JP2005266896A - System for preventing unauthorized use of software, method and program for preventing unauthorized use of software - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent outflow of a software to other than a contracted terminal, and prevent falsification of license information. <P>SOLUTION: An encrypting means 13 encrypts software contract information 122 including usable software information 1222 for allowing a software using terminal 2 to use and a software using terminal ID 1221 by a private key 14. A decrypting means 211 decrypts the encrypted software contract information 122 by a public key 23 as one of a pair with the private key 14. An ID determining means 222 collates a terminal ID 24 of an own terminal with an ID included in the decrypted software contract information 122. A means for determining whether to execute 223 collates a software to be started with the software information included in the decrypted software contract information 122, and determines whether to start the software to be started. <P>COPYRIGHT: (C)2005,JPO&NCIPI

Description

  The present invention relates to a software unauthorized use prevention method, a software unauthorized use prevention method, and a program, and more particularly, to a software unauthorized use prevention method, a software unauthorized use prevention method, and a program for preventing the use of software on a terminal other than a terminal with a use contract.

  Conventionally, various systems have been used as software illegal use prevention systems. The method of using a password for installation or the like is the method most commonly used at present. This method has a problem that unauthorized use cannot be prevented if a password is leaked to an unauthorized software user.

  Also, Patent Document 1 and Patent Document 2 describe a method of encrypting and distributing so that only authorized software users can decrypt. However, this method has a problem that unauthorized use cannot be prevented if software that has been decrypted by a legitimate software user leaks.

  Japanese Patent Application Laid-Open No. 2004-133826 describes a method using a hardware key such as a dongle that is difficult to copy. However, there are high cost problems caused by using hardware, and there is a problem that unauthorized use cannot be prevented when a hardware key is leaked.

  A method for managing the software main body and the license information separately is described in Patent Document 4. In this method, the encrypted license information is installed on the software user's computer, and the license information at the time of software startup is decrypted to determine whether or not the software can be executed. Need at the same time. For this reason, it is necessary to perform encryption on the software user's computer simultaneously with the decryption. That is, it is necessary to be able to perform both decryption and encryption with the key existing in the software user's computer, and there is a risk of falsification of license information due to key theft.

JP 58-154040 A (2nd page, figure) JP 2001-356833 A (page 3-4, FIG. 3) JP 2002-108482 A (page 3-7, FIG. 1) JP 2001-344097 A (page 3-7, FIG. 1)

  As described above, the conventional software illegal use prevention method has a problem that the password is leaked in a method using a password for installation or the like.

  In addition, in the method of encrypting and distributing with a cipher that can be decrypted only by a legitimate software user, there is a problem that the software main body leaks after decryption.

  In addition, the method using the hardware key has a problem of high cost and outflow of the hardware key itself to an unauthorized software user.

  The method described in Patent Document 4 has a problem that there is a risk of falsification of license information due to key theft.

  An object of the present invention is to provide a software illegal use prevention method, a software illegal use prevention method, and a program for preventing the outflow of software to terminals other than contracted terminals and preventing falsification of license information.

The software illegal use prevention method of the present invention uses a secret key for software contract information including software using terminals that use software, software information that is permitted to be used by the software using terminals, and an ID that identifies the software using terminals. And means for encryption,
The software using terminal uses means for storing the encrypted software contract information in a storage unit, and a public key that reads the encrypted software contract information from the storage unit and makes a pair with the secret key. Means for decrypting the terminal ID of the terminal itself, means for collating with the ID included in the software contract information decrypted, and collating with the software information included in the software contract information decrypted for the software to be activated. And a means for determining whether or not the software to be activated can be activated.

The software illegal use prevention method of the present invention comprises a software management server that manages the use of software, and a software use terminal that uses the software,
The software management server includes: contract information management means for storing software contract information including software information permitted to be used by the software use terminal and an ID for identifying the software use terminal in a storage area; and the software contract information Encryption means for reading from the storage area and encrypting using a secret key, and transmission means for transmitting the encrypted software contract information to the software using terminal,
The software using terminal receives the encrypted software contract information and stores the received software contract information in a storage unit, and reads the encrypted software contract information from the storage unit and makes a public key paired with the secret key Decryption means for decrypting using a key; ID determination means for collating with the ID contained in the software contract information obtained by decrypting the terminal ID of the terminal itself; and the software contract information obtained by decrypting the software to be activated. It is also possible to provide execution feasibility judging means for judging whether or not to start the software that is to be activated by collating with the software information included in the information.

