JP2006099353A - Electronic device - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide an electronic device that prevents unauthorized copying of programs. <P>SOLUTION: If it is determined that encrypted data having a predetermined file name is stored in a removable storage medium 1, the encrypted data are decrypted based on a decryption key taken out of the storage medium 1 and a function file 1b2 included in the data decrypted by a data decrypting means 3e is stored in a function file management means 3g. In accordance with the function file 1b2, it is determined whether or not a plurality of functions that can be performed by a computer program are permitted to operate and only the functions determined to be operable are performed. Thus, the storage medium 1 is usable even when handed over to a user who uses a different electronic device 3. <P>COPYRIGHT: (C)2006,JPO&NCIPI

Description

  The present invention relates to an electronic device that prevents unauthorized copying of a program.

  Conventionally, as a method for preventing unauthorized copying of a computer program stored in a storage medium, there is a method of writing a predetermined ID from a computer in a storage medium storing the computer program (see, for example, Patent Document 1).

  In the invention described in (Patent Document 1), a first computer that first uses a computer program stored in a storage medium assigns a first unique code unique to the first computer to a specific area of the storage medium. Record. When the computer program stored in the storage medium is used by the computer for the second time or later, the computer is started when the unique code unique to the computer matches the first unique code recorded in the specific area. Is acceptable. On the other hand, if they do not match, the computer is prohibited from starting.

  Therefore, a copy of a computer program stored in a storage medium is allowed to start only when it is used on a computer of the same model as the computer that was originally used. Is done. A copy for backup can be used if it is the same model as the computer used first.

However, since activation is allowed only when it is used on a computer of the same model as the first used computer, once it is used, it cannot be transferred to a user who uses a computer of a different model.
Japanese Patent Laid-Open No. 4-49423

  Since the conventional method of preventing unauthorized copying is allowed to start only when used on the same computer as the first computer used, once it is used, it is transferred to a user who uses a different computer. I couldn't let you.

  Furthermore, the use of a part of the computer program stored in the storage medium cannot be restricted.

  The present invention is an electronic device that can extract a computer program from a removable storage medium and store it in a storage unit, and determines whether or not encrypted data having a predetermined file name is stored in the storage medium. And a decryption unit that decrypts the encrypted data based on the decryption key extracted from the storage medium when the first determination unit determines that the encrypted data is stored in the storage medium. A function file management unit that stores a function file included in the data decrypted by the decryption unit, and a function that determines whether each of a plurality of functions that can be executed by the computer program is operable according to the function file, and that is determined to be operable And a function control means for executing only the main feature.

The electronic device of the present invention has an advantage that it can be used even if a storage medium is transferred to a user who uses a different electronic device. In addition, the electronic device of the present invention has an advantage that the use of a part of the computer program stored in the storage medium can be easily restricted.

  A first invention made to solve the above problems is an electronic device that can take out a computer program from a removable storage medium and store it in a storage unit, and the encrypted data having a predetermined file name is stored in the storage medium Based on a decryption key extracted from the storage medium when the first determination means determines that the encrypted data is stored in the storage medium. Decryption means for decrypting encrypted data, function file management means for storing a function file included in the data decrypted by the decryption means, and operations of a plurality of functions that can be executed by a computer program according to the function file And a function control unit that executes only a function that is determined to be possible and that is determined to be operable. It is not intended to prevent unauthorized copying based on an ID that depends on both storage media, but to prevent unauthorized copying based on a decryption key stored only in the storage medium. Can be transferred and used.

  In addition, since functions that can be executed by a computer program can be restricted based on the function file, it is possible to restrict functions that can be executed with a simple configuration compared to creating a plurality of types of computer programs. Has an effect. Furthermore, since the key length of the decryption key can be freely set, the encryption strength can be freely changed. Furthermore, by using a storage medium readable by a general-purpose computer and storing the decryption key and the encrypted data in a file format in a writable area of the storage medium, the user of the storage medium can easily store the decryption key file and Encrypted data can be retrieved. Therefore, the user of the electronic device can easily change the function file of the storage medium using the computer program provider and the electronic mail.

