Information processing apparatus, information processing method, and computer program product

Patent metadata

Field	Value
Publication number	US-10846394-B2
Application number	US-201815900109-A
Country	US
Kind code	B2
Filing date	Feb 20, 2018
Priority date	Sep 11, 2017
Publication date	Nov 24, 2020
Grant date	Nov 24, 2020

Abstract

According to an embodiment, an information processing apparatus includes one or more processors. One or more processors acquire first distinctive information of a first piece of software to be executed. When a whitelist that specifies distinctive information of pieces of software that are permitted to be executed records the distinctive information indicating the first distinctive information, one or more processors distinctively identify, as second distinctive information, the distinctive information of a second piece of software that represents another piece of software relating to the first piece of software in the whitelist.

First claim

What is claimed is:

1. An information processing apparatus, comprising:
processing circuitry configured to acquire first distinctive information of a first piece of software to be executed;
in response to determining that a whitelist that specifies distinctive information and hash values of individual pieces of software that are permitted to be executed records the distinctive information indicating the first distinctive information, distinctively identify, as second distinctive information, the distinctive information of a second piece of software that represents another piece of software relating to the first piece of software in the whitelist;
calculate a hash value of the first piece of software;
execute the first piece of software when the calculated hash value matches a hash value of the first piece of software specified in the whitelist; and
delete the second distinctive information from the whitelist when the first piece of software has been executed.

2. The apparatus according to claim 1 , wherein the processing circuitry is further configured to distinctively identify the second distinctive information using control information that associates the distinctive information with related distinctive information that indicates the other piece of software relating to the software that is distinctively identified by the distinctive information.

3. The apparatus according to claim 2 , wherein the related distinctive information indicates the other piece of software that becomes unnecessary as a result of adoption of the software that is distinctively identified by the corresponding distinctive information.

4. The apparatus according to claim 2 , wherein the related distinctive information indicates the other piece of software of a version earlier than a version of the software that is distinctively identified by the corresponding distinctive information.

5. The apparatus according to claim 2 , wherein the processing circuitry is further configured to delete information relating to the second distinctive information from the control information when the second distinctive information is deleted from the whitelist.

6. The apparatus according to claim 2 , wherein the processing circuitry is further configured to:
acquire update information that includes update software and identification information of the other pieces of software relating to the update software;
record the distinctive information of the update software in the whitelist; and
update the control information using the update information.

7. The apparatus according to claim 6 , wherein the update information includes the related distinctive information that indicates the distinctive information of the other pieces of software relating to the update software.

8. The apparatus according to claim 6 , wherein the processing circuitry is further configured to record, in the control information, the related distinctive information that indicates the distinctive information of the other pieces of software that become unnecessary as a result of adoption of the update software and the distinctive information of the update software in association with each other.

9. The apparatus according to claim 6 , wherein
the update information further includes monitoring information that indicates the distinctive information of the software subjected to monitoring, and
the processing circuitry is further configured to distinctively identify, as the second distinctive information, the distinctive information indicated in the monitoring information.

10. The apparatus according to claim 1 , wherein the processing circuitry is further configured to output warning information to an output device when the acquired first distinctive information matches the second distinctive information that was previously distinctively identified.

11. The apparatus according to claim 10 , wherein the processing circuitry is further configured to, when the acquired first distinctive information matches the second distinctive information that was previously distinctively identified, hold execution of the first piece of software and output the warning information to the output device.

12. An information processing method, comprising:
acquiring first distinctive information of a first piece of software to be executed;
in response to determining that a whitelist that specifies distinctive information and hash values of individual pieces of software that are permitted to be executed records the distinctive information indicating the first distinctive information, distinctively identifying, as second distinctive information, the distinctive information of a second piece of software that represents another piece of software relating to the first piece of software in the whitelist;
calculating a hash value of the first piece of software;
executing the first piece of software when the calculated hash value matches a hash value of the first piece of software specified in the whitelist; and
deleting the second distinctive information from the whitelist when the first piece of software has been executed.

13. A computer program product comprising a non-transitory computer readable recording medium including programmed instructions, the instructions, when executed by a computer, causing the computer to:
acquire first distinctive information of a first piece of software to be executed;
in response to determining that a whitelist that specifies distinctive information and hash values of individual pieces of software that are permitted to be executed records the distinctive information indicating the first distinctive information, distinctively identify, as second distinctive information, the distinctive information of a second piece of software that represents another piece of software relating to the first piece of software in the whitelist;
calculate a hash value of the first piece of software;
execute the first piece of software when the calculated hash value matches a hash value of the first piece of software specified in the whitelist; and
delete the second distinctive information from the whitelist when the first piece of software has been executed.

Assignees

• Toshiba Kk

Inventors

• Ogura Naoki
• Hanatani Yoshikazu
• Takumi Shinya
• Koike Masanobu
• Haruki Hiroyoshi

Classifications

• G06F21/572

  Secure firmware programming, e.g. of basic input output system [BIOS] · CPC title

• G06F21/57

  Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities · CPC title

• G06F9/44536

  Selecting among different versions · CPC title

• G06F21/51 Primary

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title

• G06F2221/033

  Test or assess software · CPC title