JP4601971B2 - How to prevent unauthorized startup of software - Google Patents

Description

  The present invention relates to a method for preventing unauthorized use of software and a system therefor, and more particularly to prevention of unauthorized use of software installed and used in an information processing terminal such as a personal computer (hereinafter also referred to as a PC or a personal computer).

The types of unauthorized use of software include counterfeiting, redistribution, and online. One of the most damaging is software lifting.
Software lifting refers to copying software without permission from an individual or company, or installing software on a computer beyond the number permitted in a contract.
Once the software has been delivered, there is no way to check if it is being used properly according to the number of licenses.
In order to prevent usage exceeding the number of licenses, a program that checks whether software with the same serial number (or product ID) on the network has been activated on the network at the time of software activation, or from the Internet during installation A method such as license authentication is taken.
However, in this case, it is difficult to perform tracking authentication on a personal computer that operates as a stand-alone computer or on a network that has a significantly different domain.

In general, the software often requires the input of a serial number in order to confirm that the software is a legitimate product during the installation process.
In most cases, the serial number is described in the manual included in the product case or the postcard or sticker for user registration. You are typing.
The input serial numbers are compared by the identification program, and the software is installed only when the calculation result is correct.
In this case, however, unauthorized installation can be easily performed if even the serial number is communicated by writing or verbally.

  The CD-ROM for installation itself is added with a copy guard function, or an IC chip is embedded and combined with a dedicated CD drive as disclosed in JP 2002-373029 “Method for preventing unauthorized copying of software by IC tag”. Proposals have been made to prevent copying of the CD-ROM itself. However, if a regular CD-ROM and a dedicated CD drive are also lent, it is possible to illegally install and use the software.

Further, a technique for using the authentication USB storage to start the software after authenticating the serial number recorded in the USB storage when starting the software has been disclosed.
However, in this case, the possibility that the data recorded in the USB storage is copied and the authentication USB storage itself is copied cannot be denied.

Japanese Patent Laid-Open No. 2002-268762 “Software License Management System Using IC Card” and the like list a software license management method using an IC card.
If an IC card is used, more advanced and highly reliable license management is possible, but the software creator is also required to have knowledge of the IC card management application.
In addition, the license authentication card is relatively expensive.
JP 2002-373029 A JP 2002-268774 A

As described above, various measures have been taken to illegally install software or launch software illegally. There was no way to prevent the unauthorized activation of the system, and a response was required.
But the invention corresponding thereto, in a simple way, effectively, is intended to provide a method for preventing unauthorized activation of the software on the information processing terminal machine, such as personal computers.

Incorrect installation method of preventing software according to the present invention, when installing the software to the information processing terminal, using a dedicated non-contact data carrier as a tool for authentication, to prevent unauthorized software installation, A method for preventing unauthorized installation of software, in which one use of the software in one information processing terminal is used, and one predetermined non-contact data carrier to which a unique ID is assigned is used for one use In addition, an encryption ID obtained by encrypting the unique ID is stored in the user memory area of the non-contact data carrier in advance, and the information processing terminal is installed by a software installer program before installing the software. In contrast, the contactless data carrier The ID and encryption ID, matching respectively the steps obtained by using a reader or reader writer further decrypts the encrypted ID, obtaining a decoding ID, and the decoded ID and the unique ID If they match, the software is installed, and if they do not match, the software is not installed.
A method of preventing unauthorized installation of the software, characterized in that information is exchanged with a non-contact data carrier for authentication using a reader or reader / writer connected on the network. It is.
In addition, any of the above software illegal installation prevention methods, wherein the non-contact data carrier is an IC tag.

