JP2004240719A - Software execution control method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a software execution control system for preventing the illegal duplication of software concerning software stored in an information recording medium and an electronic equipment terminal, and for executing the software concerning a legal electronic equipment terminal. <P>SOLUTION: A secrecy area 4 accessible with the establishment of the two-way authentication of an information recording medium 1 as a condition is provided with key information 6 or hash information 7 associated with software 8 stored in a non-secrecy area 5, and a software execution control part 10 controls the execution of the software based on information stored in the secrecy area 4. <P>COPYRIGHT: (C)2004,JPO&NCIPI

Description

[0001]
[Technical field to which the description belongs]
The present invention relates to a semiconductor memory card for recording digital data and a reading device therefor, and more particularly to a software execution control method when digital data is software.
[0002]
[Prior art]
Software that is digital data can be copied indefinitely without loss of data, and the recent development of the network environment has made it possible for users who do not have proper ownership to illegally obtain it using the network environment ing. In general, such software is configured to be installed by only an authorized owner by inputting ID information acquired from a software vendor at the time of installation. However, when such ID information is leaked together with the copy of the software, even a user who does not have the proper ownership can install the software.
[0003]
As a method of controlling the execution of the software, it is assumed that the user who executes the software owns hardware having an authentication key as user-specific information, and the user starts the software and reaches an access authentication routine embedded in the software. Communicates with hardware that has a built-in authentication key connected in advance to the parallel port or USB port, and if the presence of the correct authentication key is confirmed, execution proceeds to the next step, and the presence of the correct authentication key is not confirmed In such a case, there is a method in which the software stops itself and prevents subsequent execution. According to this method, it becomes possible for anyone other than the user who owns the hardware having the proper authentication key to execute the software.
[0004]
However, such a method requires a module for performing authentication with the hardware in software. Therefore, it is necessary to perform processing such as installing a module using dedicated software.
[0005]
There is also a method in which the entire software itself is encrypted with a dedicated key, and the key is decrypted at the time of execution to execute the software. For example, Patent Literature 1 describes a method of encrypting software stored in a recording medium using a software key, and decrypting the software when the software is executed. Here, the key for encrypting the software is encrypted using a random number, and the host connected to the recording medium decrypts the key using the same random number.
[0006]
On the other hand, there is a method in which a semiconductor memory card has a copyright protection function and encrypts and holds digital contents. For example, in Patent Document 2, a semiconductor memory card has a copyright protection function, authentication is performed between an electronic device and a semiconductor memory card, and if authentication is successful, a key for encrypting digital content can be obtained. It is described that it becomes a possible method.
[0007]
[Patent Document 1]
JP-A-9-185501
[Patent Document 2]
JP 2001-14441 A
[0008]
[Problems to be solved by the invention]
In recent years, mobile devices such as PDAs, which are small electronic devices, have become widespread, but in general, these portable electronic devices have relatively small internal data capacity. On the other hand, as the data capacity of software has become larger, the number and amount of software installed in electronic devices have been limited. For this reason, it can be assumed that software is installed on the information recording medium, and the software stored with the information recording medium mounted on such a portable electronic device is used. In this case, in order to further prevent unauthorized copying of software, it can be assumed that the software is encrypted and stored in the information recording medium, and is decrypted and used at the time of execution. In general, it is difficult for stored software to be processed at high speed. However, a specific software execution control method that is advantageous in such a case is not disclosed in Patent Documents 1 and 2 described above.
[0009]
SUMMARY OF THE INVENTION The present invention has been made in view of such a problem, and holds an encrypted software and a key used for encryption on an information recording medium, and mounts the information recording medium on a portable electronic device such as a PDA. Accordingly, the present invention relates to a method for controlling the execution of software stored in an information recording medium that enables the stored software to be executed at high speed.
[0010]
[Means for Solving the Problems]
Among the inventions for achieving the above object, the invention of claim 1 is a software comprising an information recording medium constituted by a nonvolatile memory such as a semiconductor memory and a software execution control unit implemented by hardware or software. An execution control method, wherein the information recording medium has a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium, and without passing through a specific authentication processing procedure. Also provided with a non-concealed area accessible, the secret area is key information that is information about a key for encrypting the software that is digital data stored in the non-confidential area of the information recording medium, The software stored in the non-confidential area is obtained as an input value by a hash function which is a so-called one-way function. Hash information that is information about a hash value to be stored in the non-secret area, the software encrypted by the key is provided, and the software execution control unit passes through the information recording medium and a specific authentication processing procedure. Reading the key information and the hash information stored in the secret area of the information recording medium, and calculating a decryption process and a hash value of the software stored in the non-secret area of the information recording medium. A function of controlling the execution of the software.
[0011]
According to a second aspect of the present invention, in addition to the software execution control method according to the first aspect, the key information stored in the secret area of the information recording medium encrypts the software stored in the non-secret area. The hash information stored in the secret area of the information recording medium includes information of a key for encrypting, and the software stored in the non-secret area encrypted by the key is encrypted. It is characterized in that it has a configuration including a hash value obtained by using the converted data as an input value for a hash function which is a so-called one-way function.
[0012]
According to a third aspect of the present invention, in addition to the software execution control method according to the first aspect, the key information stored in the secret area of the information recording medium encrypts the software stored in the non-secret area. The hash information stored in the secret area of the information recording medium includes information of a key for encrypting the data, and is a so-called one-way function using data before encryption by the key as an input value. The present invention is characterized in that the configuration includes a hash value obtained by using the hash function.
