JPH0744377A - Method and device for preventing circulating software from being forged - Google Patents

Abstract

PURPOSE:To provide the method for preventing a circulating software from being forged so as to make the forgery of the software difficult or to enable speedy countermeasures even when it is forged. CONSTITUTION:A certification program 92 is integrated into a presenting software 93 by a presenting means 1 and presented to a user together with a software ID as a ciphered part software 94 by using a public key A. When the software ID, person ID to be charged and ciphered part are transmitted from a terminal 3 for user through a network 7 to a center 9, a software user discovers a secret key B corresponding to the software ID at the center 9, the ciphered part is made into a plane sentence and transmitted to the terminal 3 for user, and the complete presenting software made into the plane sentence is prepared and started at the terminal. First of all, the certification software is operated by the start and when the certified result is normal, the main body of the presenting software is started.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a distributed software counterfeiting prevention method and device for making a fee and a fee collection for software use by an end user more flexible in a software distribution mechanism, improving distribution and preventing software forgery.

[0002]

2. Description of the Related Art Conventionally, software is a distribution form in which the substance of the software is given to its user and the right to use the software is sold. In this case, the software is purchased, so that there is no charge for use. It is possible.
Further, although forgery by the user of the software is not permitted, it is technically easy to illegally use the software by copying the software. In addition, in the conventionally proposed method of charging according to usage, a key for preventing forgery is not provided on the network side, and the same secret key is embedded in all software on the terminal side.

[0003]

The method of purchasing the substance of the software is risky and cannot be purchased easily if the software may be used only once or if the user does not like the result. Further, copying of software, which originally has the property of being easy to copy, is not allowed, which has been a major obstacle to software distribution and market expansion. In the conventional method of charging according to usage, there is only one private key (several at most), so in the unlikely event that the private key is leaked, all software (or considerable software) will use it. There was a possibility of damage. Further, since the private key is embedded in the terminal or the IC card, it is impossible to respond promptly even if a leak is discovered.

Further, the conventionally proposed method of charging according to use is a post-payment method of charging in real time through a network or collecting and charging after use history is used. When connecting, there is a problem that the network cannot be used when using the network, and in the post-payment method, there is a possibility that the usage history cannot be collected and all usage fees cannot be collected.

The present invention has been made in view of the above,
The purpose of this is to use the network to accurately charge according to the use of software,
It is an object of the present invention to provide a distribution software forgery prevention method and device that makes counterfeiting difficult and enables swift countermeasures even if it is counterfeited.

Another object of the present invention is to obtain credit by a prepaid method, to accurately charge according to the use of software, to make counterfeiting difficult, and to promptly deal with counterfeiting. Distributing software forgery prevention method and device.

[0007]

In order to achieve the above object, a distributed software forgery prevention method of the present invention is a distributed software forgery prevention method for preventing forgery of software at the time of distribution of the software. And a software user who has a terminal operating the software via a network, and the software ID and authentication information that is information for confirming that the software is not counterfeit in the center, and disclosure for preventing forgery. An authentication database storing a key A, a secret key B and a communication key is provided, and the operator of the center issues a software ID for uniquely identifying software provided by a software provider and a public key A of a public key cryptosystem. The software provider is the authentication software that certifies the provided software. Software is incorporated, and at least a portion including the authentication software is encrypted as an encrypted portion by using the issued public key A, and the encrypted user is provided with the information indicating the area of the encrypted portion and the software ID. Obtains the encrypted provided software directly or a copy from a third party from a software provider, stores it in a storage device of a terminal, stores the software ID, a preset payee ID for uniquely identifying the terminal, and When the encrypted portion is transmitted to the center via the network and the encrypted portion encrypted by the center is received, the encrypted portion received is replaced with the encrypted portion to complete the encrypted portion. Create the provided software, start the provided software, and start the authentication software first by the start. Then, the authentication software inputs the authentication information received from the center to authenticate the provided software, and if the authentication result is normal, the fact is transmitted to the center, and when the travel permission from the center is received, When the main body of the provided software is started, the operation of itself is terminated when the traveling is not permitted, and the center receives the software ID, the payee ID, and the encrypted portion from the terminal, the information of the authentication database Find the secret key B corresponding to the software ID using, and send the encrypted part to the terminal in plain text, and when the terminal receives the fact that the authentication result is normal, sends the travel permission, The main point is to terminate the communication to the terminal.

