JP2012033049A - Program, storage medium for license management, server, and computer system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To facilitate installation of a program and an update program, and license management irrespective of whether a computer is connected to a network.SOLUTION: A USB memory 5, which is a rewritable storage medium detachable with a terminal, comprises: one or more accounting programs 82 to be installed in the terminal; and a connection program, which is connected via a network to a server 4 for managing a license information table 93 associated with the accounting program 82 and an update program 90, for making the terminal execute installation of an accounting program 80 or update of a license. The connection program makes the terminal execute: a step for obtaining a certificate of the server 4; a step for obtaining a license information table 85 from the server 4 and storing it in the USB memory 5; and a step for, if there is an update program 83 in the server 4, storing it in the USB memory 5.

Description

  The present invention relates to a storage medium, a server, and a computer system for managing programs and licenses, and in particular, a storage medium, a server, and a computer system that can easily install an update program regardless of whether the computer is connected to a network or not. About.

  Generally, accounting firms run by tax accountants and certified public accountants perform monthly bookkeeping operations, settlement operations, and tax returns for a large number of corporate clients. Since accounting firms hold highly confidential customer information, strict management against information leakage is required. For this reason, some accounting offices keep terminals connected to external networks such as the Internet as few as possible, and isolate terminals that have introduced a tax / accounting program from external networks. In addition, the tax / accounting business program has a large capacity, and the frequency of program updates is high due to revisions to tax laws and accounting systems, and customization according to customers. Is required. At the same time, unauthorized use such as installation on a plurality of terminals must be prevented. On the other hand, companies often adopt a policy of minimizing the number of terminals connected to an external network such as the Internet due to security problems such as virus countermeasures and information management. In particular, accounting departments use multiple types of programs, and many departments use multiple types of business programs. When update programs are provided over a network, there are terminals that use them. If it is not connected to an external network, inconvenience occurs when the program is upgraded (updated).

  Conventionally, methods for distributing and updating a program include storing the program in a medium such as a CD-ROM and distributing the program, or acquiring an update program via a network. As a technique related to program update, a module distribution management method described in Patent Document 1 is known. This system checks the change flag file on the server's disk device against the change flag file on the client's disk device when the client is connected to the network. It is to be copied to the device. According to such a system, the latest module can always be distributed to the client without managing the module update on the user side. However, in this system, since the terminal must be connected to the network, the security concerns cannot be removed.

  As a prior art related to license management, for example, a software use control method described in Patent Document 2 is known. This system distributes software with a password attached, a dongle storing identification information and a public key to the user, and when the user tries to obtain a license, the user sends the password to the sales company. The identification information detected in step 1 is transmitted to the user as license information encrypted using a secret key. The user decrypts the license information with the public key, compares it with the identification information in the dongle, and if the verification is passed, the software is activated effectively, and if it fails, the execution of the software is stopped. Such a system manages licenses using the identification information in the dongle, and only the sales company that holds the private key can create encrypted license information. Can be controlled. However, this system also needs to be connected to the network, and the update program cannot be easily installed in a terminal that is not connected to the network. Thus, when updating the program, it is assumed that the terminal in which the program is installed is connected to an external network. This is because a method of preparing a server for distributing an update program and acquiring the update program from the server via an external network is convenient for easily upgrading a plurality of business programs.

  In recent years, services such as SAAS (Software as a Service) that can select and use only necessary programs have appeared. Therefore, a usage form in which a large number of business programs are distributed via an external network and updated as necessary (or the latest updated version is used) has come to be used. Even in such a usage form, there is a desire to use a business program on a terminal disconnected from an external network, but all of the conventional SAAS are servers connected to an external network connection terminal or an external network. It is premised on existence of. In particular, such as accounting offices and corporate accounting departments, the “Accounting and Tax Processing Business Program” is affected by tax laws and accounting standards that are revised frequently or at regular intervals every year. In the situation where it is used, such problems have a more prominent influence, and the current situation is that there is no effective solution.

  Means for solving such problems include the following. For example, if one (or very few) business program is used, each person receives the program distribution and update using a PC connected to the network, stores it in a USB memory, and separately stores it on an external network. It is assumed that it is covered by a human process such as installing a program stored in a USB memory in a terminal that is not connected. In business programs for general purposes (document creation, plotting / tabulation, etc.), as long as bugs that occur irregularly are infrequently fixed, the update frequency is not so high, and it can be handled by human response.

  However, when using business programs related to accounting and tax processing, there is a limit in human response because it is affected by tax laws and accounting standards that are revised frequently or regularly every year. In particular, in accounting firms that have a large number of persons in charge (in the same way, corporate accounting departments that have many departments or offices and are divided according to persons in charge), there are multiple advisors for each person in charge. In addition to the need for different business programs for each person in charge in order to meet the diverse needs, the number of terminals assigned to each person in charge is considerable, making it difficult to deal with humans. . Furthermore, in a usage mode where it is only necessary to be able to use a specific program (for example, an inheritance tax program or year-end adjustment program) for a specific period according to the request of an advisor, such as an accounting firm, update processing of multiple programs In addition, it is required to manage licenses for every month, every few months, or for every year, and this management is performed consistently for multiple terminals depending on the human response. It was impossible.

Japanese Patent Application Laid-Open No. 11-234809 JP 2001-175468 A

  The present invention has been made in view of such circumstances, and it is possible to easily install a program or an update program regardless of whether the computer is connected to a network or not, and unauthorized use such as installation on a computer exceeding the number of licenses. It is an object of the present invention to provide a storage medium, a server, and a computer system that can prevent the above.

  A storage medium according to the present invention is a storage medium that is detachable and rewritable from a computer, and a network is connected to a server that manages one or more programs to be installed in the computer, license information related to the programs, and update programs. A connection program for causing a computer to install the program or update the license, and the connection program obtains authentication of the server; and acquires the license information from the server. And storing the update program in the storage medium and storing the update program in the storage medium if the server has the update program.

