JP2005135433A - Key authentication method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To improve security for sales of software and also reduce the time burden to a user, without complicating a storage medium of software. <P>SOLUTION: A user processor originates a call to a center before issuing a request for use of software and disconnects the call after transmitting user identification information, and the center retrieves an account history of the user on the basis of user identification information received from the user processor and originates a call to the user processor in the case of no abnormality, and the user processor transmits the request for use of software in response to the call from the center. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a technology effective when applied to a distribution system for software such as computer programs or video works, particularly digitalized software.

  When a large-scale storage medium such as a CD-ROM appears, it is expected that not only computer programs but also images and sounds will be stored as digital information on this medium and sold.

  That is, video works such as those conventionally supplied on video tapes are directly stored on CD-ROMs for sale, or started to be distributed to the market as games using the interactive (interactive) nature of CD-ROMs. It is coming.

  By the way, this kind of digital information is very easy to copy to other media, and since there is no deterioration due to copying like analog information, it is possible to copy the same information. Profits are very likely to be harmed. That is, it is easy to copy the contents of the CD-ROM with only a small amount of DOS command knowledge as long as it possesses a large capacity rewritable magneto-optical disk or magnetic disk device.

  In most cases, this type of digital information medium rental activity is prohibited by the manufacturer because a sufficient security check is not possible.

  However, as an end user, the current price of this kind of software is expensive and whether it really matches what it wants or whether it can be used with its own hardware. In many cases, hesitates to purchase until confirmation.

  In this regard, a large number of software with limited functions is stored on a CD-ROM and sold at low cost, and the end user pays for the desired software from among them, thereby releasing the function restrictions. The new software distribution method of acquiring is starting to be realized.

  For example, there is a method of encrypting software as a function limiting method. When the user wishes to use the software, the user requests the management center to use the software (see FIG. 11). At this time, a random number is generated based on the time when the user accesses the management center and the time when the use request is input, and the random number is transmitted to the management center (see FIG. 12).

  The management center charges the user based on the random number received from the user and transmits the software permission information. Then, the user terminal decrypts the software based on the permission information received from the management center. Thereby, the user can use desired software.

By the way, when a plurality of users intentionally synchronize the access time to the management center and the input time of the usage request, there is a possibility that the same random number value is generated in the plurality of user terminals. In this case, there is a problem that the management center charges only one user and notifies the permission information without charging other users. In other words, there is a security problem that multiple users except one can use the software free of charge. In this way, software can be used not only by legitimate users who have paid usage fees, but also by users who have not yet paid usage fees, so software manufacturers or sellers can gain legitimate benefits related to the use of software. There is a problem that can not be.

  Therefore, the present invention has been made in view of the above problems, and provides a technology for permitting the use of software only to a user who has paid for the use of software, thereby improving security in software sales. Is an issue.

  The present invention has been made as follows in order to solve the above problems. This will be described based on the principle diagram of FIG.

  In the key authentication method of the present invention, a software playback device for selecting and playing back software desired by a user from a software storage medium 7 that includes programs, characters, graphics, images, sounds, or the like and stores encrypted software, A module configured separately from the software storage medium 7 is mounted. This module includes an input characteristic detection unit 2, an information conversion unit 3, and a comparison unit 4.

  The input characteristic detection hand throw 2 has a function of analyzing the input characteristics of the user when the user inputs a software use request to the input means 1 provided in the software reproducing apparatus.

  The information conversion means 3 has a function of converting the input characteristic information analyzed by the input characteristic detection means 2 to generate characteristic information. Here, the user notifies the center 5 of the characteristic information by communication or other means.

  The center 5 manages the use of each software, and has a function of generating permission information by encrypting the characteristic information received from the user and notifying the permission information to the user.

  On the other hand, the comparison means 4 of the module compares the permission information received from the center 5 with the characteristic information generated by the information conversion means 3, and executes the software only when both attributes match. It has a function to allow.

  Furthermore, when the input means 1 is a keyboard, the input characteristic detection means 2 shall detect the keystroke characteristic of a keyboard. At this time, the usage request is composed of a character string composed of a plurality of characters, and the input characteristic detecting means 2 detects a keystroke characteristic for inputting the character string.

