KR20170018744A - System and method for protecting code of application - Google Patents

Abstract

Disclosed is a content streaming service method and system for reducing communication costs. The method implemented through a computer may include the steps of: receiving an application program package in which files for an application are included, wherein the application program package includes files including intermediate language (IL) codes generated by compiling a code of the application and library files for providing an execution environment on an electronic device to execute the application according to the IL codes; encrypting at least one file among files including the IL codes; and adding a recovery file for decoding the at least one encrypted file to the application program package, wherein the recovery file includes a code for decoding the at least one encrypted file when the at least one encrypted file is transmitted through calling between the library files for executing the application in the electronic device. The present invention may encrypt a file including an execution code of an application, safely decrypt the encrypted file during operating of the application, and at the same time, prevent information used for decrypting the encrypted file from being exposed to a third client.

Description

SYSTEM AND METHOD FOR PROTECTING CODE OF APPLICATION [0002]

The following description relates to a system and method for protecting the code of an application.

An intermediate language (Intermediate Language or InterLanguage, IL) can refer to a language that goes through an intermediate language when a source language program is translated into a compiler to create a target language program. For example, if you change a high-level language program into an assembly language and then assemble it to create a machine language program, then the intermediate assembly language can be an intermediate language.

Korean Patent Laid-Open No. 10-2007-0067953 relates to an apparatus and method for converting an intermediate language of a mobile platform, which converts a mobile platform source code developed in C or C ++ into an intermediate language code required by an interpreter of a mobile communication terminal C / C ++ compiler and an intermediate language assembler for converting intermediate language codes into a format that is executed in an interpreter of a mobile communication terminal.

The code of an application that is converted to such an intermediate language is vulnerable to decompile due to its nature. For example, the code of an application programmed in a programming language such as C-sharp (C #) through a tool such as Unity may be compiled into an intermediate language such as a DLL (Dynamic Linking Library) And can be implemented in the framework of the electronic device. At this time, there is a problem that the application can be forged because the DLL can be decompiled according to the characteristics of the intermediate language, the code can be corrected, and the DLL can be compiled again.

In order to prevent such forgery and falsification, when an intermediate language type file is simply encrypted and provided to the client, the client's electronic apparatus can not execute the encrypted file and the application can not be operated. However, if the means for decrypting the encrypted file (or information, for example a decryption key) is provided to the client, the forgery and falsification problem of the application again appears.

A system capable of encrypting a file including executable code of an application and decrypting and executing a file that is securely encrypted at the time of running the application and at the same time preventing information for decrypting an encrypted file from being exposed to a third party or a client And methods.

A computer-implemented method, comprising: receiving an application package containing files for an application, the application package including an Intermediate Language (IL) code generated by compiling code of the application; Files and library files for providing an execution environment to the electronic device to execute the application in accordance with the intermediate language code); Encrypting at least one file of files comprising the intermediate language code; And adding a recovery file for decrypting the at least one encrypted file to the application package, wherein the recovery file comprises at least one of the at least one encrypted file, And a code for decrypting the at least one encrypted file if one encrypted file is delivered).

According to one aspect, receiving the application package further comprises receiving information about a file to encrypt, among files containing the intermediate language code, and encrypting the at least one file, And encrypts the file corresponding to the received information among the files including the code.

According to another aspect, the at least one file includes a header portion for the execution environment and a code portion for the application, and the step of encrypting the at least one file further comprises: And encrypts the encryption key.

According to another aspect of the present invention, the step of encrypting the at least one file may include encrypting the information included in the header part with a null value when encrypting the header part.

According to another aspect, the library files are stored in a first library file including code for loading files containing the intermediate language code and an intermediate language code through an Application Programming Interface (API) call to the first library file And a second library file including a code for reading and parsing a full buffer of files including the code, wherein the recovery file is stored in the first library file And a code for decrypting the at least one encrypted file by decrypting a full buffer of the at least one encrypted file read in response to the API call.

According to another aspect of the present invention, the recovery file hooks an IAT (Import Address Table) of the second library file including information on the API for the first library file, And a code for confirming the API call through the code.

According to another aspect, the method may further include transmitting the application package to which the recovery file has been added to the electronic device in response to a request from the electronic device through the network.

