KR20020096690A - System and method for inhibiting unlawful usage of a software, contents or information using source security technology - Google Patents

Abstract

PURPOSE: A system and method for preventing software, contents, or information from being used illegally using a source security technique is provided to prevent a software and contents from being copied illegally using a security technique based on a computer hardware for making one hardware resource use only one software. CONSTITUTION: A client system(100) is provided for a user to use a software, contents, or information. In the case that an initial usage request exists from the client system(100), an application server(300) codes specific information from system data received from the client system(100) and stores the code hard serial number in a proper space. An authentication server(200) performs a communication between the client system(100) and the application server(300), compares hardware information of the client system(100) for using the software, contents, or information with the coded hard serial number, and authenticates a usage of the software, contents, or information. The client system(100) includes an extraction processing unit for extracting hard serial number information with respect to a hardware resource.

Description

SYSTEM AND METHOD FOR INHIBITING UNLAWFUL USAGE OF A SOFTWARE, CONTENTS OR INFORMATION USING SOURCE SECURITY TECHNOLOGY}

The present invention relates to a system and method for preventing illegal copying of software and contents by using so-called inherent security technology. More particularly, the present invention relates to a computer-based hardware that allows one hardware resource to use only one software. The present invention relates to a system and method for illegally copying software and contents using security technology to prohibit other hardware resources from using it.

In the conventional electronic commerce, in the security system for electronic payment, a user IP or serial number (hereinafter, referred to as 'SN') is assigned to each user, and when the user wants to make an electronic payment, After logging in to the site using their number, they were notified of payment information, such as their credit card number or online bank account number and password, to the payment institution. Therefore, the user's account information is always at risk of being hacked, and if hacked or other payment information is leaked, a malicious third party can obtain illegally by using another computer such as a computer in a game room. The payment information of one person could be misused, and this damage was not only difficult to detect but also difficult for anyone to take responsibility.

On the other hand, there have been various problems in online games recently, and there are not many download programs such as playing games by downloading game software instead of online games and storing them on the hard disk of the computer used, especially in the case of wireless terminals such as IMT-2000. In fact, there are many problems with running programs online, and various and widespread uses of download software are expected. This download method is the same in the use of contents such as various information as well as programs.

By the way, illegal copying of programs or contents is always a problem in the download method. Serial numbers (SNs) included to restrict piracy and use of programs or content are virtually insignificant, and even if you have locked a copy using a key, very few experts It is only a matter of time before the key is stripped out and distributed to many people via email or illegal sites.

In addition, in recent years, after a trial period is distributed and tested on each site for a certain period of time for a variety of programs, it is often proposed to purchase a genuine product after a predetermined period, but in the case of a trial version after a predetermined period of time has passed There was a problem that the use of the trial version cannot be restrained.

The present invention relates to a system and method for preventing the illegal use of software, content or information using the original security technology for solving the above problems, classified into illegal software prevention technology, financial transaction security solution and content copyright protection technology. Can be.

Further objects and effects of the present invention will become more apparent from the following detailed description of the invention described with reference to the accompanying drawings.

1 is a schematic diagram of a source security technology according to the present invention.

Figure 2 is a detailed flow diagram of the source security technology in accordance with the present invention.

3 is a flowchart of a DES encryption method in FIG.

4 is a detailed flowchart of the function f in the DES block diagram of FIG.

Figure 5 is a detailed flow diagram for the extraction of hard SN in FIG.

Figure 6 is a schematic diagram of a financial transaction security solution applying the original security technology to electronic payment according to the present invention.

Figure 7 is a flow chart of the illegal software use prevention technology applied to the source security technology to prevent illegal software use according to the present invention.

8 is an example of a user computer screen to which a method for preventing illegal use of software, content or information using the source security technology according to the present invention is applied.

9 is a schematic flowchart of a service for granting a new SN according to a change of user information.

FIG. 10 is a detailed flowchart of a service for granting a new SN according to the user information change of FIG.

