JPH11110209A - Software copying prevention method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To limit the illegal copying of software without causing any inconvenience to a user by generating a password based on the inherent information, collating the password with the registered one and starting the software only when both passwords are matched with each other. SOLUTION: When a normal user 20 activates software (application to be protected), a password check program 41 collects the inherent information 42 and data information 43 on a computer 40 and generates the ID of the computer 40. Then a password is generated, based on the ID of the computer 40, and collated with the password that is previously inputted and held when the software was first used. If both passwords are matched with each other, the execution of the application to be protected is permitted. Thus, the application of software can be suppressed to the users other than the user 20 without causing any inconvenience to the user 20. Furthermore, the application of software can be limited and also such user 20 who doesn't renew yet his application contract of software is inhibited from using the software.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method for preventing unauthorized copying of a software program using an encryption technique and a recording medium on which the check program is recorded.

[0002]

2. Description of the Related Art As a method for preventing software duplication, generally, (1) a program supply medium (floppy disk, CD-ROM, etc.) is provided with an anti-duplication function, and (2) a password is generated randomly. Check the correct password from the description in the manual. (3) Setting is not completed unless the correct ID number is entered at the time of installation.
(4) There is a method in which a “key” is attached as hardware, and if the connection of the hardware cannot be confirmed, the hardware is not started. However, (1) is inconvenient because it cannot be executed unless it is on a sold medium, and (2) is that the password must be checked every time it is started, and the password list itself may be copied. In the case of (3), it is possible to investigate that there is a machine duplicated afterward, but it does not help to prevent prior duplication. (4) has a problem in that the mounting of a plurality of keys is problematic and the introduction cost is high.

[0003]

The existing technology imposes functional restrictions that are disadvantageous to the user in order to prevent duplication or leaves illegal duplication in order to ensure convenience for the user. I was forced to make a choice.

[0004] For example, JP-A-2-292634 and JP-A-6-282430 describe a method using a password in which a user ID is incorporated, a method using a machine unique number, and the like. However, copying prevention and user convenience are still insufficient.

SUMMARY OF THE INVENTION An object of the present invention is to record a software copy preventing method and a check program which can be used as it is except when it is started up for the first time and when the expiration date has expired, and restricts illegal copying without inconvenience to the user. It is another object of the present invention to provide a recording medium that has been designed.

[0006]

According to the present invention, at the time of the first activation of software, unique information of a computer is collected, and a password generated based on the unique information is registered in the computer. Every time the software is started, the unique information of the computer is collected again, a password is generated based on the unique information, and the generated password is compared with the registered password. It is characterized in that the software can be started.

Further, the present invention is characterized in that a use restriction period is provided for a password so that the software cannot be used continuously unless the password is periodically re-registered.

[0008]

Embodiments of the present invention will be specifically described below with reference to the drawings. FIG. 1 shows a conceptual diagram of an embodiment of the present invention. Installation of software on the computer 40 such as a personal computer is freely permitted. A password check program 41 is prepared in the starting portion of the software, and each time the software is started, the password check program 41
Is always executed.

When the user 20 starts the software (application to be protected), the password check program 41 collects the unique information 42 and the date information 43 of the computer 40, creates an ID of the computer, and based on the ID, A password is generated, collated with a password entered and held when the software is used for the first time, and if the password is collated, execution of the application to be protected is permitted. On the other hand, if the verification is not successful, the password check program 41 displays the created ID on the password input request screen and requests the user 20 to input the password. Here, cases in which verification cannot be performed include initial activation of software, expiration of use, change in computer configuration, and input of an unauthorized password by an unauthorized user.

The user 20 receiving the password input request
Notifies the password manager 10 of the ID created by the password check program and other necessary information (user name, serial number, etc.) and inquires about the issuance of the password. The password manager 10 checks whether the inquiry is legitimate. In this case, what is important is the date of the previous password issuance. If the password is improper, the unauthorized use of the software may be considered in addition to the computer configuration change. If it is confirmed that the ID from the user 20 is legitimate, the password manager 10
, The password is generated by the password generation program 11 and the password is issued to the user 20.
Here, the password generation algorithm in the password generation program 11 and the password check program 41 are the same.

