Methods and systems for asset obfuscation

Patent metadata

Field	Value
Publication number	US-11234105-B2
Application number	US-201514869781-A
Country	US
Kind code	B2
Filing date	Sep 29, 2015
Priority date	Sep 29, 2014
Publication date	Jan 25, 2022
Grant date	Jan 25, 2022

Abstract

Techniques for obfuscating and deploying digital assets (e.g., mobile applications) are provided to mitigate the risk of unauthorized disclosure. An asset can be received that is to be deployed to a plurality of mobile devices, each of the mobile devices associated with a corresponding account having account attributes. A deployment group of one or more mobile devices for deploying the asset can be identified based on a set of one or more obfuscation parameters, comprising account attributes shared among the one or more mobile devices within the deployment group. A customized obfuscation scheme to be applied to the asset can be determined based at least in part on the set of obfuscation parameters. The customized obfuscation scheme can be applied to the asset to generate an obfuscated asset. The obfuscated asset can be transmitted and/or updated over a network to the one or more mobile devices within the deployment group.

First claim

What is claimed is:

1. A method performed by a computer system, the method comprising:
receiving, by the computer system, a mobile application that is to be installed on a plurality of mobile devices, each of the mobile devices associated with a corresponding account stored on the computer system, each account having one or more dynamic account attributes that change;
dynamically determining, by the computer system, a first set of obfuscation parameters comprising the one or more dynamic account attributes and one or more time-to-break or time-to-update obfuscation parameters;
identifying, by the computer system, a deployment group of mobile devices of the plurality of mobile devices for deploying the mobile application based on the first set of obfuscation parameters, the mobile devices of the deployment group being a portion of the plurality of mobile devices, each of the plurality of mobile devices associated with a different account, and each account associated with a different account holder, wherein the one or more dynamic account attributes are common to the mobile devices within the deployment group that is the portion of the plurality of mobile devices;
determining, by the computer system, a first obfuscation scheme to be applied to the mobile application based at least in part on the first set of obfuscation parameters, wherein the first obfuscation scheme comprises a process for transforming the mobile application;
generating a first obfuscated mobile application by obfuscating, by the computer system, the mobile application by applying the first obfuscation scheme to the mobile application; and
transmitting, by the computer system, over a network the first obfuscated mobile application to the mobile devices within the deployment group.

2. The method of claim 1 , wherein determining the first obfuscation scheme comprises selecting the first obfuscation scheme from a plurality of obfuscation schemes based at least in part on the first set of obfuscation parameters.

3. The method of claim 1 , wherein determining the first obfuscation scheme comprises providing the first set of obfuscation parameters as an input to an obfuscation algorithm.

4. The method of claim 1 , wherein the time-to-update obfuscation parameters further comprise a time for updating obfuscation of the mobile application, the time corresponding to a level of obfuscation strength associated with the first obfuscated mobile application.

5. The method of claim 1 , wherein determining the first obfuscation scheme comprises:
obtaining, an indicator of obfuscation strength to be applied in the first obfuscation scheme for the mobile application; and
determining one or more categories of information to obfuscate based on the indicator of obfuscation strength associated with the first obfuscated mobile application, the one or more categories of information comprising code, data, or cryptographic key.

6. The method of claim 5 , wherein determining the first obfuscation scheme comprises:
determining a level of obfuscation to be used for obfuscating information of at least one category of the one or more categories of information based on the indicator of obfuscation strength.

7. The method of claim 1 , further comprising
determining that obfuscation of the mobile application is to be updated;
determining a second obfuscation scheme to be applied to the mobile application based at least in part on a second set of one or more obfuscation parameters;
applying the second obfuscation scheme to the mobile application to generate a second obfuscated mobile application; and
deploying the second obfuscated mobile application to at least one of the mobile devices within the deployment group.

8. The method of claim 7 , further comprising:
determining, by the computer system, an update frequency for updating the mobile application based at least in part on a level of strength of the first obfuscation scheme or the first set of obfuscation parameters.

9. The method of claim 1 , further comprising
determining, by the computer system, that obfuscation of the mobile application is to be updated; and
transmitting, by the computer system, to at least one mobile device, of the mobile devices within the deployment group, one or more instructions for applying an updated obfuscation scheme to the mobile application using a second set of one or more obfuscation parameters.

10. The method of claim 9 , wherein the one or more instructions include the second set of one or more obfuscation parameters.

11. A non-transitory computer-readable storage media storing computer-executable instructions that, when executed by a processor, causes the processor to perform steps comprising:
receiving an asset for a plurality of mobile devices, each of the mobile devices associated with a corresponding account, each account having one or more dynamic account attributes that change;
dynamically determining a first set of comprising the one or more dynamic account attributes and one or more time-to-break or time-to-update obfuscation parameters;
identifying a deployment group of mobile devices of the plurality of mobile devices for transmitting the asset based on the first set of obfuscation parameters, the mobile devices of the deployment group being a portion of the plurality of mobile devices, each of the plurality of mobile devices associated with a different account, and each account associated with a different account holder, wherein the one or more dynamic account attributes are common to the mobile devices within the deployment group that is the portion of the plurality of mobile devices;
determining a first obfuscation scheme to be applied to the asset based at least in part on the first set of obfuscation parameters;
generating a first obfuscated mobile application by obfuscating the asset by applying the first obfuscation scheme to the asset; and
transmitting over a network a first obfuscated asset to the mobile devices within the deployment group.

12. The non-transitory computer-readable storage media of claim 11 , wherein determining the first obfuscation scheme comprises selecting the first obfuscation scheme from a plurality of obfuscation schemes based at least in part on the first set of obfuscation parameters.

13. The non-transitory computer-readable storage media of claim 11 , wherein determining the first obfuscation scheme comprises providing the first set of obfuscation parameters as an input to an obfuscation algorithm.

14. The non-transitory computer-readable storage media of claim 11 , wherein the time-to-update obfuscation parameters further comprise a time parameter indicating a level of obfuscation strength.

15. The non-transitory computer-readable storage media of claim 11 , wherein the asset comprises code, data, or a cryptographic key.

16. The non-transitory computer-readable storage media of claim 11 , wherein applying the first customized obfuscation scheme to the asset comprises determining a portion of the asset to apply the first obfuscation scheme.

17. The non-transitory computer-readable storage media of claim 11 , wherein the first obfuscation scheme is applied to a first portion of the asset and wherein the computer-executable instructions, when executed by the processor, causes the processor to perform operations further comprising:
determining a second obfuscation scheme to be applied to the asset based at least in part on the first set of obfuscation parameters; and
applying the second obfuscation scheme to a second portion of the asset.

18. The non-transitory comp

Assignees

• Visa Int Service Ass

Inventors

• Gordon James
• Joshi Roopesh
• Horton David
• Tilburg Johan Van

Classifications

• H04W12/04

  Key management, e.g. using generic bootstrapping architecture [GBA] · CPC title

• G06Q20/3221

  Access to banking information through M-devices · CPC title

• H04W12/12

  Detection or prevention of fraud · CPC title

• G06Q20/36

  using electronic wallets or electronic money safes · CPC title

• G06Q20/20

  Point-of-sale [POS] network systems · CPC title