`
`PCT/USZOl7/046176
`
`1/18
`
`
`
`Signature
`Generator
`115
`
`
`
`
`
`
`Vendor A
`110
`
`
`
`
`
`
`
`Signature
`Generator
`125
`
`7
`
`Vendor B
`120
`
`
`
`Open Source
`Database
`130
`
`
`
`
`
`Protection
`Server
`160
`
`
`
`
`
`System
`170
`
`
`
`Signature
`Generation
`
`
`
`Other Sources
`185
`
`1 8O
`
`Public
`
`Repositories
`
`Distributed
`
`190
`
`Database
`
`Fig. 1
`
`
`
`WO 2018/031703
`
`PCT/U52017/046176
`
`2/18
`
`
`
`mm:3—802.0:
`
`
`
`Am3m__\...v50539.m01::3m<83030.8:.1950#008013025<<mEm:
`
`
`
`
`
`IDEEUhOBwzccnrmfibxm
`
`
`
`wvmismncfimm083:00.80.80m233:0wEm:0:312.
`
`Um
`
`m__umEvaAmnjOZ
`
`
`MOS—um3m<<mocfinmm
`
`5803.80.:
`
`
`
`:03.0830:Um233%3@303510:0.
`
`
`
`
`
`._.:m<mammagma<5?=nmzmm.108m_owm_m__uw
`
`
`
`
`
`mocfinm300981331:92mocfinmnoam
`
`
`
`
`
`3<<m83.832mnxmbm3.833mg;0.3:.“
`
`
`
`
`
`3032232:>n_<_m<ma_0:x3001302:nmsmmoOUm
`
`
`
`
`
`£80.80
`
`32.00.;
`
`00:2..an23
`
`58:2...335
`
`
`
`320on
`
`.00-:0
`
`03—01032Sam33.33030000mm
`
`5<m:n_3>Qmflmmmfismfigmm0+Em:
`
`
`Ba3%0835.829231:8008020.:
`
`
`
`
`5S503>$33.3£96.88mag:ngmmamazm.89303593E
`
`08.82.03Um
`
`2m.N>
`
`
`
`
`
`m:03:3001m$2000m.890mE30330:0033mm
`
`
`
`3383300103200am.8m__um__030.8010:Dmflmvmmm
`
`
`
`
`
`SUBSTITUTE SHEET (RULE 26)
`
`
`
`
`
`
`
`
`
`
`
`
`WO 2018/031703
`
`PCT/U52017/046176
`
`3/18
`
`
`
`
`
`
`
`é<m:o_0_.w.80390:.000m00110:?Ewan:9“00.8309.001082$3333__U
`
`
`
`
`
`
`
`
`
`
`
`
`
`80:23.08>n_<_m<ma_0:x30010.82583mmnOUm
`
`>90ng
`
`32QO
`
`00:22:0023583mm
`
`mSEm
`
`
`
`mmimnn3.00103200%.8932“.3.0.8010:Umnmcmmm
`
`
`
`
`
`03020.8280008m.3320800mm
`
`.8m<:0_om<m90m__U010.8010:Um
`
`
`
`
`
`
`5S3001>QmmflmmAmsmficfimm0+Em:
`
`
`
`NV<m300_.>203.?mfismficaman.=nmjmm00.8%.
`
`20.Na
`
`
`
`
`
`0:03%.90010.820550:=nmsmmqmflmzm
` 380m?
`
`000.50
`
`
`
`953;30010320000.890m=U30.8010:00.8030
`
`
`
`
`
`
`
`303313303>n_<_m<mam0:x30013025830nOUm
`
`
`
`
`
`
`
`
`
`3030:3va>n_<_m<ma_0:2>53..."Cam—.3013;w;022_1020200
`
`
`
`
`
`
`
`.m00.8ngm:Em:0000030.202mm«Emma.
`
`30.33
`
`£80.80Um
`
`
`
`
`
`00:22:00_n__mm:nmsmmanjmnjOZ.mmm5
`
`91m9360:92E8:33E8H.0.
