Decryption Module for Secure Application Execution
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing computer systems fail to securely protect private information within application programs from unauthorized access, leading to potential piracy and unauthorized distribution of authorization keys.
Innovation Solution
A method and system that includes a decryption module within the computer system, which receives and decrypts encrypted instructions using a key, ensuring only authorized access to private information by executing the decrypted instructions within a secure private domain or shadow memory, and utilizing encryption algorithms like symmetric and asymmetric key algorithms.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If private information is stored in accessible memory, then application programs can execute instructions efficiently, but unauthorized users can access and pirate the application program
Solution Approach 1:
The patent segments the memory system into a public memory domain and a private memory domain. The private domain stores encrypted instructions that are inaccessible to the CPU and unauthorized users, while the public domain stores decryption information. This segmentation allows efficient execution while preventing unauthorized access to private information.
Solution Approach 2:
The patent introduces a decryption module as an intermediary between the encrypted instructions in private memory and the CPU. This module decrypts instructions on-demand and transmits them to the CPU for execution, enabling efficient processing while maintaining security through controlled access.
2Reliability
If encrypted instructions are stored in private memory domain, then security is improved, but access and execution time increases
Solution Approach 1:
The patent performs preliminary actions by pre-storing decryption information (including keys and algorithm data) in the public memory domain before execution. This allows the decryption module to quickly decrypt instructions without time-consuming key management during execution, reducing the time penalty of encryption.
3Reliability
If a decryption module is introduced, then access control is improved, but device complexity increases
Solution Approach 1:
The decryption module is designed as a multi-functional component that handles key management, decryption operations, and controlled transmission to the CPU. By consolidating these functions in a single module rather than distributing them across multiple components, the patent improves access control while minimizing the increase in system complexity.
Data Source
AI summary
Methods of preventing private information, which is hidden within data of a private domain reserved by an application program, from being easily accessed by a CPU and other devices, both where the data of the private domain is decrypted and the access to said data are restricted are disclosed, where the mentioned other devices do not include a decryption module utilized in the methods. Therefore, as long as agreements related to encryptions and decryptions are made in advance between the application program and the decryption module, private information can be well protected.


