程序流的方法 Download PDF

Info

Publication number
CN1144126C
CN1144126C CNB008131139A CN00813113A CN1144126C CN 1144126 C CN1144126 C CN 1144126C CN B008131139 A CNB008131139 A CN B008131139A CN 00813113 A CN00813113 A CN 00813113A CN 1144126 C CN1144126 C CN 1144126C
Authority
CN
China
Prior art keywords
program
checksum
called
subroutine
execution
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Fee Related
Application number
CNB008131139A
Other languages
English (en)
Chinese (zh)
Other versions
CN1375084A (zh
Inventor
ϣ��Τ����
迈克尔·巴尔迪希韦勒
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Jiejia De Mobile Safety Co Ltd
Original Assignee
Giesecke and Devrient GmbH
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Giesecke and Devrient GmbH filed Critical Giesecke and Devrient GmbH
Publication of CN1375084A publication Critical patent/CN1375084A/zh
Application granted granted Critical
Publication of CN1144126C publication Critical patent/CN1144126C/zh
Anticipated expiration legal-status Critical
Expired - Fee Related legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F11/00—Error detection; Error correction; Monitoring
    • G06F11/28—Error detection; Error correction; Monitoring by checking the correct order of processing
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/51—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/62—Protecting access to data via a platform, e.g. using keys or access control rules
    • G06F21/6209—Protecting access to data via a platform, e.g. using keys or access control rules to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/60—Protecting data
    • G06F21/64—Protecting data integrity, e.g. using checksums, certificates or signatures
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/70—Protecting specific internal or peripheral components, in which the protection of a component leads to protection of the entire computer
    • G06F21/82—Protecting input, output or interconnection devices
    • G06F21/83—Protecting input, output or interconnection devices input devices, e.g. keyboards, mice or controllers thereof
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/033—Test or assess software
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2101—Auditing as a secondary aspect
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/2151—Time stamp
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/44—Arrangements for executing specific programs
    • G06F9/448—Execution paradigms, e.g. implementations of programming paradigms
    • G06F9/4482—Procedural
    • G06F9/4484—Executing subprograms

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • General Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Health & Medical Sciences (AREA)
  • Bioethics (AREA)
  • General Health & Medical Sciences (AREA)
  • Quality & Reliability (AREA)
  • Detection And Correction Of Errors (AREA)
  • Storage Device Security (AREA)
  • Debugging And Monitoring (AREA)
CNB008131139A 1999-09-20 2000-09-18 保护程序流的方法 Expired - Fee Related CN1144126C (zh)

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
DE19944991A DE19944991B4 (de) 1999-09-20 1999-09-20 Verfahren zur Sicherung eines Programmablaufs
DE19944991.0 1999-09-20

Publications (2)

Publication Number Publication Date
CN1375084A CN1375084A (zh) 2002-10-16
CN1144126C true CN1144126C (zh) 2004-03-31

Family

ID=7922630

Family Applications (1)

Application Number Title Priority Date Filing Date
CNB008131139A Expired - Fee Related CN1144126C (zh) 1999-09-20 2000-09-18 保护程序流的方法

Country Status (8)

Country Link
US (1) US6934887B1 (enExample)
EP (1) EP1224546B1 (enExample)
JP (1) JP4732651B2 (enExample)
CN (1) CN1144126C (enExample)
AU (1) AU7288400A (enExample)
DE (1) DE19944991B4 (enExample)
RU (1) RU2254608C2 (enExample)
WO (1) WO2001022223A1 (enExample)