Further, the distributed software forgery prevention method of the present invention stores the encrypted portion, the authentication information, and the number of credits, which the software user has plain text if the authentication result is normal, in a storage device of the terminal, If you need
The plaintext encrypted part is taken out of the storage device and replaced with the original encrypted part to create a complete provided software, and the provided software is activated, and the activation causes the authentication software to initially store the software. Enter the authentication information to authenticate the provided software, and if the authentication result is normal, request credit and the number from the center,
When obtaining the approval, terminating communication, and using the provided software, the plaintext encrypted portion is taken out from the additional device or the terminal device and replaced with the original encrypted portion to obtain the complete provided software. The provided software is started, the authentication information stored in the authentication software is first input by the start, and the provided software is authenticated. If the authentication result is normal, the credit number is subtracted, the traveling is permitted, and the credit is given. If the number is 0, the gist is to prohibit the use of the provided software and delete the stored software ID, the plaintext encrypted part, and the authentication information.

Further, the distributed software forgery prevention apparatus of the present invention is a distributed software forgery prevention apparatus for preventing forgery of the software at the time of communication of the software, and there is a center having an operator and a software user to operate the software. A network connecting a user terminal, an authentication database provided in the center, which stores authentication information that is information for confirming that the software is not counterfeit, and an encryption key for preventing forgery, and software The software ID that uniquely identifies the software provided by the provider and the public key A of the public key cryptosystem are delivered, and the provided software includes the authentication software that authenticates the software or the key C that decrypts the data, and the delivered Using the public key A, at least the authentication software A part including software or a part including the key C as an encrypted part and providing the encrypted part with the information indicating the area of the encrypted part and the software ID, and the encrypted software in the authentication database. Using the plaintext means for finding the secret key B corresponding to the software ID and performing the plain culture, and the encrypted portion that has been plain culture using the plain culture means, is replaced with the original encrypted portion, and If it has been decrypted, it is decrypted with the key C to obtain complete provided software, the provided software is activated, and the authentication software is first operated by the activation, and the authentication software inputs the authentication information. Then, the provided software is authenticated, and if the authentication result is normal, the main body of the provided software is started, and if the traveling is not permitted, Is a terminal for a user or a device added to the terminal for a user in which a function of terminating its own operation is incorporated, and a center for receiving a fact that the authentication result is normal from the terminal and transmitting the travel permission to the terminal. Having it is the gist.

[0010]

In the distribution software forgery prevention method and device of the present invention, the center and the terminal are connected by a network, the center is provided with an authentication database storing authentication information and an encryption key for preventing forgery, and the center is software. The ID and the public key A of the public key cryptosystem are delivered, the software provider embeds the authentication software in the provided software, encrypts the part including the authentication software as the encrypted part using the public key A, and provides it with the software ID. , The software user obtains the encrypted software provided and sends the software ID, the payee ID and the encrypted part to the center via the network,
The center finds the private key B corresponding to the software ID, plain-texts the encrypted part, and sends it to the terminal. At the terminal, the encrypted part is replaced with the encrypted part to create the complete provided software. Then, the provided software is started, and the authentication software operates first by the start, and the authentication software inputs the authentication information received from the center to authenticate the provided software, and if the authentication result is normal, inform the center to that effect. When the center sends the information that the authentication result is normal from the terminal, the travel permission is transmitted, the communication to the terminal is terminated, and the terminal receives the travel permission from the center and the main body of the provided software is started. Then
If the vehicle is not allowed to travel, it terminates its own operation.

Further, according to the present invention, when the user uses the software of the terminal, the user is connected to the network and the encrypted portion is flattened on the network side and incorporated in the software by the terminal device, or the secret key is sent to the terminal device. Even if you use the copied software, you can properly charge for the use, because the authentication is performed based on the authentication information given from the network, even if the terminal side is flat culture. . Even if you try to forge the software by deciphering it, it cannot be deciphered in the provided state because the important part including the part that performs the authentication process is encrypted. Further, even if the program is stolen at the time of executing the software and the software ID is forged, if it does not match the authentication information on the network side at the time of authentication, it is not authenticated with the software and can be found in many cases.

By setting the private key for each software type (or setting the private key in software modules or smaller units if necessary), even if the private key is leaked, damage is limited to that software only. It Further, since the private key is managed by the DB on the network, if a leak is discovered, a version with the private key changed can be immediately distributed, so that damage can be minimized. Further, even if the software is forged by the leaked secret key, if it is not matched with the authentication information on the network side, the software is not authenticated, so that it can be found in many cases even if the contents of the software are illegally modified.

Even if the information flowing through the communication line is intercepted, the communication information is encrypted and the encryption key is changed for each communication. Therefore, even if the encryption key is unknown, the encrypted data on the communication path is reproduced as it is. Even if it is done, it is virtually impossible to fake the network side and the terminal side.

