System and method for securing an inter-process communication via a named pipe

1. An information handling system operating a local inter-process communication securing system comprising:

a memory;

a processor executing machine readable code instructions of the local inter-process communication securing system performing a verification process of a candidate client application to:

instruct the candidate client application and a server application for which the local inter-process communication securing system acts as an API to establish a first named pipe having an endpoint address randomly generated by the local inter-process communication securing system;

receive a candidate client identification and a first randomly generated string of alpha-numeric characters from the server application; and

instruct the server application to establish a first communication session, via the first named pipe, with the candidate client application upon determining the candidate client identification matches an authenticated client identification and that the first randomly generated string of alpha-numeric characters matches a second randomly generated string of alpha-numeric characters previously transmitted to an authenticated client application, as stored at the local inter-process communication securing system, to verify that the candidate client application is the authenticated client application.

2. The information handling system operating the local inter-process communication securing system of claim 1 further comprising the processor executing machine readable code instructions of the local inter-process communication securing system to instruct the server application to immediately disconnect the first named pipe upon determining the candidate client identification either does not match the authenticated client identification or that the first randomly generated string of alpha-numeric characters does not match the second randomly generated string of alpha-numeric characters, as stored at the local inter-process communication securing system.

3. The information handling system operating the local inter-process communication securing system of claim 1 further comprising the processor executing machine-readable executable code instructions of the local inter-process communication securing system to:

receive from the authenticated client application associated with a trusted public key infrastructure certificate via an inter-process communication channel, the authenticated client identification;

associate the authenticated client identification with the second randomly generated string of alpha-numeric characters previously received from the server application, and the randomly generated endpoint address of the first named pipe; and

transmit the randomly generated endpoint address to the server application and the authenticated client application and transmit the second randomly generated string of alpha-numeric characters to the authenticated client application.

4. The information handling system operating the local inter-process communication securing system of claim 1 further comprising the processor executing machine readable code instructions of the local inter-process communication securing system to repeat the verification process of the candidate client application upon receiving a request from the candidate client application for a second communication session with the server application.

5. The information handling system operating the local inter-process communication securing system of claim 3 wherein the inter-process communication channel is a socket connection.

6. The information handling system operating the local inter-process communication securing system of claim 1 wherein the authenticated client application only enters into the first communication session with the server application after receiving verification from a PKI that the server application is associated with a verified PKI certificate having an authentic signature.

7. The information handling system operating the local inter-process communication securing system of claim 1 wherein the candidate client application code instructions are executed in a restricted operating system environment.

8. An method of securing a local inter-process communication by performing a verification process of a candidate client application comprising:

instructing a candidate client application and a server application for which a local inter-process communication securing system acts as an API to establish a first named pipe having an endpoint address randomly generated by the local inter-process communication securing system;

receiving a candidate client identification and a first randomly generated string of alpha-numeric characters from the server application; and

instructing the server application to establish a first communication session, via the first named pipe, with the candidate client application upon determining the candidate client identification matches an authenticated client identification and that the first randomly generated string of alpha-numeric characters matches a second randomly generated string of alpha-numeric characters previously transmitted to an authenticated client application, as stored at the local inter-process communication securing system, to verify that the candidate client application is the authenticated client application.

9. The method of securing a local inter-process communication by performing a verification process of a candidate client application of claim 8 further comprising instructing the server application to immediately disconnect the first named pipe upon determining the candidate client identification either does not match the authenticated client identification or that the first randomly generated string of alpha-numeric characters does not match a second randomly generated string of alpha-numeric characters previously transmitted to an authenticated client application, as stored at the local inter-process communication securing system.

10. The method of securing a local inter-process communication by performing a verification process of a candidate client application of claim 8 further comprising:

receiving from the authenticated client application associated with a trusted public key infrastructure certificate via an inter-process communication channel, the authenticated client identification;

associating the authenticated client identification with the second randomly generated string of alpha-numeric characters previously received from the server application, and the randomly generated endpoint address of the first named pipe; and

transmitting the randomly generated endpoint address to the server application and the authenticated client application and transmit the second randomly generated string of alpha-numeric characters to the authenticated client application.

11. The method of securing a local inter-process communication by performing a verification process of a candidate client application of claim 8 further comprising repeating the verification process of the candidate client application upon receiving a request from the candidate client application for a second communication session with the server application.

12. The method of securing a local inter-process communication by performing a verification process of a candidate client application of claim 10 wherein the authenticated client application only enters into the first communication session with the server application after receiving verification from a PKI that the server application is associated with a verified PKI certificate having an authentic signature.

13. The method of securing a local inter-process communication by performing a verification process of a candidate client application of claim 10 wherein the inter-process communication channel is a second named pipe.

14. The method of securing a local inter-process communication by performing a verification process of a candidate client application of claim 8 wherein the candidate client application code instructions are executed in a restricted operating system environment.

15. An information handling system operating a local inter-process communication securing system comprising:

a memory;

a processor executing machine readable code instructions of the local inter-process communication securing system performing a verification process of a candidate client application to:

receive from an authenticated client application associated with a trusted public key infrastructure certificate via an inter-process communication channel, an authenticated client identification;

associate the authenticated client identification with a first randomly generated string of alpha-numeric characters previously received from a server application for which the local inter-process communication securing system acts as an API, and a randomly generated endpoint address of a first named pipe;

transmit the randomly generated endpoint address to the server application and the authenticated client application and transmit the first randomly generated string of alpha-numeric characters to the authenticated client application;

receive a candidate client identification and a second randomly generated string of alpha-numeric characters from the server application; and

instruct the server application to establish a first communication session, via the first named pipe, with the candidate client application upon determining the candidate client identification matches the authenticated client identification and that the second randomly generated string of alpha-numeric characters matches the first randomly generated string of alpha-numeric characters, as stored at the local inter-process communication securing system, to verify that the candidate client application is the authenticated client application.

16. The information handling system operating the local inter-process communication securing system of claim 15 further comprising the processor executing machine readable code instructions of the local inter-process communication securing system to instruct the server application to immediately disconnect the first named pipe upon determining the candidate client identification either does not match the authenticated client identification or that the first randomly generated string of alpha-numeric characters does not match the second randomly generated string of alpha-numeric characters, as stored at the local inter-process communication securing system.

17. The information handling system operating the local inter-process communication securing system of claim 15 further comprising the processor executing machine readable code instructions of the local inter-process communication securing system to repeat the verification process of the candidate client application upon receiving a request from the candidate client application for a second communication session with the server application.

18. The information handling system operating the local inter-process communication securing system of claim 15 wherein the inter-process communication channel is a socket connection.

19. The information handling system operating the local inter-process communication securing system of claim 15 wherein the inter-process communication channel is a second named pipe.

20. The information handling system operating the local inter-process communication securing system of claim 15 wherein the candidate client application code instructions are executed in a restricted operating system environment.