JP5295156B2 - Information processing apparatus and software unauthorized use prevention method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To prevent the unauthorized use of software without the need of mounting a hardware key or connection to a network or the like each time of activating the software. <P>SOLUTION: The information processing apparatus includes: a computer specific information source 15 for storing computer specific information for uniquely specifying a computer 1; a license ID storage area 161 for storing a license ID allocated in order to utilize the software; a computer specific information storage area 162 for storing the computer specific information read from the computer specific information source 15; and a computer storage area access processing part 13 for confirming that the license ID is present in the license ID storage area 161, and permitting the activation of the software when the computer specific information read from the computer specific information source 15 and the computer specific information read from the computer specific information storage area 162 match. <P>COPYRIGHT: (C)2011,JPO&amp;INPIT

Description

  The present invention relates to an information processing apparatus and a method for preventing unauthorized use of software, which are preferably applied when, for example, a software supplier prevents unauthorized use of sold software.

  Conventionally, when genuine software sold by a supplier is installed in an information processing device such as a personal computer device (hereinafter abbreviated as “computer”), information (product ID) attached to a regular purchase of software A method for determining whether the installation is authorized using a password) is widely used. However, even if this method is used, since the software supplier cannot recognize that the software has been installed on more than the number of computers permitted by the software supplier, unauthorized installation cannot be prevented.

  In addition, by registering the license ID individually for authorized users using telephone or mail, it is possible to confirm whether the license ID has been used in the past and authorize authorized installation. is there. However, such authentication means have drawbacks such as time and effort required by telephone or mail.

  In addition, there is a technique for limiting the number of computers permitted to be installed by installing a hardware key that has individual information and is difficult to duplicate when starting up the software. With this technology, it is possible to start a software installation operation on any computer simply by attaching a hardware key to the computer. However, when using the software, the hardware key must be attached to the computer. For this reason, various input / output ports of the computer are blocked, which is inconvenient from the viewpoint of operability and convenience.

  Japanese Patent Application Laid-Open No. 2004-228561 discloses a technique for registering by sending a software license ID and identification data unique to a client computer to a server at the time of installation. In this technique, authentication is performed by outputting a software activation permission signal from the server only when the identification data unique to the client computer matches when the software is subsequently activated.

  Patent Document 2 discloses a technique for registering individual computer information in a hardware key and permitting activation of software depending on whether or not the hardware key is connected.

Japanese Patent Laid-Open No. 2001-100808 JP 2004-280581 A

  By the way, in the technique described in Patent Document 1, when a computer uses software, a network environment and server operation are required. For this reason, the operation load increases and the operation cost also increases.

  Further, in the technique described in Patent Document 2, since a hardware key connection is always required during software startup, one of the input / output ports of the computer is blocked. Furthermore, since the hardware key must be managed and stored in order to prevent the hardware key from being lost, damaged, stolen, etc., convenience is impaired.

  The present invention has been made in view of such a situation, and without having to put a hardware key on a computer or connect a computer to a network every time the software is started, The purpose is to prevent unauthorized use.

The present invention confirms that a license ID assigned to use the software exists in the first license ID storage area when the software is started.
Next, in correspondence with the license ID, the first unique information for uniquely identifying the information processing apparatus stored in the first unique information storage area, the first unique information being stored. It is confirmed that the first unique information read from the unique information source matches the first unique information read from the first unique information storage area.
Next , when the license ID exists and the first unique information read from the first unique information source matches the first unique information read from the first unique information storage area , the activation of the software is permitted. you.
Next, when installing the software, an authentication medium having a second license ID storage area for storing the license ID and a second unique information storage area for storing the first unique information corresponding to the license ID is connected. When it is detected, the license ID is read from the second license ID storage area, and the first unique information corresponding to the read license ID is written to or read from the second unique information storage area. I do.
Then, if there is a blank area in the second unique information storage area, the license ID read from the second license ID storage area is encrypted and written in the first license ID storage area, The first unique information read from the information source is encrypted and written in the first unique information storage area, and the first unique information read from the first unique information source is written in the blank area in the second unique information storage area. The software is encrypted and written to allow installation of the software.

According to the present invention, when the software is activated, it is not necessary to connect an authentication medium in which the software license ID is stored. Then, unauthorized use of the software can be prevented only by using the software license ID stored in the information processing apparatus and the computer-specific information.
In addition, when a blank area exists in the second unique information storage area of the connected authentication medium, software installation is permitted. If computer unique information is assigned to all license IDs, installation is further performed. Is not allowed. Since the license ID and the computer specific information are encrypted, it is impossible to rewrite the computer specific information written in the authentication medium with different computer specific information. Unauthorized use can be prevented.

