JP4059196B2 - Program, recording medium, computer, and control method - Google Patents

Description

The present invention relates to an installation optical disk medium for protecting application data including an application program, an installation control method, and an installation control method, and more particularly to an installation optical disk medium for preventing installation of application data from an illegally copied optical disk medium, The present invention relates to an installation control method and an installation control method.

A commercially available application program (hereinafter abbreviated as application) is purchased by a user from a store or a manufacturer, and a CD-ROM (Compact Disc-Read Only Memory), a DVD-ROM (Digital Video Disc-Read Only Memory), or the like. Generally, it is obtained in the form of a read-only optical disc medium.

This is because the optical disk medium is read-only, the user does not have to worry about inadvertently rewriting data, and can store data of 650 megabytes or more, which is highly convenient as a distribution medium.

 Note that license information unique to a product called a serial number or product ID (IDentification) is added to a normal application, and it is confirmed that the product is a genuine product by inputting the license information at the time of installation.

In addition, with the recent increase in recording capacity, speed, and price of hard disks, the application data recorded on the optical disk medium for installation is used at a higher speed. Using a technique for copying application data on an optical disk medium, so-called imaging (hereinafter referred to as imaging), it is possible to handle application data on an optical disk medium for installation even on a computer without a disk playback device such as a CD-ROM drive. It is also possible to perform an installation operation from an image-forming installation optical disk medium (hereinafter referred to as an imaged disk).

In addition, in the known product activation (Product Activation: a method of registering a license with a software manufacturer after installing an application program and proving that it is a legitimate product), even if the hardware configuration of the computer is not changed. When performing clear installation of application data, it is necessary to perform product activation again.

In addition, by writing the information specific to the medium to the medium itself when recording the content, even if the entire recording medium is copied, the information specific to the recording medium is not copied. There is a technique that cannot be reproduced (see Patent Document 1 and Patent Document 2).

The difference between the present invention and the technique described in Patent Document 1 is that the technique described in Patent Document 1 has no means for directly writing to the recordable disk medium when recording on the recordable disk medium via broadcasting or communication means. However, in the present invention, there is a possibility of illegal copying at the stage of recording on the recordable disc medium. However, in the present invention, there is a mechanism for automatically starting the program when the installation optical disc medium is inserted into the computer for the first time. The probability that this possibility will occur is low.

The difference between the present invention and the technique described in Patent Document 2 is that the technique described in Patent Document 2 is intended to prevent unauthorized copying and unauthorized use by combining a CD-ROM and a magnetic recording medium. The invention is different on the premise that illegal copying is not necessarily prevented, so that a state where it cannot be used even if illegal copying is made is different.

Also, a plurality of information and an optical disc BCA (Burst Cutting Area) number are recorded on the optical disc and the drive number is stored in the optical disc playback device, and the user of the optical disc playback device records the optical disc in the software house on the optical disc. When the software house informs the optical disc BCA number, the drive number of the optical disc playback device, and the number of the desired information under the condition of paying for the reproduction of the desired information, the software house informs the optical disc playback device and the user of the encryption key. The optical disc playback apparatus calculates the title key based on the BCA number of the optical disc, the drive number of the optical disc playback apparatus, and the encryption key, and permits the playback of the user's desired information recorded on the optical disc, For users There is a technique in which the price of information and the disk itself are made inexpensive and unauthorized copying is prevented (see Patent Document 3).

The difference between the present invention and the technique described in Patent Document 3 is that the technique described in Patent Document 3 must pass through a software house, but in the present invention, it is not necessary to pass through a software house. . Further, in the technique described in Patent Document 3, the optical disc playback apparatus must be unique with an encryption key assigned thereto, but in the present invention, such a limitation does not occur.

