Tiered code obfuscation in a development environment

• US 10,042,988 B2
• Filed: 08/08/2017
• Issued: 08/07/2018
• Est. Priority Date: 03/30/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hook, James K., Hunt, Hamish C., Lincoln, Nicholas K.
• Primary Examiner(s): Revak, Christopher
• Assistant Examiner(s): Savenkov, Vadim
• Application Number:
  US15/671,676
• Publication Number:
  US 20170337359A1
• Time in Patent Office: 364 Days
• Field of Search: None
• CPC Class Codes: G06F 21/14 against software analysis or reverse engineering, e.g. by obfuscation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 3/011 Arrangements for interaction with the human body, e.g. for user immersion in virtual reality blind teaching G09B21/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method for viewing a plurality of encrypted code displayed within an integrated development environment with a pair of augmented reality (AR) glasses. A plurality of user login credentials submitted by a user utilizing the pair of AR glasses to access a plurality of encrypted code. The method may determine the user is authorized to access a portion of the plurality of encrypted code based on the received plurality of user login credentials. The method may further decrypt the portion based on determining the user is authorized to access the portion. The method may further include displaying the decrypted portion on a lens within the pair of AR glasses.

Claims

1. A processor-implemented method for viewing a plurality of encrypted code that is grouped into one or more code authorization levels and displayed within an integrated development environment (IDE) with a pair of augmented reality (AR) glasses, and wherein a decrypted portion of the encrypted portion is based on a user authorization level, the method comprising:

receiving, by a processor, a plurality of user login credentials submitted by a user utilizing the pair of AR glasses to access a plurality of encrypted code, wherein the received plurality of user login credentials are a username and password and are associated with an authorization level of code that the user has access to view and edit, wherein the plurality of user login credentials are input to the IDE via voice recognition by the user, and wherein the plurality of encrypted code is stored within a source code repository that includes both source code and proprietary code;

determining, by the IDE searching a database that includes a list of user credentials and a list of associated user authorization levels, the user is authorized to access a portion of the plurality of encrypted code and the user authorization level associated with the user based on the received plurality of user login credentials;

receiving a verification message from the IDE that includes the authorization level associated with the user;

decrypting the portion of the plurality of encrypted code based on receiving the verification message, wherein the decrypted portion authorization level is less than or equal to the authorization level associated with the user, wherein the decrypted portion authorization level is defined by an administrator;

displaying the decrypted portion on a lens within the pair of AR glasses that includes the encrypted portion of code covered by a black bar;

receiving a command to modify the decrypted portion made by the user within the IDE;

modifying the decrypted portion based on the received command;

transmitting the modified decrypted portion to an administrator to determine an authorization level of the modified decrypted portion;

determining, by the administrator, a changed authorization level of the modified decrypted portion;

displaying the modified decrypted portion on the lens within the pair of AR glasses, wherein the modified decrypted portion has an adjusted font color, wherein the modified decrypted portion includes a note displayed on the lens within the pair of AR glasses indicating a reason why the authorization level changed.