Further, according to the present invention, the encrypted portion is plainly written on the network side and incorporated in the software by the terminal device, or the secret key is sent to the terminal device and flattened on the terminal side. Since the authentication is performed based on the authentication information, even if the copied software is used, the usage can be properly charged. Even if you try to forge the software by deciphering it, it cannot be deciphered in the provided state because the important part including the part that performs the authentication process is encrypted. Further, even if the program is stolen and the software ID is forged at the time of executing the software, if it does not match the authentication information on the network side at the time of authentication, it is not authenticated with the software and can be found in many cases.

By setting a private key for each software type (or setting a private key in a software module or a smaller unit if necessary), even if the private key is leaked, damage is limited to only that software. . Further, since the private key is managed by the DB on the network, if a leak is discovered, a version with the private key changed can be immediately distributed, so that damage can be minimized. Furthermore, even if the software is forged by the leaked secret key, it will not be authenticated with the software unless it matches the authentication information on the network side, so even if the contents of the software are illegally modified, it can be found in many cases.

Even if the information flowing through the communication line is intercepted, the communication information is encrypted and the encryption key is changed for each communication. Therefore, even if the encryption key is unknown, the encrypted data on the communication path can be reproduced as it is. Even so, it is virtually impossible to fake the network side and the terminal side.

[0017]

Embodiments of the present invention will be described below with reference to the drawings.

FIG. 1 is a system configuration diagram for implementing a distributed software forgery prevention method according to a first embodiment of the present invention.

The system shown in FIG. 1 includes a providing means 1 which is a provider of software, a user terminal 3 for a user who uses the software provided by the providing means 1, and a distributed software forgery on the user terminal 3. It has a center 9 connected via a prevention additional device 5, a communication line and a network 7. The center 9 is provided with an authentication database (DB) 11, and the authentication database 11 has a software ID, billing information, and authentication information. , Public key, private key, communication key, etc.

The distribution software forgery prevention additional device 5 manages and controls various information between the user terminal 3 and the billing / authentication center 9, and as shown in FIG. Although it is composed of an ordinary computer, it is functionally represented by computer software, and as shown in FIG.
2, authentication unit 53, decryption unit 54, billing status display unit 5
5, IC card control unit 56 and the like. The control unit 51 has a payee ID, and the encrypted communication unit 52 has a communication encryption key.

In the distribution software forgery prevention method of the system configured as described above, first, the providing means 1 is provided.
The software provider encrypts the software to be provided for distribution and distribution, that is, the authentication program 92 part of the source providing software 93 including the software ID 91 and the authentication program 92 as shown in FIG. In order to receive the public key A from the billing / authentication operator of the center 9,
Source-provided software to be distributed using
The part of the software including the authentication program 92, which is the part that performs the authentication process of No. 3, is encrypted to create the encrypted part 94, and this is incorporated into the source-provided software, and the software ID 91 and the encrypted part program 95 The provided software 96 is created. The provided software 96 thus configured is distributed and distributed.

FIG. 3 shows the configuration of the provided software 96 at this time. The provided software 96 is an unencrypted plaintext program, a software ID 91 provided therein, and an encrypted part including the authentication process encrypted by the public key A of the public key cryptosystem as described above. It is composed of a program 95. The user of the user terminal 3 can freely copy the provided software 96.

On the other hand, in the authentication database 11 of the center 9, in addition to the software ID and the secret key B, as the authentication information, for example, a program scale used for authentication, a plurality of sets of specific addresses and values, and accounting information. Have been accumulated.

Next, referring to the flow chart shown in FIG.
The operation of the embodiment will be described. This operation is for the case where the private key of the public key cryptosystem is not transferred, and the case where the software is normal application software (AP) will be described.

First, when the user of the user terminal 3 wants to use the provided software 96 having the encrypted partial program 95 encrypted as described above, the user uses the user terminal 3 to provide the provided software 96. The software ID of the software and the payee ID for identifying the user are transmitted to the center 9 as shown in FIG. In this processing, when the user uses the user terminal 3 to supply the usage request and the software ID of the provided software from the user terminal 3 to the distributed software forgery prevention additional device 5, the distributed software forgery prevention additional device 5 The control unit 51 instructs the encryption communication unit 52 to transmit the software ID and the payee ID to the center 9, so that the software ID and the payee ID are distributed software forgery prevention additional devices. 5 to the center 9 via the network 7.

The payee ID is enclosed and stored in the ROM of the distribution software forgery prevention additional device 5 as shown in FIG. 2, but instead is stored in, for example, an IC card or the like. A user ID that is present, a terminal ID that is set in a terminal accessory device such as the additional device 5 for preventing distribution software forgery, or an ID that is a combination thereof can be considered.

