KR100423506B1 - method of preventing an illegal software copy on-line using an IC chip installed card - Google Patents

Abstract

The present invention provides a software illegal copy prevention method using IC chip built-in card as a system that can fundamentally protect the intellectual property rights of software.

The software illegal copy prevention method is a method for preventing software illegal copying online by using an IC chip embedded card online: 1) Intervening IC chip embedded card reader / writer 2 when executing specific software. Requesting information data of the software licensee; 2) Upon receiving such a request, the software license information data from the IC chip embedded card 1 to the client computer 20 and / or the local server 21 via the IC chip embedded card reader / writer 2. Searching, reading and transmitting the data; 3) The client computer 20 and / or the local server 21 are connected to the software license issuance and management center host server 10 or the S / W company server 11, and from the IC chip embedded card 1 Transmitting information data of the transferred software licensee; 4) When the software license information data is transmitted, the software license issuance and management center host server 10 or the S / W company server 11 compares the transmitted information information of the software license with the registered information data. To enable continuous execution of the software at the same time.

Description

Method of preventing an illegal software copy on-line using an IC chip installed card}

The present invention relates to a method for preventing illegal copying of software using an IC chip embedded card, and more particularly, to protection of intellectual property rights of software, and in particular, illegality of software through a smart card with a CPU. It relates to the protection of intellectual property rights of software by copy protection and usage rights.

In general, software adopts a method in which a serial key unique to a CD is mounted or a hard lock key method controls the installation or execution of software on a computer. In this case, the original CD can be copied and the serial key provided by the software developer can be used for unlimited illegal use.In the case of the hard-lock key method, the hardware itself can be hacked and used in reverse engineering. It is almost impossible to control piracy and theft.

In addition, even in the case of the licensing method of the software provided by the number of users, it is illegally used beyond the number of users contracted in advance, causing not only mental and economic fatal loss to the software developer, but also the entire software related to intellectual property rights. It can slow down industry growth and cause national losses.

In addition, the method for preventing illegal copying of software disclosed in Patent Application Publication No. 2000-0061393 (published date: October 16, 2000, application number 1999-0010394, application date: March 25, 1999) The manufacturer stores and sells basic information necessary for executing programs such as various games and utilities in a recording medium such as a CD-ROM, and the user installs it on his / her computer and provides it to the program maker through a communication network such as the Internet. To download the rest of the program to install and use the program, but also for complete installation, you need to enter the genuine and user information and download and install the necessary files, not only inconvenient installation, but also reinstalled due to errors There is a problem that the inconvenience that is more inconvenient and re-installation is limited, and can not be duplicated Due to a crack, there is a problem such as piracy completely installed programs.

Accordingly, the present invention has been made to solve such a problem, and to provide a software illegal copy prevention method using an IC chip built-in card as a system capable of overcoming the above environment and fundamentally protecting the intellectual property of software. The purpose is.

In particular, the present invention is to protect the intellectual property rights of the software by granting the illegal copy protection and use rights of the software through the IC chip built-in card with a CPU.

1 is a schematic configuration diagram of a system for implementing a software license issuance and management method for a software copy protection method using an IC chip built-in card of the present invention,

Figure 2 is a block diagram showing the configuration of the IC chip built-in card for executing the software license issuance and management method for the software copy protection method using IC chip built-in card of the present invention,

Figure 3 is a basic purchase flow of the software offline using the software copy protection IC chip built-in card according to the present invention,

4 is a basic purchase flow diagram online according to the present invention;

5 is a schematic flowchart of implementing a method according to an embodiment of the present invention;

6 is a schematic flowchart of an online implementation of a method according to another embodiment of the present invention;

7 is a schematic diagram showing an example of a purchase form to which a software illegal copy prevention method using an IC chip embedded card of the present invention is applied;

8 is a schematic diagram showing another example of a purchase form to which a software illegal copy prevention method using an IC chip embedded card of the present invention is applied;