The software illegal use prevention method of the present invention comprises a software management server that manages the use of software, and a software use terminal that uses the software,
The software management server includes: contract information management means for storing software contract information including software information permitted to be used by the software use terminal and an ID for identifying the software use terminal in a storage area; and the software contract information Encryption means for reading from the storage area and performing encryption using the first secret key and encryption using the first public key, and transmitting the encrypted software contract information to the software using terminal Transmission means,
The software using terminal receives the encrypted software contract information and stores it in a storage unit, and reads the encrypted software contract information from the storage unit to pair with the first public key. Decryption means for performing decryption using the second secret key forming the first key and decryption using the second public key paired with the first secret key, and decrypting the terminal ID of the own terminal ID determination means for verifying with the ID included in the software contract information, and execution permission determination for determining whether or not to start the software to be checked against the software information included in the software contract information obtained by decrypting the software to be activated And a means.

  The software illegal use prevention method of the present invention may be characterized in that the encryption means performs encryption using the first public key after performing encryption using the first secret key. .

  The software illegal use prevention system of the present invention may be characterized in that the public key is held in the software using terminal so that the software cannot be tampered.

  The software illegal use prevention method of the present invention may be characterized in that the ID to be collated with the terminal ID is the ID directly included in the software contract information decrypted by the decrypting means.

  The method for preventing unauthorized use of software according to the present invention comprises: storing software contract information including software information permitted to be used by a software using terminal and an ID for identifying the software using terminal in a storage area; and Reading from the storage area and encrypting using the private key; transmitting the encrypted software contract information to the software using terminal; and receiving the encrypted software contract information and the software A step of storing in the storage unit of the terminal in use; a step of reading out the software contract information encrypted from the storage unit and decrypting it using a public key paired with the secret key; and a terminal ID of the own terminal Verifying with the ID contained in the decrypted software contract information , Characterized by comprising a step of determining a success of starting of the software desired to be activated software information and the verification to be included in the software contract information decoded the software desired to be activated.

  The method for preventing unauthorized use of software according to the present invention comprises: storing software contract information including software information permitted to be used by a software using terminal and an ID for identifying the software using terminal in a storage area; and Performing encryption from the storage area using the first secret key and encryption using the first public key; and transmitting the encrypted software contract information to the software using terminal; Receiving the encrypted software contract information and storing it in the storage unit of the software using terminal; reading the encrypted software contract information from the storage unit and pairing with the first public key Using the second public key paired with the first secret key and the decryption using the second secret key formed A step of performing decryption, a step of collating the terminal ID of the terminal with the ID included in the decrypted software contract information, and collating with the software information included in the software contract information obtained by decrypting the software to be activated And determining whether or not the software to be started can be started.

  The method of preventing unauthorized use of software according to the present invention may be characterized in that after performing encryption using the first secret key, encryption using the first public key is performed.

  The method of preventing unauthorized use of software according to the present invention may be characterized in that the public key is held in the software using terminal so that it cannot be tampered.

  The software illegal use prevention method according to the present invention is characterized in that the ID collated with the terminal ID is the ID directly included in the software contract information decrypted in the decrypting step. Good.

  The software management server of the present invention includes: contract information management means for storing software contract information including software information permitted to be used by a software using terminal and an ID for identifying the software using terminal in a storage area; and the software contract information. An encryption unit that reads out from the storage area and encrypts it using a secret key, and a transmission unit that transmits the encrypted software contract information to the software using terminal.

  The software management server of the present invention includes: contract information management means for storing software contract information including software information permitted to be used by a software using terminal and an ID for identifying the software using terminal in a storage area; and the software contract information. An encryption unit that reads from the storage area and performs encryption using a secret key and encryption using a public key; and a transmission unit that transmits the encrypted software contract information to the software using terminal. It may be characterized by that.

  The software management server of the present invention may be characterized in that the encryption means performs encryption using the public key after performing encryption using the secret key.

  The software using terminal according to the present invention receives the software contract information obtained by encrypting software contract information including software information and an ID for identifying a terminal permitted to use the software using a secret key, and stores the software contract information. Receiving means stored in the storage unit, decrypting means for reading out the software contract information encrypted from the storage unit using a public key paired with the secret key, and decrypting the terminal ID of the terminal itself ID judging means for collating with the ID included in the software contract information that has been converted, and execution for determining whether or not to activate the software to be activated by collating with the software information contained in the software contract information that has been decrypted the software to be activated It is characterized by comprising availability determination means.

