KR101266411B1 - Method of copy protect for digital device and apparatus thereof - Google Patents

Abstract

The present invention encrypts and stores executable files and data necessary for the operation of the digital device for copy protection of software. By encrypting and storing it so that it cannot be used even if it is duplicated, and to detect and cope with software duplication attempts, by detecting an attempt to duplicate duplication according to the amount of light emitted by detecting an illumination intensity, and detecting duplication attempts by opening the case; and And / or detect replication attempts by mercury contact relays. During the operation of the digital device, the validity of the encryption key is periodically checked. If the encryption key is not valid, ramdisk unmounting, image deletion of the software targeted for duplication, and system reboot are performed.

Description

Method and copy protection for digital device and apparatus of digital device

The present invention relates to software copy protection, and more particularly, to an apparatus and method for encrypting and storing an executable file and data necessary for the operation of a digital device, and preventing a copy attempt by detecting a software copy attempt.

The piracy problem of various softwares developed with the development of information and communication technology is not only a problem of lowering the developer's motivation to develop, but also a vicious cycle in which the losses due to piracy are reflected in the software price, and again, the piracy is attempted due to the high price. It is becoming an obstacle to national industrial development. Thus, software piracy prevention is an indispensable requirement across the industry for national IT status.

As a conventional technique for preventing software piracy, a method of receiving a CD key of a software installation CD, using a hardware lock for copy protection, or monitoring a software piracy through a web server has been proposed. Receiving a CD-key is the most commonly used method.However, copying a CD-key generates and enters a CD-key value and installs the software or receives a CD-key from a party user. Not 1 to 5 are conventional techniques for solving the software copy protection method of the CD key input method.

1 shows an apparatus for preventing software copying of Patent Document 1. As shown in FIG. The built-in encryption / decryption chip connected to the parallel port of the user's computer prevents illegal copying of the software. It checks the existence of the lock when installing or executing the software and compares the serial number embedded in the software with the serial number in the hardware lock key. To make it executable only when they match.

However, this is inconvenient because the hardware key must be kept on the computer for the backup of a legitimate user or on a running computer. In addition, a problem in use may occur due to a failure of a hardware lock key.

2 is to solve the inconvenience of having to continuously attach a separate hardware lock key to the serial port of Patent Document 1 to prevent software piracy using a portable storage device such as USB. Licensed areas on portable storage devices can be used to create and mount application-specific license codes for application software and storage devices, or to rent or duplicate portable storage devices themselves.

3 is provided with an LC resonant tag attached to the case of a software sales CD to solve the inconvenience of the hardware solution of Patent Document 1 and Patent Document 2 to provide a software tamper resistant security key system. After installation, peel off the LC resonant tag of the CD case or change the attachment position and check the reflected wave change of the reflected wave scanner to complete the installation so that illegal copying is not possible. However, the method of attaching the tag of Patent Literature 1 also requires a reflection wave scanner at the time of installation and requires user's operation such as peeling off the tag.

Figure 4 is to solve the inconvenience caused by the physical limitations of Patent Documents 1 to 3 through the online store the software information, user information, authentication key information, etc. in the server and the user is authenticated through the communication network when installing the software Receive the installation. However, this incurs an overload of maintaining all information on the server with each user's information about the software sold by the software manufacturer. Software buyers always have the burden of storing personal information on the server, such as purchase history, and the software at all times. There is a problem that must be connected to the communication network.

5 is a scheme for managing license information between a client and a host by storing license information in an IC chip embedded card. In addition, the IC chip embedded card is configured so that the license information is encrypted and stored so that even if the license information is stolen, decryption and duplication are impossible.

However, the biggest problem of the prior arts described above relates to copy protection of software supplied in the form of a CD and the like, and does not present any solution or countermeasure for copy attempts for software that drives the digital device itself. That is, no attempt is made to attempt to duplicate the firmware of the digital device or the embedded software. Another object of the present invention is the protection of software mounted on a digital device. Conventional techniques for this are Patent Document 6 and Patent Document 7.

