JP2006309497A - System and method for updating software module - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a software module update system and a software module update method for distributing software through a computer network, enhancing and correcting a software function through the computer network, and accessing information of a new version. <P>SOLUTION: When the software module is updated, a server unit 10 generates a password corresponding to the software module concerned, and manages the software module in association with the above password. On receiving a distribution request of the software module from a PC 20, it is confirmed that the ID and the password matches the ID and the password stored in the server unit 10, and thereafter the software module is distributed to the PC 20. Thus, a user can surely receive the software module which is desired to be distributed to the user's own terminal. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a software module update system and a software module update method for distributing software through a computer network and accessing software enhancements, corrections, or new versions of information through the computer network.

  Usually, software is distributed in the form of a program recorded on a recording medium such as a compact disk. The customer purchases a license for using the recording medium and the software recorded on the medium, and installs the software on the computer from the recording medium. The manufacture and distribution of pre-recorded recording media is expensive and this cost is imposed on the customer. Also, it is not desirable for customers to strive to order or purchase software.

  Also, software is frequently updated to correct bugs or add new characteristic features after the software is delivered to the user. Therefore, the distribution cost is an important issue. Some software and wear are updated many times each year, and the cost of sending update information to all customers each time it is updated is significant.

  In Patent Document 1, a disk ID database configured beforehand with information related to a unique disk ID is constructed for each disk, and the disk ID database is used when an unregistered new disk is used, check-out, check-in, or the like. It is updated when it is performed, and when ripping CDs, etc., the reserved disc for checkout is specified in association with the disc ID registered in the disc ID database, and the disc ID used for the reservation after the checkout is completed. A file transfer system and a file transfer method have been proposed in which content is managed and used efficiently and easily by automatically performing a checkout when a disk having a disk is connected.

  In Patent Document 2, content that can be recorded for each information recording medium is controlled by acquiring content from outside and recording it on the information recording medium based on user authority information recorded on the information recording medium. In addition, an information recording medium, an information recording / reproducing method, and an information recording / reproducing apparatus that allow a user to update authority information as necessary even after purchasing the information recording medium have been proposed.

  In patent document 3, a new password is automatically generated by a password automatic generation process in a mail server device that stores and manages an ID and a password for determining whether or not a user can use a device or a system in a password file. An email notifying the corresponding user of the new password is created by the password notification email automatic generation process and stored in the mailbox as an incoming email addressed to the user, and a new password is automatically generated for the user. An authentication information management device, a terminal device, and an authentication information management system to be updated are proposed.

  In Patent Document 4, a database controls recording of data related to a developer who develops an information processing program, and a Web server provides information related to the development of an information processing program, and also by a developer who records the data. Information processing apparatus and method for determining whether or not a developed information processing program operates normally, and providing a program to a personal computer or PDA when the Web server determines that the program operates normally, and program storage A medium has been proposed.

  In Patent Document 5, when content is encrypted and reception permission is requested from another device, the device is authenticated with the other device as long as the number of reception does not exceed the permitted value even if the reception is permitted. Based on this, an information processing apparatus and method, and a recording medium that can restrict use of content by transmitting a release key for decrypting the content to another device have been proposed.

  In Patent Document 6, the information recording apparatus encrypts content information, and the encrypted content includes a usage condition referred to for restricting the use of the content information and a decryption key for decrypting the encrypted content information. Information is generated, the encrypted content information and the generated license information are recorded on a recording medium, and the information reproducing apparatus is recorded on the recording medium using a second decryption key for decrypting the license information. The license information is decrypted, and whether or not the content information can be used is determined based on the usage condition included in the decrypted license information. When it is determined that the content information can be used, the license information is included in the decrypted license information. And an information recording apparatus for decrypting decrypted content information recorded on the recording medium using a first decryption key Devices have been proposed.

Patent Document 7 discloses a software update program for use in updating one or more computer programs installed on a computer system connected in a computer network. Information for identifying one or more locations in the network where the required software update resources are located, initiating access to the one or more locations and the one or more required Through a computer network having means for retrieving software update resources and means for applying software updates to one of the installed computer programs using the one or more retrieved software update resources When updating computer programs Readable recording medium which records software updates for use have been proposed.
JP 2005-25729 A JP 2003-317379 A JP 2003-256371 A JP 2002-23881 A JP 2002-84274 A JP-A-11-283327 Japanese Patent No. 3385590

  However, the above invention has the following problems.

