Electrical computers and digital processing systems: support – Computer program modification detection by cryptography
Reexamination Certificate
1999-05-19
2004-06-29
Smithers, Matthew (Department: 2137)
Electrical computers and digital processing systems: support
Computer program modification detection by cryptography
C713S161000, C717S124000
Reexamination Certificate
active
06757829
ABSTRACT:
TECHNICAL FIELD OF THE INVENTION
The technical field of this invention is secure computing systems, especially computer systems that may execute after manufacture field provided programs secured to prevent the user from unauthorized use of selected computer services. The computer system may also be functionally reprogrammable in a secure manner.
BACKGROUND OF THE INVENTION
There are currently many methods to deliver video programming to a users television besides over the air broadcast. Numerous service providers are available to supply this programming to television viewers. Most of these service providers vend a hierarchy of services. Typically there is a basic service for a basic fee and additional services available for an additional fee. The basic services typically include the broadcast network programming, cable superstations, music and sports programming. These basic services are typically supported by advertizing. These basic programming services thus operate on the same economics as over the air broadcast television. The additional services typically include the so called “premium” programming such as sports and movies. These premium programming services are typically not advertizer supported. These are perceived by the television user as higher value services and television users are willing to pay their service providers additional fees for these services. The service provider passes much of this additional fee to the content providers as their compensation for supplying the programming. There may be one or several tiers of these premium services made available by the service providers. At the top of this programming hierarchy is pay per view programming. Pay per view programming typically includes music concerts and sporting events perceived as time sensitive and highly valuable by the television users. Pay per view may also include video on demand, where the television user requests a particular movie be supplied. This hierarchy of service exists for all current alternative methods of program delivery including television cable, over the air microwave broadcast and direct satellite television.
Reception of such alternative programming services has required an additional hardware appliance beyond the user provided television receiver since the beginning of cable television. Initially this additional hardware appliance merely translated the frequency of the signal from the transmission frequency to a standard frequency used in broadcast television. Such a standard frequency is receivable by the user provided television receiver. This additional hardware appliance is commonly know as a “set top box” in reference to its typical deployment on top of the television receiver. Current set top boxes handle the hierarchy of security corresponding to the hierarchy of service previously described.
In the past these set top boxes have been fixed function machines. This means that the operational capabilities of the set top boxes were fixed upon manufacture and not subject to change once installed. A person intending to compromise the security of such a set top box would need substantial resources to reverse engineer the security protocol. Accordingly, these such fixed function set top boxes are considered secure. The future proposals for set top boxes places the security assumption in jeopardy. The set top box currently envisioned for the future would be a more capable machine. These set top boxes are expected to enable plural home entertainment options such as the prior known video programming options, viewing video programming stored on fixed media such as DVD disks, Internet browsing via a telephone or cable modem and playing video games downloaded via the modem or via a video data stream. Enabling the set top box to be programmed after installation greatly complicates security. It would be useful in the art to have a secure way to enable field reprogramming of set top boxes without compromising the hierarchy of video programming security.
SUMMARY OF THE INVENTION
This invention is a method of secure computing. In particular, this invention concerns the security of a computer system when used with a debugger/emulator tool commonly employed in program development. Without special procedures to limit the operation of the debugger/emulator tool, the security of the computer system would be subject to compromise.
This invention uses an encryption system employing a private encryption key and a public decryption key. It is known in the encryption art to distribute public decryption keys corresponding to a secret private encryption key. Any data encrypted with the private encryption key can be decrypted with the public decryption key. In such systems, the mathematics of reversing the process are so difficult as to make the encrypted data very secure.
The private encryption key is used to encrypt at least verification token for the program. The public decryption key corresponding to the private encryption key is stored at the secure computing system. Upon each initialization of the debugger/emulator for the secure computing system a security screen is performed. This involved determining if the program is secure program or a nonsecure program. The secure computer system decrypts the verification token employing public decryption key. This decrypted verification token indicates the program as a secure program or a nonsecure program. If the program is a secure program, then the debugger/emulator is operated in a process mode. The process mode permits the debugger/emulator to access to the program while prohibiting access to at least one security feature of the secure computing system. If the program is a nonsecure program, then the debugger/emulator is operated in a raw mode. The raw mode permits the debugger/emulator to access to all features of the secure computing system.
A further security layer is used for operating system development intended for the secure computing system. Each data processor includes a unique chip identity number stored in a read only chip identity register. If the program is a secure program, then the debugger/emulator reads the chip identity number. A certain subset of the chip identity numbers and only this subset will permit the debugger/emulator to operate in the raw for a secure program. If the chip identity number does not fall within this subset, then the debugger/emulator can only operate in the process mode.
A private encryption key/public decryption key system can be employed as an additional layer of security for application programs that operate under the operating system. The debugger/emulator can take remedial steps regarding a security violation if the decrypted application program is not verified as secure.
REFERENCES:
patent: 5844986 (1998-12-01), Davis
patent: 5919257 (1999-07-01), Trostle
patent: 5970246 (1999-10-01), Moughani et al.
patent: WO 98/15086 (1998-04-01), None
Ferguson Edward
Laczko, Sr. Frank L.
Brady III W. James
Davis Zachary
Marshall, Jr. Robert D.
Smithers Matthew
Telecky , Jr. Frederick J.
LandOfFree
Program debugging system for secure computing device having... does not yet have a rating. At this time, there are no reviews or comments for this patent.
If you have personal experience with Program debugging system for secure computing device having..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Program debugging system for secure computing device having... will most certainly appreciate the feedback.
Profile ID: LFUS-PAI-O-3338739