专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

WO2008101340A1 SYSTEM AND METHOD FOR INTERLOCKING TO PROTECT SOFTWARE-MEDIATED PROGRAM AND DEVICE BEHAVIOURS 审中-公开
标题翻译：用于互相保护软件介入程序和设备行为的系统和方法
公开(公告)号：WO2008101340A1
公开(公告)日：2008-08-28
申请号：PCT/CA2008/000331
申请日：2008-02-21
申请人： CLOAKWARE CORPORATION , JOHNSON, Harold Joseph , GU, Yuan Xiang , ZHOU, Yongxin
发明人： JOHNSON, Harold Joseph , GU, Yuan Xiang , ZHOU, Yongxin
IPC分类号： G06F21/22 , G06F9/45
CPC分类号： G06F8/53
摘要： A method for rendering software resistant to reverse engineering. Replace at least one first constant (mathematical expression, etc.) in a computational expression with a second mixed mathematical and bitwise-Boolean expression, the first constant being simpler than the second expression and the second expression being based on the value or the variables found in the first constant (or expression). Evaluation of the second mixed mathematical and bitwise-Boolean expression produces a value preserving the value of the first constant, either: with the original value of the first constant or the original value of the result of the first expression, in which case the second mixed mathematical and bitwise-Boolean expression is obtained from the first constant by converting the first constant by mathematical identities; or, in an encoded form, as a new value, which can be converted back to the original value of the first constant by applying an information-preserving decoding function, in which case the second mixed mathematical and bitwise-Boolean expression is obtained from the first constant by modifying the first constant by a combination of conversion according to mathematical identities and transformation according to an information preserving encoding function.
摘要翻译：一种用于渲染反向工程的软件的方法。用计算表达式中的至少一个第一个常数（数学表达式等）替换为第二个混合的数学和位元布尔表达式，第一个常数比第二个表达式简单，而第二个表达式基于值或发现的变量在第一个常数（或表达式）中。评估第二个混合数学和比特布尔表达式产生一个保留第一个常数的值的值，或者是：第一个常数的原始值或第一个表达式的结果的原始值，在这种情况下第二个混合数学和按位 - 通过用数学标识转换第一个常数从第一个常数获得布尔表达式; 或者以编码形式作为新值，其可以通过应用信息保存解码功能而被转换回到第一常数的原始值，在这种情况下，从第二混合数学和按位布尔表达式通过根据数学标识的转换和根据信息保存编码功能的变换的组合来修改第一常数的第一常数。

2. 发明申请

WO2008101341A1 SYSTEM AND METHOD FOR INTERLOCKING TO PROTECT SOFTWARE-MEDIATED PROGRAM AND DEVICE BEHAVIOURS 审中-公开
标题翻译：用于互锁以保护软件介导的程序和设备行为的系统和方法
公开(公告)号：WO2008101341A1
公开(公告)日：2008-08-28
申请号：PCT/CA2008/000333
申请日：2008-02-21
申请人： CLOAKWARE CORPORATION , JOHNSON, Harold Joseph , GU, Yuan Xiang , ZHOU, Yongxin
发明人： JOHNSON, Harold Joseph , GU, Yuan Xiang , ZHOU, Yongxin
IPC分类号： G06F21/22 , G06F9/45
CPC分类号： G06F21/14 , G06F21/10 , G06F21/12 , G06F21/55 , G06F2221/0748 , H04L9/002 , H04L2209/04 , H04L2209/046 , H04L2209/16 , H04L2209/20
摘要： A method for rendering software resistant to reverse engineering. Replace at least one first constant (mathematical expression, etc.) in a computational expression with a second mixed mathematical and bitwise-Boolean expression, the first constant being simpler than the second expression and the second expression being based on the value or the variables found in the first constant (or expression). Evaluation of the second mixed mathematical and bitwise-Boolean expression produces a value preserving the value of the first constant, either: with the original value of the first constant or the original value of the result of the first expression, in which case the second mixed mathematical and bitwise-Boolean expression is obtained from the first constant by converting the first constant by mathematical identities; or, in an encoded form, as a new value, which can be converted back to the original value of the first constant by applying an information-preserving decoding function, in which case the second mixed mathematical and bitwise-Boolean expression is obtained from the first constant by modifying the first constant by a combination of conversion according to mathematical identities and transformation according to an information preserving encoding function.
摘要翻译：
一种渲染软件抵抗逆向工程的方法。用计算表达式中的第二个混合数学和位布尔表达式替换至少一个第一个常量（数学表达式等），第一个常量比第二个表达式更简单，第二个表达式基于值或找到的变量在第一个常量（或表达式）中。对第二个混合数学和位平面布尔表达式的评估会产生一个保留第一个常量值的值：用第一个常量的原始值或第一个表达式的结果的原始值，在这种情况下，第二个混合数学和按位布尔表达式是通过用数学身份转换第一个常数从第一个常量中获得的; 或者以编码形式作为新值，通过应用信息保持解码函数可以将其转换回第一常数的原始值，在这种情况下，第二混合数学和比特布尔表达式从首先通过根据数学身份进行转换和根据信息保持编码功能进行转换的组合来修改第一常数，这是第一常数。