9 is a schematic diagram showing another example of a purchase form to which a software illegal copy prevention method using an IC chip embedded card of the present invention is applied;

10 is a schematic diagram showing another example of a purchase form to which a software illegal copy prevention method using an IC chip embedded card of the present invention is applied;

11 is a flowchart implementing a method according to another embodiment of the present invention;

12 is a flowchart implementing a method according to another embodiment of the present invention;

13 is a flowchart implementing a method according to another embodiment of the present invention;

14 is a flowchart implementing a method according to another embodiment of the present invention;

15 is a flowchart implementing a method according to another embodiment of the present invention;

16 is a flowchart implementing a method according to another embodiment of the present invention;

17 is a flowchart implementing the method according to another embodiment of the present invention.

<Description of the symbols for the main parts of the drawings>

1: IC chip built-in card 2: IC chip built-in card reader / writer

10: Software license issuance and management center host server

11: S / W vendor server 12: S / W vendor computer

20: client computer 21: local server

22: Software Buyer 50: Card Operating System

60: Cryptocoprocessor 70: Software license memory section

80: software crypto module

In order to achieve the above object, a software illegal copy prevention method using IC chip embedded card according to an embodiment of the present invention, in the method for preventing software illegal copying online using IC chip embedded card online: 1 Requesting information data of the software licensee via IC chip built-in card reader / writer when executing the specific software; 2) upon receiving such a request, retrieving, reading and transmitting information data of the corresponding software licensee from the IC chip embedded card to the client computer and / or the local server via the IC chip embedded card reader / writer; 3) accessing a software license issuance and management center host server or S / W company server from the client computer and / or a local server, and transmitting information data of the software licensee transmitted from the IC chip embedded card; 4) When the software license information data is transmitted, the software license issuance and management center host server or the S / W company server compares the information of the software license transmitted with the registered information data to the same time. It characterized in that it comprises a step that allows for continued execution.

Also, in a specific way,

1) Embed key values in CPU built-in smart card (IC chip built-in card) and software using symmetric key to encrypt the random number generated by card between CPU built-in smart card and software and compare the values How to determine,

2) Asymmetric key is embedded in the CPU built-in smart card and software to determine whether genuineness is obtained through encryption and decryption of the random number generated by the CPU embedded smart card and software.

3) A method of determining whether the product is genuine by mutual authentication using two kinds of key values in the method of 2) includes a method of enabling continuous use and installation of the corresponding software according to the result of the authentication. Furthermore, in the methods 1), 2) and 3), it is possible to introduce two methods, respectively, a method in which the subject of authentication is handled in software and a method in which a smart card is in charge.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings.

IC chip, which is a smart card, is largely classified into contact type, contactless type and mixed type (COMBI type), etc. Here, contact type refers to a method of communicating in both directions through electrical contact with a terminal. Contactless means that two-way communication is possible without direct contact with the terminal, and the shapes and standards (ISO7810, ID-1, ID-2, and ID-3) specified by the credit card or international standard here, and other than these standards. Refers to those with contact and contactless ICs having an external specification of.

This basic contactless IC chip built-in card is mounted on an IC chip composed of a CPU, a RAM, an EPROM (EEPROM), a contactless interface and an RF interface driven by a COS (card operating system), at least, between card sheets made of plastic. With the end connected to the connection part for the electrical connection of the IC chip, the antenna wire, which is mainly a coil of copper wire for transmitting and receiving electrical energy and data signals with an external card reader / writer, is looped between the card sheets. Arranged and configured. The IC chip may have various structures, such as a board (ICB) on which the IC chip is attached, and the contact type has a contact interface instead of a contactless interface and an RF interface, and includes a contact module. In the case of the combination type, the contactless configuration further includes a contact module.

Recently, the IC chip built-in smart card is widely used for financial, transportation, and identification, and is expected to be used in a wider field in the future.

According to the present invention, the IC chip built-in card 1 is used, and as mentioned above, in order to prevent illegal copying of the software, the IC chip built-in card 1 is used for a software license information data. The present invention relates to a method for issuing and managing a card) and an IC chip built-in card 1 for preventing software copying thereof.