<Description of the symbols for the main parts of the drawings>

100: client system 200: server

300: application server 400: payment system

500: Client System Information 600: Software

700: internet network

Method for preventing illegal use of software, content or information using the source security technology according to the first aspect of the present invention for achieving the above object, (a) if the user first wants to use the software, content or information, the application Encrypting, by the server, specific information from system data obtained from the client system, storing the encrypted hard serial number (SN) in a predetermined space of the application server as a reference value, and transmitting the encrypted information to the authentication server (S2-S32); And (b) a combination value combining the previously stored reference value with specific information of hardware extracted from the client system in the same manner as in step (a) when the client system intends to reuse the software, content or information. And calculating the combined value and comparing the combined value with the reference value so that the software, content, or information can be used in case of a match.

Preferably, in the step (a), (a1) when the application server approves the payment for the valid payment request from the authentication server, encrypting the authentication serial number and providing a first encrypted SN to the authentication server (S10). ); (a2) when the authentication server approves the user to use the software, the content or the information, requesting extraction of specific information of the hardware of the client system to use the software, the content or the information (S22); (a3) the client system providing system data including specific information of the system (S24); And (a4) secondly encrypting the specific information and transmitting the second specific information to the authentication server, wherein the authentication server provides the encrypted specific information to the application server again (S26 and S28). Wherein the encryption key is generated by the first encryption key and the second encryption key,

More preferably, the step (a), before the step (a1), the application server performs a payment approval for a valid payment request from the authentication server (S6) and the authentication for the payment approval The server further includes a step (S8) of claiming a serial number (SN), and after the step (a1), the authentication server provides the user with the software that the client wants to purchase and the serial number assigned thereto. (S12), and receiving and installing the software received by the user and inputting a serial number granted for registration of the software as a premise of use and sending it to the authentication server (S14), and the authentication server receives the serial number received. Requesting confirmation to the application server whether the number is a valid serial number (S16), and if the received serial number is valid, the application The server further includes a step S18 of authorizing the use of the software.

Also preferably, after the step (a), (c) storing the received third encrypted hard SN in an authentication server and transmitting it to the user (S34); And (d) confirming and storing the third encrypted hard SN in a specific place of a client system (S36).

Also preferably, the system data may be obtained from the client system in the step (a), the hard disk driver (hereinafter referred to as 'HDD') serial number extraction processing unit 110 to the HDD of the operating system 120 of the client system Requesting the opening of the controller device driver 121; Receiving, by the operating system, the HDD controller device driver handle from the HDD serial number extraction processor 110; Requesting, by the HDD serial number extraction processing unit, the HDD serial number to the HDD controller device driver 121 based on the HDD controller device driver handle; And receiving the HDD serial number from the HDD controller device driver 121 by the HDD serial number extraction processor 110.

Also preferably, in the step (b), when the user wants to use electronic payment, the application server compares the hard serial number used for electronic payment with the system information of the client stored in the application server system and registers the registered client. It is determined whether or not to attempt electronic payment through the system, and if it is determined that the client system is a true system, the electronic payment is approved and an electronic payment transaction is performed.

Further, the step (b) may include: (b1) extracting and loading a hard serial number (SN) by the client system (S702); (b2) secondly encrypting the loaded hard SN (S704), and loading the second encrypted hard SN into the system (S706); (b3) thereafter, generating a combined value combining the second encrypted hard SN and the authentication SN (S708), and comparing the combined value with a reference value stored in the system (S710); And (b4) if the comparison result is the same, since the software to be used is used in the client system having the certified hardware, the software is normally executed (S712). On the contrary, if the reference value and the combination value do not match, Since the software is not used in the authenticated client system, it is preferable to include the step S714 of terminating the execution of the software.

The method may further include (e) changing the authentication information by registering a hard SN based on new hardware in the server 200 and the application server 300. Furthermore, the method (e) Step (e1) the user 100 requests the server 200 to change the user information (ⓐ); (e2) The authentication server compares the client system information with the stored SN, and if the user who requested the information change is determined to be a real user, such as when the two are matched with each other, applying the change request to the application server 300 (ⓑ). ); (e3) the application server granting a new SN to the user (©); (e4) the user providing changed system data to the application server and analyzing them (ⓓ); And (e5) the application server accesses a user system and performs necessary system control (ⓔ).

