WO2020206905A1

WO2020206905A1 - Code segment protection method and apparatus, computer device, and storage medium

Info

Publication number: WO2020206905A1
Application number: PCT/CN2019/102568
Authority: WO
Inventors: 许剑勇
Original assignee: 平安科技（深圳）有限公司
Priority date: 2019-04-12
Filing date: 2019-08-26
Publication date: 2020-10-15
Also published as: CN110135129A; CN110135129B

Abstract

A code segment protection method, comprising: acquiring a code segment to be protected, said code segment carrying a code segment identifier; querying a complexity level corresponding to said code segment, wherein the complexity level is a preset reference index for characterizing the degree of complexity of said code segment; when the complexity level exceeds a preset level, selecting a core identifier from the code segment identifier, and according to the core identifier, extracting a core code segment from said code segment to be protected, wherein the core identifier is a code segment identifier corresponding to the core code segment; obfuscating the extracted core code segment according to an obfuscation logic to obtain an obfuscated code segment; and obtaining, according to the obfuscated code segment, a target code segment corresponding to said code segment to be protected.

Description

Code segment protection method, device, computer equipment and storage medium

Cross references to related applications

This application claims the priority of a Chinese patent application filed with the Chinese Patent Office on April 12, 2019. The application number is 201910296112.9, and the application name is "Code segment protection method, device, computer equipment and storage medium". The entire content is by reference Incorporated in this application.

Technical field

This application relates to a code segment protection method, device, computer equipment and storage medium.

Background technique

With the development of computer technology, more and more application programs need to be developed. After the application program is developed, in order to avoid the core program segment in the application program from being misappropriated, the core program segment will be confused.

Traditionally, in the process of obfuscation, the program segments to be protected are uniformly confused. When the program segment to be protected contains general program segments, the corresponding reflection mechanism needs to be implemented according to the general program segment. Obfuscation means that the reflection mechanism cannot be implemented normally. Therefore, the general program segment cannot be obfuscated. As a result, the entire program segment to be protected cannot be obfuscated, resulting in poor flexibility for obfuscating the code segment to be protected.

Summary of the invention

According to various embodiments disclosed in the present application, a code segment protection method, device, computer equipment, and storage medium are provided.

A code segment protection method, including:

Acquiring a code segment to be protected, where the code segment to be protected carries a code segment identifier;

Query the complexity level corresponding to the code segment to be protected, where the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected;

When the complexity level exceeds the preset level, the core identifier is selected from the code segment identifiers, and the core code segment is extracted from the code segment to be protected according to the core identifier, wherein the core identifier is related to the The code segment identifier corresponding to the core code segment;

Obfuscate the core code segment according to the obfuscation logic to obtain the obfuscated code segment; and

Obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.

A code segment protection device, including:

An obtaining module, configured to obtain a code segment to be protected, and the code segment to be protected carries a code segment identifier;

A query module, configured to query the complexity level corresponding to the code segment to be protected, where the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected;

The extraction module is configured to extract a core code segment from the code segment to be protected according to the code segment identifier when the complexity level exceeds a preset level, wherein the core identifier corresponds to the core code segment The code segment identifier;

The first obfuscation module is used to obfuscate the core code segment according to obfuscation logic to obtain an obfuscated code segment; and

The generating module is used to obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.

A computer device, including a memory and one or more processors, the memory stores computer readable instructions, when the computer readable instructions are executed by the processor, the one or more processors execute The following steps:

One or more non-volatile computer-readable storage media storing computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors execute the following steps:

The details of one or more embodiments of the application are set forth in the following drawings and description. Other features and advantages of this application will become apparent from the description, drawings and claims.

Description of the drawings

In order to more clearly describe the technical solutions in the embodiments of the present application, the following will briefly introduce the drawings needed in the embodiments. Obviously, the drawings in the following description are only some embodiments of the present application. For those of ordinary skill in the art, other drawings can be obtained based on these drawings without creative work.

Fig. 1 is an application scenario diagram of a code segment protection method according to one or more embodiments.

Fig. 2 is a schematic flowchart of a code segment protection method according to one or more embodiments.

Fig. 3 is a schematic flowchart of code segment obfuscation steps according to one or more embodiments.

Fig. 4 is a block diagram of a code segment protection device according to one or more embodiments.

Figure 5 is a block diagram of a computer device according to one or more embodiments.

detailed description

In order to make the technical solutions and advantages of the present application clearer, the following further describes the present application in detail with reference to the accompanying drawings and embodiments. It should be understood that the specific embodiments described here are only used to explain the application, and not used to limit the application.

The code segment protection method provided in this application can be applied to the application environment as shown in FIG. 1. The terminal 102 communicates with the server 104 through the network. The server 104 obtains the code segment to be protected from the terminal 102, and the code segment to be protected carries a code segment identifier. The server 104 queries the complexity level corresponding to the code segment to be protected. When the complexity level exceeds the preset level, the server 104 selects a core identifier from the code segment identifier, and extracts the core code segment from the code segment to be protected according to the core identifier, where the core identifier is a code segment identifier corresponding to the core code segment. The server 104 obfuscates the extracted core code segment according to the obfuscation logic to obtain the obfuscated code segment, and the server 104 obtains the target code segment corresponding to the code segment to be protected according to the obfuscated code segment. The terminal 102 may be, but is not limited to, various personal computers, notebook computers, smart phones, tablet computers, and portable wearable devices. The server 104 may be implemented by an independent server or a server cluster composed of multiple servers.

In one of the embodiments, as shown in FIG. 2, a code segment protection method is provided. Taking the method applied to the server in FIG. 1 as an example, the method includes the following steps:

S202: Obtain a code segment to be protected, which carries a code segment identifier.