Further, the user terminal 3 extracts the encrypted partial program 95 from the provided software, and the extracted encrypted partial program 95 is transmitted from the encrypted communication section 52 of the distribution software forgery prevention additional device 5 via the network 7. And sends it to the center 9 as shown in FIG.
It should be noted that information about which part of the provided software is the encrypted partial program 95 is obtained by a method such as writing in the directory part of the provided software.

At the center 9, the secret key B of the public key cryptosystem is retrieved from the authentication database 11 using the software ID of the provided software as a key, and the secret key B is used to encrypt the secret key B as shown by the box 410 in FIG. Flattening the program Then, the center 9 transmits the encrypted encrypted partial program via the network 7 to the encrypted communication unit 52 of the additional device 5 for preventing distribution software forgery.
Send to. In the distribution software forgery prevention additional device 5, the control unit 51 receives the encrypted encrypted partial program from the encrypted communication unit 52 and sends it to the user terminal 3.

In the user terminal 3, as shown by a frame 420 in FIG. 4, the plaintext encrypted partial program is incorporated into the original provided software to obtain the complete provided software.

At the same time, in the center 9, the software ID
Is used to retrieve the authentication information from the authentication database 11, and this authentication information is transmitted to the encryption communication unit 52 of the distribution software forgery prevention additional device 5 via the network 7. Control unit 5 of additional device 5 for preventing distribution software forgery
1 receives the authentication information from the encryption communication unit 52, supplies it to the authentication unit 53, and instructs it to authenticate the provided software using this authentication information. The authentication unit 53 uses the authentication information as shown by a frame 430 in FIG. 4 to compare the contents of the software and confirm whether the software matches. This confirmation is performed, for example, by confirming the program scale or the value at the specific address.

If the confirmation is normal, that is, if it matches the data of the authentication information, the authentication unit 53 authenticates the software with the software ID, and to that effect the control unit 5
Notify 1. The control unit 51 transmits the authentication information to that effect from the encryption communication unit 52 to the center 9 via the network 7.

The center 9 retrieves the billing information corresponding to the software ID from the database 11 and sends the billing information to the distributed software forgery prevention additional device 5 via the network 7. In the distribution software forgery prevention additional device 5, the control unit 51 receives the billing information from the encryption communication unit 52 and instructs the billing status display unit 55 to display the billing information.

The user of the user terminal 3 looks at the billing information displayed on the billing status display section 55 as described above, and if he / she agrees, inputs the confirmation information to the effect that the user terminal 3 agrees. . In this way, when the user's confirmation is obtained, the control unit 51 of the distribution software forgery prevention additional device 5 receives the confirmation information from the user terminal 3,
A billing request is transmitted from the encryption communication unit 52 to the center 9 via the network 7.

Upon receipt of the billing request, the center 9 stores the billing information and the payment information in the database 11, and thereby performs the billing process for the payee ID and the payment procedure for the software provider. Also,
The center 9 transmits the secret key C ′ for the next communication to the user terminal 3 via the network 7 and also issues the permission to run the software.

All the above-described communication between the distribution software forgery prevention additional device 5 and the center 9 via the network 7 is the key C of the secret key cryptosystem which is uniquely assigned to the terminal or IC card at the time of manufacture. The initial communication is encrypted using. Then, at the end of the communication, a new secret key C'is passed from the center 9 to the terminal side, and next time, the secret key C'is used for encryption.

Also, a function of requesting the provided software to be processed for billing / authentication, and in the case of non-permission, a function of stopping one's own running (this part is usually encrypted as an encrypted partial program). Existing)
The OS has a function of stopping the running of the provided software according to the running disapproval request from the billing / authentication device. The encrypted portion is for preventing the forgery of the function related to the charging / authentication processing executed by the provided software by encrypting.

FIG. 5 is a diagram showing a CD 71 used in the distributed software forgery prevention method according to the second embodiment of the present invention.

In the second embodiment, CD71 is used as software, and the CD71 and C shown in FIG. 6 are used.
A case where the distributed software forgery prevention method of the present invention is applied to the D player 61 will be described. In this case,
The software corresponds to data such as music information recorded on the CD 71, and the CD player 61 corresponds to the user terminal 3. As shown in FIG. 1, this CD player 61 is connected to a network 7 via a distribution software forgery prevention additional device 5, and is further connected to a center 9 from the network 7 and listens to music etc. recorded on a CD each time. , Y yen will be charged, for example.

The system configuration of the second embodiment is the same as that shown in FIG. 1, but the software provider, which is the providing means 1 in FIG. 1, becomes the CD provider,
The difference is that the software is a CD.