  When the input unit 1 is a mouse, the input characteristic detection unit 2 detects a characteristic that the user operates the mouse, that is, a movement characteristic of the mouse on the two-dimensional coordinate axis. For example, the movement trajectory of the mouse on the two-dimensional coordinate axis may be detected. Alternatively, the timing at which the mouse passes a specific point on the two-dimensional coordinate axis may be detected. In this case, a plurality of specific points are set, and information for identifying each point and the passing timing of each point are detected.

  Furthermore, when the input unit 1 is a handwriting input device, it is assumed that handwriting characteristics when a user inputs a use request are detected. The input means 1 of the present invention is not limited to the keyboard, mouse, and handwriting input device described above, but may be a remote controller of a software playback device, a keypad, or the like.

  Further, in the key authentication method and key authentication method of the present invention, when the software reproducing apparatus and the center 5 are connected by a communication line, the user calls the center 5 before inputting the use request, The user identification information is transmitted, and the call is temporarily disconnected at this point. Then, the center 5 searches the user's identity survey, for example, the user's billing history, based on the user identification information, and if there is no abnormality, makes a call to the software playback device. When the user receives a call from the center 5, the user inputs a software use request.

  The software desired by the user may be stored in a software storage medium such as a CD-ROM, or may be obtained as communication information.

  According to the key authentication method and the key authentication method of the present invention, the user inputs a software use request from the input means 1 when using any software stored in the software storage medium 7. At this time, the input characteristic detection unit 2 monitors the input interval of the usage request input to the input unit 1 and analyzes the input characteristic of the user. When the analysis is completed, the input characteristic detection unit 2 notifies the information conversion unit 3 of the analysis result.

  The information conversion means 3 generates characteristic information that reflects the input characteristics of the user based on the analysis result. Here, the user notifies the center 5 of the characteristic information. The center 5 generates permission information by encrypting the characteristic information received from the user, and notifies the permission information to the user.

  When the permission information is received from the center 5 at the user terminal, the comparison unit 4 compares the permission information with the characteristic information. Then, the comparing means 4 permits the decryption of the software when both attributes match.

  As described above, in the present invention, the user-specific characteristics such as the keystroke interval of the keyboard are converted into information, unique information is generated, and the use of the software is managed using this information. Can be prevented.

  In such an invention, it is possible to perform software management capable of further security check and efficient billing management without complicating the software storage medium, and reduce the time burden on the user. It is possible to realize a sales form of high-quality software.

  In addition, since the exchange of information between the software playback device and the center is encrypted, the contents are not leaked to a third party and misused.

  According to the present invention, before issuing the usage request, the user transmits information identifying the user to the center 5 and disconnects the call. The center 5 refers to the billing balance based on the user identification information, and calls back to the user if there is no abnormality. When the user receives the callback, the user transmits a software use request. Therefore, according to the key authentication method of the present invention, the user is not subject to time constraints due to processing delay of the center 5 or the like.

  Embodiments of the present invention will be described below with reference to the drawings. FIG. 2 is a functional block diagram showing a schematic configuration of a system to which the key authentication method of this embodiment is applied.

In the present embodiment, a description will be given by taking as an example a system in which a communication modem is connected to a software playback device, and the software playback device and the center 5 are connected by a communication line. In this embodiment, for convenience of explanation, it is assumed that the encrypted software data is provided by being stored in a CD-ROM, but may be obtained as communication information.
(Configuration of Software Reproducing Device) A transmitting / receiving circuit 6 in the figure is an example of realizing a module in the present invention. In the present embodiment, the transmission / reception circuit 6 may be fixedly attached in the form of a board or card in the software playback apparatus, and is an IC card that is detachably mounted in the card slot of the software playback apparatus. There may be. The transmission / reception circuit 6 is attached to the interface portion between the software reproduction device and the communication modem. However, when the communication modem is built in the software reproduction device, the transmission / reception circuit 6 may be attached to the communication modem. Furthermore, the transmission / reception circuit 6 may be connected with a keyboard 1a as the input means 1 of the present invention. A detailed description of the transmission / reception circuit 6 will be described later.

  In the figure, reference numeral 8 denotes a demodulation circuit / control circuit, which has a function of demodulating MPEG standard image / audio information stored in a CD-ROM and sending it to the decoder 2.