Further, the device ID that can identify the information recording device or the group ID to which the information recording device belongs, and the medium ID that can identify the recording medium, which are stored in the device ID storage means of the information recording device, are combined. An electronic signature is added to the combined ID data by an electronic signature adding means, and this data is recorded on a recording medium together with the content, so that the information reproducing device can be reproduced by the same device as the information recording device that recorded the content or can be reproduced. The content can be reproduced only when it is confirmed that the device belongs to the group set as described above and the content is recorded on the same recording medium as the recording medium recorded by the information recording device. In this way, even when the device ID of the information recording device on which the content is recorded is stolen or illegally altered Replicates from one recording medium, there is a technology that can not create multiple replicated recording medium (see Patent Document 4).

The difference between the present invention and the technique described in Patent Document 4 is that the technique described in Patent Document 4 restricts not to permit copying of the recording medium, whereas the present invention creates a copy. However, the computer that can reproduce the copied medium is limited to the computer that first operates the medium.

Furthermore, in the recording system of the information recording / reproducing device, the encryption / decryption unit reads the encrypted information from the information providing device recorded in the semiconductor memory, decrypts it using the encryption key, and outputs it to the encryption unit The encryption unit encrypts the decrypted information from the encryption / decryption unit, outputs the encrypted information to a RAM (Random Access Memory), and the encrypted information input to the RAM is recorded on the magneto-optical disk. Thus, there is a technique for quickly acquiring information and preventing unauthorized copying (see Patent Document 5).

The difference between the present invention and the technique described in Patent Document 5 is that, in the technique described in Patent Document 5, when the encrypted information recorded in the semiconductor memory is created, it is created with contents different from the original encrypted information. In the present invention, the encryption key generated automatically based on the information unique to the computer (hereinafter referred to as terminal-specific information) is automatically started when the installation optical disk medium is inserted into the computer for the first time. The difference is that there is little possibility of tampering or the like for use. In the technique described in Patent Document 5, if the encryption key is known, the possibility of preventing unauthorized copying is extremely reduced. However, in the present invention, the encryption key itself is not known. Even if the key information is obtained, the copied optical disk medium is different in that it does not operate on another computer.
JP 2000-100068 (5th page, FIG. 3) JP 2001-325039 A (page 3, FIG. 1) JP-A-10-149619 (page 6-7, FIG. 1) JP 2002-132457 A (page 5-6, FIG. 1) Japanese Unexamined Patent Publication No. 2000-076787 (page 3-5, FIG. 3)

However, in recent years, computers such as personal computers have not only read-only devices such as CD-ROMs and DVD-ROMs, but also CD-R / RWs (Compact Disc-Recordable / ReWritable) and DVD ± R / RWs (Digital Video Discs). Read / write devices such as -Recordable / ReWriteable are becoming popular, and CD-ROMs and DVD-ROMs can be easily copied, which is a problem for use as an application distribution medium. Has occurred.

In addition, even a user who purchases an installation optical disk medium paying a license fee can install more than the number of licenses used when using multiple computers by himself. This is a problem because the user may not be aware of the license.

Further, since the installation optical disk medium data itself does not have a mechanism for preventing copying, the application optical disk application data is copied not only to the writable optical disk medium but also to a readable / writable medium such as a hard disk. It is also possible and problematic to perform installation using application data copied in the same manner.

Furthermore, once the imaged disk is created by imaging, the imaged disk itself is treated as one piece of data, so information specific to the optical disk medium such as a CD or DVD is written in the optical disk medium, It is difficult to prevent copying of the imaged disc itself by an unauthorized copy prevention method in which an installation operation can only be performed from an installation optical disc medium purchased by a user.

In addition, in an application that performs product activation, there is a possibility that even a legitimate user may need to perform product activation again if the hardware configuration of the computer is changed.

An object of the present invention is to use a writable optical disk medium having a read-only area, and write encrypted data encrypted using an encryption key generated from computer terminal-specific information to have a read-only area. It is an object of the present invention to provide an installation optical disk medium that can prevent unauthorized installation of an application by recording in a writable area of a possible optical disk medium.

It is another object of the present invention to provide an installation control system that uses a writable optical disk medium having a read-only area as an installation optical disk medium to prevent unauthorized installation of applications.

Furthermore, another object of the present invention is to provide an installation control method in which an illegal installation of an application is prevented by using a writable optical disk medium having a read-only area as an installation optical disk medium.

