Secure Software Leasing
Secure Software Leasing
复制标题
DOI：
10.1007/978-3-030-77886-6_17
复制
发表时间：
2020-05
期刊：
影响因子：
--
通讯作者：
P. Ananth;R. L. Placa
中科院分区：
文献类型：
--
作者：
P. Ananth;R. L. Placa
制定密码学定义来防范软件盗版是一个重要的研究方向，但尚未受到太多关注。由于使用经典密码学的自然定义是不可能实现的（因为经典程序总是可以复制），这引导我们使用量子计算技术。 Aaronson [CCC’09] 的开创性工作引入了量子复制保护的概念，正是为了解决软件反盗版问题。然而，尽管量子复制保护是量子密码学中最重要的问题之一，但对于任何类型的功能，都没有可证明安全的解决方案。我们制定了另一种解决软件盗版的定义，称为安全软件租赁（SSL）。虽然比量子复制保护弱，但 SSL 仍然有意义，并且在软件反盗版方面有有趣的应用。我们基于具体的密码学假设，为规避电路的子类（包括点函数的自然实现、与通配符的结合和仿射测试器）提出了 SSL 的构造。我们的构建是第一个可证明安全的解决方案，基于具体的加密假设，用于软件反盗版。为了补充我们的积极结果，我们基于密码学假设表明，存在一类不存在 SSL 的量子不可学习函数。特别是，我们的不可能性结果还排除了对任意一类量子不可学习函数的量子复制保护 [Aaronson CCC’09]；解决了一个重要的开放问题，即为任意量子不可学习电路构建复制保护的可能性。
Formulating cryptographic definitions to protect against software piracy is an important research direction that has not received much attention. Since natural definitions using classical cryptography are impossible to achieve (as classical programs can always be copied), this directs us towards using techniques from quantum computing. The seminal work of Aaronson [CCC’09] introduced the notion of quantum copy-protection precisely to address the problem of software anti-piracy. However, despite being one of the most important problems in quantum cryptography, there are no provably secure solutions of quantum copy-protection known foranyclass of functions.We formulate an alternative definition for tackling software piracy, called secure software leasing (SSL). While weaker than quantum copy-protection, SSL is still meaningful and has interesting applications in software anti-piracy.We present a construction of SSL for a subclass of evasive circuits (that includes natural implementations of point functions, conjunctions with wild cards, and affine testers) based on concrete cryptographic assumptions. Our construction is the first provably secure solution, based on concrete cryptographic assumptions, for software anti-piracy. To complement our positive result, we show, based on cryptographic assumptions, that there is a class of quantum unlearnable functions for which SSL does not exist. In particular, our impossibility result also rules out quantum copy-protection [Aaronson CCC’09] for an arbitrary class of quantum unlearnable functions; resolving an important open problem on the possibility of constructing copy-protection for arbitrary quantum unlearnable circuits.