| 摘要 |
A method and apparatus for authenticating a Windows(R) system registry comprising generating and storing a user identity value. The user identity value is generated by inserting a user identity in a one way function. The technique also generates and stores a registry security value corresponding with the system registry. In one embodiment, the registry security value is obtained by concatenating system registry information, for example, system registry files or system registry handle keys, and inserting the concatenated system registry information in a one way function to obtain the registry security value. An application program authenticates the registry information before using the registry information. Alternately, the registry is monitored and a change to the registry is permitted if a user identity value is equal to the stored user identity value.
|