Specifically, the code segment to be protected refers to a code segment that needs to be completely or partially obfuscated. The code segment to be protected may adopt corresponding obfuscation rules to replace the information contained in the corresponding code segment to obtain a functionally equivalent but difficult to understand form. For example, the server may replace the formats or names of different sub-code segments in the code segment to be protected. Code segment identifiers refer to the identifiers of different sub-code segments contained in the code segment to be protected, which can be class identifiers, method identifiers, parameter identifiers, etc. in the code segment. For example, the code segment identifier is the class name, method name, parameter type, parameter name, etc. contained in the code segment. Specifically, the server receives the code segment to be protected sent by the terminal, and the code segment to be protected carries a corresponding code segment identifier. For example, the server receives the code segment to be protected sent by the terminal, and the code segment to be protected carries the corresponding class name, method name, and specific parameter name. The server can query whether there is a code segment to be filtered according to the code segment identifier. When there is a code segment to be filtered, if the code segment to be filtered is also obfuscated, the corresponding reflection mechanism cannot be implemented. Therefore, the code segment to be filtered cannot be obfuscated. Therefore, when the server finds the code to be filtered according to the code segment identifier The code segment to be protected cannot be confused as a whole.

It should be noted that the code segment to be filtered refers to the code segment included in the code segment to be protected that cannot be confused. The reflection mechanism means that in the running state, for any class, all attributes and methods in the class can be obtained. The corresponding configuration folder can also be obtained by querying the code segment to be filtered, and querying whether the configuration folder contains the code segment identifier corresponding to the corresponding code segment to be filtered. When there is a code segment identifier corresponding to the code segment to be filtered, the server determines that the code segment to be protected contains the code segment to be filtered. The configuration folder refers to the folder where the code segments that do not need to be obfuscated are stored before the different code segments are obfuscated.

S204: Query the complexity level corresponding to the code segment to be protected, where the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected.

Specifically, the complexity level refers to a reference index that characterizes the complexity of the code segment to be protected. It may be that the higher the complexity level, the more complex the core code segment. Specifically, when the server obtains the code segment to be protected, it queries the complexity level of the code segment to be protected according to the complexity judgment logic. It may be that when the server obtains the code segment to be protected, it queries the number of code lines of the code segment to be protected, and obtains the pre-stored complexity level corresponding to the number of code lines according to the number of code lines. Among them, the preset complexity level according to the number of lines of code can be that the more lines of code, the higher the level of complexity of the code; it can also be to query whether the code to be protected is added with an importance label, when the importance label is displayed, the more important. The higher the level of complexity.

S206: When the complexity level exceeds the preset level, select a core identifier from the code segment identifier, and extract the core code segment from the code segment to be protected according to the core identifier, where the core identifier is related to the core identifier. The code segment ID corresponding to the code segment.

Specifically, the core identifier refers to a pre-stored identifier that is included in the code segment to be protected that characterizes the sub-code segment that implements the core function. The core identifier may be the class identifier, method identifier, parameter identifier, etc. of the code segment that implements the core function included in the code segment to be protected. For example, the core identifier is the class name, method name, parameter type, parameter name, etc. corresponding to the core code segment contained in the code segment to be protected. The core code segment refers to the code segment included in the code segment to be protected to realize the corresponding core function. For example, in an application program, the core function is the function of capturing images, and the core code segment is the code segment for capturing corresponding images.

Specifically, when the server obtains the complexity level of the code segment to be protected, the server obtains the pre-stored preset level, and the server compares the obtained complexity level of the code segment to be protected with the preset level. When the complexity level exceeds the preset level, the server obtains the code segment identifier, and compares the code segment identifier with the preset core identifier to be compared. When the comparison is successful, the server uses the successfully compared code segment identifier as the core identifier, and the sub-code segment corresponding to the core identifier is the core code segment.

When the server obtains the complexity level corresponding to the code segment to be protected, the server compares the obtained complexity level with the preset level. When the complexity level exceeds the preset level, the server obtains the preset core code identifier, and compares the code segment identifier with the preset core identifier to be compared. When the comparison is successful, it is determined that the code segment identifier is a core identifier. Therefore, the sub-code segment corresponding to the core identifier and the next code segment identifier is the core code segment. The core code segment is extracted, so that only the simple framework corresponding to the core code segment is retained, such as the corresponding parameter setting framework, that is, the retained framework can be used as the framework core code segment. Furthermore, the server generates a separate core code segment from the extracted core code segment, and the single core code segment can be used as a proxy core code segment. That is, when the code segment to be protected is executed, when the server executes to the framework core code segment, the server can jump to the proxy core code segment, thereby directly executing the proxy core code segment. The proxy core code segment has a new code identifier, that is, the proxy code segment identifier, such as the corresponding code segment name. The code segment identifier corresponding to the core code segment of the framework remains unchanged, that is, the code segment identifier corresponding to the unextracted core code segment remains unchanged.

S208: Obfuscate the core code segment according to the obfuscation logic to obtain the obfuscated code segment.

Specifically, the obfuscation logic refers to obfuscating the code segment, that is, replacing the corresponding code format in the code segment, so as to obtain the relevant logic rules of the code segment that is not easy to find. Obfuscated code segment refers to a code segment that is difficult to understand but is functionally equivalent to the core code segment after replacing it according to the obfuscation logic. When the server extracts the core code segment, it queries the pre-stored obfuscation logic, and then the server will obfuscate the extracted core code segment according to the obfuscation logic, that is, it can format the extracted core code segment according to the obfuscation logic. Wait for replacement to get the obfuscated code segment. It may be that when the server extracts the core code segment, the core code segment is used as the proxy core code segment to obtain the corresponding obfuscation logic. For example, the confusion logic is to identify the core code corresponding to the agent core code segment, such as replacing the code segment name of the agent core code segment, or replacing the case in the agent core code segment.

S210: Obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.

