JPH10269078A - Software distribution method, server device and client device - Google Patents

Abstract

PROBLEM TO BE SOLVED: To enable a user to use and settlement of account of software in a safe and simple way, by transmitting previously an install list of software via a software provider and interpreting the list before it is downloaded by a personal computer, etc., of the user. SOLUTION: The software provider previously transmits an install list of software, and this list is interpreted before it is downloaded by a personal computer, etc., of a user. At the same time, an install list transmission part 15 of a server 1 that received a software transmission request from the user reads the install list corresponding to the designated one out of an install list store part 25 and sends it to a client terminal 2. A download program function part 32 of the terminal 2 receives the install list and processes it via a download request transmission part 321. Then the part 43 transmits the download request selected based on the install list to the server 1.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] The present invention relates to a software distribution system.

[0002]

2. Description of the Related Art With the spread of computers and computer networks, software can be distributed entirely electronically without using a conventional transaction form using cash or the like.

[0003] Today, with the rapid spread of the Internet, systems for electronically distributing and charging information such as programs have been widely used. The main requirements for distribution of software via a network such as the Internet are as follows: (1) Identify who is trying to obtain the software and securely charge (high security) Nature), (2) the software can make a copy relatively easily,
As countermeasures, there are software copyright protection (prevention of illegal copying) and (3) efforts to spread software containing viruses.

Conventionally, an authentication technique based on an encryption technique has been used as a charging mechanism on a computer network. For example, in the case of transmitting a credit card number using a computer network, it is difficult for others to steal the credit card number by eavesdropping on a communication line, so the credit card number has been encrypted and transferred.

[0005] Further, methods for preventing illegal copying have been considered. The most commonly used method is to apply some kind of encryption to the software so that only the person who has the key to decrypt the data (such as an encryption key or a password) can know the contents. However, this method also allows illegal copying of the software by illegally copying the password itself.

Further, since information such as programs is exchanged via a network, it is indispensable to tackle the spread of software including viruses. further,
Since a large amount of information is transmitted via a network, it is necessary to consider the effective use of communication resources in consideration of the line cost and the like.

[0007] In consideration of user's convenience, operations such as downloading a program or the like via a network and installing it on its own terminal are severe for those who are not accustomed to handling personal computers. In order to spread such a system widely, it will be required that the specification be such that it can be easily operated without knowledge of a personal computer and communication.

In the sale of electronic information via a network, it is impossible to return the product if the purchased product is unsatisfactory. Also, if it is possible to easily respond to software version upgrades via a network, the user's trust in the seller will increase, the willingness to purchase the software will increase, and the system will be widely used.

[0009]

As described above, the conventional software distribution system has a problem that the user's convenience, network response, software piracy, and the like are not sufficiently considered. there were.

According to the present invention, various procedures, such as an instruction to purchase software provided via a network, an instruction to install the software, and an occasional software upgrade, are set in a simple manner, so that the user can use the method in a safe and convenient manner. It is an object of the present invention to provide a software distribution system that enables the use and settlement of software.

[0011]

[Means for Solving the Problems]

(1) A software distribution method according to the present invention is a software distribution method in which a software provider provides designated software to a user via a network. A software request for requesting the provision is transmitted to the software provider, and installation information of a plurality of files corresponding to the software specified by the software request is collected from the software provider's device to the user. Transmitting, the device on the user side selecting a file to be requested with reference to the plurality of installation information, transmitting a download request for requesting the selected file to the software provider, Download information including the file indicated in the download request Sends, apparatus of the user side, characterized in that the installation of the file according to the download information.

According to the present invention, since the installation information (for example, an installation list) of a plurality of files is sent from the software provider (server), the user's device (client terminal) is automatically required from the information. It is possible to select things and request only what is needed from the server. Then, a necessary file is installed in accordance with the download information sent from the server (for example, an installation method may be included in addition to the requested file).

The installation information includes, for example, a file name, and can automatically request a file other than a file already existing on the user side. Therefore, it is possible to prevent the same file from being downloaded twice, resulting in a double billing, without bothering the user.

The installation information may include, for example, file version information, and it is possible to automatically request a newer version than the version already existing on the user side.

The installation information may include, for example, information on the size of the file, and a request is made only for a file having a sufficient capacity to store the file in the storage capacity of the device on the user side. You can also.

(2) The device on the software provider side and the device on the user side store a shared key shared by the software provider and the user, and the device on the user side sends the download request The software provider may transmit the download information in association with the shared key, and check the validity of the download request using the shared key stored in the own device.

In this case, the server can permit the download only when the validity of the download request (for example, the request from the user who can settle the software fee) is confirmed.

(3) The device on the software provider side and the device on the user side store a shared key shared between the software provider and the user, and the device on the software provider side
The download information is transmitted in association with the shared key, and the user device checks the validity of the download information using the shared key stored in the own device, and then installs the file. Is also good.