First, in Fig. 2, the IC chip built-in card 1 of the present invention is one of a IC chip built-in card of a contactless type, a contact type or a mixed type thereof, and at least a memory such as RAM, ROM, EPROM, EEPROM, etc. for storing data. In the IC chip built-in card 1, which reads data via an IC chip built-in card reader / writer 2 including a part and an input / output interface of the data, and an electromagnetic connection for communication with other systems, The software license is read by the IC chip embedded card reader / writer 2 to confirm the software license and to install and execute the software on the client computer 20, the local server 21 or the software purchase company 22. It is characterized in that it comprises a software license memory unit 70, the information data of which is recorded, and is driven by a COS (card operating system) Is configured to include at least one masking memory unit in which the information data of the software license is stored with a password that cannot read itself, and is read as data that can be authenticated or decrypted only by the corresponding software. It may be configured to include a cryptographic processor 60 to software cryptographic module 80 to perform an algorithm for taking. It may be a contactless, contact, or IC chip embedded card thereof.

In addition, as shown in FIG. 2, information data of a plurality of software licenses may be stored in the software license memory unit 70.

As shown in Fig. 2, the IC chip embedded card 1 is read by the IC chip embedded card reader / writer 2 so that the software license information data is recorded so that the software license can be confirmed and the software can be executed. The software license memory unit 70 is included in the applet area. The information data may be a key and may have a structure or a form different from the existing key.

As shown in FIG. 2, encryption can be easily performed by including a cryptocoprocessor 60 for storing the information data of the software license as a decryptible code by the software cryptographic module 80. The software license information data may be stored in the ROM, or other identification code stored in the ROM, such as the unique identification number of the IC chip embedded card, may be used as the software license information data.

In the software illegal copy prevention method using the IC chip built-in card, the software license memory unit 70 of the applet area is provided with software data such as a license key as shown in FIG. To run the software.

That is, the system for implementing the software illegal copy prevention method using IC chip embedded card of the present invention in Figure 1, the client computer 20, the software license issuance and management center host server 10 and each S / W company server (11) and / or S / W vendor computer 12 (shown in FIGS. 3 and 4), at least the software license issuance and management center host server 10 and each S / W vendor server. (11) and / or S / W vendor computer 12 is connected to the network, the client computer 20 is network at least when trying to run the software at the time of online purchase or loss of IC chip built-in card (1) Is configured to be connected to the software license issuance and management center host server 10 via the.

In addition, the usage and purchase form of the software to which the software illegal copy prevention method using the IC chip built-in card of the present invention is applied are shown in FIGS. 7 to 10.

7 is a method of purchasing a license on a local server 21 basis from a S / W company. The server program is given a right to use software by a software license unit, and the current software license itself is written according to the number of users requested. As a result, it is difficult to limit the number and extent of actual users, so there is no preventive measures against illegal use.

With respect to this method, the present invention issues a corresponding number of IC chip built-in cards 1 per software license, and when the program of the server is connected, the IC chip built-in card 1 must be read or approved after use. It is possible. In addition, this may be equally applied to the purchase of additional licenses with an increase in the number of users.

8 shows a method of purchasing a personal software package from a S / W company, which is the most widely illegal copying field. Currently, a CD is provided with a CD and a serial key as a method of preventing copying. It is adopted to distribute or to add a hardware-lock key.

In this method, not only a personal computer but also a game using a game device connected to a separate display device such as PS2 (Play Station 2), X-Box, DC (Dream Cast), Game-Cube, etc. Included software CDs.

In this case, when copying the original CD, unlimited copying is possible only by inputting a single serial key, and when using a separate hardware lock key whose serial key value is released or using a hacking method that can run or install the software without the device. There is no way to protect the intellectual property of the software.