The CD provider uses the CD-ID 7 as shown in FIG. 5 as the song ID corresponding to the software ID.
2 is recorded on the CD 71, and the encrypted scramble key D shown in FIG. 5 in which the key D for scrambling the data of the CD is encrypted using the public key A of the public key cryptosystem is recorded on the CD 71. This encrypted scramble key D
Corresponds to the encrypted partial program. That is, the CD 71 shown in FIG.
A CD-ID 72 corresponding to D, an encrypted scramble key 73 corresponding to the encrypted partial program 95, and scrambled music information 74 that is data are recorded. The CD 71 as shown in FIG. 5 configured in this way
Will be distributed to users by the CD provider without restriction.

The CD player 61 shown in FIG. 6 has a CD player section 62 having the functions of a normal CD player.
And an authentication / billing function unit 63.

On the other hand, in the center 9, the authentication database 1
The secret key B, the authentication information, and the billing information are registered in No. 1 in correspondence with the CD-ID 72 which is the song ID. For example, the required authentication information in this case is information of a plurality of sets of data size, specific address and value, and the billing information is Y yen per use.

Next, referring to the flow chart shown in FIG.
The operation of the embodiment will be described. The second embodiment shows an example in which the secret key is transferred to the terminal side.

First, the user selects a CD 71 as shown in FIG.
6 plays the CD-ID 72, which is the song ID, from the CD as the software ID, and the software ID and payee ID (set in the CD player 61 or the IC card). ) Is transmitted from the encryption communication unit 52 of the distribution software forgery prevention additional device 5 to the center 9 via the network 7.

At the center 9, the CD-ID which is the song ID
Private key B from the authentication database 11 with 72 as a key
And sends the secret key B via the network 7 to the terminal side including the distribution software forgery prevention additional device 5 and the CD player 61.

In the CD player 61, as shown by a frame 720 in FIG. 7, the secret scrambling key D of the provided CD 71 is encrypted using the secret key B. It becomes possible to descramble by using this scramble key D.

In the center 9, the authentication database 1
1 retrieves the authentication information and sends C via network 7.
It is transmitted to the terminal side of the D player 61. CD player 61
Then, as shown by a frame 730 in FIG. 7, the authentication information is used to confirm the data amount of the CD data and the value of the designated address and the like. If the data matches the data of the authentication information, it is determined that the CD is the same as the CD indicated by the CD-ID that is the song ID, and the information indicating that the authentication has been normally performed is added from the CD player 61 for distribution software forgery prevention. Device 5
It is transmitted to the center 9 via the encryption communication unit 52 and the network 7.

At the center 9, the billing information corresponding to the CD-ID which is the program CD is retrieved from the database 11,
The charging information is sent to the CD player 61 via the network 7.
To the terminal side of. When the user of the CD player 61 sees this billing information and agrees, the billing request is transmitted to the center 9.

Upon receipt of the billing request, the center 9 carries out a billing process and enables playing of the CD.

The above-described communication between the distributed software forgery prevention additional device 5 and the center 9 via the network 7 is performed by all terminals or I terminals as in the first embodiment.
The first communication encrypted using the key C of the secret key cryptosystem uniquely assigned to the C card at the time of manufacture is performed.
Then, at the end of the communication, a new secret key C'is passed from the billing / authentication center 9 to the terminal side, and next time, this secret key C '
Is encrypted using.

Next, a third embodiment of the present invention will be described with reference to FIG.

FIG. 8 is a block diagram of a system for carrying out the distributed software forgery prevention method according to the third embodiment. The third embodiment relates to a prepaid distribution software forgery prevention method that employs a prepaid system as a charging method. The system configuration shown in FIG. 8 has a credit relationship for the prepaid system in the system configuration shown in FIG. The software ID, the authentication information, the secret key, and the number of credits, which are the information of the above, are different, and the distribution software forgery prevention additional device 5 provided in the user terminal 3 is shown in FIG. It differs from what is shown in 2.

That is, the additional device 5 for preventing distributed software forgery used in the prepaid distributed software forgery prevention method of the third embodiment shown in FIG. 9 is newly added to the device shown in FIG. In addition to having 57, the credit charge / subtraction unit 57 is supplied with software ID credit number information, and the authentication unit 53 is supplied with software ID prepaid authentication information.

In the prepaid distribution software forgery prevention method of the second embodiment, the software provider, which is the providing means 1, provides the software to be provided for distribution and distribution, that is, the software ID 91 and the authentication program as shown in FIG. To encrypt the portion of the authentication program 92 of the source software 93 that includes 92,
The billing / authentication center 9 provides the public key A of the public key cryptosystem, and the public key A is used to encrypt the authentication program 92, which is the part that performs the authentication process of the source providing software 93 to be distributed. Then, the encrypted partial software 94 is created, and this is incorporated into the source providing software to create the provided software 96 including the software ID 91 and the encrypted partial program 95. The provided software 96 thus configured is distributed and distributed.