Thus, the client terminal can execute the installation only when it is confirmed that the information is download information from a legitimate server (for example, it can be determined that no virus is contained).

(4) When transmitting a software request, the device on the user side transmits the result of environment determination on the user side related to the installation of the software (for example, what OS of the client terminal is). At the same time, the software provider device may transmit a plurality of pieces of installation information having different contents according to the environment determination result.

(5) The software provided by the software provider is composed of an active function unit that can operate independently and a passive function unit that can be operated by being incorporated in the active function unit. When the file indicated in the download request from the user includes a file corresponding to the passive function unit, the device on the side charges the file corresponding to the passive function unit and responds to the charge for the active function unit. It is also effective to provide files free of charge.

According to this, for example, a trial version of software is first provided to the user as an active function unit free of charge, and if the user likes it, a passive function unit for realizing the function as a regular product is provided for a fee. can do.

(6) In order to perform charging in the present invention,
The device on the software provider side and the device on the user side store the shared key shared between the software provider and the user, and the device on the software provider side includes a paid part in the download information to be transmitted. If the download information is included, the paid part or all of the download information is encrypted and transmitted using the shared key, and the apparatus on the user side decrypts the download information using the shared key stored in its own apparatus. The installation may be performed by using At this time,
It is preferable that the shared key stored in the device on the software provider side and the device on the user side is a shared key that is guaranteed to be associated with the identification information related to the settlement of the software fee of the user.

In this way, at least the paid portion of the software to be provided is stored as encrypted when downloaded to the client terminal, and is decrypted unless the shared key shared with the server is possessed. Can not.

(7) If it is assumed that the association between the shared key and the identification information related to the payment is guaranteed in advance, a credit card number or the like having high security is transmitted from the client to the server every time the software is purchased. This eliminates the need to do so, ensuring safety.

If the above-mentioned shared key is encrypted based on code information uniquely defined for each client terminal and stored in the client terminal, files and shared keys can be simply copied illegally. Even if the code information cannot be obtained, the software cannot be executed, so that it is possible to cope with illegal copying of the software.

(8) The device on the software provider side is:
When one file is divided and provided as a plurality of download information, the installation information of the file may be transmitted together with information on division.

In this way, for example, when the line is cut off when a large file is downloaded halfway, a part of the plurality of divided data is present in the client terminal, and the divided plurality of data is present. It is also possible to request only a nonexistent portion of the data from the server by a download request.

(9) At least one of a program for transmitting the download request and a program for performing installation in accordance with the download information, which is provided in the device on the user side, has its own version information. When transmitting a plurality of pieces of installation information, the device on the software provider side also transmits version information recommended for these programs on the user side, and the device on the user side transmits the download request. Prior to the transmission or installation of the program, the user may request the software provider for information necessary for upgrading these programs themselves.

(10) The present invention is a server device (a device on the side of the above-mentioned software provider) for providing designated software to a client terminal via a network, wherein the server device is designated by a software request received from the client terminal. Installation list that describes the installation information for multiple files corresponding to the software
An installation list transmitting means for transmitting to the client terminal, a download request indicating the required file selected by the client terminal, so that the client terminal can select a required file from the plurality of files, and And download information transmitting means for transmitting the download information including the file shown in (1) to the client terminal so that the client terminal can install the file according to the download information.

(11) The present invention relates to a client device (device on the user side) that uses software provided from a server via a network, the software being used to request provision of designated software. Means for transmitting a request to the server, and an installation list describing installation information of a plurality of files corresponding to the software specified by the software request is received from the server, and the received installation list is referred to. Select the file to request
Download request transmitting means for transmitting a download request for requesting the selected file to the server;
Download information receiving means for receiving download information including a file indicated by the download request from a server, and installing the file in accordance with the received download information.

[0032]

DESCRIPTION OF THE PREFERRED EMBODIMENTS One embodiment of the present invention will be described below with reference to the drawings. FIG. 1 shows an overall configuration of a software distribution system using a software distribution method according to the present invention, and mainly includes a server 1 for selling software and a client terminal 2 for purchasing software. , For example, connected via a network such as the Internet.

The software distribution system shown in FIG.
This is a system that distributes software safely and easily to users electronically and charges the distributed software. That is, the user accesses the server 1 via a network using, for example, a browser of the own terminal (client terminal) 2 and transmits a request for purchasing desired software. The server 1 transmits the requested software to the client terminal. In this case, the user can purchase and install the software simply by operating the mouse of his / her own terminal.

A user who wishes to use the software distribution system shown in FIG. 1 first starts the joining software on his / her terminal (for example, a personal computer) 2. The enrollment software (hereinafter sometimes simply called enrollment software)
Mainly, predetermined system settings and user registration with the server 1 are performed at the client terminal 2. In this embodiment, since the server is described as one, it is described as "enrollment" or "user registration" to the software provider's site on that server, but generally, a plurality of servers are accessed. be able to. In this case, a shared key is managed for each server used.

