Device and process for the signature, the marking and the authentication of computer programs

• US 20060010430A1
• Filed: 05/20/2005
• Published: 01/12/2006
• Est. Priority Date: 05/04/2001
• Status: Abandoned Application

• Current Assignee: Thales SA
• Original Assignee: Thales SA
• Inventors: Venet, Arnaud, Cousot, Patrick, Riguidel, Michel
• Application Number:
  US11/133,380
• Publication Number:
  US 20060010430A1
• Time in Patent Office: Days
• US Class Current: 717/127
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 8/436 Semantic checking

Abstract

The product/program and the process according to the invention make it possible to insert into an item of software in source code, in particular Java, watermarks which comply with the semantics of the program and are very difficult to detect. They make it possible to: compute a secret semantic signature of a software or hardware computer program from an infinity of possible secret semantic signatures; —mark a software or hardware computer program by inserting a visible or invisible watermark making it possible to retrieve an authenticator of the original program; retrieve the mark and extract this authenticator from the secret semantic signature of the watermarked software or hardware computer program. The secret semantic signature of the software or hardware computer program to be protected is characteristic of the semantics of said program. The inserted visible or invisible watermark of a software or hardware original computer program which makes it possible to retrieve an authenticator can be identified only by retrieving the secret semantic signature of the watermarked program, this requiring the possession of the secret (or computational power going beyond the possibilities of the computer hardware). The mark is resistant to methods of locating and of washing, without affecting the performance of the program to be protected.

Claims

1. A computer product/program for processing pieces of software comprising:

a module for selecting with predefined criteria some instructions input of a transcoding program; and

a module for choosing a secret method of transcoding to be applied to said input.

2. The computer product/program as claimed in claim 1, wherein the secret transcoding method outputs a semantic signature pieces of software.

3. The computer product/program of claim 2, wherein the semantic signature of said software includes at least some of all or part of the set of properties of said pieces of software transcoded by the secret method.

5. The computer product/program of claim 3, wherein said pieces of software are in a language of the Java, Java Script or Java bytecode type.

6. The computer product/program of claim 3, wherein said pieces of software are written in a language of the Very High Definition Language, Verilog or Assembler type.

7. The computer product/program of claim 1, wherein said pieces of software to which a transcoding program will be applied are chosen from one of those comprising algebraic operations and allocations to variables with integer values.

8. The computer product/program of claim 1, wherein the pieces of software to which a transcoding program will be applied are chosen from one of those comprising algebraic operations and allocations to references with integer values.

9. The computer product/program of claim 7, wherein the secret transcoding method is determined through the choice of secret integer numbers as congruence operators applied to said algebraic operations or to said allocations to variables or references with integer values.

10. The computer product/program of claim 7, wherein the secret transcoding method is determined through the secret choice of one or more variables with integer values in association with the references.

11. The computer product/program of claim 1 further comprising;

a module for producing new pieces of software by inverse transcoding and inserting said new pieces of software among the original pieces of software.

12. The computer product/program of claim 11, wherein the inverse transcoded new pieces of software are inserted at positions chosen as a function of predefined criteria among the original pieces of software in the form of instructions initializing or calculating variables, said instructions comprising the application to said variables of operations which leave invariant the semantic signature of the original pieces of software.

13. The computer product/program of claim 12, wherein said operations leaving invariant the semantic signature of the original pieces of software are polynomials functions of degree 1 or of degree 2 which are created on the basis of a random coefficient and values of secret integer numbers.

14. The computer product/program of claim 11, wherein the module for inserting inverse transcoded instructions comprises a first submodule for enciphering by calculating a secret semantic signature as a function of an authenticator, a second submodule for determining a mark on the basis of the secret transcoding method and of said secret semantic signature, and a third submodule for camouflaging by producing the watermarked program on the basis of the input, of said mark and of the instructions chosen for the watermark.

35. Computer product/program for processing pieces of software comprising a decyphering module enabling a user knowing the parameter/parameters of the secret method of claim 1 to recognize the signature of said pieces of software.

36. The computer product/program of claim 35, wherein said decyphering module comprises a semantic static analysis program for recognizing the signature.

37. The computer product/program of claims 35, wherein said decyphering module comprises a program for calculating the fixpoint of the values of all or some of the variables.

4. The computer product/program of claim 4, wherein said pieces of software are written in programming language.

15. A process for processing pieces of software comprising the steps of:

choosing as a function of predefined criteria those pieces of said software to which a transcoding program is applied; and

choosing from several the secret transcoding method to be applied to said pieces of software.

16. The process of claim 15, wherein the secret transcoding method produces a semantic signature of the pieces of software.

17. The process of claim 16, wherein the semantic signature of said pieces of software includes at least some of all or part of the set of properties of said pieces of the software transcoded by the secret method.

18. The process of claim 17, wherein said pieces of software are written in programming language.

19. The process of claim 17, wherein said pieces of software are written in a language of the Java, Java Script or Java bytecode type.

20. The process of claim 17, wherein the said pieces of software are written in a language of the Very High Definition Language, Verilog or Assembler type.

21. The process of claim 15, wherein the instructions to which a transcoding program will be applied are chosen from one of those comprising algebraic operations and allocations to variables with integer values.

22. The process of claim 15, wherein the pieces of software to which a transcoding program will be applied are chosen from those comprising algebraic operations or allocations to references with integer values.

23. The process of claim 21, wherein the secret transcoding method is determined through the choice of secret integer numbers as congruence operators applied to said algebraic operations or to said allocations to variables or references with integer values.

24. The process of claim 21, wherein the secret transcoding method is determined through the secret choice of one or more variables with integer values in association with the references.

25. The process of claim 15, further comprising steps for producing new pieces of software by the inverse transcoding and inserting new pieces of software among the original pieces of software.

26. The process of claim 25, wherein the inverse transcoded new pieces of software are inserted at positions chosen as a function of predefined criteria into the original pieces of software in the form of instructions for initializing or calculating variables, said instructions comprising the application to said variables of operations which leave invariant the semantic signature of the original pieces of software.

27. The process of claim 26, wherein said operations leaving invariant the semantic signature of the original pieces of software are polynomials functions of degree 1 or of degree 2 which are created on the basis of a random coefficient and values of secret integer numbers.

34. The process of claim 25, wherein the module for inserting inverse transcoded instructions comprises a first step for enciphering by calculating a secret semantic signature as a function of an authenticator, a second step for determining a mark on the basis of the secret transcoding method and of said secret semantic signature, and a third step for camouflaging by producing the watermarked program on the basis of the input, of said mark and of the instructions chosen for the watermark.

38. A process for processing pieces of software comprising a decyphering step whereby a user knowing the parameter/parameters of the secret method of claim 15 is able to recognize the signature of the pieces of software.

39. The process of claim 38 comprising a semantic static analysis step for recognizing the signature.

40. The process of claims 38, wherein said decyphering step comprises a step for calculating the fixpoint of the values of all or some of the variables.

28-33. -33. (canceled)