A computer-implemented method, comprising: receiving an application package including files for an application, the application package including an Intermediate Language (IL) code generated by compiling code of the application; At least one file encrypted and library files for providing an execution environment to the electronic device to execute the application in accordance with the intermediate language code, and a recovery file for decrypting the encrypted at least one file); And in the course of execution of the application, when the at least one encrypted file is transferred through a call between the library files for execution of the application according to the control of the code contained in the recovery file, And decrypting the encrypted file.

A system of a server comprising one or more processors, the one or more processors comprising: a receiving controller for controlling the server to receive an application package containing files for an application, the application package comprising: Files containing compiled and generated Intermediate Language (IL) code, and library files for providing an execution environment to the electronic device to execute the application according to the intermediate language code); An encryption control unit for controlling the server to encrypt at least one file among the files including the intermediate language code; And a file addition control unit for controlling the server to add a recovery file for decrypting the at least one encrypted file to the application program package, wherein the recovery file includes a file name of the library file for execution of the application in the electronic device And code for decrypting the at least one encrypted file when the at least one encrypted file is delivered via a call between the at least one encrypted file and the at least one encrypted file.

A system for an electronic device comprising one or more processors, the one or more processors comprising: a receiving controller for controlling the electronic device to receive an application package containing files for an application, the application package comprising: At least one file including an intermediate language code generated by compiling the code and encrypted and library files for providing an execution environment to the electronic device to execute the application according to the intermediate language code, And a recovery file for decrypting at least one encrypted file); And in the course of execution of the application, when the at least one encrypted file is transferred through a call between the library files for execution of the application according to the control of the code contained in the recovery file, And a decryption control unit for controlling the electronic apparatus to decrypt the encrypted file.

It is possible to encrypt and decrypt the file including the executable code of the application while safely encrypting the file at the time of running the application and at the same time to prevent the information for decrypting the encrypted file from being exposed to the third party or the client.

1 is a diagram illustrating an example of a network environment according to an embodiment of the present invention.
2 is a block diagram illustrating an internal configuration of an electronic device and a server according to an embodiment of the present invention.
FIG. 3 and FIG. 4 are diagrams illustrating an example of a process for protecting an application code in an embodiment of the present invention.
FIG. 5 is a diagram illustrating an example of a component that a processor of a server according to an exemplary embodiment of the present invention may include.
FIG. 6 is a flowchart illustrating an example of a method that a server according to an embodiment of the present invention can perform.
FIG. 7 is a diagram illustrating an example of components that a processor of an electronic device according to an embodiment of the present invention may include.
8 is a flowchart illustrating an example of a method that an electronic device according to an embodiment of the present invention can perform.

Hereinafter, embodiments will be described in detail with reference to the accompanying drawings.

1 is a diagram illustrating an example of a network environment according to an embodiment of the present invention. 1 shows an example in which a plurality of electronic devices 110, 120, 130, 140, a plurality of servers 150, 160, and a network 170 are included. 1, the number of electronic devices and the number of servers are not limited to those shown in FIG.

The plurality of electronic devices 110, 120, 130, 140 may be a fixed terminal or a mobile terminal implemented in a computing system. Examples of the plurality of electronic devices 110, 120, 130 and 140 include a smart phone, a mobile phone, a navigation device, a computer, a notebook, a digital broadcast terminal, a PDA (Personal Digital Assistants) ), And tablet PCs. For example, the electronic device 1 110 may communicate with other electronic devices 120, 130, 140 and / or the servers 150, 160 via the network 170 using a wireless or wired communication scheme.

The communication method is not limited, and may include a communication method using a communication network (for example, a mobile communication network, a wired Internet, a wireless Internet, a broadcasting network) that the network 170 may include, as well as a short-range wireless communication between the devices. For example, the network 170 may be a personal area network (LAN), a local area network (LAN), a campus area network (CAN), a metropolitan area network (MAN), a wide area network (WAN) , A network such as the Internet, and the like. The network 170 may also include any one or more of a network topology including a bus network, a star network, a ring network, a mesh network, a star-bus network, a tree or a hierarchical network, It is not limited.