  In the software using terminal of the present invention, the software contract information including the software information and an ID for identifying the terminal permitted to use the software is encrypted using the first secret key and the first public key. Receiving means for receiving the software contract information and storing it in the storage unit, and using the second secret key paired with the first public key by reading the encrypted software contract information from the storage unit Decryption means for performing decryption and decryption using the second public key that is paired with the first secret key, and collating with the ID included in the software contract information obtained by decrypting the terminal ID of the terminal itself ID determination means for determining whether to activate the software to be activated by comparing with the software information included in the software contract information obtained by decrypting the software to be activated An execution possibility determining section may be characterized in that it comprises.

  The software using terminal according to the present invention may be characterized in that the decryption means performs decryption using the second public key after performing decryption using the second secret key.

  The software using terminal according to the present invention may be characterized in that it cannot be tampered with by holding the public key in its own terminal.

  The software using terminal according to the present invention may be characterized in that the ID to be collated with the terminal ID is a direct input of an ID included in the software contract information decrypted by the decrypting means.

  The program according to the present invention stores in a storage area software contract information including software information permitted to be used by a software use terminal and an ID for identifying the software use terminal, and reads the software contract information from the storage area. The computer is caused to execute a process of encrypting using the secret key and a process of transmitting the encrypted software contract information to the software using terminal.

  The program according to the present invention stores in a storage area software contract information including software information permitted to be used by a software use terminal and an ID for identifying the software use terminal, and reads the software contract information from the storage area. The computer may execute processing for performing encryption using a private key and encryption using a public key and processing for transmitting the encrypted software contract information to the software using terminal. .

  The program according to the present invention stores in a storage area software contract information including software information permitted to be used by a software use terminal and an ID for identifying the software use terminal, and reads the software contract information from the storage area. And performing encryption using a public key after encryption using a private key and processing for transmitting the encrypted software contract information to the software using terminal. Also good.

  The program of the present invention has received a process for receiving the software contract information encrypted using a secret key, including software information and an ID for identifying a terminal that is permitted to use the software. A process of storing the encrypted software contract information in a storage unit; a process of reading out the encrypted software contract information from the storage unit and decrypting it using a public key paired with the secret key; The process of verifying the terminal ID of the terminal itself with the ID included in the decrypted software contract information and the software to be activated by collating with the software information included in the decrypted software contract information You may make it make a computer perform the process which judges the possibility of starting.

  The program of the present invention is the software obtained by encrypting software contract information including software information and an ID for identifying a terminal permitted to use the software by using a first secret key and a first public key. A process of receiving contract information, a process of storing the received encrypted software contract information in a storage unit, and reading the encrypted software contract information from the storage unit to pair with the first public key. And a process for performing decryption using a second secret key forming the first secret key and decryption using a second public key paired with the first secret key, and the software decrypting the terminal ID of the terminal itself A process for verifying with the ID included in the contract information and a software for verifying with the software information included in the software contract information obtained by decrypting the software to be activated It may be caused to execute a process of determining wear startup whether the computer.

  The program of the present invention is the software obtained by encrypting software contract information including software information and an ID for identifying a terminal permitted to use the software by using a first secret key and a first public key. A process of receiving contract information, a process of storing the received encrypted software contract information in a storage unit, and reading the encrypted software contract information from the storage unit to pair with the first public key. Decrypting using the second public key paired with the first secret key after decrypting using the second secret key forming the terminal, and decrypting the terminal ID of the own terminal The process of checking with the ID included in the software contract information, and starting by checking the software information included in the software contract information obtained by decrypting the software to be started And a process of determining the success of starting of the software have may be causing a computer to execute.

  The program according to the present invention may be configured such that the public key cannot be tampered with by holding the public key inside the terminal itself.

  In the program of the present invention, the ID to be compared with the terminal ID may be the ID directly included in the software contract information decrypted in the decrypting process.

  The present invention has the following effects. Since the authentication is performed using the software contract information including the software use terminal ID and the presence / absence of a license, it is possible to prevent use in an unauthorized software use terminal. Further, in order to re-encrypt the decrypted software contract information, a secret key existing only in the software management server is required, so that it is possible to prevent falsification of the software contract information.