  In recent years, in the field of compact discs, hybrid discs having a read-only area (hereinafter referred to as a ROM section) and a writable area or a rewritable area (hereinafter referred to as a RAM section) have been developed. In such a hybrid disk, in order to ensure compatibility with an existing disk, the first session is stamped as a ROM part, and the subsequent area is handled as a RAM part, so even in a system that cannot recognize the hybrid disk, Since the disc can be handled as a disc recorded in multiple sessions, at least read compatibility can be ensured.

  However, although these hybrid discs can be applied to various ranges depending on users, there is a problem that it is difficult to make a general-purpose product. That is, in order to create an application that effectively uses the hybrid disc, knowledge about recording of a compact disc is required in addition to knowledge about creating a general application program. Therefore, it is necessary to provide a module for easily handling functions unique to the hybrid disk, and to use this to increase the development efficiency of the user.

  In addition, these modules are a collection of know-how, and are only open to users who do business in advance. Traditionally, these modules were distributed using dedicated disks, but the modules were updated. Each time it was implemented, the disk was collected from the user, updated, and sent again, which was inconvenient for both the user and the provider.

  In recent years, the network infrastructure has been enhanced and the Windows environment has expanded, making it very tolerant to online updates. However, simply publishing on the homepage etc. makes it possible for users who do not carry out the hybrid disk business to obtain the module, and if this is analyzed by a malicious user and used without permission, the business will continue to survive. Will have an impact.

  Therefore, according to the present invention, when the software module is updated, the server device generates a password corresponding to the software module and manages the software module in association with the password, so that the user desires distribution to the terminal. An object of the present invention is to propose a software update system and a software update method capable of reliably receiving software modules to be received.

  The invention according to claim 1 is a software module update system for performing a software module update process via a network, wherein the server device manages the software module in association with authentication information and receives authentication information from a client terminal. Comparing the authentication information managed by the own device, and when the authentication information received from the client terminal matches the authentication information managed by the own device, determine a software module to be distributed based on the authentication information; It is characterized by delivering.

  According to a second aspect of the present invention, in the software module update system according to the first aspect, the server device automatically generates the authentication information, and the authentication information is generated by the authentication information generation unit. And a notification means for notifying the client terminal of the authentication information.

  According to a third aspect of the present invention, in the software module update system according to the first or second aspect, the client terminal records and manages the software module in a writable recording medium.

  According to a fourth aspect of the present invention, in the software module update system according to any one of the first to third aspects, the server device prohibits the distribution of the software module when the expiration date of the software module has expired. It is characterized by doing.

  According to a fifth aspect of the present invention, in the software module update method of the software module update system for performing a software module update process via a network, the server device manages the software module in association with authentication information, and a client terminal When the authentication information is received from the client device, the step of comparing with the authentication information managed by the own device matches the authentication information received from the client terminal and the authentication information managed by the own device. And determining a software module to be distributed and distributing it.

  According to a sixth aspect of the present invention, in the software module update method according to the fifth aspect, the server device automatically generates the authentication information, and the authentication information is generated by the authentication information generation step. And a notification step of notifying the client terminal of the authentication information.

  According to a seventh aspect of the present invention, in the software module update method according to the fifth or sixth aspect, the client terminal includes a step of recording and managing the software module on a writable recording medium.

  The invention according to claim 8 is the software module update method according to any one of claims 5 to 7, wherein the server device prohibits distribution of the software module when the validity period of the software module has expired. It has the process to perform.

  According to the present invention, when a software module is updated, the server device generates a password corresponding to the software module, and manages the software module in association with the password, so that the user desires distribution to the terminal. The module can be received reliably.

  Hereinafter, a software module update system according to an embodiment of the present invention will be described.

  First, the configuration of the software module update system according to the present embodiment will be described with reference to FIG.

  The software module update system according to the present embodiment includes a server device 10 with an authentication information management function and a client device 20 using a personal computer (PC).

  The server device 10 includes a CPU, a ROM, a RAM, and the like, and a main control unit that controls the overall operation and communication operation of the entire device, a hard disk for storing the contents of the software module box 101 and the password file 102 including software modules, and the like And a communication interface for communicating with an external device using SMTP, POP3, or the like. An input / output unit such as a keyboard, a mouse, or a display may be provided as necessary.

  The server apparatus 10 has a function of managing IDs and passwords as authentication information for determining whether or not the user can use the mail server apparatus, that is, whether or not the received mail can be read. In addition to the normal function of the server 100, a function for automatically generating a new update password as update authentication information, a function for notifying a user who should use the password of the update password, and the user It is also possible to add a function for confirming that the notification has been received and a function for updating the password for the user to an update password. Each of these functions is performed when the main control unit of the server device 10 functions as authentication information generation means, notification means, notification confirmation means, and authentication information update means by executing various control programs stored in the ROM. Each is realized. By configuring the ROM with a rewritable nonvolatile storage medium such as an EEPROM, it becomes easy to update the program as the technology advances.