FIG. 6 relates to an electronic security method including a physically unclonable function (PUF) circuit having a physical copy protection function for security of a device, wherein a security key is generated using the PUF. Patent Document 6 shows that by reading a unique word from the PUF to generate RSA keys to protect personal data and software stored in the electronic device. However, since Patent Document 6 must include a separate circuit of the PUF, compared to the present invention which stores the encryption key in the area of the existing volatile memory and controls the power supply to control the validity of the encryption key, the PUF circuit itself Integrity problems exist.

In addition, FIG. 7 relates to a method and apparatus for preventing illegal copying of an electronic product including a semiconductor chipset including a secret key and a public key decoding algorithm, wherein the private key, an arbitrary secret key, and a plurality of keys are generated through a key generator of a developer program. The operation instruction (corresponding to the copy monitoring target software of the present invention) and the public key decoding algorithm are characterized by comprising a semiconductor chipset. However, Patent Document 7 also has to configure the semiconductor chipset separately, and to include the protection target instructions on the flash memory of the semiconductor chipset, unlike the present invention, there is a problem that it is difficult to protect various software and main data files.

As described above, Patent Document 6 and Patent Document 7, both of which are prior art documents, attempt to prevent copying of software of a digital device. However, unlike the present application, an additional circuit or a semiconductor chip set is additionally configured to provide a manufacturing burden and new software or data. It can be seen that there is a problem of protection against the present, which does not meet the purpose and effect of the present application.

1. Korean Patent Publication No. 10-2005-0032462 2. Korean Patent Publication No. 10-2004-0097435 3. JP JP 2001-34468 A 4. Korean Unexamined Patent Publication No. 2002-0016160 5. Korean Unexamined Patent Publication No. 2002-0088893 6. United States Patent Application Publication US 2008/0279373 7. Korean Patent Publication No. 10-2009-0077413

The present invention has been made to solve the problems of the prior art described above, to prevent the duplication of encrypted executable files and data in order to prevent the duplication of software required for the operation of the digital device for the first purpose. Encrypt executable files and data necessary for the operation of digital devices so that software cannot be copied if the encryption key is not known.

A second object of the present invention is to prevent the duplication by detecting a duplication or a corresponding operation of the digital device. Detects copy attempts and prevents copy by deleting software and data in the copy operation.

The configuration of the software copy protection device according to the present invention for solving the above problems, encryption key generation unit for generating an encryption key by the encryption algorithm;
A volatile memory unit for storing the generated encryption key;
An encryption unit for encrypting and storing an executable file and data necessary for the operation of the digital device with the encryption key;
A decryption unit which checks the validity of the encryption key and decrypts the encrypted executable file and data; And
In the software copy protection device required for the operation of the digital device including a power supply for supplying power to the volatile memory,
Check the validity of the encryption key by RTC (real time clock) memory and cut off the power supply unit when the validity period has passed;
When part or all of the copy protection device is abnormally inclined more than a certain slope by the mercury contact relay installed in the copy protection device.
Characterized in that the power is cut off the power supply.

In one preferred embodiment of the present invention, the software required for the operation of the digital device is characterized by being stored encrypted. The key used for encryption is stored in volatile memory powered by mains and battery. The decoded and executed image resides in RAM so that all data is erased when the power is turned off. In addition, when the copy attempt is detected, the power is applied to the volatile memory in which the key is stored, thereby preventing the key from being invalidated.

According to a preferred embodiment of the present invention, in order to prevent copying of software required for the operation of the digital device, a copy attempt by the illumination sensor is detected and prevented. When the case is opened for software duplication, the amount of light projected by the illuminance sensor changes, so it detects the duplication attempt.

According to a preferred embodiment of the present invention, in order to prevent copying of software required for the operation of the digital device, a copy attempt by detecting a case opening is detected. A switch is formed between the upper and lower cases of the case or the board of the digital device so that when the case is closed, the switch is turned on or off and the state of the switch is changed when the case is opened to detect the copy attempt.

According to an exemplary embodiment of the present invention, the mercury contact relay is configured to detect an attempt to open or duplicate when a part or the whole of the case of the digital device is abnormally inclined more than a certain slope. Software necessary for the operation of the digital device cuts off the power supply to the stored volatile memory to block the copy attempt.

