Preventing unauthorized calls to a protected function
US9721120B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | May 14, 2013 |
| Grant date | Aug 1, 2017 |
| Priority date | — |
| Expiry date | Sep 17, 2034 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/125
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
An obfuscated program can be configured to resist attacks in which an attacker directly calls a non-entry function by verifying that an execution path to the function is an authorized execution path. To detect an unauthorized execution order, a secret value is embedded in each function along an authorized execution path. At runtime, the secrets are combined to generate a runtime representation of the execution path, and the runtime representation is verified against an expected value. To perform the verification, a verification polynomial is evaluated using the runtime representation as input. A verification value result of zero means the execution path is an authorized execution path.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.