CA2080531C - Method of protecting computer software from unauthorized execution using multiple keys - Google Patents
Method of protecting computer software from unauthorized execution using multiple keysInfo
- Publication number
- CA2080531C CA2080531C CA002080531A CA2080531A CA2080531C CA 2080531 C CA2080531 C CA 2080531C CA 002080531 A CA002080531 A CA 002080531A CA 2080531 A CA2080531 A CA 2080531A CA 2080531 C CA2080531 C CA 2080531C
- Authority
- CA
- Canada
- Prior art keywords
- key
- software
- keys
- protected
- computer
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Expired - Fee Related
Links
- 238000000034 method Methods 0.000 title claims abstract description 19
- 238000012545 processing Methods 0.000 claims abstract description 12
- 230000004048 modification Effects 0.000 claims description 14
- 238000012986 modification Methods 0.000 claims description 13
- 238000013459 approach Methods 0.000 description 4
- 238000013475 authorization Methods 0.000 description 4
- 238000007792 addition Methods 0.000 description 3
- 230000008901 benefit Effects 0.000 description 3
- 230000008859 change Effects 0.000 description 3
- 230000010076 replication Effects 0.000 description 3
- 230000001934 delay Effects 0.000 description 2
- 238000004519 manufacturing process Methods 0.000 description 2
- 230000009471 action Effects 0.000 description 1
- 230000004913 activation Effects 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000004364 calculation method Methods 0.000 description 1
- 238000010586 diagram Methods 0.000 description 1
- 230000000694 effects Effects 0.000 description 1
- 230000006870 function Effects 0.000 description 1
- 238000009434 installation Methods 0.000 description 1
- 230000007246 mechanism Effects 0.000 description 1
- 230000008569 process Effects 0.000 description 1
- 238000011084 recovery Methods 0.000 description 1
- 230000003252 repetitive effect Effects 0.000 description 1
- 230000003362 replicative effect Effects 0.000 description 1
- 230000004044 response Effects 0.000 description 1
- 238000012795 verification Methods 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/12—Protecting executable software
- G06F21/121—Restricting unauthorised execution of programs
- G06F21/123—Restricting unauthorised execution of programs by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/12—Protecting executable software
- G06F21/121—Restricting unauthorised execution of programs
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/12—Protecting executable software
- G06F21/121—Restricting unauthorised execution of programs
- G06F21/125—Restricting unauthorised execution of programs by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/21—Indexing scheme relating to G06F21/00 and subgroups addressing additional information or applications relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F2221/2107—File encryption
Abstract
A method of protecting computer software is provided by storing a first key in a plug-in hardware device, storing an algorithm for processing a purality of keys including the first key in software to be protected, loading the software containing the algorithm in the computer and plugging in a hardware device in a communications port of the computer. A second key, external to the software, to be protected which bears a relationship to the first key by the algorithm is loaded into the computer where processing takes place of the first and second keys in the algorithm for deriving a control key, if present, for the continued processing of the software being protected. The step of loading the second key is performed using a computer keyboard, any input/output port, a hard disk file or any other method of entry in the computer. Additional keys external to the software which bear a relationship to the first and second keys configured in the algorithm may be provided.
Description
f~--2080~31 OD OF PR~Jl'l~l'lrlG CC~TE~ SOEI~ F~M UN~U'l'~lO~LZ~ ;X~U'l'JUI~
MILTI~LE KEYS
BACKGROUND OF THE INVENTION
This invention relates to the protection of computer software, and more particularly to a method of protecting software using multiple keys which are external to the software being protected to produce a single control key which will allow the protected software to be continued to be processed by the computer.
Hardware-based software protection devices are generally sold to end-users who receive a distribution diskette containing the desired program including a recorded key and a hardware device which contains a matching key. In order to operate the software, the supplied hardware portion is plugged into a specified port of the computer establishing a communications path between the hardware device and the computer. If the hardware device contains the correct key which matches the key recorded in the software, then the software is allowed to continue. However, the wrong key or the absence of such a key prevents the operation of the software.
In U.S. Patent 4,458,315 to Uchenick a first key is stored in the program and a second key, physically separate from the program, is supplied to the customer with each program sold in a hardware based register. The first and second keys are compared to see if `
they bear a predetermined relationship to each other, in which case the program is authorized. In a first implementation, each secured program has the same first key in a hardware register and the secured program contains the second key. In a second implementation, different first keys are provided for each secured program, but the secured program copies supplied to the users must incorporate in advance a complete list of all second keys which are to be used with the different first keys. ~
Another approach is followed by U.S. Patent 4,593,353 to Pickholtz in which first and second authorization codes are stored in the program and are read by the computer before the program is allowed to be executed. A hardware module containing a pseudo-random number generator unique to the authorized system receives the first authorization code as a key. The resultant number generated by the number generator which is a function of the key and pseudorandom generator algorithm is compared with the second authorization code which enables an execution signal to be generated in response to a positive comparison to enable the stored program to be executed.
one of the problems with the aforesaid approaches resides in the fact that all of the first keys used must be known in advance and stored in the original software program. For example, when software is offered for sale with additional modules, upgrades and features, such embellishments may be useful and are sold only to certain users and not to others. Because all the copies of the software in the aforesaid approaches have the same set of values of keys for comparison with the external hardware key, then another key or code must be supplied in another hardware device when the additional module is separately offered for sale, even if that additional module which is related to the basic software has been supplied in advance. Only such an approach could distinguish the legal users of additional software modules from others. The additional hardware device adds expense and time delays in ordering and shipping. Also in such a case, remote implementation, e.g., telephone or facsimile, is not possible.
The mass reproduction of the software device which has the keys incorporated therein of necessity limits the flexibility in the choice of keys, as well as compromising the security. If a key is stored in the software being protected, and that key is broken or discovered by a copier, all the software copies on which that key appears has thus been discovered eliminating the desired security.
SUMMARY OF THE INVENTION
Accordingly, it is an object of the present invention to provide a new and improved method for protecting computer software which permits mass replication of the software desired to be protected while providing the possibility of selling original options or upgrades modifying the original software by using the same hardware security device furnished with the original sof~ware package while preventing the unauthorized use of the copies of such additional options or upgrades.