In one preferred embodiment of the present invention, in order to prevent software duplication required for the operation of the digital device, it detects unauthorized access to the memory in which the encryption key is stored, and detects the duplication attempt. The copy attempt is detected by detecting fraudulent access to the key used for software encryption, and the copy attempt detection software is activated to detect the copy attempt.

Conventional devices or methods for preventing software copying are for copy protection of software, especially application software supplied in the form of a CD or online, and have a separate configuration such as a hardware lock key, an IC chip embedded card, or online monitoring. Most of the way. These methods have the inconvenience that the client should always have a separate physical restriction configuration, and there is a problem in that duplication cannot be detected or prevented without being connected to the communication network online. Further, attempts to copy software required for the operation of the digital device have not been proposed in the prior art literature, but rather only inventions that limit the modulation of the software required for the device operation have been proposed.

The method and apparatus for detecting and preventing copying of software required for the operation of the digital device according to the present invention can not be used even when deodorizing software through encryption, and power is supplied through the configuration of an illuminance sensor, a case open detection switch, and a mercury contact relay. Even if not, the digital device can detect the software copy attempt. In the AC power-on state, the software copy attempt process can be started to detect the unauthorized access to the memory where the encryption key is stored and block the copy.

Although the present invention can be applied to copy protection of general PC software, it is effective for copy protection or protection of original technology of embedded digital devices equipped with software such as secret algorithms mounted on telephone DVD players, communication equipments, and the like. Applicable to original technology security and communication security software.

1 is a related art hardware lock key that attaches to a user's computer to prevent software copying.
2 relates to software piracy prevention using portable storage in the prior art.
3 is a system configuration diagram of a security key system which prevents fraudulent copying by attaching an LC resonance tag to a software CD case according to the prior art.
Figure 4 is a system configuration for preventing the duplication by installing the authentication when installing the software through the online network and the communication network in the prior art.
5 is a block diagram of a copy protection system for storing and managing license information in an IC chip embedded card according to the related art.
6 is a system configuration diagram between a source device and a device including a circuit having a physical copy protection function (PUF) for electronic device security in the prior art.
FIG. 7 is a prior art system structure for firmware duplication prevention of a device including a central processing unit including firmware and a developer program including a semiconductor chipset and a key generator for preventing duplication thereof.
8 is a flowchart of the software copy protection method of the present invention.
9 is a software copy detection and prevention structure by the illumination sensor, the case open detection switch, the mercury contact relay configuration as an embodiment of the present invention.

Hereinafter, software copy protection according to the present invention will be described. The digital device performs certain desired operations by software that performs startup and control of the device and various application software for that operation.

The present invention encrypts and stores executable files and data necessary for the operation of the digital device for copy protection of such software. By encrypting and storing it so that it cannot be used even if it is duplicated, and to detect and cope with software duplication attempts, by detecting an attempt to duplicate duplication according to the amount of light emitted by detecting an illumination intensity, and detecting duplication attempts by opening the case; and And / or detect replication attempts by mercury contact relays.

In one preferred embodiment of the present invention, the software required for the operation of the digital device is characterized by being stored encrypted. The encryption algorithm is a general encryption algorithm such as AES or RSA, and there is no limitation of the encryption algorithm. The encryption key is automatically generated and used by using a random number generator. Therefore, unlike a predetermined password, there is no risk of theft. The key used for encryption is stored in volatile memory powered by mains and battery. The decoded and executed image resides in RAM so that all data is erased when the power is turned off. In addition, when the copy attempt is detected, the power is applied to the volatile memory in which the key is stored, thereby preventing the key from being invalidated.