  At this time, when the connection program further attempts to connect to the server, the step of confirming whether the computer is connectable to the server via a network, and if the connection is impossible, the computer via the network Causing the computer to execute a step of outputting a message for notifying the computer connectable to the server to reconnect the storage medium. Next, the connection program further causes the computer to execute a step of installing in the computer a program or an update program corresponding to the license information. It is preferable that the connection program further causes the computer to execute a step of storing an identifier for uniquely identifying the storage medium and the computer when the program is installed.

  Here, the license information includes expiration date information, and the connection program further causes the computer to execute a step of storing the expiration date information in the computer when the program is installed. The program installed on the server can be connected to the server via the network at the time of starting, and whether or not the current date has passed a predetermined number of days before the expiration date. Causing the computer to execute a step of notifying the computer to connect the storage medium. Then, the connection program further acquires a new or updated license information from the server and stores it in the storage medium for the program that has passed a predetermined number of days before the expiration date; and the update program in the server If there is, the computer executes the steps of storing in the storage medium, installing the update program corresponding to the license information, and updating the expiration date information stored in the computer. . The storage medium is an MO disk, HDD, SSD, CD-RW, DVD-RW, DVD-RAM, DVD + RAM, DVD + RW, Blu-ray disc, memory card, USB memory, IC card, and arithmetic processing functions and communication. It is selected from the group consisting of those with added functions.

  The server according to the present invention includes an authentication processing unit that executes user authentication in response to a request from the connection program, a license management unit that manages license information of a program for each user, and a program that manages the program and its update program And a management unit, and in response to a request for the connection program, the license information of the user and a necessary update program are transmitted to a computer that executes the connection program.

  A computer system according to the present invention is a computer system for managing a program and its license, and is connectable to a server having license information for each user and an update program related to the program, and the server via a network A user terminal; and a storage medium that is detachable and rewritable on the user terminal. The storage medium stores one or more programs to be installed on the user terminal. License information necessary for program installation is obtained from the server and stored in the storage medium, whereby the program can be installed on the user terminal or another terminal.

  At this time, when the user terminal obtains the license information from the server, the user terminal obtains an update program of the program related to the user's license from the server and stores it in the storage medium, or The program stored in the storage medium is updated. The license information includes expiration date information, and the user terminal obtains new or updated license information from the server when the current date has passed a predetermined number of days before the expiration date. To do.

  According to the present invention, since a program having a relatively large capacity is stored in advance in a storage medium, there is no network bandwidth limitation or time restriction when the program is installed in a computer. Also, when installing a program or updating a license, the update program is automatically acquired from the server and can be installed, so that the latest version of the program can be used. Furthermore, since the update program and license information are stored in a detachable storage medium, the program and license can be easily updated regardless of whether the computer is connected to a network or not.

  In addition, accounting firms that handle highly confidential customer information have requests to update programs and licenses for accounting firms on a computer that is not connected to the network without any hassle, as well as revisions to tax laws and accounting systems, Since the frequency of updating the accounting firm program is high due to customization according to the present invention, the present invention is suitable for the accounting firm program and license management. In the present invention, if the server authentication is not obtained, the license information is not stored in the storage medium, and consequently the program cannot be installed. Therefore, a third party who has not purchased the program may install the program illegally. Can be prevented.

  On the other hand, since the storage medium includes an identifier that uniquely identifies the storage medium and the computer on which the program is installed, it is possible to determine whether the storage medium and the computer on which the program is installed are authentic. For this reason, illegally using a program on a computer that exceeds the number of licenses by copying the data in the storage medium to another storage medium or copying the storage unit of the computer on which the program is installed to another storage unit Can be prevented.

FIG. 1 is a schematic configuration diagram showing an embodiment of a computer system for managing programs and licenses according to the present invention. FIG. 2 is a block diagram illustrating a configuration example of a user terminal that configures the computer system of FIG. FIG. 3 is a block diagram illustrating a configuration example of a server that configures the computer system of FIG. 1. FIG. 4 is a correlation diagram showing a program, an update program, a license information table, a user information table, a table, and an installation / update information table stored in the server, user terminal, and storage medium that constitute the computer system of FIG. . FIG. 5 is a flowchart showing a flow of program installation processing performed by the computer system of FIG. FIG. 6 is a flowchart showing the flow of license update processing performed by the computer system of FIG.

  FIG. 1 is a schematic configuration diagram showing an embodiment of a program for an accounting office (hereinafter referred to as an accounting program) and a license management system according to the present invention. This computer system includes user A's terminals 1a to 1d and 2, a user B's terminal 3, a management center server 4, and rewritable storage media 5 and 6. The terminals 1 to 3 and the server 4 are known computers, and the terminals 2 and 3 and the server 4 are connected to each other via a network 7 such as a LAN (Local Area Network) or a WAN (Wide Area Network) by wire or wireless. However, the terminals 1 a to 1 d are not connected to the network 7.

  In this embodiment, the users A and B are both accounting firms, the user A is divided into the non-connection terminals 1a to 1d to the external network and the connection terminal 2 from the security aspect, and the user B is only the connection terminal 3. Shall be provided. However, the present invention is not limited to use at an accounting office, but can also be applied to computer systems in companies in other industries. The user A obtains the license information of the accounting program from the server 4 using the terminal 2 to which the storage medium 5 is connected and the update program if there is an update program in the server 4, and uses this license information to obtain the network non-connected terminal 1a. Install the accounting program and update program at ~ 1d. On the other hand, the user B obtains the license information and update program of the accounting program from the server 4 using the terminal 3 to which the storage medium 6 is connected, and installs the accounting program and update program on the network connection terminal 3 using this license information. To do. Note that the computer system according to the present invention can include a plurality of user terminals in addition to the terminals 1 to 3.