It is a figure which shows the software configuration of software (business application) unauthorized use prevention in the 1st Embodiment of this invention. It is a figure which shows the internal structural example of the computer storage area access processing part of the software (business application) structure in the 1st Embodiment of this invention. It is a figure which shows the example of a screen at the time of installation of the software (business application) in the 1st Embodiment of this invention. It is a figure which shows the flow of a process at the time of installation of the software (business application) in the 1st Embodiment of this invention. It is a figure which shows the flow of a process at the time of starting of the software (business application) in the 1st Embodiment of this invention. It is a figure which shows the operation example at the time of the software (business application) uninstallation in the 1st Embodiment of this invention. It is a figure which shows the operation example at the time of installation of the software (business application) in the 1st Embodiment of this invention. It is a figure which shows the operation example at the time of starting of the software (business application) in the 1st Embodiment of this invention. It is a figure which shows the operation example at the time of the software (business application) uninstallation in the 1st Embodiment of this invention. It is a figure which shows the software (business application) structure of the computer connected to the management server in the 2nd Embodiment of this invention.

<First Embodiment>
Hereinafter, a first embodiment of the present invention will be described with reference to FIGS. In the present embodiment, an example applied to a computer 1 will be described as an information processing apparatus that prevents unauthorized use of software by installing, starting, and uninstalling software.

FIG. 1 shows a software configuration example of the computer 1 and the hardware key 2 of this example.
The computer 1 includes a memory (RAM: Random Access Memory) (not shown), a mass storage device (HDD: Hard Disk Drive), and the like. The computer 1 also includes a port 3 to which an electronic device including a hardware key 2 and other USB connectors is connected. The computer 1 recognizes that the hardware key 2 is connected to the port 3 or installs software under the control of an OS (Operating System) installed in advance. The hardware key 2 is used as an example applied to an authentication medium that stores a license ID and computer-specific information.

  In addition, the computer 1 includes a computer specific information source 15 that records first specific information for uniquely identifying its own device (computer 1). The first unique information is stored in the computer unique information source 15 as “computer unique information”. Information unique to the computer 1 such as a serial number of a CPU (Central Processing Unit) and a MAC address (Media Access Control address) of a LAN card as computer specific information recorded in the computer specific information source 15 Is used.

  The computer 1 includes a license ID storage area 161 for storing a license ID read from the hardware key 2 and a computer specific information storage area 162 for storing computer specific information allocated to identify the own machine from other machines. The license ID storage area 161 and the computer specific information storage area 162 are stored in the storage area 16 of the computer. The license ID storage area 161 is used as an example applied to the first license ID storage area, and the computer unique information storage area 162 is used as an example applied to the first unique information storage area.

  The license ID storage area 161 stores the license ID acquired from the license ID storage area 211. The stored license ID is used when the software (business application) is activated and executed at the time of uninstallation. Hereinafter, for example, document creation software, spreadsheet software, and the like are referred to as “business application”.

  The computer unique information storage area 162 stores computer unique information acquired from the computer unique information source 15 of the computer 1. The computer unique information stored in the computer unique information storage area 162 is used when the software (business application) is activated and executed at the time of uninstallation, as in the case of using the license ID.

  The hardware key 2 includes, as two recording areas, a license ID storage area 211 for storing a license ID assigned to use the software, and computer specific information read from the computer specific information source 15 corresponding to the license ID. Is stored in a computer specific information storage area 212. The license ID storage area 211 is used as an example applied to the second license ID storage area, and the computer unique information storage area 212 is used as an example applied to the second unique information storage area. The license ID storage area 211 and the computer specific information storage area 212 are stored in the hardware key storage area 21. For the hardware key 2, for example, a USB (Universal Serial Bus) memory is used.

  The processing for obtaining and storing the license ID and the computer specific information described above is performed under the control of the external medium access processing unit 13 and the computer storage area access processing unit 14 in the computer 1. When the software is activated, the computer storage area access processing unit 14 confirms that the license ID exists in the license ID storage area 161. When the computer unique information read from the computer unique information source 15 matches the computer unique information read from the computer unique information storage area 162, the activation of the software is permitted.

  Here, software installation and uninstallation processing performed by the external medium access processing unit 13 and the computer storage area access processing unit 14 included in the computer 1 will be described.

First, processing during installation work performed by the external medium access processing unit 13 will be described.
When the external medium access processing unit 13 detects that the hardware key 2 having the license ID storage area 211 and the computer specific information storage area 212 is connected at the time of software installation, the license is stored from the license ID storage area 211. Read the ID. Then, the external medium access processing unit 13 writes and reads the computer specific information corresponding to the read license ID in the computer specific information storage area 212.

  Specifically, the external medium access processing unit 13 reads the license ID in the license ID storage area 211 of the hardware key 2. The computer unique information storage area 212 is a place for storing the computer unique information paired with the license ID. If the computer unique information is already stored, the external medium access processing unit 13 does not permit the software installation.

  If the computer-specific information of the computer 1 on which the software is installed is not stored in the computer-specific information storage area 212 and there is a free space, the external medium access processing unit 13 reads the license read from the license ID storage area 211. In order to write the ID into the license ID storage area 161 of the computer 1, the license ID is passed to the computer storage area access processing unit 14. Further, the external medium access processing unit 13 reads out the computer specific information from the specific information source 15 via the computer storage area access processing unit 14 and writes the computer specific information into the computer specific information storage area 212 of the hardware key 2. .