8 is a flowchart of a software copy protection method of a digital device according to the present invention. When the power is applied, the kernel and ramdisk are loaded to complete the boot. The copy protection process starts up at boot time. Make sure the encryption complete flag is set and the existence of an unencrypted image file. In the case of an unencrypted file, an encryption key is generated, an image file is encrypted, an encryption key value is stored in the key memory, and an encryption completion flag is set. When running the software, first verify that the corresponding encryption key value is valid, mount the ramdisk, read the key value, decrypt the image file, and set the encryption complete flag. Run the run script only if valid after key value validation. If the key value is invalid, it is determined to be abnormal and unmount the ramdisk, delete the image file and reboot the system to restore the previous state.
The specific steps of the software copy protection method of the digital device are as follows.
(a) powering up a software copy protection system;
(b) loading a kernel and a ram disk onto the software copy protection system to complete booting;
(c) driving a copy protection process of the software copy protection system;
(d) the copy protection process checking whether the encryption completion flag is set and performing the step after step (g) if it is not set;
(e) the copy protection process checking whether an encryption complete flag is set, and if an encryption complete flag is set, checking whether an unencrypted image file exists;
(f) if the copy protection process is present with an unencrypted image file,
(f-1) an encryption key is generated by an encryption key generator of the software copy protection system,
(f-2) the encryption unit of the software copy protection system encrypts the image file with the encryption key,
(f-3) the copy protection process stores the encryption key in volatile memory,
(f-4) the copy protection process comprises setting an encryption complete flag;
(g) checking the validity of the encryption key in a real time clock (RTC) of the software copy protection system;
(h) the copy protection process, if the encryption key of step (g) is invalid, performing step (k);
(i) if the encryption key of step (g) is valid,
(i-1) mounting the ramdisk,
(i-2) Read an encryption key from the volatile memory,
(i-3) decrypting the encrypted image file with the encryption key,
(i-4) set the encryption completion flag,
(i-5) starting to validate the encryption key value in the real time clock (RTC);
(i-6) executing the decrypted file;
(j) the copy protection process periodically performing step (g) after;
(k) The copy protection process is performed by unmounting the ramdisk, deleting the image file, and rebooting the software copy protection system.

According to a preferred embodiment of the present invention, in order to prevent copying of software required for the operation of the digital device, a copy attempt by the illumination sensor is detected and prevented. When the case is opened for software duplication, the amount of light projected by the illuminance sensor changes, so it detects the duplication attempt.

According to a preferred embodiment of the present invention, in order to prevent copying of software required for the operation of the digital device, a copy attempt by detecting a case opening is detected. A switch is formed between the upper and lower cases of the case or the board of the digital device so that when the case is closed, the switch is turned on or off and the state of the switch is changed when the case is opened to detect the copy attempt.

According to an exemplary embodiment of the present invention, the mercury contact relay is configured to detect an attempt to open or duplicate when a part or the whole of the case of the digital device is abnormally inclined more than a certain slope. Software necessary for the operation of the digital device cuts off the power supply to the stored volatile memory to block the copy attempt.

FIG. 9 is a block diagram illustrating an embodiment of an embodiment of the present invention, in which a case open detection switch detects a case open and cuts power applied to a RAM in which an encryption key is stored. The mercury contact relay cuts power to the RAM when part or all of the device is tilted above a certain slope by using an operating characteristic that the contact breaks when tilted above a certain slope. When the illuminance sensor is used, it is determined that the case is open when a predetermined amount of light is detected based on the amount of light projected by the illuminance sensor to cut off the power applied to the RAM. Although FIG. 9 illustrates an example in which an illumination sensor, a mercury contact relay, and a case open detection switch are all configured, any one skilled in the art among these configurations may be selectively implemented. The illustrated drawings omit non-essential elements for clarity of the invention and should not be construed as limited to the drawings.

  According to a preferred embodiment of the present invention, a volatile memory such as an SRAM, a real time clock (RTC) memory, etc., which detects a copy attempt by an illuminance sensor, a case opening switch, a mercury contact relay, and operates with a power source and a battery while AC power is applied. Power supply is cut off so that the encryption key stored in it is erased. Meanwhile, the copy protection process periodically checks the validity of key values stored in the memory even while the copy protection software is running, detects invalid key values by power off, and reboots, unmounts the ramdisk, and attempts to copy the software. Perform image deletion.

According to an exemplary embodiment of the present invention, a detection attempt of copying is performed by an illuminance sensor, a case opening switch, and a mercury contact relay in a state in which AC power is not applied, and a power supply is stored in the SRAM or RTC memory operated by a power source and a battery. Causes the encryption key to be erased. Thereafter, the copy protection process, which is run when the kernel and ramdisk are loaded when AC power is applied, detects an invalid key value by checking the validity of the key and does not perform image decryption of the software that is the target of the copy attempt.