  FIG. 2 representatively shows the configuration of the user terminal 2, for example. The terminal 2 includes a control unit 10, a storage unit 20, an output unit 30, an input unit 40, and a communication unit 50, and each unit is connected by a bus. The control unit 10 stores various processing programs stored in the storage area of the storage unit 20 or the storage medium 5, various instructions input from the input unit 40, or various data corresponding to the instructions in the storage unit 20, Various processes are executed in accordance with various processing programs stored in the storage unit 20 in accordance with these input instructions and various data, and the processing results are temporarily stored in the storage unit 20 and output to the output unit 30 and the like.

  As shown in FIG. 2, the control unit 10 includes an I / F monitoring unit 11 that monitors an I / F (Interface) of the recording medium 5, a connection processing unit 12 that performs connection processing to the server 4, and an accounting program. The program management unit 13 manages the license information and the license management unit 14 manages the license information of the accounting program. The I / F monitoring unit 11 is realized by the control unit 10 reading and executing an I / F monitoring driver, which is a function of an OS (Operating System) stored in the storage unit 20. On the other hand, the connection processing unit 12, the program management unit 13, and the license management unit 14 are realized when the control unit 10 reads and executes a connection program stored in the storage medium 5.

  The storage unit 20 includes a storage medium for storing programs, data, and the like. This storage medium is a magnetic or optical recording medium such as an HDD (Hard Disk Drive) or MO (Magneto-Optical) drive, or an SSD ( It is composed of a semiconductor memory such as Solid State Drive. This storage medium is fixedly attached to the storage unit 20 or detachably mounted, and stores various processing programs (including the accounting program according to the present invention) executed by the control unit 10. A program storage unit 21 and an installation / update information storage unit 22 that stores installation / update information of the accounting program according to the present invention are provided.

  The output unit 30 includes a display device such as a CRT (Cathode Ray Tube) or an LCD (Liquid Crystal Display), and displays various screens based on display data input from the control unit 10. The input unit 40 is configured by a pointing device such as a mouse, a keyboard, and the like, and outputs an input instruction signal to the control unit 10. The communication unit 50 includes a modem, a router, a bridge, and the like. The communication unit 50 outputs data received from the server 4 via the network 7 to the control unit 10 and transmits data received from the control unit 10 via the network 7 to the server 4. The communication control to output is performed.

  The storage medium 5 is a rewritable storage medium for installing the accounting program and updating the license according to the present invention, and is detachable from the terminal 2. The storage medium 5 is an MO disk, HDD, SSD, CD-RW (Compact Disc-ReWriteable), DVD-RW (Digital Versatile Disc-ReWriteable), DVD-RAM (Digital Versatile Disc-Random AccessDrum-Random Access D). Magnetic or optical recording medium such as Versatile Disc + ReWriteable), Blu-ray Disc, memory card (SD card, memory stick, compact flash (registered trademark)), USB (Universal Serial Bus) memory, or semiconductor memory . In particular, the USB memory is suitable for storing a large-capacity accounting program in terms of speed, capacity, portability, ease of management, and the need for dedicated writing software. In the present embodiment, a USB memory (without a CPU (Central Processing Unit)) is assumed as the storage medium 5, but the storage medium according to the present invention is, for example, wired or wireless such as a USB memory with CPU or an IC memory chip with OS. It is assumed that other storage devices including a communication unit that communicates with the server 4 via the network 7 are included.

  The storage medium 5 includes a connection program storage unit 51 that stores a connection program according to the present invention, a program storage unit 52 that stores an accounting program compressed for installation, an update program storage unit 53 that stores an update program, Whether the license information storage unit 54 that stores license information, the installation / update information storage unit 55 that stores installation / update information of the accounting program and update program, and the storage medium 5 and the installed terminals 1a to 1d are authentic. And an identification code storage unit 56 for storing an identification code for identification. The connection program causes the control unit 10 to install the accounting program and update the license according to the present invention.

  When the storage medium 5 is shipped to the user A, at least the connection program and the accounting program are stored in the storage medium 5. In addition, the storage medium 5 stores one or more accounting programs (preferably all accounting programs provided by the program vendor) at the time of shipment, regardless of whether or not the user A orders. This eliminates the trouble of preparing a storage medium storing a different accounting program for each user according to many orders. The storage medium 5 may include user information (user ID, password, etc.) input when purchasing the accounting program. This makes it possible to perform user authentication based on the user information stored in the storage medium 5 by the connection program even if it is stolen or lost during transportation, thereby preventing unauthorized use by a third party. Can do. A known installation program is stored in either the storage medium 5 or the storage unit 20. When the installation program is stored in the storage medium 5, the accounting program and the installation program are stored in the program storage unit 52. The installation program is activated by the connection program and installs the accounting program in the terminal 2. Data other than the program stored in the storage medium 5 may be encrypted by a known method so as not to be stolen or tampered with.

  Note that the storage medium 5 or the storage unit 20 may include a known virus removal program. As will be described later, this virus removal program is activated by the connection program and executed by the control unit 10. The virus removal program determines whether the license information or update program acquired from the server 4 is infected with a virus, spyware, or the like, and if it is infected, removes it.

  Hereinafter, programs and data stored in the storage medium 5 (hereinafter referred to as USB memory) will be described with reference to FIG. The accounting program 82 is an application program that is used by the accounting firm as a user in daily work. As shown in the lists 82 and 84 in FIG. 4, the accounting program 82 has a code for identifying each program, a name, and a last update date. is doing. The update program 83 is a program updated for function addition or bug correction of the accounting program 82, and has a code for identifying each program, a name, and a release date, like the accounting program 82. The accounting program 82 and the update program 83 are stored as files compressed for installation such as CAB (Cabinet file). The update program 83 is acquired from the server 4 and stored in the USB memory 5 if there is an update program in the server 4 when the server 4 is authenticated by the connection program. Further, the update program 83 is applied to the shipping accounting program 82, so that the latest accounting program 84 is obtained.