Next, processing during uninstallation work performed by the external medium access processing unit 13 will be described.
The external medium access processing unit 13 reads the license ID from the license ID storage area 211. Next, the external medium access processing unit 13 passes the read license ID to the computer storage area access processing unit 14 for comparison with the license ID stored in the license ID storage area 161 of the computer 1.

  In addition, the external medium access processing unit 13 converts the computer specific information stored in the computer specific information storage area 212 into the computer storage area access processing unit 14 for comparison with the computer specific information included in the computer specific information source 15. To pass.

  After the external medium access processing unit 13 sends the license ID and the computer specific information to the computer storage area access processing unit 14, the computer storage area access processing unit 14 compares the license ID and the computer specific information. Thereafter, upon receiving an instruction signal for deleting the computer specific information stored in the computer specific information storage area 212 from the computer storage area access processing unit 14, the external medium access processing unit 13 stores it in the computer specific information storage area 212. Delete the computer-specific information. Thereby, the process at the time of uninstalling the software installed in the computer 1 corresponding to the license ID is completed.

  Next, processing during installation work performed by the computer storage area access processing unit 14 will be described.

  The computer storage area access processing unit 14 reads out the computer unique information from the computer unique information source 15, and writes the computer unique information into the computer unique information storage area 162 of the computer 1 after being encrypted. In addition, the computer storage area access processing unit 14 receives the license ID in the license ID storage area 211 read by the external medium access processing unit 13 and encrypts and writes it in the license ID storage area 161. The computer storage area access processing unit 14 then encrypts and writes the computer specific information read from the computer specific information source 15 into the computer specific information storage area 212 via the external medium access processing unit 13. With this process, the process at the time of software installation in the computer 1 is completed.

  Next, processing when the computer storage area access processing unit 14 starts software (business application) will be described.

  The computer storage area access processing unit 14 checks whether a license ID exists in the license ID storage area 161. If there is no license ID, the computer storage area access processing unit 14 stops the activation of the software (business application). When there is a license ID, the computer storage area access processing unit 14 reads out the computer specific information from the computer specific information storage area 162, and if it matches the computer specific information read from the computer specific information source 15, software (business application) Start up.

  Next, a description will be given of processing performed when the computer storage area access processing unit 14 performs software uninstallation.

  When the external medium access processing unit 13 detects the connection of the hardware key 2 when uninstalling the software, the computer storage area access processing unit 14 obtains the license ID of the license ID storage area 211 from the external medium access processing unit 13. Receive. If the license ID does not match the license ID read from the license ID storage area 161, the uninstallation is stopped.

  Further, the computer storage area access processing unit 14 matches the computer unique information read from the computer unique information storage area 162 with the computer unique information read from the computer unique information source 15, and the computer unique information read from the computer unique information storage area 212. If the information and the computer-specific information read from the computer-specific information source 15 match, uninstallation is permitted. However, if either one of the computer-specific information does not match, the computer storage area access processing unit 14 stops uninstalling the software.

  When these conditions are satisfied, the computer storage area access processing unit 14 deletes the license ID stored in the license ID storage area 161 and the computer specific information stored in the computer specific information storage area 162. At the same time, an instruction to delete the computer specific information stored in the computer specific information storage area 212 of the hardware key 2 is sent to the external medium access processing unit 13. The external medium access processing unit 13 deletes the computer specific information corresponding to the license ID of the software to be uninstalled written in the computer specific information storage area 212 in accordance with the deletion instruction signal.

  FIG. 2 shows a detailed configuration of the operation of the computer storage area access processing unit 14 described above.

  The computer storage area access processing unit 14 compares the license ID read from the hardware key 2 with the license ID read from the storage area 16, and reads the computer unique information read from the hardware key 2 and the computer unique information source 15. A data comparison / presence check unit 141 is provided for comparing the computer unique information and comparing the computer unique information read from the computer storage area 16 with the computer unique information read from the computer unique information source 15.

  In addition, the computer storage area access processing unit 14 includes a data writing / reading unit 142 that writes and reads a license ID and computer-specific information in the storage area 16 of the computer. Further, the computer storage area access processing unit 14 deletes the license ID and the computer specific information from the computer storage area 16 or deletes the computer specific information from the computer specific information storage area 212 of the hardware key 2. Part 143 is provided.

  Here, the data comparison / presence / absence confirmation unit 141 functions as an information confirmation unit for confirming whether a license ID exists in the license ID storage area 161. The data comparison / presence / absence confirmation unit 141 compares the computer unique information read from the computer unique information source 15 with the computer unique information read from the computer unique information storage area 162. The data comparison / presence check unit 141 has a function of comparing the computer unique information read from the computer unique information storage area 162 with the computer unique information read from the computer unique information storage area 212.