[0013]
According to a fourth aspect of the present invention, in addition to the software execution control method according to the first aspect, the hash information stored in the secret area of the information recording medium is encrypted after the encryption in the software file or after the encryption. It is characterized in that data of a part of the area before the data is used as an input value to a hash function which is a so-called one-way function.
[0014]
The invention of claim 5 is a software execution control method including an information recording medium including a non-volatile memory such as a semiconductor memory and a software execution control unit implemented by hardware or software. The medium includes a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium, and a non-secret area that can be accessed without passing through the specific authentication processing procedure, The secret area includes key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium, and the key information that is stored in the non-secret area. The data after or before the software is encrypted is used as the input value to the so-called one-way function hash function. In the case of using, information about a unique hash value with respect to the software, wherein a partial area used as an input value to a hash function of the software is obtained by using data composed of a plurality of areas, Hash information including offset information for each of the areas, the non-secret area includes the software encrypted by the key, and the software execution control unit executes the information recording medium and the specific authentication processing. The key information and the hash information stored in the secret area of the information recording medium are read through a procedure, and the decryption processing and the hash value of the software stored in the non-secret area of the information recording medium are performed. Software having a function of controlling the execution of the software by calculating It is a line control method.
[0015]
The invention according to claim 6 is a software execution control method including an information recording medium including a non-volatile memory such as a semiconductor memory and a software execution control unit implemented by hardware or software. The medium includes a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium, and a non-secret area that can be accessed without passing through the specific authentication processing procedure, The secret area includes key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium, and the key information that is stored in the non-secret area. The data after or before the software is encrypted is used as the input value to the so-called one-way function hash function. When used, the hash value is calculated using data in which a part of the area used as the input value to the hash function of the software is composed of a plurality of areas, and the hash value of each calculated area is calculated. The hash information including a logical operation result, the non-secret area includes the software encrypted by the key, and the software execution control unit passes through the information recording medium and the specific authentication processing procedure. Reading the key information and the hash information stored in the secret area of the information recording medium, and calculating a decryption process and a hash value of the software stored in the non-secret area of the information recording medium. And a function for controlling the execution of the software.
[0016]
According to a seventh aspect of the present invention, in addition to the software execution control method according to the sixth aspect, the hash information stored in the secret area of the information recording medium is encrypted after or after the software is encrypted. When the previous data is used as an input value to a hash function that is a so-called one-way function, a hash function in which each area is not necessarily the same using data in which the data includes a plurality of areas is used. A hash value is calculated using the hash value, and a value obtained by a logical operation result of the calculated hash value is included in the hash information.
[0017]
In the invention according to claim 8, in addition to the software execution control method according to claim 6, the hash information stored in the secret area of the information recording medium is encrypted after or after the software is encrypted. When the previous data is used as an input value to a hash function which is a so-called one-way function, a part of an area used as an input value to the hash function of the software is configured by a plurality of areas, and each area Are calculated using a hash function that is not necessarily the same, and a value calculated solely for the software obtained by a logical operation result of the calculated hash value for each calculated area, and at least the respective values The information of the function used for calculating the hash value of the area or the information of the offset which is the information of the area in the software is Characterized in that it is included in the serial hash information.
[0018]
According to a ninth aspect of the present invention, in addition to the software execution control method according to the sixth aspect, the hash information stored in the secret area of the information recording medium is encrypted after or after the software is encrypted. When the previous data is used as an input value to a hash function which is a so-called one-way function, a part of the area used as an input value to the hash function of the software uses data configured from a plurality of areas. In each of the regions, a hash value is calculated using a hash function that is not necessarily the same, and at least the calculated hash value for each of the calculated respective regions or the calculated hash value of each of the regions is used. The hash information may include information on the set function or offset information that is information on an area in the software.
[0019]
The invention according to claim 10 is a software execution control method including an information recording medium including a nonvolatile memory such as a semiconductor memory and a software execution control unit implemented by hardware or software. The medium includes a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium, and a non-secret area that can be accessed without passing through the specific authentication processing procedure, The secret area includes key information that is information about a key for encrypting a partial area of the software that is digital data stored in the non-secret area of the information recording medium; The data stored in the area after the software is encrypted or before it is encrypted is converted into a so-called one-way function, And hash information that is information on a hash value obtained as an input value to the lock function, the non-secret area includes software in which a part of the area is encrypted by the key, and the software execution control unit includes: The key information and the hash information stored in the secret area of the information recording medium are read through the information recording medium and the specific authentication processing procedure, and are stored in the non-secret area of the information recording medium. A software execution control method having a function of controlling execution of the software by decoding the software or calculating a hash value.
[0020]
According to an eleventh aspect of the present invention, in addition to the software execution control method according to the tenth aspect, key information, which is information on a key stored in the secret area of the information recording medium, is stored in the non-secret area. In the software that is digital data, an area excluding some unencrypted areas is divided into a plurality of areas, and information on a unique key for the software when performing encryption processing on each area, The key information includes offset information for the area.
[0021]
According to a twelfth aspect of the present invention, in addition to the software execution control method according to the tenth aspect, key information, which is information about a key stored in the secret area of the information recording medium, is stored in the non-secret area. In the software that is digital data, an area excluding a part of an unencrypted area is divided into a plurality of areas, and key information for each area when each area is subjected to encryption processing, and each of the areas , And each of the areas to be encrypted of the software is encrypted by the same encryption algorithm using the encryption key.
