ES2545974B1 - Sistema de protección automático y personalizado para aplicaciones móviles - Google Patents

Sistema de protección automático y personalizado para aplicaciones móviles Download PDF

Info

Publication number
ES2545974B1
ES2545974B1 ES201400211A ES201400211A ES2545974B1 ES 2545974 B1 ES2545974 B1 ES 2545974B1 ES 201400211 A ES201400211 A ES 201400211A ES 201400211 A ES201400211 A ES 201400211A ES 2545974 B1 ES2545974 B1 ES 2545974B1
Authority
ES
Spain
Prior art keywords
software application
mobile
entity
automatic
protection system
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Active
Application number
ES201400211A
Other languages
English (en)
Other versions
ES2545974A1 (es
Inventor
Carlos Alberto Pérez Lafuente
Julio SAN JOSÉ SÁNCHEZ
Imanol GARCÍA MURGA
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Bankinter SA
Seglan SL
Original Assignee
Bankinter SA
Seglan SL
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority to ES201400211A priority Critical patent/ES2545974B1/es
Application filed by Bankinter SA, Seglan SL filed Critical Bankinter SA
Priority to PCT/EP2015/054428 priority patent/WO2015139950A1/en
Priority to DK15709871.6T priority patent/DK3120280T3/da
Priority to PL15709871T priority patent/PL3120280T3/pl
Priority to US15/125,610 priority patent/US10616262B2/en
Priority to PT157098716T priority patent/PT3120280T/pt
Priority to EP15709871.6A priority patent/EP3120280B1/en
Publication of ES2545974A1 publication Critical patent/ES2545974A1/es
Application granted granted Critical
Publication of ES2545974B1 publication Critical patent/ES2545974B1/es
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/12—Protecting executable software
    • G06F21/14—Protecting executable software against software analysis or reverse engineering, e.g. by obfuscation
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/52—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
    • G06F21/54—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow by adding security routines or objects to programs
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/14—Network architectures or network communication protocols for network security for detecting or protecting against malicious traffic
    • H04L63/1441—Countermeasures against malicious traffic
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/20—Network architectures or network communication protocols for network security for managing network security; network security policies in general
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/34—Network arrangements or protocols for supporting network services or applications involving the movement of software or configuration parameters 
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/02—Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/30—Security of mobile devices; Security of mobile applications
    • H04W12/37—Managing security policies for mobile devices or for controlling mobile applications
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
    • H04W4/50—Service provisioning or reconfiguring
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L2209/00—Additional information or applications relating to cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
    • H04L2209/16—Obfuscation or hiding, e.g. involving white box

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Software Systems (AREA)
  • Signal Processing (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Technology Law (AREA)
  • Multimedia (AREA)
  • Computing Systems (AREA)
  • Telephone Function (AREA)
  • Stored Programmes (AREA)
  • Information Transfer Between Computers (AREA)
  • Facsimiles In General (AREA)

Abstract

Se describe un método para generar automáticamente aplicaciones de software de dispositivos móviles, estando cada una personalizada de manera diferente en términos de parámetros de seguridad y/o reglas de ofuscación, utilizando un conjunto de registros de entrada de una primera entidad, conteniendo cada registro de entrada al menos un identificador único utilizado para generar un registro de personalización de salida diferente de otro registro de salida. Una segunda entidad utiliza al menos parte de los datos del registro de salida, una réplica genérica de la aplicación de software de dispositivo móvil y software de ofuscación para generar una aplicación de software móvil protegida que está asociada al registro de salida y al menos un identificador único. Un usuario solicita una réplica de la aplicación de software móvil a la primera entidad y una aplicación de software móvil protegida es descargada en un dispositivo móvil del usuario.