  The server apparatus 10 is connected to a PC 20 functioning as a receiving-side client apparatus as shown in FIG. The network 30 may be any communication means that can exchange predetermined information, such as a local area network (LAN), the Internet, a public line, or the like. The PC 20 includes a CPU, a ROM, a RAM, and the like, and controls the overall operation and communication operation of the entire apparatus, a display unit 22 including a display, an input unit 23 including a keyboard and a mouse, a hard disk and a RAM And the like, and a network control unit 25 for communicating with an external device using SMTP, POP3, or the like, and these are connected by a bus 26. The software module update system according to the present embodiment can be configured by the server device 10 and the PC 20 described above.

  Note that the software module update system and the server device 10 according to the present embodiment measure the time or time by using the clock function or the clock function of the CPU, and automatically update the password every predetermined period or after a predetermined period from the previous update. Update processing can be performed.

  Hereinafter, an operation executed in the present system when the software module is updated will be described with reference to FIG.

  First, when a software module in the software module box 101 stored in the server device 10 is updated (step S301), the control unit generates a new update password corresponding to the updated software module, and the password file 102 (Step S302). For example, the control unit manages software modules and passwords stored in the software module box 101 and the password file 102 for each user ID. The update password can be reduced in the risk of being searched for by a cracker by randomly arranging alphabets, numbers, symbols, and the like. The update password generation process is automatically performed by the control unit when the software module is updated. Next, the control unit notifies the update password generated using the communication interface to the PC 20 (step S303).

  Thereafter, when the user to be notified operates the PC 20 to access the server device 10 by the POP3 and transmits the correct ID and password (step S304), the control unit receives the received ID, password, and ID in the password file 102. And it is confirmed whether or not the password matches (step S305). If the ID and password that match the received ID and password are stored in the password file 102 (step S305 / YES), the control unit reads the software module corresponding to the ID from the software module box, and the PC 20 (Step S306).

  On the other hand, if the ID and password that match the received ID and password are not stored in the password file 102 (step S305 / NO), the control unit performs this process without distributing the software module to the PC 20. finish.

  According to the software module update system according to the present embodiment, when the software module is updated, the server device generates a password corresponding to the software module, and manages the software module in association with the password. It is possible to reliably receive a software module desired to be distributed to its own terminal.

  In addition, since the server device can update the password at the same time as updating the software module, the user can forget to update the password or neglect it and leave the password unupdated, thus realizing high security. be able to. In addition, since the update operation is not particularly necessary, the burden on the user can be minimized. Furthermore, since the user is notified of the updated password together with the update, the user never forgets the new password.

  In the above-described configuration, the server device is configured to distribute the software module to the user without being encrypted. However, in order to prevent information leakage, the server module is encrypted and distributed before being distributed to the user. It is good also as a structure.

  In the above-described embodiment, the software module distributed to the PC 20 is managed in the PC 20, but when the PC 20 has a drive capable of writing to and reading from the Hybrid Disc, the received software module is the Hybrid. It is also possible to write and manage on a Disc. By managing the software module by recording on the Hybrid Disc, it is possible to prevent information from being easily leaked from the PC 20.

  The operation of the software module update system according to this embodiment when the PC 20 is equipped with a drive dedicated for Hybrid Disc will be described below. The configuration of the software module update system according to the present embodiment is the same as that of the software module update system shown in FIGS. 1 and 2 except for the configuration of the drive, and the description of the configuration is omitted.

  First, when the software module in the software module box 101 stored in the server device 10 is updated (step S401), the control unit generates a new update password corresponding to the updated software module, and the password file 102 (Step S402). For example, the control unit manages software modules and passwords stored in the software module box 101 and the password file 102 for each user ID. The update password is made up of alphabets, numbers, symbols, and the like arranged at random, thereby reducing the risk of being searched for by a cracker. The update password generation process is automatically performed by the control unit when the software module is updated. Next, the control unit notifies the update password generated using the communication interface to the PC 20 (step S403).

  Thereafter, when the user to be notified operates the PC 20 to access the server device 10 by the POP3 and transmits the correct ID and password (step S404), the control unit receives the received ID, password, and ID in the password file 102. And it is confirmed whether or not the password matches (step S405). If the ID and password that match the received ID and password are stored in the password file 102 (step S405 / YES), the control unit reads the software module corresponding to the ID from the software module box, and the PC 20 (Step S406). The PC 20 that has received the distribution of the software module activates the drive and writes the software module to the hybrid disc (step S407).