  That is, the user of the electronic device uses a general-purpose computer to take out the decryption key file and the encrypted data file. These files are notified by email to the computer program provider. Next, the provider side receives these files, decrypts the encrypted file, and extracts the function file. The retrieved function file is rewritten to the contents according to the request of the user of the electronic device, and the content is the decryption key sent from the user of the electronic device (encryption key; encryption key and decryption key are common because of the common key method) The encrypted function file is encrypted to create encrypted data, which is transmitted to the user of the electronic device by e-mail. The user of the electronic device receives the electronic mail transmitted from the provider, overwrites the storage medium with the encrypted data attached to the electronic mail, and uses the storage medium in the electronic device. In this way, the function file can be easily changed.

A second invention made to solve the above-mentioned problems is that, in the first invention, the storage medium stores a non-writable area in which a storage medium unique ID is stored, program data, encrypted data, and a decryption key. A second information for determining whether or not the same information as the storage medium unique ID stored in the non-writable area of the storage medium is included in the data decrypted by the decryption means. The function control means has a determination means, and when the second determination means determines that the same information as the information of the storage medium unique ID is included in the data decrypted by the decryption means, according to the function file, It is determined that each of a plurality of functions that can be executed by a computer program is operable, and only the functions that are determined to be operable are executed. The electronic device is operated only when the same data as the storage medium unique ID stored in the non-accessible area is stored in the writable area of the storage medium. Since the storage medium unique ID stored in the non-writable area of the medium is different from the information stored in the writable area of the storage medium, unauthorized copying can be prevented. Also, if the same data as the storage medium unique ID stored in the non-writable area of the storage medium is stored in the writable area of the storage medium, the electronic apparatus can be operated, so a different electronic apparatus is used. This has the effect that the storage medium can be transferred and used by the user.

  According to a third aspect of the present invention for solving the above-mentioned problems, in the first or second aspect, the function control means is the first determination means that the encrypted data having the predetermined file name is not stored in the storage medium. In this case, the storage medium is determined to be irregular and the electronic device is rendered inoperable. When the storage medium is irregular, the electronic device is not operated. It has the effect of being excellent.

  According to a fourth aspect of the present invention for solving the above problem, in the second or third aspect, the function control means includes the same information as the information of the storage medium unique ID in the data decrypted by the decryption means. If it is determined by the second determination means that the storage medium is not, the storage medium is determined to be irregular and the electronic device is rendered inoperable. Since the apparatus is not operated, it has an effect of being excellent in reliability.

  According to a fifth aspect of the present invention for solving the above-described problems, in the first or second aspect, the function control means is the first determination means that the encrypted data having the predetermined file name is not stored in the storage medium. Therefore, only certain functions that can be executed by the computer program can be operated. Therefore, even when an unauthorized storage medium is accidentally attached to the electronic device, the computer program is stored in the storage medium. If it is, the minimum operation will be performed, and it has the effect of being excellent in reliability.

  According to a sixth invention for solving the above-mentioned problem, in the second or third invention, the function control means includes the same information as the storage medium unique ID information in the data decoded by the decoding means. If it is determined by the second determination means that only a specific function among the functions that can be executed by the computer program can be operated, an unauthorized storage medium may be mistakenly replaced with an electronic device. Even if it is attached to the storage medium, the minimum operation is performed if the computer program is stored in the storage medium, and there is an effect that the reliability is excellent.

  A seventh invention made to solve the above-mentioned problems has an input means for selecting a function in any one of the first to sixth inventions, and the function control means is configured to select and input from the input means. According to the function file, whether or not each of the plurality of functions can be operated is determined, and the user of the electronic device can freely operate the function file by the number of functions that can be executed by the computer program. Therefore, it is possible to select a function necessary for the user, and there is an effect that it is convenient for the user.

  An eighth invention made to solve the above-mentioned problem is that in any one of the first to seventh inventions, the decryption key is a serial number of the electronic device, and a decryption key that does not overlap for each storage medium is provided. It has the effect of being able to have.

