JP5928190B2 - Authentication system and authentication method - Google Patents

Description

  The present invention relates to a software authentication system and authentication for installing an optional software of the main software in an information processing apparatus in which the main software that can be used when authentication with the hardware key is installed is installed. Regarding the method.

  In expensive software such as highly specialized software, a hardware key may be used for the purpose of preventing use by unauthorized copying. Generally, the hardware key is connected to a USB port, a parallel port, or the like of computer hardware. The hardware key is a set with the software, and is prepared one-to-one with the software. Therefore, even if the software is installed in the computer, it cannot be used unless this hardware key is connected to the computer.

  By the way, optional software may be further installed on a computer in which the main software is installed for the purpose of increasing the functions of the main software. When using the function of the optional software, a hardware key prepared one-on-one with the optional software is further required. In this case, the software in which the optional software is incorporated requires two hardware keys: a main software hardware key and an optional software hardware key. When installing additional optional software, an additional hardware key is also required. For this reason, when the administrator installs the optional software, it is necessary to manage a plurality of hardware keys, and the management of the hardware keys becomes complicated. In addition, the cost of parts for the hardware key of the optional software cannot be reduced.

Japanese Patent No. 4906434

  The present invention has been made in view of the problems as described above. Even when optional software is installed and used, only one hardware key is required to facilitate management of the hardware key. Another object of the present invention is to provide a software authentication system and an authentication method capable of reducing the component cost.

The present invention provides an information processing apparatus in which the main software can be used when the main software is installed and there is consistency between the unique identification data of the main software and the unique identification data of the hardware key corresponding one-to-one. In addition, an authentication system that installs the optional software of the main software and makes it usable , and when installing the optional software on the information processing device, at least a password associated with the unique identification data of the hardware key is required. Issuing means for issuing and providing to the information processing apparatus, writing means for writing the password to the storage means when the optional software is installed in the information processing apparatus, and the password written in the storage means and the hardware key The unique identification data And, when there is consistent, and a certification means for the state of the enable option software.

  Here, for example, the issuing means is provided in a server device connected to the information processing apparatus via the network, and the issuing means registers the unique identification data of the hardware key transmitted from the information processing apparatus in the production database. The password is issued and provided to the information processing apparatus.

  The issuing means specifically generates a reversible password by applying an encryption key to at least the unique identification data of the hardware key, and the authenticating means decrypts the password, and the unique identification data included in the decrypted password When the ID and the unique identification data read from the hardware key match, the optional software is made available.

  The issuing means issues a password associated with the authentication code of the optional software and the unique identification data of the hardware key.

  The hardware key may be connected to an external interface such as a USB (Universal Serial Bus) port of the information processing apparatus. Alternatively, the hardware key may be a MAC address (Media Access Control address) uniquely assigned to the network device of the information processing apparatus.

Further, according to the present invention, when the main software is installed and there is consistency between the unique identification data of the main software and the unique identification data of the hardware key corresponding one-to-one, the information that can be used by the main software An authentication method for installing the optional software of the main software in the processing device and making it available for use. When the issuing means installs the optional software in the information processing device, at least the unique identification data of the hardware key Is issued to the information processing apparatus, and the writing means writes the password into the storage means when the optional software is installed in the information processing apparatus, and the authentication means writes the password written in the storage means. And unique read from hardware key Collating the different data, when there is consistency, in which a state of the enable option software.

  In the present invention, when optional software is installed and used in an information processing apparatus in which main software is installed, a file stored in a storage means, a password stored in a registry, and a unique identification data of a hardware key are matched. The use of optional software is permitted when there is consistency. Therefore, the software provider need not prepare a hardware key dedicated to the option software in order to prevent unauthorized copying of the option software. In other words, even if the optional software is added, the user only needs to manage the hardware key of the main software, and the convenience can be improved. Further, as in the prior art, since the hardware key for optional software is not required, the cost of parts can be reduced.

1 is a block diagram of a software authentication system to which the present invention is applied. It is a figure which shows the authentication procedure of option software.

  A software authentication system to which the present invention is applied will be described below with reference to the drawings.

  As shown in FIG. 1, a software authentication system 1 to which the present invention is applied includes authentication for installing optional software 3 for main software 2 installed on a user computer 10 that is an information processing apparatus on the user computer 10. System.

