Information processing apparatus, information processing method, and computer program product

Patent metadata

Field	Value
Publication number	US-2019065735-A1
Application number	US-201815932182-A
Country	US
Kind code	A1
Filing date	Feb 16, 2018
Priority date	Aug 22, 2017
Publication date	Feb 28, 2019
Grant date	—

Abstract

According to an embodiment, an information processing apparatus includes one or more processors. The one or more processors are configured to: estimate a related program related to a computer program identified with a specific program identifier; register, in a prior calculation result list, a calculation result for the related program and a related identifier for identifying the related program so that the calculation result and the related identifier are associated with each other; acquire the program identifier for identifying the program serving as an execution target; and verify whether the program serving as the execution target is permitted to be executed, based on the acquired program identifier, the calculation result corresponding to the related identifier indicating the acquired program identifier in the prior calculation result list, and a white list.

First claim

What is claimed is:

1 . An information processing apparatus comprising one or more processors configured to:
estimate a related program related to a computer program identified with a specific program identifier; register, in a prior calculation result list, a calculation result for the related program and a related identifier for identifying the related program so that the calculation result and the related identifier are associated with each other; acquire the program identifier for identifying the program serving as an execution target; and verify whether the program serving as the execution target is permitted to be executed, based on the acquired program identifier, the calculation result corresponding to the related identifier indicating the acquired program identifier in the prior calculation result list, and a white list.

2 . The apparatus according to claim 1 , wherein the calculation result is at least one of a checksum of the related program and an index indicating a registration position of the program identifier indicating the related identifier in the white list.

3 . The apparatus according to claim 1 , wherein the one or more processors are configured to:
calculate the calculation result for the program identified with the program identifier when the calculation result corresponding to the acquired program identifier is not registered in the prior calculation result list, wherein verify whether the program serving as the execution target is permitted to be executed, on the basis of the calculation result corresponding to the related identifier indicating the acquired program identifier and the white list, when the calculation result corresponding to the acquired program identifier is registered in the prior calculation result list, and verify whether the program serving as the execution target is permitted to be executed, based on the calculation result and the white list, when the calculation result corresponding to the acquired program identifier is not registered in the prior calculation result list.

4 . The apparatus according to claim 1 , wherein
the calculation result is a checksum of the related program, and the one or more processors are configured to derive a verification result indicating that the program serving as the execution target is permitted to be executed when a checksum corresponding to the related identifier indicating the acquired program identifier in the prior calculation result list and the acquired program identifier are registered in association with each other in the white list.

5 . The apparatus according to claim 1 , wherein
the calculation result is an index indicating a registration position of the program identifier indicating the related identifier in the white list, and the one or more processors are configured to verify whether the program serving as the execution target is permitted to be executed, based on the acquired program identifier, the index corresponding to the related identifier indicating the acquired program identifier, and the white list.

6 . The apparatus according to claim 1 , wherein
the number of related identifiers registered in the prior calculation result list is smaller than the number of program identifiers registered in the white list, and the one or more processors are configured to:
verify whether the program serving as the execution target is permitted to be executed, based on the acquired program identifier, the calculation result for the program identified with the program identifier, and the prior calculation result list, when the related identifier indicating the acquired program identifier is registered in the prior calculation result list; and
verify whether the program serving as the execution target is permitted to be executed, based on the acquired program identifier, the calculation result for the program identified with the program identifier, and the white list, when the related identifier indicating the acquired program identifier is not registered in the prior calculation result list.

7 . The apparatus according to claim 1 , wherein
the specific program identifier is the acquired program identifier, and the one or more processors are configured to estimate the related program related to the program identified with the program identifier.

8 . The apparatus according to claim 1 , wherein the specific program identifier is the program identifier of the program verified previously in the white list, and
the one or more processors are configured to estimate the related program related to the program identified with the program identifier.

9 . The apparatus according to claim 1 , wherein the one or more processors are configured to estimate the related program related to the program identified with the specific program identifier from a related program list in which the program identifier for identifying the specific program and the related identifier for identifying the related program related to the specific program are associated with each other.

10 . The apparatus according to claim 9 , wherein the one or more processors are configured to update the related program list based on a verification result of verifying whether the program serving is permitted to be executed.

11 . The apparatus according to claim 1 , wherein the one or more processors are configured to:
monitor change in the white list; and update information corresponding to the change in the prior calculation result list when the white list is changed.

12 . The apparatus according to claim 1 , wherein the one or more processors are configured to:
monitor change in information relating to the prior calculation result list; and update a corresponding portion in the prior calculation result list when the information relating to the prior calculation result list is changed.

13 . An information processing method comprising:
estimating a related program related to a computer program identified with a specific program identifier; registering, in a prior calculation result list, a calculation result for the related program and a related identifier for identifying the related program so that the calculation result and the related identifier are associated with each other; acquiring the program identifier for identifying the program serving as an execution target; and verifying whether the program serving as the execution target is permitted to be executed, based on the acquired program identifier, the calculation result corresponding to the related identifier indicating the acquired program identifier in the prior calculation result list, and a white list.

14 . A computer program product having a computer readable medium including programmed instructions, wherein the instructions, when executed by a computer, cause the computer to execute:
estimating a related program related to a computer program identified with a specific program identifier; registering, in a prior calculation result list, a calculation result for the related program and a related identifier for identifying the related program so that the calculation result and the related identifier are associated with each other; acquiring the program identifier for identifying the program serving as an execution target; and verifying whether the program serving as the execution target is permitted to be executed, based on the acquired program identifier, the calculation result corresponding to the related identifier indicating the acquired program identifier in the prior calculation result list, and a white list.

Assignees

• Toshiba Kk

Inventors

• Ogura Naoki
• Koike Masanobu
• Takumi Shinya
• Hanatani Yoshikazu
• Haruki Hiroyoshi

Classifications

• G06F21/51 Primary

  at application loading time, e.g. accepting, rejecting, starting or inhibiting executable software based on integrity or source reliability · CPC title

• G06F21/64

  Protecting data integrity, e.g. using checksums, certificates or signatures · CPC title

• G06F21/604

  Tools and structures for managing or administering access control systems · CPC title

• G06F2221/2141

  Access rights, e.g. capability lists, access control lists, access tables, access matrices · CPC title

• G06F21/121

  Restricting unauthorised execution of programs · CPC title