  The data writing / reading unit 142 writes the license ID read from the license ID storage area 211 to the license ID storage area 161, and stores the computer specific information read from the computer specific information source 15 into the computer specific information storage area 162 and the computer specific information storage. It functions as an information writing / reading unit for writing in the area 212. Further, the data writing / reading unit 142 reads out the computer specific information from the computer specific information source 15, reads out the computer specific information from the computer specific information storage area 162, and reads it from the hardware key 2 via the external medium access processing unit 13. It has a function of reading out the license ID and computer specific information.

  The data deletion unit 143 functions as a data deletion unit that deletes the license ID from the license ID storage area 161 and deletes the computer specific information from the computer specific information storage areas 162 and 212 when uninstalling the software.

Next, processing during software installation will be described.
The external medium access processing unit 13 confirms the availability of the computer specific information storage area 212 in the hardware key 2. Thereafter, the computer storage area access processing unit 14 reads the license ID in the license ID storage area 211 of the hardware key 2 from the external medium access processing unit 13 by the data writing / reading unit 142 and then to the license ID storage area 161. Write the read license ID.

  The computer storage area access processing unit 14 reads out the computer specific information from the computer specific information source 15 by the data writing / reading unit 142, and then outputs it to the external medium access processing unit 13 for writing to the computer specific information storage area 212. Similarly, the computer storage area access processing unit 14 reads out the computer specific information from the computer specific information source 15 by the data writing / reading unit 142 and then writes it into the computer specific information storage area 162. Thereby, the process at the time of software installation is completed.

Next, processing when starting up the software (business application) will be described.
First, the computer storage area access processing unit 14 uses the data comparison / presence checking unit 141 to check whether a license ID exists in the license ID storage area 161. Then, the data comparison / presence / absence confirmation unit 141 confirms whether the computer unique information storage area 162 matches the computer unique information of the computer unique information source 15. When the computer-specific information matches, the computer storage area access processing unit 14 permits the activation of software (business application).

Next, processing at the time of software uninstallation will be described.
The data comparison / presence / absence confirmation unit 141 reads the license ID in the license ID storage area 211 of the hardware key 2 from the external medium access processing unit 13. Similarly, the data comparison / presence check unit 141 reads the license ID in the license ID storage area 161, and checks whether the license IDs match and the license ID exists.

  Further, the data comparison / presence / absence confirmation unit 141 reads the computer specific information in the computer specific information storage area 212 of the hardware key 2 from the external medium access processing unit 13. Then, the data comparison / presence check unit 141 reads out the computer specific information from the computer specific information source 15. Then, the data comparison / presence / absence confirmation unit 141 confirms whether the computer unique information stored in the computer unique information source 15 matches the computer unique information storage area 162 and the computer unique information storage area 212.

  When the license ID matches the computer specific information, the software (business application) is uninstalled. Thereafter, the data deletion unit 143 deletes the license ID stored in the license ID storage area 161 and the computer specific information stored in the computer specific information storage area 162.

  At the same time, the data deletion unit 143 sends a deletion instruction signal for the computer specific information stored in the computer specific information storage area 212 of the hardware key 2 to the external medium access processing unit 13. As a result, the computer specific information is deleted from the computer specific information storage area 212, and the uninstallation of the software is completed.

  FIG. 3 shows an example of a screen when software (business application) is installed.

FIG. 3A shows a display example of a software (business application) setup screen.
The setup screen is displayed by the installer when the installation CD is inserted into a CD drive (not shown) included in the computer 1. The user can start installation of software (business application) by clicking the “Next” button by operating the mouse or the like.

FIG. 3B shows a display example of the license authentication screen.
Since the number of computers 1 that can be installed is determined, the license ID of the software (business application) installed in the computer 1 is authenticated. On this license authentication screen, an instruction to connect the hardware key 2 to the port 3 is displayed to the user.

  If the hardware key 2 is not connected to the port 3, the software (business application) is not installed and the process ends. On the other hand, when the hardware key 2 is connected to the port 3, license authentication is automatically performed. When the authentication is correct, software (business application) is installed by the installer.

4 to 6 show the flow of processing according to the present invention.
FIG. 4 shows the flow of processing when installing software (business application) in the computer 1.

  First, the external medium access processing unit 13 refers to the storage area of the hardware key 2 (step S1), and checks whether there is a license ID to which no computer specific information is assigned (step S2).

  When the computer unique information in the computer unique information storage area 212 is empty, the external medium access processing unit 13 uses the computer unique information read from the computer unique information source 15 of the computer 1 to be installed as the hardware key 2. The data is written in the free computer specific information storage area 212 (step S3). At the same time, the license ID read from the hardware key 2 and the computer specific information read from the computer specific information source 15 are written in the license ID storage area 161 and the computer specific information storage area 162 in the computer storage area 16 (step S4).

  After the above processing, the installer installs software (business application) (step S5).

