The invention discloses a PUF (
Physical Unclonable Function)-based distributed
software security protection method and
system. The method comprises the following steps: adding running environment hardware characteristics of a to-be-protected program and a PUF excitation response value, selecting an
operating system according to the to-be-protected program, and uploading the to-be-protected program; selecting a protection mode and an
algorithm; verifying the matching between the to-be-protected program and an
operating system, and starting a protection process for the matched to-be-protected program; performing primary
encryption on the to-be-protected program; and compressing the primarily encrypted program and generating a shell program, and obtaining a new key through the PUF to complete secondary
encryption after the running of the shell program is finished. According to the embodiment, the operation environment is configured, multiple protection
modes and algorithms are provided, multi-platform and multi-program formats are adapted, protection requirements in different scenes are met, and distributed deployment is adapted; by checking the matching performance,
encryption failure or abnormal operation is avoided, and the invalid encryption cost is reduced; and through primary and secondary encryption,
static analysis and dynamic debugging are resisted, and the long-term anti-
cracking capability is greatly improved.