In the present invention, the software CD and the IC chip built-in card 1 are issued 1: 1 so that the software chip and the IC chip built-in card 1 must be read or approved when the software is driven or installed. This would be possible.

8 is a method of purchasing a plurality of software from a number of S / W companies can be applied, the IC chip built-in card (1) containing the separate software license information data from the S / W company server 11 is given Although the data data of the additional software license is recorded using the information data of the basic software license contained in one IC chip embedded card (1), it can be used by reading or approval of the IC chip embedded card (1). It is possible.

9 illustrates a method of purchasing software in a package for office use by the software purchase company 22. Currently, the company provides a single serial key for installing the software on a single CD and installing the software, and adopts a method of contracting the number of users when purchasing the software. Since only a single serial key entry can be used for unlimited duplication, there is no way to physically prevent the installation and use of the software beyond the number of users who are contracted to use it in advance.

With respect to this method, the present invention issues 1: n software CDs and IC chip built-in cards 1 in accordance with the number of software licenses purchased from the software purchase company 22, so that the IC must be used when the software is driven or installed. After the read or approval of the chip embedded card (1) is to enable the use. In this case, the same applies to the purchase of additional licenses due to the increase in the number of client computers 20 to be used.

Fig. 10 schematically shows a software purchase method including the IC chip embedded card 1 of the present invention online. With respect to the above method, the present invention is to issue one kind of software provided on-line and a smart card with a built-in CPU at 1: 1 so that the IC chip built-in card 1 may be read or not when the software is driven or installed. It has been approved for use.

As a reading or approval method of the IC chip embedded card 1 described above, an authentication procedure between the software and IC chip embedded card 1 is performed by the software illegal copy prevention method of the present invention described below.

5 is a basic flowchart showing the implementation of the present invention according to an embodiment of the present invention.

First, a step of giving software license by recording information data of a software license such as a serial key on the IC chip embedded card 1 is carried out. After performing the above steps, the IC chip embedded card (1) will be sold together with the corresponding software. In FIG. 3, the software license issuance and management center supplies the software license information data from the S / W company and the information data. When requesting the IC chip embedded card (1) containing the information, record the information data of the software license to supply the IC chip embedded card (1) to the S / W companies, S / W companies in the corresponding IC chip embedded card (1 The first purchase of the software offline by supplying the software to the S / W distributor so that the client can receive the IC chip embedded card (1) for execution of the software along with the purchase of the software from the S / W distributor. (First purchase) can be made. Then, in the second purchase, the S / W vendor connects the S / W vendor computer 12 to the S / W vendor server 11 when receiving a purchase request from the client, and provides license information data of the software to be sold. On request, information data of the software license can be received, recorded in the software license memory unit 70 of the IC chip built-in card 1 of the client, and the software can be sold at the same time.

As shown in FIG. 4, when purchasing online, the software license issuance and management center supplies the software license information data from the S / W company and requests the IC chip embedded card 1 including the information data. Record the information data and supply IC chip built-in card (1) to S / W company, and S / W company sends the software after electronic payment when the client computer (20) requests the purchase online. By sending the IC chip built-in card 1 for execution of the software, the first purchase (first purchase) of the software can be made online. Subsequently, during the second purchase (including third party software), if the S / W company server 11 receives an electronic payment at the time of receiving a purchase request from the client computer 20, the corresponding software is transmitted at the same time. The license information data of the software is transmitted and recorded in the software license memory unit 70 of the IC chip embedded card 1, so that the software can be sold online. That is, when the client has the IC chip built-in card 1, the purchase may be made online.

In addition, the software license memory unit 70 is set in the software license issuance and management center host server 10 using various IC chip built-in cards 1, and the software license memory unit 70 in the S / W companies It will be possible for the server 11 and / or S / W vendor computer 12 to record the information data of the software license on the IC chip built-in card 1.

In addition, when the software is sold, recording the information of the software license, such as the information data of the software license and / or the card unique number of the IC chip built-in card 1, is recorded on the software online. It may also be included before or after the step. By doing this, only the corresponding card can be used to further prevent the copying of the software.