`
`
`
`3m_m:mEEmm85:0338um0:55..302
`
`
`
`
`
`m3magma2::=830.108m_0_um_m__um
`
`
`
`__U30.8010:Um233%3m<joum<m10:0.
`
`SUBSTITUTE SHEET (RULE 26)
`
`
`
`
`
`
`
`
`
`WO 2018/031703
`
`PCT/US2017/046176
`
`4/18
`
`9.061332__U
`
`
`
`
`
`
`
`3<m3aowwmomsm9m:Saw6036:?336:0838.3Cara—638
`
`
`
`
`
`gmmagma2::__nm:mm:40890—9.:05mE30.830:UmE::.:m393035n_o:o_.
`
`
`
`
`
`>nnmvfimg
`
`32.an
`
`
`
`moan—.33mzmm
`
`:nmsmm
`
`amfimzm
`9225.828amUmmm3329onmm
`5<m:n_ofi>Qmmflmmflmsmflcfimm0246:
`
`
`man3%909552055m:=nmsmm
`
`
`
`.89328593.__UEofimnqosUm
`
`
`
`5S232>mCUSFmmmmsmficamag=nm5mmQmfimzm
`
`
`
`953:302532noamnom=um_n30.8610:UmEUmmm
`
`
`
`xmimnfi303532noam.89mm530.830:333$
`
`32,23
`
`93%
`
`vomit
`
`Ano:=«3m&>n_<_m<m38:x
`
`
`
`
`309332EnmamnOUm
`
`
`
`m_m1_mmmzfi8=uo<<:mw
`
`
`
`my:30.8an__ummmsmfizxmmmmmm:315Si.
`
`2833
`
`32mm?
`
`00:33am2358:3
`
`Um
`
`vadmndOZ
`
`__u
`
`9mm
`
`_:AmBambi
`
`QOvm:92.85an
`
`SUBSTITUTE SHEET (RULE 26)
`
`
`
`2m.Nn
`
`
`
`Ano:+_13m&>n_<_mSwissx3031332EnmsmmnOUm
`
`
`
`
`
`
`
`AnoszfiBmE>n_<_m$3.30:<DEN..."Csmcgoqfimnw:332:uUmnmnnmn
`
`
`
`
`
`
`
`
`
`mywfismficwmmmam<m__o_m.nmo_3cmc3359.152
`
`
`
`
`
`
`
`
`
`WO 2018/031703
`
`PCT/U52017/046176
`
`5/18
`
`
`
`5241meAman.m8mgm.8BmxmmcwmEm<3m<m2062?:85meCmmn.__uv
`
`
`
`
`
`
`
`3S352PDUmom:9m:8%_oo_..gno=oww8_8128%.mmcfl03mznm=<
`
`
`
`m8magma5::=nmsmm.10H0903:06m
`
`
`
`
`
`
`
`
`
`.1.30.830:UmBaasm.3m<=onm<mn_0co_.
`
`
`
`
`
`30:23.va>n_<_m<m2_o:<20.2wtact—.53:wocqnmnonm:nmsmmn$.03>n_<_m
`
`
`
`
`
`
`
`
`
`£893
`
`32QO
`
`
`
`
`
`00:22st_u__mm5833
`
`
`
`An03213m8>n§m<m2_o:x3093325833nOUm
`
`
`
`
`
`
`
`“00:213m3>n_<_m<m«m_o:x3095.82EnmzmmnOUm
`
`mm3823
`
`vouéu
`
`32.23
`
`
`
`
`
`
`>253:(£35
`Qmfimlm Sam33:42=nmsmmdo3ij.53.038%.895035m__umE90.82.03Um
`
`
`00333323£833wmqmnfl3035.82mean.893__u30.82.03Umfimcmmm
`Hv<m3QOw.>01mmflmmMEWSNHCWmm0%firm—w.NV<m3QOw.>MCU3_.HMmmmsmHCfimNSC—__Om3mm
`
`
`
`
`g692:3.m35.8Han—AErmaI:8%
`
`
`
`
`
`953:30333200%.8m=um63082.0:Umfimcmmm
`
`
`
`
`
`
`
`mm295:5._<_m<Um<msaowU:33:85me__u..V
`
`Sam.55Um.
