SG11201803707PA - Method to verify the execution integrity of an application in a target device - Google Patents

Abstract

INTERNATIONAL APPLICATION PUBLISHED UNDER THE PATENT COOPERATION TREATY (PCT) (19) World Intellectual Property - Organization International Bureau ires.. 00) (43) International Publication Date ..... ..sr ,„,„. 26 May 2017(26.05.2017) WIPO I PCT (10) WO International 111111111111311111111111111111111111111111111111111111111111111111111311111111111111111 2017/085159 Publication Number Al (51) International Patent Classification: AO, AT, AU, AZ, BA, BB, GOOF 21/57 (2013.01) BZ, CA, CH, CL, CN, CO, DO, DZ, EC, EE, EG, ES, (21) International Application Number: HN HR HU ID IL, IN, PCT/EP2016/077932 KW, KZ, LA, LC, LK, LR, (22) International Filing Date: MG, MK, MN, MW, MX, MY, MZ, NA, NG, NI, NO, NZ, 17 November 2016 (17.11.2016) OM, PA, PE, PG, PH, PL, SC, SD, SE, SG, SK, SL, SM, ST, SV, SY, TH, TJ, TM, (25) Filing Language: English TN, TR, TT, TZ, UA, UG, (26) Publication Language: English ZW. (30) Priority Data: (84) Designated States (unless 15195379.1 19 November 2015 (19.11.2015) EP kind of regional protection GM, KE, LR, LS, MW, (71) Applicant: NAGRAVISION S.A. [CH/CH]; Route de TZ, UG, ZM, ZW), Eurasian GenOve 22-24, 1033 Cheseaux-sur-Lausanne (CH). TJ, TM), European (AL, (72) Inventor: WYSEUR, Brecht; Chemin des Vignettes 18, DK, EE, ES, FI, FR, GB, GR, HR, HU, IE, IS, IT, LT, LU, LV, MC, MK, MT, NL, 1305 Penthalaz (CH). SM, TR), OAPI (BF, BJ, (74) Agent: LEMAN CONSULTING S.A. 284; Chemin de GW, KM, ML, MR, NE, Precossy 31, 1260 Nyon (CH). Published: (81) Designated States (unless otherwise indicated, for every BG, BH, BN, BR, BW, BY, CR, CU, CZ, DE, DJ, DK, DM, FI, GB, GD, GE, GH, GM, GT, IR, IS JP KE KG KN KP KR, LS, LU, LY, MA, MD, ME, PT, QA, RO, RS, RU, RW, SA, US, UZ, VC, VN, ZA, ZM, otherwise indicated, for every available): ARIPO (BW, GH, MZ, NA, RW, SD, SL, ST, SZ, (AM, AZ, BY, KG, KZ, RU, AT, BE, BG, CH, CY, CZ, DE, NO, PL, PT, RO, RS, SE, SI, SK, CF, CG, CI, CM, GA, GN, GQ, SN, TD, TG). with international search report (Art 21(3)) kind of national protection available): AE, AG, AL, AM, (54) Title: METHOD TO VERIFY THE EXECUTION INTEGRITY OF AN APPLICATION IN A TARGET DEVICE HE TD VE RAF APP A 1 0 CH ii D E 4 II VE RAF APP F ig. 1 Il .4 t (57) : The present invention concerns the field of software verification, in particular to check whether the run-time integrity a \ in of a software application can be demonstrated. It is therefore proposed a method to verify, by a verification server, the execution in - 11 tegrity of an application in a target device wherein the verification server receives an application signature generated from run time l a n e application information on the target device, said signature being used to verify the execution integrity of the application in the target o device, said application comprising an array of blocks, each block producing a digest, thus producing an array of digests related to ---. the an - ay of blocks, comprising the steps of : - sending to the target device a message comprising a challenge and a first function, I N IN said first function defining an aggregation method, said challenge defining an aggregation instruction, - receiving an attestation from c:::, the target device, this attestation being generated by the target device by determining for each block, the corresponding digest for ei said block, aggregating the digests of the blocks according to the aggregation method of the first function and the challenge to pro - 0 duce the attestation related to the application, - applying a second function to the attestation by the verification server, said second function undoing the effect of the challenge thus producing an application signature independent of the challenge, - verifying the ex- ecution integrity of the application by comparing the produced application signature with a reference signature.