Each of the servers 150 and 160 may communicate with a plurality of electronic devices 110, 120, 130 and 140 through a network 170 to provide commands, codes, files, contents, . ≪ / RTI >

In one example, the server 150 may provide a file for installation of an application to the electronic device 1 (110) connected via the network 170. [ In this case, the electronic device 1 (110) can install the application using the provided file. The server 160 is connected to the server 160 according to the control of an operating system (OS) and at least one program (for example, a browser or the installed application) I can receive contents. For example, when the electronic device 1 (110) transmits a service request message to the server 160 via the network 170 under the control of the application, the server 160 transmits a code corresponding to the service request message to the electronic device 1 The first electronic device 110 can provide contents to the user by displaying and displaying a screen according to the code according to the control of the application.

2 is a block diagram illustrating an internal configuration of an electronic device and a server according to an embodiment of the present invention. In FIG. 2, an internal configuration of the electronic device 1 (110) as an example of one electronic device and the server 150 as an example of one server will be described.

The electronic device 1 110 and the server 150 may include memories 211 and 221, processors 212 and 222, communication modules 213 and 223 and input / output interfaces 214 and 224. The memories 211 and 221 may be a computer-readable recording medium and may include a permanent mass storage device such as a random access memory (RAM), a read only memory (ROM), and a disk drive. The memory 211 and 221 may store an operating system and at least one program code (for example, a code for a browser installed in the electronic device 1 (110) or the above-described application). These software components may be loaded from a computer readable recording medium separate from the memories 211 and 221 using a drive mechanism. Such a computer-readable recording medium may include a computer-readable recording medium such as a floppy drive, a disk, a tape, a DVD / CD-ROM drive, and a memory card. In other embodiments, the software components may be loaded into memory 211, 221 via communication modules 213, 223 rather than a computer readable recording medium. For example, at least one program may be a program installed by a file distribution system (for example, the server 150 described above) that distributes installation files of developers or applications, May be loaded into the memory 211, 221 based on the application described above.

Processors 212 and 222 may be configured to process instructions of a computer program by performing basic arithmetic, logic, and input / output operations. The instructions may be provided to the processors 212 and 222 by the memories 211 and 221 or the communication modules 213 and 223. For example, the processor 212, 222 may be configured to execute a command received in accordance with a program code stored in a recording device, such as the memory 211, 221.

The communication modules 213 and 223 may provide functions for the electronic device 1 110 and the server 150 to communicate with each other through the network 170 and may provide functions for communicating with other electronic devices (for example, the electronic device 2 120) Or to communicate with another server (e.g., server 160). For example, when the processor 212 of the electronic device 1 110 receives a request (e.g., a streaming service request for the content) generated in accordance with a program code stored in a recording device such as the memory 211, To the server 150 via the network 170 in accordance with the < / RTI > Contents or files to be provided under the control of the processor 222 of the server 150 are transmitted to the communication module 223 of the electronic device 1 110 through the communication module 223 and the network 170 213 to the electronic device 1 (110). For example, the control signal or command of the server 150 received through the communication module 213 may be transmitted to the processor 212 or the memory 211, May be stored as a storage medium that may further include a < RTI ID = 0.0 >

The input / output interfaces 214 and 224 may be means for interfacing with the input / output device 215. For example, the input device may include a device such as a keyboard or a mouse, and the output device may include a device such as a display for displaying a communication session of the application. As another example, the input / output interface 214 may be a means for interfacing with a device having integrated functions for input and output, such as a touch screen. More specifically, the processor 212 of the electronic device 1 (110) uses the data provided by the server 150 or the electronic device 2 (120) in processing commands of the computer program loaded in the memory 211 A service screen or contents can be displayed on the display through the input / output interface 214. [

Also, in other embodiments, electronic device 1 110 and server 150 may include more components than the components of FIG. However, there is no need to clearly illustrate most prior art components. For example, electronic device 1 110 may be implemented to include at least some of the input / output devices 215 described above, or may include other components such as a transceiver, Global Positioning System (GPS) module, camera, .