Still another object of this invention is to provide an improved method for protecting computer software in which original options or modifications, such as upgrades may be authorized remotely by telephone, facsimile, or mail without compromising security or preventing the mass replication of the secured software.
Accordlng to one aspect of the present lnventlon, there ls provlded a method of protectlng computer software from unauthorized execution using multlple keys, one of whlch is stored in a hardware device to produce a control key whlch will allow the protected software to execute comprlslng the steps of:
storing a plurallty of unlque flrst keys ln a plurallty of hardware devlces, each hardware devlce havlng lts own unique flrst key, establlshing a plurallty of unlque second keys, each havlng a predetermined relationshlp wlth one of each of said first keys formln~ a plurallty of unlque key palrs, storlng an algorlthm for processlng sald unlque key palrs ln software whlch ls deslred to be protected, supplylng ldentlcal copies of sald software to be protected together wlth sald hardware devices, each having one of sald flrst keys, one devlce wlth each of sald coples, supplylng sald second key that forms sald key palr with one of sald first keys ln sald hardware devlce, lnsertlng one of aid hardware devlces ln an lnput/output port of sald computer, - loadlng said software to be protected contalnlng sald algorlthm ln sald computer, loadlng a second key external to sald software to be protected ln sald computer, and processlng sald first and second keys ln sald algorlthm for derlvlng a control key, if present, for permlttlng the contlnued processing of the software belng protected.
BRIEF DESCRIPTION OF THE DRAWING
The invention, together with further objects, aspects, features and advantages thereof will be more clearly understood from the following description taken in connection with the accompanying drawing which provides a combined block diagram and flow chart illustrating the method embodied in the present invention.
DESCRIPTION OF THE PREFERRED EMBODIMENTS
In the following description, terms used are defined as follows:
Primary or firs~ key - refers to a physical hardware device that is initially shipped with a software package to be protected.
Secondary or second key - refers to a string input, e.g., alpha-numeric, hexadecimal, binary, etc. from the end user of the software package being protected. The secondary key can be in label form (supplied and affixed to the hardware device delivered Jl -- 2080~31 to the end user), and may be stored on the computer disk in which the software is being used for subsequent recovery.
Control key - refers to a calculated value that is the result of information stored within the primary first key and that of the second key. The proprietary algorithm that does this calculation is contained within the software being protected.
Algorithm - is the relationship between the primary and secondary keys which form a unique key pair.
Original program - a software program which may include options, modules, libraries, etc.
Modifications - refers to all changes made to the original software program which are to be protected, such as additions, upgrades, etc.
In accordance with the present invention, a specific algorithm is provided to each software developer whose software is desired to be protected. For a given algorithm, there is a distinct relationship between the primary and secondary keys (key pair) that produces a proper and correct control key. The proprietary algorithm which has been furnished is contained in the software being protected. In order to activate modules of software packages that have already been distributed by the developer to a 2û80531 user site in the field, in accordance with the present invention, it is only necessary to supply the end user with another secondary key which along with the original first or primary key produces another control key. The newly created control key will be required to operate the newly activated upgrade which is defined herein as a modification of the original software program.
In order to prevent unauthorized use of a new secondary key, the end user will be initially supplied with a unique key pair.
Since the unique key pair contains a unique hardware key (primary or first key), a unique second key is required to operate the software. Thus, the same secondary- key will not operate another primary key in a neighboring or unauthorized site.
Should a modification to the protected software package be required, it will only be necessary to know the value of the primary or first key which is not secret. This can be determined by a simple utility supplied with the original software package and run by the user. The results of this utility can be displayed on an output device, screen or printer, etc. This information is then transmitted to the software developer or its agent and a modification can be sent with a new second key. No additional hardware is required, relieving any future hardware cost Since unique key pairs are used to prevent cross-activation between end user sites, the algorithm can be constant for any given piece of software. Accordingly, replication of software does not require special handling and can be carried out in the usual manner.
. ~ r ~ r ~
Referring now to the drawing, illustrating the method embodied in the present invention, a unique primary or first key or code stored in a hardware device 10, such as a read-only memory (ROM), is plugged into a port 12 of a computer 14 which can thereby be accessed and loaded into the computer by means of a software program 16 being protected. A unique secondary or second key or code is entered via the keyboard (not shown) of the computer 14 or by any other convenient or suitable means whih is also stored in the computer. The first and second keys provide a unique key pair which differs for each application, and different key pairs are supplied to each software developer. An algorithm 28 in the software being protected utilizes both keys 10 and 18 to produce a desired result which in essence becomes a control key 32 to yet another algorithm which allows the software to execute properly.
If either or both of the two keys forming the unique key pair do not fit the algorithm as desired, a result which will occur which can be considered an error. Thus, the software program can be terminated thereby allowing only the proper combination of hardware key 10 and key 18, having been entered separately, to operate the software.
The method of the present invention as illustrated in the drawing comprises loading the software 16 to be protected with its algorithm stored therein in the computer represented by block 20.
The primary or first key of the hardware device 10 which has been plugged into a communications port 12 of the computer 14 is loaded into the computer represented by block 22. The second key 18 is then loaded into the computer from the computer keyboard or optionally from a hard disk file 25 as represented by block 26 of the drawing. Program operation 28 takes place in which the first 10 and second 18 keys forming a unique key pair or set are processed in the algorithm 28 producing either output 30 or 32.
If the output 30 is provided, this means that an unrecognizable operational code or an erroneous operation has taken place which is used to stop the processing of the program. On the other hand, if output 32 is provided, this indicates that a correct code exists, has been recognized, and thus will permit the continued processing-of the protected software.
The algorithm 28 which may be employed in the aforesaid method may be any manipulation of key sets which may be any combination of mathematics and ciphering techniques. Although it will be appreciated that the various algorithmic combinations may be infinite in number, a simple example of two variable keys can be illustrated as follows:
Kh + Kk = Kc where Kh is the key value stored in the plug-in hardware device (ROM, EE PROM, etc.), Kk the value entered into the computer via the keyboard, and Kc the control key 32 which allows the protected software to run.
For the sake of the example, if the required control key Kc = 100, then the sum of Kh and Kk is equal to 100, so that if Kh = 1, Kk must be 99, or if Kh = 1000, then Kk must be -900, etc. It should also be obvious to the reader that additional variables may be included in a similar manner as the first two keys or in other mathematical relationships which can complicate the equation, if desired, which produces the control key, Kc, for example:
Kx (Kh + Kk) = Kc where Kx is a third variable.
