DE4419115A1 - Method of highly effective protection from unauthorised use of software copies - Google Patents

Abstract

The invention consists of a method of highly effective protection from unauthorised use of software copies, and is characterised by a co-ordinated combination of: . an individually programmed memory or processor chip card, which functions as an authorisation chip card and . a chip card reading device and . software to be protected and . a test program. The effectiveness of the software protection is based on the immunity to falsification of memory and processor chip cards. Since this method represents an economical and user-friendly solution, it is greatly superior to all methods which have been known until now for mass use.

Description

The invention provides a method for protecting against unauthorized use of software Copies.

Mainly the software known as so-called standard software in the PC area has no or insufficient protection against unauthorized persons Operate. Taking into account the enormous damage caused to the economy unauthorized operation and software piracy arise, it is understandable that different Efforts have been made to protect software or to prevent unauthorized operation. In the relevant specialist circles generally recognized that software cannot adequately protect software. In the Software built-in protection routines or programs on the same Storage medium stored like the program to be protected cannot offer complete protection, since such floppy disks are for example bit-by-bit Duplicate copies without authorization and then have them operated.

For this reason, attempts have been made several times, using additional special hardware components to achieve software protection. For example, by one so-called "dongle". A "dongle" is a plug with an integrated one electronic circuit, usually on the parallel interface of the PC is stuck. The electronic circuit of the dongle contains a code that cannot be copied and changed electronically. This code is through a special Authorization routine of the protected user program read if this User program is called. If this code is not found, e.g. B., because the "dongle" was not plugged into the parallel interface of the PC the user program is not executable.

With many PCs, this is not a viable way to protect the software, as it is "Dongles" are sometimes too large and too expensive, and some PCs are also common have no or non-standardized parallel interfaces.  

Another way of protection is through permanently installed hardware Security modules, which contain codes that have been saved by the program be queried. There must always be two security modules in a computer be present, since the handshake process is used. At the beginning one security module generates a random number which is then sent to the second security module is transmitted. Here is another encryption and the the two results are compared. If there is a positive match both modules change their function and repeat the test sequence. The two only open when this second check is also positive Security modules. All of the software is then available to the computer.

The disadvantage of this protection is that all of the software is protected should be matched to the computer, because the programs are fixed query installed safety modules. This means that the software is not on any other computer is executable.

Another attempt was to install plug-in cards in the computer system, which contain a data generator that corresponds to the software to be protected. The decisive disadvantage here is also that these plug-in cards permanently installed in the computer and therefore the software only on this Computer system is executable. This is at the expense of flexibility and user friendliness. The cost of this procedure is relatively high.

For the reasons mentioned, there is de facto no procedure for a broad economic Application found. The new procedure described below is both from the point of view of simple technical feasibility and under an entirely new approach from an economic point of view, as it relies on the use of storage or processor chip cards.  

The invention is based on the idea that the purchaser of software from Manufacturer gets a memory or processor chip card included.

This chip card must have an integrated or externally connected computer Chip card readers can be made accessible to a test program that is run by the software to be protected is activated. The content of the test program read the chip card. If the expected content is found, this is considered correct Legitimation for the application program. If no chip card is found or a different content than expected, the program to be protected is terminated.

The memory or processor chip card can be from the manufacturer of the software Any requirements for the protection of his product become.

So it is possible that every software manufacturer has a cost-benefit Relationship creates.

A process example for the operation of protected software on a PC System is described verbally and schematically in the drawing below.

In order to be able to operate the protected software ( 4 ) on the computer system, the computer system must be equipped once with a chip card reading device ( 2 ). Since corresponding hardware components can be purchased on the market for the price of a PC floppy disk drive and can be easily integrated into an existing PC system using a plug-in card, the hardware requirements can be created quickly and inexpensively. It is now dependent on the design of the test routines in the software to be protected, whether the presence of the chip card ( 1 ) belonging to the software is queried when the software is installed on the hard disk or only when working with the software. If the check routine does not find any or not the correct chip card, this leads to an abort immediately or after n attempts. The method works in the same way when operating the software ( 4 ) to be protected from a CD-ROM ( 6 ) or floppy disk drive ( 7 ).

For smooth operation of the protected software, it makes sense if the Manufacturer itself offers chip card readers for sale or chip card readers recommends certain types to the user, as this enables him to coordinate the test routine can make in the software on the driver software of the chip card reader.

A major advantage of this protection process over previous developments for the user is that

• a) the user backup copies at any time without any problems to an unlimited extent can make (however, the copies cannot be executed without a chip card);
• b) the software can be installed on several computer systems (but only on is executable in the computer system that finds the chip card).

This provides the user with a maximum of flexibility and comfort.

A major advantage of this protection process over previous developments for the software developer is that

• a) memory and processor chip cards can be purchased inexpensively and thus do not lead to a significant increase in the price of his product;
• b) an improper duplication of chip cards usually with a reasonable one economic effort is not possible;
• c) an unauthorized reading of the data on a chip card by appropriate internal security devices on the chip card can be prevented;
• d) depending on the level of protection of the software, the level of security is flexibly defined by it and financial damage from pirated copies as much as possible can be averted;
• e) Chip cards offer a very high level of reliability, are robust and therefore suitable for the are suitable for frequent use;
• f) the software manufacturer can use the test program to check an expiry date for the license written on the chip card and thus possibly an unauthorized person Operation of the software, via one stipulated in the license agreement Date beyond.

Due to the options known in specialist circles, memory and processor Protecting chips against misuse is the effectiveness and the level of security depends solely on the level of software providers below Wants to achieve consideration of costs / benefits.

The details of the structure and security features of smart cards are full content on the statements in "Chip Cards as Security Tools" from Beutelspacher, Kersten, Pfau, published by Springer Verlag in 1991, referenced.

Claims (4)

1. A method for highly effective protection against unauthorized use of software copies, characterized by a coordinated combination of

• a) an individually programmed memory or processor chip card ( 1 ), which acts as an authorization chip card and
• b) a chip card reading device ( 2 ) which is integrated in the computer system or connected to the computer via an external interface and
• c) software ( 4 ) to be protected on a secondary storage medium ( 5 ), ( 6 ) or ( 7 ) and
• d) a test program ( 3 ) called up by the software to be protected.

2. The method according to claim 1, characterized in that this Protection procedure can be implemented on all common computer systems. 3. The method according to claim 1, characterized in that the chip card reader Device can be designed for one or more chip cards. 4. The method according to claim 1, characterized in that the memory or Processor chip card may contain an expiry date for software licenses.