WEB APPLICATION PROTECTION

• US 20160132667A1
• Filed: 05/30/2014
• Published: 05/12/2016
• Est. Priority Date: 05/30/2013
• Status: Active Grant

• Current Assignee: Jscrambler SA
• Original Assignee: Jscrambler SA
• Inventors: Freitas Fortuna dos Santos, Antonio Pedro, Silvares Ribeiro, Rui Miguel, Silva, Filipe Manuel Gomes
• Granted Patent: US 10,095,846 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/1011 to devices
• CPC Class Codes: G06F 21/1066 Hiding content
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/125 by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code
• CPC Class Codes: G06F 21/14 against software analysis or reverse engineering, e.g. by obfuscation
• CPC Class Codes: H04L 9/0822 using key encryption key
• CPC Class Codes: H04L 9/0866 involving user or device identifiers, e.g. serial number, physical or biometrical information, DNA, hand-signature or measurable physical characteristics
• CPC Class Codes: H04L 9/14 using a plurality of keys or algorithms

Abstract

A method and system for generating a protected version of the digital content is disclosed. The method includes obfuscating the digital content to yield a functionally equivalent obfuscated digital content, encrypting the obfuscated digital content using at least one device or non-device parameter, generating a decryption logic to be used for generating a decryption key based upon the at least one device or non-device parameter, and concatenating the encrypted digital content and the decryption logic to generate the protected version of the digital content.

Claims

1. A method for generating a protected version of a digital content, the method comprising:

obfuscating the digital content to yield a functionally equivalent obfuscated digital content;

encrypting the obfuscated digital content using at least one device or non-device parameter;

generating a decryption logic to be used for generating a decryption key based upon the at least one device or non-device parameter; and

concatenating the encrypted digital content and the decryption logic to generate the protected version of the digital content.

2. The method of claim 1 further comprising determining the at least one device or non-device parameter.

3. The method of claim 1, wherein the obfuscating comprises obfuscating using one or more of a device identifier, a device model, a device type, an expiration date, removing comments, renaming local, whitespace removal, dictionary compression, literal hooking, function reordering, literal duplicates, domain name, asserts elimination, dead code injection, debugging code elimination, dot notation, function outlining, renaming local or all and/or string splitting.

4. The method of claim 1, wherein the encrypting comprises encrypting the digital content on the fly.

5. The method of claim 1, wherein the encrypting comprises encrypting using at least one symmetric and/or asymmetric encryption techniques.

6. The method of claim 1 further comprising obfuscating the decryption logic.

7. The method of claim 1 further comprising installing at least one trap in the obfuscated digital content, wherein the at least one trap comprising the at least one device or non-device parameter.

8. The method of claim 1 further comprising at least one of encrypting or obfuscating the protected version of the digital content.

9. The method of claim 1 further comprising installing one or more execution control checks in the digital content forcing the digital content to check with a server if the digital content is allowed to execute.

10. The method of claim 1, wherein the device parameter comprises one or more of a device number, a device type, and a device model.

11. The method of claim 1, wherein the non-device parameter comprises one or more of an Internet protocol (IP) address, a domain name and a subscriber identity module (SIM) number.

12. A method for generating a protected version of a digital content, the method comprising:

obfuscating the digital content to yield a functionally equivalent obfuscated digital content;

installing at least one trap in the obfuscated digital content, wherein the at least one trap comprising at least one device or non-device parameter;

installing an execution control check in the obfuscated digital content forcing the obfuscated digital content to check with a server if the obfuscated digital content is allowed to execute on a client;

encrypting the obfuscated digital content using the at least one device or non-device parameter;

generating a decryption logic to be used for generating a decryption key based upon the at least one device or non-device parameter; and

concatenating the encrypted digital content and the decryption logic to generate the protected version of the digital content.

13. The method of claim 12, wherein the device parameter comprises one or more of a device number, a device type, and a device model.

14. The method of claim 12, wherein the non-device parameter comprises one or more of an Internet protocol (IP) address, a domain name and a subscriber identity module (SIM) number.

15. A system for protecting a digital content, the system comprising:

an obfuscation module to obfuscate the digital content, wherein the obfuscated digital content is a functional equivalent of the digital content;

an encryption module to encrypt the obfuscated digital content using at least one device or non-device parameter; and

an engine to generate a decryption logic to be used for generating a decryption key at a client based upon the at least one device or non-device parameter, wherein the engine concatenates the decryption logic and the encrypted digital content to generate the protected version of the digital content.

16. The system of claim 15, wherein the engine obfuscates the decryption logic and concatenates the obfuscated decryption logic and the encrypted digital content to generate the protected version of the digital content.

17. The system of claim 15, wherein the obfuscation module installs at least one trap in the digital content, wherein the at least one trap comprises the at least one device or non-device parameter.

18. The system of claim 15, wherein the obfuscation module installs one or more execution control checks in the digital content forcing the digital content to check with a server if the digital content is allowed to execute.

19. The system of claim 15, wherein the device parameter comprises one or more of a device number, a device type, and a device model.

20. The system of claim 15, wherein the non-device parameter comprises one or more of an Internet protocol (IP) address, a domain name and a subscriber identity module (SIM) number.