Description

imagen1
imagen2
imagen3
imagen4
imagen5
imagen6
imagen7
imagen8
imagen9
imagen10
imagen11
imagen12
imagen13
imagen14
imagen15
imagen16
imagen17
imagen18
imagen19
imagen20
imagen21
imagen22
imagen23
imagen24
imagen25
imagen26
imagen27
imagen28
imagen29
imagen30
imagen31
imagen32
imagen33
imagen34
imagen35
imagen36
imagen37
imagen38
imagen39
imagen40
imagen41
imagen42
imagen43
imagen44
imagen45
imagen46
imagen47

Claims (1)

  1. imagen1
    imagen2
    imagen3
    imagen4
    imagen5
    imagen6
    imagen7
ES201400211A 2014-03-17 2014-03-17 Sistema de protección automático y personalizado para aplicaciones móviles Active ES2545974B1 (es)

Priority Applications (7)

Application Number Priority Date Filing Date Title
ES201400211A ES2545974B1 (es) 2014-03-17 2014-03-17 Sistema de protección automático y personalizado para aplicaciones móviles
DK15709871.6T DK3120280T3 (da) 2014-03-17 2015-03-03 Automatiseret og personaliseret beskyttelsessystem til mobile applikationer
PL15709871T PL3120280T3 (pl) 2014-03-17 2015-03-03 Zautomatyzowany i spersonalizowany system zabezpieczeń dla aplikacji mobilnych
US15/125,610 US10616262B2 (en) 2014-03-17 2015-03-03 Automated and personalized protection system for mobile applications
PCT/EP2015/054428 WO2015139950A1 (en) 2014-03-17 2015-03-03 Automated and personalized protection system for mobile applications
PT157098716T PT3120280T (pt) 2014-03-17 2015-03-03 Sistema de proteção automatizado e personalizado para aplicações móveis
EP15709871.6A EP3120280B1 (en) 2014-03-17 2015-03-03 Automated and personalized protection system for mobile applications

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
ES201400211A ES2545974B1 (es) 2014-03-17 2014-03-17 Sistema de protección automático y personalizado para aplicaciones móviles

Publications (2)

Publication Number Publication Date
ES2545974A1 ES2545974A1 (es) 2015-09-17
ES2545974B1 true ES2545974B1 (es) 2016-04-27

Family

ID=52682679

Family Applications (1)

Application Number Title Priority Date Filing Date
ES201400211A Active ES2545974B1 (es) 2014-03-17 2014-03-17 Sistema de protección automático y personalizado para aplicaciones móviles

Country Status (7)

Country Link
US (1) US10616262B2 (es)
EP (1) EP3120280B1 (es)
DK (1) DK3120280T3 (es)
ES (1) ES2545974B1 (es)
PL (1) PL3120280T3 (es)
PT (1) PT3120280T (es)
WO (1) WO2015139950A1 (es)

Families Citing this family (7)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN105453622B (zh) * 2014-06-03 2019-05-28 华为技术有限公司 一种路由设置方法及终端设备
US12248560B2 (en) * 2016-03-07 2025-03-11 Crowdstrike, Inc. Hypervisor-based redirection of system calls and interrupt-based task offloading
US12339979B2 (en) 2016-03-07 2025-06-24 Crowdstrike, Inc. Hypervisor-based interception of memory and register accesses
US10496814B2 (en) * 2016-03-07 2019-12-03 Intertrust Technologies Corporation Software integrity checking systems and methods
ES2814877T3 (es) * 2016-07-11 2021-03-29 Afirma Consulting & Tech S L Protección de seguridad de aplicaciones de dispositivos móviles basada en personalización y vinculación segura de dominios de código
US11456855B2 (en) * 2019-10-17 2022-09-27 Arm Limited Obfuscating data at-transit
US11790103B2 (en) * 2020-09-29 2023-10-17 Citrix Systems, Inc. Adaptive data loss prevention

