Identifying unauthorized communication systems based on their memory contents

A method for identifying unauthorized client software seeking to communicate with a communication system, the method comprising:

• receiving, from a client communication system that stores client software used to communicate with a communication system, an indication of a platform of the client communication system and an implementation version of the client software;
• based on the indicated platform and implementation version, identifying a memory map of the client software, the memory map identifying at least one memory segment within the client software that is designated to remain unchanged during authorized use of the client software;
• selecting one or more contiguous segments from the at least one memory segment that is designated to remain unchanged;
• sending to the client communication system an indication of the selected one or more contiguous segments;
• receiving, from the client communication system, a first digest of the selected one or more contiguous segments;
• accessing a second digest to compare with first digest received from the client communication system;
• comparing the first digest received from the client communication system with the second digest;
• and
• identifying the client communication system as an unauthorized client communication system when the first digest does not correspond to the second digest.

An apparatus for identifying unauthorized client software seeking to communicate with a communication system, the apparatus being configured to:

• receive, from a client communication system that stores client software used to communicate with a communication system, an indication of a platform of the client communication system and an implementation version of the client software;
• identify, based on the indicated platform and implementation version, a memory map of the client software, the memory map identifying at least one memory segment within the client software that is designated to remain unchanged during authorized use of the client software;
• select one or more contiguous segments from the at least one memory segment that is designated to remain unchanged;
• send to the client communication system an indication of the selected one or more contiguous segments;
• receive, from the client communication system, a first digest of the selected one or more contiguous segments;
• access a second digest to compare with first digest received from the client communication system;
• compare the first digest received from the client communication system with the second digest;
• and
• identify the client communication system as an unauthorized client communication system when the first digest does not correspond to the second digest.

A system for identifying unauthorized client software seeking to communicate with a communication system, the system comprising:

• means for receiving, from a client communication system that stores client software used to communicate with a communication system, an indication of a platform of the client communication system and an implementation version of the client software;
• means for identifying, based on the indicated platform and implementation version, a memory map of the client software, the memory map identifying at least one memory segment within the client software that is designated to remain unchanged during authorized use of the client software;
• means for selecting one or more contiguous segments from the at least one memory segment that is designated to remain unchanged;
• means for sending to the client communication system an indication of the selected one or more contiguous segments;
• means for receiving, from the client communication system, a first digest of the selected one or more contiguous segments;
• means for accessing a second digest to compare with first digest received from the client communication system;
• means for comparing the first digest received from the client communication system with the second digest;
• and
• means for identifying the client communication system as an unauthorized client communication system when the first digest does not correspond to the second digest.