Families Citing this family (26)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
AU2002340566A1 (en) 2001-10-17 2003-04-28 Infineon Technologies Ag Method and device for guaranteeing a calculation in a cryptographic algorithm
WO2003034268A2 (de) 2001-10-17 2003-04-24 Infineon Technologies Ag Verfahren und vorrichtung zum absichern einer exponentiations-berechnung mittels dem chinesischen restsatz (crt)
CN1682484B (zh) * 2002-09-11 2012-03-21 德国捷德有限公司 受保护的密码计算
FR2857473B1 (fr) * 2003-07-11 2005-09-16 Oberthur Card Syst Sa Procede de securisation de l'execution d'un programme informatique, notamment dans une carte a microcircuit
DE102004021088A1 (de) * 2004-04-29 2005-11-17 Giesecke & Devrient Gmbh Verfahren zum Schützen von Daten eines Datenträgers gegen DFA-Angriffe
JP2006018765A (ja) * 2004-07-05 2006-01-19 Infocom Corp ソフトウエアの一時的な修正方法およびプログラム
US8347078B2 (en) 2004-10-18 2013-01-01 Microsoft Corporation Device certificate individualization
US8887287B2 (en) * 2004-10-27 2014-11-11 Alcatel Lucent Method and apparatus for software integrity protection using timed executable agents
US8336085B2 (en) 2004-11-15 2012-12-18 Microsoft Corporation Tuning product policy using observed evidence of customer behavior
US8464348B2 (en) * 2004-11-15 2013-06-11 Microsoft Corporation Isolated computing environment anchored into CPU and motherboard
US8176564B2 (en) 2004-11-15 2012-05-08 Microsoft Corporation Special PC mode entered upon detection of undesired state
US8438645B2 (en) 2005-04-27 2013-05-07 Microsoft Corporation Secure clock with grace periods
US9436804B2 (en) 2005-04-22 2016-09-06 Microsoft Technology Licensing, Llc Establishing a unique session key using a hardware functionality scan
US8353046B2 (en) 2005-06-08 2013-01-08 Microsoft Corporation System and method for delivery of a modular operating system
EP1739519A1 (en) * 2005-06-30 2007-01-03 Axalto SA Method to secure the execution of a program against attacks by radiation or other
JP4844102B2 (ja) * 2005-11-30 2011-12-28 富士ゼロックス株式会社 サブプログラム及びそのサブプログラムを実行する情報処理装置
JP4783163B2 (ja) * 2006-01-19 2011-09-28 Ｏｋｉセミコンダクタ株式会社 マイクロコントローラ
WO2008040377A1 (en) * 2006-10-06 2008-04-10 Agere Systems Inc. Protecting secret information in a programmed electronic device
FR2910144A1 (fr) * 2006-12-18 2008-06-20 St Microelectronics Sa Procede et dispositif de detection errones au cours de l'execution d'un programme.
CN102183896B (zh) * 2010-12-07 2015-11-25 北京广利核系统工程有限公司 一种利用Matlab测试核电站保护逻辑的系统
FR2990533B1 (fr) * 2012-05-09 2015-02-13 Morpho Procede de suivi d'execution d'un logiciel et logiciel pour la mise en oeuvre du procede
DE102014018208A1 (de) * 2014-12-08 2016-06-09 Giesecke & Devrient Gmbh Verfahren zum Betreiben eines Sicherheitsmoduls
FR3030084B1 (fr) 2014-12-12 2018-02-09 Oberthur Technologies Procede d’execution d’un programme par un processeur et entite electronique comportant un tel processeur
RU2591020C1 (ru) * 2015-06-01 2016-07-10 Российская Федерация, от имени которой выступает Государственная корпорация по атомной энергии "Росатом" (Госкорпорация "Росатом") Способ контроля хода выполнения программы пользователя, исполняющейся на вычислительных узлах вычислительной системы
WO2017071763A1 (en) * 2015-10-29 2017-05-04 Hewlett-Packard Development Company, L.P. Checking a security value calculated for a part of a program code
FR3134907A1 (fr) 2022-04-26 2023-10-27 STMicroelectronics (Grand Ouest) SAS Procédé de surveillance d’une exécution d’une portion de code programme et système sur puce correspondant