  A ninth invention made to solve the above-mentioned problem is that, in any one of the first to seventh inventions, the decryption key is used as date / time information, and each storage medium has a non-overlapping decryption key. It has the effect that it becomes possible.

(Embodiment 1)
Embodiment 1 of the present invention will be described below with reference to the drawings.

FIG. 1 is a diagram for explaining a write operation to a storage medium according to Embodiment 1 of the present invention. In FIG. 1, reference numeral 1 denotes a storage medium, and reference numeral 2 denotes a computer program writing device (hereinafter referred to as a program writing device). The program writing device 2 writes encrypted data, a computer program, and the like to the storage medium 1.

  Here, in the storage medium 1, an ID unique to the storage medium (hereinafter referred to as a storage medium unique ID) 1 a is written in advance in the non-writable area of the storage medium 1 when the storage medium 1 is manufactured. The storage medium 1 is not limited to a memory card such as an SD card, and may be a CD. In the writable area of the storage medium 1, the program writing device 2 writes the encrypted data 1b, the computer program 1c, and the serial number 1d.

  Furthermore, the storage medium 1 is configured to be removable from the program writing device 2. The program writing device 2 includes a storage medium interface 2a, a data reading unit 2b, a storage unit 2c, a serial number generation unit 2d, a data encryption unit 2e, a data writing unit 2f, and the like. The storage medium interface 2 a is an interface for connecting the storage medium 1 to the program writing device 2, and is configured to be removable from the program writing device 2. The data reading means 2b has a function of reading the storage medium unique ID 1a from the storage medium 1 via the storage medium interface 2a.

  The storage unit 2c is a memory such as a RAM that stores the computer program 2c1, the function file 2c2, and the like. The computer program 2c1 is a computer program for operating an electronic device 3 to be described later. The function file 2c2 permits any of the functions that can be operated on the electronic device 3 by the computer program 2c1 when the computer program 2c1 is operated on the electronic device 3 to be described later. It is a text data file that defines whether or not to allow it.

  The serial number generating means 2d generates the date and time when the computer program 2c1 stored in the storage unit 2c is written in the storage medium 1 as text data. By generating the date and time in units of seconds (for example, September 20, 2004, 16:24:12), different data can be generated for each storage medium 1.

  Note that it is sufficient that different information can be generated for each storage medium 1 to which the computer program 2c1 is written. For example, when the storage medium 1 is sold with the electronic device 3, the serial number generation unit 2d generates the information. The information may be the same as the manufacturing serial number of the electronic device 3 instead of the date / time information. Hereinafter, information generated by the serial number generating means 2d is referred to as a serial number.

  The data encryption unit 2e generates encrypted data. The encrypted data includes a storage medium unique ID 1a read by the data reading unit 2b and a function file 2c2 stored in the storage unit 2c, and a predetermined encryption algorithm (using a serial number generated by the serial number generating unit 2d as a key). For example, it is encrypted with DES).

  The data writing unit 2f writes the encrypted data generated by the data encryption unit 2e, the serial number generated by the serial number generation unit 2d, and the computer program 2c1 stored in the storage unit 2c to the storage medium 1, respectively. It has a function.

With the above configuration, the operation when the program writing device 2 writes the computer program 2c1 and the like to the storage medium 1 will be described with reference to the configuration diagram of FIG. First, in a state where the storage medium 1 is connected to the program writing device 2, the data reading means 2b reads the storage medium unique ID 1a stored in the non-writable area of the storage medium 1 (FIG. 1A). .

  When the data reading unit 2b reads the storage medium unique ID 1a, the data reading unit 2b sends the read storage medium unique ID 1a to the data encryption unit 2e (FIG. 1B).

  When the storage medium unique ID 1a is read by the data reading means 2b, the serial number generating means 2d generates a serial number and sends the generated serial number to the data encryption means 2e (FIG. 1-C).

  When the data encryption unit 2e receives the storage medium unique ID 1a and the serial number, the data encryption unit 2e extracts the function file 2c2 from the storage unit 2c (FIG. 1-D).