Specifically, the target code segment refers to the code segment corresponding to the core function included in the protected code segment to be obfuscated, and the code segment that cannot be obfuscated is not obfuscated. When the server obtains the obfuscated code segment, the obfuscated code segment, the core code segment of the framework, and the code segment to be filtered contained in the code segment to be protected are used as the target code segment. It may be that the server extracts the core code segment to generate the proxy core code segment, and the framework core code segment remains in the code segment to be protected. The server associates the proxy core code segment with the framework core code segment, and associates the to-be-filtered code segment with the core proxy code segment to obtain the target code segment, so that the target code segment contains the core function that can be obfuscated Code segments and code segments that cannot be obfuscated.

In this embodiment, when the server obtains the code segment to be protected, it does not need to obfuscate the entire code segment to be protected, thereby avoiding that when there is a code segment that cannot be obfuscated in the code segment to be protected, the entire code segment to be protected cannot be confused. Therefore, the flexibility of obfuscation can be improved, and the core code segment can be extracted and obfuscated, thereby improving the security of the code segment.

In some embodiments, please refer to Figure 3, which provides a flow diagram of the code segment obfuscation step. The code segment obfuscation step, that is, the core code segment is obfuscated according to the obfuscation logic to obtain the obfuscated code segment, including: obtaining the obfuscation logic, according to the obfuscation logic Query the information to be confused contained in the core code segment; extract the confusion feature corresponding to the information to be confused, query the replacement information corresponding to the information to be confused according to the confusion feature; use the replacement information to replace the information to be confused to obtain the confusion code segment.

Specifically, the obfuscation logic refers to the preset logic of selecting the information to be obfuscated, and the obfuscation logic can be preset with a corresponding identifier associated with the code segment. For example, the obfuscation logic can be preset with corresponding code names, class names, variable names, or related code identifiers to be converted to case. To-be-obfuscated information refers to the relevant information contained in the code segment to be protected that can be obfuscated by obfuscation logic. It can be the code segment identifier corresponding to the core code segment corresponding to the obfuscation logic, such as the code segment name, etc., or it can be a replacement code line Capitalization and so on. The replacement information refers to the detailed information that can replace the obfuscated information, which can be to replace the original code segment name with common characters. Specifically, the server extracts the core code segment, and uses the extracted core code segment as the proxy core code segment. The server obtains the obfuscation logic, queries the different information to be obfuscated contained in the core code segment of the agent according to the obfuscation logic, and then queries the replacement information according to the code segment identifier corresponding to the core code segment, and uses the replacement information to replace the information to be obfuscated to obtain confusion Code snippet. It can be that when the server extracts the core code segment, the core code segment is used as the proxy core code segment. The server obtains the obfuscation logic, and the server compares the different identifiers corresponding to the obfuscation logic with the different identifiers corresponding to the core code segment of the agent, and selects the corresponding code line according to the obfuscation logic, so that the successfully compared identifiers and code lines are regarded as to be confused information. Furthermore, the server finds the replacement information corresponding to the information to be confused, such as general character identifiers, conversion characters, etc., according to the confusion logic. The server replaces the successfully matched identifiers and code lines corresponding to the core code segment according to the replacement information. For example, replaces the successfully matched identifiers corresponding to the code segment according to the common character identifiers, and size the different codes contained in the code lines Write replacement, thereby replacing the obfuscated code segment, where the identification of successful comparison can be the code segment name corresponding to the core code segment, parameter name, etc.

In this embodiment, when the server queries the information to be confused from the core code segment, it can query the replacement information corresponding to the information to be confused, and then use the replacement information to replace the information to be confused to obtain the obfuscated code segment. Confusion is simple and easy, and the efficiency is high.

In one of the embodiments, after replacing the obfuscated information with the replacement information to obtain the target code segment, it includes: storing the obfuscated code segment in an encrypted folder, and obtaining the first storage path corresponding to the encrypted folder; querying the code segment to be protected The second storage path associated with the core code segment in; change the second storage path to the first storage path.

Specifically, an encrypted folder refers to a folder that stores all obfuscated code segments among the code segments to be protected. The first storage path refers to the query path where the encrypted folder can be found, so that the obfuscated code segment can be queried according to the query path. The second storage path refers to the query path associated with the unobfuscated core code segment in the code segment to be protected. Generally, the query path may be the same storage path as the code segment to be protected. Specifically, when the server obtains the obfuscated code segment, usually the obfuscated code segment is saved to the same path as the code segment to be protected. To further improve security, the server obtains the encrypted folder and stores the obfuscated code segment in the encrypted folder , And then obtain the first storage path corresponding to the encrypted folder. The server queries the second storage path associated with the core code segment from the code segment to be protected, and then changes the second storage path to the first storage path, which ensures that the target code segment obtained after obfuscation of the code segment to be protected is executed. When the server executes to the core code segment, since the core code segment only retains the framework core code segment after obfuscation, it is possible to jump to the encrypted folder to accurately find the obfuscated code segment and execute the corresponding obfuscated code segment.

In this embodiment, the server can store the obfuscated code segment separately in the encrypted folder, which can further improve the security of the core code, and the server can obtain the first storage path corresponding to the encrypted folder, and query the code segment and the core code. The second storage path associated with the segment is changed to the first storage path to ensure the correct execution of the obfuscated code segment.

In some embodiments, after obtaining the target code segment corresponding to the code segment to be protected from the obfuscated code segment, the method includes: querying the first subcode segment identifier corresponding to the obfuscated code segment; and querying the second subcode segment identifier corresponding to the core code segment ; Establish a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier.

Specifically, the first sub-code segment identifier refers to the code segment identifier corresponding to the obfuscated code segment, and may be the code segment name corresponding to the obfuscated code segment. The second sub-code segment identifier refers to the code segment identifier corresponding to the core code segment, and may be the code segment name corresponding to the core code segment without obfuscation. Specifically, the server obtains the obfuscated code segment after obfuscation of the core code segment, and then queries the obfuscated code segment to obtain the first subcode identifier. Then the server queries the second subcode identifier corresponding to the core code segment, and then associates the first subcode identifier with the second subcode identifier to obtain the mapping relationship, that is, the server can directly query the corresponding subcode segment through the mapping relationship Logo. It may be that when the server obtains the obfuscated code segment, it queries whether the obfuscated code segment contains the corresponding preset code segment name. The preset code segment name may be the name of the included code segment included in the replacement information, etc., when When the name of the preset code segment is found, the name of the preset code segment is the first sub-code segment identifier, and the server queries the second sub-code segment identifier from the core code segment, that is, the server can directly obtain the preset code segment The code segment name is the second sub-code segment identifier, and the server establishes a mapping relationship between the first sub-code identifier and the second sub-code identifier.