System for preventing illegal use of software, content or information using the original security technology according to the second aspect of the present invention for achieving the above object, the client system 100 that the user intends to use the software, content or information; An application server (300) for encrypting specific information from system data obtained from the client system and storing the encrypted hard serial number (SN) in a suitable space when the first use request is received from the client system; And performing communication between the client system and the application server 300 and using the software, content, or information in preparation for the hardware information of the client system to be used for the software, the content, or the information, and the encrypted hard serial number. And an authentication server 200 for authenticating the certificate server, wherein the client system has an extraction processing unit 110 for extracting hard serial number information on hardware resources.

Hereinafter, a preferred embodiment of a system and method for preventing illegal use of software, content or information using the original security technology according to the present invention will be described with reference to the accompanying drawings.

First, with reference to FIG. 1, the original security technology according to the present invention will be described schematically.

First, for example, the client system 100 of a client who wants to install specific software stored on the CD 600 or who wants to make electronic payment through an Internet 700 connection includes a server 200 and an application server ( The serial number approval request is made to 300. In response, the server 200 and the application server 300 extract the client system information 500 from the client system and then grant the serial number approval. The client system again makes an electronic payment by accessing the payment system 400 using the assigned serial number. The payment system communicates with the server 200 and the application server 300.

2 is a detailed flowchart of the source security technology according to the present invention.

First, when a method of preventing illegal use of software, content or information using the source security technology of the present invention starts, the user makes a payment and a software request to the authentication server 200 through an active window (S2). The authentication server makes a payment confirmation request to the application server 300 again in response to the payment request from the user in the step (S4). If the application server determines that the payment confirmation request in step S4 is justified (S6), if the payment approval is denied, the authentication server will request the serial number (SN) (S8). The serial number is similar to the serial number for use authentication in a general security system.

Now, the application server encrypts the serial number and provides the first encrypted SN as an authentication server (S10). In the present embodiment, a 56-bit Data Encryption Standard (DES) encryption method will be described later with reference to FIGS. 2 and 3.

Again, the authentication server provides the user with the software that the client wants to purchase and the serial number assigned thereto (S12). The user receives and installs the received software and inputs the serial number given for registration of the software as a premise of use and sends it to the authentication server (S14). The authentication server requests the application server to confirm whether the input serial number is a valid serial number (S16). If the received serial number is valid, the application server approves the use of the software (S18), and the authentication server also re-approves the use to the user (S20).

Then, a specific serial number of the hardware of the client system to use the software is requested to be extracted (S22). That is, the first hardware of the client system has a hard serial number (hard SN) such as the vehicle's chassis number in a specific area such as the system area, and when a new hardware resource such as an HDD is added or changed, the hard serial number for the system is added. Is added or changed. The client system provides system data of its own computer system in response to the hard SN extraction request (S24), and the user encrypts the hard SN by another method to the authentication server (S26), and the authentication server again. The encrypted hard SN is provided to the application server (S28). Now, the application server discards the existing SN provided in step S10 (S30), encrypts with another third encryption method, stores the third encrypted hard SN in a suitable space of the application server and transmits to the authentication server. (S32). The authentication server again stores the received third encrypted hard SN in the authentication server (S34), and transmits it to the user. At the same time, the third encrypted hard SN is stored in a specific place on the client system (for example, stored as an environment variable in the registry) (S36).

At this time, since the third encryption key is encrypted again after combining the first encryption key and the second encryption key, it is very difficult for the third person to obtain the third encryption key. Moreover, even if a third party decrypts the DES cipher by means of hacking or the like, it is not only able to know where the third encrypted hard SN to be decrypted by the encryption key is located on the client system, nor is it any hardware resource. Since it is not known that it is a hard SN for, a triple triple decryption procedure is required, so it is almost impossible for a third party to actually decrypt the hard SN to dismantle the security system according to the present invention.

In addition, even if the security system is dismantled, the system and method for preventing illegal use of software, content or information using the original security technology according to the present invention is applied to only one hard system, thereby preventing the copying and distribution of illegal software and content. It cannot be done in large quantities.