  The best mode for carrying out the present invention will be described in detail with reference to the drawings. FIG. 1 is a block diagram showing the configuration of the first embodiment. The first embodiment includes a software management server 1 that is a software distributor system, a software use terminal 2 and a software use terminal 3 that are software user systems. The distributed software is generally paid. Although FIG. 1 shows an example in which there are two software use terminals, the present invention is not limited to this, and there may be one or more software use terminals. Since the software use terminal 2 and the software use terminal 3 are basically the same in the part relating to the present invention, the following explanation will be made on the software use terminal 2 in principle.

  The software management server 1 includes a contract information management unit 11, a software contract information storage area 12, an encryption unit 13, a secret key 14, and a transmission unit 15. The software contract information storage area 12 is an area of the storage device, and stores software contract information generated for each software using system. As an example, software contract information corresponding to the software using terminal 2 is assumed to be software contract information 122.

  The contract information management unit 11 creates, deletes, and updates the software contract information group corresponding to each software using system included in the software contract information storage area 12. That is, when the software contract in a certain software usage system is changed, the contract information management means 11 updates the software contract information of the corresponding software usage system.

  FIG. 2 is a diagram showing an example of software contract information stored in the software contract information storage area 12. The software contract information is generated for each software using system by the contract information management means 11. As an example, software contract information corresponding to the software using terminal 2 is referred to as software contract information 122, and software contract information corresponding to the software using terminal 3 is referred to as software contract information 123. The software contract information 122 includes a software use terminal ID 1221 and usable software information 1222. The software use terminal ID 1221 is information that can uniquely identify the corresponding software use terminal 2 and is used to prevent use in other than a regular software use system. An ID uniquely assigned by the software management server 1 is used as the software use terminal ID 1221. A MAC (Media Access Control) address may be used as the software using terminal ID 1221. The usable software information 1222 is information on software that can be used in the corresponding software using terminal 2, and is used to determine whether software can be executed. The usable software information 1222 is information for identifying software that can be used in the target software using system, and is, for example, a software name, a uniquely assigned software number, or the like. The usable software information 1222 may have additional information regarding the license. For example, an application in which a license expiration date is held together to realize a license with a time limit is also conceivable. FIG. 2 shows an example in which the usable software information 1222 is the software using terminal 2 and the software a, b, c, d, e, and f are contracted. The usable software information 1232 is the software using terminal. 3 is an example in which software a, c, d, g, h, i is contracted.

  The encryption unit 13 encrypts the software contract information 122 using the secret key 14 that exists only in the software management server 1 and is paired with the public key 23. The public key 23 is distributed to the software using terminal 2 and the software using terminal 3 as a key common to all software using systems.

  The transmission means 15 sends the encrypted software contract information 122 to the software using terminal 2. As a sending method, specifically, sending is performed by communication via the Internet. It may be stored in a storage medium and sent by home delivery.

  The software using terminal 2 includes a storage unit 20, a receiving unit 21, a software information check unit 22, a public key 23, a terminal ID 24, and an activation unit 25.

  The receiving unit 21 receives the encrypted software contract information 122 from the software management server 1. The receiving unit 21 stores the received software contract information 122 in the storage unit 20.

  The software information check unit 22 includes a decryption unit 221, an ID determination unit 222, and an execution availability determination unit 223.

  The decrypting means 221 reads the encrypted software contract information 122 from the storage unit 20 and decrypts it using the public key 23 that is common to all software using systems and cannot be tampered. Here, if the decryption fails or if the decryption has already been performed, the information is regarded as illegal by the decryption means 221 and the software cannot be used. In order to prevent fraud due to falsification of the software contract information 122, the software contract information 122 is used for ID determination and execution feasibility determination only when it is guaranteed that the software contract information 122 is the same as that immediately after being decrypted. . That is, the software contract information 122 that may have been tampered with by an unauthorized user after the decryption until the ID determination and the execution determination is not used for the ID determination and the execution determination. When it is possible to replace the public key 23 with another key, the software contract information 122 is once decrypted with the public key 23, tampered, encrypted with an appropriate private key A, and the public key corresponding to the private key A By replacing the key with the public key 23, there is a risk that prevention of unauthorized use is broken. The reason for holding the public key 23 in a manner that cannot be tampered is to prevent this danger. As a method of holding the public key 23 in a manner that cannot be tampered with, for example, it is conceivable that the software information check unit 22 holds the public key 23 inside so that an unauthorized user cannot tamper with it. More specifically, there is a method of hard coding the execution file that operates as the software information check unit 22.