The enrollment software is stored in advance in the enrollment software storage unit 22 of the server 1 and, in response to a request from the client terminal 2, the enrollment software download function unit 1
1 is downloaded to the client terminal 2 via the network and installed on the client terminal 2 at the same time.

The enrollment software function unit 31 is a function unit that is installed in the client terminal 2 so as to be set in an executable state on the client terminal 2 and execute the function of the enrollment software.

The membership software may be distributed to users in advance on a recording medium such as a CD-ROM. When the enrollment software function unit 31 is activated, first, predetermined system settings are performed.

Next, user registration with the server 1 is performed. First, when transmitting and receiving highly secure information (for example, credit card number, authentication information, etc.) with the server 1, key data (session key, shared key, etc.) for encrypting / decrypting them Is generated, a predetermined encryption process is performed on the generated key data, and the shared key is stored in the information file 34.

Further, in accordance with the procedure displayed on the client terminal 2, the user inputs his / her name, address, credit card number, expiration date of credit card, personal information such as age, date of birth, etc. After being encrypted using an encryption key determined in advance with the server 1, it is transmitted to the server 1 via the network.

The membership software receiving function unit 12 of the server 1
, Upon receiving the encrypted personal information and key data, it decrypts it using a predetermined encryption key,
Then, a credit inquiry is made with the card company through No. 3 and, if the credit can be obtained, the process of writing and registering personal information and key data in the personal information file 24 via the database registration unit 14 is completed.

When the user registration is completed normally and the client terminal 2 receives the notification, the user installs a program to be started, that is, a download program 35 when purchasing the software. That is, the download program 35 is downloaded together with the enrollment software, and is spit out from the enrollment software function unit 31 and is downloaded to the client terminal 2.
Installed in

The download program function unit 32 is installed in the client terminal 2, loaded on a memory and activated, and
Is a functional unit that is set to be executable and executes the function of the download program. In the executable state, the download request transmitting unit 321 and the download information receiving unit 322 can function.

When the enrollment software function unit 31 installs a download program, a setting for automatically starting the download program is made. This setting is performed, for example, by determining predetermined identification information (here, Content-type: Application) from the header portion of the data received by the client terminal 2.
(n / ABC) is set by registering a predetermined file so that the download program is activated when the n / ABC is detected.

With the above, the user registration using the functions provided in the joining software is completed. Next, each functional unit of the software distribution system when a user downloads desired software from the server 1 will be described.

First, a user accesses the server 1 by activating a browser of the client terminal 2 and operating a mouse, for example, and requests desired software. Specifically, the software request transmission unit 39 transmits a software provision request to the install list transmission unit 15. At this time, information on the environment setting for the personal computer may be transmitted together.

In response to the transmission request, the install list transmitting unit 15 of the server 1 installs the install list corresponding to the software designated by the user (a list describing which files are to be installed and how).
Is read from the install list storage unit 25 and transmitted to the client terminal 2. At this time, if the environment setting information is obtained, the installation list is changed and transmitted accordingly.

When the download program function unit of the client terminal 2 receives the install list, the download request transmitting unit 321 processes it and transmits a request (download request) selected based on the install list to the server 1. The installation list contains the necessary files, versions, installation destinations, sizes, registration information in the registry, programs to be executed at the time of installation, etc. regarding the software requested by the user, and makes a judgment based on that. I do. For example, if the user already has the latest version of the file, the download request for the file is omitted.

When the user has a file but the version is old, a download request is required. At this time, it is preferable to send version information of the file owned by the user. This is because the server side can use the information and select to transmit small-sized patch information instead of transmitting the latest file.

In response to a request from a client terminal, the download information transmitting section 16 of the server 1 reads a file from any of the core software storage section 26, the passive function file storage section 27, and the library storage section 28, and reads the personal information file. If it is confirmed that the user is a registered user by referring to the personal information stored in the storage unit 24,
The read file is transmitted to the client terminal 2.
At this time, data compression and data encryption are performed if necessary. When the file requested from the client terminal 2 is the one to be charged, a predetermined charging process is performed with reference to the personal information stored in the personal information file storage unit 24.

The simplest method of confirming that a user is a registered user is to save a shared key shared between the software provider and the user in advance and use the information. This will be described in detail later. In this case, for example, any check relating the transmitted request to the shared key may be performed, for example, a hash value using a one-way function may be added. For these authentication methods, known general methods may be used.
Also, the key used for authentication does not necessarily need to be a shared key.

The download program being executed on the client terminal 2 is installed when the download information receiving unit 322 receives the download information from the server 1 and there is no error. At this time, authentication is also performed by using a shared key as described above, and it is possible to prevent, for example, damage such as downloading of software containing a virus from a fake server.

The core software function unit 33 is set in an executable state on the client terminal 2 by installing the software downloaded from the server 1 on the client terminal 2 to realize a predetermined information processing function. In the function section, the core software 36 installed in advance has a regular function by incorporating the passive function file 37 at the time of activation.

