【作者】 朱建启；

【导师】 刘衍珩；

【作者基本信息】 吉林大学 ， 计算机系统结构， 2009， 博士

【摘要】 本文围绕软件保护中涉及到的软件版权归属检测、控制软件的非法复制和传播以及软件水印技术等问题从以下几个方面展开研究。(1)设计了一种新颖的动态分配软件许可权的协议SRMP(Software Right Management Protocol)。该协议将软件副本和核心代码分离,联合考虑核心代码、运行环境以及版权状态,有效地实现了安全注册、迁移及二次分发。通过加密、认证和数字签名等技术有效地保证了在网络环境中协议交互的数据安全和完整性;联机服务器动态注册核心代码,实现了动态分配软件许可权,解决了硬盘克隆攻击。在该协议之上引进了“伴机卡”,提出了基于伴机卡的SRMP_C方案,将许可证与专用的伴机卡绑定,使得软件只能在带有伴机卡的机器上使用,有效地保证软件的合法使用,提高了可操作性和易用性,防止非法复制;突破了传统的“一软件一卡”的应用模式,提出了“一机一卡”的模式,有效地改善了网络负载情况,为保障在版权意义下的动态授权机制提供了一种全新的视野。(2)设计了应用于版权归属检测的软件版权管理协议ROI_SRMP(Rights Ownership Identification SRMP)。该协议以软件水印、软件指纹等信息隐藏技术为手段,根据应用软件的特征选择合适的水印算法,把作者、版权管理机构、加载验证中心和购买者等有关实体的ID、软件作品的消息摘要和水印ID及其密钥作为水印信息,利用加密、签名和认证等密码学技术,有效实现了被保护软件的版权归属事后确认。(3)提出了一种基于Shamir门限与分支结构的动态软件水印方案。该方案通过Shamir门限策略将水印信息分解为一组值,分组加密该组值,结合密码表生成一组分存值,采用自同构映射和校验码机制使各分存值之间形成一个具有相互验证和作用的“环结构”,根据分支结构的动态行为把该组分存值嵌入到程序的不同方法中。该方案有效地抵抗了大多数语义保持变换攻击,并可根据部分水印信息恢复原始水印。仿真结果表明与其它方案比较,该方法具有较好的鲁棒性及隐蔽性等特点。(4)详细分析了当前动态图水印(DGW)系统采用的主要拓扑结构的特性,建立了一种具有较好数据率特性的二维增强型PPCT拓扑结构TIPPCT(Two-dimensional Intensify PPCT);构造出了多维增强型PPCT结构模型MIPPCT(Multi-dimensional Intensify PPCT),论述了维度n、叶节点个数m、Catalan索引数c对模型的影响,证明了在叶节点数相同情况下,MIPPCT的数据率将随着其维度n的增大而不断增大并趋近于某个极限值,并给出了该极限值。进一步指出,存在这样的二维区域HArea,当m、n取值在HArea中时,动态图水印系统具有较高的整体性能。(5)基于PPCT结构的CLOC编码和常量防篡改技术,提出了一种新颖的防篡改软件水印方案:利用水印的分存值构造一种多对一的函数,将函数结果编码为常量值,以不透明谓词的参数形式分布在整个程序中,使水印分存值之间具有一定的关联性;一旦程序中某一个或一些水印分存值遭到破坏就会被感知,整个程序便无法正常运行,有效地提高了水印的防篡改能力。更多还原