The method for preventing unauthorized activation of software according to the present invention prevents unauthorized activation of software by using a dedicated non-contact data carrier as an authentication tool when software installed in an information processing terminal is activated. In order to prevent unauthorized activation of software, the use of the software in one information processing terminal is one use, and a predetermined non-contact data carrier to which a unique ID is assigned for one use In addition, an encrypted ID obtained by encrypting the unique ID is stored in the user memory area of the non-contact data carrier in advance, and before the software is started, the information processing terminal is Reading the unique ID from the contactless data carrier; and A step of obtaining an encrypted ID stored in the user memory area, wherein the unique ID is encrypted, and further decrypting the encrypted ID to obtain a decrypted decrypted ID; The unique ID and the decryption ID are collated, and if they match, the software is started, and if they do not match, the step of not starting the software is performed, and the software Shows the step of writing data indicating activation in the user area of the non-contact data carrier for authentication at the time of software activation, the step of regularly checking the data sequentially, and the fact that it is already activated When data is written to a non-contact data carrier, a series of processes are performed to stop starting new software. What is written is characterized in.
Then, a bad start prevention method of the software, the information processing terminal are those that are used on a network, the software includes (by software distributors) in advance the non-contact data carrier in which the unique ID is registered, wherein the software, whether prior to starting the software, the software unique ID same unique ID and the non-contact data carrier has been registered for use is running on the network And a step of issuing a warning and canceling the activation of the new software when the activation of the software registered with the same unique ID is confirmed in the step. The process is incorporated.
Here, “Unique ID is registered in the software beforehand” means that the unique ID is registered in the software by reading it during installation.
A method for preventing unauthorized activation of any of the above-mentioned software, wherein information is exchanged with a non-contact data carrier for authentication using a reader or reader / writer connected on the network. It is a feature.
In addition, any of the above-described software illegal activation prevention methods, wherein the non-contact data carrier is an IC tag.

The software installation system according to the present invention is a software installation system for preventing unauthorized installation of software using a non-contact data carrier as an authentication tool when installing software in an information processing terminal. In addition, the recording ID on which the software and an installer program for installing the software are recorded, and a predetermined non-contact data carrier to which the unique ID is assigned, the encrypted ID obtained by encrypting the unique ID is assigned to the user. Non-contact data carrier stored in the memory area, reader or reader / writer of the non-contact data carrier, and information processing terminal such as a personal computer directly connected to the reader or reader / writer via a network Further, the installer program reads the unique ID from the non-contact data carrier before starting the software, and is stored in the user memory area of the non-contact data carrier. to obtain the encrypted ID of the unique ID is encrypted, further decrypts the encrypted ID, collates and obtaining the decoded ID, unique ID obtained and the decoded ID, if they match Includes a series of processing steps for starting the software and, if they do not match, causing the software not to be started.
In the above software installation system, the non-contact data carrier is an IC tag.

The software activation system according to the present invention uses a non-contact data carrier as an authentication tool when starting software installed in an information processing terminal, and prevents unauthorized activation of software. A software activation system, which is a predetermined contactless data carrier to which a unique ID is assigned, a contactless data carrier in which an encrypted ID obtained by encrypting the unique ID is stored in a user memory area, and the contactless data carrier A reader or writer, and an information processing terminal such as a personal computer directly connected to the reader or reader / writer via a network, and before starting the software, the non-contact data carrier in advance. Read the unique ID from A step taken, also stored in the user memory area of the non-contact data carrier, the unique ID is obtained the encrypted ID encrypted, and further decode the encrypted ID, obtain the decoded ID A series of processing steps are performed, in which the obtained unique ID and the decrypted ID are collated, and if they match, the software is started, and if they do not match, the software is not started. The software is incorporated with the software.
And it is said software starting system, Comprising: A non-contact data carrier is an IC tag, It is characterized by the above-mentioned.

The contactless data carrier according to the present invention is characterized in that an encrypted ID obtained by encrypting a unique ID is stored in the user memory area.

In addition, as an information processing terminal here, although a personal computer, a portable terminal, server equipment, etc. are mentioned, it is not limited to these.
Here, the unique ID is a unique ID that is assigned to each individual non-contact data carrier and cannot be rewritten.
Further, the authentication is for the purpose of preventing unauthorized use and confirming whether or not it is unauthorized use.
The non-contact data carrier as a tool for authentication is not limited to an IC tag or an IC card. In particular, an IC tag is preferable because of its simplicity of manufacture and versatility, and conforms to standards such as ISO 18000 and ISO 15693. An IC tag or the like is used.
In general, software is an expression (description) of instructions for operating a computer in words (programs) that can be understood by a computer, in other words, an expression (description) of a series of instructions to a computer for performing computer processing. Here, more specifically, it means a representation of an application program that runs on the OS. The software installer program is a program for installing software when installing the software in an information processing terminal such as a personal computer, and is usually mounted on a recording medium (CD or the like) of the software to be installed.

