FR2851669A1 - Software or digital information use authorizing process, involves comparing codes and information entries with confidential information and not performing utilization of product if compared information is not correct - Google Patents

Abstract

The process involves implementing reading and writing electronic unit in a detachable support e.g. bank card to store digital information. A confidential information medium belonging to a user and product requiring user authorization is provided by the support. Codes and information entries is compared with the confidential information. Utilization of the product is not performed if the compared information is not correct.

Description

The present invention relates to a method for

  minimize the use of computer software or program or data files in digitized forms by unauthorized users or who have not acquired the rights to use these products.

  For many years the publishers of software or multimedia products disseminated in the form of digitized files have developed protection systems to prevent the use of its products by unauthorized persons or who have not acquired the rights of use.

  The means or methods developed aim to prevent or make difficult on the one hand copies of these products when they are stored on physical media and or on the other hand the installations and or the uses of these products by software means using protocols and conditions for authorization checks by entering key codes or unique identification codes linked to the products, and assigned confidentially to the authorized user, who is normally the only one to know.

  At present, these forms of use authorization controls do not prevent copies, installations and uses of these products by unauthorized users, in particular by the dissemination of key codes and / or access codes. identifications, and or small software programs making it possible to generate these codes.

  Limiting use to authorized users only is a major concern for publishers because its non-compliance generates a shortfall far from being negligible, and which could, if it were reduced, lead to a drop in the sale prices of the products distributed.

  The object of the present invention is the implementation of means according to a protocol which strongly curbs the incentive to disseminate authorization code for the use of software or of files storing data in digitized forms whose use is limited. only authorized users or those who have paid the user fees, using codes 2 2851669 personal to users such as bank card codes for example, which users will be reluctant to distribute.

  The present invention comprises a means (MA) for reading and writing from and on a removable storage means (MB) on which can be read or written identification codes and identification protocols in digital form such as smart cards or magnetic cards for example. The latter means (MB) is allocated in a single copy 10 to the authorized user of the software or of the digital file (PP), when purchasing or assigning the right of use. The reading and writing means (MA) may also have the capacity to read information recorded in and or on another personal means (MC) belonging exclusively to the user. This means (MC) has digitized and adapted identification and personal information to the user such as a bank card by

example.

  The reading and writing means (MA) can be incorporated into a personal computer, a computer terminal, or a multimedia playback device for example, and this in a manner consistent with future developments allowing, among other things, the possibility make online payments for services or purchases offered by publishers or various suppliers of multimedia products, for example. This means is interfaced electronically and by software adapted to the hardware in which it is installed.

  The means (MB) allocated to the user during the allocation of the right to use the software or multimedia product (PP) may contain stored information that cannot be modified, such as a unique and exclusive encrypted code, for example linked to a unique identification number for the software or multimedia product (PP) that the user can use.

  The software or multimedia product (PP) comprises a software means (ML) making it possible to carry out the installation protocol and a software means (AL) making it possible to launch or 3 2851669 to use and uninstall the software (PP) after its installation and to ensure the authorization of the user, by implementing the means (MA) and by asking the user to introduce or remove the means (MB) and (MC) 5 according to precise sequences and by asking the user to respond to requests for input of codes, and or identifiers, to validate his responses so that the protocols continue. The software (ML) and (AL) include protocols for comparing the stored information and the information entered by the user in order to validate the authorization of the user.

  Non-compliance with the protocols according to the software means (ML) or (AL) and or the detection of inconsistencies during comparisons between the numbers, and or the identification codes, in conjunction with the software identification code leads to the interruption of the operation initiated by the user such as installation, or launching, or uninstalling.

  According to another characteristic of the method according to the invention, the software means (AL) makes it possible in a simple way to display on a display screen available to the device in which the means (MA) is installed, the confidential information of the authorized user stored in or on the medium (MB).

  According to another characteristic of the method according to the invention, the software means (AL) makes it possible to uninstall the software (PP) and authorizes only during this uninstalling the erasure of the identification and authorization information stored on and or in the means (MB) according to a protocol reverse to that of the installation.

  According to another characteristic of the method according to the invention, the means (MA) comprises a memory managed by the software (ML) and (AL).

  According to another characteristic of the method according to the invention, the means (MA) can consist of 2 separate hardware means: one for reading and writing on and or in the removable storage means (MB), the another of reading at least, and possibly writing on and in a removable means (MC) containing digital information belonging and personal to the user and allowing identification.

  According to another characteristic of the method according to the invention, the means (MA) can consist of a single material means combining the reading and writing capacity on and or in the means (MB) and the reading capacity at least and possibly writing on and or in the means (MC).

  According to another characteristic of the method according to the invention, the means (MB) has the capacity to memorize digital information and to keep it in memory in the absence of any electrical energy.

  According to another characteristic of the method according to the invention, the means (MB) can comprise electronic means of the semiconductor type consisting of a chip card and or magnetic storage means.

  According to another characteristic of the method according to the invention, the means (MC) is characterized in that it comprises confidential digital information linked to the owner or the bearer of the means (MC) and that he will not want to broadcast.

  According to another characteristic of the method according to the invention, the means (MC) comprises electronic means of the semiconductor type consisting of a smart card or magnetic means of the magnetic card type in which codes, identifiers are stored. and or personal passwords to the user.

  For example, the user acquires software 30 (PP) distributed on a physical medium consisting of a CD-ROM for example. The software (PP) includes a unique identification number (IPP). This is accompanied by a means (MB) in which: either an identifier number (IMB) linked to (IPP) cannot be modified beforehand, or an identifier number (IMB) linked to (IPP) will be registered when installing the software (PP) according to the protocol (ML). The identifying number once saved cannot be changed.