In order to achieve the above object, the installation optical disk medium of the present invention comprises a read-only area and a writable area, and the program is automatically started in the read-only area when the installation optical disk medium is inserted into the computer. Using program auto-starting means, terminal-specific information extracting means for extracting terminal-specific information of the computer from the computer, and an encryption key generated based on the terminal-specific information extracted by executing the terminal-specific information extracting means Terminal specific information checking means for checking the match of the terminal specific information based on whether the encrypted data in the writable area can be decrypted and deleting the terminal specific information by deleting the encrypted data in the writable area At the same time, device specific information deletion means to cancel the invisibility of application data Read-only using the encryption key generation means that generates a unique encryption key based on the terminal specific information extracted by executing the terminal specific information extraction means and the encryption key generated by the encryption key generation means An encrypted data creating means for encrypting application data in a region and writing encrypted data in a writable region and simultaneously making application data in a read-only region invisible, and application data including an application program .

On the other hand, the installation control system of the present invention includes an installation optical disk medium that includes a read-only area and a writable area, in which application data is recorded in the read-only area, and a device that can read and write to the installation optical disk medium. And the application data is encrypted using the encryption key generated based on the computer terminal-specific information when the installation optical disk medium is inserted into the computer for the first time. It is characterized by recording.

In addition, the installation control system of the present invention is an installation optical system for installation in a computer in an installation control system using an installation optical disk medium that is composed of a read-only area and a writable area and in which application data is recorded in the read-only area. Automatically starting the program at the time of insertion, terminal specific information extracting means for extracting the terminal specific information of the computer from the computer, and generating a unique encryption key based on the terminal specific information of the computer Encryption key generation means that encrypts the application data in the read-only area using the encryption key and writes the encrypted data to the writable area, and at the same time makes the application data in the read-only area invisible Means and encryption Terminal-specific information checking means for checking the consistency of terminal-specific information based on whether the encrypted data in the writable area can be decrypted using the key, and terminal-specific by deleting the encrypted data in the writable area An installation optical disk medium including terminal-specific information deletion means for canceling the invisibility of application data at the same time as deleting information, and a computer provided with a device capable of reading and writing to the installation optical disk medium .

Furthermore, in the installation control method of the present invention, the installation optical disk medium is composed of a read-only area and a writable area in which application data is recorded, and generates a unique encryption key based on terminal-specific information of the computer. Encryption key generating means and encrypted data creating means for encrypting application data in the read-only area using the encryption key and writing the encrypted data in the writable area, and at the same time making the application data in the read-only area invisible And encrypting the application data and writing the encrypted data in the writable area to prevent unauthorized copying of the application data.

Furthermore, the installation control method of the present invention includes terminal specific information extraction means for extracting terminal specific information of the computer from the computer, and encryption key generation means for generating a unique encryption key based on the terminal specific information of the computer. And encrypted data cannot be decrypted using terminal specific information checking means that checks the consistency of the terminal specific information based on whether the encrypted data in the writable area can be decrypted using the encryption key In this case, installation of application data is not permitted.

Also, the installation control method of the present invention includes terminal unique information extraction means for extracting terminal unique information of the computer when an optical disk medium for installation is inserted into the computer, and a unique encryption key based on the extracted terminal unique information. The encryption key generation means for generating the encrypted data, encrypting the application data in the read-only area using the generated encryption key and writing the encrypted data in the writable area, and simultaneously making the application data in the read-only area invisible Encrypted data creation means, terminal-specific information check means for checking the match of terminal-specific information based on whether encrypted data in the writable area can be decrypted using the encryption key, encrypted data in the writable area By deleting the device-specific information by deleting the application data at the same time The terminal-specific information deleting means for canceling the invisibility, the installation optical disk medium on which the application data is recorded, and the device that can read and write to the installation optical disk medium, the application data can be stored without going through the network. It is characterized by performing installation.

On the other hand, the installation control method of the present invention extracts the terminal unique information of the computer at the first insertion of the optical disk medium for installation into the computer, generates an encryption key based on the terminal unique information, and uses the encryption key. The application data is encrypted, and the encrypted data is written in a writable area of the optical disc medium for installation.