  The decoder 9 performs error correction and bit rearrangement, and delivers up to 2 megabytes / second (average 1 megabyte / second) of image / sound information (encrypted information) to the SD circuit 10.

  In the SD circuit 10, the image / audio information (encrypted software) received through the I / O 11 is decrypted by a DES (DATA ENCRYPTION STANDARD) 13 and sent to the demultiplexer 15 outside the SD circuit 10 through the I / O 14. The demultiplexer 15 separates the audio data and the image data and outputs them to the MPEG processing unit (MPEG-2). Here, when the output destination is a computer (PC), the MPEG data is processed as digital information, and when the output destination is a TV monitor or a speaker, it is output as analog information after D / A conversion. To do.

  The exchange of these information is performed by the control CPU 12 and the control CPU 16 of the SD circuit 10, but the control CPU 12 in the SD circuit 10 may be shared by the control CPU 16.

In this embodiment, the DES 13 is FIP'S PUB. “46 DATA ENCRYPTION STANDARD NIST” is used, and the MPEG processing unit uses “ISO / IEC CD 13818′1-3”.
(Functions of Transmitting / Receiving Circuit) FIG. 3 shows the functional configuration of the transmitting / receiving circuit 6 as a module of the present invention.

  The transmission / reception circuit 6 in the present embodiment includes a keying interval detector 2a, a keying interval accumulator 2b, and a clock 2c as input characteristic detection means of the present invention. Further, the transmission / reception circuit 6 includes a one-way function processing unit 3 as information conversion means, a comparator 4 as a comparison means, a memory 17, and a one-way function processing unit 18.

  The keystroke interval detector 2a detects a keystroke interval between each character based on a clock generated by the clock 2c when a user inputs a character string indicating a software use request.

  The keystroke interval accumulator 2b is a device that accumulates the keystroke intervals detected by the keystroke interval detector 2a. The keystroke interval detector 2a and the keystroke interval accumulator 2b are assumed to be executed from the start to the end of input of a character string indicating a use request by the user. That is, the keystroke interval detector 2b starts detecting the keystroke interval from the time when the first character of the usage request character string is input, and ends the detection of the keystroke interval when the last character of the usage request character string is input. Along with this, the keystroke interval accumulator 2b starts / ends accumulation of keystroke intervals, and inputs the accumulation result to the one-way function processing unit 3 as input characteristic information.

  The one-way function processing unit 3 has a function of encrypting data indicating the accumulation result based on a predetermined key. The one-way function processing unit 3 transmits the encrypted information to the center 5 and registers it in the memory 17.

  Next, when the transmission / reception circuit 6 receives the information corresponding to the information notified to the center 5, the transmission / reception circuit 6 activates the one-way function processing unit 18 to encrypt the information registered in the memory 17 in the center 5. Encryption is performed in the same processing procedure as the processing.

Here, the comparator 4 compares the information notified from the center 5 with the information encrypted by the one-way function processing unit 18. When both pieces of information match, a signal for permitting software decoding is transmitted to the control CPU 12 of the SD circuit 10.
(Function in the SD circuit) The SD circuit 10 may be a circuit that is fixedly mounted in the software playback device in the form of a board or a card, as in the case of the above module, or is detachably attached to the card slot of the software playback device. An IC card to be attached may be used.

  The control CPU 12 of the SD circuit 10 determines whether or not to allow the DES 13 to decrypt the encrypted software data read from the CD-ROM 17. Specifically, the control CPU 12 permits the decryption in the DES 13 only when the permission signal is received from the transmission / reception circuit 6.

  Further, the control CPU 12 has a function of measuring the decryption amount or decryption time decrypted by the DES 13 and transmitting this information to the center 5 via the transmission / reception circuit 6 when the use of the software is permitted. Yes. Here, the control CPU 12 has a function of encrypting information using the DES 13 and transmitting the encrypted information to the center 5 when transmitting information such as the decryption amount or the decryption time to the center. (Function of Center) FIG. 4 shows the functional structure of the center 5 in this embodiment.