According to a preferred embodiment of the present invention, it is possible to configure a digital device that can operate only for a predetermined time using a software copy protection method. The validity period and the encryption key are stored in volatile memory operated by main power and battery, and the device is applied to the volatile memory when it is not valid by comparing the current validity period of the device with a device such as RTC having time information. To block. When the power is cut off, the encryption key value is erased so that an invalid key value is detected at the time of validity checking of the key, and the digital device operation is impossible because the software does not perform image decoding on the operation of the digital device. This enables the construction of a digital device that operates only for a certain valid period.

In one preferred embodiment of the present invention, when detecting a software copy attempt, the key value is erased by cutting off the main power and battery power applied to the volatile memory in which the encryption key is stored so that the encrypted file or data image cannot be restored. As a result, the function of the device is not operated and the image cannot be decoded and thus cannot be used even if it is copied. In order to restore the device, it is necessary to rewrite the initial image in non-volatile memory, boot, and perform the encryption process again to restore the operation state.

Although the present invention can be applied to copy protection of general PC software, it is effective for copy protection or protection of original technology of embedded digital devices equipped with software such as secret algorithms mounted on telephone DVD players, communication equipments, and the like. Applicable to original technology security and communication security software.

The scope of the present invention is not limited to the above-described embodiments of the present invention, and various modifications and improvements by those skilled in the art to which the present invention pertains based on the basic technical idea of the present invention correspond to various modifications and configurations of the embodiments. A program that realizes possible means or functions or that can be implemented through a recording medium on which the program is recorded is also within the scope of the present invention.

Claims (9)

delete delete delete delete delete In the software copy protection method required for the operation of the digital device,
(a) powering up a software copy protection system;
(b) loading a kernel and a ram disk onto the software copy protection system to complete booting;
(c) driving a copy protection process of the software copy protection system;
(d) the copy protection process checking whether the encryption completion flag is set and performing the step after step (g) if it is not set;
(e) the copy protection process checking whether an encryption complete flag is set, and if an encryption complete flag is set, checking whether an unencrypted image file exists;
(f) if the copy protection process is present with an unencrypted image file,
(f-1) an encryption key is generated by an encryption key generator of the software copy protection system,
(f-2) the encryption unit of the software copy protection system encrypts the image file with the encryption key,
(f-3) the copy protection process stores the encryption key in volatile memory,
(f-4) the copy protection process comprises setting an encryption complete flag;
(g) checking the validity of the encryption key in a real time clock (RTC) of the software copy protection system;
(h) the copy protection process, if the encryption key of step (g) is invalid, performing step (k);
(i) if the encryption key of step (g) is valid,
(i-1) mounting the ramdisk,
(i-2) Read an encryption key from the volatile memory,
(i-3) decrypting the encrypted image file with the encryption key,
(i-4) set the encryption completion flag,
(i-5) starting to validate the encryption key value in the real time clock (RTC);
(i-6) executing the decrypted file;
(j) the copy protection process periodically performing step (g) after;
(k) The copy protection process includes the steps of unmounting the ramdisk, deleting the image file, and rebooting the software copy protection system. . The method according to claim 6,
And providing a case opening attempt detection means to the software copy protection system to detect the software copy protection attempt and to cut off the power of the volatile memory when the copy protection attempt is detected. Way. The method of claim 7, wherein
And the case opening attempt detecting means includes at least one of an illuminance sensor, a case opening detecting switch, and a mercury contact relay. An encryption key generation unit for generating an encryption key by an encryption algorithm;
A volatile memory unit for storing the generated encryption key;
An encryption unit for encrypting and storing an executable file and data necessary for the operation of the digital device with the encryption key;
A decryption unit which checks the validity of the encryption key and decrypts the encrypted executable file and data; And
In the software copy protection device required for the operation of the digital device including a power supply for supplying power to the volatile memory,
Check the validity of the encryption key by RTC (real time clock) memory and cut off the power supply unit when the validity period has passed;
When part or all of the copy protection device is abnormally inclined more than a certain slope by the mercury contact relay installed in the copy protection device.
Software copy protection device required for the operation of the digital device, characterized in that to cut off the power supply.

Images