Software Handling Device Secure Decryption for HTML Apps
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
HTML Apps are vulnerable to reverse-engineering and unauthorized copying due to ease of source code extraction, with existing code obfuscation methods failing to protect proprietary algorithms and debuggability issues.
Innovation Solution
A software handling device and server system that employs authentication and licensing mechanisms to transmit and decrypt encrypted source code, using a unique license encryption key for each software application and device pair, ensuring secure execution and preventing unauthorized copying.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If code obfuscation tools are used to obfuscate the source code of HTML Apps, then the difficulty of JavaScript code reverse-engineering and tampering is significantly increased, but code obfuscation does not protect HTML programs from being copied and it becomes very difficult to debug a release version of the software
Solution Approach 1:
The system segments the protection mechanism into multiple layers: code obfuscation for reverse-engineering protection, license verification for copying protection, and secure debugging channels for maintenance. This segmentation allows each layer to address specific concerns without compromising the others.
Solution Approach 2:
The patent introduces an intermediary debugging system that operates through secure channels between the obfuscated code and developers. This intermediary layer enables debugging capabilities while maintaining the obfuscation protection, resolving the contradiction between protection and debuggability.
2Reliability
If code obfuscation is applied to protect proprietary algorithms, then the difficulty of reverse-engineering is increased, but it does not prevent copying of the source code and experienced hackers can still reverse-engineer and re-engineer obfuscated source code
Solution Approach 1:
The patent merges multiple protection mechanisms into a unified system: code obfuscation, license verification, and secure execution environments work together to provide comprehensive protection against both reverse-engineering and unauthorized copying.
Solution Approach 2:
The system performs preliminary license verification and authentication before allowing code execution. This preliminary action prevents unauthorized copying from occurring in the first place, while obfuscation provides an additional layer of protection against reverse-engineering attempts.
3Ease of manufacture
If HTML Apps are distributed with accessible source code for easy deployment, then ease of distribution is improved, but vulnerability to reverse-engineering and unauthorized copying increases
Solution Approach 1:
The system changes the state of the source code from accessible to encrypted form during distribution. The encrypted code maintains ease of distribution through standard channels while providing robust protection against reverse-engineering and unauthorized copying through cryptographic mechanisms.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The present invention relates to a software handling device and a server system. The software handling device (100) comprises a processor (102) and a transceiver (104), wherein the transceiver (104) is configured to transmit varies requests and to receive varies verifications and encryption keys to and from a server system (300). The server system (300) comprises an authentication server (300a), a licensing server (300b) and a software application server (300c), wherein the server system (300) is configured to receive varies requests and to transmit varies verifications and encryption keys from and to a software handling device (100). Furthermore, the present invention also relates to corresponding methods, a computer program, and a computer program product.