(Function)
The method for preventing unauthorized installation of software according to the present invention can prevent unauthorized installation of software to an information processing terminal such as a personal computer with a simple method by using such a configuration. .
Specifically, the use of the software on one information processing terminal is one use, one predetermined non-contact data carrier to which a unique ID is assigned is associated with one use, and An encrypted ID obtained by encrypting the unique ID is stored in the user memory area of the non-contact data carrier, and prior to installing the software, the software installer program sends the information processing terminal to the information processing terminal. the unique ID and encrypted ID of the contactless data carrier, comprising the steps of, respectively, obtained using a reader or reader writer, and further decode the encrypted ID, obtaining a decoded ID, the decryption and the unique ID collating the reduction ID, if they match, to install the software, consistent If have, by the steps not to install the software, but to perform, we have achieved this.
That is, one predetermined non-contact data carrier having a unique ID and an encryption ID is made to correspond to one use, so that one dedicated non-contact data carrier is always required for installation. The installation of the software at a plurality of locations away from the software recording medium (such as a CD) is troublesome.
This is because a non-contact data carrier is assigned a unique ID, and there is no more than one with the same ID, or it is easy to create two or more with the same ID. It is assumed that it is not possible.
Even if the encryption ID can be copied illegally, it is assumed that the unique ID cannot be copied or cannot be copied easily.
Each IC chip is usually given a unique ID. However, in order to produce a plurality of IC chips having the same ID, an illegal IC chip must be produced, which is not easy. It is easy to use the unique ID of the IC chip, and a non-contact data carrier on which the IC chip is mounted can be used as an authentication tool.
As a result, unauthorized installation of software on an information processing terminal such as a personal computer can be effectively prevented.
As a form of installation, there is a method in which information is exchanged with a non-contact data carrier for authentication using a reader or reader / writer connected on a network.
Of course, it is needless to say that information may be exchanged with a non-contact data carrier for authentication using a reader or reader / writer directly connected to an information processing terminal such as a personal computer to be installed.

By adopting such a configuration, the method for preventing unauthorized activation of software according to the present invention can effectively prevent unauthorized activation of software to an information processing terminal such as a personal computer with a simple method.
According to the method for preventing unauthorized activation of software according to the present invention, a predetermined non-contact data carrier having a unique ID and an encrypted ID is associated with one for each use, so that it is always dedicated to activation. One non-contact data carrier is necessary, and the activation of the software at a plurality of remote locations is troublesome.
In this case as well, a non-contact data carrier is given a unique ID, and there is no more than one with the same ID, or it is easy to create two or more with the same ID. In general, a non-contact data carrier on which an IC chip is mounted can be used as an authentication tool.
As a result, unauthorized activation of software in an information processing terminal such as a personal computer can be effectively prevented.
According to the method for preventing unauthorized activation of software according to the present invention, the step of writing data indicating activation in the user area of the non-contact data carrier for authentication incorporated in the activated software at the time of software activation, and the data The authentication is performed by performing the steps of regularly and periodically checking, and if the data indicating that it has already been started is written on the non-contact data carrier, the step of stopping the startup of the new software is performed. Non-contact data carrier, making it difficult or impossible to start on other information processing terminals such as personal computers, which further prevents unauthorized activation of software on information processing terminals such as personal computers It can be effectively prevented.
According to the method for preventing unauthorized activation of the software of the invention of claim 2, the software to be activated is registered in advance with the authentication ID of the non-contact data carrier for authentication (by the software distributor), A step of confirming whether or not the software in which the unique ID same as the non-contact data carrier's unique ID used for authentication is registered is activated on the network, prior to the activation of the software incorporated in the activated software When the activation of the software with the same unique ID registered in the above step is confirmed, a warning is issued and the new activation of the software is stopped. The use of the software on the processing terminal is one use, and a unique ID is given for one use. And one predetermined non-contact data carrier has corresponding is allowed to have, it is assumed that can adhere to the principle.
In addition, as mentioned above, here, “a unique ID is registered in the software beforehand” means that the unique ID is registered in the software by reading it in advance during installation.
As a result, unauthorized activation of software in an information processing terminal such as a personal computer can be more effectively prevented.
As a form of activation, there is a method in which information is exchanged with a non-contact data carrier for authentication using a reader or reader / writer connected on a network.
Of course, it is needless to say that information may be exchanged with a non-contact data carrier for authentication using a reader / writer directly connected to an information processing terminal such as a personal computer to be activated.

