Make sure I'm working with my software and not an impostor. Windows, Java, Hardware
Can you imagine a mechanism to ensure that my software (GUI application) is the software I am currently running and not an impostor (like a black box).
It sounds like an insane demand, but this software defines life (it's a medical device), and if someone insists on doing it badly, they can just create similar software and make sure they somehow replace the genuine version.
Any hardware / software option is valid for me. I am targeting Windows and Java language. If you need to complement another piece of software / hardware to make it work together, this is of course possible.
BR, Oren
+3
source to share
1 answer
It is best to follow the standard procedure for this. In short, here's what you can do.
On your machine:
- Put your code in jar file
- Jar file digital sign with private key
- Distribute your public key on a code runner machine.
By car with a running car
- Configure security policy to run the app with only a valid digital signature
- Public key import
See this tutorial for details .
+2
source to share