  Next, the data encryption unit 2e combines the storage medium unique ID 1a and the function file 2c2 as one file. Then, the data encryption means 2e encrypts the combined file by using a predetermined algorithm with the serial number as an encryption key to obtain encrypted data. The encrypted data and serial number generated by the data encryption means 2e are sent to the data writing means 2f by the data encryption means 2e (FIG. 1-e).

  When the data writing means 2f receives the encrypted data and the serial number from the data encryption means 2e, the data writing means 2f takes out the computer program 2c1 from the storage unit 2c (FIG. 1-F).

  Next, the data writing means 2f writes the encrypted data, serial number and computer program 2c1 to the storage medium 1 (FIG. 1-G).

  As described above, the computer program is written from the program writing device 2 to the storage medium 1.

  FIG. 2 is a diagram for explaining an operation of reading information from the storage medium of FIG. In FIG. 2, 1 is a storage medium, 3 is an electronic device such as a computer, and a computer program 1 c stored in the storage medium 1 is read into the electronic device 3.

  Here, the storage medium 1 is in a state in which the computer program 1c has already been written by the above-described program writing device 2, and in the writable area of the storage medium 1, in addition to the computer program 1c, encrypted data 1b, serial number Is stored. A storage medium unique ID 1 a is stored in the writable area of the storage medium 1. The electronic device 3 includes a storage medium interface 3a, a data reading unit 3b, a storage unit 3c, a determination unit 3d, a data decryption unit 3e, an authentication unit 3f, a function file management unit 3g, a function control unit 3h, and the like. .

  The storage medium interface 3 a is an interface for connecting the storage medium 1 to the electronic device 3, and is configured to be removable from the electronic device 3. The data reading means 3b has a function of reading the storage medium unique ID 1a, the encrypted data 1b, the computer program 1c, the serial number 1d and the like from the storage medium 1 via the storage medium interface 3a.

The storage unit 3c is a readable / writable memory that can store a computer program 3c1, a memory flag 3c2, and the like. The determination unit 3d (first determination unit of the present invention) determines whether or not the encrypted data 1b is stored in the storage medium 1. Whether or not the encrypted data 1b is stored is determined by whether or not the data reading means 3b can read a file having a predetermined file name (for example, “fileX.txt”) from the storage medium 1.

  If the determination unit 3d determines that the file having the predetermined file name cannot be read, the determination unit 3d rewrites the memory flag 3c2 to “0” using the storage medium 1 as an irregular storage medium. If the determination means 3d determines that the encrypted data 1b is stored in the storage medium 1, the data decryption means 3e controls the data reading means 2b to obtain the encrypted data 1b and the serial number 1d from the storage medium 1. Take out.

  Next, the data decryption means 3e decrypts the encrypted data 1b retrieved from the storage medium 1 with a predetermined algorithm, using the serial number retrieved from the storage medium 1 as a decryption key. When the encrypted data 1b is decrypted, it becomes a file including the storage medium unique ID 1b1 and the function file 1b2.

  The authentication unit 3f (second determination unit of the present invention) is a storage medium 1 that stores the storage medium unique ID 1b1 and the encrypted data 1b included in the encrypted data 1b decrypted by the data decryption unit 3e. It is determined whether the unique ID 1a is the same, and if it is determined to be the same, the memory flag 3c2 of the storage unit 3c is rewritten to “1”. If it is determined that they are not identical, the memory flag 3c2 is rewritten to “0” with the storage medium 1 as an irregular storage medium.

  The function file management unit 3g controls the data reading unit 3b to read, store, and manage the function file decrypted by the data decrypting unit 3e. The function control unit 3h determines whether or not the memory flag 3c2 of the storage unit 3c is “1”. When the function control unit 3h determines that the memory flag 3c2 is “1”, the function file is read from the function file management unit 3g.

  Next, the function control unit 3h determines a function that permits the operation and a function that does not permit the operation among a plurality of functions that can be executed by the computer program 3c1 according to the read function file.

  Then, the function control unit 3h allows the electronic device 3 to execute only the function determined to permit the operation and executes it. Here, the function file will be described.