[0022]
According to a thirteenth aspect of the present invention, in addition to the software execution control method according to the tenth aspect, key information, which is information on a key stored in the secret area of the information recording medium, is stored in the non-secret area. Key information including only key information for the software when the area of the software which is digital data, except for some unencrypted areas, is divided into a plurality of areas and each area is subjected to encryption processing. The software is characterized in that the respective areas are encrypted using an encryption algorithm that is not necessarily the same using the key.
[0023]
According to a fourteenth aspect of the present invention, in addition to the software execution control method according to the tenth aspect, key information, which is information on a key stored in the secret area of the information recording medium, is stored in the non-secret area. Among the software that is digital data, an area excluding a part of the area that is not encrypted is divided into a plurality of areas and at least key information different from the software when performing encryption processing on each area, or Information indicating an encryption algorithm for encrypting each area, or key information including an offset indicating which part of the software has been encrypted, and the software uses the key to The region is encrypted by an encryption algorithm that is not necessarily the same.
[0024]
The invention of claim 15 is a software execution control method including an information recording medium including a non-volatile memory such as a semiconductor memory and a software execution control unit implemented by hardware or software. The medium includes a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium, and a non-secret area that can be accessed without passing through the specific authentication processing procedure, The secret area includes key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium, and the key information that is stored in the non-secret area. It is information on a hash value obtained by a hash function which is a so-called one-way function using software as an input value. And the non-confidential area includes the software encrypted by the key, and the software execution control unit passes the information recording medium and the specific authentication processing procedure to the information recording medium. The key information and the hash information stored in the secret area are read, and the software execution is controlled by calculating a decryption process and a hash value of the software stored in the non-secret area of the information recording medium. The software area stored in the non-concealed area and encrypted using the key stored in the secret area, and the software stored in the non-concealed area Is not the same as the area of the software when using as the input value of the so-called one-way function hash function. It is a software execution control method according to claim.
[0025]
The invention according to claim 16 is a software execution control method including an information recording medium including a non-volatile memory such as a semiconductor memory and a software execution control unit implemented by hardware or software. The medium includes a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium, and a non-secret area that can be accessed without passing through the specific authentication processing procedure, The secret area includes key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium, and the key information that is stored in the non-secret area. It is information on a hash value obtained by a hash function which is a so-called one-way function using software as an input value. And the non-confidential area includes the software encrypted by the key, and the software execution control unit passes the information recording medium and the specific authentication processing procedure to the information recording medium. The key information and the hash information stored in the secret area are read, and the software execution is controlled by calculating a decryption process and a hash value of the software stored in the non-secret area of the information recording medium. The key information and the hash information stored in the confidential area, so that the software stored in the non-concealed area can be uniquely identified. The entry number of the key information, the hash information, and a part of the software file name are the same number. And wherein the door.
[0026]
The invention according to claim 17 is a software execution control method including an information recording medium including a nonvolatile memory such as a semiconductor memory and a software execution control unit implemented by hardware or software. The medium includes a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium, and a non-secret area that can be accessed without passing through the specific authentication processing procedure, The secret area includes key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium, and the key information that is stored in the non-secret area. It is information on a hash value obtained by a hash function which is a so-called one-way function using software as an input value. Hash information and usage information including a file name of the software corresponding to the key information and the hash information stored in the non-secret area, and the non-secret area is encrypted by the key. The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium via the information recording medium and the specific authentication processing procedure, and It has a function of controlling the execution of the software by calculating a decryption process or a hash value of the software stored in the non-secret area of the recording medium.
[0027]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings, but it is needless to say that the technical scope of the present invention is not limited thereby.
[0028]
(Embodiment 1)
FIG. 1 is a diagram schematically illustrating an entire software execution control method according to Embodiment 1 of the present invention.
[0029]
The software execution control method shown in FIG. 1 includes an information recording medium 1, an information recording medium I / F 9, and a software execution control unit 10.
[0030]
The information recording medium 1 is, for example, an intelligent card having a semiconductor memory such as an SD memory card and a CPU, and having a copyright protection function that allows transmission of external data to the semiconductor memory on condition that a mutual authentication process is established. Yes, it includes unique information 2, memory area 3, secret area 4, non-secret area 5, key information 6, hash information 7, and software 8.
[0031]
The unique information 2 is information unique to the information recording medium 1, and is information used as a key for encrypting data to be encrypted and stored in the memory area 3. The memory area 3 has an information recording medium 1 and a secret area 4 that can be accessed on condition that the mutual authentication processing of the software execution control unit 10 is established. It is composed of a non-secret area 5. In the information recording medium 1 of FIG. 1, software 8 is stored in a non-secret area 5, and software 8 is stored in the secret area 4 using a specific encryption algorithm represented by, for example, DES or triple DES. Key information 6 that is information including a key used when encrypting data, and using software 8 as input data to generate a fixed-length pseudo-random number from a given original text such as MD5 or SHA-1 Hash information 7, which is information including a hash value calculated using a hash function as a function, is stored.
[0032]
The information recording medium I / F 9 is an I / F for connecting the information recording medium 1 and, if it is a portable electronic device such as a PDA, corresponds to a slot for connecting the information recording medium 1.