  The ID determination unit 222 compares the software use terminal ID 1221 in the software contract information 122 decrypted by the decryption unit 221 with the terminal ID 24 that is unique to the software use terminal 2 and cannot be falsified, and matches. Make sure. If they do not match, the ID determination means 222 considers that the software cannot be used, and the next execution possibility determination means 223 always makes the execution impossible in response to the execution possibility inquiry from the start means 25. Answer. An unauthorized user obtains software contract information created for a software using system other than the user's own system, and falsifies the software by falsifying the system ID of the own system so that it matches the software using terminal ID included in the software contract information. May be used. The reason why the terminal ID 24 cannot be tampered is to prevent such unauthorized use.

  The executability determination unit 223 refers to the information in the usable software information 1222, and determines whether or not to execute in response to the execution permission inquiry performed by the activation unit 25.

  The activation unit 25 inquires the execution possibility determination unit 223 about whether the activated software can be executed. If it is executable, the software is started. If it is not executable, the software is not started.

  The reason for using public key cryptography in this software unauthorized use prevention method is to prevent falsification of the software contract information 122. It is assumed that only a software administrator holds a secret key that can be encrypted and decrypted with different keys and can be encrypted by a method that can be decrypted by the software information check unit 22. As a result, since the operations for the software contract information permitted in the software use system are only decryption and reference, it is possible to prevent the software contract information 122 from being falsified.

  Next, the operation of the first embodiment will be described. FIG. 3 is a flowchart showing the operation of the first embodiment. An example when the software i is newly contracted with the software using terminal 2 will be described in detail.

  When the software i is contracted by the software using terminal 2, the software management server 1 distributes the software i and the encrypted software contract information 122 for the software using terminal 2. The software i is distributed to the software using terminal 2 by any means such as the Internet or home delivery, and is installed on the software using terminal 2. The software distribution may or may not be simultaneous with the distribution of the software contract information 122. The software contract information 122 is distributed and used in the following flow.

  In order to be able to use the software i contracted at the software use terminal 2, the contract information management means 11 adds information on the software i to the usable software information 1222 in the software contract information 122 corresponding to the software use terminal 2. (Step A1). FIG. 4 is a diagram showing usable software information 1222 after the software i is added or updated.

  Next, the encryption means 13 encrypts the software contract information 122 updated in step A1 using the secret key 14 that exists only in the software management server 1 (step A2).

  Next, the transmission means 15 sends the software contract information 122 encrypted in step A2 to the software using terminal 2 via the Internet (step A3).

  Next, the receiving means 21 receives the encrypted software contract information 122 and holds it in a place where the software information check unit 22 of the storage unit 20 can refer (step A4).

  When the software information check unit 22 is activated, the decryption unit 221 reads the encrypted software contract information 122 from the storage unit 20 and uses the public key 23 that is paired with the secret key 14 and cannot be tampered with. (Step A5). At this time, if the software contract information 122 has already been decrypted or if the decryption has failed because the encrypted software contract information 122 has been damaged, the decryption means 221 determines that the software contract information 122 It is considered illegal and all software is unusable. This is to prevent fraud due to falsification of the software contract information 122.

  The software information check unit 22 is activated as a system process when the system is activated, and waits for an inquiry from the activation unit 25. Alternatively, when the software is activated, the software may be activated in response to the issuance of the execution possibility inquiry from the activation unit 25.

  Next, the ID determination unit 222 compares the software use terminal ID 1221 in the decrypted software contract information 122 with the terminal ID 24 that is unique to the software use terminal 2 and cannot be tampered with, and confirms that they match (step). A6). If they do not match, the ID determination means 222 considers that the software contract information 122 is not for the software using terminal 2 and makes all software unusable.

  Next, when the execution determination unit 223 receives an inquiry about whether execution is performed by the activation unit 25 when the software i is activated, the execution determination unit 223 refers to the usable software information 1222 in the decrypted software contract information 122 (step A7). . In step A7, if the information of software i is included in the usable software information 1222, it is determined that execution is possible, and if it is not included, it is determined that execution is impossible.

