System and method for software protection and secure software distribution

• US 9,520,990 B2
• Filed: 09/05/2013
• Issued: 12/13/2016
• Est. Priority Date: 04/13/2009
• Status: Active Grant

• Current Assignee: Aventyn, Inc
• Original Assignee: Aventyn, Inc
• Inventors: Keshavachar, Bhaktha Ram, Govind, Navin
• Primary Examiner(s): CHEUNG, CALVIN K
• Application Number:
  US14/019,416
• Publication Number:
  US 20140095880A1
• Time in Patent Office: 1,195 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 9/0819 Key transport or distribution, i.e. key establishment techniques where one party creates or otherwise obtains a secret value, and securely transfers it to the other(s) network architectures or network communication protocols for key distribution in a packet data network H04L63/062
• CPC Class Codes: H04L 9/3226 using a predetermined code, e.g. password, passphrase or PIN network architectures or network communication protocols for supporting authentication of entities using passwords in a packet data network H04L63/083

Abstract

The various embodiments of the present invention provide a secure software distribution and execution method. According to the method, a server receives software from service provider for downloading to a client and identifies the sections for encoding. APIs are inserted in the identified sections. A unique ID is created based on the identity of the each client to generate an encryption algorithm, decryption key and decryption algorithm. The identified sections are encrypted with the generated encryption algorithm. The encrypted application along with encryption algorithm, decryption key and decryption algorithm are downloaded to the driver of the client machine. The API makes call to the driver by sending the encrypted segment when the encrypted portion is reached during the execution of software in the client machine so that the driver decrypts the encoded portion using the received key and the decryption algorithm to enable the continuous execution of the downloaded software.

Claims

1. A secure software distribution and execution system, comprising:

a server into which a received software application from a service provider is stored;

a client machine connectable to the server;

the server having an application generator interface that codes the received software application, identifies sections of code for encryption, inserts calls in the received software application at appropriate places before being downloaded to the client machine by the server, builds an application and placing one or more binaries in the server;

the server having an ID reader that reads an identity data of the client machine;

the server having an algorithm generator that generates an algorithm for encryption, and decryption and a decryption key based on received identity data of the client machine in the server;

the server having an encryptor that encrypts the identified sections of the received software application using the generated encryption algorithm in the server;

the server having an application downloader that downloads the encrypted sections of the received software application along with the generated decryption key and the decryption algorithm to a driver of the client; and

wherein the application generator interface is configured to send the encrypted section to the driver of the client machine so that the driver of the client machine decrypts the encrypted section using the decryption key and the decryption algorithm to enable the continuous execution of the downloaded software.

2. A secure software distribution and execution system, comprising:

a server into which a received software application from a service provider is stored;

a client machine connectable to the server;

the server having an application generator interface that codes the received software application, identifies sections of code for encryption, inserts calls in the received software application at appropriate places before being downloaded to the client machine by the server, builds an application and placing one or more binaries in the server;

the server having an ID reader that reads an identity data of the client machine;

the server having an algorithm generator that generates an algorithm for encryption, and decryption and a decryption key based on received identity data of the client machine in the server;

the server having an encryptor that encrypts the identified sections of the received software application using the generated encryption algorithm in the server;

the server having an application downloader that downloads the encrypted sections of the received software application along with the generated decryption key and the decryption algorithm to a driver of the client machine; and

wherein the identity data includes the serial number of the client machine, serial number of the hard disc used in the client machine, biometric data and other identity related information provided by the client.

3. A secure software distribution and execution system, comprising:

a server into which a received software application from a service provider is stored;

a client machine connectable to the server;

the server having an application generator interface that codes the received software application, identifies sections of code for encryption, inserts calls in the received software application at appropriate places before being downloaded to the client machine by the server, builds an application and placing one or more binaries in the server;

the server having an ID reader that reads an identity data of the client machine;

the server having an algorithm generator that generates an algorithm for encryption, and decryption and a decryption key based on received identity data of the client machine in the server;

the server having an encryptor that encrypts the identified sections of the received software application using the generated encryption algorithm in the server;

the server having an application downloader that downloads the encrypted sections of the received software application along with the generated decryption key and the decryption algorithm to a driver of the client machine; and

wherein the server assigns weighting factors to each of the identity data read from the client machine so that the client machine is authenticated to decode the encrypted section, even when the identification component is changed in the client machine.

4. The system of claim 3, wherein the server authenticates the client machine for decoding the encrypted portion of the software application by comparing a sum of the weighting factors assigned to the identity data with a threshold level.

5. The system of claim 3, wherein the server authenticates the client machine for decoding the encrypted section of the received software application, when the sum of the weighting factors assigned to the identity data is less than the threshold level.