For Kc = 100 and Kh = 10, if:
Kx = 1, Kkl must equal 90 and if Kx = 2, Kk2 must equal 40.
Thus, for a given value of Kh, for example a key value stored in a plug-in hardware device 10, it can be seen that there are two values of Kk for two different values of Kx. In a practical and useful sense, Kx can be the control code of a systems manager who allows either user, Kkl = 90 or Kk2 = 40, access to the software.
It is particularly significant and should be noted that no key is stored in the software to be protected and only the algorithm that processes the keys is so stored. The second key which is entered into the computer via the keyboard may obviously be stored in a file having the installation of the protected program and later during the execution of the program retrieved for the sake of convenience from the standpoint of eliminating repetitive reentry of the same sequence of numbers.
The present invention produces a control key based on the processing of unique key pairs or sets (triples, etc.) which of necessity bear an algorithmic relationship to-each other. In the preferred embodiment, no two hardware devices contain the identical first keys. Accordingly, second keys are uniquely different for a given algorithm and control key. One advantage of using different key pairs over fixed pairs of keys is that if one pair of keys is discovered by a copier, called a hacker, that key pair would not apply for the next identical piece of software and the work must be done again in trying to find the proper operational sequences.
The importance of having identical software cannot be minimized due to the desirability of replicating the software for distribution. Any change of program material prevents the mass reproduction of the initial software. As soon as any change is made to the software, even if a simple change of key data is made, the software has to be "recompiled" into "machine language" and retested, which are time-consuming endeavors. By eliminating the use of different keys from being recorded in the software to be protected, no recompilation is necessary. In addition, another common problem basic to the application of software which is offered for sale is that modifications of the protected software such as additions, upgrades and/or features which are used to further enhance existing software may be individually useful to certain users and not to others. In the past such additions and upgrades have been supplied to the end-user in one of two ways.
First, the developer or distributor may sell the enhancement or upgrade through a separate diskette which may also be protected by yet another hardware key. Secondly, the option or module may already exist on the original software but the ability to execute it may require another correct key or code. In the latter method the desired module could contain all of the same characteristics of key relationships as in the original.
In accordance with the present invention, arrangements can be made to supply and have entered another second key which would produce a second control key derived from the first and newly supplied second keys, using the same algorithm to allow the new module which already exists in the original package to operate.
This may be accomplished by entering the other second key which could be received by telephone after verification of credit through the keyboard of the computer. Now suppose that the second key is actually recorded and exists in the software. Accordingly, if the key exists in the software this would necessitate another hardware key to be provided to activate a module even if that module itself was supplied in advance. Accordingly, the present invention eliminates the need for the additional cost of another piece of 208055~1 hardware as well as the cost of shipping and the associated delays provided thereby.
For a given algorithm it has been shown that for every hardware key there exists a unique keyboard entry key which produces the same control key. Paradoxically, many different hardware keys may be provided which operate the same identical software. This can be used to advantage as a control over the history of the software in the same manner as a serial number would be used since arrangements can be made to have every hardware key uniquely different. In the present invention the software may be replicated by normal mass production methods since no keys are actually included in the software, and the software contains only the algorithm.
Accordingly, all copies of the software are identical to each other.
The provision of providing unique and different hardware keys which require different matching keyboard entries allows the separate modules to be supplied and distributed along with the original program at the same time. As pointed out above, later activation of any one module would require a keyboard entry, a proper code associated with the particular hardware device originally supplied since the control code of that module would be different than that of the host software. Furthermore if all of the hardware keys are made different, one keyboard entry could not be used to activate another identical software module having a 2080~31 different hardware device supplied with it, thereby limiting distribution to an individual basis.
In addition, it is known that given sufficient time and energy, it would be possible to emulate the action of the hardware device by means of a software program which uses such a device. The present invention is best utilized when no two hardware keys are alike. As previously stated, this prevents the same keyboard entry to operate identical modules. Since each hardware device is uniquely different, even the same software requires its own keyed code thus preventing piracy of the developer's software. In addition, if an attempt is made to emulate the hardware device which proves successful, a completely separate emulation would have to be devised for the next piece of software which would essentially stop any mass attempts to break the security of the protected software in accordance with the present invention.
In providing subsequently issued modifications to the original program, it is also possible to supply another algorithm with the upgrade which can use the existing first and second keys to produce a different control key or preferably to use a third key (new second key) which in combination with the first key in the hardware device produces a new control key when processed by the algorithm in the modification.
20805~1 Summarizing the use of the present invention can provide the ability using a new second key to remotely upgrade or add additional functionality to the original software while limiting the upgrade to those possessing the unique first hardware key, in effect securing all other identical software from operating identical upgrades without authorization. Additionally the beneficial use of an algorithm to produce a result which can be used in a functional matter as opposed to a decision-making comparison mechanism enhances the security system tremendously.
Finally, all the software can be mass replicated using normal production practices without sacrificing the security of execution control of each of the identical replicated software by means of unique key pairs.
Since other changes and modifications varied to fit particular operating requirements and environments will be apparent to those skilled in the art, the invention is not considered limited to the examples chosen for purposes of illustration and includes all changes and modifications which do not constitute a departure from the true spirit and scope of this invention as claimed in the following claims and equivalents thereto.
MILTI~LE KEYS
BACKGROUND OF THE INVENTION
This invention relates to the protection of computer software, and more particularly to a method of protecting software using multiple keys which are external to the software being protected to produce a single control key which will allow the protected software to be continued to be processed by the computer.
Hardware-based software protection devices are generally sold to end-users who receive a distribution diskette containing the desired program including a recorded key and a hardware device which contains a matching key. In order to operate the software, the supplied hardware portion is plugged into a specified port of the computer establishing a communications path between the hardware device and the computer. If the hardware device contains the correct key which matches the key recorded in the software, then the software is allowed to continue. However, the wrong key or the absence of such a key prevents the operation of the software.