In this embodiment, when the server obtains the first sub-code segment identifier of the obfuscated code segment, and obtains the second sub-code segment identifier corresponding to the core code segment, the first sub-code segment identifier and the second sub-code segment identifier can be combined The identification establishes a mapping relationship, so that the core code segment can be directly found through the obfuscated code segment, and it is convenient to query when an error occurs in the obfuscated code segment, thereby improving query efficiency.

In one of the embodiments, after establishing the mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier, the method includes: receiving a running instruction of the running target code segment, and running the protection code segment according to the running instruction to obtain the running result; Whether the result contains the operating error status identifier, when the operating error status identifier is included, query the second subcode segment identifier corresponding to the operating error status identifier; query the first code associated with the second subcode segment identifier according to the mapping relationship Mark, and output the first code mark.

Specifically, the running error status identifier refers to the corresponding error prompt information when an error occurs in the running target code segment, and the error status identifier can display the cause of the running error corresponding to the target code segment and the code line corresponding to the running error.

Specifically, after the core code segment in the code segment to be protected is obfuscated to obtain the target code segment, the target code segment can also be run first. The server receives the running instruction to run the target code segment, and the server runs the obtained target code segment line by line according to the running instruction to obtain the running result. When the running result obtained by the server query is error-free, the corresponding running pass result is output. In addition, when the running result contains the error status identifier, the server queries the code line corresponding to the error status identifier, queries the second subcode segment identifier of the obfuscated code segment corresponding to the code line, and then according to the mapping relationship. The server finds the first sub-code segment identifier corresponding to the second sub-code segment identifier, and outputs the first sub-code segment identifier and the second sub-code segment identifier to troubleshoot the cause of the operation error, and you can query whether Is there a problem with the unobfuscated core code segment, whether it is the obfuscated logic that causes the obfuscation error and the target code obfuscation error.

It may be that the server displays a corresponding run button on the display interface, and the user clicks the run button to generate a run instruction, and then the server runs the target code segment line by line according to the generated run instruction. When the server runs to the obfuscated code segment, the obfuscated code segment is found through the stored first storage path, so as to complete the operation of the target code segment, and then the server generates the running result. When the running result is error-free, the running result that has passed is output; when there is an error in the running result, the running error status identifier is queried, and the corresponding code line is queried according to the running error status identifier, and then the code line is queried to include If there is an obfuscated code segment of the code line, the second sub-code segment identifier corresponding to the obfuscated code segment containing the code line can be found. Since the second sub-code segment identifier corresponds to the obfuscated code segment, in order to query the cause of the operation error status identifier in the operation of the target code segment, the core code segment corresponding to the obfuscated code segment can be queried. That is, the server can query the first subcode segment identifier according to the second subcode segment identifier and the mapping relationship, and output the first subcode segment identifier and the second subcode segment identifier.

In this embodiment, after the server generates the target code segment, the target code segment can be pre-run to obtain the running result, so that the running result of the target code segment can be verified in advance, and the running failure caused by the direct use of the target code segment can be avoided. Ensure the accuracy of the target code segment. Furthermore, when the running result is a running error, query the running error status identifier, query the second subcode segment identifier according to the running error status identifier, and query the first subcode segment identifier corresponding to the second subcode segment identifier according to the mapping relationship, Ensure that the query error is comprehensive and accurate when there is an error in the target code segment.

In some embodiments, after querying the complexity level corresponding to the code segment to be protected, it includes: when the complexity level does not exceed the preset level, querying the filter field according to the code segment identifier; adding the filter field to the code segment to be protected; The code segment to be protected with the added filter field is obfuscated by obfuscation logic to obtain the target code segment.

Specifically, the filter field refers to the addition of a corresponding comment field, so that when the code segment to be protected is confused, the code segment with the comment field added is skipped, so that the code segment with the comment field added is not confused. Specifically, when the server finds that the complexity level corresponding to the code segment to be protected does not exceed the preset level, it is simple and easy to query line by line whether the code segment to be protected contains code segments that do not need to be filtered. Then the server compares the complexity level of the code segment to be protected, and when the complexity level does not exceed the preset level, the server obtains the corresponding filter field. The server queries the filtering code segment contained in the code segment to be protected according to the code segment identifier. The server adds a filter field to the filter code segment, and the server can directly obfuscate the code segment without the filter field added to the protected code segment according to the obfuscation logic to obtain the obfuscated code segment, the obfuscated code segment and the filter field to be filtered with the added filter field The code segment is associated as the target code segment.

For example, the server obtains the code segment identifier corresponding to the filter code segment, and matches the filter code segment identifier with the corresponding identifier contained in the code segment to be protected. When the matching is successful, the server sets the sub-code segment corresponding to the successfully-matched code segment identifier as the filtering code segment. Then the server obtains the corresponding filter field, such as the corresponding comment field, and adds the comment field to the filter code segment. The server obtains the corresponding obfuscated logic, which can be to replace the code segment name of the corresponding sub-code segment, or replace the case of the code line, etc., so that the server can obtain the obfuscated code segment, and then the obfuscated code segment and the filtered code segment Make the association to get the target code segment. And when the server obtains the corresponding target code segment, the server can establish a corresponding mapping relationship between the obfuscated code segment and the unobfuscated code segment, and then can run the corresponding target code segment to query whether the running result has errors. When there is no error, the server can directly output the prompt message of successful operation; when the operation fails, the server queries the specific failed sub-code segment, and outputs the relevant sub-code segment identification.