The software installation system according to the present invention is a software installation system that can effectively prevent unauthorized installation of software to an information processing terminal such as a personal computer with a simple configuration. It is possible to provide.

In addition, the software activation system according to the present invention has such a configuration, and can effectively prevent unauthorized activation of software in an information processing terminal such as a personal computer with a simple configuration. The system can be provided.

The present invention, in a simple manner as described above, effectively, the rogue software startup of the information processing terminal machine, such as personal computers, to enable the provision of a method that can prevent.

Embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram showing a processing flow of a first embodiment of a software illegal installation prevention method according to the present invention, and FIG. 2 is a first example of an embodiment of a software unauthorized activation prevention method according to the present invention. a diagram showing a part of flow of the processing of FIG. 3 is a view showing an example of a flow of processing Sosutouea supply side, Figure 4 processing for further effectively preventing unauthorized starting a diagram showing the flow, FIG. 5 is a second example diagram illustrating a portion of the flow of the processing of the embodiment of fraud activation method for preventing software of the present invention, FIG. 6 against fraud FIG. 7 is a diagram illustrating an example of a usage pattern.
1 to 5, S11 to S21, S31 to S40, S41 to S51, S61 to S69, and S71 to S81 indicate processing steps, respectively.
6 to 7, reference numeral 110 denotes a non-contact data carrier for authentication, PC1 to PC3, PC11 to PC13, and PC21 to PC23 are personal computers, and R / W is a reader / writer.

First, a first embodiment of a software illegal installation prevention method according to the present invention will be described with reference to FIG.
The software illegal installation prevention method related to this example is to prevent unauthorized software installation by using a dedicated non-contact data carrier as an authentication tool when installing software on an information processing terminal. In the software unauthorized installation prevention method, the use of the target software in one information processing terminal is one use, and one predetermined non-contact data carrier to which a unique ID is assigned for one use It is a thing to correspond.
As an authentication non-contact data carrier, an encrypted ID obtained by encrypting the unique ID is stored in the user memory area.
Briefly, prior to installing the target software, a unique ID and encryption of the above-mentioned non-contact data carrier for authentication are made to one information processing terminal using the target software by the software installer program . the ID, a step of respectively, obtained using a reader writer further decrypts the encrypted ID, obtaining a decoded ID, the collated unique ID and the said decryption ID, if there is a match The software is installed, and if they do not match, the software is not installed.
First, a software purchaser (hereinafter also referred to as a user) orders software to be used, and from the software supplier side, authenticates the CD-ROM recording the target software and permission to use it. A non-contact data carrier for authentication is obtained. (S11)
The software supplier prepares one authentication IC tag for each license together with the CD-ROM storing the target software.
A non-rewritable and unique ID (herein referred to as a unique ID) is assigned to the non-contact data carrier at the time of manufacture.

As shown in FIG. 3, when an order is received from the software purchaser (S41), the software supplier selects a non-contact data carrier for authentication based on the order information (S42). The unique ID is registered (S43), the unique ID is encrypted (S44), the encrypted ID is obtained (S45), and the user memory area of the non-contact data carrier for authenticating the encrypted ID (S46) to obtain a non-contact data carrier for authentication. (S47)
On the other hand, based on the ordering information (S42), the software to be delivered is registered (S48), the target software is stored in the delivery CD-ROM (S49), and the target software is stored. Obtain a CD-ROM for delivery. (S50)
Usually, customer delivery information and stored software information are registered in the company database, and non-contact data carrier information for authentication is also associated and registered.
Then, the authentication non-contact data carrier (S47) is delivered together with the CD-ROM (S50) storing the software. (S51)
In some cases, a reader / writer (hereinafter also referred to as R / W) is delivered.

