Tiered code obfuscation in a development environment

• US 10,452,821 B2
• Filed: 03/30/2016
• Issued: 10/22/2019
• Est. Priority Date: 03/30/2016
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Hook, James K., Hunt, Hamish C., Lincoln, Nicholas K.
• Primary Examiner(s): Feild, Lynn D
• Assistant Examiner(s): Savenkov, Vadim
• Application Number:
  US15/085,070
• Publication Number:
  US 20170286650A1
• Time in Patent Office: 1,301 Days
• Field of Search: None
• CPC Class Codes: G06F 21/14 against software analysis or reverse engineering, e.g. by obfuscation
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/57 Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
• CPC Class Codes: G06F 21/84 output devices, e.g. displays or monitors
• CPC Class Codes: G06F 3/011 Arrangements for interaction with the human body, e.g. for user immersion in virtual reality blind teaching G09B21/00
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A method for viewing a plurality of encrypted code displayed within an integrated development environment with a pair of augmented reality (AR) glasses. A plurality of user login credentials submitted by a user utilizing the pair of AR glasses to access a plurality of encrypted code. The method may determine the user is authorized to access a portion of the plurality of encrypted code based on the received plurality of user login credentials. The method may further decrypt the portion based on determining the user is authorized to access the portion. The method may further include displaying the decrypted portion on a lens within the pair of AR glasses.

Claims

1. A processor-implemented method for viewing a plurality of encrypted code displayed within an integrated development environment (IDE) with a pair of augmented reality (AR) glasses, the method comprising:

receiving, by a processor, a plurality of user login credentials submitted by a user utilizing the pair of AR glasses to access a plurality of encrypted code;

determining the user is authorized to access a portion of the plurality of encrypted code based on the received plurality of user login credentials;

decrypting, by the AR glasses, the portion based on determining the user is authorized to access the portion;

displaying the decrypted portion on a lens within the pair of AR glasses;

receiving a command to modify the decrypted portion made by the user within the IDE along with a user-submitted note that indicates a reason for the modification, a second note that indicates that the modified code should change authorization levels and a reason why the code should change authorization levels;

modifying the decrypted portion within the IDE based on the received command; and

displaying the modified decrypted portion on the lens within the pair of AR glasses, wherein the modified decrypted portion has an adjusted font color, wherein the modified decrypted portion includes the user-submitted note displayed on the lens within the pair of AR glasses that is positioned adjacent to the modification.

2. The method of claim 1, wherein the received plurality of user login credentials are input to the pair of AR glasses.

3. The method of claim 2, wherein the pair of AR glasses determine the user is authorized to access the portion of the plurality of encrypted code based on searching a database.

4. The method of claim 1, wherein the plurality of user login credentials are input to the IDE by the user, and wherein the IDE determines the user is authorized to access the portion of the plurality of encrypted code, and further comprising:

receiving a verification message from the IDE; and

displaying the decrypted portion on the lens within the pair of AR glasses.

5. The method of claim 1, wherein the plurality of encrypted code is grouped into one or more code authorization levels, and wherein the decrypted portion is based on a user authorization level, and further comprising:

determining the user authorization level associated with the user based on the received user login credentials;

determining the user is not authorized to access a secondary portion of the plurality of encrypted code based on the determined user authorization level; and

displaying the secondary portion and an error message adjacent to the displayed secondary portion on the lens within the pair of AR glasses based on determining the user is not authorized to access the second portion, wherein the error message is based on the determined user authorization level.

6. The method of claim 1, wherein the modified code includes modification indicators that include font color change, underline, bold, and arrows adjacent to the code to illustrate the location of modifications within the code, the method further comprising:

transmitting the second note to an administrator to determine a new authorization level;

determining, by the administrator, the new authorization level;

receiving, by the IDE, the determined authorization level; and

designating, by the IDE, the modified code to the new authorization level, wherein the designation includes the second note.

7. The method of claim 1, wherein the verification indicates which portions of the code the user is permitted to view and which portions the user is permitted to edit, further comprising:

displaying decrypted portions of the plurality of encrypted code with an authorization level that is above the user'"'"'s authorization level; and

restricting, by the IDE, the user from editing the decrypted portions of code that is above the user'"'"'s authorization level.

8. The method of claim 7, further comprising:

displaying the decrypted portions on the lens of the AR glasses as if the code was virtually displayed on a monitor so that a user may visually see the decrypted portions as if the decrypted code were solely displayed on the monitor rather than on the lens.

9. The method of claim 1, wherein each of the plurality of encrypted code with a different authentication level is encrypted using a different type of encryption, wherein the AR glasses are designed to decrypt code of a particular authentication level.