FIG. 3 and FIG. 4 are diagrams illustrating an example of a process for protecting an application code in an embodiment of the present invention. FIG. 3 shows a process in which an Android application package (APK 300) of a game developed through a Unity tool is transmitted to the server 150. In Android, the code of the application written in the Unity tool can be compiled into a dynamic linking library (DLL). In FIG. 3, four DLL files (UnityEngine.dll 310, Assembly CSharp.dll 320, Assembly CSharp-firstpass.dll 330, and Assembly-UnityScript-firstpass.dll 340) And includes three library files (libmain.so (350), libmain.so (350), and libmain.so) 350 that operate to allow the code contained in the DLL files 310 to 340 to be executed in the mono-runtime environment of the mono framework, libunity.so (360) and libmono.so (370). The libmain.so (350) may include code for performing libunity.so (360) and libmono.so (370) to perform the initialization operation, and may be distributed in the unity tool. libunity.so 360 may include code to log each of the DLL files 310 to 340 to execute the game code and libmono.so 370 may include DLL files 310 to 340). ≪ / RTI > For example, the Android OS can include the Linux kernel, and the .NET framework is a virtual machine running on the Linux kernel that allows the code contained in the DLL files (310-340) to be played through the code contained in libunity.so You can provide an execution environment in which the code can be executed. Since these library files 350 to 370 are well known, a more detailed description will be omitted.

The server 150 may include a system for protecting the APK 300. The server 150 may encrypt at least one of the DLL files 310 to 340 included in the APK 300 when the APK 300 is received. Generally, a DLL file may include a .NET header portion and a code portion, and the server 150 may encrypt at least one of a .NET header portion and a code portion. For example, if the value of the .NET header part is replaced with a null value, it may become impossible to decompile the corresponding DLL file. Similarly, if the code portion is encrypted, the original code (the code before compilation) can not be obtained through decompilation. Accordingly, the server 150 can encrypt only the .NET header portion, encrypt only the code portion, or encrypt the .NET header portion and the code portion.

Figure 4 is a flow diagram of a method 400 that includes Assembly CSharp.dll 320 and Assembly-UnityScript-firstpass.dll 340 in Figure 3, including Encrypted Assembly CSharp.dll 410 and Encrypted Assembly-UnityScript- APK 400 is generated.

As described above, when the DLL file itself is encrypted, the client (for example, the electronic device 1 110) receiving the APK 400 can not execute the application because it can not read the game code from the DLL file. Therefore, the server 150 may add a recovery file (recovery.so (440) in FIG. 4) to the APK 400, which is a library file for decrypting the encrypted DLL file. In addition, a code (load recovery .so code 431 in FIG. 4) that can load the recovery file 440 into the libmain.so 350 so that the recovery.so 440 can be logged when the application is executed In addition, a new library file (libmain.so 430 in FIG. 4) can be created. As shown in FIG. 4, the APK 400 may include a new library file libmain.so 430 in place of the existing library file libmain.so 350.

At least one file is encrypted and the protected APK 400 may be transmitted directly from the server 150 to the electronic device 110 or may be transmitted to the electronic device 110 via a separate file distribution system.

The electronic device 1 (110) can execute the application according to the control of the codes included in the APK (400). Hereinafter, for the sake of convenience of explanation, an example in which the files perform a specific process will be described. Actually, the processor 212 of the electronic device 110 may perform the process according to the control of the codes included in the files have.

When an application is requested to be executed, libmain.so (430) can perform initialization operations by logging libunity.so (360) and libmono.so (370). Also, the libmain.so 430 can log the recovery.so (440) using the load recovery.so code 431 included in the libmain.so 430 to perform the initialization operation.

The recovery.so 440 hooks the libunity.so 360 to retrieve the encrypted DLL files 410 410, 420, 420 when the libmono.so 370 loads the DLL files 310, , 420) to decrypt the encrypted DLL files 410, 420. The decrypted DLL files 410, For example, libunity.so (360) reads the pool buffer of DLL files (310, 410, 330, 420) and calls API of libmono.so (370) Lt; / RTI > Generally, a DLL file has a Windows PE (Portable Executable) file format and can internally include a .Net header as described above. Such a DL file can be executed through an open source .Net framework (the above-mentioned mono framework), and it is subjected to a process of parsing a file format of PE (Portable Executable) and parsing .Net. This is done by calling libmono.so (370) API from libunity.so (360). For this, libunity.so (360) may include an IAT (Import Address Table), and recovery.so (440) hooks the IAT of libunity.so (360) so that libunity.so (360) It can be confirmed that the API of libmono.so (370) is called for loading 410 420. Recovery.so (440) can also decrypt the encrypted portion by looking up the .Net headers and code portions in the full buffer. For example, the .NET header of a DLL file starts with a certain value. Therefore, when loading the DLL file into the .NET Framework, recovery.so (440) can determine that the DLL file is encrypted and decrypt it if the .Net header does not start with the pre-set value.