[0033]
The software execution control unit 10 is a system composed of hardware or software for processing information such as software 8 stored in the information recording medium 1, and includes a mutual authentication processing unit 11, a hash information processing unit 12, A decoding processing unit 13 and an execution determination unit 14 are provided.
[0034]
The mutual authentication processing unit 11 has a function of performing a mutual authentication process of performing an authentication process with the information recording medium 1 by a processing method such as a so-called challenge response method including an encryption process. The hash information processing unit 12 has a function of calculating a hash value of the input digital data. The decoding processing unit 13 has a function of decoding digital data. The execution determination unit 14 has a function of determining whether the software 8 read from the information recording medium 1 is executable based on a result of the hash information or the like.
[0035]
Since the software execution control unit including such hardware or software is incorporated in a device such as a personal computer or an electronic device, the execution of the software 8 stored in the information recording medium 1 can be controlled. It becomes.
[0036]
FIG. 2 shows a specific example of information stored in the secret area 4 of the information recording medium 1. In FIG. 2, key information 6 and hash information 7 are information on software 8 stored in non-secret area 5, and these are stored in file 20. FIG. 2 further shows an example of file 20 in which usage information 21 is stored as key information from data offset 0 to offset X, hash information from offset X to offset Y, and other information from offset Y to offset Z. Is shown. Here, the usage information 21 describes the usage information of the software 8 and is information including the number of times of use of the software 8, the usage period, the identification information, and the like.
[0037]
FIG. 2 shows the file 20 including the key information 6, the hash information 7, and the usage information 21 for one piece of software 8, but shows a plurality of pieces of software 8 stored in the non-secret area 5. A configuration in which information such as the key information 6, the hash information 7, and the usage information 21 are included in one file may be adopted. In addition, all or a part of the other information such as the key information 6, the hash information 7, and the usage information stored in the confidential area 4 as shown in the file 20 is the unique information 2 of the information recording medium 1. A configuration may be used in which the data is encrypted and stored in the secret area 4.
[0038]
Since the information having the configuration as shown in FIG. 2 is stored in the secret area 4 of the information recording medium 1, the device that executes the software 8 stored in the non-secret area 5 of the information recording medium 1 performs software execution control. It is necessary to establish a mutual authentication process with the information recording medium 1 via the unit 10 and first read out the information stored in the secret area 4. Next, the execution of the software 8 can be controlled based on the read key information 6, hash information 7, and usage information 21.
[0039]
Next, the configuration of data stored in the information recording medium 1 will be described.
[0040]
FIG. 3 shows an outline of the relationship between the key information 6 and the hash information 7 stored in the secret area 4 and the software 8 stored in the non-secret area 5. In the figure, software 8 stored in the non-secret area 5 is first encrypted using a key as shown in (1). At this time, key information 6 including the encrypted key is stored in secret area 4. Next, a hash value of the encrypted software 8 is calculated as shown in (2). Similarly, the hash value information 7 including the calculated hash value is stored in the secret area 4.
[0041]
FIG. 4 shows a flowchart in the case where the information held in the secret area 4 is created by the method shown in FIG. The flowchart shown here shows a processing method performed by a host device such as a personal computer or a portable electronic device having a function of writing data in the secret area 4 and the non-secret area 5 of the information recording medium 1. First, the host device encrypts software stored in the information recording medium 1 using an encryption algorithm (step S10). At this time, key information used when encrypting the software is stored (step S11). Next, hash information is calculated from the software encrypted in step S10 (step S12). At this time, the calculated hash information is held (step S13). Next, a mutual authentication process is performed with the information recording medium 1 (step S14). If the mutual authentication processing has failed, the processing ends without storing data in the information recording medium 1 (step S15). If the mutual authentication process is successful, the encrypted software is written in the non-secret area 5 in the information recording medium 1 (step S16). Next, the stored information such as key information, hash information, and other usage information 21 is written into the secret area 4 in the information recording medium 1 (step S17), and the process ends.
[0042]
Since the information configured by such processing is written in the secret area 4 of the information recording medium 1 and the encrypted software 8 is written in the non-secret area 5, unauthorized use of the software 5 can be prevented.
[0043]
(Embodiment 2)
Here, as the second embodiment, a method of calculating the key information 6 and the hash information 7 stored in the secret area 4 of the information recording medium 1 which is different from the first embodiment will be described. Other configurations of the entire system are the same as those in the first embodiment, and thus description thereof will be omitted.
[0044]
FIG. 5 shows a case where the method of calculating the hash information 7 shown in FIG. 3 of the first embodiment is different. In the figure, the software 8 stored in the non-confidential area 5 first calculates a hash value as shown in (1). At this time, the hash information 7 including the calculated hash value is stored in the secret area 4. Next, as shown in (2), it is encrypted using a key. Then, key information 6 including the key used for the encryption is stored in the secret area 4.
[0045]
FIG. 6 shows a flowchart in the case where the information held in the secret area 4 is created by the method shown in FIG. The flowchart shown here shows a processing method performed by a personal computer having a function of writing data in the secret area 4 and the non-secret area 5 of the information recording medium 1 and a host device such as an electronic device. First, the host device calculates a hash value using a hash algorithm for software stored in the information recording medium 1 (step S20). At this time, the calculated hash information is held (step S21). Next, the software is encrypted using an encryption algorithm (step S22). At this time, key information used when encrypting the software is stored (step S23). Subsequent procedures are the same as the processing method shown in steps S14 to S17 of the first embodiment shown in FIG.