The software purchaser obtains a CD-ROM in which the target software is recorded and a non-contact data carrier for authentication for authenticating the use permission (S11), and then the CD-ROM in which the software is stored. Is set in the CD drive of the information processing terminal to be installed, and the installer is started.
Note that the reader / writer for the non-contact data carrier (S47) is connected in advance to the information processing terminal to be installed.
Then, the installer program (also simply referred to as an installer) first displays a dialog requesting reading of a contactless data carrier for authentication.
The software purchaser installs an authentication non-contact data carrier in the reader / writer (R / W) and reads the unique ID (S15) by the R / W according to the instruction of the dialog.
Similarly, the encryption ID (S16) encoded (written) in the user area of the non-contact data carrier is read.
Reading is done automatically by the installer program.
The installer program that has read two IDs, the unique ID (S15) and the encrypted ID (S16), decrypts the read encrypted ID (S17) by the decryption processing step incorporated in the self program in advance. And the decrypted decryption ID (S18) is compared with the unique ID. (S19)
If the comparison results in a match (in the case of OK), the installation work is started (S20), and if there is a mismatch (in the case of NO), the installation work is stopped. (S21)
In this way, since one non-contact data carrier for authentication having a unique ID and an encrypted ID is associated with software installation, a plurality of CD-ROMs, which are one software recording medium, can be used. The installation of the software at a remote location is extremely troublesome, and this can effectively prevent unauthorized installation.

Next, a part of the processing of the first example of the embodiment of the method for preventing unauthorized activation of software according to the present invention will be described with reference to FIG.
The method for preventing unauthorized activation of the software in this example is to activate the software installed in the information processing terminal when the software purchaser actually uses the software that has been installed in the information processing terminal. When using a non-contact data carrier, such as a dedicated IC tag or IC card, as an authentication tool, a software illegal activation prevention method for preventing illegal activation of software, The use of the target software in the terminal is one use, and one predetermined non-contact data carrier to which a unique ID is assigned is associated with one use.
As an authentication non-contact data carrier, an encrypted ID obtained by encrypting the unique ID is stored in the user memory area.
Briefly, prior to starting the target software, the information processing terminal reads the unique ID from the authentication non-contact data carrier, and in the user memory area of the non-contact data carrier. is stored, the unique ID is obtained the encrypted ID encrypted, further decrypts the encrypted ID, it collates and obtaining the decoded ID, unique ID obtained and the decoded ID If they match, the software is started, and if they do not match, the software is not started. Such a series of processing steps is incorporated in the software. It is.
First, when accessing the target software installed in the information processing terminal (S31), the information processing terminal makes a data read request for a non-contact data carrier for authentication. (S32)
Each time an access to activate the software is performed, a request for reading the authentication IC tag is made.
Next, the unique ID of the non-contact data carrier for authentication and the encryption ID recorded in the user area are read by R / W. (S33)
Thereby, the unique ID (S34) and the encrypted ID (S35) are obtained.
Next, as in the software installation, the decryption ID (S37) is obtained by the decryption process (S36) incorporated in the software program.
The unique ID (S34) and decryption ID (37) of the authentication IC tag are compared (S38). If they match, the software is started (S39), and if they do not match, the start is stopped. . (S40)
In this manner, since one non-contact data carrier for authentication having a unique ID and an encryption ID is associated with the activation of the software, the activation of the software at a plurality of remote locations is performed. This makes it extremely troublesome and can effectively prevent unauthorized activation.

In the method for preventing unauthorized activation of software of the first example, unauthorized activation can be prevented more effectively by further performing the processing flow shown in FIG.
As shown in the flow of FIG. 2, after the software is activated and in use (S61), every time a predetermined time t0 elapses from a predetermined time T, a data read request for a non-contact data carrier for authentication is received. Is issued (S62), and according to this, the unique ID (S63) and the encrypted ID (S64) are obtained from the non-contact data carrier for authentication by W / R.
The encryption ID (S64) is further subjected to a decryption process (S65) to obtain a decryption ID. (S66)
When the processing flow shown in FIG. 4 is added to the first example, after starting up the software, data is periodically acquired from the authentication non-contact data carrier at a predetermined interval, In order to confirm whether or not a non-contact data carrier for authentication is used, it is assumed that unauthorized activation is more difficult than in the first example.
In this case, by acquiring data from the above-mentioned non-contact data carrier for authentication and further shortening the interval of a series of flows to be confirmed (compared), it can be substantially other than the non-contact data carrier for authentication. The use of the software can be surely prevented.

