DE102017204020A1 - Verfahren zur rechnergestützten Obfuskation von Programmcode - Google Patents

Verfahren zur rechnergestützten Obfuskation von Programmcode Download PDF

Info

Publication number
DE102017204020A1
DE102017204020A1 DE102017204020.3A DE102017204020A DE102017204020A1 DE 102017204020 A1 DE102017204020 A1 DE 102017204020A1 DE 102017204020 A DE102017204020 A DE 102017204020A DE 102017204020 A1 DE102017204020 A1 DE 102017204020A1
Authority
DE
Germany
Prior art keywords
program code
value
mask
steps
calculation step
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
DE102017204020.3A
Other languages
German (de)
English (en)
Inventor
Johannes Zwanzger
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens AG
Siemens Corp
Original Assignee
Siemens AG
Siemens Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens AG, Siemens Corp filed Critical Siemens AG
Priority to DE102017204020.3A priority Critical patent/DE102017204020A1/de
Priority to JP2019548941A priority patent/JP6919973B2/ja
Priority to EP17835809.9A priority patent/EP3577588B1/de
Priority to PCT/EP2017/082508 priority patent/WO2018162107A1/de
Priority to KR1020197029606A priority patent/KR102336521B1/ko
Priority to US16/492,439 priority patent/US11341216B2/en
Priority to CN201780088267.2A priority patent/CN110383275B/zh
Publication of DE102017204020A1 publication Critical patent/DE102017204020A1/de
Withdrawn legal-status Critical Current

Links

Images

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/12—Protecting executable software
    • G06F21/14—Protecting executable software against software analysis or reverse engineering, e.g. by obfuscation
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/106—Enforcing content protection by specific content processing
    • G06F21/1066—Hiding content
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/54—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F8/00—Arrangements for software engineering
    • G06F8/60—Software deployment
    • G06F8/61—Installation
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F9/00—Arrangements for program control, e.g. control units
    • G06F9/06—Arrangements for program control, e.g. control units using stored programs, i.e. using an internal store of processing equipment to receive or retain programs
    • G06F9/30—Arrangements for executing machine instructions, e.g. instruction decode
    • G06F9/30003—Arrangements for executing specific machine instructions
    • G06F9/30007—Arrangements for executing specific machine instructions to perform operations on data operands
    • G06F9/30029—Logical and Boolean instructions, e.g. XOR, NOT
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/16—Obfuscation or hiding, e.g. involving white box
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/002—Countermeasures against attacks on cryptographic mechanisms
    • Y—GENERAL TAGGING OF NEW TECHNOLOGICAL DEVELOPMENTS; GENERAL TAGGING OF CROSS-SECTIONAL TECHNOLOGIES SPANNING OVER SEVERAL SECTIONS OF THE IPC; TECHNICAL SUBJECTS COVERED BY FORMER USPC CROSS-REFERENCE ART COLLECTIONS [XRACs] AND DIGESTS
    • Y04—INFORMATION OR COMMUNICATION TECHNOLOGIES HAVING AN IMPACT ON OTHER TECHNOLOGY AREAS
    • Y04S—SYSTEMS INTEGRATING TECHNOLOGIES RELATED TO POWER NETWORK OPERATION, COMMUNICATION OR INFORMATION TECHNOLOGIES FOR IMPROVING THE ELECTRICAL POWER GENERATION, TRANSMISSION, DISTRIBUTION, MANAGEMENT OR USAGE, i.e. SMART GRIDS
    • Y04S40/00—Systems for electrical power generation, transmission, distribution or end-user application management characterised by the use of communication or information technologies, or communication or information technology specific aspects supporting them
    • Y04S40/20—Information technology specific aspects, e.g. CAD, simulation, modelling, system security

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Computer Hardware Design (AREA)
  • Multimedia (AREA)
  • Technology Law (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Storage Device Security (AREA)
DE102017204020.3A 2017-03-10 2017-03-10 Verfahren zur rechnergestützten Obfuskation von Programmcode Withdrawn DE102017204020A1 (de)

Priority Applications (7)

