KR100298506B1 - System for preventing illegal installation according to cooperation between integrated circuit card and program - Google Patents

Abstract

PURPOSE: A system for preventing an illegal installation is provided to enable an authorized user to install the programs as much as determined numbers by cooperating an integrated circuit card and an installation program. CONSTITUTION: A CPU(10) controls whole operations of a system. A memory(20) temporarily stores data necessary for operating a computer. A hard disk drive(30) drives a hard disk capable of consisting of an auxiliary memory unit. A floppy disk drive(40) drives a floppy disk capable of consisting of the auxiliary memory unit. A CD-ROM drive(50) drives a CD-ROM and reads data recorded in the CD-ROM. An IC(Integrated Circuit) card reader(60) reads an IC card. The floppy disk drive(40) or the CD-ROM drive(50) is used for reading an installation program recorded in the floppy disk or the CD-ROM. The hard disk drive(30) is used for transplanting the installation program in the hard disk.

Description

Illegal installation prevention system by cooperation of integrated circuit card and program

The present invention relates to an illegal installation prevention system by coordination of an integrated circuit card and a program.

In recent years, the development of the computer industry has produced a variety of computer programs that are used here, the creators of computer programs want to use only those who have duly purchased their own program, and also purchased the program legitimately Even if you do not want to install on multiple computers at the same time. In order to promote the creation motivation of these computer program creators and to protect them as rights, most countries have enacted copyright law or computer program protection law.

However, in reality, the perception that computer programs are only attached to computer hardware is so widespread that the copying of computer programs is performed without any concern. As a self-rescue for this situation, computer program makers have devised various methods to prevent illegal installation of computer programs. The most common method is to enter a unique installation number assigned to the program during the installation of the program. According to this method, the installation program checks the installation number entered by the user and continues the installation if it is correct and stops the installation if the installation number is not correct. However, this method has many limitations in preventing illegal installation of the program. In other words, if a user who did not purchase the program legitimately copies the program illegally, the user cannot install the program because the installation number is not known, but the user who just purchased the program knows the installation number. There is a problem with installing on the computer at will.

Second, there is a way to use the hardware's lockkey. This is mainly by inserting the lockkey supplied by the program author into the computer's parallel port or keyboard port so that the installer can check the existence of these lockkeys and decide whether to install them. do. However, even such a rocky has been a problem that illegal installation is not eradicated because illegal piracy is possible.

The present invention has been made to solve the above problems, and by implementing an illegal installation prevention system in which an integrated circuit card and an installation program which are almost impossible to duplicate work together, a user having a right authority can install a program only a predetermined number of times. It is an object of the present invention to provide a method for preventing illegal installation of a program and a storage medium and an integrated circuit card used in the implementation thereof.

The method for preventing illegal installation of a program according to an aspect of the present invention is provided only when a first secret key storage unit having any first secret key stored therein, a state storage unit that records the installation / deletion of the program, and a valid access key are submitted. An integrated circuit card functionally provided with an access key checker comprising a program that allows access to the first secret key storage, a main program comprising an actual program, and a second secret key compared with the first secret key In the method of preventing the illegal installation of a program by the coordination of a recording medium functionally provided with a secret key storage unit, an installation unit for guiding the installation of the program, and a release unit for releasing the program. Checking the presence of the integrated circuit card in the network; Determining whether an installation fact exists before the integrated circuit card based on the contents of the state storage unit; If there is no installation fact in the previous step, submitting an access key to the integrated circuit card to receive the first secret key after being granted access to the secret key storage unit; Determining whether the first secret key matches the second secret key and installing the main program unit only when the first secret key matches the second secret key; And after installing the main program unit, deleting the first secret key stored in the first secret key storage unit and recording the installation fact in the state storage unit.

In the above configuration, when the program is released, checking whether the integrated circuit card exists; Determining whether an installation fact exists before the integrated circuit card based on the contents of the state storage unit; Deleting the installed main program unit if the installation facts exist in the previous step; Submitting an access key to the integrated circuit card to allow access to the secret key storage unit, and then recording the second secret key stored in the second secret key storage unit in the first secret key storage unit; And the step of erasing the fact of installation recorded in the state storage can be completely ensured.

On the other hand, the storage medium according to another aspect of the present invention comprises a main program unit consisting of a program to actually use; A private key storage unit for storing an arbitrary secret key code; Storing an access key for accessing a secret key of an arbitrary integrated circuit card, and the primary key when the secret key code read from the arbitrary integrated circuit card matches the secret key code stored in the secret key storage unit. The installation of the program unit is allowed, and after the installation of the main program unit is completed, the installation unit consisting of a program for recording the installation facts on the arbitrary integrated circuit card and the release of the main program unit are led, and the release of the main program unit is terminated. In this case, in addition to erasing the fact of installation recorded on the arbitrary integrated circuit card, a release unit comprising a program for recovering the secret key erased from the arbitrary integrated circuit card is provided.