Next, a part of the processing of the second example of the embodiment of the method for preventing unauthorized activation of software according to the present invention will be described with reference to FIG.
In this example, when the target software is installed in the information processing terminal in advance, the unique ID of the non-contact data carrier for authentication is registered as the serial number, and this serial NO and the contact data for authentication are registered. This is to compare the unique ID of the carrier.
In the case of the method for preventing unauthorized activation of software in this example, as in the case of the first example, information on software activation when the software purchaser has actually installed the software installed on the information processing terminal is used. A method for preventing unauthorized activation of software by using a dedicated non-contact data carrier as an authentication tool and preventing unauthorized activation of software when starting software installed on a processing terminal. The use of the target software in one information processing terminal is one use, and one predetermined non-contact data carrier to which a unique ID is assigned is associated with one use.
Also in the case of this example, as the contactless data carrier for authentication, an encrypted ID obtained by encrypting the unique ID is stored in the user memory area in advance.
First, when accessing the target software installed in the information processing terminal (S71), the information processing terminal grasps the serial number corresponding to the unique ID registered in the software. (S72)
On the other hand, the information processing terminal makes a data read request for the authentication non-contact data carrier (S73), and the R / W identifies the unique ID of the authentication non-contact data carrier and the encryption recorded in the user area. Read the ID. (S74)
Thereby, the unique ID (S75) and the encrypted ID (S76) are obtained.
Then, as in the case of software installation, a decryption ID (S78) is obtained by decryption processing (S77) incorporated in the software program.
Next, the serial number corresponding to the unique ID obtained from the software is compared with the unique ID of the authentication non-contact data carrier (S79). If they do not match, the activation of the software is stopped (S80). If they match, the identified serial number is compared with the unique ID of the authentication non-contact data carrier and the decryption ID. (S81)
If they do not match, the activation of the software is stopped (S80), and the software is activated only when they match. (S82)
In this manner, since one non-contact data carrier for authentication having a unique ID and an encryption ID is associated with the activation of the software, the activation of the software at a plurality of remote locations is performed. It is more troublesome than the first example, and this can effectively prevent unauthorized activation.
Of course, also in the second example, by adding the processing flow shown in FIG. 4 after activation, acquisition of data from the authentication non-contact data carrier at regular intervals after activation of the software In order to confirm whether or not a valid non-contact data carrier for authentication is used, it is possible to make unauthorized activation more difficult than in the second example.
In this case, in the same way, by acquiring data from a non-contact data carrier for authentication and further shortening the interval between a series of flows to be confirmed (compared), it is substantially other than the non-contact data carrier for authentication. It is possible to reliably prevent the use of software in

  In the second example, as shown by a thick dotted line arrow in FIG. 5, in the case where the processing step S81 is not performed and the processing step S79 is OK, the software is immediately activated. Also in this case, the effect of unauthorized activation can be obtained, which is almost the same as in the second example.

In the case of use in the form shown in FIG. 6, the effect of preventing unauthorized use will be briefly described.
In the case where the use of the target software in one information processing terminal is one use, and one non-contact data carrier 110 for authentication is assigned to one use, here, It is assumed that the software is installed by the method for preventing unauthorized installation of software shown in FIG. 1 and is activated by the method for preventing unauthorized activation of software shown in FIG.
In this case, in the same location, it is possible to install the target software on two or more personal computers illegally, and if the start time is shifted, two or more personal computers can be illegally installed. It is also possible to put the target software into use at the same time.
However, since the contactless data carrier 110 for authentication is required at any start-up, the contactless data carrier 110 for authentication is used at the location A and the location B which are remote locations, In order to illegally activate and use the target software simultaneously on two or more personal computers, it is necessary to transport the non-contact data carrier 110 for authentication between the location A and the location B, Since it takes too much time to do this for each start-up, it is impractical to illegally use a single contactless data carrier 110 for authentication at least at locations A and B, which are remote locations. Such unauthorized use does not occur at a practical level.
Even in the same location, in order to illegally use, one authentication non-contact data carrier 110 is moved between personal computers, which is very troublesome in terms of work. It seems difficult.
Of course, a non-contact data carrier having another unique ID is prepared, and the encryption ID stored in the non-contact data carrier for regular authentication is copied to the user memory area of the non-contact data carrier. Even if it is newly used as a non-contact data carrier for authentication, the decryption ID obtained from this non-contact data carrier and the unique ID do not coincide with each other.