Application Number Priority Date Filing Date Title
DE102017204020.3A DE102017204020A1 (de) 2017-03-10 2017-03-10 Verfahren zur rechnergestützten Obfuskation von Programmcode
JP2019548941A JP6919973B2 (ja) 2017-03-10 2017-12-13 プログラムコードのコンピュータ支援難読化方法
EP17835809.9A EP3577588B1 (de) 2017-03-10 2017-12-13 Verfahren zur rechnergestützten obfuskation von programmcode
PCT/EP2017/082508 WO2018162107A1 (de) 2017-03-10 2017-12-13 Verfahren zur rechnergestützten obfuskation von programmcode
KR1020197029606A KR102336521B1 (ko) 2017-03-10 2017-12-13 프로그램 코드의 컴퓨터-지원 난독화를 위한 방법
US16/492,439 US11341216B2 (en) 2017-03-10 2017-12-13 Method for the computer-aided obfuscation of program code
CN201780088267.2A CN110383275B (zh) 2017-03-10 2017-12-13 用于程序代码的计算机辅助的代码混淆的方法

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
DE102017204020.3A DE102017204020A1 (de) 2017-03-10 2017-03-10 Verfahren zur rechnergestützten Obfuskation von Programmcode

Publications (1)

Publication Number Publication Date
DE102017204020A1 true DE102017204020A1 (de) 2018-09-13

Family

ID=61054302

Family Applications (1)

Application Number Title Priority Date Filing Date
DE102017204020.3A Withdrawn DE102017204020A1 (de) 2017-03-10 2017-03-10 Verfahren zur rechnergestützten Obfuskation von Programmcode

Country Status (7)

Country Link
US (1) US11341216B2 (enExample)
EP (1) EP3577588B1 (enExample)
JP (1) JP6919973B2 (enExample)
KR (1) KR102336521B1 (enExample)
CN (1) CN110383275B (enExample)
DE (1) DE102017204020A1 (enExample)
WO (1) WO2018162107A1 (enExample)

Families Citing this family (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
EP3609240A1 (de) 2018-08-09 2020-02-12 Siemens Aktiengesellschaft Computerimplementiertes verfahren und netzwerkzugangsserver zum verbinden einer netzwerkkomponente mit einem netzwerk, insbesondere einem mobilfunknetz, mit einem erweiterten netzwerkzugangskennzeichen
US11456855B2 (en) * 2019-10-17 2022-09-27 Arm Limited Obfuscating data at-transit
US20210303662A1 (en) * 2020-03-31 2021-09-30 Irdeto B.V. Systems, methods, and storage media for creating secured transformed code from input code using a neural network to obscure a transformation function
US11954213B2 (en) 2021-09-13 2024-04-09 International Business Machines Corporation Obfuscating intelligent data while preserving reserve values

Family Cites Families (16)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
JP3627384B2 (ja) * 1996-01-17 2005-03-09 富士ゼロックス株式会社 ソフトウェアの保護機能付き情報処理装置及びソフトウェアの保護機能付き情報処理方法
US5892899A (en) 1996-06-13 1999-04-06 Intel Corporation Tamper resistant methods and apparatus
JP2003280755A (ja) 2002-03-25 2003-10-02 Nec Corp 自己復元型プログラム、プログラム生成方法及び装置、情報処理装置並びにプログラム
JP2003280754A (ja) 2002-03-25 2003-10-02 Nec Corp 隠蔽化ソースプログラム、ソースプログラム変換方法及び装置並びにソース変換プログラム
US7133525B1 (en) * 2002-05-17 2006-11-07 Communication Security Apparatus Corp. Communication security apparatus and method of using same
WO2009010338A1 (de) * 2007-07-13 2009-01-22 Siemens Aktiengesellschaft Verfahren zur rechnergestützten obfuskierung eines softwareprogramms und computerprogrammprodukt
US8667301B2 (en) * 2010-04-01 2014-03-04 Apple Inc. Obfuscating transformations on data array content and addresses
US9274976B2 (en) * 2010-11-05 2016-03-01 Apple Inc. Code tampering protection for insecure environments
US10191754B2 (en) * 2012-01-09 2019-01-29 Koninklijke Philips N.V. Virtual machine device having key driven obfuscation and method
US8756435B2 (en) * 2012-03-02 2014-06-17 Apple Inc. Obfuscation of control flow of software
US9336370B2 (en) * 2012-12-06 2016-05-10 Apple Inc. Method and apparatus for dynamic obfuscation of static data
KR101328012B1 (ko) 2013-08-12 2013-11-13 숭실대학교산학협력단 애플리케이션 코드 난독화 장치 및 그 방법
EP2937803B1 (en) 2014-04-23 2019-02-20 Nxp B.V. Control flow flattening for code obfuscation where the next block calculation needs run-time information
US10599820B2 (en) * 2014-04-23 2020-03-24 Nxp B.V. Control flow flattening for code obfuscation where the next block calculation needs run-time information
US9830326B2 (en) * 2015-06-15 2017-11-28 Ca, Inc. Identifying data offsets using binary masks
KR101619458B1 (ko) 2016-03-02 2016-05-10 (주)케이사인 애플리케이션 코드 난독화 장치 및 이를 이용한 애플리케이션 코드 난독화 방법

