Hewlett-packard Company

Julio Cesar Garcia

Darren D Smith

William Girard McCollom

A system and method for enforcing configuration parameters and detecting tampering of configuration files used by a software application. An enforced configuration packet (ECP) file generator generates an enforced configuration packet (ECP) file from a configuration parameter description file containing a set of configuration parameters. The ECP file includes a set of enforced configuration packets, which each include one of the configuration parameters from the ECP description file and a corresponding configuration parameter fingerprint unique to that particular configuration parameter. At startup of the software application, an ECP file reader validates the ECP file and each of the enforced configuration packets contained in the ECP file. Validation is achieved by regenerating the configuration parameter fingerprint of each configuration parameter and comparing the regenerated fingerprint to the fingerprint contained in the enforced configuration packet. If any of the fingerprints in the enforced configuration packets do not match their regenerated fingerprint, the ECP file reader indicates that the configuration parameter fingerprint is not valid. If all of the configuration parameter fingerprints match up to their regenerated fingerprints, and the ECP file itself is determined to be valid, the configuration parameters encoded in the ECP file are used by the software application to set up its configuration.

Growing community of inventors

Fort Collins, CO, United States of America

Julio Cesar Garcia