  4 is a diagram illustrating an example of the function file in FIG. 1. FIG. 4A illustrates an example of the contents of the function file 1, FIG. 4B illustrates an example of the contents of the function file 2, and FIG. (C) shows an example of the contents of the function file 3, respectively. When the private branch exchange is an example of the electronic device 3, for example, function 1 is a basic operation of the private branch exchange (for example, extension / termination function), function 2 is a billing function of the private branch exchange, function 3 is a number display function,. Function N is a 32-party conference function.

  Therefore, only the basic operation (function 1) of the private branch exchange and the billing function (function 2) of the private branch exchange are permitted by the function file 1 shown in FIG. 4A, and the operation of other functions is not permitted. In addition, the function file 2 shown in FIG. 4B allows only the basic operation of the private branch exchange (function 1), the charging function of the private branch exchange (function 2), and the number display function (function 3). The function does not allow operation. Further, the function file N shown in FIG. 4C permits the operation of all functions of the private branch exchange that can be executed by the computer program 3c1.

  As described above, the functions that can be executed by the electronic device 3 can be selectively limited depending on the type of the function file. Therefore, the functions that can be executed with a simple configuration are limited as compared with the case where a plurality of types of computer programs 1c are created. can do.

  In the above configuration, the operation when the electronic apparatus 3 reads the computer program 1c and the like from the storage medium 1 will be described with reference to the configuration diagram of FIG. 2 and the operation flowchart of FIG. FIG. 3 is a flowchart for explaining the read operation of FIG.

  First, in a state where the storage medium 1 is connected to the electronic device 3, when the main power supply of the electronic device 3 is turned on, the data reading means 3b of the electronic device 3 reads the storage medium unique ID, encrypted data, computer program The serial number is read from the storage medium 1 (step 1). Here, the determination unit 3d of the electronic apparatus 3 can determine whether the encrypted data 1b, the computer program 1c, and the like are stored, and whether the data reading unit 3b can read a file having a predetermined file name from the storage medium 1. The determination is made based on whether or not (step 2).

  The data reading unit 3b takes out the computer program 1c from the storage medium 1, and stores the taken out computer program 1c in a predetermined area 3c1 of the storage unit.

  If the determination unit 3d determines that the data reading unit 3b cannot read a file having a predetermined file name from the storage medium 1, the determination unit 3d rewrites the memory flag 3c2 to “0” (step 3). When the memory flag 3c2 is rewritten to “0”, the electronic device 3 is prevented from operating at all by the function operation means.

  On the other hand, when the determination unit 3d determines that the data reading unit 3b can read a file having a predetermined file name from the storage medium 1, the data decrypting unit 3e receives the serial data from the data reading unit 3b and the encrypted data 1b. Receive number 1d. Next, the data decryption means 3e decrypts the encrypted data 1b retrieved from the storage medium 1 with a predetermined algorithm, using the serial number retrieved from the storage medium 1 as a decryption key. By decrypting the encrypted data 1b, a file including the storage medium unique ID 1b1 and the function file 1b2 is extracted by the data decrypting means 3e (step 4).

  The function file 1b2 taken out by the data combination unit 3e is sent to the function file management unit. Further, the authentication unit 3f receives the storage medium unique ID 1b1 included in the encrypted data 1b decrypted from the data decryption unit 3e.

  Next, the authentication unit 3f compares the storage medium unique ID 1b1 included in the encrypted data 1b decrypted by the data decryption unit 3e with the storage medium unique ID 1a of the storage medium 1 storing the encrypted data 1b ( Step 5).

  Then, the authentication unit 3f determines that the storage medium unique ID 1b1 included in the encrypted data 1b decrypted by the data decryption unit 3e matches the storage medium unique ID 1a of the storage medium 1 storing the encrypted data 1b ( In step 6), the memory flag 3c2 in the storage unit 3c is rewritten to “1” (step 7). When the memory flag 3c2 is rewritten to “1”, the function operation unit restricts the function of the electronic device 3 according to the operation availability information described in the function file.