Further, the installation control method of the present invention comprises a program automatic start means, terminal specific information extraction means, terminal specific information check means, terminal from the read-only area of the installation optical disk medium when the installation optical disk medium is inserted into a computer. A unique information deleting means, an encryption key generating means, an encrypted data creating means, a step of reading application data, a step of automatically starting the terminal unique information extracting means by executing a program automatic starting means, and a terminal By executing the unique information extracting means, the step of extracting the terminal unique information of the computer from the computer, and by executing the encryption key generating means, the encryption key is generated based on the extracted terminal unique information. Process and whether encrypted data is recorded in the writable area If the encrypted data is recorded in the writable area, it can be written using the encryption key generated by the encryption key generation means by executing the terminal specific information check means A step of checking whether the terminal-specific information matches based on whether the encrypted data in the area can be decrypted; a step of inquiring whether to delete the encrypted data if the encrypted data can be decrypted; and When deleting the encrypted data, the terminal-specific information deletion means is executed to delete the encrypted data in the writable area, and at the same time the application data is made invisible, and the encrypted data is recorded in the writable area. If not, encrypt the application data in the read-only area by executing the encrypted data creation means. A step of creating data, a step of writing the encrypted data created by the encrypted data creation means to the writable area, and a step of returning control to the execution of the terminal specific information extraction means after writing the encrypted data to the writable area And, when not deleting the encrypted data, decrypting the encrypted data in the writable area using the encryption key generated by the encryption key generating means and starting the installation of the application data. Features.

The first feature of the present invention is that a writable optical disk medium having a read-only area is used as an installation optical disk medium, and is generated on the basis of terminal specific information of the computer when the installation optical disk medium is inserted into the computer for the first time. The application data is encrypted using the encryption key, and the encrypted data is recorded in the writable area. The terminal unique information is, for example, information that is unique to the hardware of each computer and expressed in alphanumeric characters or the like in software.

According to the first feature, even if the application data is copied from the installation optical disk medium to a readable / writable medium such as a hard disk, the application data itself is read as long as there is no encryption key generated based on the terminal-specific information of the computer. Since this is impossible, copying can be prevented. Computers that can delete encrypted data are limited to computers that have created encrypted data. If the encrypted data is deleted, the installation process itself is temporarily terminated. An optical disc medium in which encrypted data is not recorded in a writable area cannot be installed because application processing cannot be performed in the present invention.

In addition, when an installation optical disk medium is copied using a readable / writable device such as CD-R / RW or DVD ± R / RW, since the application data is encrypted, the appearance of normal files, etc. Is not.

In addition, when the installation optical disk medium is inserted into the computer for the first time, the application data is encrypted so that the application data is encrypted and the encrypted data is written to the writable area and at the same time the application data in the read-only area is invisible. It becomes impossible to copy in the absence.

The second feature of the present invention is that an encryption key used for encrypting application data is generated based on terminal-specific information of a computer into which an optical disc medium for installation is inserted.

Note that the encryption key generated based on the computer's terminal-specific information is the only one. If the hardware configuration of the computer is changed, the generated encryption key will also be changed. When there is no change in the hardware configuration, a unique encryption key is always generated.

According to the second feature, when the hardware configuration of the computer is different, the terminal-specific information is different, and the encryption key generated based on the terminal-specific information is different, so that it is recorded in the writable area. The application data cannot be decrypted normally from the encrypted data. Therefore, the installation of application data itself cannot be performed.

Also, it is impossible for one user to install the application data by inserting the same installation optical disk medium into a plurality of computers because the hardware configuration of each computer is different. In this case, it is possible to prevent application data from being installed on a plurality of computers without being aware of the license.

In addition, even when imaged, it contains encrypted data obtained by encrypting application data using an encryption key generated based on the computer-specific information of the computer. The application data cannot be installed normally.

Furthermore, unlike product activation, there is no need to access the server, and unauthorized copying can be prevented only by the computer.

A third feature of the present invention is that application data in the read-only area of the installation optical disk medium is made invisible.

