Application Protection via Fault Handler Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Applications are vulnerable to data leakage due to reverse engineering, which can lead to security breaches and continuous damage, necessitating a method to protect them from abnormal execution environments.

Innovation Solution

An electronic device registers a handler capable of being called as a preset fault is generated in the application, executes a protection code to determine if the environment is abnormal, and performs protective operations based on this determination.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If an application is executed in a virtual environment using an emulator, then the application can be tested and run, but important data of the application may be leaked due to reverse engineering

Engineering Contradiction:

Improveexecution environment compatibilityVSAvoiddata leakage risk

Core Design Contradiction:

Adaptability or versatilityVSObject-affected harmful factors

Solution Approach 1:

The patent applies preliminary action by registering a handler before executing the protection code. The handler is pre-configured to catch specific exceptions (like NullPointerException) that may be triggered by the protection code. This allows the system to detect abnormal execution environments (such as emulators) before sensitive operations occur, preventing data leakage proactively rather than reactively

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The patent converts the harmful effect of exception throwing (which could crash the application) into a beneficial detection mechanism. By deliberately throwing exceptions with specific messages and having registered handlers catch them, the system transforms potential errors into useful signals for identifying abnormal execution environments. The exception mechanism, normally a source of instability, becomes a tool for security detection

Inventive Principle:

Principle #22Blessing in disguise (Convert harm into benefit)

2Reliability

If a protection code is executed to generate preset faults, then abnormal environments can be detected, but the application operation may be interrupted

Engineering Contradiction:

Improveenvironment detection accuracyVSAvoidapplication operation continuity

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements feedback by having the registered handler monitor whether specific exceptions are thrown during protection code execution. The handler receives feedback about the execution environment's response to the protection code. Based on this feedback (whether the exception was caught or not), the system can determine if it's running in an abnormal environment and adjust its behavior accordingly, allowing continuous operation in normal environments while detecting abnormalities

Inventive Principle:

Principle #23Feedback

Solution Approach 2:

The registered handler acts as an intermediary between the protection code and the application execution. Instead of the protection code directly interrupting application flow, the handler mediates by catching exceptions and allowing the application to continue running. This intermediary layer enables environment detection without causing application interruption, maintaining productivity while ensuring reliability

Inventive Principle:

Principle #24Intermediary (Mediator)

Data Source

PatentUS11487854B2Electronic device for protecting application from abnormal environment and operating method thereof

Publication Date: 2022.11.01 SAMSUNG ELECTRONICS CO LTD

AI summary

Provided is a method of protecting an application from reverse engineering. The method includes registering, in an electronic device, a handler capable of being called as a preset fault is generated in the application, after the handler is registered, executing a protection code for generating the preset fault in the application, determining whether an environment where the application is executed is an abnormal environment, based on whether the handler has been called as the protection code is executed, and performing an operation for protecting the application, based on a result of the determination.