Rollback-Resistant Code-Signing.pdf

专利名称：Rollback-Resistant Code-Signing

发明人：Nadarajah Asokan,Lauri Paatero

申请号：US11673722

申请日：20070212

公开号：US20080195868A1

公开日：

20080814

专利内容由知识产权出版社提供

专利附图：

摘要：A code signature methodology that allows recovery from incorrectly signed software while preventing rollbacks is described herein. When software is signed, the code signature is based not only on the current version of executable code and

information corresponding to the current version of executable code, but also includes a

history value based on a previous version of the executable code. Each history value is unknown until each version of the software is validly signed. Thus, the code signature technique allows a signing entity to continue using the same signing key even after recovering from an attack, can be used with and without pre-configured trust roots, and allows a device to upgrade from one version of software to another version of the software while skipping intermediate versions.

申请人：Nadarajah Asokan,Lauri Paatero

地址：Espoo FI,Helsinki FI

国籍：FI,FI

更多信息请下载全文后查看