  On the other hand, if it is determined in step 6 that they do not match, the memory flag 3c2 is rewritten to “0” (step 3). When the memory flag 3c2 is rewritten to “0”, the function operation means prevents the electronic device 3 from operating at all. Note that when the memory flag 3c2 is rewritten to “0”, only the basic function (FIG. 4-function 1) is operated by the function operation means, rather than not operating the electronic device 3 at all. It can also be done.

As described above, according to the first embodiment of the present invention, since unauthorized copying is prevented based on a decryption key stored only in a storage medium, the storage medium is transferred to a user who uses a different electronic device. It has the effect that it can be used. In addition, since functions that can be executed by a computer program can be restricted based on the function file, functions that can be executed with a simple configuration can be restricted as compared to creating a plurality of types of computer programs.

  In addition, since the electronic device is operated only when the same data as the storage medium unique ID stored in the non-writable area of the storage medium is stored in the writable area of the storage medium, the storage medium is illegally copied. In this case, the storage medium unique ID stored in the non-writable area of the storage medium is different from the information stored in the writable area of the storage medium, and unauthorized copying can be prevented.

  Also, if the same data as the storage medium unique ID stored in the non-writable area of the storage medium is stored in the writable area of the storage medium, the electronic apparatus can be operated, so a different electronic apparatus is used. The storage medium can be transferred and used by the user.

  The operation described with reference to FIG. 3 is performed every time the power is turned on, and otherwise the above-described operation is not performed. Therefore, even if the storage medium is mistakenly replaced, the computer program can be read from the storage medium. Do not read. Therefore, it is excellent in reliability.

  Although the encryption algorithm for decrypting the encrypted data by the data decrypting means has been described as the predetermined encryption algorithm, the encryption algorithm may be changed for each serial number. For example, the first encryption algorithm is applied to the serial number beginning with A, the second encryption algorithm is applied to the serial number beginning with B, and the encrypted data is decrypted by the data encoding means.

  In addition, the electronic device according to Embodiment 1 of the present invention performs the operation described with reference to FIG. 3 every time it is activated by turning on the power. However, the electronic device can be operated at predetermined time intervals. .

(Embodiment 2)
Next, another embodiment of the present invention will be described with reference to FIG. FIG. 5 is a configuration diagram of an electronic device and a storage medium according to Embodiment 2 of the present invention. The configuration of FIG. 5 is a configuration in which an input unit 3i, a data encryption unit 3j, and a data writing unit 3k are added to the electronic device of FIG. 2, and the description of overlapping portions is omitted.

  The input means 3i is an input means for rewriting the contents of the function file stored in the function file management means 3g. When the function file is changed, the contents of the function file are displayed on the display means (not shown). The contents of the function file can be changed by the input means 3i while viewing the displayed contents. It is assumed that the function file describes the number of functions Y (N> Y) that can be executed among N functions that can be executed by the computer program.

  The data encryption unit 3j generates encrypted data by encrypting with a predetermined encryption algorithm using the serial number 1d as an encryption key. The data writing unit 3k overwrites the storage medium 1 with the encrypted data on the storage medium 1 with a predetermined file name (for example, “fileX.txt”). In Embodiment 2 of the present invention, in the initial state of the storage medium 1, the function number Y is stored in the function file. In the function file, all functions except for the basic function (function 1) are stored as unexecutable.

  The operation of the above configuration will be described below. Note that the determination of whether the memory medium is regular or irregular is the same as that described in the first embodiment of the present invention, and therefore the description thereof is omitted here. When the storage medium 1 is normal and the memory flag 3c2 is rewritten to “1”, the function control unit 3h refers to the function file. The function control unit 3h determines whether or not the function number Y is included in the function file. If the function control unit 3h determines that the function number Y is stored, the function set as executable among the functions of the function file. The number W is calculated. When the function control unit 3h determines that Y> W, the function control unit 3h permits rewriting of the function file from the input unit.