FIG. 3 is a flowchart of the DES encryption method of FIG. 2, and FIG. 4 is a detailed flowchart of the function f in the DES block diagram of FIG. 3. First, a 64-bit plain text to be encrypted is input (S301), and initial substitution is performed. After the initial permutation step (S303), 16 rounding steps (S305-S309) are performed, and after inverse permutation (S311), it is output as a 64-bit ciphertext (S313). Each rounding step will be described in detail. First, the right 32 bits Ri are computed by the assignment key Ki from the key scheduler 210, and the computed 32 bits are again converted into the left 32 bits Li and XOR. As a result, the positions of the left 32 bits and the right 32 bits are exchanged to form the next rounding input. Meanwhile, the key scheduler 210 outputs the encryption key Ki in a corresponding rounding step by 56-bit key input and 8-bit parity bit input S302. In FIG. 4, the function f in the DES block diagram of FIG. 3 is described in detail. That is, the right 32 bits (Ri-1) in the previous rounding step is extended to 48 bits, and after being XORed with the cipher key (Ki) from the key scheduler, each 6 bits are replaced with 4 bits and again. It is performed by performing permutation after becoming 32 bits.

FIG. 5 is a detailed flowchart of extracting the hard SN in FIG. 2. First, the HDD serial number extraction processing unit 110 requests opening of the HDD controller device driver 121 to the operating system 120 of the client system. (<1>). Next, the operating system 120 receives the HDD controller device driver handle to the HDD serial number extraction processing unit 110 (<2>). The HDD serial number extraction processing unit 110 requests the HDD serial number to the HDD controller device driver 121 based on the HDD controller device driver handle (<3>). Finally, the HDD serial number extraction processing unit 110 receives the HDD serial number from the HDD controller device driver 121 (<4>).

6 is a schematic diagram of a financial transaction security solution applying the original security technology to electronic payment according to the present invention. First, when the user 100 requests the electronic payment for the authentication server 200 (①), the authentication server provides the authentication serial number to the user by authentication (②). Thereafter, the user extracts and provides user system information to the application server 300 (③), and the application server controls the user system by storing an encrypted hard SN in the user system at a specific location of the user system ( ④). Thus, the preparation step for using the electronic payment of FIG. 2 is completed.

Now, when the user attempts to execute the electronic payment (⑤), the application server compares the hard serial number used for the electronic payment with the system information of the client stored in the application server system and uses the registered client system (specific computer) to perform the electronic payment. If the client system is determined to be a true system, the electronic payment is approved and an electronic payment transaction is made (⑥).

7 is a flow chart of the illegal software use prevention technology applied to the source security technology to prevent illegal software use according to the present invention.

First, when the execution of the software (or electronic payment process) according to the present invention starts, the client system first extracts and loads the hard serial number SN as in steps S22 and S24 of FIG. 2 (S702). Then, as in step S26 of FIG. 2, the loaded hard SN is second encrypted (S704), and the second encrypted hard SN is loaded into the system (S706). Thereafter, a combination value of the second encrypted hard SN and the authentication SN (corresponding to the first encrypted SN in step S10 of FIG. 2) is generated (S708), and the combination value is stored in the system. (Third encrypted hard SN information of step S32 of FIG. 2) (S710).

As a result of the comparison, if both are the same, the software to be used is used in the client system having the certified hardware, so that the software is normally executed (S712). On the contrary, if the reference value and the combination value do not match, the software is not used in the authenticated client system, and thus the execution of the software is terminated (S714).

8 is an example of a user computer screen to which a method for preventing illegal use of software, content, or information using the source security technology according to the present invention is shown. The user authentication process according to the present invention is installed on the left side when a primary program is installed. An example of an initial screen for operating is disclosed, an example of an input window for inputting an authentication key and user information for executing a user authentication process according to the present invention is disclosed in the center, and a client system control operation for executing user authentication on the right side. Finally, an example of a screen on which a user is authenticated is shown.

9 is a schematic flowchart of a service for granting a new SN according to a change of user information, and FIG. 10 is a detailed flowchart of a service for granting a new SN according to a change of user information of FIG. 9.