Thus, while encrypting a file containing executable code of an application, a securely encrypted file can be decrypted and executed when the application is run. In particular, information for decoding is provided in the form of a library file written in a low-level language differently from a DLL, so that information for decryption can be prevented from being exposed to a client or a third party.

FIG. 5 is a diagram illustrating an example of a component that a server processor according to an exemplary embodiment of the present invention may include; FIG. 6 illustrates an example of a method that a server can perform according to an exemplary embodiment of the present invention; Fig. 5, the processor 222 of the server 150 may include a reception control unit 510, an encryption control unit 520, and a file addition control unit 530, and may selectively control the transmission control unit 540). The components of such processor 222 may control the server 150 to perform the steps 610 through 640 included in the method of Figure 6 and may include at least the operating system And can be implemented to operate through one program code. Step 640 may optionally be performed according to the embodiment.

In step 610, the server 150 may receive an application package containing files for the application. Here, the application package includes an electronic device (for example, electronic device 1 (110)) for executing an application according to an intermediate language code and files including an intermediate language (IL) And may include library files for providing an execution environment. For example, the application package may correspond to the APK 300 described in the embodiment of FIG. 3, and the files including the intermediate language code may correspond to the DLL files 310 to 340. The library files may also correspond to the library files 350 to 370 of FIG. The reception control unit 510 may control the server 150 to perform step 610. [

At this time, the file for encryption among the files included in the application package may be selected in the server 150, but may be selected by the developer. In this case, in step 610, the server 150 may further receive information on a file for encryption among the files including the intermediate language code. For example, the server 150 provides a web page including a first user interface for uploading an application package and a second user interface for selecting a file to be encrypted to developers who want to upload an application package . At this time, when a developer who has uploaded the application package through the first user interface selects a file to be encrypted through the second user interface, the information about the selected file may be further transmitted to the server 150.

The server 150 may be a system for encrypting a DLL file to receive and protect an application package for an already developed application. At this time, the server 150 may be a system of a developer of the application, a third party system that receives the application package from the developer and encrypts the DLL file, or receives the application package of the developer and distributes the file Distribution system.

At step 620, the server 150 may encrypt at least one of the files containing the intermediate language code. The encryption control unit 520 may control the server 150 to perform step 620. [ Each of the files containing the intermediate language code may include a header portion for the execution environment and a code portion for the application. In this case, the server 150 may encrypt at least one of the header portion and the code portion in step 620. As described above, if the header part is encrypted, it is impossible to decompile the intermediate language code. If the code part is encrypted, it is impossible to confirm the original source through decompilation. Encryption can also protect files containing intermediate language code. You can also encrypt both the header and code parts. In the case of encrypting the header part, the server 150 may encrypt the information included in the header part by changing it to a null value.

At step 630, the server 150 may add a recovery file for decryption of at least one encrypted file to the application package. Wherein the recovery file may include code for decrypting at least one encrypted file when at least one encrypted file is transferred via a call between library files for execution of an application on an electronic device. The file addition control unit 530 may control the server 150 to perform step 630. [

As described above, at least one encrypted file is used by the library files to load files containing the intermediate language code into the application's execution environment (e.g., the .NET Framework, the Mono Framework, or the CLR (Common Language Runtime) It is possible to decode the intermediate language code by allowing the electronic device to perform decoding according to the code included in the recovery file at the time of execution of the application, such as when at least one encrypted file is transferred through a call between the library files The information for decryption can be prevented from being exposed.