[0046]
Since the information composed by such processing is written in the secret area 4 of the information recording medium 1 and the encrypted software 5 is written in the non-secret area 5, unauthorized use of the software 5 can be prevented.
[0047]
(Embodiment 3)
Here, as the third embodiment, in order to realize the software execution control method shown by the method of the first or second embodiment, the hash information 7 stored in the secret area 4 of the information recording medium 1 is described. In particular, a method of calculating a hash value will be described. Other configurations of the entire system are the same as those of the execution control method described in the first embodiment, and thus description thereof will be omitted.
[0048]
FIG. 7 is a diagram of an example showing the hash information 7 in detail. The hash information 7 stored in the secret area 4 includes information indicating which part of the data for which the hash value is to be calculated is used for the hash value calculation, and the hash value calculated from the area. In FIG. 7, the hash value is calculated using the data of the area having the length N from the offset A to B and the length M from the offset C to D of the data for which the hash value is to be calculated. FIG. The first hash target area information 71 in the hash information 7 is composed of information such as offset information from the offset A to the offset B of the software 8 which is the data whose hash value is to be calculated. On the other hand, the second hash target area information 72 in the hash information 7 is composed of information such as offset information such as an offset C to an offset D of the software 8 which is data for which a hash value is to be calculated. As the hash value 73 in the hash information 7, a hash value calculated from the first hash target area information 71 and the second hash target area information 72 is written. As described above, by writing information such as an offset of data for calculating a hash value in the hash information 7 of the secret area 4, it is possible to set hash information of an arbitrary size and offset regarding the software 8.
[0049]
The values of the offsets A, B, C, and D of the software 8 shown here may be arbitrary values determined by, for example, a certain mathematical expression depending on the size of the data of the software 8, or may be important values in the software. It may be a value arbitrarily determined by the provider of the software 8 in order to check for tampering of the part. Here, an example is shown in which two pieces of hash target area information are stored, but one may be used, and a mechanism that can store two or more pieces of information may be used.
[0050]
Furthermore, a hash value of a plurality of areas is calculated in advance from an area used for calculating a hash value of the software 8, and a value stored in a hash value area 73 in the hash information 7 of the secret area 4 is: A value obtained by a logical operation of a value obtained by calculating a hash value of the plurality of areas may be used. Furthermore, at this time, an example is shown in which the hash values are calculated for the areas from A to B and C to D using the same hash function, but the type of the hash function to be used is changed according to the hash value calculation target area. Although not shown, it is held in the hash information 7 such as the first hash target area information 71 and the second hash target area information 72 together with information on what kind of hash function was used, It may be a value obtained by a logical operation of a value obtained by a logical operation of a hash value calculated from each area.
[0051]
Further, as shown in FIG. 8, as in the first hash target area information 81 and the second hash target area information 82, a hash value calculated from each area used for hash value calculation, offset information, It may be hash information composed of an identifier for specifying the type of the hash function.
[0052]
The hash value calculation method as described above is the same as the data storage method for realizing the software execution control method described in the first and second embodiments, except that the structure of the hash information 7 shown in the present embodiment is different from that of the first embodiment. Needless to say, the method can be executed instead of the method of calculating the hash information.
[0053]
By calculating the hash information according to such an embodiment, it is not necessary to calculate the hash value of the entire software, and a device such as a personal computer or a portable electronic device that reads information from the information recording medium 1 and processes the information. The amount of calculation can be reduced.
[0054]
(Embodiment 4)
Here, as the fourth embodiment, in addition to the method of calculating hash information described in the third embodiment, particularly, an area encrypted by key information will be described. Other configurations of the entire system are the same as those of the first embodiment, and thus description thereof will be omitted.
[0055]
FIG. 9 is an example of a diagram showing the key information 6 and the hash information 7 stored in the secret area 4 in detail. In FIG. 9, the method of calculating the hash information 7 stored in the secret area 4 is the same as the method shown in FIG. 7 in the third embodiment, and a description thereof will be omitted.
[0056]
FIG. 9 shows that offsets A to B and C to D of the software 8 are used for calculating hash information. At this time, only the area from offset 0 to A, from B to C, and from D to E of the software 8 is encrypted, and key information on the key used in encrypting the area is stored in the secret area 4. It is stored in the key information 6. As an encryption method, the offset 0 to A, B to C, and D to E may be added and encrypted by the key information 6 stored in the secret area 4, or each area may be encrypted by a key. The information 6 may be encrypted by different encryption algorithms. In such a case, the software 8 uses any area for either encryption or hash value calculation.
[0057]
FIG. 10 is an example in which the method shown in FIG. 9 is extended. In FIG. 10, particularly, the portions indicated by offsets A and A ′ of the software 8 are different from the configuration shown in FIG. In FIG. 10, offsets 0 to A ′ of the software 8 are encrypted using key information, and A to B indicate areas used for calculating hash information. That is, the area from A to A ′ is an area used for both encryption and calculation of the hash value. With such a structure, the location of the area where the software 8 is to be encrypted is located in the first hash target area 71 or the second hash target area information 72 of the hash information 7 of the secret area 4. Cannot be calculated from the hash target area information, the first encryption target area information 91 in the key information 6 contains information such as the offset information from offset 0 to A ′ of the software 8 as the second encryption target area information. Reference numeral 92 denotes information such as offset information of offsets B to C of the software 8. Although not shown in FIG. 10, these pieces of information may include information about what kind of encryption algorithm was used as shown in the description of FIG. Further, as shown in FIG. 11, as in the first encryption target area information 111 and the second encryption target area information 112, the value of the key used for encryption of each area to be encrypted and the offset information Key information composed of information of an encryption processing method indicating the used encryption algorithm. Note that such a configuration of the key information can be used for the configuration of FIG.
