专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明授权

US10318271B2 Updating software components in a program 有权
公开(公告)号：US10318271B2
公开(公告)日：2019-06-11
申请号：US15426090
申请日：2017-02-07
申请人： Clifford Liem , Hongrui Dong , Sam Martin , Yuan Xiang Gu , Michael Wiener
发明人： Clifford Liem , Hongrui Dong , Sam Martin , Yuan Xiang Gu , Michael Wiener
IPC分类号： G06F8/65 , G06F21/57 , G06F8/656 , G06F9/445
摘要： A method and system for renewing software at the component-level is provided. A client program includes a base component for loading a software component into at least one loadable region of the program to update the program. Code in the software component is for writing state data associating the state of the update in storage, upon execution of the software component, and testing the state data to verify condition of the updated program and disallowing rollback and roll-forward attacks, the state data comprising hash chain values. The state data for verifying the correctness of the updated program is entangled with application data used for the program functionality. A server includes: an update pool having a plurality of software updates deployed in each client, and a policy control for monitoring and controlling at least one of: the length of time the client runs until the software update is invoked, a chain of the updates; and the granularity of the update.

2. 发明授权

US09588756B2 Updating software components in a program 有权
标题翻译：在程序中更新软件组件
公开(公告)号：US09588756B2
公开(公告)日：2017-03-07
申请号：US14387215
申请日：2012-03-22
申请人： Clifford Liem , Hongrui Dong , Sam Martin , Yuan Xiang Gu , Michael Weiner
发明人： Clifford Liem , Hongrui Dong , Sam Martin , Yuan Xiang Gu , Michael Weiner
IPC分类号： G06F9/44 , G06F9/445 , G06F21/57
CPC分类号： G06F8/65 , G06F8/656 , G06F8/658 , G06F9/44521 , G06F21/57 , G06F21/572
摘要： A method and system for renewing software at the component-level is provided. A client program includes a base component for loading a software component into at least one loadable region of the program to update the program. Code in the software component is for writing state data associating the state of the update in storage, upon execution of the software component, and testing the state data to verify condition of the updated program and disallowing rollback and roll-forward attacks, the state data comprising hash chain values. The state data for verifying the correctness of the updated program is entangled with application data used for the program functionality. A server includes: an update pool having a plurality of software updates deployed in each client, and a policy control for monitoring and controlling at least one of: the length of time the client runs until the software update is invoked, a chain of the updates; and the granularity of the update.
摘要翻译：提供了一种在组件级更新软件的方法和系统。客户端程序包括用于将软件组件加载到程序的至少一个可加载区域中以更新程序的基础组件。软件组件中的代码用于写入状态数据，将存储器中的更新状态与执行软件组件相关联，并测试状态数据以验证更新程序的状态，并禁止回滚和前滚攻击，状态数据包括哈希链值。用于验证更新的程序的正确性的状态数据与用于程序功能的应用程序数据相互纠缠。服务器包括：具有部署在每个客户端中的多个软件更新的更新池，以及用于监视和控制以下至少之一的策略控制：客户端运行到软件更新被调用的时间长短，更新链 ; 和更新的粒度。

3. 发明申请

US20150113518A1 UPDATING SOFTWARE COMPONENTS 有权
标题翻译：更新软件组件
公开(公告)号：US20150113518A1
公开(公告)日：2015-04-23
申请号：US14387215
申请日：2012-03-22
申请人： Clifford Liem , Hongrui Dong , Sam Martin , Yuan Xiang Gu , Michael Weiner
发明人： Clifford Liem , Hongrui Dong , Sam Martin , Yuan Xiang Gu , Michael Weiner
IPC分类号： G06F9/445
CPC分类号： G06F8/65 , G06F8/656 , G06F8/658 , G06F9/44521 , G06F21/57 , G06F21/572
摘要： A method and system for renewing software at the component-level is provided. A client program includes a base component for loading a software component into at least one loadable region of the program to update the program. Code in the software component is for writing state data associating the state of the update in storage, upon execution of the software component, and testing the state data to verify condition of the updated program and disallowing rollback and roll-forward attacks, the state data comprising hash chain values. The state data for verifying the correctness of the updated program is entangled with application data used for the program functionality. A server includes: an update pool having a plurality of software updates deployed in each client, and a policy control for monitoring and controlling at least one of: the length of time the client runs until the software update is invoked, a chain of the updates; and the granularity of the update.
摘要翻译：提供了一种在组件级更新软件的方法和系统。客户端程序包括用于将软件组件加载到程序的至少一个可加载区域中以更新程序的基础组件。软件组件中的代码用于写入状态数据，将存储器中的更新状态与执行软件组件相关联，并测试状态数据以验证更新程序的状态，并禁止回滚和前滚攻击，状态数据包括哈希链值。用于验证更新的程序的正确性的状态数据与用于程序功能的应用程序数据相互纠缠。服务器包括：具有部署在每个客户端中的多个软件更新的更新池，以及用于监视和控制以下至少之一的策略控制：客户端运行到软件更新被调用的时间长短，更新链 ; 和更新的粒度。