In this embodiment, when the server finds that the complexity level of the code segment to be protected does not exceed the preset level, it can directly obtain the corresponding filter field, and add the filter field to the code segment to be protected, thereby adopting obfuscation logic. The target code segment is obtained by obfuscation of the protected code segment. Since the complexity level does not exceed the preset level, it is simple and easy to directly add the corresponding filter field to the protected code segment, which can improve the efficiency of protecting the code segment.

In one of the embodiments, the code segment to be protected is the code segment of the shooting function in the application program as an example for illustration: when the server receives the code segment to be protected as the code segment of the image capture function, the server queries the code segment to be protected. The complexity level of the protection code segment can be the number of code lines of the query code segment, or whether it carries an important level indication, and the server determines the complexity level. The server can be more complex as the number of lines of code is greater, or the more important the importance level carried, the higher the complexity level. When the server obtains the complexity level, the server obtains the preset level and compares the complexity level with the preset level. When the complexity level exceeds the preset level, it will take a long time for the code segment to be protected to query whether there is a code segment to be filtered line by line. Therefore, according to the corresponding code segment identifier, such as the corresponding code segment name, the corresponding core code can be found For example, if the core code segment is the code segment named CameraActivity, then extract the code segment to establish the proxy core code segment, such as generating a proxy code segment with the class name CameraApiProxy, the proxy code segment is also generated The proxy core code segment, and the code segment name is CameraActivity, only the corresponding frame is reserved, and then the code segment with the class name CameraApiProxy is confused. For example, the code segment name is replaced by the corresponding common characters, such as A, Commonly recognized characters of B and C, or the corresponding code lines are replaced with uppercase and lowercase letters, etc., to obtain the obfuscated code segment. The server associates the obfuscated code segment with the code segment whose class name is the frame reserved in CameraActivity, and associates the code segment with the unobfuscated code segment in the code segment to be protected to obtain the target code segment.

In addition, the server may add the obfuscated code segment obtained by obfuscation of the code segment whose class name is CameraApiProxy to the encrypted folder storing different obfuscated code segments, and obtain the first storage path in the encrypted folder. Furthermore, the server changes the second storage path associated with the code segment whose class name is CameraActivity to the first storage path, so that the corresponding obfuscated code segment can be accurately found when the corresponding target code segment is executed. And the server associates the code segment identifier of the code segment with the obfuscated class name CameraApiProxy with the code segment identifier of the code segment with the unobfuscated class name CameraActivity. The server can associate the two class names to obtain the mapping relationship. The server can receive a running instruction, and run the obtained target code segment according to the running instruction. When the target code segment runs correctly, it will directly output the prompt message of the correct operation; when there is an error in the operation, the server will query the operation error status identification from the operation result. If the error reason of the specific code line is prompted, it will be based on the operation error code Line query whether the code line is included in the code segment with the class name CameraApiProxy. When it is included in the code segment, the code segment with the class name CameraActivity is also queried through the mapping relationship, so that both codes are identified Output, easy to query specific errors.

In addition, when the server receives that the complexity level of the code segment to be protected does not exceed the preset level, it can directly add the code segment that does not need to be confused in the code segment to be protected, that is, add the corresponding filter field to the filter code segment. The filter field can be Yes: If a field in the code segment to be protected is not obfuscated, add @KeepFromProguard public class User{}; if an attribute in the code segment to be protected is not obfuscated, add @KeepFromProguard public int id; a single method in the code segment to be protected If you don’t obfuscate, add @KeepFromProguard public booleanisValid(){} to add the above filter fields, you can obfuscate the entire protected code segment, that is, during the obfuscation process, the code segment with the above filter fields will be skipped , Thereby improving the efficiency of obfuscation of the code segment to be protected.

It should be understood that, although the various steps in the flowchart of Figs. 2-3 are displayed in sequence as indicated by the arrows, these steps are not necessarily executed in the order indicated by the arrows. Unless specifically stated in this article, the execution of these steps is not strictly limited in order, and these steps can be executed in other orders. Moreover, at least some of the steps in Figure 2-3 may include multiple sub-steps or multiple stages. These sub-steps or stages are not necessarily executed at the same time, but can be executed at different times. These sub-steps or stages The execution order of is not necessarily performed sequentially, but may be performed alternately or alternately with at least a part of other steps or sub-steps or stages of other steps.

In one embodiment, as shown in FIG. 4, a code segment protection device is provided, including: an acquisition module 410, a query module 420, a first obfuscation module 430, and a generation module 440, wherein:

The obtaining module 410 is configured to obtain a code segment to be protected, and the code segment to be protected carries a code segment identifier.

The query module 420 is used to query the complexity level corresponding to the code segment to be protected, and the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected;

The extraction module 430 is used to select the core identifier from the code segment identifier when the complexity level exceeds the preset level, and extract the core code segment from the code segment to be protected according to the core identifier, where the core identifier corresponds to the core code segment Code segment ID.

The first obfuscation module 440 is used to obfuscate the extracted core code segments according to obfuscation logic to obtain obfuscated code segments.

The generating module 450 is used to obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.

In one embodiment, the first obfuscation module 440 includes:

The first query unit is used to obtain obfuscation logic, and query the information to be obfuscated contained in the core code segment according to the obfuscation logic.

The second query unit is configured to query the replacement information corresponding to the information to be confused according to the confusion logic.

The replacement unit is used to replace the obfuscated information with the replacement information to obtain the obfuscated code segment.

In one embodiment, the code segment protection device 400 includes:

The storage module is used to store the obfuscated code segment in the encrypted folder and obtain the first storage path corresponding to the encrypted folder.

The path extraction module is used to query the second storage path associated with the core code segment in the code segment to be protected.

The change module is used to change the second storage path to the first storage path.

In one embodiment, the code segment protection device 400 includes:

The first identification query unit is used to query the identification of the first sub-code segment corresponding to the obfuscated code segment.

The second identification query unit is used to query and query the second sub-code segment identifier corresponding to the core code segment.