Family Cites Families (32)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20010042099A1 (en) * 2000-02-02 2001-11-15 Doongo Technologies, Inc. Apparatus and methods for optimizing traffic volume in wireless email communications
US7054443B1 (en) * 2000-03-27 2006-05-30 Microsoft Corporation System and method for protecting digital goods using random and automatic code obfuscation
WO2003003169A2 (en) * 2001-06-28 2003-01-09 Cloakware Corporation Secure method and system for biometric verification
US7822688B2 (en) * 2002-08-08 2010-10-26 Fujitsu Limited Wireless wallet
GB0318000D0 (en) * 2003-07-31 2003-09-03 Ncr Int Inc Mobile applications
US20050069138A1 (en) * 2003-09-25 2005-03-31 Sun Microsystems, Inc., A Delaware Corporation Application program obfuscation
US20060020883A1 (en) * 2004-05-28 2006-01-26 Microsoft Corporation Web page personalization
JP4918544B2 (ja) * 2005-10-28 2012-04-18 パナソニック株式会社 難読化評価方法、難読化評価装置、難読化評価プログラム、記憶媒体および集積回路
US20080059605A1 (en) * 2006-01-20 2008-03-06 Shaul Shalev Systems and methods for operating communication processes using a personalized communication web server
WO2008034900A1 (en) * 2006-09-21 2008-03-27 Boesgaard Soerensen Hans Marti Fabrication of computer executable program files from source code
US8468351B2 (en) * 2006-12-15 2013-06-18 Codesealer Aps Digital data authentication
WO2008132670A1 (en) * 2007-04-25 2008-11-06 Fireflight (Pty) Ltd Method and system for installing a software application on a mobile computing device
GB0714622D0 (en) * 2007-07-26 2007-09-05 Affle Ltd Application generation system and method
EP2174472A2 (fr) * 2007-07-27 2010-04-14 Goojet Procede et dispositif de creation d'applications informatiques
US8176337B2 (en) * 2008-03-12 2012-05-08 Apple Inc. Computer object code obfuscation using boot installation
US9361636B2 (en) * 2008-05-20 2016-06-07 Microsoft Technology Licensing, Llc Creating, managing, and provisioning packages of online applications
US8522354B2 (en) * 2008-05-24 2013-08-27 Via Technologies, Inc. Microprocessor apparatus for secure on-die real-time clock
US8406748B2 (en) * 2009-01-28 2013-03-26 Headwater Partners I Llc Adaptive ambient services
US20090327091A1 (en) * 2008-06-26 2009-12-31 Microsoft Corporation License management for software products
FI121829B (fi) * 2009-06-18 2011-04-29 Pekka Aarne Rehtijaervi Räätälöidyn sovelluksen tuottaminen käyttäjän päätelaitteelle
FR2951343A1 (fr) * 2009-10-14 2011-04-15 Alcatel Lucent Gestion de dispositif de communication a travers un reseau de telecommunications
KR101097103B1 (ko) * 2009-12-22 2011-12-22 한국저작권위원회 소프트웨어 소스코드의 유출을 방지하기 위한 시스템 및 방법
US9554754B2 (en) * 2010-01-08 2017-01-31 Jeffrey Ruby System, method and computer program for weight, lifestyle and/or disease management integrating nutrition, exercise and behaviour management
US20110295708A1 (en) * 2010-05-25 2011-12-01 beonSoft Inc. Systems and methods for providing software rental services to devices connected to a network
FI20106335A0 (fi) * 2010-12-17 2010-12-17 Pocketsoft Oy Räätälöidyn sovelluksen tuottaminen käyttäjän päätelaitteelle
FI20106336A0 (fi) * 2010-12-17 2010-12-17 Pocketsoft Oy Räätälöidyn sovelluksen tuottaminen käyttäjän päätelaitteelle
US9134969B2 (en) * 2011-12-13 2015-09-15 Ipar, Llc Computer-implemented systems and methods for providing consistent application generation
BR112014032554A2 (pt) * 2012-06-25 2017-06-27 Lg Electronics Inc aparelho e método para processamento de um serviço interativo
US9378026B2 (en) * 2012-07-27 2016-06-28 Daniel A. Dooley Customizable application
US8887128B2 (en) * 2012-12-17 2014-11-11 Sas Institute Inc. Computer-implemented systems and methods for automated generation of a customized software product
US9380040B1 (en) * 2013-07-11 2016-06-28 Parallels IP Holdings GmbH Method for downloading preauthorized applications to desktop computer using secure connection
US20150264423A1 (en) * 2014-03-11 2015-09-17 Telefonaktiebolaget L M Ericsson (Publ) Methods and systems for dynamic runtime generation of customized applications