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
SU1191912A1 (ru) * 1984-05-16 1985-11-15 Рыбинский Авиационный Технологический Институт Устройство дл контрол хода программ
DE3502387A1 (de) * 1985-01-25 1986-07-31 Klöckner-Moeller Elektrizitäts GmbH, 5300 Bonn Verfahren zur ueberwachung von mikroprozessorsystemen und speicherprogrammierbaren steuerungen
JPH04127340A (ja) * 1990-09-19 1992-04-28 Canon Inc 電子機器
JP2721294B2 (ja) * 1993-01-29 1998-03-04 本田技研工業株式会社 コンピュータシステムのオンライン監視システム
JPH0784786A (ja) * 1993-09-09 1995-03-31 Casio Comput Co Ltd プログラム実行制御方法
EP0686916A1 (en) 1994-06-07 1995-12-13 Digital Equipment Corporation Method and apparatus for testing software
US5768591A (en) 1995-09-08 1998-06-16 Iq Systems Method of de-bugging host-processor software in a distributed processing system having a host processor and at least one object oriented processor
US5757914A (en) * 1995-10-26 1998-05-26 Sun Microsystems, Inc. System and method for protecting use of dynamically linked executable modules
JPH09160807A (ja) 1995-12-06 1997-06-20 Mitsuba Corp マイクロプロセッサの誤動作検出方法
US5909580A (en) 1996-02-08 1999-06-01 Inprise Corporation Development system and methods with direct compiler support for detecting invalid use and management of resources and memory at runtime
JP3683031B2 (ja) * 1996-04-17 2005-08-17 株式会社リコー プログラム保護装置
DE19701166A1 (de) * 1997-01-15 1998-07-23 Siemens Ag Verfahren zur Überwachung der bestimmungsgemäßen Ausführung von Softwareprogrammen
JPH11215120A (ja) * 1998-01-27 1999-08-06 Fujitsu Ltd 通信装置
US6654954B1 (en) * 1998-02-17 2003-11-25 International Business Machines Corporation Computer system, program product and method utilizing executable file with alternate program code attached as a file attribute
US6314532B1 (en) * 1998-12-04 2001-11-06 Lucent Technologies Inc. Method and system for recovering from a software failure
US6766458B1 (en) * 2000-10-03 2004-07-20 Networks Associates Technology, Inc. Testing a computer system

Also Published As

Publication number Publication date
WO2001022223A1 (de) 2001-03-29
RU2254608C2 (ru) 2005-06-20
JP4732651B2 (ja) 2011-07-27
AU7288400A (en) 2001-04-24
US6934887B1 (en) 2005-08-23
EP1224546B1 (de) 2015-09-02
CN1375084A (zh) 2002-10-16
DE19944991A1 (de) 2001-04-12
JP2003510684A (ja) 2003-03-18
DE19944991B4 (de) 2004-04-29
EP1224546A1 (de) 2002-07-24

Similar Documents

Publication Publication Date Title
CN1144126C (zh) 保护程序流的方法
US5224160A (en) Process for securing and for checking the integrity of the secured programs
JPH11506240A (ja) スマートカードのデータを安全に変更する方法
WO2007119781A1 (ja) ソフトウェア動作モデル化装置、ソフトウェア動作監視装置、ソフトウェア動作モデル化方法及びソフトウェア動作監視方法
US9262631B2 (en) Embedded device and control method thereof
US20060047955A1 (en) Application code integrity check during virtual machine runtime
CN1173264C (zh) 保护计算机的核心免受外部窜改的方法
CN114329653A (zh) 用于安全防护的方法、装置、电子设备及存储介质
EP3454216B1 (en) Method for protecting unauthorized data access from a memory
US7447916B2 (en) Blocking of the operation of an integrated circuit
US7496738B2 (en) Method of automatic control of the execution of a program by a microprocessor
JPH08508352A (ja) データ処理システムのための安全臨界プロセッサおよび処理方法
US12038808B2 (en) Memory integrity check
WO2001097010A2 (en) Data processing method and device for protected execution of instructions
RU2647684C2 (ru) Устройство и способ обнаружения несанкционированных манипуляций системным состоянием блока управления и регулирования ядерной установки
CN110502380B (zh) 一种哈希算法协处理器自检的方法
WO2019219400A1 (en) Electronic system and method for preventing malicious actions on a processing system of the electronic system
US8239833B2 (en) Statistical control of the integrity of a program
CN117786666A (zh) 功能代码的启动校验方法、装置、电子设备及存储介质
JP4728619B2 (ja) ソフトウェアの改竄検出装置、改竄防止装置、改竄検出方法及び改竄防止方法
JP2001195247A (ja) ソフトウェアの安全性を検証し保証するシステム及び方法
JP5177206B2 (ja) ソフトウェアの改竄検出装置及び改竄検出方法
EP1271317A1 (en) System-on-chip with time redundancy operation
JP2008204085A (ja) 半導体記憶装置
CN112582009A (zh) 单调计数器及其计数方法

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
C14 Grant of patent or utility model
GR01 Patent grant
TR01 Transfer of patent right
TR01 Transfer of patent right

Effective date of registration: 20180305

Address after: Munich, Germany

Patentee after: Jiejia de mobile safety Co., Ltd.

Address before: Munich, Germany

Patentee before: Giesecke & Devrient GmbH

CF01 Termination of patent right due to non-payment of annual fee
CF01 Termination of patent right due to non-payment of annual fee

Granted publication date: 20040331

Termination date: 20180918