The user who has received the password inputs the received password using the keyboard 30 or the like on the screen where the password check program 41 issues a password input request. Password check program 4
If the input password matches the previously generated password, execution of the application to be protected is permitted, and the password is stored in a predetermined password file. Thereafter, when the authorized user 20 starts the software, the password can be checked by the password check program 41 unless the computer is changed or the expiration date is used.
The application can be started.

The method of inquiring the password between the ID manager 10 and the user 20 and the method of issuing the password are as follows:
Use of postal mail, the Internet, etc. is conceivable, but the present invention is not limited to this. However, when the Internet is used, it is possible to completely automate the process from requesting the password input to inquiring the password, issuing the password, and inputting the password.

FIG. 2 is a detailed flowchart of the password check program 41 shown in FIG. 1, which is executed to check for unauthorized copying when the user starts software (application) to be protected. Hereinafter, the user will be described separately for the first activation and the second and subsequent activations.

<Initial Activation of User> When the user activates the software (application) to be protected, the password check program collects the unique information of the processor executing the software (step 10).
1). The contents of this unique information cannot be specified because the information that can be obtained by the software or hardware that executes the program is different, but it cannot be specified. Less is desirable. These unique information is stored in the BI
Obtained by OS call.

Next, the password check program:
Based on the collected unique information, an ID of the computer is created, and a password is generated from the ID (step 10).
2). Also, if you set an expiration date for the software,
The current date is also included in the unique information. For example, in a system in which a contract is renewed once a year, the current “year” may be included in the unique information. The ID is internally calculated from a plurality of pieces of unique information as follows. ID = F (specific information 1, specific information 2,...) (Example: F (HDD serial number, year)) This function must have a unique value from the same argument, Try to get as random a value as possible to avoid reading. The password for the calculated ID is calculated. Password = F (ID) Since this is information necessary for solving the ID, the user must not know the calculation method.

Next, the password check program:
The password is read from the password file (step 103), and the current password calculated internally from the ID is compared with the password in the password file (step 104). If they do not match, the next password is read from the password file (step 105) and compared in the same way (step 106). "Next password"
Will be described later. Since this case is the first launch,
The password file is empty and steps 104, 10
The determination results of No. 6 are not the same. If the passwords do not match, a password input request screen is displayed, the ID created in step 102 is displayed, and the user is prompted to enter a password (step 107), and the password check program waits for a password input (step 108). .

The user informs a password manager of necessary information (general information such as a user name and an ID) and inquires about issuance of a password. Password managers
If the inquiry is legitimate, the ID from the user
, A password is generated by the same algorithm as the password generation algorithm of the password check program, and is issued to the user. The user who has received the password inputs the received password using a keyboard or the like on the screen where the password check program has requested the password input.

The password check program compares the password input by the user with the password generated in step 102 (step 109).
Terminate abnormally. As a result, it is possible to guard against unauthorized use of the software due to unauthorized copying by an unauthorized user inputting an unauthorized password. On the other hand, if it is determined in step 109 that the passwords match, the password is registered in the password file (step 110), the password check program ends normally, and the operation of the application is started.

In step 108, if a password is not input after a lapse of a predetermined period (for example, an unauthorized user gives up using the application), an abnormal termination may be performed at that stage. Also,
When inquiring / issuing the password by mail or the like, after requesting the user to input the password in step 107, the password check program may be terminated, and the process may be resumed when the user receives the password.

When the user starts the software (application) to be protected, the password check program collects the unique information of the processor (step 101), and obtains the ID from the unique information.
Is created, and a password is generated from the ID (step 102). This is similar to the first activation. Next, the current password is read from the password file (step 103). This password is the valid password entered last time, and is usually valid this time unless the expiration date has expired. The password is unique to the computer and cannot be used on other computers, so there is no need to encrypt it. That is, the password for one computer is useless on another computer because the ID is different on all computers (and because it is calculated for startup).