  The license information table 85 is a table for managing accounting program information and license information purchased for each user, a user ID for identifying the user A, a code for identifying each program purchased by the user A, a name, It has an effective period, an issue date when the license information is issued, and an expiration date of the license. The license information is registered in the server 4 when the user accesses the server 4 and purchases the application, and the license information table 85 is acquired from the server 4 when the server 4 is authenticated by the connection program, and the USB memory 5 is stored. The install / update information tables 81 and 86 are tables for managing the install / update information of the accounting program, and are managed by both the USB memory 5 and the terminal. The installation / update information tables 81 and 86 include a code for identifying the accounting program 80 installed in the terminals 1 to 3, a name, an installation date and time, a license expiration date, a program last update date, and an identification code. have. The installation / update information tables 81 and 86 are respectively stored in the storage unit 20 (hereinafter referred to as HDD) and the USB memory 5 of the terminal when the accounting program 80 is installed in the user terminal.

  The identification code 87 includes at least the identification information of the USB memory 5, while the identification code 94 is generated by adding the identification information of the HDD 20 of the terminal to be installed to the identification code 87. As a result, it is possible to determine whether the USB memory 5 and the installed terminal are authentic. Therefore, the data in the USB memory 5 is illegally copied to another USB memory, or the data in the installed HDD 20 is illegally copied to another HDD. It is possible to prevent copying. As the identification information of the USB memory 5, for example, a non-rewritable vendor ID + product ID in the USB memory 5 can be used, and as the identification information of the HDD 20 on the terminal side to be installed, for example, the HDD 20 cannot be rewritten. Vendor ID + product ID can be used. However, the present invention is not limited to this example. In addition to device-specific information incorporated in such a device, a computer such as a serial number or customer ID recorded on the device when the program provider distributes it to the user Various information may be used as long as the information can ensure uniqueness between the storage medium (device) and the storage medium (device).

  As described above, it is also possible to use a storage medium (device) other than a USB memory. For example, an SD memory card or other device connected to a computer using a non-USB interface (further, on a wireless LAN) Or a rewritable storage medium such as a DVD-RAM or BD-RE via a magneto-optical disk device of a computer, a DVD-R or a CD-R. It is also possible to use a write-once storage medium such as a portable music player that can also be used as a storage medium. Here, in the case of a write-once storage medium, the number of program updates may be limited due to the capacity, but in the case of a high-capacity write-once device such as a BD-R, it is relative to the size of the business program. It can be used semi-permanently because of the relationship, and even in DVD-R (9.6 GB) or the like, if the size of the business program group is about 1 GB, it can be used for a considerable period of time.

  The identification code 87 is stored in the USB memory 5 when the USB memory 5 is shipped, or is acquired from the server 4 and stored in the USB memory 5 when the server 4 is accessed for the first time by the connection program. On the other hand, the identification code 94 is generated when the accounting program 80 is installed and stored in the installation / update information tables 81 and 86. In the installation / update information tables 81 and 86, one identification code 94 is stored for each installed terminal, but one identification code 94 may be stored for each installed program. The identification code 94 may include one or more of a user ID, a password, the number of licenses, and identification information of the network connection terminal 2 (or HDD 20).

  Hereinafter, the configuration of the server 4 will be described with reference to FIG. The server 4 includes a control unit 60, a storage unit 70, and a communication unit 80, and each unit is connected by a bus. The control unit 60 manages an authentication processing unit 61 that performs user authentication in response to a request by the connection program in the storage medium 5, a program management unit 62 that manages an update program to be transmitted to the user, and manages user license information. And a license management unit 63. These functions are realized by the control unit 60 reading and executing various processing programs stored in the storage unit 70.

  The storage unit 70 includes a storage medium in which programs, data, and the like are stored. This storage medium is a magnetic or optical recording medium such as an HDD (Hard Disk Drive), an MO (Magneto-Optical) drive, or an SSD ( It is composed of a semiconductor memory such as Solid State Drive. This storage medium is fixedly attached to the storage unit 70 or detachably mounted, a program storage unit 71 for storing an accounting program, an update program storage unit 72 for storing an update program, and user information A user information storage unit 73 for storing the license information and a license information storage unit 74 for storing the license information of the user. The communication unit 80 includes a modem, a router, a bridge, and the like. The communication unit 80 outputs data received from the terminals 2 and 3 via the network 7 to the control unit 60 and transmits data received from the control unit 60 via the network 7. Communication control to be output to the terminals 2 and 3 is performed.

  Hereinafter, the program and data stored in the server 4 will be described with reference to FIG. The accounting program 88 is a program stored in the USB memory 5 shipped as of April 23, 2011, and the accounting program 89 is a program stored in the USB memory 5 shipped as of April 27, 2011. is there. Compared to the accounting program 88, the accounting program 89 includes a medical corporation accounting program and a social security calculation program, and a salary calculation program and a profit and loss budget management program are updated. The update program 90 is a program updated from April 23, 2011 to the present, and the new program 91 is a program newly created from April 23, 2011 to the present. The update program 90 includes a program that updates an installed program and a program that replaces the latest program when applied to a program before installation. The user information table 92 includes a user ID, an office name, a representative name, an e-mail address, an address, a telephone number, and an identification code 87. Linked. The license information table 93 includes a user ID, a code for identifying the accounting program purchased by the user, a name, a valid period, an issue date for issuing the license information, and a license expiration date. Manages the accounting programs purchased by the company.

