Software Protection via Hiding Function using Software Obfuscation

Abstract: Application Service Provider (ASP) is a business that makes computer-based services (small and medium sized businesses) available to clients over a network. The usual ASP sells a large application to large enterprises, but also, provides a pay-as-you-go model for smaller clients. One of the main problems with ASP is the insufficient security to resist attacks and guarantee pay-as-you-go. Function hiding can be used to achieve protection for algorithms and assure charging clients on per-usage basis. Encryption functions that can be executed without prior decryption (function hiding protocol) gives good solution to the problems of software protection. Function hiding protocol faces a problem if the same encryption scheme is used for encrypting some data about the function and also, the output of the encrypted function. In such case, an attacker could reveal the encrypted data easily thereby comprising its confidentiality. This paper aims to develop a software protection system based on function hiding protocol with software obfuscation that overcomes function hiding protocol problems. The suggested system is a multi-client system that allows charging clients on a per-usage basis (pay-as-you-go) and satisfies both confidentiality and integrity for the ASP and the client