To this end, the library files include a first library file including code for loading files containing intermediate language code and a pool buffer of files containing intermediate language code through API (Application Programming Interface) and a second library file including code for reading and parsing a full buffer. In addition, the recovery file decrypts the full buffer of at least one encrypted file read according to the API call of the first library file through the code included in the second library file to decrypt the at least one encrypted file ≪ / RTI > For example, the first library file may correspond to libmono.so (370) described with reference to FIGS. 3 and 4, the second library file may correspond to libunity.so (360), and the recovery file may correspond to recovery.so (440).

More specifically, the recovery file hooks an IAT (Import Address Table) of a second library file including information on an API for the first library file to check API calls through the code included in the second library file ≪ / RTI > The IAT can be generated as the second library file reads the file containing the intermediate language code.

In step 640, the server 150 may transmit the application package to which the recovery file has been added to the electronic device according to a request from the electronic device through the network. The transmission control unit 540 may control the server 150 to perform step 640. [ The application package transmitted to the electronic device may be installed in the electronic device, and the decryption process described above may be performed in the electronic device when the application is executed (executed).

FIG. 7 is a diagram illustrating an example of a component that a processor of an electronic device according to an embodiment of the present invention can include; FIG. 8 is a flowchart illustrating a method of an electronic device according to an exemplary embodiment of the present invention; Fig. As shown in FIG. 7, the processor 212 of the electronic device 110 may include a reception control unit 710 and a decryption control unit 720. The components of this processor 212 may control electronic device 1 110 to perform steps 810 and 820 that are included in the method of Figure 8, And at least one program code. At this time, at least one program code may include code included in the application package received by the first electronic device 110 in step 810 for processing of step 820. [

In step 810, the electronic device 1 (110) may receive an application package including files for the application. The reception control unit 710 may control the first electronic device 110 to perform step 810. [ At this time, the application package includes an intermediate language (IL) code generated by compiling the application code, providing an execution environment to the electronic device to execute the application according to the encrypted at least one file and the intermediate language code And a recovery file for decrypting the encrypted at least one file.

In step 820, when at least one encrypted file is transferred through the call between the library files for execution of the application according to the control of the code included in the recovery file in the course of execution of the application Lt; / RTI > can decrypt at least one encrypted file.

As described above, the library files include a first library file containing code for loading files containing intermediate language codes and a second library file containing files containing intermediate language codes through API (Application Programming Interface) calls to the first library file And a second library file including code for reading and parsing a full buffer. At this time, in step 820, the electronic device 110 transmits a full buffer for at least one encrypted file read according to the API call of the first library file through the code included in the second library file It is possible to decrypt at least one encrypted file in accordance with the control of the code included in the recovery file. In other words, in the execution of the application, files including the intermediate language code can be loaded into the execution environment by calling the API of the first library file through the second library file. At this time, the electronic device 1 (110) Decrypt the encrypted file by decrypting the full buffer for at least one encrypted file to be loaded into the execution environment under the control of the containing code. At least one encrypted file has already been described in which at least one of the header portion and the code portion is an encrypted file, and the electronic device 1 (110) can decrypt the encrypted portion under the control of the code included in the recovery file.

Also, the electronic device 1 (110) hooks the IAT (Import Address Table) of the second library file including the information about the API for the first library file under the control of the code included in the recovery file, You can see the API calls through the code that the library file contains.

Also, the electronic device 1 (110) may check whether or not at least one encrypted file is encrypted according to whether or not the header portion of at least one encrypted file starts with a predetermined value. As described above, the header of the files such as the DLL file starts with a preset value, and it can be checked whether or not the file is encrypted according to whether the header starts with a predetermined value.

As described above, according to the embodiments of the present invention, it is possible to encrypt and decrypt a file including the executable code of the application while safely encrypting the file when the application is run, and at the same time, It is possible to prevent exposure to the client.

