Processing

Please wait...

Settings

Settings

Goto Application

1. WO2020114915 - METHOD FOR ENSURING THE TRUSTWORTHINESS OF SOURCE CODE

Publication Number WO/2020/114915
Publication Date 11.06.2020
International Application No. PCT/EP2019/083134
International Filing Date 29.11.2019
IPC
G06F 21/64 2013.01
GPHYSICS
06COMPUTING; CALCULATING OR COUNTING
FELECTRIC DIGITAL DATA PROCESSING
21Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
60Protecting data
64Protecting data integrity, e.g. using checksums, certificates or signatures
H04L 9/32 2006.01
HELECTRICITY
04ELECTRIC COMMUNICATION TECHNIQUE
LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
9Arrangements for secret or secure communication
32including means for verifying the identity or authority of a user of the system
CPC
G06F 21/64
GPHYSICS
06COMPUTING; CALCULATING; COUNTING
FELECTRIC DIGITAL DATA PROCESSING
21Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
60Protecting data
64Protecting data integrity, e.g. using checksums, certificates or signatures
H04L 9/3247
HELECTRICITY
04ELECTRIC COMMUNICATION TECHNIQUE
LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
9Cryptographic mechanisms or cryptographic; arrangements for secret or secure communication
32including means for verifying the identity or authority of a user of the system ; or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
3247involving digital signatures
Applicants
  • UNISCON UNIVERSAL IDENTITY CONTROL GMBH [DE]/[DE]
Inventors
  • JÄGER, Hubert
  • FIETZ, Jaro
Agents
  • 2S-IP SCHRAMM SCHNEIDER BERTAGNOLL PATENT- UND RECHTSANWÄLTE PART MBB
Priority Data
10 2018 131 084.605.12.2018DE
Publication Language German (DE)
Filing Language German (DE)
Designated States
Title
(DE) VERFAHREN ZUR SICHERUNG DER VERTRAUENSWÜRDIGKEIT VON QUELLCODES
(EN) METHOD FOR ENSURING THE TRUSTWORTHINESS OF SOURCE CODE
(FR) PROCÉDÉ PERMETTANT DE GARANTIR LA FIABILITÉ DE CODES SOURCES
Abstract
(DE)
Bereitgestellt wird ein Verfahren zur Sicherung der Vertrauenswürdigkeit von Software-Quellcode (Quellcode), wobei zwei Softwareentwickler den von Ihnen erzeugten Quellcode signieren. Eine Compilereinrichtung prüft anhand der öffentlichen Signaturschlüssel der Softwareentwickler, ob der zu Quellcode vertrauenswürdig ist und erzeugt aus dem Quellcode einen Binärcode. Der erzeugte Binärcode wird von der Compilereinrichtung signiert und der signierte Binärcode wird zusammen mit dem öffentlichen Signaturschlüssel der Compilereinrichtung zur weiteren Verwendung bereitgestellt. Der signierte Binärcode ist damit ebenfalls vertrauenswürdig.
(EN)
A method for ensuring the trustworthiness of software source code (source code) is provided, wherein two software developers sign the source code produced by said software developers. A compiling device checks, on the basis of the public signature keys of the software developers, whether the source code is trustworthy and produces a binary code from the source code. The produced binary code is signed by the compiling device, and the signed binary code together with the public signature key of the compiling device is made available for further use. The signed binary code is therefore likewise trustworthy.
(FR)
L’invention concerne un procédé permettant de garantir la fiabilité d’un code source de logiciel (code source), deux développeurs de logiciels signant le code source qu’ils génèrent. En fonction de la clé publique de signature du développeur de logiciels, un dispositif compilateur vérifie que le code source est fiable et génère un code binaire à partir du code source. Le code binaire généré est signé par le dispositif compilateur, et le code binaire signé est mis à disposition pour utilisation ultérieure, conjointement avec la clé publique de signature du dispositif compilateur. Le code binaire signé est ainsi également fiable.
Also published as
Latest bibliographic data on file with the International Bureau