According to another aspect of the present invention, an integrated circuit card includes a secret key storage unit, which is a memory space for recording a secret key having the same code as a secret key embedded in an installation program; An access made up of a state storage unit which is a memory space for recording the installation facts and the deletion facts of the arbitrary program, and a program which checks the access key provided by the arbitrary installation program and permits access to the private key storage only if it is justified. The inspection unit is functionally provided.

1 is a schematic block diagram of a computer system to which an illegal installation prevention system by coordination of an integrated circuit card and a program of the present invention is applied.

2 is a block diagram functionally expressing the internal configuration of an integrated circuit card according to the illegal installation prevention system by the coordination of the integrated circuit card and the program of the present invention.

Figure 3 is a block diagram functionally expressing the data configuration of the installation program according to the illegal installation prevention system by the cooperation of the integrated circuit card and the program of the present invention.

Figure 4 is a flowchart for explaining the installation process of the program in the method of preventing illegal installation by the cooperation of the integrated circuit card and the program of the present invention.

5 is a flowchart for explaining a process of releasing a program in a method for preventing illegal installation by coordination of an integrated circuit card and a program of the present invention.

* Explanation of symbols for main parts of the drawings

10: CPU 20: Memory

30: HDD 40: FDD

50: CD-ROM drive 60: IC card reader

70: IC card 71: first secret key storage unit

72: state storage unit 73: access inspection unit

80: installation program 81: main program part

82: installation unit 83: encryption algorithm unit

84: second secret key storage unit 85: error processing unit

86: release

Hereinafter, with reference to the accompanying drawings will be described in detail a preferred embodiment of the illegal installation prevention system by the cooperation of the integrated circuit card and the program according to a preferred embodiment of the present invention.

An integrated circuit card (hereinafter simply referred to as an IC card) is a generic term for a card made by inserting an integrated circuit into the size of a normal credit card, and includes a CPU (central processing unit) and a memory. It can be divided into a thing, simply having only a memory and being able to transmit and receive data wirelessly with the outside. Among these IC cards, which have CPU and memory, have their own computing power, so it is possible to check or process passwords (usually made up of numbers or letters), and for this reason, they can be used as a cache card for banks. It is planned. Such an IC card is also called an alias such as a chip card, an intelligent card, or a smart card, and is known to be almost impossible to duplicate due to the characteristics of the medium.

FIG. 1 is a schematic block diagram of a computer system to which an illegal installation prevention system by coordination of an integrated circuit card and a program of the present invention is applied, and FIG. 2 is a block functionally representing an internal configuration of an integrated circuit card according to the present invention. 3 is a block diagram functionally expressing the data structure of the installation program according to the present invention. As shown in FIG. 1, a computer system to which the method for preventing illegal installation of a program according to the present invention can be applied forms a part of a CPU 10 and a main memory device for controlling the overall operation of the system. A hard disk drive (hereinafter referred to simply as HDD) 30 and a floppy disk drive 40 which respectively drive a temporarily stored memory 20, a hard disk constituting an auxiliary storage device, and a floppy disk; (Hereinafter referred to simply as FDD), a CD-ROM drive 50 for driving a CD-ROM to read data recorded therein, and an IC card reader 60 for reading an IC card. In the above configuration, the FDD 40 or the CD-ROM drive 50 is used to read the installation program recorded on the floppy disk or the CD-ROM, respectively, and the HDD 30 is used to port the installation program to the hard disk. need.

On the other hand, the internal configuration of the IC card 70 according to the present invention is a secret key (hereinafter referred to as the first secret key to distinguish it from the secret key provided in the installation program, as shown in Figure 2, The provided secret key is referred to as a second secret key), a first secret key storage unit 71, a state storage unit 72 in which information on installation / deletion of a program is recorded, and a first secret key storage unit ( Algorithm for protecting the first secret key stored in 71 is made up of the stored access check unit (73). In the above-described configuration, when the program is normally installed, the first secret key stored in the first secret key storage section 71 of the IC card 70 at the time of sale is deleted while the first nothing is recorded. The storage unit 72 records information indicating that the program is installed.

