JP4757503B2 - License authentication system and method using detachable device having MAC address - Google Patents

Description

  The present invention relates to a system for performing license authentication of a computer program using a detachable device having a MAC (Media Access Control) address.

  Conventionally, when performing license authentication of a computer program, a method of using device-specific information such as a MAC address is widely used to identify a user.

In addition, there is a system in which a communication terminal and a network management server perform communication by sharing a shared key using the MAC address of each communication terminal as a key (see, for example, Patent Document 1).
JP 2004-266516 A

  However, when authentication is performed using the MAC address of the device mounted on the apparatus, there are the following problems.

  If the MAC address of a device already in the apparatus is used for authentication, the MAC address must be obtained from the user in advance in order to create an authorization key.

  If the MAC address of a device already in the device is used for authentication, the identification information depends on the hardware used, not the user, so if the hardware fails, even if the same user uses it Even so, new identification information is required and the authentication key must be recreated.

  If the program is moved to another device, all previous licenses for that device must be changed to new licenses.

  If a program license is inherited between devices, a dedicated device (special serial connector or parallel connector) is required for individual authentication.

  Accordingly, an object of the present invention is to provide a license authentication system and method using a detachable device having a MAC address that can save the user's trouble and give convenience of apparatus inheritance.

In order to solve the above-described problem, the present invention is a license authentication system for a computer program using a removable device having a MAC address, and an information processing apparatus connectable to a network and a port of the information processing apparatus A detachable device that is attachable and has a MAC address; an authentication server that is connectable to the network and provides an authentication license corresponding to the MAC address of the detachable device to the information processing apparatus;
An installation unit that installs a program that uses the MAC address of the detachable device for license authentication in the information processing apparatus; and an input unit that inputs an authentication license to the information processing apparatus; The MAC address of the device is acquired from the attached detachable device, the MAC address specified by the authentication license input from the input unit is acquired, and the MAC address of the detachable device and the input unit are input. The MAC address specified by the authentication license is compared, and if it matches, the use of the program is permitted.

  Alternatively, license data is generated from a MAC address acquired from a detachable device having a MAC address, is encrypted with a common key, and the use of the program is permitted if they match with the input authentication license.

  According to the present invention, by performing license authentication using a detachable device having a MAC address, a conventional license authentication mechanism using a MAC can be made more user-friendly.

  In addition, when it is desired to use the program on another apparatus due to a failure of the licensed apparatus, it is not necessary to reissue a license for transferring the program to a new apparatus. For this reason, it is not necessary to obtain the MAC address for authentication from the user in advance.

  In addition, it is not necessary to prepare a dedicated instrument (special serial connector or parallel connector) for device authentication.

  Next, the best mode of the present invention will be described with reference to the drawings.

  Computer programs (CAD software, IP phone server software, etc.) used in the present invention require an authentication license. This is to prove that it was not illegally copied and to operate normally. The authentication license is obtained by generating license data from the MAC address assigned to the apparatus and encrypting the license data.

  FIG. 1 shows an example in which a detachable device having a MAC address used in the present invention is applied to an information processing apparatus such as a personal computer, a workstation, or a server. For example, a motherboard (PC) 10 includes a USB (Universal Serial Bus) port 2, an IEEE 1394 port 3, an SD (Secure Digital) card port 5, a PCMCIA (Personal Computer Memory Card International Association) port (PC card slot) 6. Etc. are equipped. A detachable device 20 having a MAC address, such as a LAN adapter, can be connected to these ports. The personal computer has a built-in LAN port 4, and a MAC address is given to the built-in LAN port device 14.

  A CD-ROM or DVD-ROM in which a computer program used in the present invention is recorded is inserted into the drive device 8 of the personal computer, and the program is installed in the hard disk 7. Alternatively, the program is downloaded and installed via a network.

  FIG. 2 shows a system configuration example of the present invention. A USB device 20 (such as a LAN adapter) having a MAC address is attached to the active machine (PC) 10, and an authentication license 21 corresponding to the MAC address is assigned.

  The authentication server 50 issues an authentication license based on the MAC address to a personal computer or the like via a network. The user accesses the authentication server 50 via the network from the PC 10 with the LAN adapter (detachable device) 20 attached to the USB port. The authentication server 50 acquires a MAC address from the LAN adapter 20 attached to the USB port of the PC 10, generates license data from the MAC address, and encrypts the license data using a common key encryption method (for example, DES, RC5, etc.). And issue a license key. The user obtains the license key and inputs it from the keyboard (not shown) of the PC 10.

  Conventionally, authentication for using this program has been performed using the MAC address of the LAN device 14 built in the personal computer. Therefore, the user obtains the MAC address of the built-in LAN device 14 in advance and sends it to the authentication server 50. I had to give my number. Therefore, if it takes time to issue the authentication license 21, the user has to wait for it.

  Furthermore, even if the current machine 10 breaks down and an attempt is made to transfer the program to another backup machine 30, it is necessary to create a new authentication license from the MAC address of the built-in LAN device 34 built in the backup machine 30 . In order to solve this problem, a method for preparing a dedicated device for license authentication connected to a parallel port or the like is conceivable, but it is not generally sold and has problems in terms of availability and cost.

  Therefore, in the present invention, authentication is performed by using the detachable device 20 having a MAC address connected to a relatively easy-to-remove interface such as USB or IEEE1394.