  In order to prevent fraud due to falsification of the software contract information 122, the software contract information 122 input to the ID determination unit 222 and the execution determination unit 223 in the software information check unit 22 is decrypted by the decryption unit 221. It is assumed that the output of the decryption means 221 is directly input so as to be guaranteed to be the same as the above. That is, it is assumed that the input is made without going through a file or the like, and the decrypted software contract information 122 cannot be given as an external input to the ID determination unit 222 or the execution possibility determination unit 223.

  When the software is activated, the activation unit 25 makes an inquiry as to whether or not execution is possible to the execution possibility determination unit 223 in the software information check unit 22 and activates the software when a response indicating execution is received (step A8). If a response that cannot be executed is received, the software is not started (step A9).

  Next, a second embodiment of the present invention will be described. FIG. 5 is a block diagram showing the configuration of the second exemplary embodiment of the present invention. The second embodiment is different from the first embodiment in that the encryption unit 13 encrypts using the public key 16 that is paired with the secret key 26 of the software using terminal 2. Referring to FIG. 5, a public key 16 is added to the software management server 1 and a secret key 26 is added to the software using terminal 2 with respect to FIG. 1 (first embodiment).

  In this way, when the software contract information 122 is sent from the software management server 1 to the software using terminal 2 and the information is stolen by a third party, the software contract information 122 is common to all software using systems. It is possible to prevent the system ID of the software using terminal 2 and the information on the software being used from being decrypted by using a certain public key 23.

  FIG. 6 is a flowchart showing the operation of the second embodiment. Steps B2 and B5 are different from those of the first embodiment (FIG. 3). Other steps (steps B1, B3, B4, B6 to B9) are the same as those in the first embodiment (steps A1, A3, A4, and A6 to A9 in FIG. 3). Steps B2 and B5 will be described.

  The encryption means 13 encrypts the software contract information 122 of the software using terminal 2 using the secret key 14 that exists only in the software management server 1, and further uses the public key 16 distributed by the software using terminal 2. (Step B2).

  When the software information check unit 22 is activated, the decryption means 221 decrypts the encrypted software contract information 122 using the private key 26 of the software using terminal 2 itself, and further pairs with the private key 14. And using the public key 23 that cannot be falsified (step B5).

  Functionally, the order of encryption in step B2 may be either. However, since the encryption with the public key 16 is for coping with information leakage on the transmission path between the software management server 1 and the software using terminal 2, the data is acquired by the software using terminal 2 and then the private key 26 is obtained. It is more efficient to save in the state where decryption is performed. That is, it is desirable to encrypt with the public key 16 after encrypting with the secret key 14. If the encryption using the public key 16 is performed first, the data must be stored as it is after being acquired by the software using terminal 2, and is decrypted twice each time the software information check unit 22 uses it. There is a need to do.

  The operations of the contract information management unit 11, the encryption unit 13, and the transmission unit 15 according to the first or second embodiment of the present invention can be performed by computer program processing. That is, the program recorded on the recording medium is read by the software management server 1 or the program is read by the software management server 1 from the network, and the operation described in the first or second embodiment is executed.

  The operations of the receiving means 21 and the software information check unit 22 according to the first or second embodiment of the present invention can be performed by computer program processing. That is, the program recorded in the recording medium is read by the software using terminal 2, or the program is read from the network by the software using terminal 2, and the operation described in the first or second embodiment is executed.

It is a block diagram which shows the structure of 1st Embodiment. It is a figure which shows an example of the software contract information memorize | stored in a software contract information storage area. It is a flowchart which shows operation | movement of 1st Embodiment. It is a figure which shows the usable software information after adding and updating software i. It is a block diagram which shows the structure of 2nd Embodiment. It is a flowchart which shows operation | movement of 2nd Embodiment.

Explanation of symbols

DESCRIPTION OF SYMBOLS 1 Software management server 2 Software use terminal 11 Contract information management means 12 Software contract information storage area 13 Encryption means 14 Private key 15 Transmission means 16 Public key 20 Storage part 21 Reception means 22 Software information check part 23 Public key 24 Terminal ID
25 starting means 26 secret key 122 software contract information 221 decrypting means 222 ID judging means 223 execution feasibility judging means 1221 software using terminal ID
1222 Available software information

Claims (27)