After the software sold in this way is installed on the client computer 20, the execution request, retrieval, and reading of the information data of the software license are executed via IC chip built-in card reader / writer 2 in steps S1 and S2 during execution. And the transmission is made, after reading the information data of the software license transmitted in step S3 on the client computer 20, the read information data is compared with the information data embedded in the software in the client computer 20 ( In step S4), when the information data of the IC chip built-in card 1 and the information data of the software are the same, the software can be used by continuing to install or execute the corresponding software in step S5. Return to S1 to request retransmission from IC chip built-in card 1, or not shown. However, the installation or execution of the software may be stopped or performed.

By doing so, the customer installs the purchased software product on the client computer 20 or executes the software product after the transfer of the IC chip embedded card 1 enclosed with the client computer 20 to read and install the software product. And / or enabled.

That is, in the present invention, licensing is granted on the basis of using one IC chip built-in card 1 in the present invention, and therefore, it can be used only by illegal copying of software. This will prevent piracy. This type of software and IC chip built-in card 1 can be purchased both online and offline as described above.

When the IC chip built-in card 1 is lost, when the software is executed after the loss report, when the software license information data is requested in step S1, the software license issuance and management center host server online instead of step S2 and step S3. (10) or issuing a lost IC chip built-in card (1) to connect to the software server server (11) to request the information data of the software license, the software license issuance and management center host online It may be configured to execute the software by receiving the information data of the software license from the server 10 or the software server server (11). In this way, after the first loss, it is possible to receive information data of the software license online and to execute the software.

On the contrary, when executing the software after the loss report, when the software license information data is requested in step S1, the software license issuance and management center host server 10 or the S / W company server online instead of steps S2 and S3. (11) issuing a lost IC chip built-in card (1) for accessing information data of the software on the client computer (20) and issuing a software license and management center host server (10) or S / The W company server 11 may be configured to receive the information data of the software license of the client computer 20, check the information, and go to step S15 to execute the software.

6 is a flowchart illustrating the implementation of the present invention online according to another embodiment of the present invention.

In step S6 of FIG. 6, the software license information is recorded in the database of the IC chip embedded card 1 and the software license issuance and management center host server 10 at the time of purchase of the software related to FIG. 3 and FIG. Grant the right to request confirmation.

After the purchase is made, the software is installed on the client computer 20 and the software license information data is requested via the IC chip embedded card reader / writer 2 when the software is executed (step S6). When receiving such a request, the IC chip embedded card 1 retrieves, reads, and transmits information data of the corresponding software licensee from the IC chip embedded card reader / writer 2 to the client computer 20 (step). S7).

In step S8, the information data of the software licensee transmitted from the IC chip embedded card 1 is connected to the software license issuance and management center host server 10 or the S / W company server 11, and the information data is transmitted. do.

When the software license information data is transmitted in this way, the software license issuance and management center host server 10 or the S / W company server 11 transmits the software license information data transmitted in step S9 to the registered information data. In comparison, the same software can be continuously executed at the same time (step S10).

According to this embodiment, it is possible to execute the software by using the online together with the IC chip built-in card 1, which makes almost no copying possible, and furthermore, it is also possible to provide a sufficient service to the customer in this manner as well. will be. In addition, it is also possible to manage the historical data, such as the usage history of the software, on the S / W company server 11 or the software license issuance and management center host server 10.

In the above, the authentication procedure between the software and IC chip built-in card 1 for a general software illegal copy prevention method of the present invention will be described. In FIGS. 11 to 16, authentication procedures using a symmetric key, a single asymmetric key, and a plurality of asymmetric keys are described. Shown.

In FIG. 11, an authentication method using a symmetric key is shown. First, a software license is written to the IC chip embedded card 1 so as to be masked and masked with an information key.