  FIG. 5 shows the flow of processing when starting software (business application).

  First, the computer storage area access processing unit 14 refers to the storage area 16 of the computer and confirms whether the activation condition of the software (business application) is satisfied (step S11).

The first activation condition is that a license ID exists in the license ID storage area 161 (step S12).
The second activation condition is that the computer unique information of the computer unique information source 15 is equal to the computer unique information recorded in the computer storage area 16 (step S13).

  If the license ID does not exist in the license ID storage area 161 or the computer-specific information is different, the computer storage area access processing unit 14 ends the process without permitting the activation of the software (business application). On the other hand, if the license ID exists in the license ID storage area 161 and the computer-specific information matches, the computer storage area access processing unit 14 determines that the software (business application) has been properly installed, and the software The activation of (business application) is permitted (step S14).

  FIG. 6 is a diagram showing a flow of processing when software (business application) is uninstalled.

  First, the computer storage area access processing unit 14 refers to the hardware key storage area 21 and confirms whether the following three uninstallation conditions necessary for executing uninstallation are satisfied (step S21). .

The first uninstall condition is that the computer unique information of the computer unique information source 15 is equal to the computer unique information recorded in the hardware key storage area 21 (step S22).
The second uninstallation condition is that the computer unique information of the computer unique information source 15 is equal to the computer unique information recorded in the computer storage area 16 (step S23).
The third uninstallation condition is that the license ID stored in the hardware key storage area 21 is equal to the license ID recorded in the computer storage area 16 (step S24).

  If any one of the first to third uninstallation conditions is not satisfied, the computer storage area access processing unit 14 ends the process without permitting the uninstallation of the software (business application). On the other hand, when all of the first to third uninstallation conditions are satisfied, the computer storage area access processing unit 14 executes uninstallation of software (business application) (step S25).

  After the uninstallation, the computer storage area access processing unit 14 deletes the license ID and computer specific information stored in the computer storage area 16 (step S26). At the same time, the computer storage area access processing unit 14 deletes the computer specific information from the hardware key storage area 21 via the external medium access processing unit 13 (step S27).

  By performing such processing, the software (business application) can be uninstalled. For this reason, it becomes possible to newly install software (business application) to another computer 1 using the hardware key 2 from which the computer specific information is deleted from the storage area 21.

7 to 9 are explanatory diagrams showing an operation example of the computer 1 according to the present invention.
FIG. 7 is an operation example showing a procedure for installing software (business application) in the computer 1.

  In the hardware key storage area 21, a number of license IDs corresponding to the number of computers 1 permitted to be installed are stored in advance. The license ID and computer-specific information in this example are recorded in a table on a one-to-one basis. When the hardware key 2 is shipped, the computer unique information is not stored in the computer unique information storage area 212.

  When the hardware key 2 is connected to the port 3 of the computer 1, the computer storage area access processing unit 14 checks whether or not there is an empty space in the computer specific information storage area 212 of the hardware key 2. Cancel the installation.

  The external medium access processing unit 13 reads a usable license ID from the license ID storage area 211 of the hardware key 2. Whether or not the license ID can be used is determined based on whether or not the computer unique information corresponding to the license ID on a one-to-one basis is stored in the computer unique information storage area 212. Then, the external medium access processing unit 13 recognizes that the license ID corresponding to the blank area of the computer specific information that is not stored in the computer specific information storage area 212 can be used.

  The computer storage area access processing unit 14 reads the computer specific information from the computer specific information source 15. Then, the computer storage area access processing unit 14 combines the computer unique information and the license ID, which are encrypted for preventing duplication, together with the license ID described above, into the computer unique information storage area 162 and the license ID storage area of the computer 1. 161 is written.

  Similarly, the computer storage area access processing unit 14 writes the computer specific information read from the computer specific information source 15 as information corresponding to the license ID stored in the license ID storage area 211 of the hardware key 2. After the above process, the installer installs software (business application).

  FIG. 8 is an operation example showing an authentication procedure when the computer 1 starts software (business application).

  The computer storage area access processing unit 14 reads the stored license ID and computer specific information from the storage area 16 of the computer. If the license ID does not exist in the storage area 16, the activation of the software (business application) is stopped.

  When the read computer unique information matches the computer unique information of the computer unique information source 15, the computer storage area access processing unit 14 activates software (business application). At the time of starting the software (business application), the computer 1 uses only the license ID and computer specific information stored in the storage area 16 and the computer specific information read from the computer specific information source 15, and the hardware key 2 is not required. For this reason, nothing needs to be connected to the port 3 of the computer 1.

  FIG. 9 is an operation example showing a procedure for uninstalling software (business application) on the computer 1.

  First, the hardware key 2 is connected to the port 3 of the computer 1. Next, the computer storage area access processing unit 14 reads out the stored computer specific information from the hardware key storage area 21 via the external medium access processing unit 13. Then, the computer storage area access processing unit 14 compares the computer specific information read from the computer specific information source 15 with the computer specific information read from the hardware key storage area 21 and, if they do not match, cancels the uninstallation. .