The program to be downloaded may be a general-purpose program other than the core software and the passive function unit, and is downloaded from the server 1 as the library 38.

In the installed information storage unit 101,
Information (file name, version information, size, etc.) relating to the files constituting the core software 36 and the passive function unit file 37 downloaded from the server 1 to the client terminal 2 and installed therein is registered.

The software as a product is composed of an active function file and a passive function file, as will be described later. The passive function file is encrypted and downloaded from the server 1 and remains encrypted. It is stored in the client terminal 2.

When the core software function unit 33 is started, the installed information storage unit 101 is searched to check whether or not the passive function unit file is installed. When a related passive function unit file is installed, the encrypted passive function unit file is decrypted, and a regular operation is executed by incorporating the decrypted passive function unit file.

Next, an example of the flow of key data used in the software distribution system of FIG. 1 will be described with reference to FIG. Also, as necessary, FIG. 3 showing an example of a data flow at the time of user registration is referred to.

The random number generation unit 51 provided in the joining software function unit 31 generates a shared key 61 shared by the server 1 and the client terminal 2 with a random number. This shared key 6
1 is used to prevent software piracy. For example, a DES (Data Encrypti) is used by using a product ID unique to each client terminal 2.
on the Standard) and stored in the information file storage unit 34 as a key file 52.

If it is possible to set the password 62 at the client terminal 2, the password 62 is hashed using the shared key 61, and the output is hashed to the purchase key 63.
And The purchase key 63 is used for user authentication when purchasing a product (software). If there is no password, the shared key 61 may be used as the purchase key 63 as it is.

The random number generation section 51 generates a session key 64 and a shared key 61 at the client terminal 2 at the time of user registration. The session key 64 is used when encrypting personal information and key data (shared key 61, purchase key 64) using a secret key encryption method such as DES at the time of user registration (see FIG. 3). At this time, the session key 64 is also
RSA (Rive) using a public key 65 predetermined with a software seller included in the enrollment software
(st-Shamir-Adleman) and transmitted to the server 1 after being encrypted by a public key cryptosystem.

The server 1 transmits the encrypted personal information and key data (shared key 6) transmitted from the client terminal 2.
1. When the purchase key 63) receives the session key,
Decrypts the encrypted session key 64 with RSA,
The personal information and key data encrypted using the decrypted session key 64 are decrypted by DES. Thereafter, the session key 64 is discarded.

The server 1 stores the decrypted personal information and key data in the personal information file 24 and performs a credit inquiry based on the personal information (FIG. 3).
reference).

At the time of the credit inquiry, the client terminal 2 may be reconfirmed on another route as necessary. FIG. 4 shows a storage example of personal information stored in the personal information file 24. As shown in FIG. 4, key data (shared key, purchase key) sent from each user's client terminal 2 is associated with personal information such as a credit card number, name, address, and the like, and stored in the order of user registration. It is supposed to be.

The information stored in the personal information file 24 is used for user authentication when each registered user purchases software as a product, credit inquiry to a credit card company, and billing processing for software. Referred to.

FIG. 5 illustrates the flow of key data used in the software distribution system of FIG. 1 and the flow of data when a user downloads product software from the server 1.

Among the product software downloaded from the server 1 to the client terminal 2, the core software is
It is not encrypted and is installed at the same time as the download on the client terminal as described above.

On the other hand, when downloading the passive function unit file, the server 1 first performs a predetermined authentication process and a charging process for the user who has requested the software transmission, and then shares the file with the user. The designated passive function unit file is encrypted using the key 61 and downloaded to the client terminal 2.

Upon receiving the encrypted passive function unit file, the client terminal 2 stores it in a predetermined area (the encrypted software storage unit 41 (see FIG. 7)). When the core software is started, the core software first
Encrypted shared key 6 stored in key file 52
1 is decrypted by using the product ID 67, the passive function unit file is decrypted by using the decrypted shared key 61, and this is incorporated.

Now, the features of the product software downloaded by the software distribution system according to the present embodiment will be described. FIG. 6 schematically shows the configuration of the product software. As shown in FIG. 6, the product software is roughly divided into core software (active function unit file) 36 and passive function unit file 37.

The core software 36 is a so-called trial software of a function / period limited version provided free of charge and operable independently. The passive function unit file 37 is provided in response to a request from the user, and is used for releasing the limited period of the core software 36 already distributed and adding functions (including version upgrade). It does not operate by itself, but can be incorporated into core software and operate.

The passive function unit file 37 is charged in principle, is encrypted and distributed to the client terminal, and is a data file or a program file stored in the client terminal while being encrypted.

The core software 36 is usually composed of a plurality of files, is large in size, and the passive function unit may be considered to be relatively small in size. FIG. 7 is a schematic diagram for explaining functions of the core software.

Even if the core software 36 is installed on the client terminal 2, it does not operate completely as it is. The function can be added by decrypting and adding the encrypted passive function unit file 37 to this.