3. 发明申请

WO2012126083A1 SYSTEM AND METHOD PROVIDING DEPENDENCY NETWORKS THROUGHOUT APPLICATIONS FOR ATTACK RESISTANCE 审中-公开
标题翻译：系统和方法提供依赖性网络通过应用来防止攻击
公开(公告)号：WO2012126083A1
公开(公告)日：2012-09-27
申请号：PCT/CA2011/050157
申请日：2011-03-24
申请人： IRDETO CANADA CORPORATION , LIEM, Clifford , ZHOU, Yongxin , GU, Yuan Xiang
发明人： LIEM, Clifford , ZHOU, Yongxin , GU, Yuan Xiang
IPC分类号： G06F21/22
CPC分类号： G06F21/572 , G06F21/125 , G06F21/14
摘要： A method and system is provided to automatically propagate dependencies from one part of a software application to another previously unrelated part. Propagation of essential code functionality and data to other parts of the program serves to augment common arithmetic functions with Mixed Boolean Arithmetic (MBA) formulae that are bound to pre-existing parts of the program. A software application is first analyzed on a compiler level to determine the program properties which hold in the program. Thereafter, conditions are constructed based on these properties and encoded in formulae that encode the condition in data and operations. Real dependencies throughout the application are therefore created such that if a dependency is broken the program will no longer function correctly.
摘要翻译：提供了一种方法和系统，用于自动传播从软件应用程序的一个部分到另一个先前无关的部分的依赖关系。将基本代码功能和数据传播到程序的其他部分用于通过与程序的预先存在的部分绑定的混合布尔算术（MBA）公式来增加常规算术函数。首先在编译器级别分析软件应用程序，以确定程序中保存的程序属性。此后，基于这些属性构建条件并在编码数据和操作中的条件的公式中编码。因此，在整个应用程序中实际的依赖关系被创建，使得如果依赖关系被破坏，程序将不能正常工作。

4. 发明申请

WO2008074125A1 SIMPLIFIED MANAGEMENT OF AUTHENTICATION CREDENTIALS FOR UNATTENDED APPLICATIONS 审中-公开
标题翻译：管理未经授权的认证证书的简化管理
公开(公告)号：WO2008074125A1
公开(公告)日：2008-06-26
申请号：PCT/CA2007/002048
申请日：2007-11-15
申请人： CLOAKWARE Corporation , ADAMS, Garney David , GRAPES, Robert , GU, Yuan Xiang , MEHAN, Johnston Richard Edward , RONG, Jack Jiequn
发明人： ADAMS, Garney David , GRAPES, Robert , GU, Yuan Xiang , MEHAN, Johnston Richard Edward , RONG, Jack Jiequn
IPC分类号： G06F21/00
CPC分类号： G06F21/62 , G06F21/31
摘要： Systems and methods for unattended authentication of software applications to provide these applications with access to shared resources. A server password manager (SPM) module resident on a node also occupied by a requestor software application requesting access to resources receives the requestor's request. The SPM module creates a request package containing the requestor's information as well as the node's identifying information. The request package is then transmitted to a credentials manager (CM) module in a CM node. The request package, encrypted by the SPM module with encryption keys previously generated by the CM module, is decrypted by the CM module. The contents are checked against data stored by the CM module regarding the SPM module and the requestor application when these were registered with the CM. If the data matches, then the CM provides credentials which are used to give the requestor application access to the requested resources.
摘要翻译：用于软件应用程序的无人值守认证的系统和方法，以便为这些应用程序提供对共享资源的访问。驻留在请求访问资源的请求者软件应用程序所占用的节点上的服务器密码管理器（SPM）模块接收请求者的请求。 SPM模块创建一个包含请求者信息的请求包以及节点的标识信息。然后将请求包发送到CM节点中的凭证管理器（CM）模块。由SPM模块加密的先前由CM模块生成的加密密钥的请求包由CM模块解密。当CM模块向CM注册时，检查与CM模块存储的关于SPM模块和请求者应用程序的数据的内容。如果数据匹配，则CM提供用于给请求者应用程序访问所请求的资源的凭证。