`
`
`
`Im<mmnfimmol0*9095.82:nmjmmEmmg312
`
`
`
`w;mismEqmmm8$538.8cmcsficm.#32
`
`Um
`
`QEmEtwOAmnjOZ
`$38:9:858m
`
`5835.8.2:
`
`ID.NO
`
`SUBSTITUTE SHEET (RULE 26)
`
`
`
`
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`6/18
`
`mnzw
`
`ZO_._.um_._.Om_n_
`
`mo
`
`m5888\9033
`
`u>chE8\u.u8
`
`a532.8\u._o_o_o
`
`w€888\93¢
`
`o>chE8\it
`
`<382.8353
`
`6.23:5\33szmen858
`
`>3224::
`
`>3umhmfimm:
`
`.m>cngou
`
`mm.m:
`
`
`
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046l76
`
`7/18
`
`20.Nm
`
`9982.0:Um
`
`Gm
`
`mzumE26.90202
`
`
`
`
`
`=nmsmmQmS=m8m<305m<mm__um__U
`
`
`
`BS3501>233.?flmsmEBmag
`
`m<30vm<m
`
`203
`
`SUBSTITUTE SHEET (RULE 26)
`
`
`
`
`
`WO 2018/031703
`
`PCT/US2017/046176
`
`8/18
`
`Vendor System
`305
`
`|
`|
`
`S i Lfigfulre
`g
`Generator
`310
`
`Signature
`Store
`315
`
`Metadata
`Generator
`312
`
`|
`l
`l
`|
`
`l |
`
`I— ————————————————————————————
`
`Signature Validator 330
`
`Comparator
`335
`
`Validation
`Logic
`340
`
`Blockchain
`Generator
`345
`
`Signature
`Store
`355
`
`l—___________._ ________________
`
`Central Signature Processor
`360
`
`Open
`Source
`
`Scraper
`365
`
`Signature &
`Metadata
`
`Generator
`370
`
`Signature
`Store
`375
`
`
`
`Signature
`Global
`Database Matcher
`385
`390
`
`Updater/
`Versioning
`Logic
`383
`
`Distributed
`Database
`399
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`9/18
`
`420
`
`Generate signatures locally for
`I proprietary files at vendor site I
`& send to system
`
`
`
` Are
`Add to database, and
`signatures
`provide validation for date/
`unique?
`authorship
`
`430
`
`
`
`Alert vendor to issue
`detected, instruct to resolve
`
`33
`
`3
`
`I
`
`dispute
`45o
`
`
`
`
`transactions for signatures,
`and add to distributed
`database
`
`Process open source
`content to generate
`
`signatures
`
`
`
`Overlap
`with vendor
`Alert vendor to open source
`
`signatures?
`issue detected
`
`
`480
`470
`
`
`
`
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`10/18
`
`C3 C3
`
` ».5..1.....,.V““““\“““\‘
`
`Determine programming Sanguage cf the gamma fifie
`
`4%
`
`5"5{J77:3
`
`é;
`
`506
`s
`,
`identify a Eist of kaywcsrds and key phrases assacia‘ted {WWI
`with the pragramming ianguage ““mmm,mmmmnmmm._m.__nnnnwmmmm,,4
`
`g?
`_
`_
`Remove text that times mat match a keyword or key
`phrase of the identified {Est
`-.......................................................................................................................................