The apparatus described above may be implemented as a hardware component, a software component, and / or a combination of hardware components and software components. For example, the apparatus and components described in the embodiments may be implemented within a computer system, such as, for example, a processor, a controller, an arithmetic logic unit (ALU), a digital signal processor, a microcomputer, a field programmable gate array (FPGA) , A programmable logic unit (PLU), a microprocessor, or any other device capable of executing and responding to instructions. The processing device may execute an operating system (OS) and one or more software applications running on the operating system. The processing device may also access, store, manipulate, process, and generate data in response to execution of the software. For ease of understanding, the processing apparatus may be described as being used singly, but those skilled in the art will recognize that the processing apparatus may have a plurality of processing elements and / As shown in FIG. For example, the processing unit may comprise a plurality of processors or one processor and one controller. Other processing configurations are also possible, such as a parallel processor.

The software may include a computer program, code, instructions, or a combination of one or more of the foregoing, and may be configured to configure the processing device to operate as desired or to process it collectively or collectively Device can be commanded. The software and / or data may be in the form of any type of machine, component, physical device, virtual equipment, computer storage media, or device , Or may be permanently or temporarily embodied in a transmitted signal wave. The software may be distributed over a networked computer system and stored or executed in a distributed manner. The software and data may be stored on one or more computer readable recording media.

The method according to an embodiment may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer-readable medium. The computer-readable medium may include program instructions, data files, data structures, and the like, alone or in combination. The program instructions to be recorded on the medium may be those specially designed and configured for the embodiments or may be available to those skilled in the art of computer software. Examples of computer-readable media include magnetic media such as hard disks, floppy disks and magnetic tape; optical media such as CD-ROMs and DVDs; magnetic media such as floppy disks; Magneto-optical media, and hardware devices specifically configured to store and execute program instructions such as ROM, RAM, flash memory, and the like. Examples of program instructions include machine language code such as those produced by a compiler, as well as high-level language code that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the embodiments, and vice versa.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments. For example, it is to be understood that the techniques described may be performed in a different order than the described methods, and / or that components of the described systems, structures, devices, circuits, Lt; / RTI > or equivalents, even if it is replaced or replaced.

Therefore, other implementations, other embodiments, and equivalents to the claims are also within the scope of the following claims.

Claims (20)

