3 ms·
One way to raise the bar is to download critical pieces of code from a trusted code server in runtime. The client code authenticates first with the License Ser
by ww520 16y ago
One way to raise the bar is to download critical pieces of code from a trusted code server in runtime. The client code authenticates first with the License Server using its public key and gets back an authorization token, which expires with time. It submits the token to download the code from the code server, which checks the token against the License Server.
To raise the bar even higher, make the downloadable code expirable or embedding the public key to re-authenticate once downloaded.
Of course a persistent cracker can still run a sniffer to capture the runtime code, reverse engineering it, remove all the checks and stitch the code back together. It just makes it harder.