KR101561771B1 - The software license authentication apparatus and the method of using the portable terminal - Google Patents

Abstract

The present invention relates to a software copy prevention and authentication apparatus and method for preventing copying of illegal software by determining whether user authentication information exists on a storage device of a user's portable terminal As a matter of fact,
A first step of generating a security code and an authentication key according to a certain combination rule using user information, product information, user computer information, and personalized content when installing software on a user's computer; A second step of storing the security code generated in the first step in the user's computer and storing the authentication key in the portable terminal of the user; A third step of requesting an authentication key from the user's portable terminal when the software is executed in the user's computer; And a fourth step of comparing the authentication key received from the user's portable terminal with the security code stored in the second step in the user's computer and normally executing the software when the authentication key is valid.

Description

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a software copy prevention and authorization apparatus and a method thereof,

The present invention relates to an apparatus and method for preventing software copying using a portable terminal, and more particularly, to an apparatus and method for preventing software copying and authorization using a portable terminal, and more particularly, And to a software copy prevention and authentication apparatus and method using the portable terminal.

Software piracy is the illegal copying or use of the contents of the software without the express consent of the copyright holder. Unauthorized copying of computer software without permission of copyright holder is considered as a representative example of copyright infringement. Such an act is serious because it infringes on property of copyright owner and also can shrink social software industry.

Piracy is not only a moral issue, it also involves the loss of pirated software in the price of software, causing damage to genuine software users, reducing the willingness of developers and hurting the development of the software industry .

In order to prevent such illegal copying, software companies are building an anti-piracy system, but there is a problem in that there is no way to completely prevent such illegal copying, or it is difficult to eradicate illegal copying due to inconvenience and inconvenience .

Conventional techniques for preventing piracy are as follows.

A software illegal installation prevention system by cooperation of an integrated circuit card and a program has been proposed. Such a system includes a card reader capable of reading an integrated circuit card in a computer and an integrated circuit card when the genuine software is purchased. The installation program reads and decrypts the first secret key stored in the integrated circuit card The main program is installed, the first secret key is deleted, and the fact that the installation is made is recorded in the state storage unit of the integrated circuit card, so that the state storage unit is not installed There is a problem that reproduction can be easily performed in a manner that can be reinstalled as much as possible.

Another prior art example is a technique for preventing illegal copying by attaching specific hardware such as a key lock to a system. Further, a technique using software such as limiting installation frequency by recording installation information, distributing password information necessary for installation separately (for example, a method of recording a password in a manual), and changing password information from time to time And there is a technique of using a network such as registering in a server at the time of installing a program or registering it in a server at the time of use after a program is installed.

However, the technique of attaching the hardware to the system has a problem that it is not easy to replace the hardware when the hardware is lost. In addition, the technology using the software does not limit the original when the original is copied and used when it is necessary, and the copy of the program itself can not be done. However, there is a problem in that it is impossible to prevent the passwords from being disclosed to each other. In addition, the technology using the network has a problem in data management and is used only in a limited range due to problems in utilization, and it is difficult to apply it to a general purpose program because only a network user can use the program.

In addition, a standardized recognition method of a conventional certificate-based, authentication code-based, or portable terminal storage device is typically realized by a computer in combination with hardware information such as a manufacturer, a model name, and a device serial number. These three elements are used for the standardized recognition method of the storage device of the portable terminal, but since these elements can be read at any time by the function of the hacking tool or the program viewing program of the computer, It is not suitable for use as data concerning execution or computer security.

SUMMARY OF THE INVENTION The present invention has been made in order to solve the problems of the related art as described above, and it is an object of the present invention to determine whether or not authorization of software is valid or invalid using a storage device of a portable terminal, The present invention provides an apparatus and method for software copy prevention and authentication using a portable terminal that can prevent illegal copying of software without a complicated procedure and a complicated procedure.

