METHOD FOR PROVIDING SECURITY FOR COMMON INTERMEDIATE LANGUAGE-BASED PROGRAM

• US 20160203087A1
• Filed: 08/11/2014
• Published: 07/14/2016
• Est. Priority Date: 08/22/2013
• Status: Abandoned Application

• Current Assignee: Inka Entworks, Inc.
• Original Assignee: Inka Entworks, Inc.
• Inventors: NAM, Jae Min, PARK, Jung Geun, HONG, Jun Ho, OH, Jun Seok, KIM, Jung Soo
• Application Number:
  US14/913,221
• Publication Number:
  US 20160203087A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 2212/1052 Security improvement
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57

Abstract

Disclosed is a method for providing security of a program made in a script language. In a method for providing security for a common intermediate language-based program, which provides security for a user DLL used in a platform supporting an application made of common intermediate language code and a plug-in made of native code, the method comprises: a specific function call step of calling a specific function within an application which calls a specific module in a security logic DLL including one or more modules while an application is loaded into a main memory and executed; a DLL request step of requesting the security logic DLL from a security module plug-in in which the security logic DLL is encrypted and stored; a DLL generation step of generating the security logic DLL by decrypting the encrypted DLL in the security module plug-in; a step of transmitting the security logic DLL to the specific function within the application; and a DLL module call step of calling the specific module included in the security logic DLL.

Claims

1. In a method for providing security for a user DLL (dynamic link library) used in a platform which supports an application made of common intermediate language code and a plug-in made of native code, the method for providing security for the common intermediate language-based program comprises:

a specific function call step of calling a specific function within the application which calls a specific module in a security logic DLL including one or more modules while the application is loaded into a main memory and be executed;

a DLL request step of requesting the security logic DLL from a security module plug-in in which the security logic DLL is encrypted and stored;

a DLL generation step of generating the security logic DLL by decrypting the encrypted DLL in the security module plug-in;

a step of transmitting the security logic DLL to the specific function within the application; and

a DLL module call step of calling the specific module included in the security logic DLL.

2. The method according to claim 1, wherein the DLL request step comprises transmitting the name of the security logic DLL to the security module plug-in by the specific function.

3. The method according to claim 1, wherein the DLL generation step further comprises an integrity checking step of verifying whether at least one of the application, the security module plug-in and essential files required for executing the application modified.

4. The method according to claim 3, wherein the integrity checking step comprises:

a step of extracting hash codes per file for the security module plug-in, the application and the essential plug-in and DLL of the platform;

a modification determination step of confirming whether hash codes per file match any one of the hash codes of a hash registry including at least one hash code included in the security module plug-in, to determine whether modified or not; and

a step of ending the application if a result of modification is generated in the modification determination step.

5. The method according to claim 1, wherein the DLL generation step further comprises a step of activating an anti-debugging function for preventing the application from being analyzed using a debugger.

6. The method according to claim 1, wherein the DLL generation step further comprises a step of activating an anti-dump function for preventing dumping a memory state of the application.

7. The method according to claim 1, wherein the DLL module extraction step comprises a DLL information extraction step of extracting information of the specific module from the security logic DLL.

8. The method according to claim 7, wherein the DLL information extraction step comprises a step of loading DLL information using an assembly class.

9. The method according to claim 8, wherein the DLL information extraction step comprises a step of storing the object of the assembly class into the application

10. The method according to claim 8, wherein the DLL module extraction step comprises a step of calling the security module included in the security logic DLL using the DLL information loaded into the assembly class.

11. In a method for providing security for a user DLL (dynamic link library) used in a platform which supports an application made of common intermediate language code and a plug-made of native code, the method for providing security for the common intermediate language-based program comprises:

a DLL generation step of generating a security logic DLL made of common intermediate language code by compiling a source code of the secure logic used in the application;

an encrypted DLL generation step of generating an encrypted DLL by encrypting the security logic DLL; and

a security module plug-in generation step of generating a security module plug-in including the encrypted DLL.

12. The method according to claim 11, wherein the security module plug-in generation step further comprises:

a step of generating hash codes per file in order to verify an integrity check of the application, the security module plug-in and essential files required for execution of the application;

a step of generating a hash registry including the hash codes generated per file; and

a step of storing the hash registry into the security module plug-in.

13. The method according to claim 12, wherein the hash code generation step further comprises:

a step of extracting hash codes per file for the security module plug-in, a DLL including application and an essential plug-in and DLL of the platform.

14. In a device for providing security for a user DLL (Dynamic Link Library) used in a platform which supports an application made of common intermediate language code and a plug-in made of native code, the device for providing security for the common intermediate language-based program comprises:

a DLL generation unit of generating a security logic DLL made of common intermediate language code by compiling a source code of the secure logic used in the application;

an encryption unit which is connected to the DLL generation unit and generates an encrypted DLL by encrypting the security logic DLL; and

a security module plug-in generation unit which is connected to the encryption unit and generates a security module plug-in including the encrypted DLL.

15. The device according to claim 14, wherein the security module plug-in generation unit further comprises:

a hash code generation unit of generating hash codes per file in order to verify the integrity check of the application, the security module plug-in and essential files required for the execution of the application; and

a hash registry generation unit which is connected to the hash code generation unit and generates a hash registry by the hash codes generated per file.