  Next, each process performed by the accounting program and the license management system configured as described above will be described with reference to the flowcharts of FIGS. 5 and 6 and the drawings of FIGS. FIG. 5 is a flowchart for installing an accounting program using a USB memory, and FIG. 6 is a flowchart for updating an accounting program license using a USB memory. Hereinafter, these operations will be described in detail for a non-network connection terminal and a network connection terminal.

[Installation of accounting program on non-network connection terminals 1a to 1d]
User A applies for an accounting program using the network connection terminal 2 in advance. The network connection terminal 2 is connected to the server 4 of the management center, and user information (office name, representative name, email address, address, telephone number, etc.) input by the user A, program information to be purchased, The number of licenses to be purchased is transmitted to the server 4. As shown in FIG. 4, the server 4 registers the received data in the user information table 92 and the license information table 93, and transmits the registered user information, order contents, user ID, and password to the user A by e-mail. To do. It is assumed that the USB memory 5 storing the connection program and the accounting program 82 is shipped to the user A by mail on April 23, 2011. At this time, the identification code 87 may be generated from the vendor ID + product ID of the USB memory 5 and stored in the USB memory 5 and registered in the user information table 92.

  The user A receives the USB memory 5 and inserts the USB memory 5 into the network connection terminal 2 on April 27, 2011, for example, and connects to the server 4 to operate and process a desired accounting program. It is assumed that installation is performed on 1a to 1d. As shown in FIG. 5, the control unit 10 of the network connection terminal 2 monitors the I / F of the USB memory 5 (step 100), and it is determined whether or not the USB memory 5 is inserted into the network connection terminal 2. (Step 101). When the USB memory 5 is inserted, the connection program in the USB memory 5 is automatically activated (step 102), and the following steps are executed by the control unit 10. The control unit 10 determines whether or not the network connection terminal 2 is connected to the network 7 (step 103). If the terminal is not connected to the network 7, the control unit 10 outputs a message for notifying the network connection terminal to reconnect the USB memory 5 to the output unit 30 (step 104). Since the network connection terminal 2 is connected to the network 7, the control unit 10 transmits the user ID and password input from the input unit 40 to the server 4 via the communication unit 50 (step 105).

  The control unit 60 of the server 4 receives the user ID and password via the communication unit 80, and performs user authentication by comparing with the user ID and password (not shown) in the user information table 92 (step 106). . When the user is authenticated, the control unit 60 confirms the issue date in the license information table 93, and confirms whether the license information has been issued (step 107). If the license information has not been issued, it means that the accounting program is not installed, and the control unit 60 writes the current date (April 27, 2011) on the issuance date. The expiration date of the license (October 27, 2011), which is obtained by adding the license validity period (for example, 6 months) to the day, is written. Next, the control unit 60 searches for an update program 83 to be transmitted to the user A (step 108). At this time, the control unit 60 confirms the accounting program purchased by the user A in the license information table 93, and extracts update programs released after April 23, 2011, which is the shipping date of the USB memory 5. As a more specific process, the code of the update program 90 updated from April 23, 2011 to the present is compared with the code of the accounting program purchased by the user A in the license information table 93. The update program 83 to be transmitted to the user A is searched. In FIG. 4, since there is an update program 83 for profit / loss budget management, the control unit 60 transmits the update program 83 together with the license information table 93 to the network connection terminal 2 via the communication unit 80 (step 109).

  Note that if the issue date has already been written in the license information table 93 in step 107 and the current date has not passed the expiration date, the accounting program has already been installed, so the control unit 60 determines that the license information table 93 has already been installed. 93 is not transmitted, and if there is an update program 83, it is transmitted. Also, if the issue date has already been written and the current date has passed the expiration date, a notification is sent to purchase a license. In addition, program updates may include only programs that have been purchased (or applied for use for a specified period), including those that are not purchased (or applied for use for a specified period), Update programs for all programs provided by the program vendor may be acquired.

  The control unit 10 of the network connection terminal 2 stores the license information table 85 and the update program 83 received from the server 4 in the USB memory 5 (step 110). Here, the control unit 10 may read a virus removal program from the HDD 20 or the USB memory 5 and execute a virus scan of the data received from the server 4 and the existing data in the USB memory 5 (step 111). Next, the control unit 10 applies the update program 83 to the accounting program 82 in the USB memory 5 to replace it with the latest accounting program 84 (step 112). The control unit 10 outputs to the output unit 30 a screen for selecting whether to install the accounting program in its own device (network connection terminal 2) or to install the accounting program in other devices (network non-connection terminals 1a to 1d). (Step 113). When the user A wishes to install on the other device, the control unit 10 outputs a message notifying the other device to replace the USB memory 5 to the output unit 30, and also installs the USB memory 5 on the other device. Set the installation program to start automatically when inserted.

  It should be noted that during the period from installation of the USB memory 5 to the terminal 2 until installation or license update is performed (steps 101 to 113), the control unit 10 determines the USB memory 5 derived from the identification code 87 in the USB memory 5. The vendor ID + product ID of the device and the non-rewritable vendor ID + product ID in the USB memory 5 are compared. As a result, it is possible to determine whether or not the USB memory 5 is authentic, so that it is possible to prevent the data in the USB memory 5 from being copied to another USB memory and illegally installed in another terminal. If the USB memory 5 is not authentic, the subsequent installation or license update is not performed.

  In the network unconnected terminals 1a to 1d, the control unit 10 monitors the I / F of the USB memory 5 (step 117), and it is determined whether or not the USB memory 5 is inserted into the network unconnected terminals 1a to 1d. (Step 118). When the USB memory 5 is inserted, the installation program is automatically started (step 119), and the following steps are executed by the control unit 10. Even between steps 118 and 119, the control unit 10 determines the vendor ID + product ID of the USB memory 5 derived from the identification code 87 in the USB memory 5 and the non-rewritable vendor ID + product ID in the USB memory 5. To determine whether the USB memory 5 is authentic. If the USB memory 5 is not authentic, installation or license update is not performed.

