TWI334573B - Application procedure processing methods and systems, and machine readable medium thereof - Google Patents

Description

1334573 IX. DESCRIPTION OF THE INVENTION: TECHNICAL FIELD OF THE INVENTION The present invention relates to an application processing method, and is specifically related to a method for protecting an application. [prior art] urce

When writing an application, the source code (s_Code) is usually written first, and the source code is compiled (Compile) to form an Object Code or a Library. Among them, the library is a collection of object codes. Since a complete application may use multiple libraries, in the link phase of the program compilation, the functions will be linked to each other and the location will be changed to become the final binary image. ). Figure 1 shows a conventional library link. As shown in the second figure, after the source code 110 is compiled into the library 11丨, it can be linked with the $^ libraries 120 and 130 to become a binary image. For some developers, the applications they develop are usually released to the customer through a library to provide the customer with the device provided by the developer. The customer can connect all the libraries and then become the image code and burn it into the storage unit of the device, such as read-only memory. It must be noted that if it is released to the client only by means of a library, the client will be able to easily parse the library through the debug and decompile tools to learn about the library. For example, Figure 2 shows the process of program execution in a binary image in a conventional memory. As shown in Fig. 2, the program Func_b is an application to be protected, and the client is not expected to perform any analysis and research on the program Func_b. Conventionally, when the program Func_a

Client's Docket N〇.:VIT07-0037 TT's Docket N〇:0608-A41186TW/Draft-Final/Yianhou/ 6 1334573 When the main body calls the program Func_b, the error detection tool can be used to find the entry point of the program Func_b, and then the program Func_b How to write. Therefore, in a known environment, it is very easy for a customer to use a library of the corresponding application on a device or platform provided by a non-developer, thereby impairing the intellectual property of the application. SUMMARY OF THE INVENTION In view of the above, the present invention provides an application processing method and system. An application processing method of an embodiment of the present invention. First, an application is compiled into at least one first object code. A link information is retrieved from the first object code such that the remaining first object code becomes a binary image. Providing at least one second object code to connect with the link information and the binary image through a functional interface or at an execution stage, receiving an access request through the functional interface, and correspondingly storing The request is to perform a binary image based on the link information through the function interface. An application processing method of an embodiment of the present invention. First, an application is compiled into at least one first object code. Obtaining at least one link symbol and at least one code code displacement by the first object code, and generating a link information table according to the link symbol and the code code displacement. At least one execution code and at least one constant data are obtained from the first object code, and a binary image is generated according to the execution code and the constant data. In one of the link stages of the program compilation, at least one second object code is linked to the binary information through a functional interface and a link information table. An application processing method of an embodiment of the present invention. First, an access request is received through a functional interface during an execution phase. Corresponding to the access requirement, accessing an application and a binary image in a security module through a functional interface

Client’s Docket N〇_:VIT07-0037 TTss Docket N〇:0608-A41186TW/Draft-FinalA"ianhou/ 1334573 Image. The application is compiled into at least one first object code. At least one link symbol and at least one code code displacement are obtained from the first object code, and the link information table is generated according to the link symbol and the code code displacement. At least one execution code and at least one constant data are obtained from the first object code, and the binary image is generated according to the execution code and the constant data. The application processing system of the embodiment of the invention comprises a security module and a functional interface. The security module includes one of the corresponding applications to link the information table with a binary image. The application is compiled into at least one first object code. At least one link symbol and at least one code displacement are obtained from the first object code, and the link information table is generated according to the link symbol and the code code displacement. At least one execution code and at least one constant data are obtained from the first object code, and the binary image is generated according to the execution code and the constant data. During the link phase of the program compilation, at least one second object code is linked to the binary image through the function interface and the link information table in the security module. The application processing system of the embodiment of the invention comprises a security module and a functional interface. The security module includes one of the corresponding applications to link the information table with a binary image. The application is compiled into at least one first object code. At least one link symbol and at least one code displacement are obtained from the first object code, and the link information table is generated according to the link symbol and the code code displacement. At least one execution code and at least one constant data are obtained from the first object code, and the binary image is generated according to the execution code and the constant data. In an implementation phase, an access request is received through the function interface, and the link information table and the binary image are accessed through the function interface corresponding to the access request. The above method of the present invention can be recorded in physical media through code

Client’s Docket N〇.:VIT07-0037 TT’s Docket N〇:0608-A41186TW/Draft-Final/Yianhou/ :. The device invented when the code was loaded by the machine and executed. The above-mentioned objects and features of the present invention will become more apparent from the following detailed description of the embodiments of the present invention. Figure 3 shows an embodiment of a processing system in accordance with an embodiment of the present invention. Interface 3U) and - ^ System _ includes a function to provide other object code / library and An No. 2: ^-" ’

Sr is linked and provides access during the execution phase. Female full module 320 includes a protection algorithm