  Since a port connection device that is relatively easy to handle, such as USB, is used, by sending a detachable device 20 having a MAC address paired with the authentication license 21 to the user, shortening the lead time of the authentication license issuance time and failure In this case, the succession of the authentication license to the backup machine 30 can be realized by using components that are generally sold without using a dedicated device for authentication.

  FIG. 3 shows an example of license data generated from the MAC address. The license data consists of a numerical value of about 40 digits. This license data is composed of elements D1 to D6, and element D1 is a MAC address (hardware identifier). This license data is encrypted with a common key to obtain an authentication license.

  Next, a method for validating the authentication license 21 will be described with reference to the flowchart of FIG. The procedure in the case where the program and the authentication license 21 are inherited and used by the backup machine 30 when the active machine 10 fails is the same.

  The user installs the program to be used on the PC 10 and attaches the sent USB / LAN adapter 20 to the PC 10 (step 1). Further, the authentication license 21 sent together with the USB / LAN adapter is input to the PC 10 from a keyboard, a barcode reader or the like (step 2).

  The control unit 11 acquires a MAC address from the USB / LAN adapter 20 (step 3). Then, the input authentication license 21 is compared with the MAC address included in the license data obtained by decrypting the common key (step 4). Alternatively, license data is generated from the MAC address acquired from the USB / LAN adapter, is encrypted with a common key, and is compared with the input authentication license.

  It is determined whether or not both values match (step 5). If they match, the input authentication license is validated (step 6), limited operation for a specific period is started (step 7), and as soon as it is connected to the network. Then, final authentication is performed by the authentication server 50 and the authentication license 21 becomes completely valid (step 8), and the program can be used indefinitely (step 9). If they do not match, an error is displayed (step 10), the limited operation for a specific period is started (step 11), and the program operation is stopped when the time limit expires (step 12).

  In the present invention, for example, by using the MAC address of a USB LAN adapter, which is a general-purpose product, as a parameter for personal authentication, without using a dedicated instrument (special serial connector or parallel connector) for device authentication, Personal authentication can be performed with general-purpose parts everywhere.

  In addition, by preparing a USB adapter that can be easily replaced in the USB port and making it easily movable between devices, it is possible to freely move between devices that are authentication objects. For this reason, when the MAC address of the built-in device already in the apparatus is used for authentication, the restriction that a new license must be reassigned when a failure occurs can be removed.

  In addition, since the user can easily connect to an available USB port of the user's computer, the business operator can prepare the USB adapter in advance. For this reason, it is possible to send a USB adapter whose MAC address is already known to the user and attach it without hearing the MAC address of the user's device in advance. Therefore, the user's trouble can be reduced.

  The USB / LAN adapter can be replaced with a LAN card such as a PCMCIA, a wireless LAN card, an SDIO card, or other removable device having an easily removable MAC address. Further, not only a LAN adapter but also a USB memory card having a serial number internally can be used as a detachable device having a MAC address.

It is explanatory drawing which shows the example which applies the removable device which has a MAC address used for this invention to information processing apparatus. It is a figure which shows the system configuration example of this invention. It is a figure which shows an example of the license data produced | generated from the MAC address. 6 is a flowchart illustrating validation of an authentication license according to the present invention.

Explanation of symbols

1 Motherboard 2 USB port 3 IEEE1394 port 4 Built-in LAN port 5 SD card port 6 PCMCIA port 7 Hard disk 8 CD / DVD drive device 10 Current machine (PC)
20 USB device 21 Authentication license 30 Backup machine 50 Authentication server

Claims (4)

A computer program license authentication system using a detachable device having a MAC address,
An information processing apparatus connectable to a network;
A detachable device that can be attached to a port of the information processing apparatus and has a MAC address;
An authentication server that is connectable to the network and provides an authentication license corresponding to the MAC address of the removable device to the information processing apparatus;
Installation means for installing in the information processing apparatus a program that uses the MAC address of the removable device for license authentication;
Input means for inputting an authentication license to the information processing apparatus;
The information processing apparatus acquires a MAC address of the device from a removable device attached to the port, acquires a MAC address specified by an authentication license input from the input unit, and acquires the MAC address of the removable device. A license authentication system, wherein a MAC address is compared with a MAC address specified by an authentication license input from the input means , and if the two match, the use of the program is permitted.   The license authentication system according to claim 1, wherein the port to which the detachable device is attached includes at least one of a USB port, an IEEE 1394 port, a PCMCIA port, and an SD card port. An information processing apparatus connectable to a network;
A detachable device that can be attached to a port of the information processing apparatus and has a MAC address;
An authentication server that is connectable to the network and provides an authentication license corresponding to the MAC address of the removable device to the information processing apparatus;
Installation means for installing in the information processing apparatus a program that uses the MAC address of the removable device for license authentication;
A computer program license authentication method used in an authentication system comprising an input means for inputting an authentication license to the information processing apparatus,
The information processing apparatus is
Obtaining the MAC address of the device from the detachable device attached to the port, and obtaining the MAC address specified by the authentication license input from the input means;
Comparing the MAC address of the detachable device with the MAC address specified by the authentication license input from the input means ;
Allowing the use of the program if it matches,
A license authentication method comprising:   The license authentication method according to claim 3, wherein the port to which the removable device is attached includes at least one of a USB port, an IEEE 1394 port, a PCMCIA port, and an SD card port.

Images