Extending Platform Trust During Program Updates

摘要

An approach is provided in which a computer system generates a current hash value of a computer program in response to receiving a request to execute the computer program. Next, the computer system determines that the current hash value fails to match a reference hash value that was previously generated subsequent to installing the computer program on the computer system. Since the two hash values do not match each other, the computer system matches the current hash value to an updated hash value that was previously generated in response to modifying the computer program on the computer system. In turn, the computer system executes the computer program when the current hash value matches the updated hash value.

主权项

1. A method of verifying computer program integrity on a computer system, the method comprising:
generating, by one or more processors, a first hash value of a computer program in response to receiving a request to execute the computer program; in response to determining that the first hash value fails to match a second hash value, matching the first hash value to a third hash value, wherein the second hash value was generated subsequent to installing the computer program, and the third hash value was generated in response to modifying the computer program; and executing, by one or more of the processors, the computer program in response to matching the first hash value to the third hash value.