Then, when installing or executing the corresponding software in the client computer 20 or the local server 21 in step S11, the IC chip embedded card 1 is inserted into the IC chip embedded card reader / writer 2, and step S12. In step S12, the random number generated by the IC chip embedded card 1 is transmitted to the client computer 20 or the local server 21. In step S12, the random number is transferred by the information data of all software licenses. Generate a ciphertext (ER or ER ') by encrypting the value (random). In step S13, the cipher text ER or ER 'is transmitted to the IC chip embedded card 1. In the meantime, in the IC chip built-in card 1, the random number value is encrypted by the information data of its software license in steps S14 and S15 to generate a ciphertext ER 'or ER.

Then, in step S16, the IC chip embedded card 1 compares the transmitted ciphertext ER with the ciphertext ER 'encrypted by itself to determine whether it is genuine or not, and transmits an OK signal at the same time to transmit the client computer ( 20) or install or execute the corresponding software in the local server 21 (step S17).

12, steps S21 to 26 are performed, and the roles of the IC chip embedded card 1 and the client computer 20 or the local server 21 are reversed. However, by comparing the ciphertext ER 'transmitted in step S25 and the ciphertext ER encrypted in itself, it is determined whether the genuine product is genuine and the corresponding software is installed or executed at the same time (step S26).

In FIG. 11 and FIG. 12, the symmetric key means that the encryption key and the decryption key have the same structure, and the smart card refers to a card in which a CPU is built in an IC chip and a ROM, RAM, EEPROM, and an encryption chip. . In addition, a random value refers to an unspecified value, and different random numbers are generated every time software is installed or run. Encryption refers to a process of transforming data so that no one can read it. Refers to a method that cannot be decrypted. "ER" is an Encrypted Random Number and is a random number value encrypted in S / W, and "ER '" is a random number value encrypted in the IC chip embedded card 1.

13 and 14 relate to an authentication method using a single asymmetric key, in which the roles of the IC chip embedded card 1 and the client computer 20 or the local server 21 are reversed.

First, the public key or private key is recorded in the corresponding software, and the private key or public key, which is the information data of the software license, is directly accessed by recording and masking the IC chip embedded card (1). License the software so that it can't. Here, the asymmetric key refers to a structure in which the encryption key and the decryption key are different, and the decryption refers to the operation of decrypting the encrypted data in its original form, and the public key, that is, the public key, may inform the outside of the two encryption keys. It is a key, and a private key is a private key, which is a key that is not known to the outside of two encryption keys.

Thereafter, upon installation or execution of the corresponding software on the client computer 20 or the local server 21, the IC chip embedded card 1 is inserted into the IC chip embedded card reader / writer 2, and the IC chip embedded card ( 1) and the random number generated by either the client computer 20 or the local server 21 are transmitted to the other (step S31 or step S41).

Then, in step S32 and step S42, the random number transmitted by the private key or the public key, which is the information data of the software license, on the other of the IC chip embedded card 1 and the client computer 20 or the local server 21. The encrypted value (ER or ER ') is generated by encrypting the value (random) (step S33 or step S43) and transmitted to either of the above.

Then, in step S34 or step S44, the IC chip built-in card 1 and the client computer 20 or the local server 21 are different from the private key or the public key which is the information data of the software license. The ciphertext (ER or ER ') is decrypted using a public key or a private key, which is an information data of its software license, to generate a random number, and the IC chip embedded card 1 in step S35 or step S45. Compares the transmitted random number with the decrypted random number in any one of the client computer 20 or the local server 21, and determines whether to be genuine or not, and installs the corresponding software at the same time. Execution (step S36, or step S46). When determining whether the IC chip embedded card 1 is genuine, as shown in FIG. 13, the client computer 20 generates an OK signal so that the corresponding software can be executed or installed in the client computer 20 or the local server 21. Or transmit to the local server 21.

15 and 16 relate to an authentication method using a single asymmetric key, in which the roles of the IC chip embedded card 1 and the client computer 20 or the local server 21 are reversed.