Another object of the present invention is to provide a method and system for generating authentication information based on data of a personalized document, a photo, and a moving picture with enhanced security and mounting the authentication information on the portable terminal, And to provide a software copy prevention and authentication apparatus and method using the portable terminal.

However, the object of the present invention is not limited to the above-mentioned objects, and other objects not mentioned can be clearly understood by those skilled in the art from the following description.

According to a first aspect of the present invention,

1. A software copy protection and authentication apparatus comprising a user computer and a portable terminal connected by any one or more of the Internet, USB, Bluetooth, Wifi, and NFC,

A request code production unit for producing a request code for requesting an authentication key to the portable terminal when an execution request for software is issued; and a request code generation unit for transmitting the request code generated by the request code production unit to the portable terminal, An authentication key determination unit that determines whether an authentication key received from the portable terminal is valid; and a determination unit that determines whether the authentication key is valid in the authentication key determination unit, And a software execution unit for executing the software execution unit,

The portable terminal includes a storage unit for storing user information, computer information, software information, and authentication key information, a request code input unit for receiving a request code transmitted from the user computer, An authentication key generation unit for generating an authentication key by synthesizing user information, computer information, software information, authentication key information, personalized contents, and personal information, and an authentication key generation unit for transmitting the authentication key generated by the authentication key generation unit to the user computer The present invention provides a software copy prevention and authentication apparatus using a portable terminal including a transmitting and receiving unit.

According to a second aspect of the present invention for achieving the above-described technical object,

A first step of generating a security code and an authentication key according to a certain combination rule using user information, user computer information, and personalized content when installing software on a user's computer;

A second step of storing the security code generated in the first step in the user's computer and storing the authentication key in the portable terminal of the user;

A third step of requesting an authentication key from the user's portable terminal when the software is executed in the user's computer;

And a fourth step of comparing the authentication key received from the portable terminal of the user with the security code stored in the second step and allowing the software to execute normally when the authentication key is valid. Provides authorization authentication method.

According to an additional feature of the present invention, the security code and the authentication key in the first step may be generated in a management server of a software manufacturer, or may be generated in a user computer.

According to another additional feature of the present invention, the user information of the first step includes a mobile phone number, the user computer information includes hardware, IP, and installation date, and the personalized contents include personal photos, .

The devices and types that are subject to this copy protection are computers, servers, personal computers, laptops, mobile computers, smart phones, smart pads, smart watches, PDAs, mobile terminals and similar computer or peripheral devices Or an application on which the application can be installed.

In addition, the portable terminal for copy protection includes a portable terminal such as a mobile phone, a smart phone (SmartPhone), a SmartPad, a personal digital assistant (PDA), a NotePad, a NoteBook, an UltrBook, , A portable handheld device such as a UMPC (Ultra-Mobile PC), a PMP (Portable Multimedia Player), a mobile device, a calculator, an arithmetic processing terminal, a mobile computer, a smart watch, Refers to a small-sized terminal device that can be held in the hand while being moved and can be input.

As described above, when the software copy prevention and authentication method and the authentication method using the portable terminal of the present invention are applied, it is determined whether the manufacturer of the computer, the product name and the manufacturing date and time and the authentication information unique to the portable terminal are present on the storage device And the program is executed or terminated according to the determination result, so that illegal copying of the software can be prevented.

In addition, the cost of managing personal information is reduced, and there is no need to install a separate login ID and application for authentication management, which is advantageous.

In addition, a part for registering and storing the user information and authenticating the user is indispensably required, and a separate system should be constructed in order to securely manage the information. However, the small and medium sized sites have a problem However, if you subscribe to a personalized security authentication service based on a portable terminal, it is economical to provide a variety of practical authentication management services by paying only a small fee.

It is possible to easily control the sharing of personal information by using the personalized contents set in advance from the personal photos, videos, and characters set in the prior art, thereby ensuring reliability. When the user's personalized content is changed, the authentication information can be easily changed and the personal information can be maintained in the latest state at all times. In addition, it is expected that content service providers can easily provide and change the information desired by the user, thus being highly usable as a security authentication device specialized for users.