[0058]
In the configuration method shown in FIG. 9, in the encryption of software 8 and the calculation of the hash value shown in the first embodiment and the second embodiment, the difference is that which one is processed first and the value is stored. Disappears. On the other hand, in the configuration methods shown in FIGS. 10 and 11, the area to be encrypted and the area for calculating the hash value overlap. Therefore, in the methods shown in the first and second embodiments, the processing method of software encryption, the structure of key information 6, the calculation method of hash information 7, and the structure of hash information 7 are shown in FIGS. It goes without saying that the present invention can be executed in place of the method / structure shown in FIG. 10 and 11, all the areas of the software 8 are shown as areas used for encryption or calculation of hash information. There may be unused areas.
[0059]
By performing the encryption processing according to such an embodiment, it is not necessary to calculate the hash value of the entire software stored in the information recording medium 1 or to encrypt the entire software. A device such as a personal computer or a portable electronic device that performs a process of reading data or writing software can reduce the amount of calculation.
[0060]
(Embodiment 5)
Here, as a fifth embodiment, an example of a method for identifying a combination of information stored in the secret area 4 and including the key information 6 and the hash information 7 and software stored in the non-secret area 5 will be described. . In addition, since the outline of the configuration of the entire system is the same as that of the first embodiment, the description is omitted here.
[0061]
FIG. 12 shows that the key information 6 and the hash information 7 stored in the secret area 4 and the hash information 7 and various kinds of information are stored in one file 20, and the software 120 is stored in the non-secret area 5 with a serial number. FIG. The software in the non-secret area 5 is program001. As in prg120, a file name of unique file name + serial number + extension is given.
[0062]
In the software corresponding to this case, the key information and the hash information of the confidential area 4 have the serial number 001 of the software. The information corresponds to prg120. Similarly, the key information 2 and the hash information 2 are stored in the software program 002. This corresponds to the key information and hash information of prg121. As described above, the entry number in which the key information and the hash information stored in the secret area 4 are stored and the number assigned to the file name of the software stored in the non-secret area 5 have a one-to-one correspondence. By doing so, it is possible to easily make the information of the secret area 4 correspond to the information of the non-secret area 5.
[0063]
Such a format can be applied to any of the first to fourth embodiments, and in any of the embodiments, the information in the secret area 4 and the information in the non-secret area 5 can be easily associated with each other. It becomes possible.
[0064]
(Embodiment 6)
Here, as the sixth embodiment, an example of another method regarding the correspondence between the information stored in the secret area 4 and the information stored in the non-secret area 5 described in the fifth embodiment will be described. Other configurations of the entire system are the same as those in the first embodiment, and thus description thereof will be omitted.
[0065]
FIG. 13 is a diagram illustrating an example of a method of identifying a combination of information including the key information 6 and the hash information 7 stored in the secret area 4 and software stored in the non-secret area 5. . The secret area 4 stores software name storage information 130 as usage information in addition to the key information 6 and the hash information 7. On the other hand, software 8 is stored in the non-secret area 5. In FIG. 13, the software name stored in the non-secret area 5 is programA. exe, and the software name is stored in the software name storage information 130 of the secret area 4. As a result, it is possible to easily confirm which software of the data stored in the non-secret area 5 corresponds to the key information or the hash information stored in the secret area 4 by the software file name.
[0066]
Such a format can be applied to any of the first to fourth embodiments. In any of the embodiments, the information of the secret area 4 and the information of the secret area 5 are easily stored. Software can be made compatible.
[0067]
【The invention's effect】
As described above, by storing software, key information and hash information relating to the software in the information recording medium having the structure according to the present invention, it is possible to prevent unauthorized use of the software. Further, the area of the software encrypted by the key information and the area and size of the software used to calculate the hash information can be set arbitrarily.
[0068]
For this reason, even in an electronic device having a relatively small internal memory capacity and in which it is difficult to install a large number of software, the software execution control unit is incorporated and an information recording medium in which the software is stored is used to illegally execute the software. Can be prevented from being used. Also, since the software decryption processing and hash value verification processing performed by the software execution control unit do not necessarily have to be performed on the entire area of the software, the processing can be performed at a relatively high speed. Is big.
[Brief description of the drawings]
FIG. 1 is a configuration diagram showing an outline of a software execution control method according to a first embodiment of the present invention;
FIG. 2 is a diagram showing an outline of information of a secret area according to the first embodiment of the present invention.
FIG. 3 is a diagram showing an outline of key information and hash information according to the first embodiment of the present invention.
FIG. 4 is a flowchart showing a procedure for processing key information and hash information according to the first embodiment of the present invention;
FIG. 5 is a diagram showing an outline of key information and hash information according to Embodiment 2 of the present invention.
FIG. 6 is a flowchart showing a processing procedure of key information and hash information in Embodiment 2 of the present invention.
FIG. 7 is a diagram showing an outline of key information and hash information according to Embodiment 3 of the present invention.
FIG. 8 is a diagram showing an outline of key information and hash information in Embodiment 3 of the present invention.
