Executable software security system

Abstract

A computer system which is configured to load executable programs. This configuration first accepts an operator defined key; withdraws an encrypted executable program from memory; and, using the operator defined key, decrypts the encrypted executable program into a functional executable program. It is this functional executable program which is used by the processing unit. During shutdown, each executable program is checked to see if it was derived from an encrypted executable program; those that aren't, are verified as being legitimate by the operator prior to their storage into the memory.

1 . A computer system comprising: 
 a) a memory;    b) a processing unit being configurable by executable commands; and,    c) an interface configured to, 
 1) withdraw an encrypted executable program from said memory,  
 2) decrypt said encrypted executable program into a functional executable program, and,  
 3) communicate said functional executable program to said processing unit.  
   
   
   
       2 . The computer system according to  claim 1 , wherein said interface is further configured to: 
 a) identify an executable program within said processing unit which does not have a encrypted counterpart within said memory;    b) query an operator of said computer system if said executable program is to be saved and receive an authorization response from said operator; and,    c) based upon said authorization response, selectively, 
 1) encrypt said executable program into an encrypted executable program, and,  
 2) store said encrypted executable program within said memory.  
   
   
   
       3 . The computer system according to  claim 2 , wherein, said interface is further configured to remove said executable program from the memory and the processing unit.  
   
   
       4 . The computer system according to  claim 2 , 
 a) wherein said interface is further configured to accept a key from said operator; and,    b) wherein said key is used when said interface operates to encrypt said executable program into an encrypted executable program.    
   
   
       5 . The computer system according to  claim 4 , wherein said interface is further configured to verily said key as being, accurate.  
   
   
       6 . The computer system according to  claim 5 , wherein, during operation of said interface to verify said key as being accurate, said interface is further configured to: 
 a) using said key, decrypt an encrypted template from the memory into a decrypted template; and,    b) verify the decrypted template as being accurate.    
   
   
       7 . The computer system according to  claim 6 , wherein, during operation of said interface to verify the decrypted template as being accurate, said interface is configured to: 
 a) present the decrypted template to the operator of said computer;    b) receive an acceptance response from the operator of said computer; and,    c) based upon said acceptance response, permit said interface to encrypt said executable program into an encrypted executable program.    
   
   
       8 . The computer system according to  claim 6 , wherein, during operation of said interface to verify the decrypted template as being accurate, said interface is configured to: 
 a) compare said decrypted template to said key and generate a comparison indicia therefrom; and,    b) based upon said comparison indicia, permit said interface to encrypt said executable program into an encrypted executable program.    
   
   
       9 . The computer system according to  claim 6 , wherein, during operation of said interface to verify the decrypted template as being accurate, said interface is configured to: 
 a) compare said decrypted template to a predefined template and generate an comparison indicia therefrom; and,    b) based upon said comparison indicia, permit said interface to encrypt said executable program into an encrypted executable program.    
   
   
       10 . A loading system configured to: 
 a) decrypt an encrypted executable program into a functional executable program; and,    b) communicate said functional executable program to a processing unit.    
   
   
       11 . The loading system according to  claim 10 , further configured to: 
 a) identify an executable program within said processing unit which does not have a encrypted counterpart;    b) query an operator if said executable program is to be saved;    c) receive an authorization response from said operator; and,    d) based upon said authorization response, encrypt said executable program into an encrypted executable program.    
   
   
       12 . The loading system according to  claim 11 , further configured to store said encrypted executable program within a memory.  
   
   
       13 . The computer system according to  claim 11 , wherein an operator defined key is used when said interface operates to encrypt said executable program into an encrypted executable program.  
   
   
       14 . The computer system according to  claim 13 , wherein said interface is further configured to: 
 a) using said operator defined key, decrypt an encrypted template into a decrypted template; and,    b) verify the decrypted template as being accurate.    
   
   
       15 . A computer system comprising: 
 a) a memory;    b) a processing unit being configurable by executable commands; and,    c) a loading interface configured to, 
 1) accept an operator defined key,  
 2) withdraw an encrypted executable program from said memory,  
 2) using said operator defined key, decrypt said encrypted executable program into a functional executable program, and,  
 3) communicate said functional executable program to said processing unit; and,  
   d) wherein said processing unit operates said functional executable program.    
   
   
       16 . The computer system according to  claim 15 , wherein said loading interface is further configured to: 
 a) identify an executable program within said processing unit which does not have a encrypted counterpart within said memory;    b) query an operator of said computer system if said executable program is to be saved and receive an authorization response from said operator; and,    c) based upon said authorization response, selectively, 
 1) using said operator defined key, encrypt said executable program into a second encrypted executable program, and,  
 2) store the second encrypted executable program in said memory.  
   
   
   
       17 . The computer system according to  claim 16 , wherein, said interface is further configured to, based on said authorization response, remove said executable program from the memory and the processing unit.  
   
   
       18 . The computer system according to  claim 16 , wherein said downloading interface is further configured: 
 a) Using said key, decrypt an encrypted template from memory into a decrypted template;    b) present the decrypted template to the operator of said computer;    c) receive an acceptance response from the operator of said computer; and,    d) based upon said acceptance response, permit said interface to encrypt said executable    program into an encrypted executable program to verify said key as being accurate.