In this embodiment, the public key of the card and the private key of the software itself are first recorded in the corresponding software, and the IC chip embedded card 1 records and masks the public key of the corresponding software and the private key of the card itself. Grant software licenses to make them inaccessible. In the drawing, the public key of a card or S / W is a public key of a card, which is a kit value that can be informed to the outside of the two encryption keys possessed by the card or S / W, and the private key of the card or S / W is an individual of the card. As a key, it refers to a key that is not known to the outside of the two encryption keys possessed by the card or S / W.

Thereafter, upon installation or execution of the corresponding software on the client computer 20 or the local server 21, the IC chip embedded card 1 is inserted into the IC chip embedded card reader / writer 2, and the step S51 or the step S61. In step S52 or S62, if the IC chip embedded card 1 and the random number generated by one of the client computer 20 or the local server 21 are transferred to the other, the IC chip embedded card 1 And the encrypted random number (ER or ER) by encrypting the transmitted random number by a public key and a private key, which are information data of its own software license, on the other of the client computer 20 or the local server 21. ') Is generated (step S53 or step S63) and sent to either of the above.

In the meantime, in step S54 or step S64, the information data of its own software license is different from that of the software license in any one of the IC chip embedded card 1 and the client computer 20 or the local server 21. The ciphertext (ER or ER ') is decrypted by the public key and the private key to generate a random number. Then, in step S55 or step S65, the transmitted random number is compared with the decrypted random number (random ') to determine whether it is genuine, and at the same time, the corresponding software is installed or executed (step S56 or step S66). ). However, as shown in FIG. 15, when determining whether the IC chip built-in card 1 is genuine or not, the OK signal is executed so that the corresponding software can be executed or installed in the client computer 20 or the local server 21 as shown in FIG. The transfer is made to the client computer 20 or the local server 21.

10 and 17 also show how to purchase software online.

In this purchase method, if there is a S / W purchase application and payment on-line in step S71 of FIG. 17, after the payment is confirmed in step S72, the software is downloaded and the user can use the software for a predetermined period and a certain number of times as a temporary user. A smart card for authentication is sent (step S73).

After the elapse of any one of the predetermined period and the predetermined number of times, after the IC chip embedded card 1 sent online in step S75 is authenticated and registered, the IC chip embedded card 1 undergoes the above-described steps. By installing or executing the software on the software license information data memory unit 70, the software executable online for a predetermined period of time and a predetermined number of times is received until the IC chip built-in card 1 in which the information data of the software license is recorded is sent. It can be downloaded and used to make online purchases more convenient and to prevent software piracy.

In addition, if the client has an IC chip embedded card 1 in advance, in step 73, an additional key is supplied on-line using an existing key and encrypted or decrypted by an algorithm using an additional key. By downloading the software, the existing and additional keys may be configured to allow the installation and execution of the software.

In addition, when purchasing a plurality of licenses by the local server 21 and the software purchase company 22, IC chip embedded cards 1 each containing information data of different software licenses are supplied as many as the number of licenses. It would be desirable for the software to be configured to be executable by data.

In addition, in the case of the software purchase company 22 that purchased a plurality of licenses, the software is installed by the information data of the software license of each card at the time of installation, and only the information data of the corresponding software is activated and executed at the time of execution. It is preferably configured to be executed only by the chip embedded card 1.

According to the configuration of the present invention with reference to FIGS. 10 to 16 described above, the present invention has the following advantages over the embodiment of the present invention with reference to FIG. 5 or 6.

In other words, whether the software and the IC chip embedded card 1 transmit the information data of the software license in plain text or the encrypted key value, both the key value itself must be exposed, thereby not only copying the software but also the card. Since copying is enabled, simply storing information data of a software license such as a serial number related to anti-piracy of a software CD on a smart card is not a complete intellectual property protection plan. In the embodiments of the present invention with reference to FIG. 16, since the random number value and the random number value encrypted by various keys are transmitted and received during the authentication process between the software and the CPU chip embedded in the CPU 1, the exposure of the key value is fundamental. The key value is known even if the random value is exposed. Since it is impossible to infer the original key value of.