ID and password for login are compared and verified in real time using SNS service such as text, SMS, picture, video, etc. in personalized contents by using wired / wireless connection of handheld terminal. It is possible to provide a portable security service with enhanced convenience and security.

1 is a diagram showing a schematic configuration of a software copy prevention and authentication apparatus according to a preferred embodiment of the present invention.
FIG. 2 is a flowchart showing the operation of the software copy prevention and authority authentication apparatus according to the present invention.

BRIEF DESCRIPTION OF THE DRAWINGS The advantages and features of the present invention, and the manner of achieving them, will be apparent from and elucidated with reference to the embodiments described hereinafter in conjunction with the accompanying drawings.

However, it is to be understood that the present invention is not limited to the disclosed embodiments, but may be embodied in many different forms and should not be construed as limited to the embodiments set forth herein. It is intended that the disclosure of the present invention be limited only by the terms of the appended claims.

Also, terms used herein are for the purpose of illustrating embodiments and are not intended to limit the invention. In the present specification, the singular form includes plural forms unless otherwise specified in the specification. &Quot; comprises " and "comprising" used in the specification do not exclude the presence or addition of components other than the recited components. Unless defined otherwise, all terms (including technical and scientific terms) used herein may be used in a sense commonly understood by one of ordinary skill in the art to which this invention belongs.

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS In the following description of the present invention, a detailed description of known functions and configurations incorporated herein will be omitted when it may make the subject matter of the present invention rather unclear.

Hereinafter, embodiments of the present invention will be described in detail with reference to the accompanying drawings.

BRIEF DESCRIPTION OF DRAWINGS FIG. 1 is a block diagram illustrating a software copy prevention and authentication apparatus according to a preferred embodiment of the present invention; FIG.

1, the software copy prevention and authentication apparatus of the present invention includes a user computer 100 and a user's portable terminal 200 connected to each other through one or more of the Internet, USB, and Bluetooth do.

At this time, a software manufacturer management server 300 connected to the user computer 100 and the portable terminal 200 through a communication network may be further included.

The user computer 100 includes a request code production unit 110 for producing a request code for requesting an authentication key to the portable terminal 200 when a software execution request is issued, A transmitting and receiving unit 120 for transmitting the generated request code to the portable terminal 200 and receiving an authentication key from the portable terminal 200 and a control unit for determining whether the authentication key received from the portable terminal 200 is valid An authentication key determination unit 130 and a software execution unit 140 for normally executing the software when the authentication key determination unit 130 determines that the authentication key is valid.

As a result, the user computer 100 is allowed to use the corresponding program with the corresponding authority (the authority range, the use period, the expiration date, etc.) after receiving the predetermined execution right through the cellular phone terminal 200.

The portable terminal 200 includes a storage unit 210 for storing user information, computer information, software information, and authentication key information, a request code input unit 220 for receiving a request code transmitted from the user computer 100, An authentication key generating unit 230 for generating an authentication key by combining the user information, the computer information, the software information, the authentication key information, the personalized contents and the personal information according to the request code input to the request code input unit 220, And a transmitting and receiving unit 240 for transmitting the authentication key generated by the authentication key generating unit 230 to the user computer 100.

As a result, when the software is executed in the user computer 100, the portable terminal 200 prevents unauthorized copying and illegal use of the software.

The software manufacturer management server 300 includes an authentication code generator, an authentication key manager, and the like. The software manufacturer management server 300 provides software product information and license authentication application software, which provides various functions and methods for preventing unauthorized copying, .

The operation of the software copy prevention and authentication apparatus according to the present invention will be described with reference to FIG.

The user recognizes the purchased software product to the user computer 100 and then instructs the execution of the installation. At this time, the installation program requests input of code generation basic information 200 of user information (user name, mobile phone number, etc.), product information (product name, version, Computer information is automatically extracted by the installer.