That is, even if a person who does not have the authority to decrypt the passive function unit file 37 executes it, not all functions operate. When the core software 36 is started, first, the installed information storage unit 101 is searched to check whether a passive function unit file related to the core software is installed. When the associated passive function unit file is installed, the encrypted passive function unit file is stored in the encrypted software storage unit 41.
And decrypted by the software decryption unit 36a with the shared key 61, and stores the resulting decrypted passive function file 37 in the decryption software loading unit 36b.
At this time, if the shared key 61 cannot be obtained, correct data is not stored in the decryption software loading unit 36b.

The core software 36 confirms that the passive function unit file 37 arranged here is correct data. The method of confirmation is, for example, a method of checking that the passive function unit file 37 stored here is equal to the data scheduled by the core software (correctly decoded), and a method of checking the passive function file stored here. A typical method is to execute the unit file 37 itself as a program.

As described above, by distributing the product software separately to the core software and the passive function unit file, there are the following advantages. First, only the paid portion of the product software can be sold as a passive function file. For example, the core software is a word processor having a limited printing function and communication function, and the printing function and the communication function are sold as paid software. By using this method, for example, instead of transmitting the software from the server 1 every time the software is purchased, the core software is distributed free of charge on a medium such as a CD-ROM or an electronic bulletin board which can be obtained and referenced by anyone. If you like it, you can buy the paid part.

In the case of conventional mail-order sales, there is a cooling-off system due to the restriction that goods cannot be checked.
In the case of formless software, it is impossible to return what you have purchased. Therefore, by having the customer use the core software as a trial version first, it is possible to prevent the disadvantage of the customer due to the inability to cool off. After actually trying it, you can purchase additional functions (passive function file) for a fee only if you like. In addition, since this additional function can be set not only one but also a plurality, two functions, “paid” and “free”, can be used.
It is possible to buy not only the type but also the necessary parts at the appropriate price (it prevents unfair distribution of unnecessary functions being bundled and sold).

Next, the amount of data required for encryption and decryption can be reduced. In general, encryption and decryption calculations take time proportional to the amount of data, so if a very large size software is encrypted and sold each time, it takes time to purchase (download) or execute (decrypt) It takes time, so it is necessary to make the part that needs to be encrypted as small as possible.

The fact that the data amount can be reduced means that the communication line may be thin. In other words, if the communication line between the store and the customer for purchasing the paid passive function unit is slow, it generally takes time to download, but only the core software is distributed on CD-ROM, If you get it through a high-speed network, you only need to get a small encrypted passive function file, and your purchase will take less time.

Further, it can be used as a measure against illegal copying. That is, in the client terminal 2,
The shared key 61 used for decrypting the passive function unit file takes a form of being encrypted and stored by the product ID 67, and the decrypted passive function unit file is stored in the memory when the core software 36 is executed. Since it only exists, the key file 52, the core software 3
6. Even if all of the encrypted passive function file 37 is copied, it is impossible to execute the illegally copied software unless the product ID is obtained. In addition, it is difficult to analyze software's operating mechanism to create pirated copies, and it is not worth the effort to make pirated copies.

For example, if the software to be sold is a book, it is finally converted into character string data in a format that can be read by a computer or the like on the memory, so that it is relatively easy to steal the data from the memory. Can be done.
However, the core software 36 may be set as “software for reading books,” and the individual software (books), which is a paid additional function, may be read as a passive function unit file, and the contents may be displayed on a screen. it can. In this case, if the core software 36 is configured to decrypt and display necessary data (encrypted data) as needed, it becomes extremely difficult to read all the data (characters) of the book at once.

The decrypted passive function unit file is
Since the core software 36 is only present on the memory when it is executed, the procedure for using the encryption software by the core software 36 is complicated, so that it is very troublesome to decrypt the sold software. Get bigger,
Increases safety.

Generally, software sold on the network is frequently updated,
Often it is something that is only temporarily worthwhile (for example, a weather forecast), and it is much more costly to pay for the software and pay for it correctly than to focus on making pirated copies of the software. Because it is cheaper, there is no point in doing illegal activities, and fair distribution of software is promoted.

Next, referring to FIG.
A more detailed processing procedure when downloading desired software from, that is, a processing procedure of the download program function unit 32 will be described.

The user activates, for example, a browser of the client terminal 2 and operates the mouse to operate the server 1.
And requests the server 1 for desired software. At this time, a file in which the contents of the result of the automatic environment determination executed in advance in the client terminal 2 are also transmitted to the server 1 (step S1).

At the server 1 receiving the transmission request, the installation list transmitting section 15 of the server 1 installs the software corresponding to the software specified by the user (a list describing which files are to be installed and how).
Is read from the install list storage unit 25 and transmitted to the client terminal 2 (step S2).

FIG. 9 shows an example of the data structure transmitted from the server 1, which is mainly composed of a header part and a data part. The header section includes identification information 71 (Content
t-type: Application / ABC), and when the client terminal 2 detects this identification information 71, the download program is automatically started (this setting is made by the joining software function unit 31).
Is done when installing the download program).