  Furthermore, when the processing flow shown in FIG. 4 is added to the unauthorized activation prevention method of the software of the first example shown in FIG. 2, the unauthorized use cannot be performed at the location A and the location B which are remote places. Even at the same location, fraudulent use is virtually impossible.

As a usage form, the R / W is directly connected to a personal computer as shown in FIG. 6 and data is read from the non-contact data carrier for authentication by the R / W, or as shown in FIG. The connected R / W can be connected to a personal computer on the network, and the R / W can read data from a non-contact data carrier for authentication.
In the case of the usage form shown in FIG. 7, the R / W existing on the network is used for the installation, and the non-contact data carrier authentication is performed via the network and the software is installed. If the software is installed in the personal computer of the client connected to the network, the same software can be used from each personal computer.
In this case, in the license management, a flow for monitoring whether or not the software having the same serial number is activated on the network is incorporated in the software program.
For example, send / receive confirmation commands to / from personal computers on the network as needed, or record data indicating that they are being used at a fixed location in the user area of a non-contact data carrier when using them, and check them as needed. You can do it.

It is the figure which showed the flow of the process of the reference embodiment example 1 of the unauthorized installation prevention method of the software concerning this invention. It is a diagram showing a part of flow of the processing of the first example of the embodiment of fraud activation method for preventing software of the present invention. It is the figure which showed one example of the flow of a process by the software supplier side. It is the figure which showed the flow of the process for performing the illegal starting more effectively. It is a diagram showing a part of flow of the processing of the second example of the embodiment of fraud activation method for preventing software of the present invention. FIG. 7 is a diagram illustrating an example of a usage pattern for explaining prevention of unauthorized use. It is the figure which showed one example of the usage pattern.

Explanation of symbols

110 Non-contact data carrier for authentication PC1 to PC3 Personal computer PC11 to PC13 Personal computer PC21 to PC23 Personal computer R / W Reader / writer

Claims (4)

  This is a method for preventing unauthorized activation of software by using a dedicated contactless data carrier as a tool for authentication when starting software installed on an information processing terminal. The use of the software in one information processing terminal is one use, and one predetermined non-contact data carrier to which a unique ID is assigned corresponds to one use, and the non-contact in advance An encrypted ID obtained by encrypting the unique ID is stored in a user memory area of the data carrier, and before starting the software, the unique ID is sent from the non-contact data carrier to the information processing terminal. Stored in a user memory area of the contactless data carrier, Obtaining an encrypted ID obtained by encrypting the unique ID, further decrypting the encrypted ID to obtain a decrypted decrypted ID, and collating the obtained unique ID with the decrypted ID If they match, the software is started, and if they do not match, the step of not starting the software is performed. The step of writing the data indicating activation in the user area of the contact data carrier, the step of periodically checking the data sequentially, and the data indicating that the data has already been activated are written on the non-contact data carrier. If the software has a built-in process, the step of stopping the start of the new software Unauthorized start-up prevention method. The method for preventing unauthorized activation of software according to claim 1, wherein the information processing terminal is used on a network, and the software is pre-registered with a unique ID of the non-contact data carrier. In the software, prior to the activation of the software, the step of confirming whether the software registered with the same unique ID as the non-contact data carrier used is activated on the network; In the above step, when the activation of the software with the same unique ID registered is confirmed, a series of processing is performed to issue a warning and stop the activation of the new software. A method for preventing unauthorized activation of software.   The method for preventing unauthorized activation of software according to any one of claims 1 to 2, wherein information is exchanged with a non-contact data carrier for authentication using a reader or reader / writer connected on a network. A method for preventing unauthorized activation of software, characterized in that:   The method for preventing unauthorized activation of software according to any one of claims 1 to 3, wherein the non-contact data carrier is an IC tag.

Images