In the system and method for preventing illegal use of software, content or information using the original security technology according to the present invention, since user authentication is performed based on hardware information of the client system, a part of the hardware resource of the client system is inevitably changed or inevitable. If the user wishes to execute software, use content or make electronic payment using another computer, the authentication information should be changed by registering a hard SN based on new hardware in the server 200 and the application server 300. do. However, even if this is done, the new hard SN granting procedure is more complicated than a simple user authentication process (in some cases, it is preferable to perform the new hard SN granting process in the case of an electronic payment offline). Even in this case, since only one computer can use different software or contents at the same time, it is possible to prevent illegal copying or illegal use far more than a conventional security system.

As shown in FIG. 9, first, when the user 100 requests a change of user information from the server 200 (ⓐ), the server compares the client system information with the stored SN to match each other, or other assistance. When it is determined that the user who requested the information change is a true user by checking whether the information is matched, the application server 300 requests a change (ⓑ).

The application server gives the user a new SN (©), and the user provides the changed system data to the application server and analyzes them (ⓓ). The application server again accesses the user system and takes necessary system control (ⓔ).

This will be described in more detail with reference to FIG. 10. First, when a user makes an information change request to the authentication server (T2), the authentication server compares the system information with the SN and makes a change application (T4). The application server provides the first encrypted new SN to the authentication server (T10), which also provides the new SN to the user (T12), and when the user enters the new SN and sends it to the authentication server (T14). The authentication server requests the application server to confirm whether the new SN is valid (T16). If it is determined to be valid, the application server approves to the authentication server (T18), and again, the authentication server reapproves to the user (T20), and requests the extraction of a new hard SN to the new client system (T22). The client system provides the changed system data in the same manner as in FIG. 5 (T24), second encrypts the new hard SN (T26), and provides the encrypted hard SN to the application server (T28) to Allow analysis to take place on the application server. The application server also investigates how frequently an information change request from a user is made and whether it matches with the system information of another user, and also investigates whether it is an illegal user change.

The application server discards the existing SN (T30), sends the third encrypted new hard SN to the storage and authentication server (T32), and the authentication server also restores the third encrypted new hard SN and notifies the user. In operation T34, the client system also confirms and stores the third encrypted new SN in operation T36.

Although the above has been described with reference to the HDD SN, it can be modified without departing from the technical spirit of the present invention, such as to secure the original by using the unique information of the hardware resource on the CD driver or other computer, those skilled in the art Anyone can recognize it.

Although the present invention has been described above with reference to one embodiment shown in the accompanying drawings, the present invention is not limited thereto, and various modifications may be made within a range easily understood by those skilled in the art. Therefore, the limitation of the present invention should be limited only by the following claims.

According to the system and method for preventing illegal use of software, content or information using the original security technology according to the present invention operating as described above, in the prevention of illegal software, the software prevention technology using the unique system information of the user Direct authentication on the Internet becomes possible, and one-to-one correspondence is possible using only one serial number software for one user system, and if the license is encrypted by DES method, the reverse decryption is impossible. The advantage is that software user management is done on the server.

In addition, in terms of recent content copyright protection, the copyright protection technology is required due to the massive illegal online increase. According to the present invention, the existing watermark technology can only be implemented online, and the user can Compared to the one-time case and the kit value assigning method, the inconvenience of the user is great. According to the method according to the present invention, not only the online content can be implemented but also it can be downloaded to an offline user system. Is not implemented in.

In the financial transaction security solution, the method of the present invention enables the user to use the user's payment information or electronic payment software only on a PC authorized for the financial transaction, and uses the same license by adding the corresponding license for each PC. Even if a financial transaction is not possible by another PC, it is possible to implement a superior security system. It also has the advantage that no license information remains on the authorized user's computer, making code decryption and hacking entirely impossible.