FIG. 9 is a diagram showing an outline of key information and hash information according to Embodiment 4 of the present invention.
FIG. 10 is a diagram showing an outline of key information and hash information according to a fourth embodiment of the present invention.
FIG. 11 is a diagram showing an outline of key information and hash information according to a fourth embodiment of the present invention.
FIG. 12 is a diagram showing a relationship between information of a secret area and information of a non-secret area according to the fifth embodiment of the present invention.
FIG. 13 is a diagram illustrating a relationship between information of a secret area and information of a non-secret area according to the sixth embodiment of the present invention.
[Explanation of symbols]
1 Information recording medium
2 unique information
3 Memory area
4 Secret area
5 Non-secret area
6 key information
7 Hash information
8 Software
9 Information recording medium I / F
10 Software execution control unit
11 Mutual authentication processing unit
12 Hash information processing unit
13 Decryption processing unit
14 Execution determination unit
20 files
21 Usage information
71, 81 First hash target area information
72, 82 Second hash target area information
73 hash value
83 nth hash target area information
91, 111 First encryption target area information
92, 112 Second encryption target area information
93 keys
113 n-th encryption target area information
120, 121 software
130 Software name storage information

Claims (17)

An information recording medium including a nonvolatile memory such as a semiconductor memory, and a software execution control method including a software execution control unit implemented by hardware or software,
The information recording medium, a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium,
Equipped with a non-secret area that can be accessed without going through a specific authentication processing procedure,
Key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium in the secret area,
Hash information that is information about a hash value obtained by a hash function that is a so-called one-way function with the software stored in the non-secret area as an input value,
The non-secret area includes the software encrypted by the key,
The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium through the information recording medium and a specific authentication processing procedure, and reads the non-secret area of the information recording medium. A software execution control method having a function of controlling the execution of the software by decoding the software stored in the software and calculating a hash value. The key information stored in the secret area of the information recording medium includes key information for encrypting the software stored in the non-secret area,
The hash information stored in the secret area of the information recording medium is a so-called one-way function using, as an input value, the software encrypted data stored in the non-secret area encrypted by the key. 2. The software execution control method according to claim 1, wherein the configuration includes a hash value obtained by using the hash function as follows. The key information stored in the secret area of the information recording medium includes key information for encrypting the software stored in the non-secret area,
The hash information stored in the secret area of the information recording medium is a hash value obtained by using data before being encrypted by the key as an input value for a hash function that is a so-called one-way function. The software execution control method according to claim 1, wherein the software execution control method includes: The hash information stored in the confidential area of the information recording medium is obtained by encrypting data of a part of the software file after or before encryption in the software file by using a hash function which is a so-called one-way function. 2. The software execution control method according to claim 1, wherein the method is used as an input value to a software. An information recording medium including a nonvolatile memory such as a semiconductor memory, and a software execution control method including a software execution control unit implemented by hardware or software,
The information recording medium, a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium,
Equipped with a non-secret area that can be accessed without going through a specific authentication processing procedure,
Key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium in the secret area,
When the data stored in the non-concealed area after encryption or before encryption is used as an input value to a hash function that is a so-called one-way function, when the hash function of the software is used. A part of a region used as an input value is obtained by using data composed of a plurality of regions. Hash information including information on a unique hash value for the software and offset information for each of the regions. With
The non-secret area includes the software encrypted by the key,
The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium through the information recording medium and the specific authentication processing procedure, and reads the non-secret information of the information recording medium. A software execution control method having a function of controlling execution of the software by decoding the software stored in an area and calculating a hash value. An information recording medium including a nonvolatile memory such as a semiconductor memory, and a software execution control method including a software execution control unit implemented by hardware or software,
The information recording medium, a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium,
Equipped with a non-secret area that can be accessed without going through a specific authentication processing procedure,
Key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium in the secret area,
When the data stored in the non-concealed area after encryption or before encryption is used as an input value to a hash function that is a so-called one-way function, when the hash function of the software is used. A hash value is calculated using a data in which a partial area used as an input value is composed of a plurality of areas, and hash information including a logical operation result of the calculated hash value for each of the calculated areas is provided. ,
The non-secret area includes the software encrypted by the key,
The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium through the information recording medium and the specific authentication processing procedure, and reads the non-secret information of the information recording medium. A software execution control method having a function of controlling execution of the software by decoding the software stored in an area and calculating a hash value. The hash information stored in the secret area of the information recording medium uses data after or before the software is encrypted as an input value to a hash function that is a so-called one-way function. In the case, the data is composed of a plurality of regions, each region is calculated with a hash function using a hash function that is not necessarily the same for each region, and obtained by a logical operation result of the calculated hash value. The software execution control method according to claim 6, wherein a value to be obtained is included in the hash information. The hash information stored in the secret area of the information recording medium uses data after or before the software is encrypted as an input value to a hash function that is a so-called one-way function. In the case, a part of the area used as an input value to the hash function of the software is composed of a plurality of areas, and each area calculates a hash value using a hash function that is not necessarily the same, and is calculated. And a value uniquely calculated for the software obtained by a logical operation result of a hash value for each area, and at least information of a function used for calculating the hash value of each area or information in the software. 7. The software according to claim 6, wherein offset information that is area information is included in the hash information. A execution control method. The hash information stored in the secret area of the information recording medium uses data after or before the software is encrypted as an input value to a hash function that is a so-called one-way function. In the case, a partial area used as an input value to the hash function of the software uses data composed of a plurality of areas, and each area uses a hash function that is not necessarily the same as each area to generate a hash value. The calculated, at least the calculated hash value for each of the respective areas, or information of a function used for calculating the hash value of each of the areas, or information of an offset which is information of an area in the software, is The software execution control method according to claim 6, wherein the software execution control method is included in hash information. An information recording medium including a nonvolatile memory such as a semiconductor memory, and a software execution control method including a software execution control unit implemented by hardware or software,