  Similarly, the computer storage area access processing unit 14 reads out the stored computer specific information from the computer storage area 16, and cancels the uninstallation if it does not match the computer specific information of the computer specific information source 15. To do.

  Then, the external medium access processing unit 13 reads the license ID stored from the hardware key storage area 21. The computer storage area access processing unit 14 reads out the license ID stored in the storage area 16 of the computer. If the license IDs read out in this way do not match, the computer storage area access processing unit 14 stops uninstalling the software.

  When the license ID exists and the computer-specific information matches, the computer storage area access processing unit 14 uninstalls the software (business application). Then, the computer storage area access processing unit 14 deletes the license ID and the computer specific information stored in the computer storage area 16, and the external medium access processing unit 13 is the computer specific stored in the hardware key 2. Delete the information and complete the uninstallation.

  According to the computer 1 according to the first embodiment described above, the computer storage area access processing unit 14 checks the presence / absence of a license ID when using software. Then, the computer storage area access processing unit 14 acquires the computer specific information from the computer information source 15 again, and checks whether the computer specific information read from the computer specific information storage area 162 matches the reacquired computer specific information. . As described above, when the two conditions of the presence / absence of the license ID and the coincidence of the computer specific information are satisfied, the computer storage area access processing unit 14 permits the activation of the software (business application). This eliminates the need to connect the hardware key 2 to the port 3 when starting the software (the business application, and allows the port 3 to be freed for connection (use) of another device.

  Even if the user attempts to use the software maliciously, the license ID and the computer specific information stored in the storage area 16 of the computer are copied to the storage area of a different computer. Since the computer unique information stored in the computer unique information storage area 162 is different, the software (business application) cannot be started. Similarly, when the user removes the hard disk drive from the computer 1 with malicious intent, the software (business application) cannot be started because the computer-specific information is different.

  Also, the hardware key 2 stores in advance license IDs corresponding to the number of computers 1 permitted to be installed. Then, when installing the software, the hardware key 2 is connected to the port 3 of the computer 1. At this time, the computer storage area access processing unit 14 reads out the computer specific information from the computer specific information source 15. Then, the external medium access processing unit 13 accesses the hardware key 2, the computer storage area access processing unit 14 associates the computer specific information acquired from the computer specific information source 15 with the license ID, and the hardware key 2 is free. Write computer-specific information in the area.

  Further, the computer storage area access processing unit 14 writes the information having the same contents as the hardware key 2 (combination of the license ID and the computer-specific information corresponding) to the storage area 16 of the computer. As the computer specific information, information uniquely determined by the computer 1 is used.

  Here, the hardware key 2 uses an authentication medium that can read and write the stored license ID and computer-specific information, and further requires a password to access the hardware key 2. The license ID and computer specific information stored in the hardware key 2 are encrypted, and the information in the hardware key 2 cannot be easily read and written. As described above, since the license ID and the computer specific information are encrypted, it is impossible to rewrite the computer specific information with different computer specific information, and it is possible to prevent unauthorized use of software while improving security. be able to.

  Further, if computer specific information is assigned to all license IDs in the hardware key storage area 21, no further installation is permitted. Thereby, the number of installations can be limited to a predetermined number. As a result, the software cannot be installed on the computers 1 exceeding the predetermined number, so that the license ID can be easily managed.

  In addition, when transferring software to another computer, it is necessary to uninstall the software. At this time, when the hardware key 2 used at the time of installation is connected to the port 3 of the computer 1, the computer storage area access processing unit 14 transmits the computer unique information stored in the hardware key 2 and the hardware key 2. It is confirmed whether the computer unique information recorded in the computer 1 connected to the computer unique information of the computer unique information source 15 matches. Then, the computer storage area access processing unit 14 deletes the computer specific information stored in the hardware key 2 for the matching computer specific information via the external medium access processing unit 13. As a result, the license ID and the computer unique information associated with each other at the time of installation are deleted from the storage area 16, and the computer unique information corresponding to the license ID is made free in the hardware key storage area 21. The computer storage area access processing unit 14 also detects the license ID recorded in the computer storage area 16 and the computer unique information when the external medium access processing unit 13 deletes the computer specific information from the hardware key storage area 21. Delete information. For this reason, it is possible to install software on a computer different from the computer 1.

<Second Embodiment>
Next, a configuration example of the software management system 20 according to the second embodiment of the present invention will be described with reference to FIG. In the following description, parts corresponding to those in FIG. 1 already described in the first embodiment are denoted by the same reference numerals, and detailed description thereof is omitted.

FIG. 10 shows an internal configuration example of the software management system 20.
The software management system 20 includes a management server 4 that performs user authentication of the computer 1 connected via the LAN 5 and manages access from the computer 1. The management server 4 includes a server unique information source 41 that records second unique information (MAC address, private address, etc.) that uniquely identifies the management server 4. The second unique information is stored in the server unique information source 41 as “server unique information”. The server specific information source 41 and the computer storage area access processing unit 14 of the computer 1 are connected to each other via a communication interface (not shown).

