SYSTEM AND METHOD FOR DEFENDING AGAINST REVERSE ENGINEERING OF SOFTWARE, FIRMWARE AND HARDWARE

• US 20120260105A1
• Filed: 11/22/2010
• Published: 10/11/2012
• Est. Priority Date: 07/09/2004
• Status: Abandoned Application

• Current Assignee: ANGEL Secure Networks, Inc.
• Original Assignee: ANGEL Secure Networks, Inc.
• Inventors: Smith, Fred
• Application Number:
  US12/951,833
• Publication Number:
  US 20120260105A1
• Time in Patent Office: Days
• US Class Current: 713/190
• CPC Class Codes: G06F 21/14 against software analysis or reverse engineering, e.g. by obfuscation
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen

Abstract

A method for defending a software against reverse engineering in a target environment includes acquiring information from the target environment, encrypting the software to be protected with the acquired information, sending the encrypted software with the acquired information to an execution environment, acquiring information from the execution environment, comparing the information from the execution environment with the acquired information from the target environment to authenticate the execution environment as the target environment, and if the two set of information match, decrypting the software to be protected, and if two set of information do not match, destroying said software.

Claims

1. A method for defending a software against reverse engineering in a target environment comprising:

acquiring information from said target environment;

encrypting said software with said acquired information;

sending said encrypted software with said acquired information to an execution environment;

acquiring information from said execution environment;

authenticating said execution environment as the target environment by comparing said acquired information from said execution environment with said acquired information from said target environment; and

if said two set of information match, decrypting said software.

2. A method according to claim 1 further comprising:

if said two set of information do not match, destroying said software.

3. A method according to claim 1, wherein said step of encrypting said software with said acquired information comprises generating an obfuscated executable program to incorporate said software with said acquired information using a random obfuscating compiler.

4. A method according to claim 1, wherein said step of acquiring information from said target environment includes acquiring information from said target environment through at least one ANGEL.

5. A method according to claim 1, wherein said step of acquiring information from said target environment further comprises encrypting said acquired information.

6. A method according to claim 1, wherein said step of decrypting said software comprises decrypting said software using a decryption key which is sent to said target environment from a remote location.

7. A random obfuscating compiler (ROC) system for defending a software against reverse engineering in a target environment comprising:

a server for generating one or more ANGELS for acquiring information from the target site,

wherein said server comprises a compiler for compiling said software to be protected and said acquired information to an obfuscated executable program, wherein said compiler encrypts said obfuscated executable program, wherein said obfuscated executable program is adapted to acquire information from an execution environment and authenticate said execution environment as said target environment by comparing said acquired information from said execution environment with said acquired information from said target environment by said ANGELS.