  The main software 2 is a set of the main software 2 and a hardware key 4 for the purpose of preventing use by unauthorized copying. Here, the hardware key 4 is a USB hardware key, and unique identification data associated with the main software 2 is stored in the internal memory. The hardware key 4 is a secure device in which stored unique identification data cannot be easily rewritten. When the main software 2 is produced, the serial number and the unique identification data of the hardware key 4 are registered in the production database 24 managed by the software provider in association with each other. The main software 2 is expanded via a portable recording medium 101 such as an optical disc or the network 100. For example, the main software 2 stored in the portable recording medium 101 is installed in the internal or external hard disk drive 13 from the disk drive 17 of the user computer 10. The main software 2 is installed in the hard disk drive 13 by the user computer 10 being downloaded from the server device 20. The installed main software 2 is used only when the unique identification data of the hardware key 4 connected to the USB port 15 of the user computer 10 and the unique identification data of the main software 2 are consistent. It can be executed by the computer 10.

  For example, the optional software 3 is software for expanding the functions of the main software 2 with respect to the main software 2. Similar to the main software 2, the optional software 3 is also distributed via the portable recording medium 101 such as an optical disk or the network 100 and installed in the user computer 10. This optional software 3 is also registered with a serial number, an authentication code, and the like in the production database 24 managed by the software provider during production. The serial number and the authentication code are provided to a user who is a purchaser, for example, by being printed on a sticker and affixed to a package or an instruction manual of a portable recording medium in which optional software 3 is expanded. The user computer 10 in which the optional software 3 is installed together with the main software 2 makes the optional software 3 usable so that data such as unique identification data of the hardware key 4 is transmitted to the server device 20 via the network 100. And a password is provided from the server device 20. The option software 3 can be executed together with the main software 2 on the user computer 10 only when the password and the unique identification data of the hardware key 4 are consistent.

  Here, the user computer 10 will be described. The user computer 10 has the same configuration as an ordinary computer, and includes a ROM 11 in which a control program and the like are stored, a RAM 12 in which programs and data are loaded, and a main computer 10. A hard disk drive (HDD) 13 that stores software 2, optional software 3, files, registries, and the like, and a CPU 14 that executes main software 2 and optional software 3 are provided. Further, the user computer 10 is driven by a portable port such as an optical disk or the like, a USB interface 15 to which the hardware key 4 or the like is connected, a communication interface (I / F) 16 that communicates with the server device 20 or the like via the network 100. A disk drive 17 and a monitor 18.

  When the main software 2 is used, the main software 2 and a set hardware key 4 are connected to the USB port 15 which is an external interface. When an operation for starting the main software 2 is performed using a mouse or a keyboard, the CPU 14 reads the unique identification data of the hardware key 4 and confirms the consistency with the unique identification data held by the main software 2. When there is consistency, the main software 2 is activated. When there is no consistency, the activation of the main software 2 is prohibited, and a warning is displayed on the monitor 18 to the user.

  When the optional software 3 is installed, first, as user registration, along with user information such as the user's name, address, telephone number, and e-mail address, a serial number and an authentication code related to the optional software 3, and hardware The unique identification data of the key 4 is transmitted from the communication I / F 16 to the server device 20. When the user computer 10 is provided with a password enabling the optional software 3 from the server device 20, the user computer 10 stores the password in the file 5 provided in the HDD 13 by operating the operation unit such as a mouse or a keyboard. The Of course, the location of the password may be a registry in which basic information of the OS, extended information of the software, and the like are stored. The user computer 10 may transmit password data from the server device 20 and store the received password data in the file 5 provided in the HDD 13. Thereafter, when starting the main software 2, the CPU 14 confirms the consistency between the password stored in the file 5 and the unique identification data read from the hardware key 4 according to the main software 2, and when there is consistency. The optional software 3 is made usable together with the main software 2.

  The server device 20 that issues a password for enabling the optional software 3 is, for example, a device managed by a software provider that provides the main software 2 and the optional software 3 and has the same function as that of a normal server device. . In the server device 20, a database 21 for managing user information and the like transmitted from the user computer 10 is built in a large capacity hard disk drive by software. Further, the server device 20 collates the unique identification data of the hardware key 4 transmitted from the user computer 10 and the issuing unit 23 that issues a password that enables the user software 10 to use the optional software 3. And.