The user computer 100 generates a security code and an authentication key according to a certain combination rule using user information, product information, and computer information. At this time, it is preferable to additionally use personalized contents including personal photos, moving pictures, and characters for security.

The combination rule is in accordance with an agreement with the portable terminal 10 at the time of software production, and the portable terminal 200 can analyze the combination rule and use the hardware configuration of the user computer 100.

At this time, the security code and the authentication key can be generated in the user computer 100, and it is obvious that the security code and the authentication key can be generated in the software manufacturer management server 300.

The generated security code is stored in the user computer 100, and the authentication key is transmitted to the user's portable terminal 200 and stored in the storage unit 210.

Then, when the software is executed in the user computer 100, the user requests the authentication key from the portable terminal 200. The request code production unit 110 generates a request code in order to request the authentication key to the portable terminal 200 when the execution request of the software exists and the request code production unit 110 To the portable terminal 200. The portable terminal 200 transmits the request code to the mobile terminal 200 via the Internet.

In the portable terminal 200, when the request code transmitted from the transmitter / receiver 120 of the user computer 100 is input to the request code input unit 220, the authentication key generator 230 generates user information, The generated authentication key is transmitted from the transmitting / receiving unit 240 of the portable terminal 200 to the user computer 100 by transmitting the authentication key to the user computer 100. [ do.

Then, the user computer 100 compares the authentication key received from the user's portable terminal 200 with the stored security code to check whether the authentication key is valid.

At this time, the authentication key determination unit 130 determines whether the authentication key received from the portable terminal 200 is valid.

As a result, if the software is valid, the software is normally executed. If the software is not valid, it is determined that the user is an illegal user, an error message is generated, and execution is terminated.

The user freely executes the software during the set period of use (or the number of times). When the execution right expires, the product requests a new authentication code, and the user again receives the new authentication key from the portable terminal 200 and then resets the execution right.

In the present invention, an authentication code providing method using a mobile phone character may be used.

When an execution command is issued to the software or the execution module after the product is installed, the user computer 100 displays that the software can be executed by accessing the portable terminal 200 and receiving the authentication key character. Accordingly, the user accesses the portable terminal 200, receives the authentication key or authentication code according to a predetermined combination rule, and receives the authentication key or the authentication code in a form of a letter on the mobile phone.

The user inputs the received authentication code character, and after determining that the authentication code character is valid in the user computer 100, if the user is a legitimate user, a predetermined execution right (type of usage right, use period or frequency , Expiration date of use). Therefore, when the authentication is passed, an application program or software is executed.

While the present invention has been particularly shown and described with reference to exemplary embodiments thereof, it is to be understood that the invention is not limited to the disclosed exemplary embodiments, but, on the contrary, It will be appreciated that one embodiment is possible. Accordingly, the true scope of the present invention should be determined by the technical idea of the claims.

100: user computer
110: Request code production unit 120: Transmission / reception unit
130: Authentication key discrimination unit 140: Software execution unit
200: mobile phone terminal
210: storage unit 220: request code input unit
230: Authentication key generation unit 240: Transmission /
300: Software manufacturer management server

Claims (4)

delete A first step of generating a security code and an authentication key according to a certain combination rule using user information, product information, user computer information, and personalized content when installing software on a user's computer;
A second step of storing the security code generated in the first step in the user's computer and storing the authentication key in the portable terminal of the user;
A third step of requesting an authentication key from the user's portable terminal when the software is executed in the user's computer;
And a fourth step of comparing the authentication key received from the user's portable terminal with the security code stored in the second step and executing the software normally when the authentication key is valid;
Wherein the user information of the first step includes a mobile phone number, the user computer information includes hardware, an IP, and an installation date, and the personalized content includes a personal photograph, a moving picture, and a character. Prevention and authorization authentication methods.
3. The method of claim 2,
Wherein the security code and the authentication key in the first step are generated in a management server of a software manufacturer or are generated in a user computer.
delete

Images