The information recording medium, a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium,
Equipped with a non-secret area that can be accessed without going through a specific authentication processing procedure,
In the secret area, among the software that is digital data stored in the non-secret area of the information recording medium, key information that is information about a key for encrypting a partial area,
Hash information, which is information about a hash value obtained as an input value to a hash function, which is a so-called one-way function, using data after or before the software stored in the non-secret area is encrypted. With
The non-secret area includes software in which a part of the area is encrypted by the key,
The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium through the information recording medium and the specific authentication processing procedure, and reads the non-secret information of the information recording medium. A software execution control method having a function of controlling execution of the software by decoding the software stored in an area and calculating a hash value. Key information, which is information about a key stored in the secret area of the information recording medium, is an area of the software, which is digital data stored in the non-secret area, excluding some unencrypted areas. Is divided into a plurality of areas, and the only key information for the software when performing encryption processing on each area,
11. The software execution control method according to claim 10, wherein the key information includes offset information for each of the areas. Key information, which is information about a key stored in the secret area of the information recording medium, is an area of the software, which is digital data stored in the non-secret area, excluding some unencrypted areas. Is divided into a plurality of areas, the key information for each area when performing encryption processing of each area,
Including offset information for each of the regions,
The software execution control method according to claim 10, wherein each of the areas to be encrypted of the software is encrypted by the same encryption algorithm using the encryption key. Key information, which is information about a key stored in the secret area of the information recording medium, is an area of the software, which is digital data stored in the non-secret area, excluding some unencrypted areas. Is key information including only key information for the software when the area is divided into a plurality of areas and each area is encrypted,
11. The software execution control method according to claim 10, wherein the software is encrypted using the key by using an encryption algorithm that is not necessarily the same for each of the areas. Key information, which is information about a key stored in the secret area of the information recording medium, is an area of the software, which is digital data stored in the non-secret area, excluding some unencrypted areas. Is divided into a plurality of areas, and at least different key information for the software when encrypting each area, or information indicating an encryption algorithm for encrypting each area, or Key information including an offset indicating which part has been encrypted,
11. The software execution control method according to claim 10, wherein the software is encrypted using the key by using an encryption algorithm that is not necessarily the same for each of the areas. An information recording medium including a nonvolatile memory such as a semiconductor memory, and a software execution control method including a software execution control unit implemented by hardware or software,
The information recording medium, a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium,
Equipped with a non-secret area that can be accessed without going through a specific authentication processing procedure,
Key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium in the secret area,
Hash information that is information about a hash value obtained by a hash function that is a so-called one-way function with the software stored in the non-secret area as an input value,
The non-secret area includes the software encrypted by the key,
The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium through the information recording medium and the specific authentication processing procedure, and reads the non-secret information of the information recording medium. A function of controlling the execution of the software by calculating a decryption process and a hash value of the software stored in the area,
The area of the software stored in the non-secret area, which is encrypted using the key stored in the secret area, and the software stored in the non-secret area, using a so-called one-way function. A software execution control method, wherein an area of the software used as an input value of a certain hash function is not the same area. An information recording medium including a nonvolatile memory such as a semiconductor memory, and a software execution control method including a software execution control unit implemented by hardware or software,
The information recording medium, a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium,
Equipped with a non-secret area that can be accessed without going through a specific authentication processing procedure,
Key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium in the secret area,
Hash information that is information about a hash value obtained by a hash function that is a so-called one-way function with the software stored in the non-secret area as an input value,
The non-secret area includes the software encrypted by the key,
The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium through the information recording medium and the specific authentication processing procedure, and reads the non-secret information of the information recording medium. A function of controlling the execution of the software by calculating a decryption process and a hash value of the software stored in the area,
The key information and the hash information stored in the secret area are the key information and the hash in a file configuration in the secret area so that the software stored in the non-secret area can be uniquely identified. A software execution control method, wherein an entry number of information and a part of a file name of the software are the same number. An information recording medium including a nonvolatile memory such as a semiconductor memory, and a software execution control method including a software execution control unit implemented by hardware or software,
The information recording medium, a secret area that can be accessed with the success of a specific authentication processing procedure that also uses unique information that is information unique to the information recording medium,
Equipped with a non-secret area that can be accessed without going through a specific authentication processing procedure,
Key information that is information about a key for encrypting the software that is digital data stored in the non-secret area of the information recording medium in the secret area,
Hash information, which is information about a hash value obtained by a hash function that is a so-called one-way function with the software stored in the non-secret area as an input value,
The key information and the hash information stored in the non-confidential area include usage information including a file name of the software corresponding thereto,
The non-secret area includes the software encrypted by the key,
The software execution control unit reads the key information and the hash information stored in the secret area of the information recording medium through the information recording medium and the specific authentication processing procedure, and reads the non-secret information of the information recording medium. A software execution control method having a function of controlling execution of the software by decoding the software stored in an area and calculating a hash value.

Images