In the data section, for example, an installation list is inserted here. As shown in FIG. 9, the installation list includes the latest version (Download-version) of the download program, the address information of the server 1 (for example, URL), and a plurality of “instructions”.
Consists of

The "instructions" are for informing the download program what function has been selected when the user clicks the mouse. For example, as shown in FIG. There is an installation instruction (for core software or passive function) that describes whether to install. FIG. 11 shows a specific example of the installation command shown in FIG.

The meaning of the installation command shown in FIG. 11 is “file name: dic2 of version 1 of MT”.
Revision 3 of the function is required, which is divided into three and transmitted. The first and second transmission amounts are 512 Kbytes, and the third transmission amount is 139 Kbytes. When the three files are concatenated and decompressed after compression, the file becomes 7439 Kbytes. ". Thus, FIG.
By the installation instruction shown in (1), the software can be divided and downloaded. In addition, in the division designation field of FIG. 10, if n = 1, batch download can be designated.

When the divided download is specified,
The download request is repeatedly made to the server for each divided data. At this time, the server is instructed on what data is requested. For example, it can be expressed by adding a certain rule extension (for example, _PART1, _PART2) to the file name.

The "command" includes, for example, a "display of version upgrade information of purchased software of user" command in addition to the installation command as shown in FIG. This instruction causes the following installation instruction to be executed if the file specified in this statement is not installed.This is always the case when the passive function unit is sold. This is to confirm that the core software to be installed is operating normally.

The “instruction” may be a conditional expression such as “if the result of executing this program is this value, install this program”. If the program to be run at that time is written in the installation instruction,
Since the operation of "downloading this program first and performing this installation based on the result of running the program" is possible, such complicated installation conditions can be realized by a combination of simple "instructions".

For example, “Install checkp”
program 100 230 "
"IF checkprogram 0 Installation
l DIC MT / 1 / dic8.3 100400 "
Using the installation list in which the instruction is written, a complicated installation such as "download a program named checkprogram first, execute the program after that, and install the DIC when the value of the result is 0" is performed. It is easy to specify.

Now, in step S2, when the client terminal 2 receives the installation list from the server 1, the client terminal 2 detects the identification information 71 included in the header of FIG. 9 and starts the download program. Then, the latest version (Download-version) of the download program included in the received installation list is checked (step S3). If it is new, download the latest download program to the server 1
(Step S4). The server 1 reads out the latest version of the download program file from the predetermined software storage unit and downloads it to the client terminal 2 without encryption (step S5).

When the client terminal 2 receives the latest version of the download program file, it handles it separately from the download of other files. That is, the currently executed download program is not overwritten. For example, the currently executed download program is “down”.
If it is installed under the name "load1",
Download the latest version of the download program to "download
2), and also rewrites a setting file for automatically executing the download program. After that, the data being processed by the download program “download1” currently being executed is directly updated to the latest download program “download2”.
To launch the latest version of the download program. Therefore, after the version upgrade, "download
There are two program files, “ad1” and “download2”.

As described above, the reason why the version upgrade of the latest version of the download program is handled separately from the download of other files is that even if the currently executed download program is overwritten with a new file, the execution of the currently executed download program is not executed. The content is not new.

Next, in the client terminal 2, the version information of the files (core software, passive function unit files) constituting the software specified by the user previously described in the installation list and the installed information storage unit 101 Is compared with the version information of the file registered in, whether there is a file that has been upgraded, whether there is a new additional function file (passive function part file) in the installation list, etc. If such a file is checked, a download request with predetermined header information is issued to the server 1 for a required file (step S).
6).

The download request includes, for example, information such as the version of the currently installed file. Further, the header information includes various information indicating that the user has been registered (for example, a purchase key).

When the server 1 receives the download request from the client terminal 2 and recognizes that the user is a registered user from the header information, the server 1 executes the process of the download request and converts the request into a format as shown in FIG. Then, the designated file is downloaded (step S7).

At this time, if the information requested to be downloaded is for a fee, necessary charging processing is performed. At this time, since the association between the shared key and the identification information related to the settlement of the software fee of the software user is guaranteed at the time of the enrollment procedure, it is common to charge using the identification information. Furthermore, if the function is a paid passive function designated to be encrypted in advance, the encryption is also performed using a shared key.

In FIG. 12, the transmission format field describes the type of data to be transmitted. For example, "0" sends the whole file at once, "1" sends the data difference at once, "2" sends the whole by split download, "3" sends the data difference by split download. ,.

The file inserted into the field of the data body may be compressed by a predetermined compression program. At this time, the decompression program may be included in the download program, or an external program may be read.

The data size is the size of the data itself, MA
SK is a mask applied to the shared key at the time of decryption, check
The sum is a checksum and hash value for the data body (unencrypted), and the hash value is obtained by multiplying the entire data size, data body, check sum, and MASK by a hash function. If the hash value is incorrect, the download program will detect an error. When MASK is “0”, it means that the file that is the data body of this format is not to be encrypted.