  On the other hand, if the ID and password that match the received ID and password are not stored in the password file 102 (step S405 / NO), the control unit performs this process without distributing the software module to the PC 20. finish.

  According to the present embodiment, the software module is not managed in the PC 20 but is stored and managed in the hybrid disc, so that even if unauthorized access to the PC 20 through the network 30 is performed, Software module leakage can be prevented.

  In the above-described embodiment, the software module is managed in the software module box 101 in association with the ID. However, in this embodiment, as shown in FIG. 5, by managing the expiration date of each software module together with the software module, it is possible to avoid useless distribution of the software module whose expiration date has passed.

  The operation when the server apparatus 10 manages the expiration date of each software module will be described below. The software module update system according to the present embodiment is the same as the software module update system shown in FIGS. 1 and 2 except for the configuration other than the software module box that manages the expiration date of each software module. The description of the configuration is omitted.

  First, when a software module in the software module box 101 stored in the server device 10 is updated (step S601), the control unit generates a new update password corresponding to the updated software module, and the password file 102 (Step S602). For example, the control unit manages software modules and passwords stored in the software module box 101 and the password file 102 for each user ID. The update password is made up of alphabets, numbers, symbols, and the like arranged at random, thereby reducing the risk of being searched for by a cracker. The update password generation process is automatically performed by the control unit when the software module is updated. Next, the control unit notifies the update password generated using the communication interface to the PC 20 (step S603).

  Thereafter, when the user to be notified operates the PC 20 to access the server device 10 by the POP3 and transmits the correct ID and password (step S604), the control unit receives the received ID, password, and ID in the password file 102. And it is confirmed whether or not the password matches (step S605). If the ID and password that match the received ID and password are stored in the password file 102 (step S605 / YES), the control unit reads the software module corresponding to the ID from the software module box and validates it. It is confirmed whether or not the time limit has expired (step S606). If the expiration date of the software module has not expired (step S606 / YES), the control unit distributes the software module to the PC 20 through the communication interface (step S607).

  On the other hand, if the ID and password that match the received ID and password are not stored in the password file 102 (step S605 / NO), and if the read-out software module has expired (step (S606 / NO), the control unit ends the process without distributing the software module to the PC 20.

  According to the present embodiment, by managing the expiration date of each software module together with the software module in the software module box 101, useless distribution of the software module whose expiration date has passed to the PC 20 can be avoided.

It is a block diagram which shows the structure of the server apparatus which concerns on this embodiment. 1 is an overall configuration diagram of a software module update system according to an embodiment. FIG. It is a flowchart which shows operation | movement of a software module update system. 3 is a flowchart illustrating an operation of the software module update system according to the first embodiment. FIG. 10 is a block diagram illustrating a configuration of a software module box according to a second embodiment. 12 is a flowchart illustrating an operation of the software module update system according to the second embodiment.

Explanation of symbols

10 server device 20 PC
21 Control Unit 22 Display Unit 23 Input Unit 24 Local Memory 25 Network Control Unit 30 Network 101 Software Module Box 102 Password File

Claims (8)

In a software module update system that performs software module update processing via a network,
Server device
Managing the software module in association with authentication information;
When the authentication information is received from the client terminal, compared with the authentication information managed by the own device,
When the authentication information received from the client terminal matches the authentication information managed by the own device, a software module to be distributed is determined and distributed based on the authentication information. The server device
Authentication information generating means for automatically generating the authentication information;
The software module update system according to claim 1, further comprising a notification unit that notifies the client terminal of the authentication information when the authentication information is generated by the authentication information generation unit.   3. The software module update system according to claim 1, wherein the client terminal records and manages the software module in a writable recording medium.   4. The software module update system according to claim 1, wherein when the expiration date of the software module has expired, the server device prohibits distribution of the software module. 5. In a software module update method of a software module update system that performs software module update processing via a network,
Server device
Managing the software module in association with authentication information;
When receiving authentication information from the client terminal, comparing with the authentication information managed by the own device;
And a step of determining and distributing a software module to be distributed based on the authentication information when the authentication information received from the client terminal matches the authentication information managed by the own device. Update method. The server device
An authentication information generating step for automatically generating the authentication information;
6. The software module update method according to claim 5, further comprising a notification step of notifying the client terminal of the authentication information when the authentication information is generated by the authentication information generation step.   7. The software module update method according to claim 5, wherein the client terminal includes a step of recording and managing the software module on a writable recording medium.   8. The software module update method according to claim 5, further comprising a step of prohibiting the distribution of the software module when the expiration date of the software module has expired.

Images