  The database 21 stores user information transmitted from the user computer 10 such as name, address, telephone number, e-mail address, unique identification data of the hardware key 4, serial number and authentication code of the option software 3, and option software. The passwords that can be used at 10 are managed in association with each other.

  The collation unit 22 accesses a production database 24 constructed on a computer managed by the software provider separately from the server device 20 via a network or the like, and collates at least the unique identification data of the hardware key 4.

  The production database 24 manages the serial number of the main software 2 issued when the main software 2 and the option software 3 are produced and the unique identification data of the hardware key 4 in association with each other. The production database 24 manages the serial number of the option software 3 and the authentication code in association with each other. The collation unit 22 determines whether or not at least the unique identification data of the hardware key 4 transmitted from the user computer 10 is registered in the production database 24 by accessing such a production database 24. In the next step, the user computer 10 can issue a password for enabling the optional software 3 in the next step. Here, the collation unit 22 collates the authentication code of the option software 3 as well.

  The issuing unit 23 that issues this password generates a password by applying an encryption key to the unique identification data of the hardware key 4 and the authentication code of the option software 3, and provides the issued password to the user computer 10. Specifically, the password is generated here by a reversible encryption method. The password issued by the issuing unit 23 of the server device 20 is displayed on the monitor 18 of the user computer 10 accessing the server device 20. The user writes down the password displayed on the monitor 18 and stores it again in the user computer 10 in the file 5 provided in the HDD 13 when the user operates an operation unit such as a mouse or a keyboard. In the present invention, the issuing unit 23 may generate at least a password by encrypting the unique identification data.

  Next, an optional software authentication procedure will be described with reference to FIG. First, as shown in step S1, when the main software 2 is produced, the serial number of the main software 2 and the unique identification data of the hardware key 4 are registered in the production database 24 in association with each other. Further, when the option software 3 is produced, the serial number and the authentication code of the option software 3 are registered in the production database 24 in association with each other. When the main software 2 is installed in the user computer 10, the consistency between the unique identification data of the hardware key 4 connected to the USB port 15 of the user computer 10 and the unique identification data held by the main software 2 is high. Activation is allowed only when it is confirmed.

  As in step S2, the optional software 3 can be further installed on the user computer 10 in which the main software 2 is installed. When the optional software 3 is installed in the user computer 10, the user computer 10 accesses the server device 20 in accordance with a user operation or in accordance with an instruction of the installed software in step S 3, and user information input by the user from the operation unit. Send etc. Specifically, the user computer 10 receives the unique identification data of the hardware key 4 and the authentication code of the option software 3 together with user information such as the user's name, address, telephone number, and e-mail address entered by a keyboard or mouse. It transmits to the server device 20.

  In step S4, the collation unit 22 of the server device 20 accesses the production database 24 via a network or the like, and collates at least the unique identification data of the hardware key 4 and the authentication code. When the verification unit 22 can confirm the unique identification data of the hardware key 4 transmitted from the user computer 10 and the authentication code of the option software 3, the issuing unit 23 encrypts the unique identification data and the authentication code in step S5. A reversible password is generated by applying the key, and the generated password is displayed on the monitor 18 of the user computer 10. The user writes down the password displayed on the monitor 18 of the user computer 10 and again stores the password in the file 5 provided in the HDD 13 by the user operating the operation unit such as a mouse or a keyboard. To do.

  The generated password may be sent as data to the user computer 10 by e-mail or the like, or may be automatically stored in the file 5 provided in the HDD 13 of the user computer 10. If the identification data and the authentication code cannot be confirmed in the production database 24, the issuing unit 23 does not issue a password and displays a warning to that effect on the monitor 18 of the user computer 10.

  In step S6, when starting the main software 2, the CPU 14 of the user computer 10 uses the main software 2 to check the consistency between the password stored in the file 5 and the unique identification data read from the hardware key 4, When there is consistency, the optional software 3 is made usable together with the main software 2. Specifically, the main software 2 or the optional software 3 decrypts the encryption of the password with the installed encryption software, and determines whether or not the unique identification data included in the password matches the unique identification data of the hardware key 4. If it is determined and they match, the optional software 3 is made usable together with the main software 2. If the decrypted password unique identification data and the hardware key 4 unique identification data do not match, the function of the optional software 3 cannot be executed even if the main software 2 can be activated.