  If the data encryption means 3j determines that the content of the function file stored in the function file management means 3g has been changed by the input means 3i, the data encryption means 3j controls the data reading means 3b and serially stores the storage medium unique ID 1a from the storage medium 1. The number 1d is read, the read storage medium unique ID 1a and the changed function file are merged, and encrypted with a predetermined encryption algorithm using the serial number 1d as an encryption key to generate encrypted data.

  When the encrypted data is generated by the data encryption unit 3j, the data writing unit 3k overwrites the storage medium 1 with the encrypted data with a predetermined file name (for example, “fileX.txt”). .

  As described above, the function file allows the user of the electronic apparatus to freely select a necessary function when executing the functions corresponding to the number of functions executable by the computer program.

  The present invention relates to an electronic device that prevents unauthorized copying of a program, and has an advantage that an electronic device that can be used even when a storage medium is transferred to a user who uses a different electronic device can be provided.

The figure explaining the write-in operation | movement to the storage medium in Embodiment 1 of this invention The figure explaining the operation | movement which reads information from the storage medium of FIG. Flowchart explaining the read operation of FIG. The figure which shows the example of the function file of FIG. Configuration diagram of electronic device and storage medium according to Embodiment 2 of the present invention

Explanation of symbols

1 Storage medium 1a Storage medium unique ID
1b Encrypted data 1b1 Storage medium unique ID
1b2 Function file 1c Computer program 1d Serial number 2 Computer program writing device (program writing device)
2a storage medium interface 2b data reading means 2c storage section 2c1 computer program 2c2 function file 2d serial number generation means 2e data encryption means 2f data writing means 3 electronic device 3a storage medium interface 3b data reading means 3c storage section 3c1 computer program 3c2 memory Flag 3d Determination means 3e Data decryption means 3f Authentication means 3g Function file management means 3h Function control means 3i Input means 3j Data encryption means 3k Data write means

Claims (9)

An electronic device that can extract a computer program from a removable storage medium and store it in a storage unit,
First determination means for determining whether or not encrypted data having a predetermined file name is stored in the storage medium;
Decryption means for decrypting the encrypted data based on a decryption key extracted from the storage medium when the first determination means determines that the encrypted data is stored in the storage medium; ,
A function file management means for storing a function file included in the data decrypted by the decryption means;
An electronic apparatus comprising: function control means for determining whether or not each of a plurality of functions executable by the computer program is operable according to the function file and executing only the function determined to be operable. The storage medium includes a non-writable area in which a storage medium unique ID is stored and a writable area in which the program data, the encrypted data, and the decryption key are stored.
Second determination means for determining whether or not the same information as the storage medium unique ID stored in the writable area of the storage medium is included in the data decrypted by the decryption means. ,
The function control means, when the second determination means determines that the same information as the information of the storage medium unique ID is included in the data decrypted by the decryption means, according to the function file, The electronic device according to claim 1, wherein whether or not each of a plurality of functions that can be executed by a computer program is operable is determined and only the function that is determined to be operable is executed. The function control means determines that the storage medium is unauthorized when the first determination means determines that encrypted data having a predetermined file name is not stored in the storage medium, and the electronic device is The electronic device according to claim 1, wherein the electronic device is disabled. When the second determination unit determines that the function control unit does not include the same information as the information of the storage medium unique ID in the data decoded by the decoding unit, the function control unit The electronic device according to claim 2, wherein the electronic device is disabled and the electronic device is disabled. The function control unit operates only a specific function among functions executable by the computer program when the first determination unit determines that encrypted data having a predetermined file name is not stored in the storage medium. The electronic device according to claim 1, wherein the electronic device can be made. The function control means is executed by the computer program when the second determination means determines that the data decrypted by the decryption means does not contain the same information as the information of the storage medium unique ID. The electronic device according to claim 2, wherein only a specific function among the possible functions can be operated. An input means for selecting a function;
The electronic device according to claim 1, wherein the function control unit determines whether or not each of a plurality of functions can be operated according to the selection from the input unit and the function file. The electronic device according to claim 1, wherein the decryption key is a serial number of the electronic device. The electronic device according to claim 1, wherein the decryption key is date information.

Images