In U.S. Patent 4,458,315 to Uchenick a first key is stored in the program and a second key, physically separate from the program, is supplied to the customer with each program sold in a hardware based register. The first and second keys are compared to see if `
they bear a predetermined relationship to each other, in which case the program is authorized. In a first implementation, each secured program has the same first key in a hardware register and the secured program contains the second key. In a second implementation, different first keys are provided for each secured program, but the secured program copies supplied to the users must incorporate in advance a complete list of all second keys which are to be used with the different first keys. ~
Another approach is followed by U.S. Patent 4,593,353 to Pickholtz in which first and second authorization codes are stored in the program and are read by the computer before the program is allowed to be executed. A hardware module containing a pseudo-random number generator unique to the authorized system receives the first authorization code as a key. The resultant number generated by the number generator which is a function of the key and pseudorandom generator algorithm is compared with the second authorization code which enables an execution signal to be generated in response to a positive comparison to enable the stored program to be executed.
one of the problems with the aforesaid approaches resides in the fact that all of the first keys used must be known in advance and stored in the original software program. For example, when software is offered for sale with additional modules, upgrades and features, such embellishments may be useful and are sold only to certain users and not to others. Because all the copies of the software in the aforesaid approaches have the same set of values of keys for comparison with the external hardware key, then another key or code must be supplied in another hardware device when the additional module is separately offered for sale, even if that additional module which is related to the basic software has been supplied in advance. Only such an approach could distinguish the legal users of additional software modules from others. The additional hardware device adds expense and time delays in ordering and shipping. Also in such a case, remote implementation, e.g., telephone or facsimile, is not possible.
The mass reproduction of the software device which has the keys incorporated therein of necessity limits the flexibility in the choice of keys, as well as compromising the security. If a key is stored in the software being protected, and that key is broken or discovered by a copier, all the software copies on which that key appears has thus been discovered eliminating the desired security.
SUMMARY OF THE INVENTION
Accordingly, it is an object of the present invention to provide a new and improved method for protecting computer software which permits mass replication of the software desired to be protected while providing the possibility of selling original options or upgrades modifying the original software by using the same hardware security device furnished with the original sof~ware package while preventing the unauthorized use of the copies of such additional options or upgrades.
Still another object of this invention is to provide an improved method for protecting computer software in which original options or modifications, such as upgrades may be authorized remotely by telephone, facsimile, or mail without compromising security or preventing the mass replication of the secured software.
Accordlng to one aspect of the present lnventlon, there ls provlded a method of protectlng computer software from unauthorized execution using multlple keys, one of whlch is stored in a hardware device to produce a control key whlch will allow the protected software to execute comprlslng the steps of:
storing a plurallty of unlque flrst keys ln a plurallty of hardware devlces, each hardware devlce havlng lts own unique flrst key, establlshing a plurallty of unlque second keys, each havlng a predetermined relationshlp wlth one of each of said first keys formln~ a plurallty of unlque key palrs, storlng an algorlthm for processlng sald unlque key palrs ln software whlch ls deslred to be protected, supplylng ldentlcal copies of sald software to be protected together wlth sald hardware devices, each having one of sald flrst keys, one devlce wlth each of sald coples, supplylng sald second key that forms sald key palr with one of sald first keys ln sald hardware devlce, lnsertlng one of aid hardware devlces ln an lnput/output port of sald computer, - loadlng said software to be protected contalnlng sald algorlthm ln sald computer, loadlng a second key external to sald software to be protected ln sald computer, and processlng sald first and second keys ln sald algorlthm for derlvlng a control key, if present, for permlttlng the contlnued processing of the software belng protected.
BRIEF DESCRIPTION OF THE DRAWING
The invention, together with further objects, aspects, features and advantages thereof will be more clearly understood from the following description taken in connection with the accompanying drawing which provides a combined block diagram and flow chart illustrating the method embodied in the present invention.
DESCRIPTION OF THE PREFERRED EMBODIMENTS
In the following description, terms used are defined as follows:
Primary or firs~ key - refers to a physical hardware device that is initially shipped with a software package to be protected.
Secondary or second key - refers to a string input, e.g., alpha-numeric, hexadecimal, binary, etc. from the end user of the software package being protected. The secondary key can be in label form (supplied and affixed to the hardware device delivered Jl -- 2080~31 to the end user), and may be stored on the computer disk in which the software is being used for subsequent recovery.
Control key - refers to a calculated value that is the result of information stored within the primary first key and that of the second key. The proprietary algorithm that does this calculation is contained within the software being protected.
Algorithm - is the relationship between the primary and secondary keys which form a unique key pair.
Original program - a software program which may include options, modules, libraries, etc.
Modifications - refers to all changes made to the original software program which are to be protected, such as additions, upgrades, etc.
In accordance with the present invention, a specific algorithm is provided to each software developer whose software is desired to be protected. For a given algorithm, there is a distinct relationship between the primary and secondary keys (key pair) that produces a proper and correct control key. The proprietary algorithm which has been furnished is contained in the software being protected. In order to activate modules of software packages that have already been distributed by the developer to a 2û80531 user site in the field, in accordance with the present invention, it is only necessary to supply the end user with another secondary key which along with the original first or primary key produces another control key. The newly created control key will be required to operate the newly activated upgrade which is defined herein as a modification of the original software program.
In order to prevent unauthorized use of a new secondary key, the end user will be initially supplied with a unique key pair.
Since the unique key pair contains a unique hardware key (primary or first key), a unique second key is required to operate the software. Thus, the same secondary- key will not operate another primary key in a neighboring or unauthorized site.
Should a modification to the protected software package be required, it will only be necessary to know the value of the primary or first key which is not secret. This can be determined by a simple utility supplied with the original software package and run by the user. The results of this utility can be displayed on an output device, screen or printer, etc. This information is then transmitted to the software developer or its agent and a modification can be sent with a new second key. No additional hardware is required, relieving any future hardware cost Since unique key pairs are used to prevent cross-activation between end user sites, the algorithm can be constant for any given piece of software. Accordingly, replication of software does not require special handling and can be carried out in the usual manner.
. ~ r ~ r ~
Referring now to the drawing, illustrating the method embodied in the present invention, a unique primary or first key or code stored in a hardware device 10, such as a read-only memory (ROM), is plugged into a port 12 of a computer 14 which can thereby be accessed and loaded into the computer by means of a software program 16 being protected. A unique secondary or second key or code is entered via the keyboard (not shown) of the computer 14 or by any other convenient or suitable means whih is also stored in the computer. The first and second keys provide a unique key pair which differs for each application, and different key pairs are supplied to each software developer. An algorithm 28 in the software being protected utilizes both keys 10 and 18 to produce a desired result which in essence becomes a control key 32 to yet another algorithm which allows the software to execute properly.
