Virus immune computer system and method
A method and apparatus prevents hacker code from infecting an application program by requiring decryption of the application program prior to running the application program on a computer. The method includes steps of: providing a security device that is a separate unit from components necessary to operate the computer; storing a symmetric private key on the security device; using the device symmetric private key to produce an encrypted application program upon first installation; thereafter decrypting that part of the encrypted application program needed implement a command to run the application program; and, decrypting, on the fly, only those follow-on parts of the encrypted application program needed to perform functions called for during operation of the application program.
1. A method for improving operation of a computer to provide the computer with immunity from infection of a software program by a software virus or by memory software code injection, the method comprising the steps of:
hosting an operating system in a non-transitory computer storage medium accessible by a computer;
receiving at the computer an encrypted device symmetric private key through a network connection;
decrypting the encrypted device symmetric private key on the computer to derive a decrypted device symmetric private key;
encrypting a software program using the decrypted device symmetric private key upon first installation of the software program and thereby create an encrypted software program that is the only installed version of the software program on the computer;
when executing a command to start the software program, requiring the operating system to use the decrypted device symmetric private key to decrypt a first part of the encrypted software program necessary to start the software program;
requiring the computer to use the decrypted device symmetric private key to subsequently decrypt any second part of the encrypted software program that is needed during operation of the first part; and
precluding the operating system from running any executable code that has not been previously encrypted with the decrypted device symmetric private key.
2. The method of claim 1 , further comprising the step of storing the first part and any second part that is decrypted in a random access memory accessible by the computer.