The password check program compares the generated password with the "current password" read from the password file (step 104), and if they match, checks whether the password has an expiration date (step 111). If it does not,
The operation of the application is started. As a result, the authorized user can start the application without inputting the password after the second time.

On the other hand, if it is determined in step 104 that the password does not match, the password check program reads the "next password" from the password file (step 105), and determines a match with the regenerated password (step 106). Here, if there is no “next password” and if there is no match, the process proceeds to step 107. After this, it is the same as the case of the first activation. If a match is determined in step 106, the generated password is registered as the "current password" in the password file, and the "next password" in the password file is deleted (step 110). Then, the password check program ends normally and starts the application.

Next, when it is determined in step 111 that the expiration date of the password has been set, the password check program determines the remaining expiration date (step 112). Here, if the remaining time limit is not near, the normal termination is performed and the application is activated. When to determine that a password is about to expire is "close"
Although not limited here, it is assumed that the user has contacted the password manager and has a term sufficient for updating before the expiration.

If the expiration date is near and the “next password” is not set, the password check program generates a “next ID” and a “next password” from the unique information at that time (step). 113), prompts the user to enter the next password (step 114),
It waits for the next password input (step 115). The method in which the user inquires the password manager of the issuance of the next password, and the method in which the password manager issues the next password is exactly the same as that at the time of the first activation. If the next password is entered, the password check program will
The next password generated in step 113 is compared with the input password (step 116). If they do not match, an error message is displayed (step 117). If they match, the obtained password is stored in the password file as ""Nextpassword" (step 118)
Terminates normally and starts the software. Since the “next password” registered in the password file is replaced with the “current password” when the current password expires (step 110), the new ID
Without delay.

FIG. 3 shows a detailed flowchart of the password issuing operation of the password manager. The password manager first confirms whether the reception of the password inquiry from the user is legitimate (step 20).
1). This is done by checking the last password issue date, which is managed in advance, in addition to the name and serial number notified by the user. By comparing the date of the previous password issue with the date of the current inquiry, it is possible to roughly determine whether the inquiry is legitimate. If the user is determined to be an unauthorized user, the password issuance is postponed as abnormal termination. If it is determined that the user is a legitimate user, enter the user's contact ID (step 20).
3) A password is generated by the password generation program (step 204), and the password is notified to the user (step 205).

The processing flowchart of FIG. 3 can be automatically performed by the password manager center. In this case, by connecting the computer of the user and the password manager center, for example, via the Internet, it is possible to automatically perform password inquiries, issue passwords, and register the issued passwords in the password file.

[0027]

As described above, according to the present invention,
Suppress the use of software from non-authorized users without inviting authorized users, and also allow software to be used with an expiration date, making it impossible for users who have expired and do not renew the contract to use the software The effect which enables it to be obtained is obtained.

[Brief description of the drawings]

FIG. 1 is a diagram showing the concept of an embodiment of the present invention.

FIG. 2 is a detailed flowchart of a password check program incorporated in a software activation part to be protected.

FIG. 3 is a flowchart of a password issuing operation of a password ID manager.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 10 Password manager 11 Password generation program 20 User 30 Keyboard 40 Computer 41 Password check program 42 Computer specific information 43 Computer date information

Claims (2)

[Claims] When the software is started for the first time, unique information of a computer is collected, a password generated based on the unique information is registered in the computer, and each time the software is started, Collect unique information of the computer, generate a password based on the unique information, collate the generated password with the registered password, and enable the software to be started only when the collation is successful A method for preventing copying of software, characterized in that: 2. A software copy prevention method according to claim 1, wherein a use restriction period is provided for the password so that the software cannot be used continuously unless the password is re-registered periodically. Copy protection method.