Also Published As

Publication number Publication date
US20170006057A1 (en) 2017-01-05
PT3120280T (pt) 2019-11-27
PL3120280T3 (pl) 2020-04-30
WO2015139950A1 (en) 2015-09-24
ES2545974A1 (es) 2015-09-17
EP3120280A1 (en) 2017-01-25
US10616262B2 (en) 2020-04-07
DK3120280T3 (da) 2020-02-17
EP3120280B1 (en) 2019-11-13

Similar Documents

Publication Publication Date Title
ES2545974B1 (es) Sistema de protección automático y personalizado para aplicaciones móviles
MX2024014699A (es) Sistema distribuido de procesamiento y autenticacion de transacciones.
CL2018002364A1 (es) Sistema universal de tokenización para criptomonedas basadas en cadena de bloques.
EP3451577A4 (en) DATA PROCESSING DEVICE, AUTHENTICATION SYSTEM AND AUTHENTICATION METHOD
Al-Gharabli et al. The existence and the asymptotic behavior of a plate equation with frictional damping and a logarithmic source term
EP3855324A4 (en) ASSOCIATIVE RECOMMENDATION PROCESS AND APPARATUS, ASSOCIATED COMPUTER DEVICE AND STORAGE MEDIA
EP3724880A4 (en) TECHNIQUES FOR ACCESSING A SELF-SELECTING STORAGE DEVICE
WO2016049636A3 (en) Remote server encrypted data provisioning system and methods
MX379534B (es) Métodos y sistemas para alertar a los usuarios con respecto a la disponibilidad de contenido sin consumir.
MX2015004848A (es) Metodo que se relaciona con granularidad de presencia con realidad aumentada.
EP3653306A4 (en) ATOMIZING DISC, ATOMIZING DEVICE WITH IT AND DRONE
MX373695B (es) Sistema de gestion de proyecto que proporciona una interaccion optimizada con modelos digitales.
EP3570215A4 (en) DOCUMENT VERIFICATION METHOD, DEVICE, ELECTRONIC DEVICE, AND INFORMATION MEDIUM
EP3402136A4 (en) INFORMATION INTERACTION PROCEDURE, CLIENT AND DEVICE
EP3754608A4 (en) TARGET MONITORING PROCESS, COMPUTER DEVICE AND STORAGE MEDIA
EP3796726A4 (en) RANDOM ACCESS PROCESS AND DEVICE, STORAGE MEDIA AND ELECTRONIC DEVICE
EP3624006A4 (en) IMAGE PROCESSING, DEVICE, COMPUTER-READABLE STORAGE MEDIA AND ELECTRONIC DEVICE
EP3823237A4 (en) PRIVACY DATA REPORTING PROCESS, STORAGE DEVICE AND MEDIA
WO2017209967A3 (en) Apparatus and method for preventing file access by nodes of a protected system
EP3502939A4 (en) AUTHENTICATION PROCEDURE BASED ON A SCENE OF VIRTUAL REALITY, VIRTUAL REALITY DEVICE AND STORAGE MEDIUM
EP3745342A4 (en) DATA STORAGE PROCESS, APPARATUS AND DEVICE, DATA VERIFICATION PROCESS, APPARATUS AND DEVICE AND MEDIA
JP2017049979A5 (es)
EP3407020A4 (en) MAP-BASED NAVIGATION PROCESS AND DEVICE AND STORAGE MEDIUM
EP3713141A4 (en) RESOURCE CONFIGURATION METHOD AND DEVICE, AND COMPUTER STORAGE MEDIA
EP3355511A4 (en) INFORMATION REGISTRATION AND AUTHENTICATION PROCESS AND DEVICE

Legal Events

Date Code Title Description
FG2A Definitive protection

Ref document number: 2545974

Country of ref document: ES

Kind code of ref document: B1

Effective date: 20160427