The establishment module is used to establish a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier.

In one embodiment, the code segment protection device 400 includes:

The receiving module is used to receive the running instruction of the running target code segment, and run the target code segment according to the running instruction to obtain the running result.

The third identification query module is used to query whether the operating result contains the operating error status identifier, and when the operating error status identifier is included, query the second sub-code segment identifier corresponding to the operating error status identifier.

The output module is used to query the first subcode segment identifier associated with the second subcode segment identifier according to the mapping relationship, and output the first subcode segment identifier and the second subcode segment identifier.

In one embodiment, the code segment protection device 400 includes:

The filter field query module is used to query the filter field according to the code segment identifier when the complexity level does not exceed the preset level.

Add module, used to add filter fields to the code segment to be protected.

The second obfuscation module is used to obfuscate the to-be-protected code segment to which the filter field is added by obfuscation logic to obtain the target code segment.

For the specific definition of the code segment protection device, please refer to the above definition of the code segment protection method, which will not be repeated here. Each module in the above code segment protection device can be implemented in whole or in part by software, hardware, and a combination thereof. The foregoing modules may be embedded in the form of hardware or independent of the processor in the computer device, or may be stored in the memory of the computer device in the form of software, so that the processor can call and execute the operations corresponding to the foregoing modules.

In one embodiment, a computer device is provided. The computer device may be a server, and its internal structure diagram may be as shown in FIG. 5. The computer equipment includes a processor, a memory, a network interface and a database connected through a system bus. Among them, the processor of the computer device is used to provide calculation and control capabilities. The memory of the computer device includes a non-volatile storage medium and an internal memory. The non-volatile storage medium stores an operating system, computer readable instructions, and a database. The internal memory provides an environment for the operation of the operating system and computer-readable instructions in the non-volatile storage medium. The computer equipment database is used to store code segment protection data. The network interface of the computer device is used to communicate with an external terminal through a network connection. The computer-readable instruction is executed by the processor to realize a code segment protection method.

Those skilled in the art can understand that the structure shown in FIG. 5 is only a block diagram of a part of the structure related to the solution of the present application, and does not constitute a limitation on the computer device to which the solution of the present application is applied. The specific computer device may Including more or fewer parts than shown in the figure, or combining some parts, or having a different arrangement of parts.

A computer device, including a memory and one or more processors. The memory stores computer readable instructions. When the computer readable instructions are executed by the processor, one or more processors are caused to perform the following steps: Obtain the code to be protected Segment, the code segment to be protected carries a code segment identifier; the complexity level corresponding to the code segment to be protected is queried, and the complexity level is preset, which is a reference index used to characterize the complexity of the code segment to be protected; when the complexity level exceeds the preset Level, the core identifier is selected from the code segment identifier, and the core code segment is extracted from the code segment to be protected according to the core identifier, where the core identifier is the code segment identifier corresponding to the core code segment; the core code segment Obtain the obfuscated code segment by obfuscation according to the obfuscation logic; and obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.

In one embodiment, when the processor executes the computer-readable instructions, the core code segment is obfuscated according to the obfuscation logic to obtain the obfuscated code segment, including: obtaining the obfuscation logic, and querying the core code segment for the to-be-contained code segment according to the obfuscation logic. Obfuscation information; query the replacement information corresponding to the information to be confused according to the obfuscation logic; use the replacement information to replace the information to be confused to obtain the obfuscated code segment.

In one embodiment, when the processor executes the computer-readable instruction, after replacing the obfuscated information with the replacement information to obtain the target code segment, it includes: storing the obfuscated code segment in an encrypted folder, and obtaining the first corresponding to the encrypted folder. Storage path; query the second storage path associated with the core code segment in the code segment to be protected; change the second storage path to the first storage path.

In one embodiment, after the processor executes the computer-readable instruction to obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment, it includes: querying the first subcode segment identifier corresponding to the obfuscated code segment; and querying the core code The second sub-code segment identifier corresponding to the segment; the mapping relationship is established between the first sub-code segment identifier and the second sub-code segment identifier.

In one embodiment, after the processor executes the computer-readable instruction to establish a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier, the processor includes: receiving a running instruction of the running target code segment, and running the target according to the running instruction The code segment obtains the running result; query whether the running result contains the operating error status identifier, when the operating error status identifier is included, query the second subcode segment identifier corresponding to the operating error status identifier; query the second subcode segment according to the mapping relationship The code segment identifies the associated first sub-code segment identifier, and outputs the first sub-code segment identifier and the second sub-code segment identifier.

In one embodiment, after the processor executes the computer-readable instruction to query the complexity level corresponding to the code segment to be protected, it includes: when the complexity level does not exceed the preset level, query the filter field according to the code segment identifier; Add to the code segment to be protected; use obfuscation logic to obfuscate the code segment to be protected with the filter field added to obtain the target code segment.

One or more non-volatile computer-readable storage media storing computer-readable instructions. When the computer-readable instructions are executed by one or more processors, the one or more processors perform the following steps:: Obtain the protection to be protected Code segment, the code segment to be protected carries a code segment identifier; query the complexity level corresponding to the code segment to be protected, the complexity level is preset, and is used to characterize the reference index of the complexity of the code segment to be protected; When the complexity level exceeds the preset level, the core identifier is selected from the code segment identifier, and the core code segment is extracted from the code segment to be protected according to the core identifier, wherein the core identifier corresponds to the core code segment Code segment identification; Obtain the obfuscated code segment by obfuscating the core code segment according to the obfuscation logic; and Obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.

In one embodiment, when the computer-readable instruction is executed by the processor, the core code segment is obfuscated according to the obfuscation logic to obtain the obfuscated code segment, which includes: obtaining the obfuscation logic, and querying the core code segment for the contained code according to the obfuscation logic Information to be confused; query the replacement information corresponding to the information to be confused according to the confusion logic; use the replacement information to replace the information to be confused to obtain a confused code segment.