If either or both of the two keys forming the unique key pair do not fit the algorithm as desired, a result which will occur which can be considered an error. Thus, the software program can be terminated thereby allowing only the proper combination of hardware key 10 and key 18, having been entered separately, to operate the software.
The method of the present invention as illustrated in the drawing comprises loading the software 16 to be protected with its algorithm stored therein in the computer represented by block 20.
The primary or first key of the hardware device 10 which has been plugged into a communications port 12 of the computer 14 is loaded into the computer represented by block 22. The second key 18 is then loaded into the computer from the computer keyboard or optionally from a hard disk file 25 as represented by block 26 of the drawing. Program operation 28 takes place in which the first 10 and second 18 keys forming a unique key pair or set are processed in the algorithm 28 producing either output 30 or 32.
If the output 30 is provided, this means that an unrecognizable operational code or an erroneous operation has taken place which is used to stop the processing of the program. On the other hand, if output 32 is provided, this indicates that a correct code exists, has been recognized, and thus will permit the continued processing-of the protected software.
The algorithm 28 which may be employed in the aforesaid method may be any manipulation of key sets which may be any combination of mathematics and ciphering techniques. Although it will be appreciated that the various algorithmic combinations may be infinite in number, a simple example of two variable keys can be illustrated as follows:
Kh + Kk = Kc where Kh is the key value stored in the plug-in hardware device (ROM, EE PROM, etc.), Kk the value entered into the computer via the keyboard, and Kc the control key 32 which allows the protected software to run.
For the sake of the example, if the required control key Kc = 100, then the sum of Kh and Kk is equal to 100, so that if Kh = 1, Kk must be 99, or if Kh = 1000, then Kk must be -900, etc. It should also be obvious to the reader that additional variables may be included in a similar manner as the first two keys or in other mathematical relationships which can complicate the equation, if desired, which produces the control key, Kc, for example:
Kx (Kh + Kk) = Kc where Kx is a third variable.
For Kc = 100 and Kh = 10, if:
Kx = 1, Kkl must equal 90 and if Kx = 2, Kk2 must equal 40.
Thus, for a given value of Kh, for example a key value stored in a plug-in hardware device 10, it can be seen that there are two values of Kk for two different values of Kx. In a practical and useful sense, Kx can be the control code of a systems manager who allows either user, Kkl = 90 or Kk2 = 40, access to the software.
It is particularly significant and should be noted that no key is stored in the software to be protected and only the algorithm that processes the keys is so stored. The second key which is entered into the computer via the keyboard may obviously be stored in a file having the installation of the protected program and later during the execution of the program retrieved for the sake of convenience from the standpoint of eliminating repetitive reentry of the same sequence of numbers.
The present invention produces a control key based on the processing of unique key pairs or sets (triples, etc.) which of necessity bear an algorithmic relationship to-each other. In the preferred embodiment, no two hardware devices contain the identical first keys. Accordingly, second keys are uniquely different for a given algorithm and control key. One advantage of using different key pairs over fixed pairs of keys is that if one pair of keys is discovered by a copier, called a hacker, that key pair would not apply for the next identical piece of software and the work must be done again in trying to find the proper operational sequences.
The importance of having identical software cannot be minimized due to the desirability of replicating the software for distribution. Any change of program material prevents the mass reproduction of the initial software. As soon as any change is made to the software, even if a simple change of key data is made, the software has to be "recompiled" into "machine language" and retested, which are time-consuming endeavors. By eliminating the use of different keys from being recorded in the software to be protected, no recompilation is necessary. In addition, another common problem basic to the application of software which is offered for sale is that modifications of the protected software such as additions, upgrades and/or features which are used to further enhance existing software may be individually useful to certain users and not to others. In the past such additions and upgrades have been supplied to the end-user in one of two ways.
First, the developer or distributor may sell the enhancement or upgrade through a separate diskette which may also be protected by yet another hardware key. Secondly, the option or module may already exist on the original software but the ability to execute it may require another correct key or code. In the latter method the desired module could contain all of the same characteristics of key relationships as in the original.
In accordance with the present invention, arrangements can be made to supply and have entered another second key which would produce a second control key derived from the first and newly supplied second keys, using the same algorithm to allow the new module which already exists in the original package to operate.
This may be accomplished by entering the other second key which could be received by telephone after verification of credit through the keyboard of the computer. Now suppose that the second key is actually recorded and exists in the software. Accordingly, if the key exists in the software this would necessitate another hardware key to be provided to activate a module even if that module itself was supplied in advance. Accordingly, the present invention eliminates the need for the additional cost of another piece of 208055~1 hardware as well as the cost of shipping and the associated delays provided thereby.
For a given algorithm it has been shown that for every hardware key there exists a unique keyboard entry key which produces the same control key. Paradoxically, many different hardware keys may be provided which operate the same identical software. This can be used to advantage as a control over the history of the software in the same manner as a serial number would be used since arrangements can be made to have every hardware key uniquely different. In the present invention the software may be replicated by normal mass production methods since no keys are actually included in the software, and the software contains only the algorithm.
Accordingly, all copies of the software are identical to each other.
The provision of providing unique and different hardware keys which require different matching keyboard entries allows the separate modules to be supplied and distributed along with the original program at the same time. As pointed out above, later activation of any one module would require a keyboard entry, a proper code associated with the particular hardware device originally supplied since the control code of that module would be different than that of the host software. Furthermore if all of the hardware keys are made different, one keyboard entry could not be used to activate another identical software module having a 2080~31 different hardware device supplied with it, thereby limiting distribution to an individual basis.
In addition, it is known that given sufficient time and energy, it would be possible to emulate the action of the hardware device by means of a software program which uses such a device. The present invention is best utilized when no two hardware keys are alike. As previously stated, this prevents the same keyboard entry to operate identical modules. Since each hardware device is uniquely different, even the same software requires its own keyed code thus preventing piracy of the developer's software. In addition, if an attempt is made to emulate the hardware device which proves successful, a completely separate emulation would have to be devised for the next piece of software which would essentially stop any mass attempts to break the security of the protected software in accordance with the present invention.
