Virus immune computer system and method
View Patent ↗A method and apparatus prevents hacker code from infecting an application program by requiring decryption of the application program prior to running the application program on a computer. The method includes steps of: providing a storage device that is a separate unit from components necessary to operate the computer; storing a symmetric private key on the storage device; using the symmetric private key to produce an encrypted application program upon first installation; thereafter decrypting that part of the encrypted application program needed implement a command to run the application program; precluding the computer from running any part of the application program that has not been first encrypted with the symmetric private key; and, decrypting, on the fly, only those follow-on parts of the encrypted application program needed to perform functions called for during operation of the application program.
1. A storage device configured to decrypt software code stored in a random access memory of a computer, the storage device further configured to prevent a hacker code injection into a running process in a computer, the storage device comprising:
a non-transitory computer storage medium, a central processing unit, a data bus, and an address bus;
the non-transitory computer storage medium comprising a key usable for decrypting encrypted program code stored in the random access memory, the key comprising a plurality of bytes wherein each byte in the plurality of bytes has a byte value;
the central processing unit connected to random access memory through the data bus and the address bus;
the central processing unit is programmed to:
identify a designated location in the random access memory;
fetch an encrypted byte from the designated location stored in the random access memory of the computer;
perform a modulus operand between the byte value of the encrypted byte and a length of the key to derive a remainder value;
when the remainder value is zero, fetch the byte value of a last byte in the plurality of bytes of the key;
when the remainder value is non-zero value, fetch the byte value of the byte in the plurality of bytes of the key, said byte located at the non-zero value;
use the byte value that is fetched to decrypt the encrypted byte fetched from the designated location at the random access memory producing a decrypted byte; and,
use the decrypted byte.