5. 发明申请

WO2012129639A2 METHOD OF SECURING NON-NATIVE CODE 审中-公开
标题翻译：保护非原始码的方法
公开(公告)号：WO2012129639A2
公开(公告)日：2012-10-04
申请号：PCT/CA2011/050173
申请日：2011-03-31
申请人： IRDETO CANADA CORPORATION , ADAMS, Garney, David , GU, Yuan Xiang , RONG, Jack, Jiequn
发明人： ADAMS, Garney, David , GU, Yuan Xiang , RONG, Jack, Jiequn
CPC分类号： G06F21/54 , G06F8/71 , G06F9/3017 , G06F9/30174 , G06F9/3879 , G06F9/45516 , G06F9/45558 , G06F21/14 , G06F21/51 , G06F21/52 , G06F21/53 , G06F2009/45587 , G06F2221/033
摘要： A method to secure a non-native application. The non-native application is processed to obtain an application stub to be triggered within a virtual machine. The processing of the non-native application also provide a native code function upon which the application stub depends. The non-native function is part of a trusted module that extends security services from the trusted module to the virtual machine. The trusted module is a native code application that creates a trusted zone as a root of trustiness extending to the virtual machine by an execution-enabling mechanism between the application tab and the non-native function.
摘要翻译：一种保护非本地应用程序的方法。处理非本地应用程序以获取在虚拟机中触发的应用程序存根。非本地应用程序的处理还提供应用程序存根所依赖的本机代码功能。非本机功能是将可信模块的安全服务扩展到虚拟机的受信任模块的一部分。可信模块是本地代码应用程序，其通过应用程序选项卡和非本地函数之间的执行启用机制，将受信任区域创建为通过虚拟机延伸的可信任根。

6. 发明申请

WO2013138895A1 UPDATING SOFTWARE COMPONENTS 审中-公开
标题翻译：更新软件组件
公开(公告)号：WO2013138895A1
公开(公告)日：2013-09-26
申请号：PCT/CA2012/000307
申请日：2012-03-22
申请人： IRDETO CANADA CORPORATION , LIEM, Clifford , DONG, Hongrui , MARTIN, Sam , GU, Yuan Xiang , WEINER, Michael
发明人： LIEM, Clifford , DONG, Hongrui , MARTIN, Sam , GU, Yuan Xiang , WEINER, Michael
IPC分类号： G06F9/445 , G06F11/36
CPC分类号： G06F8/65 , G06F8/656 , G06F8/658 , G06F9/44521 , G06F21/57 , G06F21/572
摘要： A method and system for renewing software at the component-level is provided. A client program includes a base component for loading a software component into at least one loadable region of the program to update the program. Code in the software component is for writing state data associating the state of the update in storage, upon execution of the software component, and testing the state data to verify condition of the updated program and disallowing rollback and roll-forward attacks, the state data comprising hash chain values. The state data for verifying the correctness of the updated program is entangled with application data used for the program functionality. A server includes: an update pool having a plurality of software updates deployed in each client, and a policy control for monitoring and controlling at least one of: the length of time the client runs until the software update is invoked, a chain of the updates; and the granularity of the update.
摘要翻译：提供了一种在组件级更新软件的方法和系统。客户端程序包括用于将软件组件加载到程序的至少一个可加载区域中以更新程序的基础组件。软件组件中的代码用于写入状态数据，将存储器中的更新状态与执行软件组件相关联，并测试状态数据以验证更新程序的状态，并禁止回滚和前滚攻击，状态数据包括哈希链值。用于验证更新的程序的正确性的状态数据与用于程序功能的应用程序数据相互纠缠。服务器包括：具有部署在每个客户端中的多个软件更新的更新池，以及用于监视和控制以下至少之一的策略控制：客户端运行到软件更新被调用的时间长短，更新链 ; 和更新的粒度。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式