In providing subsequently issued modifications to the original program, it is also possible to supply another algorithm with the upgrade which can use the existing first and second keys to produce a different control key or preferably to use a third key (new second key) which in combination with the first key in the hardware device produces a new control key when processed by the algorithm in the modification.
20805~1 Summarizing the use of the present invention can provide the ability using a new second key to remotely upgrade or add additional functionality to the original software while limiting the upgrade to those possessing the unique first hardware key, in effect securing all other identical software from operating identical upgrades without authorization. Additionally the beneficial use of an algorithm to produce a result which can be used in a functional matter as opposed to a decision-making comparison mechanism enhances the security system tremendously.
Finally, all the software can be mass replicated using normal production practices without sacrificing the security of execution control of each of the identical replicated software by means of unique key pairs.
Since other changes and modifications varied to fit particular operating requirements and environments will be apparent to those skilled in the art, the invention is not considered limited to the examples chosen for purposes of illustration and includes all changes and modifications which do not constitute a departure from the true spirit and scope of this invention as claimed in the following claims and equivalents thereto.
Claims (5)
1. A method of protecting computer software from unauthorized execution using multiple keys, one of which is stored in a hardware device to produce a control key which will allow the protected software to execute comprising the steps of:
storing a plurality of unique first keys in a plurality of hardware devices, each hardware device having its own unique first key, establishing a plurality of unique second keys, each having a predetermined relationship with one of each of said first keys forming a plurality of unique key pairs, storing an algorithm for processing said unique key pairs in software which is desired to be protected, supplying identical copies of said software to be protected together with said hardware devices, each having one of said first keys, one device with each of said copies, supplying said second key that forms said key pair with one of said first keys in said hardware device, inserting one of said hardware devices in an input/output port of said computer, loading said software to be protected containing said algorithm in said computer, loading a second key external to said software to be protected in said computer, and processing said first and second keys in said algorithm for deriving a control key, if present, for permitting the continued processing of the software being protected.
storing a plurality of unique first keys in a plurality of hardware devices, each hardware device having its own unique first key, establishing a plurality of unique second keys, each having a predetermined relationship with one of each of said first keys forming a plurality of unique key pairs, storing an algorithm for processing said unique key pairs in software which is desired to be protected, supplying identical copies of said software to be protected together with said hardware devices, each having one of said first keys, one device with each of said copies, supplying said second key that forms said key pair with one of said first keys in said hardware device, inserting one of said hardware devices in an input/output port of said computer, loading said software to be protected containing said algorithm in said computer, loading a second key external to said software to be protected in said computer, and processing said first and second keys in said algorithm for deriving a control key, if present, for permitting the continued processing of the software being protected.
2. The method as claimed in claim 1 wherein said step of loading said second key is performed using an input port of a computer.
3. The method as claimed in claim 2 wherein said step of loading said second key entered through any input port is stored in a hard disk file in said computer for subsequent retrieval.
4. The method as claimed in claim 1 including the steps of supplying at least one additional key loading said at least one additional key external to said software which bears a relationship to said first key configured in said algorithm and processing said at least one said additional key with said first key in said algorithm for producing a new control key for the purpose of allowing other parts of the original software to be enabled.
5. The method as claimed in claim 1, including the steps of supplying a modification for said protected program having an additional algorithm in said modification, supplying a unique third key with said modification which bears a unique relationship to and forms another key pair with said unique first key stored in said hardware device, loading said unique third key in said computer and processing said first and third keys in said additional algorithm for deriving another control key for permitting processing of software modifications being protected.
Applications Claiming Priority (2)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| US07/778,497 | 1991-10-17 | ||
| US07/778,497 US5222133A (en) | 1991-10-17 | 1991-10-17 | Method of protecting computer software from unauthorized execution using multiple keys |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CA2080531A1 CA2080531A1 (en) | 1993-04-18 |
| CA2080531C true CA2080531C (en) | 1996-06-18 |
Family
ID=25113550
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CA002080531A Expired - Fee Related CA2080531C (en) | 1991-10-17 | 1992-10-14 | Method of protecting computer software from unauthorized execution using multiple keys |
Country Status (4)
| Country | Link |
|---|---|
| US (1) | US5222133A (en) |
| EP (1) | EP0537738B1 (en) |
| CA (1) | CA2080531C (en) |
| DE (1) | DE69214080T2 (en) |
Families Citing this family (64)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US5387196A (en) * | 1992-05-19 | 1995-02-07 | United States Surgical Corporation | Cannula assembly having conductive cannula |
| WO1994007204A1 (en) * | 1992-09-21 | 1994-03-31 | Uniloc (Singapore) Private Limited | System for software registration |
| US5377269A (en) * | 1992-10-29 | 1994-12-27 | Intelligent Security Systems, Inc. | Security access and monitoring system for personal computer |
