期刊名称：The International Arab Journal of Information Technology
印刷版ISSN：1683-3198
出版年度：2013
卷号：10
期号：6
出版社：Zarqa Private University
摘要：Application service provider (ASP) is a business that makes computer-based services (small and medium sized businesses) available to clients over a network. The usual ASP sells a large application to large enterprises, but also provides a pay-as-you-go model for smaller clients. One of the main problems with ASP is the insufficient security to resist attacks and guarantee pay-as-you-go. Function hiding can be used to achieve protection for algorithms and assure charging clients on per-usage basis. Encryption functions that can be executed without prior decryption (function hiding protocol) gives good solution to the problems of software protection. Function hiding protocol faces a problem if the same encryption scheme is used for encrypting some data about the function and also the output of the encrypted function. In such case, an attacker could reveal the encrypted data easily thereby comprising its confidentiality. This paper aims to develop a software protection system based on function hiding protocol with software obfuscation that overcomes function hiding protocol problems. The suggested system is a multi-client system that allows charging clients on a per-usage basis (pay-as-you-go) and satisfies both confidentiality and integrity for the ASP and the client
关键词：Software protection; function hiding; software obfuscation; ASP