  After launching the installation of the software according to a standard process, the application (ML) according to the invention asks the user to introduce the means (MB) into the means (MA), after verification and validation of this introduction into (MA) the application either requests the user to enter the identifying number (IMB) linked to (IPP) and saves it in encrypted form for example in the means (MB) or the application (ML) 10 directly stores the identifying number (IMB) linked to (IPP) on the medium (MB) always in encrypted form, or this step is passed because the identifying number is already registered on the medium (MB). editable.

  After validation of this first part, the application 15 (ML) asks the user to enter his bank card number (IC) for example, this number is stored locally and temporarily in a memory of the means (MA) and in the means (MB) in encrypted form, then the application requests to remove the means (MB) from the means (MA) and to introduce the means (MC) bank card for example in the means (MA) After verification and validation of the introduction of (MC) in (MA), the application (ML) reads the bank card number (IC) and compares it with the information stored in the means (MA), if the answer is correct, the 'application (ML) 25 asks the user to enter his personal code (CP) linked to his bank card for example, then after validation of the entry, the application (ML) checks the code linked to the card (MC) . If the code is correct, it is temporarily and locally saved in the memory of the medium (MA) according to the application protocol (ML), then the application (ML) asks the user to remove the medium ( MC) of the medium (MA) and reintroducing the medium (MB) there.

  After verification and validation of the introduction of (MB) in (MA) the application (ML) requests confirmation of the user's personal code number (CP) number 35 corresponding to his bank card for example. If the answer is correct by 6 2851669 comparison with the information stored in the memory of (MA), the code (CP) and a validation code (CV) are recorded in encrypted form in the medium (MB), then the application erases the codes stored temporarily and 5 locally in the memory of the medium (MA), then the continuation of the actual installation of the software (PP) is launched until its successful completion.

  After installation when the user launches the software (PP) to use it, according to the invention, the software 10 (PP) activates a launch application (AL) which requests the user to introduce the means (MB) in the medium (MA) then after verification and validation of the introduction of (MB) in (MA), the application (AL) compares the information recorded in the medium (MB) such as the identifying number (IMB) with the 15 software number (IPP) and verifies the presence of the validation code (CV) and if the answer is correct, the application (AL) can ask or not according to the option chosen the user to enter his code number personnel (CP) which is in this case compared to the number recorded in the medium (MB) during installation. If the number entered is correct, if requested, the software (PP) is launched.

  When launching software (PP), the application (AL) authorizes the display of the number (IC) as well as the confidential code (CP) of the bank card for example, in order to limit the risks of lending the medium (MB ) to other unauthorized persons.

  In all cases and at least the software (PP) needs the introduction of the medium (MB) correctly personalized in the medium (MA), otherwise the launch of the software (PP) is canceled.

  the application (AL) comprises a software uninstall protocol (PP) for example, which makes it possible to erase the numbers (IC) and the code (CP) corresponding to the means (MC), the bank card for example recorded in the medium (MB) after introduction of the latter into the medium (MA). This deletion is effectively carried out after verification by the uninstall protocol that the software (PP) has actually been uninstalled. This allows you to transfer the software (PP) and the rights linked to another user.

Claims (9)

  1) A method limiting the use of software or digital files to and or only to authorized persons, characterized in that it includes software means of identification by requests for input of information and or 5 of passwords and or codes characterized in that this information and or passwords and or codes are truly confidential for the authorized user so that he is reluctant to communicate them to other unauthorized persons such as number and personal bank card code by example, characterized in that it includes means for reading and writing digital information on and or in a compatible removable medium, characterized in that it uses a removable compatible identification medium, distributed with the right of use or of the license, which can be read and which can store digitized information. Characterized in that it includes a means of reading personal and confidential information such as bank cards for example, characterized in that the installation, use and uninstallation are respectively interrupted and not carried out if the protocols are not respected and / or if the credentials are not correct 2) Method according to the preceding claim characterized in that the means for reading and writing digitized information and the means for reading personal information can be combined in the same means.   3) Method according to the preceding claims characterized in that the protocol, included in the software means, validates the confidential nature of the information requested, by reading confidential memorized information 30 in and on, a removable personal support such as a bank card by example.   4) Method according to the preceding claims characterized in that the protocol, included in the software means, compares the entries of confidential identifications requested from the user, with the information stored and read on or in a removable personal medium such as a card banking for example.   5) Method according to the preceding claims, characterized in that the protocol, included in the software means, writes all the identification information of the software or of the digital file and confidential identifications of the authorized user on or in a removable medium. identification provided with the right or license for use whose use is necessary to install, and or use, and or uninstall the software or digital file.   6) Method according to the preceding claims 15 characterized in that a removable identification support provided with the right or license for use, stores all the identification information of the software or multimedia file, and confidential identification of the authorized user to link them together.   7) Method according to the preceding claims, characterized in that the use of the software or of the digital file after installation requires the introduction into a reading and writing means, of a removable identification medium, provided with the right or the license 25 for use, having previously stored all the identification information during the installation, including that which is confidential.   8) Method according to the preceding claims, characterized in that the protocol for launching the software or for starting the reading of the digital file after introduction of a removable identification medium, allows the display of confidential information contained therein.   9) Method according to the preceding claims 35 characterized in that the software or digital file uninstall protocol makes it possible to erase confidential identification information stored in or on the removable identification means.