Ifl矣rt, _ 1 is poor, ", Binary Image 323. The protection algorithm 321 is used to determine the relevant operational logic within the security model address 32, the details of which will be described later. The link information table 322 and the binary image 323 correspond to the application including the source code. The link information table 322 records the connection of the corresponding binary image 3, and the message. The unary image 323 records information such as the execution code of the corresponding application compiled. According to the link information recorded in the link information table 322, the address of the related symbol (Symb〇1) in the binary image 323 can be correctly known and executed correctly. The manner in which the link information table 322 and the binary image 323 are generated will be explained in FIG. Figure 4 shows an application processing method in accordance with an embodiment of the present invention. The application is compiled into at least one object code/function library as in step S410'. In step S420', all or part of the link information, such as the link symbol and the code code, are taken out from the object code/library, and the link information is

Client's Docket No.: VIT07-0037 TT s Docket N〇: 〇608-A41186TW/Drafl-FinaIA7iaiihou/ 9 1334573 Health Link Information Table 322. In some embodiments, the object code can be an executable connectable format (ETF) file, and the link information table can include one of the executable form files. In step S43, a binary image 323 is generated based on the execution code and the constant data in the remaining object code/bank. The link information table is encrypted as in step S44G'. It must be noted that in this embodiment, the link information table is encrypted. However, in some embodiments, it is only possible to decide whether to encrypt the link information table according to different needs. In step S450, the protection algorithm 321 , the link information table 322 and the second image 323 are encapsulated in the security module 32 ,, and in step S46 提供, the function $ , 丨 31 〇 ' is provided to provide other object codes/letters. The library and the security module 32 are connected; the == segment is linked 'and provides corresponding security during the execution phase: core, and 320 access. It is worth noting that the Wang 310 and the Security Module 'Group 320 are given to the customer = industry ^ can be a black box of the function module 320, the customer has no information about the security of each household. The inside of the hardware module 320 is shown in Fig. 5. The method according to the embodiment of the present invention is shown in Fig. 6. Figure 5 and Figure 6. Refer to the object code/function libraries 610 and 620 and the function at the same time in the program compilation. White and then 'step S510' through the interface 310 and the security module 320 into the ^ 1Q into the light '纟 °' to penetrate the other objects (6) library image of the person after the record will be corresponding to the interface The 31Q and the security module 320 write: / and set 'in step S520 to become the final binary image 630. "--Specific Bits in Money" Figure 7 shows an application access method in accordance with an embodiment of the present invention.

Client's Docket No.: VIT07-0037 IT's Docket N〇: 0608-A41186TW/Draft-FinalA^ianhou/ 1334573 FIG. 9 shows a seventh diagram and a ninth diagram of a ▲ according to an embodiment of the present invention. Order access. Please also refer to step = 71〇 ’ at the same time. * The implementation phase introduces the request through the function. > The idea is that the access request can be performed on at least one of the corresponding applications/binary

^ ± 夕付唬. Corresponding to the access request, in step S7M, the link information table 322 is deactivated, and in this embodiment, the j-bee 322 is encrypted at the time of establishment.

If the soil is in the middle, if the linked information table is under construction, the decryption action in step S720 can be = step: the milk donkey 'protection algorithm 321 is executed according to the link information table 322. The operation of the protection algorithm of the embodiment of the invention. In step S731, a corresponding one of the addresses is retrieved from the knot information table 322 according to the corresponding application/binary image 3 magic symbol. In step S732' = the value of the current program counter is stored in the stack. In step S733, the value of the program counter is changed to the displacement of the corresponding binary image 323. It must be reminded that if the binary image 323 has a basic address in the memory, the displacement of the corresponding binary image 323 must be added to the basic address. In step S734, the binary image 323 is executed, and the corresponding execution result is obtained. Thereafter, in step S735, the value of the original program counter is popped from the stack. After the end of the execution, as in step S740, the transfer is performed through the function interface 31; the result. Compared to Fig. 2, Fig. 10 shows the procedure of program execution in a binary image in a sensible body according to an embodiment of the present invention. As shown in Figure 10, the program Func-b is the application to be protected, and does not want the client to program

Client's Docket N〇.:VIT07-0037 TT’s Docket N〇:0608-A41186TW/Draft-Final/Yianhou/ 1334573

Func-b performs any analysis and research. When the program Func_a body needs to use Func-b, it can use the "Func_b" as a parameter to call the getFuncPtrbyAlg()" function. The getFuncPtrbyAlg()" function causes the protection algorithm 321 to be retrieved from the link information table 322. The displacement and address of the corresponding program Func_b are executed to the corresponding address.