  The control unit 10 reads the accounting program 80 (application to be installed) that matches the code of the license information table 85 among the codes of the latest accounting program 84 (step 120). As a result, license authentication (activation) is performed, and the accounting program 80 is installed (step 121). Next, the control unit 10 stores the install / update information table 81 in the HDD 20 and also stores the same install / update information table 86 in the USB memory 5 (step 122).

  Here, the control unit 10 generates a new identification code 94 by adding the vendor ID + product ID that cannot be rewritten in the HDD 20 to the identification code 87, and installs the new identification code 94 together with the installation / update information table 86. / Stored in the update information table 81. This makes it possible to determine whether or not the HDD 20 is authentic (whether or not the HDD has an accounting program installed). Therefore, it is possible to copy the data in the HDD 20 to another HDD and use it illegally on another terminal. Can be prevented. In addition, since the identification code 94 and the installation date / time are stored in the installation / update information table 86 in association with each other, it is possible to manage the number of licenses. Since the USB memory 5 is not used as a dongle, the USB memory 5 can be removed from the terminals 1a to 1d after the installation or license update is completed.

[Installation of accounting program on network connection terminal 3]
The processing from the application for the accounting program to the replacement with the latest version of the program 84 (step 112) is the same as the flow of installation to the above-mentioned network unconnected terminal, and therefore the description is omitted. In step 113, since the user B selects installation on the own device (network connection terminal 3), the control unit 10 executes the installation program. The subsequent processing (steps 114 to 116) is the same as step 120 to step 122.

[License update at non-network connection terminals 1a to 1d]
As shown in FIG. 6, when the user A activates the accounting program 80 installed in the non-network connection terminals 1 a to 1 d (step 130), the control unit 10 reads the accounting program 80 from the HDD 20 and executes it. Next, the control unit 10 determines whether or not the current date has passed a predetermined number of days before the expiration date in the install / update information table 81 stored in the HDD 20 (step 131). For example, it is determined whether or not the current date has passed two weeks before the expiration date of the license. If the current date is two weeks or more before the license expiration date, the control unit 10 continues to use the accounting program (application) (step 132). On the other hand, when the current date is less than two weeks from the expiration date of the license, the control unit 10 outputs a message such as “Please insert the USB memory and update the license” to the output unit 30 and display it on the screen. It is displayed (step 133). At this time, although not shown, the control unit 10 determines whether or not the own device (network unconnected terminals 1a to 1d) is connected to the network. If not connected to the network, it is notified to connect to another device (network connection terminal 2). When the user A inserts the USB memory 5 into the network connection terminal 2, the control unit 10 of the network connection terminal 2 determines whether the USB memory 5 is inserted into the network connection terminal 2 (step 134).

  Although not shown, the user A uses the network connection terminal 2 to order the license update program for the server 4. Upon receiving the order, the server 4 deletes (updates) the issuance date of the license information of the ordered program and the expiration date of the license in the license information table 93, or places the order in the license information table 93. By newly creating the license information of the program, the program for updating the license is registered, and an email indicating that the acceptance of the order is completed is transmitted to the user A. Subsequent processing continues to X in FIG. However, if there is no update program in the server 4, since there is no program to be installed, installation is not performed (steps 120 and 121 are skipped), the expiration date of the install / update information table 86 in the USB memory 5, and the HDD 20 Only the expiration date of the install / update information table 81 is updated (step 122).

  When updating the license expiration date in the network non-connection terminals 1a to 1d, the network connection terminal with the USB memory inserted as described above is connected to the server 4, and how long the program expiration date is extended. The expiration date may be updated by configuring the server 4 so that it can be accepted in a table format for each program. Alternatively, the network unconnected terminals 1a to 1d are configured to accept in advance settings for updating the expiration date in a table format or the like for each program, and the received setting information is stored in the USB memory, and the set USB memory is stored. An update process that requires a connection program may be executed simply by connecting to a network connection terminal.

  According to this, there are a plurality of persons in charge and a plurality of non-network-connected terminals for each user, and one USB memory for each person in charge (terminal) even if it is originally necessary to manage complicated usage modes. As a result, the management is very simple compared to the conventional usage pattern. In other words, multiple business programs are frequently updated (due to tax system revisions, changes in accounting standards, etc.), or multiple requests from multiple advisors (multiple business departments for companies) for each person in charge (terminal) Business programs that are to be used in response to a number of different business programs or that are used only at specific times (for example, year-end adjustment programs, settlement programs, inheritance tax programs: There are many cases where the fiscal year is different for each consultant. For example, the program is expected to be used only in quarters (March, June, September, December, etc.) that are dispersed in the year. Even in a situation where a program for which a deadline variation is scheduled is used, the present invention manages the correspondence between the storage medium and the terminal of the person in charge. It may be, for example, it is sufficient in such a simple management keep multiplying the USB memory next to the device exhibits a particularly remarkable effect over the prior art.

  In addition, since the storage medium of the present invention functions to substitute for the server in the user's office or office, even when there are a plurality of persons in charge for each user and there are a plurality of network unconnected terminals, the server side By managing individual USB memories, license management can be easily performed. That is, the server only needs to update the program and update the expiration date (license update) for each USB memory, and there is no need to recognize and manage that there are multiple terminals for each user. Can reduce the load and management complexity. In this case as well, the management of the program usage status for each terminal is sufficient to the extent that it is tabulated at the time of expense claim.