According to the third feature, when application data is copied to a readable / writable medium such as a hard disk, the application data is invisible, so that only the encrypted data can be seen as a file, and there is no encryption key. Application data cannot be copied.

According to the installation optical disk medium, the installation control method, and the installation control method of the present invention, the application data is encrypted by using the encryption key generated based on the terminal unique information of the computer at the time of installation, and the encrypted data is written. Since the application data in the read-only area is made invisible while being written in the possible area, the installation optical disk medium can be reused only on the computer where the user has installed the application data. Other computers and optical disk media for installation When the application is copied, the encryption data cannot be decrypted because the encryption information is different because the terminal-specific information of the computer is different. Can not. However, if you are a regular user and want to change the hardware configuration of your computer, delete the encrypted data in the writable area before changing the hardware configuration. It is possible to reinstall application data.

Even if the entire installation optical disk medium is copied in an attempt to create an illegal copy optical disk medium, the encryption key generated based on the computer's terminal-specific information is used during installation to If the encrypted data cannot be decrypted, the application data cannot be installed.

In addition, even if you try to create an illegal imaging disk, you can image the installation optical disk medium, copy it to another readable / writable medium, and install application data from that imaging disk. On the other computer, the application data becomes invisible at the same time that the encrypted data is written to the optical disk medium for installation using the encryption key that is automatically generated based on the computer's terminal-specific information at the first insertion. The application data on the optical disk medium for installation cannot be viewed.

Furthermore, even if a user tries to install application data on a plurality of computers, the hardware configuration of the computer is different, so the terminal-specific information of the computer is different, and the encrypted data is encrypted using an encryption key. Cannot be decrypted, so application data cannot be installed.

In addition, there is no need to send information via the network, and if it is a legitimate user, by deleting the encrypted data before changing the hardware configuration of the computer, the application data can be changed after changing the hardware configuration of the computer. It can be reinstalled.

Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

Referring to FIG. 1, the installation optical disk medium 200 according to the first embodiment of the present invention includes a read-only area 201 that can be read only and a writable area 211 that can be read and written. .

In the read-only area 201, a program automatic start unit 202 that automatically starts a program when the installation optical disk medium 200 is inserted, a terminal specific information extraction unit 203 that extracts terminal specific information of the computer 100, and terminal specific information extraction The terminal-specific information that checks whether the terminal-specific information matches based on whether the encrypted data 212 recorded in the writable area 211 of the optical disk medium for installation 200 can be decrypted with the terminal-specific information extracted by executing the means 203 Information check unit 204 and terminal specific information deletion unit that deletes terminal specific information by deleting encrypted data 212 recorded in writable area 211 of optical disc medium for installation 200 and at the same time releases invisibility of application data 205 and terminal specific An encryption key generation unit 206 that generates a unique encryption key based on terminal-specific information extracted by executing the information extraction unit 203, and an application using the encryption key generated by the encryption key generation unit 206 Encrypted data creating means 207 for encrypting data 208 and writing encrypted data 212 to writable area 211 and simultaneously making application data 208 in read-only area 201 invisible, and application data 208 including an actual application program are provided. included.

As shown in FIG. 2, the computer 100 includes data reading means 101 that can read data from both the read-only area 201 and the writable area 211 of the installation optical disk medium 200, and the writable area 211 of the installation optical disk medium 200. And data writing means 102 capable of writing data.

FIG. 3 is a flowchart showing the process of the installation control method when the installation optical disk medium 200 is inserted into the computer 100. This process includes a medium insertion step S101, a program automatic activation means execution step S102, a terminal specific information extraction means execution step S103, an encryption key generation means execution step S104, a writable area recording presence / absence determination step S105, an encryption Encrypted data decryption step S106, decryption OK determination step S107, encrypted data deletion inquiry step S108, encrypted data deletion step S109, end inquiry step S110, encrypted data creation means execution step S111, encryption It consists of a data write step S112 and an installation start step S113.

