Securing Executable Code Integrity Using Auto-Derivative Key

• US 20100325446A1
• Filed: 06/02/2010
• Published: 12/23/2010
• Est. Priority Date: 06/19/2009
• Status: Abandoned Application

• Current Assignee: Uniloc 2017 LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Original Assignee: Uniloc 2017 LLC (FIG LLC (d/b/a Fortress Investment Group LLC))
• Inventors: Mordetsky, Joseph Martin, Etchegoyen, Craig Stephen
• Application Number:
  US12/792,184
• Publication Number:
  US 20100325446A1
• Time in Patent Office: Days
• US Class Current: 713/190
• CPC Class Codes: G06F 21/107 License processing; Key processing
• CPC Class Codes: G06F 21/125 by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code

Abstract

A method for protecting software from tampering includes steps for processing, using a computer, first compiled software stored in a computer memory to generate a cryptographic key, the first compiled software configured to perform software protection functions and defined second functions distinct from the software protection functions when executed by a computer processor, the cryptographic key consisting of a first portion of the first compiled software comprising executable code compiled from the software protection functions, encrypting a second portion of the first compiled software using the cryptographic key to produce second compiled software comprising the first portion in unencrypted form and the second portion encrypted with the cryptographic key, wherein the second portion comprises executable code compiled from the defined second functions, and storing the second compiled software in a computer memory for distribution to a client device.

Claims

1. A method for protecting software from tampering, comprising:

processing, using a computer, first compiled software stored in a computer memory to generate a cryptographic key, the first compiled software configured to perform software protection functions and defined second functions distinct from the software protection functions when executed by a computer processor, and the cryptographic key consisting of a first portion of the first compiled software comprising executable code compiled from the software protection functions;

encrypting a second portion of the first compiled software using the cryptographic key, to produce second compiled software comprising the first portion in unencrypted form and the second portion encrypted with the cryptographic key, wherein the second portion comprises executable code compiled from the defined second functions; and

storing the second compiled software in a computer memory for distribution to a client device.

2. The method of claim 1, further comprising compiling an algorithm to provide an executable object configured for extracting the cryptographic key from the second compiled software.

3. The method of claim 2, further comprising including the executable object in the second compiled software.

4. The method of claim 2, further comprising storing the executable object at a network node and not in the second compiled object.

5. The method of claim 1, further comprising configuring the second compiled software with code for recognizing the encrypted second portion in the second compiled software.

6. The method of claim 1, further comprising generating a data map identifying location and extent of the encrypted second portion in the second compiled software.

7. The method of claim 6, further comprising serving the data map from a server to a client operating the second compiled software.

8. The method of claim 1, further comprising configuring the second compiled software with code for decrypting the second encrypted portion.

9. The method of claim 8, further comprising including the code for decrypting the second encrypted portion in the second compiled software.

10. A method for executing software at a client device, comprising:

executing a first portion of executable software using a computer processor, to extract a decryption key from a second portion of the executable software stored in a computer memory;

decrypting a third portion of the executable software using the decryption key to provide an executable third portion that is distinct from the first and second portions of the executable software; and

executing the executable third portion using the computer processor to perform a processing function.

11. The method of claim 10, further comprising executing the second portion of the executable software to perform a function that protects the executable software from unauthorized use.

12. The method of claim 11, wherein the function that protects the executable software from unauthorized use determines whether the executable software is installed on an authorized client device before decrypting the third portion of the executable software.

13. The method of claim 11, wherein the function that protects the executable software from unauthorized use determines whether the client device is in use by an authorized user before decrypting the third portion of the executable software.

14. The method of claim 10, wherein the decryption key is extracted from non-contiguous data segments of the executable software by the computer processor.

15. The method of claim 14, wherein the first portion of executable software includes an algorithm for locating the non-contiguous data segments.

16. The method of claim 10, wherein the third portion of the executable software is located in non-contiguous data segments of the executable software.

17. The method of claim 16, wherein the executable software is configured to execute an algorithm for locating the non-contiguous data segments.

18. A computer-readable medium encoded with instructions configured to cause a computer to:

execute a first portion of the instructions to extract a decryption key from a second portion of the instructions;

decrypt a third portion of the instructions using the decryption key to provide an executable third portion that is distinct from the first and second portions of the instructions; and

execute the executable third portion to perform a processing function.

19. The computer-readable medium of claim 18, wherein the second portion of the instructions is configured to perform a function that protects the instructions from unauthorized use.

20. The computer-readable medium of claim 19, wherein the second portion of the instructions is configured to protect the executable software from unauthorized use by determining whether the instructions are installed on an authorized client device before decrypting the third portion of the instructions.