10. The method of claim 1, further comprising:

placing, by the IDE, identifiers within the plurality of encrypted code indicating the code authorization level for specific portions of the plurality of encrypted code;

analyzing, by the AR glasses, the encrypted code to recognize the identifiers in the encrypted code and identify the authorization levels associated with the identifiers;

determining, by the AR glasses, one or more portions of the encrypted code that the user is permitted to view based at least in part on a comparison of the recognized identifiers and a user authorization level associated with the user;

decrypting, by the AR glasses, the one or more portions of the encrypted code that the user is permitted to view; and

displaying, by the AR glasses, the one or more portions of encrypted code that the user is permitted to view.

11. The method of claim 1, further comprising:

converting, by the AR glasses, the plurality of encrypted code into colored bars that blocks the user from visualizing the plurality of encrypted code, in response to the user credentials not being verified; and

displaying a comment adjacent to the colored bars on the lens of the AR glasses.

12. The method of claim 1, further comprising:

generating, by the IDE, an audit trail of any edits made by a user utilizing the AR glasses; and

recording, by the IDE, the generated audit trail in a database.

13. A computer program product for viewing a plurality of encrypted code displayed within an integrated development environment (IDE) with a pair of augmented reality (AR) glasses, comprising:

one or more tangible computer-readable storage media and program instructions stored on at least one of the one or more tangible computer-readable storage media, the program instructions executable by a processor, the program instructions comprising;

program instructions to receive, by a processor, a plurality of user login credentials submitted by a user utilizing the pair of AR glasses to access a plurality of encrypted code;

program instructions to determine the user is authorized to access a portion of the plurality of encrypted code based on the received plurality of user login credentials;

program instructions to decrypt, by the AR glasses, the portion based on determining the user is authorized to access the portion;

program instructions to display the decrypted portion on a lens within the pair of AR glasses;

program instructions to receive a command to modify the decrypted portion made by the user within the IDE along with a user-submitted note that indicates a reason for the modification, a second note that indicates that the modified code should change authorization levels and a reason why the code should change authorization levels;

program instructions to modify the decrypted portion within the IDE based on the received command; and

program instructions to display the modified decrypted portion on the lens within the pair of AR glasses, wherein the modified decrypted portion has an adjusted font color, wherein the modified decrypted portion includes the user-submitted note displayed on the lens within the pair of AR glasses that is positioned adjacent to the modification.

14. The computer program product of claim 13, wherein the received plurality of user login credentials are input to the pair of AR glasses, wherein the pair of AR glasses determine the user is authorized to access the portion of the plurality of encrypted code based on searching a database.

15. The computer program product of claim 13, wherein the plurality of user login credentials are input to the IDE by the user, and wherein the IDE determines the user is authorized to access the portion of the plurality of encrypted code, and further comprising:

program instructions to receive a verification message from the IDE; and

program instructions to display the decrypted portion on the lens within the pair of AR glasses.

16. The computer program product of claim 13, wherein the plurality of encrypted code is grouped into one or more code authorization levels, and wherein the decrypted portion is based on a user authorization level, and further comprising:

program instructions to determine the user authorization level associated with the user based on the received user login credentials;

program instructions to determine the user is not authorized to access a secondary portion of the plurality of encrypted code based on the determined user authorization level; and

program instructions to display the secondary portion and an error message adjacent to the displayed secondary portion on the lens within the pair of AR glasses based on determining the user is not authorized to access the secondary portion, wherein the error message is based on the determined user authorization level.

17. A system for selective obfuscation of code segments, the system comprising:

a computer comprising;

a monitor;

a first memory; and

a first processor configured to obtain first program instructions from the first memory, wherein the obtained first programs are configured to cause the first processor to display, on the monitor, a plurality of encrypted code segments such that viewers unaided by any augmented reality (AR) glasses see the plurality of encrypted code segments as encrypted on the monitor; and

a pair of AR glasses mounted on a head of a user, the pair of AR glasses comprising;

a pair of lenses;

a second memory; and

a second processor configured to obtain second program instructions from the second memory, wherein the obtained second program instructions are configured to cause the second processor to perform a method comprising;

determining, based on an authentication of the user, that the user is authorized to access a first portion of the plurality of encrypted code segments and that the user is not authorized to access a second portion of the plurality of encrypted code segments; and

displaying to the user, via the pair of lenses, the first portion as decrypted on the monitor and the second portion as blocked out on the monitor such that the viewers unaided by any augmented reality (AR) glasses continue to see the encrypted code segments as encrypted, rather than decrypted or blocked out, on the monitor;

receiving a command to modify the decrypted portion made by the user within the IDE along with a user-submitted note that indicates a reason for the modification, a second note that indicates that the modified code should change authorization levels and a reason why the code should change authorization levels;

modifying the decrypted portion within the IDE based on the received command; and

displaying the modified decrypted portion on the lens within the pair of AR glasses, wherein the modified decrypted portion has an adjusted font color, wherein the modified decrypted portion includes the user-submitted note displayed on the lens within the pair of AR glasses that is positioned adjacent to the modification.