A software using terminal using software, and means for encrypting software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal using a secret key,
The software using terminal uses means for storing the encrypted software contract information in a storage unit, and a public key that reads the encrypted software contract information from the storage unit and makes a pair with the secret key. Decrypting means for decrypting the terminal ID, means for comparing the terminal ID of the terminal with the ID included in the decrypted software contract information, software information included in the software contract information decrypting the software to be activated, A method for preventing unauthorized use of software, comprising means for determining whether or not to start the software to be collated and started. A software management server for managing the use of software and a software using terminal for using the software;
The software management server includes: contract information management means for storing software contract information including software information permitted to be used by the software use terminal and an ID for identifying the software use terminal in a storage area; and the software contract information Encryption means for reading from the storage area and encrypting using a secret key, and transmission means for transmitting the encrypted software contract information to the software using terminal,
The software using terminal receives the encrypted software contract information and stores the received software contract information in a storage unit, and reads the encrypted software contract information from the storage unit and makes a public key paired with the secret key Decryption means for decrypting using a key; ID determination means for collating with the ID contained in the software contract information obtained by decrypting the terminal ID of the terminal itself; and the software contract information obtained by decrypting the software to be activated. An unauthorized software prevention method comprising: execution feasibility judgment means for judging whether or not to start software to be started by collating with software information included in the software. A software management server for managing the use of software and a software using terminal for using the software;
The software management server includes: contract information management means for storing software contract information including software information permitted to be used by the software use terminal and an ID for identifying the software use terminal in a storage area; and the software contract information Encryption means for reading from the storage area and performing encryption using the first secret key and encryption using the first public key, and transmitting the encrypted software contract information to the software using terminal Transmission means,
The software using terminal receives the encrypted software contract information and stores it in a storage unit, and reads the encrypted software contract information from the storage unit to pair with the first public key. Decryption means for performing decryption using the second secret key forming the first key and decryption using the second public key paired with the first secret key, and decrypting the terminal ID of the own terminal ID determination means for verifying with the ID included in the software contract information, and execution permission determination for determining whether or not to start the software to be checked against the software information included in the software contract information obtained by decrypting the software to be activated A method of preventing unauthorized use of software. 4. The software illegal use prevention method according to claim 3, wherein the encryption means performs encryption using the first public key after performing encryption using the first secret key. 5. The software illegal use prevention method according to claim 1, wherein the public key is held in the software using terminal so that the public key cannot be tampered with. 6. The ID, which is collated with the terminal ID, is obtained by directly inputting an ID included in the software contract information decrypted by decryption means. Software illegal use prevention method. Storing software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal in a storage area; and reading the software contract information from the storage area and using a secret key. Encrypting the software contract information, transmitting the encrypted software contract information to the software using terminal, receiving the encrypted software contract information and storing it in the storage unit of the software using terminal; A step of reading out the encrypted software contract information from the storage unit using a public key paired with the secret key, and the decrypted terminal ID of the terminal included in the software contract information The ID to be checked and the software to be started were decrypted Software tamper resistant method characterized by comprising the steps of determining a success of starting of the software desired to be activated software information and the verification to be included in the serial software contract information. Storing software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal in a storage area; and reading the software contract information from the storage area to obtain a first secret key Performing encryption using a first public key and encryption using a first public key, transmitting the encrypted software contract information to the software using terminal, and encrypting the software contract information Receiving and storing it in the storage unit of the software using terminal, and decrypting the software contract information encrypted from the storage unit and using the second secret key paired with the first public key Performing decryption using a second public key paired with the first secret key, and a terminal of the terminal itself The step of checking D with the ID included in the decrypted software contract information and the software information included in the decrypted software contract information with respect to the software to be activated are determined to determine whether the software to be activated can be activated. And a method for preventing unauthorized use of software. 9. The method of preventing unauthorized use of software according to claim 8, wherein encryption using the first public key is performed after performing encryption using the first secret key. 10. The method of preventing unauthorized use of software according to claim 7, 8 or 9, wherein the public key is held in the software using terminal so that the tampering is impossible. 11. The ID to be collated with the terminal ID is an ID that is directly input from an ID included in the software contract information decrypted in the decrypting step. To prevent unauthorized use of software. Contract information management means for storing in the storage area software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal, and reading out the software contract information from the storage area and a secret key A software management server comprising: encryption means for encrypting using software; and transmission means for transmitting the encrypted software contract information to the software using terminal. Contract information management means for storing in the storage area software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal, and reading out the software contract information from the storage area and a secret key Software management, comprising: encryption means for performing encryption using a public key and encryption using a public key; and transmission means for transmitting the encrypted software contract information to the software using terminal server. 