INTERCEPTING AND INJECTING CALLS INTO OPERATIONS AND OBJECTS

    公开(公告)号:US20190245833A1

    公开(公告)日:2019-08-08

    申请号:US16236522

    申请日:2018-12-30

    IPC分类号: H04L29/06 G06F21/14 G06F9/455

    摘要: A computer implemented method for improving security of a server computer that is configured to deliver computer program instructions to a remote client computer, and comprising, using an intermediary computer that is topologically interposed between the server computer and the remote client computer is provided. The intermediary computer is configured to intercept a first set of source code instructions from the server computer. The intermediary computer identifies first party operations that include operations on objects and the objects themselves. The intermediary computer identifies a first set of operations within the first party operations that are configured to define values for one or more objects based on one or more constants. The intermediary computer then generates a second set of operations, where the second set of operations are configured to define same values for the one or more objects, when executed by a web browser on the client computer. The intermediary computer transforms the first party operations into transformed first party operations by substituting the first set of operations with the second set of operations. The intermediary computer generates a second set of source code instructions that are based on the first set of source code instructions and the transformed first party operations. The intermediary computer then sends the second set of source code instructions to the client computer.

    Method for Protecting Dex File from Decompilation in Android System

    公开(公告)号:US20180129794A1

    公开(公告)日:2018-05-10

    申请号:US15575815

    申请日:2015-11-20

    发明人: Yunfeng LIU

    IPC分类号: G06F21/14 G06F9/445

    摘要: The present disclosure provides a method for protecting a dex file from being decompiled in an Android system. The method comprises the following content: 1) loading a dex file into an inaccessible memory of an Android system; and 2) during execution, by performing reference execution, preventing the dex file from being found. In the method for protecting a dex file from be ing decompiled in an Android system in the present disclosure, a dex file is loaded into an inaccessible memory by means of a reference method, so that the dex file is prevented from being locally downloaded tor being copied and propagated; during execution, by means of reference execution, a decompiling person is prevented from finding the dex file so that the decompiling person cannot perform reverse engineering, thereby protecting an Android program from being decompiled.

    Diversifying Control Flow of White-Box Implementation
    8.
    发明申请
    Diversifying Control Flow of White-Box Implementation 审中-公开
    白盒实施多样化控制流程

    公开(公告)号:US20160350520A1

    公开(公告)日:2016-12-01

    申请号:US14725801

    申请日:2015-05-29

    申请人: NXP B.V.

    摘要: A non-transitory machine-readable storage medium encoded with instructions for execution by a keyed cryptographic operation by a cryptographic system mapping an input message to an output message, including: instructions for receiving input data for a round of the keyed cryptographic operation; instructions for determining the order of computing output portions for the round of the cryptographic function based upon portions of the input data; and instructions for computing the portions of the output data in the determined order based upon the input data.

    摘要翻译: 一种非暂时的机器可读存储介质,其编码有用于通过将输入消息映射到输出消息的加密系统通过密钥加密操作执行的指令,包括:用于接收用于一轮密钥加密操作的输入数据的指令; 用于基于所述输入数据的部分来确定所述加密函数的所述一轮计算输出部分的顺序的指令; 以及用于基于输入数据以确定的顺序计算输出数据的部分的指令。

    PROTECTING THE INPUT/OUTPUT OF MODULAR ENCODED WHITE-BOX RSA
    9.
    发明申请
    PROTECTING THE INPUT/OUTPUT OF MODULAR ENCODED WHITE-BOX RSA 审中-公开
    保护模块化编码白盒RSA的输入/输出

    公开(公告)号:US20160328543A1

    公开(公告)日:2016-11-10

    申请号:US14815540

    申请日:2015-07-31

    申请人: NXP B.V.

    IPC分类号: G06F21/14 H04L9/30 G06F21/62

    摘要: A method of obscuring the input and output of a modular exponentiation function, including: receiving modular exponentiation parameters including an exponent e having N bits and a modulus m; generating randomly a pre-multiplier; calculating a post-multiplier based upon the pre-multiplier, exponent e, and modulus m; multiplying an input to the modular exponentiation function by the pre-multiplier; performing the modular exponentiation function; and multiplying the output of the modular exponentiation function by the post-multiplier, wherein multiplying an input to the modular exponentiation function by the pre-multiplier, performing the modular exponentiation function, and multiplying the output of the modular exponentiation function by the post-multiplier are split variable operations.

    摘要翻译: 一种模糊模幂函数的输入和输出的方法,包括:接收包括具有N位和模数m的指数e的模幂运算参数; 随机生成预乘数; 基于预乘数,指数e和模数m计算后乘数; 通过预乘数将输入与模幂运算函数相乘; 执行模幂运算; 并将乘幂函数乘以后乘法器,其中通过预乘数将输入与模幂运算函数相乘,执行模幂运算函数,并将模幂运算函数的输出乘以后乘法器 是分割变量操作。

    WEB APPLICATION PROTECTION
    10.
    发明申请
    WEB APPLICATION PROTECTION 审中-公开
    WEB应用保护

    公开(公告)号:US20160132667A1

    公开(公告)日:2016-05-12

    申请号:US14894919

    申请日:2014-05-30

    申请人: JSCRAMBLER S.A.

    IPC分类号: G06F21/12 G06F21/14

    摘要: A method and system for generating a protected version of the digital content is disclosed. The method includes obfuscating the digital content to yield a functionally equivalent obfuscated digital content, encrypting the obfuscated digital content using at least one device or non-device parameter, generating a decryption logic to be used for generating a decryption key based upon the at least one device or non-device parameter, and concatenating the encrypted digital content and the decryption logic to generate the protected version of the digital content.

    摘要翻译: 公开了一种用于产生数字内容的受保护版本的方法和系统。 该方法包括对数字内容进行模糊处理以产生功能上等效的模糊数字内容,使用至少一个设备或非设备参数对混淆的数字内容进行加密,生成解密逻辑,用于基于至少一个设备生成解密密钥 设备或非设备参数,并且连接加密的数字内容和解密逻辑以产生数字内容的受保护版本。