  As is clear from the above, according to the configuration of the present invention, the more complicated the actual usage, the more significant the superiority of management with respect to the prior art. In other words, even in the situation where a large number of persons in charge use a plurality of business programs, each person in charge recognizes and manages which business program will be used by the person in charge (or the manager or manager). be able to. This does not change even when the size of the user increases. For each person in charge (terminal), more business partners (or business departments), and business programs generated by business variations corresponding to the business needs of the business partners Even if various variations of the usage period of the system occur, the more complicated the usage period, the more significant the simplification of management according to the present invention.

  For this reason, in a service that provides a large number of business programs in the SAAS format, in particular, a plurality of networks that have been neglected so far, in such a manner that licenses are managed for each usage period, and usage charges vary depending on the length of the period. It is possible to provide services to unconnected terminals by simply performing simple management on the user side.

[License update on network connection terminal 3]
Since the license update flow at the network connection terminal 3 is the same as the license update flow at the network non-connection terminals 1a to 1d, the description thereof will be omitted.

Next, a form of unauthorized use of a program and a coping method in the management system of the present embodiment will be described. The following (1) to (5) are assumed as forms of unauthorized use of the program.
(1) Incorrect installation by inserting a USB memory into a terminal exceeding the number of licenses In this computer system, the identification code 97 and the installation date and time are written in the install / update information table 86 in the USB memory 5 at the time of installation. Accordingly, since the number of licenses is managed, it is possible to prevent unauthorized installation by inserting the USB memory 5 into a terminal exceeding the number of licenses.

(2) When a third party steals a USB memory and installs or renews a license illegally In this computer system, the user ID and password are transmitted from the server 4 to the mail address of the user A who purchased the accounting program 80, Separately, the USB memory 5 is shipped to the user A. For this reason, the third party cannot easily know the user ID and password of the user A, and as a result cannot pass the user authentication of the server 4, so the license information table 85 necessary for installing the accounting program 80 is stored. It cannot be obtained. If user information (user ID, password, etc.) is stored in the USB memory 5, the connection program can perform user authentication based on the user information stored in the USB memory 5. Even if the memory is lost in the process of delivery or stolen and passed to a third party, unauthorized use by the third party can be prevented.
(3) When the data in the USB memory 5 at the time of shipment is copied to the terminal and illegally installed or the license is updated In this computer system, the installation is performed using the license information stored in the USB memory 5. If the memory 5 is not connected, the connection program copied to the terminal cannot be activated to illegally install and update the license program.

(4) When the data in the USB memory 5 is copied to another USB memory for unauthorized installation or license update In this computer system, the USB memory 5 is connected to the terminal until the installation or license update is performed. In the meantime (steps 101 to 113 or steps 118 to 119), the vendor ID + product ID of the USB memory 5 derived from the identification code 87 in the USB memory 5 and the non-rewritable vendor ID + product ID in the USB memory 5 are Compare. Thus, since it is determined whether or not the USB memory 5 is authentic, it is possible to prevent illegal installation or license update by copying data in the USB memory 5 to another USB memory.

(5) When the data in the HDD 20 in which the program is installed is copied to another HDD for illegal installation or license update In this computer system, the terminal for installation or license update is selected until the installation or license update is performed. (Steps 113 to 114 or steps 118 to 119), the vendor ID + product ID of the HDD 20 derived from the identification code 87 in the USB memory 5 is compared with the non-rewritable vendor ID + product ID in the HDD 20. In order to determine whether the HDD 20 is authentic (whether it is an HDD in which a program is installed) or not, the data in the HDD 20 in which the program is installed is copied to another HDD and illegally installed or licensed. It is possible to prevent updating.

  As described above, according to the present embodiment, since the accounting program 82 having a relatively large capacity is stored in the USB memory 5 in advance, when installing the accounting program in the terminals 1 a to 1 d, There are no time constraints. Further, when installing the accounting program 80 or updating the license, the update program 83 is automatically acquired from the server 4 and can be installed, so that the latest program 84 can be used. Furthermore, since the update program 83 and the license information table 85 are stored in the removable USB memory 5, when updating the accounting program or license, it is not possible to update without connecting to the network. You can easily update accounting programs and licenses.

It is also possible to install a program on a plurality of terminals 1a to 1d with one USB memory. In this case, if the correspondence table for each terminal is created in the USB memory to maintain uniqueness with the terminal and the business program and the expiration date used for each terminal are listed, after updating the contents of the USB memory, By simply connecting to each terminal in sequence, it is possible to execute installation and status update (required programs and expiration dates) on each terminal. However, such a management method may increase the labor of management as the number of persons in charge (terminals) increases (in addition to connecting to a server for each terminal to update the latest program or update the expiration date). It may not be possible to work on multiple terminals at the same time), and if the USB memory is lost, there is a risk that the update process will not be possible on all terminals, making it suitable for relatively small accounting firms or corporate departments. It can be said that.

  In addition, accounting firms that handle highly confidential customer information have a desire to renew accounting programs and licenses on the non-network-connected terminals 1a to 1d without trouble, as well as revisions to tax laws and accounting systems. Since the frequency of updating the accounting program is high due to the corresponding customization, this embodiment is suitable for managing the accounting program and license. In the present embodiment, if the user authentication of the server 4 is not obtained, the license information table 85 is not stored in the USB memory 5, and the accounting program 80 cannot be installed. It is possible to prevent a person from installing the accounting program 80 illegally.

  On the other hand, since the USB memory 5 stores the identification code 94 for uniquely identifying the USB memory 5 and the terminal on which the accounting program 80 is installed, it is determined whether the USB memory 5 and the terminal on which the accounting program is installed are authentic. Can be determined. For this reason, by copying the data in the USB memory 5 to another USB memory, or copying the HDD 20 of the terminals 1a to 1d in which the accounting program is installed to another HDD, the accounting program at the terminal exceeding the number of licenses. Can be used illegally. Further, at the time of installation, the identification code 94 and the installation date / time are stored in association with each other in the USB memory 5, and the identification code 94 is stored in the USB memory 5 by the number of licenses, whereby the number of licenses can be managed. For this reason, it is possible to prevent the accounting program 80 from being illegally installed in a terminal exceeding the number of licenses.