`
`_____________________________
`
`508
`ymmf
`
`V
`
`Remavg {anguage—specific centre? characmrs from the
`saurce fiie
`
`5’1 0
`{My
`
`
`
`
`ERepEme Each keyword and key ECHFBSE‘ a?the saurce fiie
`' wi'h a carraspcndmg campag‘; bvie repraaentatifin ta
`
`
`Waofiufle am amazed??? sequence
`
`Hash ‘re encoded sequence to produce
`signature
`
`code
`
`514
`My
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`11/18
`
`Receive Hardware Design
`Language (HDL) signatures
`from vendors and processed
`open source repositories
`620
`
`Compare Signatures to
`signatures in database
`
`Enumerate third party code
`identified via matches for
`
`53
`
`3
`
`630
`650
`
`additional processing
`
`Fig. 6
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`12/18
`
`Receive Proprietary
`Signatures of Hardware
`Design Language (HDL) data
`from one or more vendors
`
`720
`
`5
`
`Compare Proprietary
`Signatures to Open Source
`Signatures in database
`
`Alert vendor to
`
`730
`
`
`No
`
`Alert vendor to
`
`potential leakage
`780
`
`Fig. 7
`
`
`
`Contamination?
`760
`
`3
`
`fix issue
`765
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`13/18
`
`820
`
`Receive Proprietary
`Signatures from one or more
`vendors
`
`Compare Proprietary
`Signatures of First vendor to
`other vendors’ signatures
`
`
`880
`
`
` No
`
`ontamination.
`860
`
`Alert Vendor with
`
`Contamination to 3
`fix Contamination
`
`E
`
`865
`
`i
`
`Appropriation?
`870
`
`5
`Alert Vendor
`
`with Leakage to
`address issue
`
`3
`
`875
`
`Flag for other
`resolution
`880
`
`Fig. 8
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`14/18
`
`Receive Proprietary
`Signatures from Vendor A
`with associated licensing
`
`920
`
`Compare Proprietary
`Signature of Vendor A to
`Vendors in database
`930
`
`No
`
`5
`
`5
`
`
`
`Trace usage, in database,
`including how and in what
`combination it is used
`950
`
`Alert Vendor A, whose
`
`53
`
`proprietary data is being
`misused if no license is found
`
`'3
`
`960
`
`
` Icensed signature
`
`
`checked?
`970
`
`Yes
`
`Make usage traces available
`to Vendor A
`980
`
`Fig. 9
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`15/18
`
`Receive notice of ownership
`or license update for one or
`more signatures
`
`1020
`
`
`
`
`
`update
`Notify verified originator and
`from verified
`request validation
`
`
`
`1040
`originator?
`1 030
`, ................................................................................5
`
`
`5
`
`
`
`ls
`
`
`
`Yes
`
`
`Validation
`received?
`1050
`
`
`
`Update signature(s) &
`metadata to reflect transfer/
`alteration of license
`
`retaining history
`
`1060
`
`
`Notify verified originator of
`update
`1070
`
`
`
`Update chain of ownership
`1080
`
`Start
`1 090
`
`Fig.
`
`10
`
`
`
`WO 2018/031703
`
`PCT/US2017/046176
`
`16/18
`
`Receive signatures from a
`
`plurality of vendors
`1120
`
`Compare to existing
`signatures to determine
`uniqueness/code reuse
`
`
`Any conflicts?
`1130
`
`
`Yes
`
`1125
`
`Flg _ 1 1
`
`No
`
`Yes
`
`Yes
`
`3
`
`3
`
`Generate block chain for
`signature & add to database 3
`and distributed database
`5
`1135
`
`
`
`
`Flag relationship between
`elements
`1145
`
`
`
`
`Flag licensing relationship &
`
`add additional licensing
`3
`
`terms
`
`1155
`
`1
`
`
` Within
`organization
`
`1140
`
`No
`
`
`
`
` Licensed
`software?
`1150
`
`No
`
`
`
`Flag as
`
`
`problem to
`resolve
`
`
`
`
`
`
`Open
`source software?
`
`1160
`
`
`
`Yes
`
`1170
`
`
`This
`Priority
`obvious?
`
`data predates?
`1185
`1180
`
`
`
`Flag prior signature
`1190
`
`
`
`WO 2018/031703
`
`PCT/USZOl7/046176
`
`17/18
`
`storage
`
`Non—volatile
`
`Fig. 12
`
`