Application piracy prevention with secure enclave protection of automatically modularized functions

A system comprising:

• a developer computing device comprising:
• one or more developer computing device processing units;
• and
• one or more developer computing device computer-readable storage media comprising computer-executable instructions which, when executed by the one or more developer computing device processing units, cause the developer computing device to:
• obtain annotated source code, portions of which are identified as protected functionality;
• modify a call to a protected function, defined by the identified portions, to marshal parameters provided as part of the call to the protected function prior to the modification;
• modify one or more references to an instruction pointer or a program counter within the identified portions to be position-independent;
• compile the annotated source code such that the identified portions are compiled into one or more protected modules;
• and
• identify the one or more protected modules as being executable only within an enclave;
• and
• a product store computing device comprising:
• one or more product store computing device processing units;
• and
• one or more or more product store computing device computer-readable storage media comprising computer-executable instructions which, when executed by the one or more product store computing device processing units, cause the product store computing device to:
• encrypt the one or more protected modules based on the identification of the one or more protected modules as being executable only within an enclave.

A system comprising:

• a product store computing device comprising:
• one or more product store computing device processing units;
• and
• one or more or more product store computing device computer-readable storage media comprising computer-executable instructions which, when executed by the one or more product store computing device processing units, cause the product store computing device to:
• encrypt one or more protected modules of a software application program based on the metadata associated therewith;
• and
• a client computing device comprising:
• one or more client computing device processing units;
• and
• one or more or more client computing device computer-readable storage media comprising computer-executable instructions which, when executed by the one or more client computing device processing units, cause the client computing device to:
• decrypt, within a first enclave, a first key;
• provide the first key from the first enclave to a second enclave through a secure channel established between the first and second enclaves;
• and
• execute the software application program by decrypting, within the second enclave, the encrypted one or more protected modules with the first key, and then executing the decrypted one or more protected modules from the second enclave.