In a computer implemented method,
The method comprising: receiving an application package including files for an application, the application package including: files including intermediate language code generated by compiling the application code; And library files for providing an execution environment to the electronic device to execute the application;
Encrypting at least one file of files comprising the intermediate language code; And
Adding a recovery file for decrypting the at least one encrypted file to the application package, wherein the recovery file comprises at least one of the at least one The code for decrypting the at least one encrypted file when the encrypted file of the at least one encrypted file is transmitted,
Lt; RTI ID = 0.0 > 1, < / RTI > The method according to claim 1,
Wherein the receiving the application package comprises:
Further receiving information on a file for encryption among the files including the intermediate language code,
Wherein encrypting the at least one file comprises:
And encrypting the file corresponding to the further received one of the files comprising the intermediate language code. The method according to claim 1,
Wherein the at least one file includes a header portion for the execution environment and a code portion for the application,
Wherein encrypting the at least one file comprises:
And at least one of the header portion and the code portion is encrypted. The method of claim 3,
Wherein encrypting the at least one file comprises:
Wherein when encrypting the header part, the information included in the header part is changed to a null value and encrypted. The method according to claim 1,
Wherein the library files include a first library file including code for loading files containing the intermediate language code and a second library file containing an intermediate language code through an Application Programming Interface (API) call to the first library file A second library file containing code for reading and parsing a full buffer,
Wherein the recovery file decrypts a full buffer for the at least one encrypted file that is read according to an API call of the first library file through a code included in the second library file, Lt; RTI ID = 0.0 > a < / RTI > file. 6. The method of claim 5,
Wherein the recovery file hooks an IAT (Import Address Table) of the second library file including information on an API for the first library file so that the API call ≪ / RTI > wherein the computer-readable medium comprises code for identifying the computer system. The method according to claim 1,
Transmitting the application program package to which the recovery file has been added to the electronic device in response to a request from the electronic device through the network
Lt; RTI ID = 0.0 > 1, < / RTI > In a computer implemented method,
The method comprising the steps of: receiving an application package including files for an application, the application package including at least one file including an intermediate language (IL) code generated by compiling code of the application, A library file for providing an execution environment to the electronic device to execute the application according to an intermediate language code, and a recovery file for decrypting the encrypted at least one file; And
Wherein in the execution of the application, when the at least one encrypted file is transferred through a call between the library files for execution of the application according to control of the code contained in the recovery file, The step of decrypting the file
Lt; RTI ID = 0.0 > 1, < / RTI > 9. The method of claim 8,
Wherein the library files include a first library file including code for loading files containing the intermediate language code and a second library file containing an intermediate language code through an Application Programming Interface (API) call to the first library file A second library file containing code for reading and parsing a full buffer,
Wherein the step of decrypting comprises:
A full buffer for the at least one encrypted file that is read in response to an API call of the first library file through a code included in the second library file is controlled according to control of a code included in the recovery file And decrypting the at least one encrypted file to decrypt the at least one encrypted file. 10. The method of claim 9,
Wherein the step of decrypting comprises:
Hooks an IAT (Import Address Table) of the second library file including information on the API for the first library file under the control of the code included in the recovery file, so that the second library file is included Said API call is made via a code that is executed by the processor. 9. The method of claim 8,
Wherein the step of decrypting comprises:
Determining whether the at least one encrypted file is encrypted according to whether a header portion of the at least one encrypted file begins with a predetermined value. A computer-readable recording medium having recorded therein a program for executing the method according to any one of claims 1 to 11. A system of a server comprising one or more processors,
The one or more processors,
A reception control unit for controlling the server to receive an application package including files for an application, the application package including: files including intermediate language (IL) codes generated by compiling code of the application; And library files for providing an execution environment to the electronic device to execute the application according to the intermediate language code;
An encryption control unit for controlling the server to encrypt at least one file among the files including the intermediate language code; And
A file addition control section for controlling the server to add a recovery file for decrypting the at least one encrypted file to the application program package, the recovery file including at least one encrypted file between the library files for execution of the application in the electronic device Said code for decrypting said at least one encrypted file when said at least one encrypted file is delivered via a call to said at least one encrypted file,
≪ / RTI > 14. The method of claim 13,
The reception control unit,
Controlling the server to further receive information on a file for encryption among files including the intermediate language code,
The encryption control unit,
And controls the server to encrypt a file corresponding to the more received information among the files including the intermediate language code. 14. The method of claim 13,
Wherein the at least one file includes a header portion for the execution environment and a code portion for the application,
The encryption control unit,
And to control the server to encrypt at least one of the header portion and the code portion. 14. The method of claim 13,
Wherein the library files include a first library file including code for loading files containing the intermediate language code and a second library file containing an intermediate language code through an Application Programming Interface (API) call to the first library file A second library file containing code for reading and parsing a full buffer,
Wherein the recovery file decrypts a full buffer for the at least one encrypted file that is read according to an API call of the first library file through a code included in the second library file, And decrypting the encrypted file. 14. The method of claim 13,
A transmission control section for controlling the server to transmit the application program package to which the recovery file has been added to the electronic device in response to a request from the electronic device via the network,
≪ / RTI > A system of an electronic device comprising one or more processors,
The one or more processors,
A reception control unit for controlling the electronic equipment to receive an application package including files for an application, the application package including an intermediate language (IL) code generated by compiling code of the application, And a recovery file for decrypting the encrypted at least one file, and library files for providing an execution environment to the electronic device to execute the application in accordance with the intermediate language code; And
Wherein in the execution of the application, when the at least one encrypted file is transferred through a call between the library files for execution of the application according to control of the code contained in the recovery file, A decryption control unit for controlling the electronic apparatus to decrypt the file,
≪ / RTI > 19. The method of claim 18,
Wherein the library files include a first library file including code for loading files containing the intermediate language code and a second library file containing an intermediate language code through an Application Programming Interface (API) call to the first library file A second library file containing code for reading and parsing a full buffer,
Wherein the decoding control unit comprises:
A full buffer for the at least one encrypted file that is read in response to an API call of the first library file through a code included in the second library file is controlled according to control of a code included in the recovery file And decrypts the at least one encrypted file to decrypt the at least one encrypted file. 19. The method of claim 18,
Wherein the decoding control unit comprises:
Wherein the at least one encrypted file is encrypted based on whether a header portion of the at least one encrypted file starts with a predetermined value.

Images