4. 发明授权

US09141787B2 Interlocked binary protection using whitebox cryptography 有权
标题翻译：使用白盒加密的联锁二进制保护
公开(公告)号：US09141787B2
公开(公告)日：2015-09-22
申请号：US13319561
申请日：2010-05-06
申请人： Yuan Xiang Gu , Paul McRae , Bogdan Nicolescu , Valery Levitsky , Xijian Zhu , Hongrui Dong , Daniel Elie Murdock
发明人： Yuan Xiang Gu , Paul McRae , Bogdan Nicolescu , Valery Levitsky , Xijian Zhu , Hongrui Dong , Daniel Elie Murdock
IPC分类号： G06F5/00 , G06F21/54 , G06F21/14
CPC分类号： G06F21/54 , G06F21/14 , H04L9/002 , H04L2209/16 , H04L2209/603
摘要： A system and method for transforming a software application comprising binary code and optionally associated data, from an original form to a more secure form. The method includes performing a combination of binary transmutations to the application, and interlocking the transmutations by generating and placing interdependencies between the transmutations, wherein a transmutation is an irreversible change to the application. Different types of the transmutations are applied at varied granularities of the application. The transmutations are applied to the application code and the implanted code as well. The result is a transformed software application which is semantically equivalent to the original software application but is resistant to static and/or dynamic attacks.
摘要翻译：一种用于将包括二进制代码和可选地关联的数据的软件应用程序从原始形式转换为更安全的形式的系统和方法。该方法包括对应用执行二进制变换的组合，以及通过生成和放置变换之间的相互依赖性来互锁变换，其中变换是对应用的不可逆变化。在应用的不同粒度下应用不同类型的变化。这些变化也应用于应用代码和植入代码。结果是转换的软件应用程序在语义上等同于原始软件应用程序，但是抵抗静态和/或动态攻击。

5. 发明申请

US20120192283A1 Interlocked Binary Protection Using Whitebox Cryptography 有权
标题翻译：使用白盒密码学的联锁二进制保护
公开(公告)号：US20120192283A1
公开(公告)日：2012-07-26
申请号：US13319561
申请日：2010-05-06
申请人： Yuan Xiang Gu , Paul McRae , Bogdan Nicolescu , Valery Levitsky , Xijian Zhu , Hongrui Dong , Daniel Elie Murdock
发明人： Yuan Xiang Gu , Paul McRae , Bogdan Nicolescu , Valery Levitsky , Xijian Zhu , Hongrui Dong , Daniel Elie Murdock
IPC分类号： G06F21/22 , G06F5/00 , G06F9/44
CPC分类号： G06F21/54 , G06F21/14 , H04L9/002 , H04L2209/16 , H04L2209/603
摘要： A system and method for transforming a software application comprising binary code and optionally associated data, from an original form to a more secure form. The method includes performing a combination of binary transmutations to the application, and interlocking the transmutations by generating and placing interdependencies between the transmutations, wherein a transmutation is an irreversible change to the application. Different types of the transmutations are applied at varied granularities of the application. The transmutations are applied to the application code and the implanted code as well. The result is a transformed software application which is semantically equivalent to the original software application but is resistant to static and/or dynamic attacks.
摘要翻译：一种用于将包括二进制代码和可选地关联的数据的软件应用程序从原始形式转换为更安全的形式的系统和方法。该方法包括对应用执行二进制变换的组合，以及通过生成和放置变换之间的相互依赖性来互锁变换，其中变换是对应用的不可逆变化。在应用的不同粒度下应用不同类型的变化。这些变化也应用于应用代码和植入代码。结果是转换的软件应用程序在语义上等同于原始软件应用程序，但是抵抗静态和/或动态攻击。

6. 发明授权

US09454666B2 Method for protecting data 有权
标题翻译：数据保护方法
公开(公告)号：US09454666B2
公开(公告)日：2016-09-27
申请号：US14388232
申请日：2012-03-26
申请人： Robert Krten , Hongrui Dong , Clifford Liem
发明人： Robert Krten , Hongrui Dong , Clifford Liem
IPC分类号： G06F21/00 , G06F21/60 , G06F17/30 , G06F21/14 , G06F21/64 , G06F21/12 , H04L9/08 , H04L9/32
CPC分类号： G06F21/60 , G06F17/30097 , G06F21/125 , G06F21/14 , G06F21/64 , G06F2221/2107 , H04L9/0894 , H04L9/3239 , H04L2209/16
摘要： In the present disclosure, a hash function is computed over a known image, for example, an address range in a program. The result of the hash function is known to be the same at two distinct points in time, before the program is run, i.e. signing at build-time, and during the running of the program, i.e. run time. The value that the programmer wishes to hide, i.e. the secret value, is also known at build-time. At build-time, the secret value is combined with the hash in such a way that the combining operation can be reversed at run time. This combined value, i.e. the salt, is stored along with the program. Later, at runtime, the program computes the same hash value as was computed at signing time, and does the reverse combining operation in order to reveal the secret value.
摘要翻译：在本公开中，在已知图像上计算散列函数，例如程序中的地址范围。在运行程序之前的两个不同的时间点，即在构建时签署，以及程序的运行，即运行时间，已知哈希函数的结果是相同的。程序员希望隐藏的值，即秘密值，在构建时也是已知的。在构建时，秘密值与哈希结合，使得组合操作在运行时可以颠倒。该组合值，即盐，与程序一起存储。后来，在运行时，程序计算与在签名时计算的哈希值相同的哈希值，并进行反向组合操作，以显示秘密值。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式