【Abstract】 The massive spreading of broadband networks and new developments in digital technology have lead to the unrestricted transmission of digital content over the internet. More and more digital products such as music, pictures, e-books, software are transmitted through online communication and transactions. Digital content can easily be copied and modified illegally that caused enormous economic losses. Content providers are seeking technologies for protection of copyrighted content. In the past few decades, researchers have studied the digital copyright protection technology extensively and have achieved many results. The multimedia content copyright protection has been widely studied and discussed such as digital watermarking, security containers and security protocol. However, the copyright protection for software did not attach adequate importance. Clearly, there is strong need for developing more efficient and effective mechanisms to protect software to be illegally used. How to effectively protect intellectual property rights of digital products is an important issue for the software developers and consumers.Software copyright protection protocol is an important part of software security areas. It can prevent illegal copying and proliferation of the software content, confirm the copyright timely. It also can trace the software piracy and illegal copying, which effectively protects the software providers and the consumers that guarantee the healthy development of software industry. Software watermarking that is the main technology of information hiding is one of supporting technologies in realizing the software copyright protection protocols. How to embed the copyright information or the users fingerprint in the host software effectively is the core issue in software watermarking. The software industry is more demanding and looking forward to the strong robustness, high security and good performance software watermarking schemes. This paper studied the following aspects focusing on the key problems in software protection such as the software copyright detection, controlling the illegal copying and transmission, software watermarking and so on.(1) Present a novel software authentication protocol SRMP (Software Right Management Protocol) that dynamically distributes copyright. The mechanism is the separation of the software and the kernel that provides the supporting for the model of first trial and after purchase. Integrating the kernel, software environment and copyright information that effectively limit the software running in one machine (unique environment). It ensures the data security and integrality in the protocol exchange in network through encryption, authentication and digital signature that implements safe registration, software migrating and redistribution. It realizes the dynamical distributing copyright and solves the hard disk copy attacking by online to the server and register the kernel dynamically. The protocol achieves the users purchasing scheme of the license duration through the online server timestamps inspection of Ts tart and Tl ifetime.(2) Establish a concept of“company card”and SRMP_C scheme based on SRMP protocol, which binds the license and the dedicated“company card”together in order to effectively ensure the legal use of software in one machine with the“company card”. This mechanism improves the operability and ease of use, prevents the illegal copying. Breaking the traditional mode of“one software one card”. The mode of“one machine one card”can effectively improves the network load conditions and provides a new perspective for the dynamic authorization mechanism in the sense of protecting the copyright.(3) Propose a software license management protocol of ROI_SRMP for the copyright detection. With the information hiding technology means of software watermarking or fingerprints and so on, this protocol chooses a suitable watermarking algorithm according to the characteristics of the application software and takes the IDs (including the author, license management institution or users and so on), the information abstract of software, the watermarking ID and its key as the watermarking information to effectively realize the subsequent confirmation of the software copyright through the cryptograph technologies such as encryption, digital signature and so on. ROI_SRMP gives the safe use protocol for the software watermarking and provides guidance on the practical application in the field of copyright protection.(4) Give out a novel dynamic software watermarking scheme based on Shamir threshold and branch structure. The watermark is split into pieces with Shamir threshold scheme, the small particle size of watermarking piece is conducive to improve the stealth. With Shamir scheme, only partial information can retrieve the original watermark, which improves the robustness. The more of watermark pieces and reasonable distribution of embedding points will improve the part protection. Block cipher not only improves the safety (because it offers the ciphertext to the attackers) but also makes the watermark information more random. The technologies of self isomorphic mapping and check code form a“ring”structure between all the pieces, which can carry out the error-correcting and partial retrieval that improves the robustness. The cipher table is used, and all the pieces are embedded into different methods of program according to the dynamic behavior of branch structure. The branches are necessary in the program and can be seen any where. The resulting binary string won’t change if the branches are reordered, or if instructions other than condition statements are inserted or deleted, which resists various kinds of attacks. The pretreatment of watermark decomposition, encryption and redundancy check code provides reference to pretreatment for software watermarking.(5) Present a novel planar TIPPCT tree (Two-dimensional Intensify PPCT) that holds higher data rate based on analysis of main topologies characteristics of current dynamic graph watermarking system (DGW). Multiple dimensional MIPPCT tree (Multi-dimensional Intensify PPCT) model and three identities vectors of DataRate , structure and Total concerning it are constructed and presented, then the effect of these vectors on MIPPCT model is discussed in detail . The results show that the data rate of MIPPCT tree will increase to a limit with its dimension number n increasing based on equal number of leaves and this limit is also computed. Moreover, it proved that there exists a two dimensional area HArea, when DataRate is in this area, dynamic graph watermarking system will take on greater performance.(6) Propose a novel tamper-proofing software watermarking scheme based on CLOC code of PPCT structure and constant tamper-proofing technology. Construct a“one to many”function with the watermark pieces and encode the function result into a constant. Embed the watermark into the whole program in the form of the parameters of opaque predicates, which makes the watermark pieces associated between each other. Once there being one or some attacked, it can feel and the whole program will not work that improves the tamper-proofing ability.更多还原