Patent ID: 8954752
Filing Date: 2015-02-10
Classification: G06F,H04L

Abstract:
1. A method of enhancing protection for at least one of software and data being executed on a computer, said method comprising: constructing, using a processor on a build machine, a file to comprise a secure object to execute on a target machine different from said build machine, said secure object comprising at least one of code and data that is always encrypted whenever said secure object is stored in a memory or on a disk on said target machine, said target machine being configured such that the encrypted stored secure object is in decrypted form on said target machine only when information of the secure object is inside a processor of said target machine during an execution of the secure object by said target machine after retrieval from a memory on said target machine, the decryption using a system key of the target machine that is available to the processor of the target machine but protected from software on the target machine, the target machine then encrypting information of the secure object as that information moves from the processor to the memory or disk; and storing said secure object, upon completion of construction, in an encrypted state as a completed secure object on said target machine, wherein said secure object is completed without said build machine having the system key of said target machine.