In one embodiment, when the computer-readable instruction is executed by the processor, the target code segment is obtained by using the replacement information to replace the obfuscated information with replacement information, including: storing the obfuscated code segment in an encrypted folder, and obtaining the first corresponding to the encrypted folder A storage path; query the second storage path associated with the core code segment in the code segment to be protected; change the second storage path to the first storage path.

In one embodiment, when the computer-readable instruction is executed by the processor, after obtaining the target code segment corresponding to the code segment to be protected according to the obfuscated code segment, the method includes: querying the identifier of the first sub-code segment corresponding to the obfuscated code segment; and querying the core The second sub-code segment identifier corresponding to the code segment; the mapping relationship is established between the first sub-code segment identifier and the second sub-code segment identifier.

In one embodiment, when the computer-readable instruction is executed by the processor, the mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier is established, including: receiving a running instruction for running the target code segment, and running according to the running instruction The target code segment obtains the running result; query whether the running result contains the running error status identifier, when the running error status identifier is included, query the second sub-code segment identifier corresponding to the running error status identifier; query the second sub-code segment identifier according to the mapping relationship The subcode segment identifies the associated first subcode segment identifier, and outputs the first subcode segment identifier and the second subcode segment identifier.

In one embodiment, after the computer-readable instruction is executed by the processor to query the complexity level corresponding to the code segment to be protected, it includes: when the complexity level does not exceed the preset level, query the filter field according to the code segment identifier; The field is added to the code segment to be protected; the code segment to be protected with the added filter field is obfuscated by obfuscation logic to obtain the target code segment.

A person of ordinary skill in the art can understand that all or part of the processes in the above-mentioned embodiment methods can be implemented by instructing relevant hardware through computer-readable instructions, which can be stored in a non-volatile computer. In a readable storage medium, when the computer-readable instructions are executed, they may include the processes of the above-mentioned method embodiments. Wherein, any reference to memory, storage, database or other media used in the embodiments provided in this application may include non-volatile and/or volatile memory. Non-volatile memory may include read only memory (ROM), programmable ROM (PROM), electrically programmable ROM (EPROM), electrically erasable programmable ROM (EEPROM), or flash memory. Volatile memory may include random access memory (RAM) or external cache memory. As an illustration and not a limitation, RAM is available in many forms, such as static RAM (SRAM), dynamic RAM (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDRSDRAM), enhanced SDRAM (ESDRAM), synchronous chain Channel (Synchlink) DRAM (SLDRAM), memory bus (Rambus) direct RAM (RDRAM), direct memory bus dynamic RAM (DRDRAM), and memory bus dynamic RAM (RDRAM), etc.

The technical features of the above embodiments can be combined arbitrarily. In order to make the description concise, all possible combinations of the technical features in the above embodiments are not described. However, as long as there is no contradiction between the combinations of these technical features, they should It is considered as the range described in this specification.

The above-mentioned embodiments only express several implementation manners of the present application, and the description is relatively specific and detailed, but it should not be understood as a limitation on the scope of the invention patent. It should be pointed out that for those of ordinary skill in the art, without departing from the concept of this application, several modifications and improvements can be made, and these all fall within the protection scope of this application. Therefore, the scope of protection of the patent of this application shall be subject to the appended claims.

Claims

A code segment protection method, including:

Acquiring a code segment to be protected, where the code segment to be protected carries a code segment identifier;

Query the complexity level corresponding to the code segment to be protected, where the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected;

When the complexity level exceeds the preset level, the core identifier is selected from the code segment identifiers, and the core code segment is extracted from the code segment to be protected according to the core identifier, wherein the core identifier is related to the The code segment identifier corresponding to the core code segment;

Obfuscate the core code segment according to the obfuscation logic to obtain the obfuscated code segment; and

Obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.
The method according to claim 1, wherein the obfuscation of the core code segment according to obfuscation logic to obtain an obfuscated code segment comprises:

Obtain obfuscation logic, and query the information to be obfuscated contained in the core code segment according to the obfuscation logic;

Query the replacement information corresponding to the information to be confused according to the confusion logic; and

Using the replacement information to replace the information to be confused to obtain an obfuscated code segment.
The method according to claim 2, wherein after said replacing the information to be confused with the replacement information to obtain the target code segment, the method comprises;

Store the obfuscated code segment in an encrypted folder, and obtain the first storage path corresponding to the encrypted folder;

Query the second storage path associated with the core code segment in the code segment to be protected; and

Change the second storage path to the first storage path.
The method according to claim 1, wherein after obtaining the target code segment corresponding to the code segment to be protected according to the obfuscated code segment, the method comprises:

Query the first sub-code segment identifier corresponding to the obfuscated code segment;

And query the second sub-code segment identifier corresponding to the core code segment; and

Establish a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier.
The method according to claim 4, wherein after the establishing a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier, the method comprises:

Receiving a running instruction for running the target code segment, and running the target code segment according to the running instruction to obtain a running result;

Query whether the running result includes a running error status identifier, and when the running error status identifier is included, query the second sub-code segment identifier corresponding to the running error status identifier; and

According to the mapping relationship, query the first subcode segment identifier associated with the second subcode segment identifier, and output the first subcode segment identifier and the second subcode segment identifier.
The method according to claim 1, wherein the querying the complexity level corresponding to the code segment to be protected comprises:

When the complexity level does not exceed the preset level, query the filter field according to the code segment identifier;

Adding the filter field to the code segment to be protected; and

Obfuscation logic is used to obfuscate the code segment to be protected to which the filter field is added to obtain the target code segment.
A code segment protection device, including:

An obtaining module, configured to obtain a code segment to be protected, and the code segment to be protected carries a code segment identifier;

A query module for querying the complexity level corresponding to the code segment to be protected, where the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected;

The extraction module is configured to select a core identifier from the code segment identifier when the complexity level exceeds a preset level, and extract the core code segment from the code segment to be protected according to the core identifier, wherein the The core identifier is a code segment identifier corresponding to the core code segment;