As shown in FIG. 4, the installation control method according to the first embodiment extracts the terminal unique information of the computer 100 when the installation optical disk medium 200 is inserted into the computer 100, and the encryption key based on the terminal unique information. Are generated, the application data 208 in the read-only area 201 of the installation optical disk medium 200 is encrypted using the encryption key, and the encrypted data 212 is written in the writable area 211 of the installation optical disk medium 200.

As a result, as shown in FIG. 5, the encrypted data 212 is written into the writable area 211 of the installation optical disk medium 200, and at the same time, the application data 208 in the read-only area 201 of the installation optical disk medium 200 is made invisible. Therefore, the application data 208 can be installed only by the computer 100 in which the installation optical disk medium 200 is first inserted, and the application data 208 can be prevented from being easily copied. In FIG. 5, the encryption program means the encryption key generation means 206 and the encrypted data creation means 207, and the automatic start program means the program automatic start means 202, the terminal specific information extraction means 203, and the terminal specific information check means 204. And terminal specific information deletion means 205.

Next, the operation at the time of inserting the installation optical disc medium 200 according to the first embodiment configured as described above into the computer 100 will be described.

When the installation optical disk medium 200 is inserted into the computer 100 for the first time, the computer 100 causes the data reading means 101 to automatically start the program 202 from the read-only area 201 of the installation optical disk medium 200, the terminal specific information extraction means 203, and the terminal. The unique information checking means 204, the terminal unique information deleting means 205, the encryption key generating means 206, the encrypted data creating means 207, and the application data 208 are read out on a memory (not shown) (step S101).

Next, the computer 100 automatically starts the terminal specific information extracting unit 203 by executing the program automatic starting unit 202 (step S102).

Subsequently, the computer 100 executes the terminal specific information extracting unit 203 to extract the terminal specific information of the computer 100 (step S103). The computer 100 is composed of parts such as a CPU (Central Processing Unit), a motherboard, a hard disk, and a network card, and these parts have unique numbers unique to individual parts such as serial numbers depending on the product. . The terminal specific information here refers to a combination of unique numbers possessed by these components.

Next, the computer 100 generates the encryption key based on the terminal unique information of the computer 100 by executing the encryption key generation means 206 (step S104). For example, based on terminal-specific information consisting of a combination of unique numbers possessed by each part of the computer, a mathematical method such as a one-way hash function is used, and the same encryption is performed each time based on the same terminal-specific information. Generate a key.

Subsequently, the computer 100 determines whether or not the encrypted data 212 is recorded in the writable area 211 of the installation optical disk medium 200 (step S105).

If the encrypted data 212 is not recorded in the writable area 211, it is the first insertion of the installation optical disk medium 200, so the computer 100 moves control to step S111 and executes the encrypted data creating means 207. As a result, the application data 208 recorded in the read-only area 201 of the installation optical disk medium 200 is encrypted to create encrypted data 212 and the application data 208 is made invisible (step S111).

Next, the computer 100 writes the encrypted data 212 into the writable area 211 of the installation optical disk medium 200 by the data writing means 102 (step S112).

After writing the encrypted data 212 to the writable area 211, the computer 100 returns the control to step S102 and repeats the process from the execution of the automatic program starting means 202.

If the encrypted data 212 is recorded in the writable area 211 in step S105, the computer 100 executes the terminal-specific information check unit 204 because the installation optical disk medium 200 is inserted for the second time or later. The terminal-specific information based on whether or not the encrypted data 212 recorded in the writable area 211 of the installation optical disk medium 200 can be decrypted using the encryption key generated by the encryption key generating means 206. Are matched (step S106). Specifically, the encrypted data 212 compresses the application data 208 in the read-only area 201 using an appropriate compression algorithm, and uses the encryption key as a password at that time. At the time of decryption, an encryption key is generated again based on the terminal-specific information of the computer 100, and it is tried whether or not the encrypted data 212 already written in the writable area 211 can be expanded (decompressed). Here, it is checked whether or not the encrypted data 212 already recorded in the writable area 211 can be decrypted using the encryption key generated based on the terminal-specific information of the computer 100.

