Method and device for verifying process files in drive
A process file and file technology, applied in the computer field, can solve the problem that the driver layer cannot verify the windows signature, etc., and achieve a good protection effect
- Summary
- Abstract
- Description
- Claims
- Application Information
AI Technical Summary
Problems solved by technology
Method used
Image
Examples
Embodiment 1
[0044] Embodiment 1 of the present invention proposes a method for verifying process files in the driver, the process of which is as follows figure 1 shown, including:
[0045] Step 101: generating a signature of the process file, and placing the signature at the end of the process file;
[0046] Step 102: generating a windows signature according to the process file and the signature, and placing it in the process file;
[0047] Step 103: Generate a public key according to the private key, and place the public key in the drive;
[0048] Step 104: When the windows signature exists in the process file, verify the process file according to the public key and the signature.
[0049] The embodiment of the present invention realizes the purpose of self-defining signature verification on the process file in the driver layer by signing and verifying the process file, and the coexistence of the custom signature and the windows signature provides better protection for the custom signa...
Embodiment 2
[0051] Embodiment 2 of the present invention is improved on the basis of Embodiment 1, and its flow process is as follows figure 2 shown, including:
[0052] Step 201: Generate a signature of the process file, and place the signature at the end of the process file.
[0053] In order to prevent untrusted processes from connecting to the driver, it is necessary to sign the process file that calls the driver, and only after verifying the legal process file can the driver be called normally for specific operations. A driver is a special program that enables a computer to communicate with a device. It can be said to be equivalent to a hardware interface. Only through this interface can the operating system control the work of the hardware device. Therefore, reliable verification of the process file that calls the driver is required.
[0054] The process file can be signed by using an elliptic curve encryption algorithm or an asymmetric encryption algorithm, and the generated sig...
Embodiment 3
[0080] Embodiment 3 of the present invention proposes a device for verifying process files in the driver, its structure is as follows Figure 4 shown, including:
[0081] The first generation module 1 is used to generate the signature of the process file, and place the signature at the end of the process file;
[0082] The second generation module 2 is used to generate a windows signature according to the process file and the signature, and place it in the process file;
[0083] The third generation module 3 is used to generate a public key according to the private key, and place the public key in the driver;
[0084] The verification module 4 is configured to verify the process file according to the public key and the signature when there is a windows signature in the process file.
[0085] The embodiment of the present invention realizes the purpose of self-defining signature verification on the process file in the driver layer by signing and verifying the process file, an...
PUM
Login to View More Abstract
Description
Claims
Application Information
Login to View More 