Next, referring to the flow charts shown in FIGS. 10 and 11, the operation of the distributed software forgery prevention method when the user uses the provided software 96 having the encrypted partial program 95 in the prepaid system as described above Will be explained.

Before the user uses the software in the prepaid system, it is necessary to first charge the credit of the software to be used as shown in FIG.

That is, in FIG. 10, the user first inputs the software ID to be used and the credit use request from the user terminal 3 to the distributed software forgery prevention additional device 5. Then, the control unit 51 of the distribution software forgery prevention additional device 5 sends the payee ID in addition to the information, that is, the credit use request and the software ID, to the center 9 from the encryption communication unit 52 via the network 7. Send. Note that the payee ID is enclosed and stored in the distribution software forgery prevention additional device 5 as shown in FIG. When using an IC card, it may be enclosed and stored in the IC card.

Further, the control unit 51 of the distribution software forgery prevention additional device 5 takes out the encrypted portion 95 of the provided software from the user terminal 3 and sends this encrypted portion program from the encrypted communication unit 52 to the network 7. It transmits to the center 9 via.

In the center 9, the secret key B of the public key cryptosystem is extracted from the authentication database 11 by using the software ID, and the secret key B is used to flatten the encrypted part as indicated by a frame 810 in FIG. . Then, the center 9 transmits this plain-text encrypted partial program to the encrypted communication unit 52 of the distribution software forgery prevention additional device 5 via the network 7. In the distribution software forgery prevention additional device 5, the control unit 51 receives the encrypted encrypted partial program from the encrypted communication unit 52 and sends it to the user terminal 3.

In the user terminal 3, as shown by a frame 820 in FIG. 10, the plaintext encrypted portion is saved and incorporated into the original provided software to obtain the complete provided software.

At the same time, in the center 9, the software ID
10, the authentication information of the software is extracted from the authentication database 11 as indicated by a frame 830 in FIG. 10, and this authentication information is transmitted to the encryption communication unit 52 of the distributed software forgery prevention additional device 5 via the network 7. The control unit 51 of the distributed software forgery prevention additional device 5 receives the authentication information from the encryption communication unit 52, supplies the authentication information to the authentication unit 53, and instructs the authentication unit 53 to authenticate the provided software. In the authentication unit 53, a frame 84 in FIG.
As shown by 0, the authentication information is used to compare the contents of the software and check whether the software matches.

Using the authentication information, the authentication unit 53 compares the contents of the software and, if they match, authenticates that the software has the software ID. If the software can be authenticated, the authentication information is saved and Control unit 51
Send to. The control unit 51 transmits the authentication result to that effect from the encryption communication unit 52 to the center 9 via the network 7.

The center 9 retrieves the billing information corresponding to the software ID from the authentication database 11 and sends the billing information to the distributed software forgery prevention additional device 5 via the network 7. In the distribution software forgery prevention additional device 5, the control unit 51 includes the encryption communication unit 5
The billing information is received from 2, and the billing status display unit 55 is instructed to display the billing information.

When the user of the user terminal 3 sees the billing information displayed by the billing status display unit 55 as described above and agrees, the user terminal 3 needs confirmation information indicating that the user terminal 3 agrees. Enter the number of credits. In this way, when the user's confirmation is obtained, the control unit 51 of the distributed software forgery prevention additional device 5 receives the confirmation information and the credit amount from the user terminal 3, and then receives the confirmation information and the credit amount from the encryption communication unit 52 via the network 7. Then, the billing request and the number of credits to that effect are transmitted to the center 9.

Upon receipt of the billing request and the number of credits, the center 9 performs billing information processing corresponding to the number of credits and sends a credit permission to the distribution software forgery prevention additional device 5. In the distribution software forgery prevention additional device 5, the control unit 51 receives the credit permission from the encryption communication unit 52, and instructs the credit charge / subtraction unit 57 to set the number of credits. Further, the center 9 transmits the secret key for the next communication to the user terminal 3 via the network 7 and issues a travel permission to the software. When the encrypted communication unit 52 of the distribution software forgery prevention additional device 5 receives the secret key for the next communication, the communication is terminated.

The terminal side stores the number of credits received from the center 9 in the above-mentioned process, the encrypted part encrypted in plain text, the authentication information, and the billing information by means of software and hardware that do not leak.

The above-described communication between the distribution software forgery prevention additional device 5 and the center 9 via the network 7 is uniquely assigned to the terminal or the IC card at the time of manufacture, as in the above-described embodiments. The first communication encrypted using the key C of the secret key cryptosystem is performed. Then, at the end of the communication, a new secret key C'is passed from the charging / authentication center 9 to the terminal side, and next time, the secret key C'is used for encryption.