When the encrypted data 212 recorded in the writable area 211 of the installation optical disk medium 200 cannot be decrypted using the encryption key generated by the encryption key generating means 206 (step S107), the computer 100 The process is terminated.

When the encrypted data 212 recorded in the writable area 211 of the installation optical disk medium 200 can be decrypted using the encryption key generated by the encryption key generating means 206 (step S107), the computer 100 The user is inquired whether to delete the encrypted data 212 recorded in the writable area 211 (step S108).

When the encrypted data creating unit 207 deletes the encrypted data 212 recorded in the writable area 211, the computer 100 executes the terminal specific information deleting unit 205 to thereby execute the encrypted data 212 in the writable area 211. Is deleted, and the terminal-specific information is also deleted, and at the same time, the application data 208 in the read-only area 201 is released from invisibility (step S109).

Next, the computer 100 inquires of the user whether or not to end the process (step S110). When ending the process, the computer 100 immediately ends the process.

If the processing is not terminated after the encrypted data 212 is deleted, the computer 100 executes the encrypted data creating means 207 to encrypt the application data 208 recorded in the read-only area 201 of the installation optical disk medium 200. Thus, the encrypted data 212 is created and the application data 208 is made invisible (step S111).

Next, the computer 100 writes the encrypted data 212 into the writable area 211 of the installation optical disk medium 200 by the data writing means 102 (step S112).

After writing the encrypted data 212 to the writable area 211, the computer 100 returns the control to step S102 and repeats the process from the execution of the automatic program starting means 202.

If the encrypted data is not deleted in step S108, the computer 100 uses the encryption key generated by the encryption key generation means 206 to use the encryption recorded in the writable area 211 of the installation optical disk medium 200. The encrypted data 212 is decrypted and installation is started as application data 208 (step S113). After the installation is completed, the computer 100 ends the process.

As described above, according to the first embodiment, the terminal-specific information of the computer 100 is extracted when the installation optical disk medium 200 is inserted into the computer 100, and the encryption key generated based on the extracted terminal-specific information is extracted. The application data 208 is encrypted using the application data 208, the encrypted data 212 is written in the writable area 211 of the installation optical disk medium 200, and the encrypted data 212 is decrypted with the encryption key. Do. Thus, the installation optical disk medium 200 can be used only by the computer 100 on which the user has installed the application data 208, so that when the other computer and copy optical disk medium are used, the terminal-specific information of the computer 100 is used. Since the encryption keys are different, the installation of the application data 208 cannot be performed. However, a legitimate user deletes the encrypted data 212 in the writable area 211 of the installation optical disk medium 200 in advance before changing the hardware configuration of the computer 100, so that the hardware configuration of the computer 100 is reduced. After the change, the application data 208 can be reinstalled.

Further, even if the entire installation optical disk medium 200 is copied in an attempt to create an illegal copy optical disk medium, the installation optical disk medium 200 is used by using an encryption key generated based on the terminal-specific information of the computer 100 at the time of installation. Since the encrypted data 212 in the writable area 211 cannot be decrypted, the application data 208 cannot be installed.

Furthermore, even if an attempt is made to create an illegal imaging disk, the installation optical disk medium 200 is imaged, copied to another readable / writable medium, and the application data 208 is installed from the imaging disk. When the optical disk medium 200 is inserted for the first time, the encrypted data 208 encrypted using the encryption key automatically generated based on the terminal unique information of the computer 100 is written to the optical disk medium 200 for installation and read at the same time. Since the application data 208 in the dedicated area 201 is invisible, the contents of the installation optical disk medium 200 cannot be viewed on other computers.

Furthermore, even if the same user tries to install the application data 208 to a plurality of computers 100, since the hardware configuration of the computers 100 is different, the terminal-specific information is different and the encryption key is different. The encrypted data 212 cannot be decrypted, and the application data 208 cannot be installed.