  When the center 5 receives the encrypted characteristic information from the software reproducing apparatus, the center 5 includes a permission information generation unit 5a that further encrypts the characteristic information based on a predetermined key. Further, the center 5 searches the billing information registration unit 5b for registering the billing balance of each user for each user ID, and the billing information registration unit 5b based on the user ID when the user ID is received. An inquiry unit 5c for determining whether or not the balance is “0” is provided. Further, the inquiry unit 5c has a function of performing a callback to the software playback device if the billing balance is not “0”. Here, the user ID is a user name, a user credit number, a user account number, or the like.

  (Overview of Software Sales Form Using the Present Invention) The overall image of the software sales form realized by the present invention will be described below with reference to FIG.

  First, the end user goes to the store 19 or the like (may be mail order) and purchases a CD-ROM (7) as a software storage medium in which software is stored. At the same time, an operation application disk 20 such as driver software and a card-type transmission / reception circuit 6 are purchased so that the software can be reproduced by its own software reproduction apparatus. Here, the operation application disk 20 is in the form of a floppy disk (registered trademark), for example, and may be used as an external user information storage medium. In addition, although the CD-ROM (7) stores a plurality of software, it is not a selling system that sells out the CD-ROM, so the selling price of the CD-ROM itself is set very low. Further, the sales store 19 may be a rental store.

In other words, in the present invention, all software data stored in the CD-ROM is encrypted, and when this is decrypted and reproduced, the transmission / reception circuit 6 as a module with high security is used. Is essential. As will be described later, a fee collection system according to the amount of software used is provided. Therefore, even if the encrypted data stored in the CD-ROM itself is copied to another medium, it is meaningless by itself, and even if the CD-ROM is used as a rental system, a charge collection system corresponding to the amount of use should be complete. This will not reduce the profits of software providers.

  When the end user desires to reproduce the software stored in the CD-ROM (7) with his / her software reproduction apparatus, the end user inserts the card-type transmission / reception circuit 6 into the card drive apparatus 22, and the CD-ROM (7 ) And the operation application disk 20 are loaded into the software playback device.

  Then, the transmission / reception circuit 6 installed in the software playback device is activated, and a user ID is transmitted from the modem (modulation device) installed inside and outside the software playback device to the management center 5 through the home telephone 21 to disconnect the call. To do. Here, the center 5 refers to the billing balance of the user based on the user ID, and if it is not “0”, calls back to the software playback device (see FIG. 6). Then, when the user receives a callback from the center 5, the user inputs a character string indicating a usage request from the keyboard 1. Here, the transmission / reception circuit 6 of the software playback device detects the keystroke interval input by the user and calculates the cumulative value of the keystroke interval. Specifically, the keystroke interval detector 2a detects the keystroke interval of the character string input by the user based on the clock 2c. The keystroke interval accumulator 2b accumulates the keystroke intervals detected by the keystroke interval detector 2a, and obtains an accumulated value as input characteristic information (see FIG. 7). Then, the one-way function processing unit 3 of the transmission / reception circuit 6 encrypts the accumulated value based on a predetermined key and transmits it to the center 5.

  On the other hand, in the center 5, the information notified from the software reproducing device is further encrypted by the permission information generating unit 5a and notified to the software reproducing device. In the software reproducing apparatus that has received the information encrypted at the center 5, the one-way function processing unit 18 of the transmission / reception circuit 6 reads out the information stored in the memory 17 and performs the same procedure as the permission information generation unit 5 a of the center 5. Encrypt further with. Then, the comparator 4 of the transmission / reception circuit 6 compares the information encrypted by the one-way function processing unit 18 with the information received from the center 5. Here, if both pieces of information match, the transmission / reception circuit 6 permits the SD circuit 10 to perform decoding.

  Upon receiving the permission information, the SD circuit 10 reads the CD-ROM (7) and decrypts necessary software. Then, the SD circuit 10 transfers the decrypted software to a program storage area (memory).

  At the same time, the control CPU 12 counts the amount of decryption data or the decryption time of the software, and transmits these values to the center 5 as needed. The center 5 subtracts the billing balance of the user based on the decrypted data amount or the decryption time. At the same time, the center 5 performs a process of debiting a charge corresponding to the amount used by the user from the account of the financial institution 23 based on the billing information received from the software playback device and transferring the money to the account of the software provider. You may make it perform.