When the software is used, as shown in FIG. 11, the software and the user authenticated by using the plaintext encrypted portion, the authentication information, and the billing information stored on the terminal side as described above. If the user does not see the normal prepaid method, the user is authenticated in the same manner, and after confirming the charging information with the user, the credit is subtracted according to the charging information, and the software is permitted to use. When the credit is exhausted, all the stored plaintext encryption partial program, authentication information, and billing information are deleted. If there is no credit, the travel permit is not issued.

On the side of the center 9, according to this billing request, billing processing is performed for the payee ID.

[0070]

As described above, according to the present invention,
The center is connected to a terminal via a network, the center is provided with an authentication database that stores authentication information and an encryption key for preventing forgery, and the center issues a software ID and a public key A of a public key cryptosystem, The provider embeds the authentication software in the provided software, encrypts the part including the authentication software as an encrypted part using the public key A, and provides it with the software ID, and the software user obtains the encrypted provided software, The software ID, the payee ID, and the encrypted part are transmitted to the center via the network, the center finds the secret key B corresponding to the software ID, transmits the encrypted part in plain text, and transmits it to the terminal. Replace the encrypted part with the plain-text encrypted part to create the complete provided software, The provided software is started, and the authentication software operates first by the start, and the authentication software inputs the authentication information received from the center to authenticate the provided software, and if the authentication result is normal, sends the fact to the center. When the center receives the fact that the authentication result is normal from the terminal, the traveling permission is transmitted, the communication to the terminal is terminated, and when the terminal receives the traveling permission from the center, the main body of the provided software is started, When the vehicle is not allowed to travel, it terminates its own operation, so that malicious forgery damage can be minimized.

[Brief description of drawings]

FIG. 1 is a system configuration diagram for implementing a distributed software forgery prevention method according to a first embodiment of the present invention.

FIG. 2 is a diagram showing a functional configuration of a distribution software forgery prevention additional device used in the system of FIG.

FIG. 3 is a diagram showing a configuration of provided software used in the system of FIG.

FIG. 4 is a flowchart showing a procedure of a distributed software forgery prevention method of the system of FIG.

FIG. 5 is a diagram showing a CD used in the distributed software forgery prevention method according to the second embodiment of the present invention.

6 is a diagram showing a configuration of a CD player for the CD of FIG.

FIG. 7 is a flowchart showing a procedure of a distribution software forgery prevention method according to a second embodiment.

FIG. 8 is a system configuration diagram for implementing a distributed software forgery prevention method according to a third embodiment of the present invention.

9 is a diagram showing a functional configuration of a distribution software forgery prevention additional device used in the system of FIG.

10 is a flowchart showing a procedure at the time of credit charge in the distribution software forgery prevention method of the system of FIG.

11 is a flowchart showing a procedure when using software in the distributed software forgery prevention method of the system of FIG.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 Providing means 3 User terminal 5 Distribution software forgery prevention additional device 7 Network 9 Center 11 Authentication database 51 Control part 52 Cryptographic communication part 53 Authentication part 54 Cryptanalysis part 55 Charging status display part 57 Credit charge / subtraction part

Claims (10)