The interface 310 and the binary image 323 separating the link information, the client will not be able to easily use the debug or decompile tool to find the entry point of the program Func_b, and can not study how the program Func_b is written. The method of the present invention, or a specific type or part thereof, may be included in a physical medium such as a floppy disk, a compact disc, a hard disk, or any other machine (for example, a computer readable computer). The storage medium, the center, and the code are loaded by a machine, such as a computer, and the machine is changed to the device of the present invention. The method and the method of the present invention can also be transmitted in a code type through a transmission medium such as a wire or a Wei, an optical fiber, or any transmission type, wherein the code is received and loaded by a machine such as a computer. At the time of execution, the machine becomes a unique device for applying specific logic circuits when it is used to implement the various applications of the present invention. Although the present invention has been disclosed in the above preferred embodiment by the above-described H and the present invention is defined, any one skilled in the art can make some changes and refinements without departing from the scope of the invention, and therefore the scope of the present invention is attached. The definition of the patent application scope shall prevail, and [Simplified description of the drawings] Fig. 1 is a schematic diagram showing the connection of the conventional library

Client's Docket N〇.:VIT07-0037 TT's Docket No:0608-A41186TW/Draft-Final/Yianhou/ 12 1334573 Figure 2 is a schematic diagram showing the execution of a program in a binary image in a conventional memory. Figure 3 is a schematic diagram showing an application processing system in accordance with an embodiment of the present invention. Figure 4 is a flow chart showing an application processing method in accordance with an embodiment of the present invention. Figure 5 is a flow chart showing an application linking method in accordance with an embodiment of the present invention. • Figure 6 is a schematic diagram showing a library connection in accordance with an embodiment of the present invention. Figure 7 is a flow chart showing an application-order access method in accordance with an embodiment of the present invention. Figure 8 is a flow chart showing the operation of the protection algorithm in accordance with an embodiment of the present invention. Figure 9 is a schematic diagram showing application access in accordance with an embodiment of the present invention. ® Figure 10 is a schematic diagram showing the execution of a program in a binary image in a memory in accordance with an embodiment of the present invention. [Main component symbol description] 110~ source code; 111, 120, 130~ library; 140~binary image; 300~ application processing system; 310~ function interface;

Client's Docket N〇.:VIT07-0037 TT5s Docket No:0608-A41186TW/Draft-FinaUYianhou/ 1334573 320~Security Module; 321~Protection Algorithm; 322~Link Information Sheet; 323~ Binary Image; S410, S420, ..., S460~ operation steps; S510, S520~ operation steps; 610, 620~ object code/function library; 630~ final binary image; • S710, S720, ..., S740~ operation steps; S731, S732, ..., S735 ~ operation steps.

Client’s Docket N〇.:VTT07-0037 TT’s Docket No:0608-A41186TW/Draft-Final/Yianhou/

Claims (1)