On the other hand, the internal data configuration of the installation program 80 according to the present invention is the main program unit 81 consisting of a program to be used as shown in Figure 3, the main program unit 81 including an illegal installation prevention function An installation unit 82 made up of a program for controlling various matters related to the installation, an encryption algorithm unit 83 made up of a program responsible for decrypting the first secret key stored in the IC card 70, and an IC card 70. A second secret key storage unit 84, which stores a secret key having the same value as when the first secret key storage unit 71 decodes the value read, and handles an error when an error occurs during the installation process. It is divided into an error processing unit 85 consisting of a program and a release unit 86 consisting of a program for controlling the general matters related to the deletion of the main program unit 81 including a function for enabling the reinstallation. can do.

In the above-described configuration, the first secret key and the second secret key are given unique values of the corresponding installation program 80 and are given the same value when the program is produced. The first secret key is encrypted by a predetermined algorithm. After that, it is stored in the first secret key storage unit 71. The release unit 86 drives the release of the program installed in the computer "A" when the user wants to install it in the computer "B" after deleting a program installed in the computer "A", for example, The first secret key deleted from the card 70 is recorded again in the first secret key storage unit 71. The installation program 80 is sold in a medium such as a floppy disk or CD-ROM. At this time, a unique IC card 70 is provided for each installation program 80.

Hereinafter, the operation of the illegal installation prevention method by the coordination of the integrated circuit card and the program of the present invention will be described in detail.

Figure 4 is a flowchart for explaining the installation process of the program in the method of preventing the illegal installation by the coordination of the integrated circuit card and the program of the present invention, it is clear that the installation part contained in the installation program is mainly performed. First, when the user normally purchases the installation program 80, the IC card 70 is provided together with the installation program 80. At this point, the IC card 70 has a second secret stored in the installation program 80. A program for checking whether there is an encrypted first secret key having the same value as a key and an access right to the first secret key is recorded.

In this state, in order for a user to install a program on any computer, the IC may be inserted into the IC card reader 60 while a floppy disk or CD-ROM containing the installation program 80 is inserted into a corresponding drive 40 or 50. The card 70 should be inserted. In step S10, the IC card reader 60 checks whether the IC card 70 is required for installation. If any IC card 70 exists in step S10, the flow advances to step S11 to check whether the program has been normally installed based on the contents recorded in the state storage unit 72. do. If the fact that the program has already been normally installed in step S11 already exists, the user determines that the program is to be deleted and instructs the release unit 86 to perform the release process described later.

On the other hand, if the fact of installation does not exist in step S11, the flow advances to step S12 to access the first secret key stored in the first secret key storage unit 71 of the IC card 70. In step S14, it is determined whether the first secret key has been received. When the access key is submitted from the installation unit 82, the access checker 73 of the IC card 70 checks whether the submitted access key is legitimate. If the result is not legitimate, access to the first secret key is checked. On the other hand, if allowed, access to the first secret key is allowed. As a result, if the first secret key is not received in step S14, the access key is not valid, in which case the flow proceeds to step S28. In step S28, the error processing unit 85 is instructed to inform the user that an error has occurred and actions to be taken later through a monitor (not shown).

On the other hand, if a valid access key is submitted, the first secret key is received. In this case, the process proceeds to step S16 to use the predetermined secret algorithm provided in the encryption algorithm unit 83 to obtain the first secret key. Decrypt Next, in step S18, it is checked whether the decrypted first secret key matches the second secret key stored in the second secret key storage 84. If the first secret key and the second secret key coincide in step S18, the process proceeds to step S20 to primarily implant most of the main program unit 81 into the hard disk of the computer. Only the memory 20 is loaded. Next, in step S22, the first secret key in the first secret key storage section 71 in the IC card 70 is disabled so that the program cannot be installed in another computer using the IC card 70 used as described above. In step S24, the program is recorded in the state storage unit 72 of the IC card 70. After the operation is completed, in step S26, the installation process is terminated by even transplanting the remaining portion of the main program unit 81 loaded in the memory 20 onto the hard disk.

On the other hand, if the IC card 70 does not exist in step S10 or if the first secret key and the second secret key do not coincide in step S18, the process proceeds to step S28 to inform the occurrence of an error. At the same time, a monitor or the like is notified that necessary operations are to be performed.

5 is a flowchart for explaining a process of releasing a program in a method of preventing illegal installation by coordination of an integrated circuit card and a program of the present invention. The IC card 70 and the installation program 80 are also used in the process of releasing an already installed program. ) Is required. First, in step S30, the installation unit 82 checks whether the IC card 70 required for installation is present through the IC card reader 60. If any IC card 70 is present in step S30, the flow advances to step S32 to check whether the program has been normally installed based on the contents recorded in the state storage unit 72. do. If there is no fact that the program has already been normally installed in step S32, the above-described installation process is performed. If the fact exists, the user judges that the user is trying to delete the program and leads the release process. By instructing the release unit 86 to perform the release process.