| US5402492A (en) * | 1993-06-18 | 1995-03-28 | Ast Research, Inc. | Security system for a stand-alone computer |
| US5542045A (en) * | 1993-10-15 | 1996-07-30 | Software Security, Inc. | Method for interposing a security function in a computer program |
| US5694546A (en) | 1994-05-31 | 1997-12-02 | Reisman; Richard R. | System for automatic unattended electronic information transport between a server and a client by a vendor provided transport software with a manifest list |
| DE4419635C2 (en) * | 1994-06-04 | 1996-08-29 | Esd Vermoegensverwaltungsgesel | Microcontroller backup procedures |
| US5586186A (en) * | 1994-07-15 | 1996-12-17 | Microsoft Corporation | Method and system for controlling unauthorized access to information distributed to users |
| JP2970739B2 (en) * | 1994-09-30 | 1999-11-02 | 日本ビクター株式会社 | Optical disc playback control method |
| DE9420092U1 (en) * | 1994-12-15 | 1995-02-02 | Marx Datentechnik Gmbh | Software protection module |
| US5754761A (en) * | 1995-03-06 | 1998-05-19 | Willsey; John A. | Universal sofeware key process |
| NO302388B1 (en) * | 1995-07-13 | 1998-02-23 | Sigurd Sigbjoernsen | Procedure and apparatus for protecting software against unauthorized use |
| US5754646A (en) * | 1995-07-19 | 1998-05-19 | Cable Television Laboratories, Inc. | Method for protecting publicly distributed software |
| US5870468A (en) * | 1996-03-01 | 1999-02-09 | International Business Machines Corporation | Enhanced data privacy for portable computers |
| US5737424A (en) * | 1996-06-04 | 1998-04-07 | Software Security, Inc. | Method and system for secure distribution of protected data using elliptic curve systems |
| US5854891A (en) * | 1996-08-09 | 1998-12-29 | Tritheim Technologies, Inc. | Smart card reader having multiple data enabling storage compartments |
| US6052780A (en) * | 1996-09-12 | 2000-04-18 | Open Security Solutions, Llc | Computer system and process for accessing an encrypted and self-decrypting digital information product while restricting access to decrypted digital information |
| AT405466B (en) * | 1996-09-24 | 1999-08-25 | Ericsson Austria Ag | DEVICE FOR PROTECTING AN ELECTRONIC DEVICE |
| US5949059A (en) * | 1996-12-09 | 1999-09-07 | International Business Machines Corporation | Tamper evident labelling system with embedded storage device |
| US6192475B1 (en) | 1997-03-31 | 2001-02-20 | David R. Wallace | System and method for cloaking software |
| US7290288B2 (en) | 1997-06-11 | 2007-10-30 | Prism Technologies, L.L.C. | Method and system for controlling access, by an authentication server, to protected computer resources provided via an internet protocol network |
| US6023684A (en) * | 1997-10-01 | 2000-02-08 | Security First Technologies, Inc. | Three tier financial transaction system with cache memory |
| FR2772532B1 (en) * | 1997-12-16 | 2000-01-07 | Schlumberger Ind Sa | METHOD FOR SECURING THE TRANSMISSION OF A MESSAGE FROM A TRANSMITTING DEVICE TO A RECEIVING DEVICE |
| DE19855431A1 (en) * | 1998-11-30 | 2000-05-31 | Bosch Gmbh Robert | Control unit |
| US6343280B2 (en) | 1998-12-15 | 2002-01-29 | Jonathan Clark | Distributed execution software license server |
| US7032240B1 (en) * | 1999-12-07 | 2006-04-18 | Pace Anti-Piracy, Inc. | Portable authorization device for authorizing use of protected information and associated method |
| JP2001216357A (en) * | 2000-02-01 | 2001-08-10 | Toshiba Corp | Software license managing method, electronic equipment, and recording medium |
| US7249105B1 (en) * | 2000-03-14 | 2007-07-24 | Microsoft Corporation | BORE-resistant digital goods configuration and distribution methods and arrangements |
| US7200230B2 (en) * | 2000-04-06 | 2007-04-03 | Macrovision Corporation | System and method for controlling and enforcing access rights to encrypted media |
| US20020087884A1 (en) * | 2000-06-12 | 2002-07-04 | Hovav Shacham | Method and apparatus for enhancing network security protection server performance |
| US20020039420A1 (en) * | 2000-06-12 | 2002-04-04 | Hovav Shacham | Method and apparatus for batched network security protection server performance |
| US7024696B1 (en) | 2000-06-14 | 2006-04-04 | Reuben Bahar | Method and system for prevention of piracy of a given software application via a communications network |
| US20040015725A1 (en) * | 2000-08-07 | 2004-01-22 | Dan Boneh | Client-side inspection and processing of secure content |
| US7137143B2 (en) | 2000-08-07 | 2006-11-14 | Ingrian Systems Inc. | Method and system for caching secure web content |
| DE10046895A1 (en) * | 2000-09-21 | 2002-04-25 | Siemens Ag | Process for the transmission of encrypted information for the registration of an application program |
| US7565697B2 (en) * | 2000-09-22 | 2009-07-21 | Ecd Systems, Inc. | Systems and methods for preventing unauthorized use of digital content |
| US7237123B2 (en) | 2000-09-22 | 2007-06-26 | Ecd Systems, Inc. | Systems and methods for preventing unauthorized use of digital content |
| US7757278B2 (en) * | 2001-01-04 | 2010-07-13 | Safenet, Inc. | Method and apparatus for transparent encryption |
| US7017190B2 (en) * | 2001-03-21 | 2006-03-21 | Weber Warren D | Portable recordable media anti-theft system |
| WO2002091146A2 (en) * | 2001-05-09 | 2002-11-14 | Ecd Systems, Inc. | Systems and methods for the prevention of unauthorized use and manipulation of digital content |
| CN1559026A (en) * | 2001-11-12 | 2004-12-29 | �����о�ʵ��������˾ | Method and apparatus for protecting information from unauthorised use |
| US6871192B2 (en) * | 2001-12-20 | 2005-03-22 | Pace Anti-Piracy | System and method for preventing unauthorized use of protected software utilizing a portable security device |
| US20030212639A1 (en) * | 2002-05-06 | 2003-11-13 | Cronce Paul A. | Method and system for providing secure authoring services for protected software |
| US7290144B1 (en) * | 2002-06-21 | 2007-10-30 | Paul Thomas Kitaj | Access-control method for software modules and programmable electronic device therefor |
| WO2004019182A2 (en) * | 2002-08-24 | 2004-03-04 | Ingrian Networks, Inc. | Selective feature activation |
| US7835520B2 (en) * | 2003-02-20 | 2010-11-16 | Zoran Corporation | Unique identifier per chip for digital audio/video data encryption/decryption in personal video recorders |
| US20060149962A1 (en) * | 2003-07-11 | 2006-07-06 | Ingrian Networks, Inc. | Network attached encryption |
| US7519835B2 (en) * | 2004-05-20 | 2009-04-14 | Safenet, Inc. | Encrypted table indexes and searching encrypted tables |
| US7953814B1 (en) | 2005-02-28 | 2011-05-31 | Mcafee, Inc. | Stopping and remediating outbound messaging abuse |