  When installing the software, the computer storage area access processing unit 14 writes the license ID read from the license ID storage area 211 of the hardware key 2 in the license ID storage area 161 of the computer 1. The computer storage area access processing unit 14 writes the computer specific information read from the computer specific information source 15 in the computer specific information storage areas 162 and 212. Further, when the computer storage area access processing unit 14 reads the server specific information from the server specific information source 41 included in the management server 4 connected via the network, the computer storage area access processing unit 14 stores the server specific information allocated to the storage area 16 of the computer. Server specific information is written in area 163. Thereafter, the computer storage area access processing unit 14 performs control to permit installation of software.

  When the software is activated, the computer storage area access processing unit 14 confirms that the license ID is stored in the license ID storage area 161. In addition, the computer storage area access processing unit 14 checks whether the computer unique information read from the computer unique information storage area 162 matches the computer unique information read from the computer unique information source 15. Further, the computer storage area access processing unit 14 checks whether or not the server unique information read from the server unique information storage area 163 matches the server unique information read from the server unique information source 41. Then, when the license ID exists and the computer unique information matches the server unique information, the activation of the software is permitted. On the other hand, if the license ID does not exist or the computer unique information or the server unique information does not match, control is performed not to permit activation of the software.

  When uninstalling software, the computer storage area access processing unit 14 refers to the hardware key storage area 21 via the external medium access processing unit 13. Then, the computer storage area access processing unit 14 checks whether the computer unique information storage area 212 and the computer unique information read from the computer unique information source 15 match. In addition, the computer storage area access processing unit 14 checks whether the computer unique information read from the computer unique information storage area 162 and the computer unique information source 15 matches. Further, the computer storage area access processing unit 14 checks whether or not the license IDs read from the license ID storage areas 161 and 211 match. Further, the computer storage area access processing unit 14 checks whether or not the server unique information read from the server unique information storage area 163 and the server unique information source 41 matches. Then, the computer storage area access processing unit 14 permits software uninstallation when the license ID, the computer unique information, and the server unique information match. On the other hand, if any one of the license ID, the computer specific information, and the server specific information does not match, control is performed not to permit software uninstallation.

  In the second embodiment described above, the computer 1 can manage installation, activation, and uninstallation of software using the server unique information of the management server 4 in addition to the license ID and computer unique information. Therefore, the software operation can be managed only by the computer 1 connected to the network managed by the management server 4. Thereby, for example, when the computer 1 is a mobile type, even if the computer 1 is taken outside, the computer 1 is used as long as it is not connected to the management server 4 in a secure environment using a VPN (Virtual Private Network) or the like. The software cannot be operated. As a result, it is possible to avoid an illegal operation of the software and to improve security.

<Modification>
In the above-described embodiment, the example in which the hardware key 2 is connected to the port 3 of the computer 1 and the software is installed or uninstalled has been described. However, the present invention can be applied to other forms. For example, the license ID storage area 211 records license IDs for business establishments permitted to install software, and the computer-specific information storage area 212 has a 1: N relationship with respect to one license ID. N pieces of computer-specific information may be stored.

  Further, one license ID recorded in advance in the hardware key 2 may be used by a plurality of computers 1 across a plurality of offices. In this case, a plurality of hardware keys 2 are prepared as many as the number of establishments, and the license IDs stored in the license ID storage area 211 are made common.

  For example, assume that 100 computers 1 can use one license ID. At this time, 20 free spaces are provided in the computer specific information storage area 212 of the hardware key 2 stored in a certain business office, and 80 in the computer specific information storage area 212 of the hardware key 2 stored in another business office. An open area for the vehicle will be provided. In this way, an empty area is provided in the computer specific information storage area 212 for the number of computers 1 that use software at the office. In this way, when installing software (business application) at a plurality of business establishments, it is not necessary to reuse one hardware key 2 between the plurality of business establishments. For this reason, it is possible to efficiently install or uninstall software (business application).

  Further, a recording medium that records a program code of software that realizes the functions of the first and second embodiments described above may be supplied to the system or apparatus. It goes without saying that the function is also realized by a computer (or a control device such as a CPU) of the system or apparatus reading and executing the program code stored in the recording medium.

  As a recording medium for supplying the program code in this case, for example, a flexible disk, a hard disk, an optical disk, a magneto-optical disk, a CD-ROM, a CD-R, a magnetic tape, a nonvolatile memory card, a ROM, or the like is used. Can do.

  Further, the functions of the above-described embodiment are realized by executing the program code read by the computer. In addition, based on the instruction of the program code, the OS running on the computer performs part or all of the actual processing. The case where the functions of the above-described embodiment are realized by the processing is also included.

  Further, the present invention is not limited to the above-described embodiments, and it is needless to say that other various application examples and modifications can be taken without departing from the gist of the present invention described in the claims.