Accordingly, in step S34, the main program 81 installed on the hard disk is first deleted, and in step S36, the first secret key is rewritten in the first secret key storage unit 71 of the IC card 70. Submit the access key. Detailed description related to the submission of the access key is omitted since it is similar to the above-described installation process. If the access key is valid, the access checker 73 of the IC card 70 outputs a message allowing access. When a message allowing access is output, in step 538, the release unit 86 transfers the second secret key stored in the second secret key storage unit 84 to the encryption algorithm stored in the encryption algorithm unit 83. Based on the encryption, the encrypted first secret key is recorded again in the first secret key storage unit 71. Next, the release process is terminated by erasing the installation fact recorded in the state storage unit 72 of the IC card 70 in step S40, whereby the user installs the installation program 80 on another computer. It becomes possible.

The illegal installation prevention system by the coordination of the integrated circuit card and the program of the present invention is not limited to the above-described embodiment, and can be implemented in various modifications within the range allowed by the technical idea of the present invention. For example, in the installation process described in the above-described embodiment, the main program part is installed in the order of partial installation-> first secret key deletion-> installation fact recording-> remaining installation of the main program, but the main program part is fully installed. It can be installed in the order of 1 secret key deletion-> installation fact recording, or can be installed in the order of 1st secret key deletion-> installation fact recording-> main program part installation. In addition, in the above-described embodiment, the description has been made that only one computer can be installed, but it may be possible to install the predetermined number of times.

On the other hand, if you inform the user of the detailed operation method according to the installation and release process of the program through the monitor at that time will be able to eliminate the inconvenience in installation.

According to the illegal installation prevention system by the coordination of the integrated circuit card and the program of the present invention as described above, it is possible to completely guarantee the installation and release of the program as many times as allowed by the manufacturer, but also to prevent illegal installation. It can inspire creative motivation and contribute to the healthy development of the software industry.

Claims (4)

A first secret key storage unit 71 storing any first secret key, a state storage unit 72 recording a fact of installation / deletion of a program, and the first secret key storage unit only when a valid access key is submitted ( 71) a main program section 81 consisting of an integrated circuit card functionally provided with an access key checker 73 consisting of a program allowing access to the program, and a second secret key compared with the first secret key. The function of the program by the coordination of a recording medium functionally provided with a secret key storage unit 84 that stores, an installation unit 82 for guiding the installation of the program, and a release unit 86 for releasing the program. A method for preventing illegal installation, the method comprising: checking the existence of the integrated circuit card (80) when a program is installed; Determining whether an installation fact exists before the integrated circuit card 70, based on the contents of the state storage unit 72; If there is no installation fact in the previous step, submitting an access key to the integrated circuit card (70) and receiving the first secret key after being granted access to the secret key storage (71); Determining whether the first secret key matches the second secret key and installing the main program unit only when the first secret key matches the second secret key; And after the main program unit is installed, deleting the first secret key stored in the first secret key storage unit 71 and recording the installation fact in the state storage unit 72. How to prevent illegal installation of the program. The method according to claim 1, further comprising: checking whether or not the upper integrated circuit card (70) exists when the program is released; Determining whether an installation fact exists before the integrated circuit card 70, based on the contents of the state storage unit 72; Deleting the installed main program unit 81 when the installation facts exist in the previous step; The first secret key storage unit stores a second secret key stored in the second secret key storage unit after submitting an access key to the integrated circuit card 70 to allow access to the secret key storage unit 71. Writing to 71; And erasing the fact of installation recorded in the state storage unit (72). A main program section 81 consisting of a program to be actually used; A first secret key storage unit 71 in which any first secret key is stored; A second secret key storage unit 84 for storing a second secret key compared with the first secret key of the first secret key storage 71; A state storage unit 72 in which information on installation and termination of the main program 81 is recorded; Allows installation of the main program unit 81 when the first secret key read from the first secret key storage unit 71 matches the second secret key of the second secret key storage unit 84. And an installation unit 82 made up of a program for recording the installation fact in the state storage unit 72 after the installation of the main program 81 is completed; And instructs the release of the main program unit 81, and when the release is completed, in addition to clearing the installation fact recorded in the state storage unit 72, the main program unit 81 in the state storage unit 72; And a release unit (86) made up of a program for recovering the first secret key deleted after the completion of installation) to the first secret key storage unit (71) as the second secret key. 4. The integrated circuit card according to claim 3, wherein the first secret key of the arbitrary integrated circuit card (70) is encrypted and recorded, and the storage medium decrypts the first secret key recorded on the integrated circuit card (70) and the integrated circuit. And a cryptographic algorithm section (83) which is a program for encrypting the first secret key to be recorded on the card (70).

Images