In this way, by associating the download information with the shared key, it is possible to confirm that the download information is from a legitimate server (that is, a server that knows its own shared key), and the virus can be used. It becomes easier to prevent unauthorized installation such as intrusion.

After the file is sent, if the file is charged, the server 1 refers to the personal information file 24 using the purchase key as a key, acquires the credit card number of the user, and uses the credit card number based on the credit card number. Perform credit inquiry and billing processing with the card company.

At the time of download, a portion that needs to be encrypted is encrypted with a pre-registered shared key. In the case where the user is charged but fails in the middle of downloading (line is cut off, etc.), it is ignored as it is. When the user performs the purchase operation again, the user simply downloads the data again without performing the charging process.

As described above, the effects of the software distribution system according to the present embodiment are summarized below. (1) Automatic installation function The result of the automatic environment determination in the client terminal 2 is transmitted to the server 1, and the server 1 distributes the software corresponding to the result and the software is downloaded in the client terminal 2 by the installer included in the download program. Install as soon as you receive the files. This makes it possible to easily and definitely install the software without any knowledge of a personal computer.

When automatically installing a file downloaded from the server 1, the download program of the client terminal 2 recognizes the identification information set at the time of user registration and executes the process.
There is no need for virus to enter. (2) Automatic billing function By registering a credit card number or the like in the server 1 at the time of user registration, when purchasing software, only a purchase request for desired software is transmitted. Immediate charging is performed by online credit inquiry using a credit card number. Therefore, since the user can purchase software only by clicking the mouse, it is suitable for selling cheap software.
Since a credit card number is not entered each time a purchase is made, security is enhanced.

Further, according to the procedure of the present invention, since the user requests only the information that is actually required (has not been possessed), the user is not charged twice for the information already possessed. In the conventional system, for example, it is necessary to perform a complicated check such that a charge log is generated on the server side at the time of the first download, and no charge is made based on the charge log after the second time. (3) Automatic version upgrade function The download program refers to the installation list transmitted from the server 1 to check whether or not the version of the file installed on the terminal is upgraded, and presents the result to the user. . Based on this, the user can easily make a request to download a necessary file by operating the mouse or the like. In addition, since only necessary parts are downloaded from the server 1, the communication amount is small and the line cost is low. (4) Trial use of software First, try the free trial software (core software), and then purchase the software (passive function unit) of the chargeable part that can be added to the free trial software to enable regular operation. It is suitable for selling electronic information that can not be returned because troubles and dissatisfaction of the product have been eliminated. (5) Illegal copy protection function The software (passive function unit) of the billing target part is stored as encrypted when it is downloaded from the server and installed on the client terminal. The passive function unit file is decrypted by the decryption built-in function and converted to be executable. And
The user-specific shared key used for the decryption is encrypted and stored with the product ID uniquely defined in the client terminal. Therefore, even if all of the key file 52, the core software 36, and the encrypted passive function file 37 are simply copied illegally, the product I
Unless D is obtained, it will not be possible to execute the pirated software. (6) Upgrading of the download program The download program of the client terminal 2 checks the version information of the download program described in the install list transmitted from the server 1, and automatically downloads the latest download program if it is newer. By requesting the server 1 to the server 1, the version of the download program can be easily upgraded, and therefore, it is easy to add the type of instruction described in the installation list. (7) Divided download of software When downloading software with a large size, an instruction designating that the software be divided and downloaded must be issued.
By including it in the installation list, it is possible to notify the client terminal 2 to that effect, and split download is possible.

Thus, even if a failure occurs in the communication line between the server 1 and the client terminal 2 at the time of download and the download cannot be performed normally, the download can be continued by a simple operation such as clicking the mouse again. Can be.

Also, the communication size of one session may be limited on the Internet, but even in such a network, even if the size of the information is large, it can be reliably transmitted by using the divided download. .

In the above embodiment, the passive function unit has been described as the software to be charged. However, the present invention is not limited to this case, and the passive function unit can also be realized as a free additional function to the active function unit. Therefore, in this case, it is not always necessary to encrypt the passive function unit.

[0114]

According to the present invention, the software provider transmits a software installation list in advance and interprets it before downloading it on a user's personal computer or the like. When the software is installed, only the data that is actually required can be efficiently and automatically transferred and installed, so that the software can be distributed via a network with a simple operation.

Sending only necessary data not only reduces the amount of data to be transmitted, but also allows a price to be set for each data itself. Therefore, flexible charging is required when software is provided. Can be.

[Brief description of the drawings]

FIG. 1 is an overall configuration diagram of a software distribution system according to an embodiment of the present invention.

FIG. 2 is a view for explaining a flow of key data used in the software distribution system of FIG. 1;

FIG. 3 is a diagram for explaining a data flow at the time of user registration.