| US9160755B2 (en) | 2004-12-21 | 2015-10-13 | Mcafee, Inc. | Trusted communication network |
| US9015472B1 (en) | 2005-03-10 | 2015-04-21 | Mcafee, Inc. | Marking electronic messages to indicate human origination |
| US20070079140A1 (en) * | 2005-09-26 | 2007-04-05 | Brian Metzger | Data migration |
| US20070079386A1 (en) * | 2005-09-26 | 2007-04-05 | Brian Metzger | Transparent encryption using secure encryption device |
| US7618214B2 (en) * | 2006-02-03 | 2009-11-17 | Maritime International, Inc. | Containment boom guide system and method |
| US8386768B2 (en) * | 2006-02-08 | 2013-02-26 | Safenet, Inc. | High performance data encryption server and method for transparently encrypting/decrypting data |
| US7958091B2 (en) | 2006-02-16 | 2011-06-07 | Ingrian Networks, Inc. | Method for fast bulk loading data into a database while bypassing exit routines |
| US7788727B2 (en) * | 2006-10-13 | 2010-08-31 | Sony Corporation | System and method for piggybacking on interface license |
| US8379865B2 (en) * | 2006-10-27 | 2013-02-19 | Safenet, Inc. | Multikey support for multiple office system |
| WO2009065135A1 (en) * | 2007-11-17 | 2009-05-22 | Uniloc Corporation | System and method for adjustable licensing of digital products |
| US20090132804A1 (en) * | 2007-11-21 | 2009-05-21 | Prabir Paul | Secured live software migration |
| US20090285390A1 (en) * | 2008-05-16 | 2009-11-19 | Ati Technologies Ulc | Integrated circuit with secured software image and method therefor |
| US10354229B2 (en) | 2008-08-04 | 2019-07-16 | Mcafee, Llc | Method and system for centralized contact management |
| US9633183B2 (en) | 2009-06-19 | 2017-04-25 | Uniloc Luxembourg S.A. | Modular software protection |
| US8423473B2 (en) * | 2009-06-19 | 2013-04-16 | Uniloc Luxembourg S. A. | Systems and methods for game activation |
Family Cites Families (10)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| US4609777A (en) * | 1984-02-22 | 1986-09-02 | Gordian Systems, Inc. | Solid state key for controlling access to computer software |
| US4599489A (en) * | 1984-02-22 | 1986-07-08 | Gordian Systems, Inc. | Solid state key for controlling access to computer software |
| US4817140A (en) * | 1986-11-05 | 1989-03-28 | International Business Machines Corp. | Software protection system using a single-key cryptosystem, a hardware-based authorization system and a secure coprocessor |
| US4866769A (en) * | 1987-08-05 | 1989-09-12 | Ibm Corporation | Hardware assist for protecting PC software |
| FR2618926B1 (en) * | 1987-10-30 | 1990-06-08 | Microphar | MEMORY DEVICE FOR CONTROLLING THE USE OF SOFTWARE, OF THE KEY TYPE |
| US4959861A (en) * | 1988-07-13 | 1990-09-25 | Howlette Edward L | Security system for computer software |
| CA2000594A1 (en) * | 1989-09-14 | 1991-03-14 | Wayne W. Chou | Method and apparatus for protecting computer software using a presettable counter in combination with an additional function |
| FR2654851B1 (en) * | 1989-11-23 | 1992-03-27 | Schlumberger Ind Sa | METHOD AND SYSTEM FOR SECURE OPERATION OF SOFTWARE. |
| US5033084A (en) * | 1990-04-02 | 1991-07-16 | Data I/O Corporation | Method and apparatus for protection of software in an electronic system |
| US5081676A (en) * | 1990-10-04 | 1992-01-14 | Chou Wayne W | Method and apparatus for protecting multiple copies of computer software from unauthorized use |
-
1991
- 1991-10-17 US US07/778,497 patent/US5222133A/en not_active Expired - Lifetime
-
1992
- 1992-10-14 CA CA002080531A patent/CA2080531C/en not_active Expired - Fee Related
- 1992-10-15 EP EP92117624A patent/EP0537738B1/en not_active Expired - Lifetime
- 1992-10-15 DE DE69214080T patent/DE69214080T2/en not_active Expired - Fee Related
Also Published As
| Publication number | Publication date |
|---|---|
| EP0537738B1 (en) | 1996-09-25 |
| EP0537738A3 (en) | 1993-08-11 |
| CA2080531A1 (en) | 1993-04-18 |
| US5222133A (en) | 1993-06-22 |
| DE69214080D1 (en) | 1996-10-31 |
| EP0537738A2 (en) | 1993-04-21 |
| DE69214080T2 (en) | 1997-02-27 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CA2080531C (en) | Method of protecting computer software from unauthorized execution using multiple keys | |
| US5495411A (en) | Secure software rental system using continuous asynchronous password verification | |
| KR100200443B1 (en) | Method of distribution software object | |
| US5365587A (en) | Self modifying access code for altering capabilities | |
| US5081676A (en) | Method and apparatus for protecting multiple copies of computer software from unauthorized use | |
| US5598470A (en) | Method and apparatus for enabling trial period use of software products: Method and apparatus for utilizing a decryption block | |
| US5689560A (en) | Method and apparatus for enabling trial period use of software products: method and apparatus for allowing a try-and-buy user interaction | |
| US5097504A (en) | Method and device for qualitative saving of digitized data | |
| US5138712A (en) | Apparatus and method for licensing software on a network of computers | |
| EP0679977B1 (en) | Method and apparatus enabling software trial allowing the distribution of software objects | |
| KR100200445B1 (en) | Method and equipment to protect access to file | |
| AU730253B2 (en) | Method and apparatus for operating resources under control of a security module or other secure processor | |
| US4593353A (en) | Software protection method and apparatus | |
| US5982899A (en) | Method for verifying the configuration the computer system | |
| US5748739A (en) | Access control for sensitive functions | |
| WO1985002310A1 (en) | Software distribution system | |
| US8130954B2 (en) | Methods and apparatus for authenticating data as originating from a storage and processing device and for securing software and data stored on the storage and processing device | |
| US20060112019A1 (en) | System and method of authenticating licensed computer programs | |
| EP1190291A1 (en) | Public cryptographic control unit and system therefor | |
| JPH05334072A (en) | Device and method for managing use of software | |
| JPH0743693B2 (en) | Access method | |
| CN101305377A (en) | Communication terminal device, server terminal device, and communication system using the same | |
| WO1988005941A1 (en) | Apparatus and method for regulating the use of proprietary computer software | |
| CN112286553B (en) | User lock upgrading method, device, system, electronic equipment and storage medium | |
| Bergen et al. | File security in WordPerfect 5.0 |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| EEER | Examination request | ||
| MKLA | Lapsed |