  The authentication system 1 as described above, when the optional software 3 is installed on the user computer 10 in which the main software 2 is installed and used, the unique identification data and the hardware key included in the password stored in the file 5. 4 is confirmed, and when it matches, the use of the option software 3 is permitted. Therefore, the software provider need not prepare the hardware key 4 dedicated to the option software 3 in order to prevent unauthorized copying of the option software 3. That is, even if the optional software 3 is added, the user only has to manage the hardware key 4 of the main software 2 and the convenience can be improved. Further, as in the prior art, the hardware key for the option software 3 is not required, so that the part cost can be reduced.

  In the above example, the case where the unique identification data is stored in the USB hardware key as the hardware key 4 set with the main software 2 has been described. However, as the hardware key 4, a LAN key can be used instead of the USB hardware key. A MAC address (Media Access Control address) uniquely assigned to hardware of a network device such as a card may be used.

1 authentication system, 2 main software, 3 optional software, 4 hardware key, 5 file, 10 user computer, 11 ROM, 12 RAM, 13 hard disk drive (HDD), 14 CPU, 15 USB port, 16 communication I / F, 17 disk drive, 18 monitor, 20 server device, 21 database, 22 verification unit, 23 issuing unit, 24 production database, 100 network, 101 portable recording medium

Claims (10)

When the main software is installed and there is consistency between the unique identification data of the main software and the unique identification data of the hardware key corresponding one-to-one, the information processing apparatus that can use the main software has the main software. An authentication system for installing optional software and making it available for use,
When the optional software is installed in the information processing apparatus, at least an issuing unit that issues a password associated with the unique identification data of the hardware key and provides the information processing apparatus;
Writing means for writing the password into the storage means when installing the optional software in the information processing apparatus;
An authentication system comprising: an authentication unit that collates the password written in the storage unit with the unique identification data read from the hardware key and makes the option software usable when there is consistency. The issuing means is provided in a server device connected to the information processing device via a network,
The issuing means issues the password and provides it to the information processing apparatus when the unique identification data of the hardware key transmitted from the information processing apparatus is registered in a production database. The authentication system according to Item 1. The issuing means generates a reversible password by applying an encryption key to at least the unique identification data of the hardware key,
The authentication means decrypts the password, and when the unique identification data included in the decrypted password matches the unique identification data read from the hardware key, makes the optional software usable. The authentication system according to claim 1 or 2, characterized in that.   4. The authentication system according to claim 1, wherein the issuing means issues the password associated with an authentication code of the option software and unique identification data of the hardware key.   The authentication system according to any one of claims 1 to 4, wherein the hardware key is connected to an external interface such as a USB (Universal Serial Bus) port of the information processing apparatus.   The authentication according to any one of claims 1 to 4, wherein the hardware key is a network device of the information processing apparatus, and the unique identification data is a MAC address (Media Access Control address). system. When the main software is installed and there is consistency between the unique identification data of the main software and the unique identification data of the hardware key corresponding one-to-one, the information processing apparatus that can use the main software has the main software. An authentication method for installing optional software and making it usable.
When the issuing means installs the optional software in the information processing device, it issues at least a password associated with the unique identification data of the hardware key, and provides the information processing device with the password.
When the writing means installs the optional software in the information processing apparatus, the writing means writes the password into the storage means,
The authentication means collates the password written in the storage means with the unique identification data read from the hardware key, and makes the option software usable when there is consistency. Authentication method to use. A server device is connected to the information processing device via a network;
The issuing means of the server device issues the password and provides it to the information processing device when the unique identification data of the hardware key transmitted from the information processing device is registered in the production database. The authentication method according to claim 7. The password is a reversible password generated by applying an encryption key to at least the unique identification data of the hardware key,
The authentication means decrypts the password, and when the unique identification data included in the decrypted password matches the unique identification data read from the hardware key, the optional software is made usable. The authentication method according to claim 7 or 8, wherein:   10. The authentication method according to claim 7, wherein the password is generated in association with an authentication code of the optional software and unique identification data of the hardware key.

Images