The first obfuscation module is used to obfuscate the core code segment according to obfuscation logic to obtain an obfuscated code segment; and

The generating module is used to obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.
The device according to claim 7, wherein the first obfuscation module comprises:

The first query unit is configured to obtain obfuscation logic, and query the information to be obfuscated contained in the core code segment according to the obfuscation logic;

The second query unit is configured to query the replacement information corresponding to the information to be confused according to the confusion logic; and

The replacement unit is used to replace the information to be confused with the replacement information to obtain an obfuscated code segment.
The device according to claim 8, wherein the code segment protection device comprises:

A storage module, configured to store the obfuscated code segment in an encrypted folder, and obtain the first storage path corresponding to the encrypted folder;

A path extraction module for querying the second storage path associated with the core code segment in the code segment to be protected; and

The changing module is used to change the second storage path to the first storage path.
The device according to claim 7, wherein the code segment protection device comprises:

The first identifier query unit is used to query the identifier of the first sub-code segment corresponding to the obfuscated code segment;

The second identification query unit is used to query and query the second sub-code segment identifier corresponding to the core code segment;

The establishment module is used to establish a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier.
The device according to claim 10, wherein the code segment protection device comprises:

A receiving module, configured to receive a running instruction for running the target code segment, and run the target code segment according to the running instruction to obtain a running result;

The third identification query module is configured to query whether the operating result includes an operating error status identifier, and when the operating error status identifier is included, query the second sub-code segment identifier corresponding to the operating error status identifier; and

The output module is configured to query the first subcode segment identifier associated with the second subcode segment identifier according to the mapping relationship, and output the first subcode segment identifier and the second subcode segment identifier.
The device according to claim 7, wherein the code segment protection device comprises:

The filter field query module is configured to query the filter field according to the code segment identifier when the complexity level does not exceed a preset level;

An adding module is used to add the filter field to the code segment to be protected; and

The second obfuscation module is configured to use obfuscation logic to obfuscate the code segment to be protected to which the filter field is added to obtain the target code segment.
A computer device includes a memory and one or more processors. The memory stores computer-readable instructions. When the computer-readable instructions are executed by the one or more processors, the one or more Each processor performs the following steps:

Acquiring a code segment to be protected, where the code segment to be protected carries a code segment identifier;

Query the complexity level corresponding to the code segment to be protected, where the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected;

When the complexity level exceeds the preset level, the core identifier is selected from the code segment identifiers, and the core code segment is extracted from the code segment to be protected according to the core identifier, wherein the core identifier is related to the The code segment identifier corresponding to the core code segment;

Obfuscate the core code segment according to the obfuscation logic to obtain the obfuscated code segment; and

Obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.
The computer device according to claim 13, wherein the processor further executes the following steps when executing the computer-readable instructions, and said obfuscating the core code segment according to obfuscation logic to obtain an obfuscated code segment includes :

Obtain obfuscation logic, and query the information to be obfuscated contained in the core code segment according to the obfuscation logic;

Query the replacement information corresponding to the information to be confused according to the confusion logic; and

Using the replacement information to replace the information to be confused to obtain an obfuscated code segment.
The computer device according to claim 14, wherein when the processor executes the computer-readable instruction, the following steps are further executed, and the target code segment is obtained by replacing the information to be confused with the replacement information After that, include;

Store the obfuscated code segment in an encrypted folder, and obtain the first storage path corresponding to the encrypted folder;

Query the second storage path associated with the core code segment in the code segment to be protected; and

Change the second storage path to the first storage path.
The computer device according to claim 13, wherein the processor further executes the following steps when executing the computer-readable instructions, and the object code corresponding to the code segment to be protected is obtained according to the obfuscated code segment After the paragraph, include:

Query the first sub-code segment identifier corresponding to the obfuscated code segment;

And query the second sub-code segment identifier corresponding to the core code segment; and

Establish a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier.
One or more non-volatile computer-readable storage media storing computer-readable instructions, which when executed by one or more processors, cause the one or more processors to perform the following steps:

Acquiring a code segment to be protected, where the code segment to be protected carries a code segment identifier;

Query the complexity level corresponding to the code segment to be protected, where the complexity level is preset and is used to characterize the reference index of the complexity of the code segment to be protected;

When the complexity level exceeds the preset level, the core identifier is selected from the code segment identifiers, and the core code segment is extracted from the code segment to be protected according to the core identifier, wherein the core identifier is related to the The code segment identifier corresponding to the core code segment;

Obfuscate the core code segment according to the obfuscation logic to obtain the obfuscated code segment; and

Obtain the target code segment corresponding to the code segment to be protected according to the obfuscated code segment.
The storage medium according to claim 17, wherein the following steps are further executed when the computer-readable instructions are executed by the processor: the core code segment is obfuscated according to obfuscation logic to obtain an obfuscated code segment, include:

Obtain obfuscation logic, and query the information to be obfuscated contained in the core code segment according to the obfuscation logic;

Query the replacement information corresponding to the information to be confused according to the confusion logic; and

Using the replacement information to replace the information to be confused to obtain an obfuscated code segment.
The storage medium according to claim 18, wherein when the computer-readable instructions are executed by the processor, the following steps are further executed, and the target code is obtained by replacing the information to be confused with the replacement information After the paragraph, include;

Store the obfuscated code segment in an encrypted folder, and obtain the first storage path corresponding to the encrypted folder;

Query the second storage path associated with the core code segment in the code segment to be protected; and

Change the second storage path to the first storage path.
The storage medium according to claim 17, wherein when the computer-readable instructions are executed by the processor, the following steps are further executed, and the target corresponding to the code segment to be protected is obtained according to the obfuscated code segment After the code snippet, include:

Query the first sub-code segment identifier corresponding to the obfuscated code segment;

And query the second sub-code segment identifier corresponding to the core code segment; and

Establish a mapping relationship between the first sub-code segment identifier and the second sub-code segment identifier.