In addition, the IC chip embedded card (1) is also masked, the kit value is not leaked, and the encryption key in the software also can not be read, so the key itself is not leaked, it is impossible to duplicate the card itself.

Therefore, even if the software is further illegally copied by using the above-described embodiments of the present invention, it is impossible to illegally install or operate the software unless the IC chip built-in card 1 authenticates it.

According to the configuration and operation of the software illegal copy prevention method using the IC chip embedded card according to the embodiment of the present invention described above, it is possible to protect the intellectual property rights of the software inherently.

Claims (7)

delete delete In a method to prevent software piracy online by using IC chip embedded card online: 1) requesting information data of a software licensee via IC chip built-in card reader / writer 2 when executing specific software; 2) Upon receiving such a request, the software license information data from the IC chip embedded card 1 to the client computer 20 and / or the local server 21 via the IC chip embedded card reader / writer 2. Searching, reading and transmitting the data; 3) The client computer 20 and / or the local server 21 are connected to the software license issuance and management center host server 10 or the S / W company server 11, and from the IC chip embedded card 1 Transmitting information data of the transferred software licensee; And, 4) When the software license information data is transmitted, the software license issuance and management center host server 10 or the S / W company server 11 compares the transmitted software license information data with the registered information data. A method for preventing illegal copying of software online using an IC chip built-in card, comprising the step of enabling the continuous execution of the software at a time. 4. The method of claim 3, wherein the step 2) includes generating random numbers in one of the IC chip embedded card 1, the client computer 20, or the local server 21 by the information data. In step 4), the software license issuance and management center host server 10 or the S / W company server 11 encrypts the random number transmitted by the information key of the software license. An encryption step of generating a ciphertext (ER 'or ER') by generating a ciphertext (ER or ER '), and encrypting the random number with an information key of its own software license. In step 4), the ciphertext (ER or ER ') of the software license issuance and management center host server 10 or the S / W company server 11 is included in the IC chip embedded card 1 and the client computer 20. ) Or local server (21 ), And compares the transmitted cipher text (ER or ER ') and the encrypted cipher text (ER' or ER) in its own to determine whether to be genuine or not. A method for preventing illegal copying of software online using an IC chip embedded card, characterized in that for executing. The method of claim 4, wherein the information data comprises a public key or a private key. 6. The method for preventing illegal copying of software according to any one of claims 3 to 5, wherein the method for preventing illegal copying of software is applied at the time of loaning of the software. The method according to any one of claims 3 to 5, wherein a predetermined period of time until the receipt of the IC chip built-in card 1 in which the software license information data is recorded is sent to the software license information data memory unit 70 when the software is purchased online. The software can be downloaded and used online for a certain number of times, and the IC chip built-in card (1) is authenticated and registered online after one of the predetermined period and the predetermined number of times. To install or execute the software by the card 1 via the above-described steps; If the client already has an IC chip built-in card 1, the above step 1) supplies an additional key online and allows the software to be encrypted or decrypted by an algorithm using an additional key using the existing key. By downloading; When purchasing a plurality of licenses by the local server 21 and the software purchase company 22, IC chip embedded cards 1 each containing information data of different software licenses are supplied as many as the number of the licenses to the corresponding information data. In the case of a software purchase company 22 that purchases a plurality of licenses, the software is installed by the information data of the software license of each card at the time of installation, and the information data of the corresponding software is installed. Only activated and executed only by the corresponding IC chip built-in card 1 at execution; When the IC chip built-in card 1 is lost, when the software is executed after the loss report, when the software license information data is requested in step 2), the software license issuance and management center host server online instead of steps 2) and 3). (10) or issuing the IC chip built-in card (1) to perform the step of requesting the information data of the software license to connect to the software company server (11), and the software license issuance and management center host server online ( 10) or an online software illegal copy prevention method using an IC chip built-in card, characterized in that the software can be executed by receiving the software license information data from the S / W company server (11).