[Claims] 1. A distribution software forgery prevention method for preventing forgery of the software at the time of distribution of the software, wherein a center having an operator is connected to a terminal which has a software user and operates the software via a network. Is equipped with an authentication database that stores authentication information that is information for confirming that the software is not counterfeit and an encryption key for preventing forgery, and the center operator uniquely identifies the software provided by the software provider. The software ID for identifying the software and the public key A of the public key cryptosystem are delivered, the software provider incorporates the authentication software for authenticating the software into the provided software, and at least the authentication software is delivered using the delivered public key A. Encrypt the containing part as the encrypted part , The information is provided together with the information indicating the area of the encrypted part and the software ID, and the software user obtains the encrypted provided software directly or from a third party and stores it in the storage device of the terminal. Then, the software ID and the payee I set in advance for uniquely identifying the terminal
D, and the encrypted part is transmitted to the center via the network, and when the encrypted part is received in the center, the encrypted part is replaced with the received encrypted part. Complete provided software, start the provided software, the authentication software operates first by the start, the authentication software inputs the authentication information received from the center to authenticate the provided software, If the authentication result is normal, the fact is transmitted to the center, and when the travel permission from the center is received, the main body of the provided software is started, and if the travel is not permitted, the operation of itself is terminated, and the center The software ID, the payee I
When D and the encrypted portion are received from the terminal, the software ID is used by using the information in the authentication database.
When the private key B corresponding to is found, the encrypted part is plain-text-transmitted and transmitted to the terminal, and when the terminal receives the fact that the authentication result is normal, the travel permission is transmitted and the communication to the terminal is terminated. A method for preventing counterfeiting of distributed software, characterized by: 2. The software user does not send the encrypted portion to the center, and the secret key B is sent from the center.
And encrypts the encrypted part using the secret key B, and replaces it with the original encrypted part to create a complete provided software, and the center sends the software ID and the payee I.
When D is received, the private key B corresponding to the software ID is found using the information in the authentication database,
The distribution software forgery prevention method according to claim 1, wherein the distribution software is transmitted to a terminal. 3. The software provider encrypts the provided software with a key C, encrypts at least a portion including the key C for decrypting the encrypted software with the public key A, and uses the software. When the person receives the plaintext encrypted portion at the center, the person decrypts the provided software by using the plaintext key C.
Anti-counterfeiting method of the described distribution software. 4. The software provider encrypts the provided software with a key C, encrypts at least a portion including the key C for decrypting the encrypted software with the public key A, and uses the software. If the person does not send the encrypted part to the center and receives the secret key B from the center,
2. The distributed software forgery prevention method according to claim 1, wherein the encrypted part is decrypted using the secret key B, and the provided software is decrypted using the encrypted key C. 5. If the authentication result is normal, the software user stores the plaintext of the software ID, the encrypted part, the authentication information, and the storage device of the terminal. Requesting the number of credits, obtaining authorization, memorizing the number of credits, ending communication, and using the provided software, the plaintext encrypted part is taken out from the storage device and the original encrypted part Replace it with complete provided software, start the provided software, enter the authentication information stored by the authentication software at the beginning to authenticate the provided software, and if the authentication result is normal, set the credit number Subtract, allow running, and if the number of credits is 0, prohibit the use of the provided software and save the software. The method for preventing distribution software forgery according to claim 1, wherein the ID, the plaintext portion, and the authentication information are erased. 6. The software user does not send the encrypted part to the center, and the secret key B is sent from the center.
And encrypts the encrypted part using the secret key B, and replaces it with the original encrypted part to create a complete provided software, and the center sends the software ID and the payee I.
When D is received, the private key B corresponding to the software ID is found using the information in the authentication database,
The distribution software forgery prevention method according to claim 5, wherein the distribution software is transmitted to a terminal. 7. The software provider encrypts the provided software with a key C, encrypts at least a portion including the key C for decrypting the encrypted software with the public key A, and uses the software. 6. The person decrypts the provided software by using the plaintext key C when receiving the plaintext encrypted portion at the center.
Anti-counterfeiting method of the described distribution software. 8. The software provider encrypts the provided software with a key C, encrypts at least a portion including the key C for decrypting the encrypted software with the public key A, and uses the software. The person does not send the encrypted part to the center, receives the secret key B from the center, uses the secret key B to flatten the encrypted part, and uses the plaintext key C. 6. The distributed software forgery prevention method according to claim 5, wherein the provided software is decrypted. 9. A secret key of a secret key cryptosystem for encrypting communication contents between an operator of the center and a software user is registered before the first communication, and then immediately before the end of the communication. 9. The distributed software forgery prevention method according to claim 1, wherein another secret key is exchanged and registered, and the registered secret key is used for communication in the next communication. 10. A distribution software forgery prevention device for preventing forgery of the software at the time of communication of the software, and a network connecting a center with an operator and a user terminal for operating the software with a software user, An authentication database provided in the center, which stores the software ID, authentication information for confirming that the software is not forged, and a public key A, a secret key B, and a communication key for preventing forgery, The software ID that uniquely identifies the software provided by the software provider and the public key A of the public key cryptosystem are delivered, and the provided software includes the authentication software that authenticates the software or the key C that decrypts the data and is delivered. Using the public key A, at least the authentication software A providing means for encrypting a portion including a or a portion including the key C as an encrypted portion and providing the encrypted software with the information indicating the area of the encrypted portion and the software ID; and the encrypted software, the information of the authentication database. Using the plaintext means for finding the secret key B corresponding to the software ID and performing the plaintext, and the encrypted part obtained by the plaintext using the plaintext means,
When the original encrypted part is replaced and further encrypted, it is decrypted by the key C to be completely provided software, the provided software is activated, and the authentication software is first operated by the activation. The authentication software inputs the authentication information and authenticates the provided software. If the authentication result is normal, the function of activating the main body of the provided software and ending the operation of itself when traveling is not permitted is provided. Counterfeit distribution software having the built-in terminal for a user or an additional device for the user terminal and a center for receiving a fact that an authentication result is normal from the terminal and transmitting the travel permission to the terminal. Prevention device.