Also Published As

Publication number Publication date
EP3577588A1 (de) 2019-12-11
CN110383275A (zh) 2019-10-25
US20200042677A1 (en) 2020-02-06
JP2020510935A (ja) 2020-04-09
US11341216B2 (en) 2022-05-24
JP6919973B2 (ja) 2021-08-18
KR102336521B1 (ko) 2021-12-06
WO2018162107A1 (de) 2018-09-13
EP3577588B1 (de) 2021-09-01
CN110383275B (zh) 2023-08-22
KR20190122837A (ko) 2019-10-30

Similar Documents

Publication Publication Date Title
EP3577588B1 (de) Verfahren zur rechnergestützten obfuskation von programmcode
EP2605445B1 (de) Verfahren und Vorrichtung zur Absicherung von Blockchiffren gegen Template-Attacken
DE10319435B4 (de) Verfahren zur Verarbeitung von Daten zum Schutz eines Softwareprogramms vor Rekonstruktion
EP3218894A1 (de) Verfahren zum testen und zum härten von softwareapplikationen
DE102013205544A1 (de) Vorrichtung und Verfahren zur Verarbeitung von Daten
DE102013213354A1 (de) Zufallsbitstromgenerator mit garantierter mindestperiode
DE102013213473A1 (de) Schaltungsanordnung und Betriebsverfahren hierfür
EP1664979B1 (de) Übergang zwischen maskierten repräsentationen eines wertes bei kryptographischen berechnungen
DE102007043083A1 (de) Verfahren und Vorrichtung zum Codieren von Datenworten
DE102018208851A1 (de) Vorrichtung und Verfahren zum Umwandeln von Eingangsbitfolgen
DE102013108424A1 (de) Verfahren zur Verschlüsselung von Zeichenketten
EP1887458A1 (de) Pseudo-Zufallszahlengenerator für eine Chipkarte
DE102009029749A1 (de) System zur Erzeugung beliebig langer randomisierter Bitlisten auf Rechnern im Normalbetrieb
EP1506473B1 (de) Ausspähungsgeschützte modulare inversion
EP3804209B1 (de) Verfahren mit safe-error-abwehrmassnahme
DE10201450B4 (de) Carry-Skip-Addierer für verschlüsselte Daten
DE102014117967A1 (de) Zufallspermutationsgenerator und Verfahren zum Generieren einer Zufallspermutationssequenz
DE10253285B4 (de) Verschleierung eines geheimen Wertes
EP3504616B1 (de) Modul und verfahren zur abgesicherten berechnung von mathematischen operationen
EP4325387A1 (de) Verfahren zum bereitstellen eines digitalen schlüssels
Klocker Beschäftigtendatenschutz im Zusammenhang mit KI-Anwendungen.
DE102004052196B4 (de) Ausspähungsgeschütztes Ausführen von Operationen unter Verwendung einer maskenunterstützenden Recheneinheit
EP1595356B1 (de) Erzeugen von ergebniswerten mit einer vorgegebenen eigenschaft
DE102015201430A1 (de) Intrinsische Authentifizierung von Programcode
DE102004052221B4 (de) Vorrichtung und Verfahren zum Anwenden einer Parität, um Daten zum Schutz zu verschlüsseln

Legal Events

Date Code Title Description
R163 Identified publications notified
R119 Application deemed withdrawn, or ip right lapsed, due to non-payment of renewal fee