Process and device for encoding of source files for secure delivery of source code

• US 10,108,786 B2
• Filed: 06/19/2015
• Issued: 10/23/2018
• Est. Priority Date: 06/20/2014
• Status: Active Grant

• Current Assignee: Le Commissariat A L'Energie Atomique Et Aux Energies Alternatives
• Original Assignee: Bull Sas (Atos SE)
• Inventors: Quinzin, Maxime, Davy, Louis, Couvee, Philippe
• Primary Examiner(s): Dada, Beemnet
• Application Number:
  US14/744,199
• Publication Number:
  US 20150371012A1
• Time in Patent Office: 1,222 Days
• CPC Class Codes: G06F 21/1062 Editing
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2221/2107 File encryption
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

A computer implemented process of encoding of at least one source file for obtaining an executable binary file that is executable by compilation of the at least one source file according to at least one instruction file, the process including: obtaining the at least one source file and the at least one instruction file; obtaining a plurality of encryption keys, at least two keys from the plurality of encryption keys being of different types, each type of encryption key being associated with a particular access right to the at least one source file; selecting each of the keys from the plurality of encryption keys and encrypting the source file according to the key selected and generating the source file encrypted according to the key selected; generating a package containing the at least one instruction file and the source files encrypted according to each key of the plurality of encryption keys.

Claims

1. A computer implemented process of encoding of at least one compilable source code file for obtaining at least one executable binary file that is executable by compilation of the at least one compliable source code file according to at least one instruction file, the process comprising:

obtaining at least one source file and the at least one instruction file, the at least one source file being a compilable source code file;

obtaining a plurality of encryption keys, at least two keys from the plurality of encryption keys being of different types, each type of encryption key being associated with a particular access right to the at least one source file;

selecting each of the keys from the plurality of encryption keys and

encrypting the at least one source file according to the key selected such that each of the at least one source file is encrypted with each of the plurality of encryption keys and

generating the at least one source file encrypted according to the key selected; and

generating a package containing the at least one instruction file and the at least one source file encrypted according to each key of the plurality of encryption keys.

2. The computer implemented process according to claim 1, further comprising obtaining at least one source file to which access is free, the generated package containing the at least one obtained source file to which access is free.

3. The computer implemented process according to claim 1, wherein the encrypting, executed for each key of the plurality of keys, further includes compressing the at least one source file.

4. The computer implemented process according to claim 1, comprising encoding a plurality of source files, the source files of the plurality of source files being organized in a hierarchical tree structure, at least one key of the plurality of cryptographic keys being associated with at least one node of the tree structure, the at least one key associated with the at least one node being used to encrypt all of the source files associated with the node and with lower-level nodes connected to the node.

5. The computer implemented process according to claim 1, further comprising transmitting the package generated.

6. A computer implemented process of decoding a package generated according to claim 1, the process comprising:

receiving a source package;

obtaining a cryptographic key;

selecting at least one set of data from the source package received based on a type of the cryptographic key; and

decrypting the at least one set of data using the cryptographic key.

7. The computer implemented process according to claim 6, further comprising compiling data resulting from the decrypting of the set of data.

8. The computer implemented process according to claim 6, further comprising editing data resulting from the decrypting of the at least one set of data.

11. The computer implemented process according to claim 1, wherein a first key of the at least two keys of different types is of a first type and associated with an accessing or editing right, and wherein a second key of the at least two keys of different types is of a second type and associated with a compilation right.

12. The computer implemented process according to claim 1, wherein the encryption of the at least one source file is asymmetric.

13. The computer implemented process according to claim 4, wherein the plurality of encryption keys are organized in the hierarchical tree structure, each key of the plurality of encryption keys being associated with a node of the hierarchical tree structure and permitting access to all source files associated with lower-level nodes.

14. The computer implemented process according to claim 4, wherein the plurality of source files in the tree structure are compressed, and wherein accessing, editing, and compilation rights associated with the plurality of source files are managed by a respective level in the hierarchical tree structure.

9. A non-transitory computer readable medium including a computer program comprising instructions that, when read by a machine, causes the machine to perform the following:

obtain at least one source file and at least one instruction file, the at least one source file being a compilable source code file;

obtain a plurality of encryption keys, at least two keys from the plurality of encryption keys being of different types, each type of encryption key being associated with a particular access right to the at least one source file;

select each of the keys from the plurality of encryption keys and

encrypt the at least one source file according to the key selected such that each of the at least one source file is encrypted with each of the plurality of encryption keys and

generate the at least one source file encrypted according to the key selected; and

generate a package containing the at least one instruction file and the at least one source file encrypted according to each key of the plurality of encryption keys.

10. A computer device comprising:

one or more processors and at least one memory coupled to the one or more processors, the one or more processors being configured to;

obtain at least one source file and at least one instruction file, the at least one source file being a compilable source code file;

obtain a plurality of encryption keys, at least two keys from the plurality of encryption keys being of different types, each type of encryption key being associated with a particular access right to the at least one source file;

select each of the keys from the plurality of encryption keys and

encrypt the at least one source file according to the key selected such that each of the at least one source file is encrypted with each of the plurality of encryption keys and

generate the at least one source file encrypted according to the key selected; and

generate a package containing the at least one instruction file and the at least one source file encrypted according to each key of the plurality of encryption keys.