14. The software management server according to claim 13, wherein the encryption unit performs encryption using the public key after performing encryption using the secret key. Receiving means for receiving software contract information encrypted using a secret key and storing the software contract information including software information and an ID for identifying a terminal permitted to use the software in a storage unit; Included in the software contract information obtained by decoding the software contract information encrypted from the storage unit and decrypting it using a public key paired with the secret key, and decrypting the terminal ID of the terminal itself ID determining means for comparing with the ID to be started, and execution feasibility determining means for determining whether or not to start the software to be started by checking with the software information included in the software contract information obtained by decrypting the software to be started. Software use terminal characterized by. Receiving the software contract information obtained by encrypting software contract information including software information and an ID for identifying a terminal permitted to use the software by using a first secret key and a first public key; Receiving means for storing in the storage unit; decrypting the software contract information encrypted from the storage unit and using a second secret key paired with the first public key; and the first secret A decryption unit that performs decryption using the second public key that is paired with the key, an ID determination unit that collates the terminal ID of the terminal with the ID included in the decrypted software contract information, and activates the decryption unit Executeability determination means for determining whether or not to start the software to be started by collating with the software information included in the software contract information obtained by decrypting the desired software Software use terminals that feature. 17. The software using terminal according to claim 16, wherein the decryption means performs decryption using the second public key after performing decryption using the second secret key. 18. The software using terminal according to claim 15, 16 or 17, wherein the public key is held in its own terminal so that it cannot be tampered. 19. The software according to claim 15, 16, 17 or 18, wherein the ID collated with the terminal ID is obtained by directly inputting an ID included in the software contract information decrypted by a decrypting means. Terminal used. A process for storing software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal in a storage area, and reading the software contract information from the storage area and using a secret key. A program for causing a computer to execute processing for encrypting and processing for transmitting the encrypted software contract information to the software using terminal. Processing for storing software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal in a storage area, and reading the software contract information from the storage area and using a secret key A program for causing a computer to execute a process of performing encryption and encryption using a public key, and a process of transmitting the encrypted software contract information to the software using terminal. Processing for storing software contract information including software information permitted to be used by the software using terminal and an ID for identifying the software using terminal in a storage area, and reading the software contract information from the storage area and using a secret key A program for causing a computer to execute a process of performing encryption using a public key after performing encryption and a process of transmitting the encrypted software contract information to the software using terminal. A process of receiving the software contract information obtained by encrypting software contract information including software information and an ID for identifying a terminal permitted to use the software by using a secret key; and the received encrypted software Processing for storing contract information in a storage unit, processing for reading out the software contract information encrypted from the storage unit and decrypting it using a public key paired with the secret key, and a terminal ID of the terminal itself And a process for checking whether or not the software to be started is checked by checking with the ID included in the decrypted software contract information and the software information included in the software contract information and decrypting the software to be started A program that causes a computer to execute. Processing for receiving the software contract information obtained by encrypting software contract information including software information and an ID for identifying a terminal permitted to use the software by using a first secret key and a first public key. A process of storing the received encrypted software contract information in a storage unit, and a second secret that reads the encrypted software contract information from the storage unit and makes a pair with the first public key A process of performing decryption using a key and decryption using a second public key paired with the first secret key, and an ID included in the software contract information obtained by decrypting the terminal ID of the terminal itself And whether or not the software to be activated can be activated by comparing with the software information included in the software contract information obtained by decrypting the software to be activated. Program for executing a process and for the computer. Processing for receiving the software contract information obtained by encrypting software contract information including software information and an ID for identifying a terminal permitted to use the software by using a first secret key and a first public key. A process of storing the received encrypted software contract information in a storage unit, and a second secret that reads the encrypted software contract information from the storage unit and makes a pair with the first public key Included in the software contract information in which the terminal ID of the terminal itself is decrypted, and the decryption process using the second public key paired with the first secret key after decryption using the key The process of checking the ID to be started and the activation of the software to be started by checking the software information included in the software contract information obtained by decrypting the software to be started Program for executing a process of determining whether the computer. 26. The program according to claim 23, 24 or 25, wherein the public key is made incapable of falsification by being held inside the terminal itself. 27. The ID to be collated with the terminal ID is a direct input of an ID included in the software contract information decrypted in the decrypting process. The listed program.

Images