Protecting sensitive data in software products and in generating core dumps
AssigneeInternational Business Machines Corporation
InventorsRui Feng, Shuang Shuang Jia, Da Fei Shi, Lijun Wei
Life of this patent
Estimating the term…
Abstract
Sensitive data is protected in a software product. A source file of the software product is compiled to generate an object file, in which the source file includes at least one piece of sensitive data marked with a specific identifier. The object file has a secure data section for saving storage information of the at least one piece of sensitive data at compile-time and run-time. The object file is linked to generate an executable file. The executable file updates the secure data section at run-time. Sensitive data is also protected when a core dump is generated.
Claims13
A method of protecting sensitive data in a software product, said method comprising:
- compiling, by a processor, a source file of the software product to generate an object file, wherein the source file includes at least one piece of sensitive data marked with a specific identifier, and the object file has a secure data section for saving storage information of the at least one piece of sensitive data at compile-time and run-time;
- linking, by the processor, the object file to generate an executable file, wherein the executable file is to update the secure data section at run-time;
- and
- updating the secure data section at run-time, to include storage information of the sensitive data, wherein the storage information can be utilized to locate and acquire the sensitive data corresponding to the storage information.
A system comprising:
- a memory;
- a processor in communication with the memory;
- and
- program instructions executable by the processor via the memory to perform a method, the method comprising:
- compiling, by the processor, a source file of the software product to generate an object file, wherein the source file includes at least one piece of sensitive data marked with a specific identifier, and the object file has a secure data section for saving storage information of the at least one piece of sensitive data at compile-time and run-time;
- linking, by the processor, the object file to generate an executable file, the executable file to update the secure data section at run-time;
- and
- updating, by the processor, the secure data section at run-time, to include storage information of the sensitive data, wherein the storage information can be utilized to locate and acquire the sensitive data corresponding to the storage information.
Dependencies are inferred from the claim text.