Claims (10)

As a method of preventing illegal use of software, content or information using original security technology, (a) The first time a user wants to use software, content or information, the application server encrypts certain information from system data obtained from the client system and uses the encrypted hard serial number SN as a reference value. Storing in a predetermined space and transmitting to the authentication server (S2-S32); And (b) When the client system intends to reuse the software, content or information, the combined value obtained by combining the previously stored reference value and the specific information of the hardware extracted from the client system in the same manner as in step (a) Calculating the combined value and comparing the combined value with the reference value so that the software, content, or information can be used in case of matching. How to prevent illegal use. The method of claim 1, wherein step (a) comprises: (a1) when the application server approves the payment for the valid payment request from the authentication server, encrypting the authentication serial number and providing a first encrypted SN to the authentication server (S10); (a2) when the authentication server approves the user to use the software, the content or the information, requesting extraction of specific information of the hardware of the client system to use the software, the content or the information (S22); (a3) the client system providing system data including specific information of the system (S24); And (a4) transmitting the specific information to the authentication server by encrypting the second information, wherein the authentication server provides the encrypted specific information to the application server (S26 and S28); Including; And an encryption key when encrypting the combined value is generated by the first encryption key and the second encryption key. The method of claim 2, wherein step (a) comprises: Prior to the step (a1), the application server performs a payment approval for a valid payment request from the authentication server (S6), and the authentication server charges a serial number (SN) for the payment approval. (S8) further, After the step (a1), the authentication server provides the user with the software that the client wants to purchase and the serial number assigned thereto (S12), and as a premise of receiving, installing and using the software received by the user. Inputting the serial number granted for registration of the software and sending it to the authentication server (S14), the authentication server requesting confirmation of whether the input serial number is a valid serial number to the application server (S16), If the received serial number is valid, the application server further comprises the step (S18) of authorizing the use of the software. The method according to any one of claims 1 to 3, wherein after step (a), (c) storing the received third encrypted hard SN in an authentication server and transmitting it to the user (S34); And (d) confirming and storing the third encrypted hard SN in a specific place of a client system (S36); Method further comprising a. The method of claim 1, Obtaining system data from the client system in step (a), Requesting the HDD serial number extraction processing unit 110 to open the HDD controller device driver 121 to the operating system 120 of the client system; Receiving, by the operating system, the HDD controller device driver handle from the HDD serial number extraction processor 110; Requesting, by the HDD serial number extraction processing unit, the HDD serial number to the HDD controller device driver 121 based on the HDD controller device driver handle; And Receiving the HDD serial number from the HDD controller device driver 121 by the HDD serial number extraction processor 110; Method comprising a. The method of claim 1, In the step (b), when the user wants to use the electronic payment, the application server compares the hard serial number used for electronic payment with the system information of the client stored in the application server system and electronically pays through the registered client system. And if the client system is determined to be a true system, approving the electronic payment and conducting the electronic payment transaction. According to claim 1, wherein step (b), (b1) the client system extracting and loading the hard serial number SN (S702); (b2) secondly encrypting the loaded hard SN (S704), and loading the second encrypted hard SN into the system (S706); (b3) thereafter, generating a combined value combining the second encrypted hard SN and the authentication SN (S708), and comparing the combined value with a reference value stored in the system (S710); And (b4) As a result of the comparison, if the two are the same, the software to be used is used in the client system having the certified hardware, so that the software is normally executed (S712). On the contrary, if the reference value does not match the combination value, Step S714 of terminating execution of the software since the software is not used in the authenticated client system; Method comprising a. The method of claim 1, (e) changing the authentication information by registering a hard SN based on new hardware in the server (200) and the application server (300). The method of claim 8, wherein step (e) (e1) the user 100 requesting the server 200 to change the user information (ⓐ); (e2) The authentication server compares the client system information with the stored SN, and if the user who requested the information change is determined to be a real user, such as when the two are matched with each other, applying the change request to the application server 300 (ⓑ). ); (e3) the application server granting a new SN to the user (©); (e4) the user providing changed system data to the application server and analyzing them (ⓓ); And (e5) wherein the application server is configured to access a user system and perform necessary system control. As an illegal use prevention system of software, content or information using original security technology, A client system 100 for which a user wants to use the software, content or information; An application server (300) for encrypting specific information from system data obtained from the client system and storing the encrypted hard serial number (SN) in a suitable space when the first use request is received from the client system; And The communication between the client system and the application server 300 is performed, and the use of the software, content, or information is compared with the hardware information of the client system to be used for the software, content, or information, and the encrypted hard serial number. Authentication server 200 for authenticating; Including; The client system, characterized in that having an extraction processing unit (110) for extracting the hard serial number information for the hardware resources.