  By determining whether the USB memory 5 is authentic or not based on the identification code 87 or 94 in the USB memory 5 after the USB memory 5 is connected to the terminal until the installation or license is updated. An illegal copy to another USB memory can be detected appropriately. Also, whether the HDD 20 of the terminals 1a to 1d in which the accounting program is installed based on the identification code 94 in the USB memory 5 after the installation or license update terminal is selected until the installation or license update is authentic. By determining whether or not, unauthorized copying to another HDD can be appropriately detected.

  The identification code 94 includes the vendor ID + product ID of the USB memory 5 before installation, and the vendor ID + product ID of the HDD 20 of the terminals 1a to 1d in which the accounting program is installed after installation is added. It is possible to determine whether or not the HDDs 20 of the terminals 1a to 1d are authentic even if they are the non-network connected terminals 1a to 1d that cannot acquire the vendor ID + product ID of the terminal. When the identification code 94 includes the vendor ID + product ID of the HDD 20 of the network connection terminal 2 and the user ID + password, the terminal 2 and the user A who connect to the server 4 by the connection program are authentic. It can also be determined whether or not.

  Further, according to the storage device such as the USB memory with CPU and the IC memory chip with OS of the present embodiment, since the communication unit for communicating with the server 4 via the network 7 is provided, the accounting program 80 is installed. There is no need to connect the terminals 1 to 3 to the network 7, and security concerns can be removed. In addition, this invention is not limited to the above embodiment. For example, the terminal 2 connected to the server 4 via the external network includes installation / update information 81 of each terminal (including the network non-connection terminals 1a to 1d) in which the accounting program is installed, and the server 4 to each terminal. A resident program that determines whether or not there is an update program, a notification that the program needs to be updated may be output (displayed) to the output unit 30, and the validity of the program installed in each terminal When the expiration date approaches, a notification that the license needs to be updated may be output (displayed) to the output unit 30. The installation / update information 81 and the resident program of each terminal are stored in the HDD 20 of the network connection terminal 2 by connecting the USB memory 5 to the network connection terminal 2 after the program has been installed in each terminal.

1 to 3 terminals 4 servers 5 and 6 storage media 7 network 10 control unit 20 storage unit 30 output unit 40 input unit 50 communication unit 51 connection program storage unit 52 program storage unit 53 update program storage unit 54 license information storage unit 55 installation / Update information storage unit 56 Identification code storage unit 61 Authentication processing unit 62 License management unit 63 Program management unit

Claims (11)

A rewritable storage medium detachably attached to a computer,
One or more programs to be installed on the computer;
A connection program for connecting to a server that manages license information and update program for the program via a network, and causing a computer to install the program or update the license,
The connection program obtains authentication of the server, acquires the license information from the server and stores it in the storage medium, and stores the update program in the storage medium if it exists in the server And a step of causing a computer to execute the step of performing.   2. The storage medium according to claim 1, wherein when the connection program further tries to connect to the server, the computer confirms whether or not the computer can connect to the server via a network; A storage medium characterized by causing a computer to execute a step of outputting a message for notifying a computer connectable to the server via a network to reconnect the storage medium.   The storage medium according to claim 1, wherein the connection program further causes the computer to execute a step of installing a program or an update program corresponding to the license information in the computer.   4. The storage medium according to claim 3, wherein the connection program further causes the computer to execute a step of storing an identifier for uniquely identifying the storage medium and the computer when the program is installed. A storage medium characterized by the above.   5. The storage medium according to claim 3, wherein the license information includes expiration date information, and the connection program further stores the expiration date information in the computer when the program is installed. And causing the computer to execute the step of confirming whether or not the current date has passed a predetermined number of days before the expiration date at the time of startup. In such a case, the computer causes the computer to execute a step of notifying the computer connectable to the server via the network to connect the storage medium.   6. The storage medium according to claim 5, wherein the connection program further acquires new or updated license information from the server and stores it in the storage medium for a program that has passed a predetermined number of days before the expiration date. And storing the update program in the server if it exists in the server, installing an update program corresponding to the license information, and updating the expiration date information stored in the computer And a step for causing a computer to execute the steps.   7. The storage medium according to claim 1, wherein the storage medium is an MO disk, HDD, SSD, CD-RW, DVD-RW, DVD-RAM, DVD + RAM, DVD + RW, Blu-ray disk, memory card, USB. A storage medium selected from the group consisting of a memory, an IC card, and those obtained by adding an arithmetic processing function and a communication function. An authentication processing unit that executes user authentication in response to a request by the connection program according to claim 1, a license management unit that manages license information of a program for each user, the program, and an update program thereof With a program management department to manage,
In response to a request from the connection program, the server transmits license information of the user and a necessary update program to a computer that executes the connection program. A computer system for managing programs and their licenses,
A server having license information for each user and an update program related to the program, a user terminal connectable to the server via a network, and a storage medium detachably rewritable to the user terminal;
One or more programs to be installed on the user terminal are stored in the storage medium, and the user terminal acquires license information necessary for installing the program from the server and stores the license information in the storage medium. Thus, the computer system can be installed on the user terminal or another terminal.   10. The computer system according to claim 9, wherein the user terminal acquires an update program of a program related to the user's license from the server, if any, when acquiring the license information from the server, A computer system for storing a program in a medium or updating a program stored in the storage medium.   11. The computer system according to claim 9, wherein the license information includes expiration date information, and the user terminal determines that the server includes the server when the current date has passed a predetermined number of days before the expiration date. A new or updated license information is obtained from a computer system.

Images