Further, there is no need to send information via a network, and if it is a legitimate user, the application data 208 can be installed even if the hardware configuration of the computer 100 is changed. In the process at the time of decryption, if the decryption can be performed, the terminal-specific information of the computer 100 is only the same as the computer 100 at the first insertion of the installation optical disk medium 200, and decryption cannot be performed by other computers. Even when the encrypted data 212 is deleted, since the encrypted data 212 is always written in the writable area 211 of the installation optical disk medium 200 at the time of next insertion, there is no state where the encrypted data 212 is not present. Therefore, a user who has the installation optical disk medium 200 in which the encrypted data 212 that can be correctly decrypted is recorded in the writable area 211 is a regular user.

It is a figure which shows the structure of the optical disk medium for installation based on Example 1 of this invention. 1 is a diagram illustrating a hardware configuration of a computer into which an optical disc medium for installation according to Embodiment 1 is inserted. FIG. 3 is a flowchart illustrating processing of an installation control method according to the first embodiment. It is a figure explaining the outline | summary of the installation control method which concerns on Example 1. FIG. It is a figure explaining the content before and after the first insertion of the optical disk medium for installation.

Explanation of symbols

DESCRIPTION OF SYMBOLS 100 Computer 101 Data reading means 102 Data writing means 200 Installation optical disk medium 201 Read-only area 202 Automatic program starting means 203 Terminal specific information extracting means 204 Terminal specific information checking means 205 Terminal specific information deleting means 206 Encryption key generating means 207 Encryption Encrypted data creation means 208 Application data 211 Writable area S101 Medium insertion step S102 Automatic program start means execution step S103 Terminal specific information extraction means execution step S104 Encryption key generation means execution step S105 Writable area record presence / absence determination step S106 Encrypted data Decryption processing step S107 Decryption OK determination step S108 Encrypted data deletion inquiry step S109 Encrypted data deletion step S 110 End inquiry step S111 Encrypted data creation means execution step S112 Encrypted data write step S113 Installation start step

Claims (8)

On the computer,
  Unique information extraction processing for obtaining unique information of the computer;
  An encryption key generation process for generating an encryption key based on the unique information;
  If encrypted data of application data is stored in a recording medium, the encrypted data is decrypted with the encryption key, and decryption processing for generating the application data is executed.
  If the encrypted data of the application data is not stored in the recording medium, the application data is input from the recording medium and the application data is encrypted with the encryption key to create the encrypted data Encrypted data creation processing for making the application data invisible, and data writing processing for writing the encrypted data to a writable area of the recording medium are executed.
  A program started by the computer when the recording medium is inserted into the computer. In the computer,
  The program according to claim 1, wherein the program deletes the encrypted data and executes a unique information deletion process for releasing the invisibility of the application data. In the computer,
The program according to claim 1 or 2, wherein installation of an application program is executed using the application data generated by the decryption process. A recording medium for storing the application data and the program according to claim 1. When inserting the recording medium into the computer,
  Unique information extraction processing for obtaining unique information of the computer;
  An encryption key generation process for generating an encryption key based on the unique information;
  If encrypted data of application data is stored in the recording medium, the encrypted data is decrypted using the encryption key, and decryption processing for generating the application data is executed.
  If the encrypted data of the application data is not stored in the recording medium, the application data is input from the previous recording medium, and the application data is encrypted with the encryption key to create the encrypted data A computer that executes encrypted data creation processing for making the application data invisible, and data writing processing for writing the encrypted data to a writable area of the recording medium. The computer according to claim 5, wherein the computer deletes the encrypted data and executes a unique information deletion process for releasing the invisibility of the application data. When the recording medium is inserted into the computer, the computer
  A unique information extraction step for obtaining unique information of the computer;
  An encryption key generation step of generating an encryption key based on the unique information;
  If encrypted data of application data is stored in the recording medium, a decryption step of decrypting the encrypted data using the encryption key and generating the application data;
  If the encrypted data of the application data is not stored in the recording medium, the application data is input from the previous recording medium, and the application data is encrypted with the encryption key to create the encrypted data A control method comprising: an encrypted data creation process for making the application data invisible; and a data writing process for writing the encrypted data to a writable area of the recording medium. The computer is
  8. The control method according to claim 7, further comprising: a unique information deleting step for deleting the encrypted data and releasing the invisibility of the application data.

Images