FIG. 4 is a diagram showing a storage example of personal information stored in a personal information file.

FIG. 5 is a diagram for explaining a flow of key data used in the software distribution system of FIG. 1 and a flow of data when a user downloads product software from a server.

FIG. 6 is a diagram schematically showing a configuration of product software.

FIG. 7 is a view for explaining functions of core software.

FIG. 8 is a diagram for explaining a processing procedure of a download program function unit.

FIG. 9 is a diagram showing a configuration example of data transmitted from a server.

FIG. 10 is a diagram showing an example of an install command described in an install list.

FIG. 11 is a diagram showing a specific example of the installation command of FIG. 10;

FIG. 12 is a diagram showing a configuration example of download data.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... Server 2 ... Client terminal 11 ... Membership software download function part 12 ... Membership software reception function part 15 ... Install list transmission part 16 ... Download information transmission part 31 ... Membership software function part 32 ... Download program function part 33 ... Core software Functional part 36: Core software 37: Passive function file

Continued on the front page (51) Int.Cl. ⁶ Identification code FI G06F 17/60 G06F 15/21 Z

Claims (11)

[Claims] 1. A software distribution method in which a software provider provides designated software to a user via a network, wherein the software for requesting the provision of the designated software from a device on the user side is provided. A request is transmitted to the software provider, and the installation information of a plurality of files corresponding to the software specified by the software request is collectively transmitted to the user from the device on the software provider side, and transmitted to the user. The device selects a file to be requested by referring to the plurality of pieces of installation information, transmits a download request for requesting the selected file to the software provider, and from the device on the software provider side, Send download information including the file indicated in the request, and Location is, software distribution methods, characterized in that the installation of the file in accordance with the downloaded information. 2. The apparatus on the software provider side and the apparatus on the user side store a shared key shared between the software provider and the user, and the apparatus on the user side transmits the download request to the shared key. The software provider side transmits the download information after verifying the validity of the download request using a shared key stored in the own apparatus. Software distribution method described in 1. 3. The device on the software provider side and the device on the user side store a shared key shared by the software provider and the user, and the device on the software provider side stores the download information in the shared key. 2. The device according to claim 1, wherein the file is transmitted in association with a shared key, and the user device installs the file after checking the validity of the download information using a shared key stored in the device. Software distribution method described in 1. 4. When transmitting a software request, the device on the user side also transmits the environment determination result on the user side related to the installation of the software, and the device on the software provider side transmits 2. The software distribution method according to claim 1, wherein a plurality of pieces of installation information having different contents are transmitted according to the environment determination result. 5. Software provided by a software provider is composed of an active function unit that can operate independently, and a passive function unit that can be operated by being incorporated in the active function unit. When the file indicated in the download request from the user includes a file corresponding to the passive function unit, the device on the side charges the file corresponding to the passive function unit and responds to the charge for the active function unit. 2. The software distribution method according to claim 1, wherein the file is provided free of charge. 6. The device on the software provider side and the device on the user side store a shared key shared between the software provider and the user, and the device on the software provider side downloads the file to be transmitted. If the information includes a pay part, the pay part or all of the download information is encrypted and transmitted using the shared key, and the device on the user side stores the download information in the shared key stored in its own device. 2. The software distribution method according to claim 1, wherein the software is decrypted and installed. 7. The shared key stored in the device on the software provider side and the device on the user side is a shared key that is guaranteed to be associated with the identification information related to the settlement of the software fee of the user. 7. The software distribution method according to claim 2, wherein the software is distributed. 8. The apparatus on the software provider side, when one file is divided and provided as a plurality of pieces of download information, the installation information of the file is transmitted together with information on division. The software distribution method according to claim 1. 9. At least one of a program for transmitting the download request and a program for performing installation in accordance with the download information, which is provided in a device on the user side, stores its own version information. When transmitting a plurality of pieces of installation information, the device on the software provider side also transmits version information recommended for these programs on the user side, and the device on the user side transmits 2. The software distribution method according to claim 1, wherein prior to the transmission or the installation, the user requests the software provider for information necessary for upgrading these programs themselves. 10. A server device for providing specified software to a client terminal via a network, wherein the installation device describes installation information of a plurality of files corresponding to the software specified by the software request received from the client terminal. Receiving an installation list transmitting unit transmitting the list to the client terminal so that the client terminal can select a required file from the plurality of files; and a download request indicating the required file selected by the client terminal; Download information transmitting means for transmitting download information including the file indicated in the download request to the client terminal so that the client terminal can install the file according to the download information. Server apparatus characterized by the. 11. A client device using software provided from a server via a network, a software request transmitting means for transmitting a software request for requesting provision of specified software to the server, Receives from the server an installation list in which installation information of a plurality of files corresponding to the software specified by the request is described, selects a file to be requested by referring to the received installation list, and requests the selected file. Download request transmitting means for transmitting a download request to the server, a download request including a file indicated by the download request from the server, and installing the file in accordance with the received download information. A client device comprising: