VALIDATING RESOURCES EXECUTION

摘要

A whitelist of hash values for applications is signed and encrypted by a remote device and the encrypted whitelist is securely delivered over a network connection to a second device as an encrypted whitelist. The second device decrypts the whitelist and validates the signature of the remote device for the decrypted whitelist. Hash values in the decrypted version of the encrypted whitelist are compared against dynamically computed hash values for the applications. Applications with matching hash values are permitted to execute on the second device.

主权项

1. A method, comprising:
decrypting an encrypted file to produce a decrypted file; validating a digital signature for the decrypted file; computing a first hash value for an application; comparing a second hash value for the application obtained from the decrypted file against the first hash value; and allowing the application to execute on a device when the digital signature is successfully validated and when the first hash value matches the second hash value.