  DESCRIPTION OF SYMBOLS 1 ... Computer, 2 ... Hardware key, 3 ... Port, 4 ... Management server, 5 ... LAN, 13 ... External medium access processing part, 14 ... Computer storage area access processing part, 15 ... Specific information source, 16 ... Computer Storage area 20 ... Software management system 21 ... Hardware key storage area 41 ... Server specific information source 141 ... Data comparison / presence check unit 142 ... Data write / read unit 143 ... Data deletion unit 161 ... License ID storage area 162 ... Computer unique information storage area 163 ... Server unique information storage area 211 ... License ID storage area 212 ... Computer unique information storage area

Claims (6)

A first unique information source for storing first unique information for uniquely identifying the device;
A first license ID storage area for storing a license ID assigned to use the software;
A first unique information storage area for storing the first unique information read from the first unique information source in correspondence with the license ID;
An authentication medium having a second license ID storage area for storing the license ID and a second unique information storage area for storing the first unique information corresponding to the license ID when the software is installed. When it is detected that the license ID is connected, the license ID is read from the second license ID storage area, and the first unique information storage area corresponds to the read first license ID. A medium access processing unit for writing or reading the unique information;
Confirming that the license ID exists in the first license ID storage area, the first unique information read from the first unique information source and the first unique information read from the first unique information storage area. A storage area access processing unit that permits the activation of the software when the unique information of 1 matches ,
The storage area access processing unit reads the license ID read from the second license ID storage area by the medium access processing unit when the blank area exists in the second unique information storage area. 1 license ID storage area is encrypted and written, the first unique information read from the first unique information source is encrypted and written to the first unique information storage area, the first unique information source An information processing apparatus that encrypts and writes the first unique information read out from the information into the blank area in the second unique information storage area via the medium access processing unit, and permits installation of the software . When the medium access processing unit detects connection of the authentication medium when uninstalling the software, the storage area access processing unit reads the license ID read from the first license ID storage area and the medium. The first unique information and the first unique information source read from the first unique information storage area that match the license IDs read from the second license ID storage area via the access processing unit. The first unique information read from the first unique information matches, and the first unique information read from the first unique information source and the first unique information read from the second unique information storage area match. In such a case, the software is allowed to be uninstalled, and the uninstallation written in the second specific information storage area is permitted. The information processing apparatus according to claim 1, wherein the deleting the first unique information corresponding to the license ID of the software that. The storage area access processing unit
Check whether the license ID exists in the first license ID storage area, and read the first unique information read from the first unique information source and the first unique information storage area. Information comparing the first unique information and comparing the first unique information read from the first unique information source and the first unique information read from the second unique information storage area. A confirmation section;
The license ID read from the second license ID storage area is written into the first license ID storage area, and the first unique information read from the first unique information source is written into the first and second license information. Writing into the unique information storage area, reading out the first unique information from the first unique information storage area and the first unique information source, and passing the license from the authentication medium via the medium access processing unit An information writing / reading unit for reading the ID and the first unique information;
A data deletion unit that deletes the license ID from the first license ID storage area and deletes the first unique information from the first and second unique information storage areas when uninstalling the software; The information processing apparatus according to claim 2 . The storage area access processing unit writes second unique information that uniquely identifies the management server read from a management server connected via a network to a third unique information storage area, and starts the software. , with the second unique information read from the third specific information storage area, when the second unique information read from the management server matches, according to claim 3, wherein to allow activation of the software Information processing device. The authentication medium is a hardware key to be connected to or removed from the medium access processing unit, and the second license ID storage area records the license IDs for the number of pieces of software permitted to be installed. The information processing apparatus according to claim 3 , wherein the second unique information storage area has an area for storing N pieces of the first unique information having a 1: N relationship with respect to the license ID. . Confirming that a license ID assigned to use the software exists in the first license ID storage area when the software is activated;
Corresponding to the license ID, and the self information processing device stored in the first unique information storage area and a first unique information uniquely specifying the first that stores the first inherent information Confirming that the first unique information read from the unique information source matches the first unique information read from the first unique information storage area;
When the license ID exists and the first unique information read from the first unique information source matches the first unique information read from the first unique information storage area , the software ID and a step to allow the start-up,
An authentication medium having a second license ID storage area for storing the license ID and a second unique information storage area for storing the first unique information corresponding to the license ID when the software is installed. When it is detected that the license ID is connected, the license ID is read from the second license ID storage area, and the first unique information storage area corresponds to the read first license ID. Writing or reading the unique information; and
When there is a blank area in the second unique information storage area, the license ID read from the second license ID storage area is encrypted and written to the first license ID storage area, The first unique information read from one unique information source is encrypted and written into the first unique information storage area, and the first unique information read from the first unique information source is written to the second unique information source. A method of preventing unauthorized use of software , comprising: encrypting and writing to the blank area in the unique information storage area, and permitting installation of the software.

Images