X. Application for patent scope · 1. The application processor obtains at least one - from 4, and includes the following steps: the first item is exhausted and at least one of the first object code is exhausted; the displacement is based on Even two.旒 旒 and at least - the code table I (4) miscellaneous code displacement generation - the link information is obtained from the first object, and the link information table is encapsulated according to the execution code and the constant code and the constant value A 疋 image, and a step-to-function interface, 杈仏 封装 封装 ( ( ( ( ( ( ( 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第 第In addition, the application processing method described in Item 1 of the H-Concentration is further included, and the access information request is accessed through the function interface, and the connection information table is further included in the second item. The method of processing the application according to item 3 of the patent application, and the following steps are further included in the application processing method according to the third aspect of the patent application: Retrieving a displacement corresponding to the binary image; and executing the binary image according to the displacement. 5. The application processing method according to claim 1, further comprising encrypting the link information table. Patent application The application processing method described in item 5, Cent's Docket No_: VIT〇7-〇〇37 TT s Docket No: 〇608-A41186TW/Draft-Final/Yianhou/ 15 The more package interface performs the following steps·· ~ Link the information table for decryption; and link the information table to execute the t-image. The i-Lai-Sui processing method, the horse system is compiled from at least one source code. The implementation can be connected to the format_) slot, and the link includes the symbol table of the executable connectable format slot. • An application processing system, including: the signal image = at least - the object code - the link And the at least one code 2 obtains at least a link displacement from the first object code to generate the link and obtains at least the code according to the link symbol and the code line code, 1, and from the first object code Performing the binary image:::枓' and according to the execution code and the constant data production, at least for the second object code and the connection table and the binary material in the security module Riding the link. , , , Lizhong =·γ dr range mentioned in item 9 The application processing system ' ” 忒 function; 丨 face receives an access request, and corresponds to 誃 = function interface storage (4) security model of the link ^ § fi table and Yan Xuan binary green Γ φ as claimed The application processing system described in Item 10, ..., the 4 function interface is based on the link f (information) (4) (4) U items should be _- / at Client s Docket Νο.: νιτ〇7-〇〇37 TT's Docket No^eOS^llSeTW/Draft-FanalA^ianhou/ 16 1334573, wherein the security module further includes a protection algorithm for retrieving a displacement of the corresponding binary image from the link information table, and according to the The displacement causes the binary image to be executed. 13. The application processing system of claim 9, wherein the link information table is further encrypted. 14. The application processing system of claim 13, wherein the function interface decrypts the link information table and executes the binary image according to the link information table. 15. The application processing system of claim 9, wherein the first object code is compiled from at least one source code. 16. The application processing system of claim 9, wherein the first object code is an executable connectable format (ETF) file, and the link information table further comprises the executable connectable A symbol table for one of the format files. 17. An application processing method comprising the steps of: receiving an access request through a functional interface; and accessing a security module through the functional interface corresponding to the access request and an application a binary image, wherein the application is compiled into at least one first object code, and at least one link symbol and at least one code code displacement are obtained by the first object code, and the link is generated according to the link symbol and the code code displacement And the information table, and obtaining at least one execution code and at least one constant data from the first object code, and generating the binary image according to the execution code and the constant data. 18. The application processing method of claim 17, further comprising performing the two Client's Docket No. by the function interface according to the link information table: VIT07-0037 TT's Docket N〇: 0608-A41186TW/ Draft-Final/Yianhou/ 17 yuan image. The method of processing, described in Item 18 of Fan Park, is to perform the binary image according to the displacement of the binary image corresponding to the application. The application processor described in item 7 of the French patent range, wherein the link information table is more encrypted. The application processor described in the 4G item of the method (4) further includes the following steps: decrypting the link information table; and executing the binary image according to the link information table. The application processing method described in Item 17 of the patent scope includes at least _ source code. Method, Fan (4) The application processor described in item 17 is connected to the executable code format (ETF) file, and 2 2 = executable symbol formatable slot. • An application processing system, including: - Two it mod 2 includes the corresponding - one of the applications linked to the information table and the version of the mountain p eight in the 5 Hai application is compiled to at least - the first object horse 'by the first object The code obtains at least a link symbol and at least one pass and a link symbol and the code code shift generates the link information 2 and obtains at least one execution code and at least one constant from the first object stone and according to the execution code The constant data produces the binary image; and Clienfs Docket No.: VIT07-0037 TT s Docket No: 0608-A41186TW/Draft-Fi .inal/Yianh〇u/ ^^4573 ,, 幽八力曲' claw 佼 佼An access request, and corresponding to the request, accessing the link f-table and the binary image through the function interface. 25. The application program of claim 24, wherein the function interface is based on the link information table to execute the binary image. 26. The application processing system of claim 25, wherein the security module further includes a protection algorithm for The second table retrieves the displacement of the binary image corresponding to the application. The displacement causes the binary image to be executed. 27. The application processing system of claim 24, wherein the link information table is further encrypted. The application processing system described in item 27 of the Silk Patent (10), and, in addition, the decryption of the linked information table by the function in the execution phase; and, according to the linked information table, Binary imagery. 29: The application processing system described in claim 24 of the application processing system described in claim 24 is an executable connectable format (etf) slot, and the connection, . The stomach wire is further packaged (4) executable red format type 2 machine; the readable medium 'storage-program is used to execute = make and reclaim processing method, the method comprises the following steps: :: brother - object code and at least one Second item code; Docket N〇.:VIT07-0037 Order* One-year-old Tsanghasaki loses (4) 梦 々 々 々 quot & & & & 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物 物The link symbol and the code shift generation - link ^ Chenfs Docket N〇.: VIT07-0037 1 XS Docicpf Μλ.λλλο A >» 1, ---- 19 1334573 table; at least one execution from the first object code a code and at least one constant data, and generating a binary image according to the execution code and the constant data; and encapsulating the link information table and the binary image, and providing a functional interface corresponding to the packaging step, wherein the second The object code can link the encapsulated information table and the binary image through the function interface. 32. A machine readable medium, storing a program for causing a device to perform an application processing method, the method comprising the steps of: receiving an access request through a functional interface; and corresponding to the access Requiring access to an application and a binary image in a security module through the function interface, wherein the application is compiled into at least one first object code, and at least one link symbol is obtained from the first object code Translating at least one code, and generating the link information table according to the link symbol and the code shift, and obtaining at least one execution code and at least one constant data from the first object code, and generating the constant data according to the execution code and the constant data The binary image. 33. An application processing method, comprising the steps of: obtaining at least one first object code; extracting a link information from the first object code, so that the remaining first object code becomes a binary image, and the program Compiling a link phase to provide at least one second object code to connect to the binary image via a functional interface or to receive an access request through the functional interface in an execution phase, and corresponding to the save The binary image is executed according to the link information through the function interface. Client’s Docket N〇.:VIT07-0037 TT's Docket N〇:0608-A41186TW/Draft-Final/Yianhou/