  On the other hand, when the billing balance becomes “0”, the center 5 notifies the software playback device that processing is stopped. In the software reproducing apparatus that has received this notification, the control CPU 16 stops the output to the TV monitor and the output to the computer (PC). Along with this, a message indicating that the credit balance has become “0” as an image output or a software advertisement may be superimposed.

Further, as in the above example, when charging is managed on the center 5 side, user information such as charging information is output to the outside of the software playback device. Therefore, in order to improve security, the control CPU 12 The billing information is encrypted using the DES 13 and notified to the center 5 through the telephone line as encrypted data.

  As described above, according to the present invention, not only the software stored in the CD-ROM but also user information generated by the operation of the software is encrypted and output to the outside, so that unauthorized use of the software due to falsification of the user information is prevented. be able to.

  In the embodiment described above, the provision of software to the software playback device is not limited to a tangible medium such as a CD-ROM, but is obtained as communication data from a host computer via a high-speed communication system. Of course, it may be software.

  In this embodiment, a keyboard is used as an example of input means. However, a mouse, a handwriting input device, or a remote controller of a software playback device may be used.

  When a mouse is used, the movement characteristics of the mouse operated when the user inputs a usage request are detected. For example, as shown in FIG. 8, there is a method of detecting a mouse movement locus in two-dimensional coordinates (XY coordinates) and generating a function representing the locus. Further, as shown in FIG. 9, a method of detecting the time when the mouse is clicked in two-dimensional coordinates (XY coordinates) and the coordinate value of the point, and generating a function based on these information may be used. Furthermore, as shown in FIG. 10, a plurality of specific points may be set in advance on the two-dimensional coordinates, and a function may be generated based on the passage time and coordinate value of each specific point.

  When a handwriting input device is used, a function is generated based on handwriting characteristics of a character string representing a usage request. Furthermore, when a remote controller is used, the operation button pressing interval is detected in the same manner as the keyboard.

  As described above, according to the present embodiment, as information for identifying individual users, the keystroke characteristics of the keyboard, the operation characteristics of the mouse, the handwriting characteristics of the input characters, or the pressing characteristics of the control buttons of the remote controller are used. Unique information can be generated for each user, and the user can be prevented from intentionally imitating the input characteristics of others and using the software free of charge.

  In addition, by adopting a method in which the user disconnects the call once after notifying the user ID to the center and the center calls back to the user after the user's identity check is completed, the user can spend time due to processing delay on the center side. Without being restricted.

Principle of the present invention Schematic configuration block diagram of a key distribution system in an embodiment Block diagram of functions of transmitter / receiver circuit by function Block diagram showing the configuration of each center function Explanatory drawing which shows the whole concept of the software sales system of this invention Sequence diagram showing the processing process when using the software Explanatory diagram of keystroke interval detection processing and keystroke interval accumulation processing FIG. 1 is a diagram for explaining input characteristic detection processing when a mouse is used. FIG. 2 is a diagram for explaining input characteristic detection processing when a mouse is used (2). FIG. 3 is a diagram for explaining input characteristic detection processing when a mouse is used. Explanatory drawing showing a conventional software sales form Explanatory drawing which shows the conventional user specific information generation procedure

Explanation of symbols

1. Input means (keyboard)
2 .. Input characteristic detection hand pitch 2a..Keystroke interval detector 2b..Keystroke interval accumulator 2c..Clock 3..Information conversion means (one-way function processor)
4. Comparison means 5 Center 5a Permit information generation unit 5b Accounting information registration unit 5c Inquiry unit 6 Transmission / reception circuit (module)
7. Software storage medium (CD-ROM)
8 .. Demodulation circuit. Control circuit 9 .. Decoder 10.- SD circuit 11.- I / O
12. Control CPU
13. DES
14. ・ I / O
15. Demultiplexer 16 Control CPU
17 .. Memory 18 .. Unidirectional function processor 19. Store 20. Operation application disk 21. Home phone 22. Card drive device 23.

Claims (1)

The user processing device makes a call to the center before issuing the software usage request, disconnects the call after transmitting the user identification information,
The center searches the charging history of the user based on the user identification information received from the user processing device, and if there is no abnormality, calls the user processing device,
The key processing method according to claim 1, wherein when the user processing device receives a call from the center, the user processing device transmits a use request for the software.

Images