WO1999063697A2

WO1999063697A2 - Programme-controlled device

Info

Publication number: WO1999063697A2
Application number: PCT/DE1999/001489
Authority: WO
Inventors: Wolfgang Fraas; Franz Bonk
Original assignee: Siemens Aktiengesellschaft
Priority date: 1998-06-03
Filing date: 1999-05-18
Publication date: 1999-12-09
Also published as: EP1082647A2; WO1999063697A3; DE19824814C2; DE19824814A1

Abstract

The invention relates to a programme-controlled device (1), especially in the form of a programme-controlled telecommunications installation, which uses a memory chip (8). When the device is delivered, individual user data defining the scope of the use of the system software (7) of the programme-controlled device (1) for the particular user is programmed. This ensures that the system software (7) delivered is only runnable within the scope covered by the requested licence as ordered by the user. The memory chip (8) is lodged especially securely in the multilayered backplane of the central control unit (6) of the programme-controlled device (1) so that the user cannot separate it from the central control unit (6).

Description

description

Program controlled device

The present invention relates generally to a program-controlled device according to the preamble of claim 1, in particular the present invention relates to a data processing or telecommunications device which is controlled by software.

Program-controlled devices or systems include system hardware to perform or perform certain functions of the program-controlled device. The system hardware is supplemented by system software which provides operating data for the operation of the program-controlled device and thus represents the basis for the control of the system hardware. In known program-controlled telecommunication systems, copy protection in the form of the so-called dongle concept is used to ensure that the system software is only used together with the system hardware for which the user has also acquired licenses. In this way, an unauthorized copying of the system software from one individual system hardware to another system hardware is to be prevented.

With the dongle concept, the system checks when booting up whether the dongle is set or inserted in the system. If this is not the case, the system cannot be operated. The problem with this concept, however, is the fact that the dongle is removable and can therefore be placed in another system for which no license has actually been acquired, so that the togetherness check of the hardware and software of a system is artificially falsified can be. There is therefore a need for an improved concept which ensures that the systems -Soft- would only be used to the extent that it is also covered by licenses.

The present invention is therefore based on the object of specifying an improved program-controlled device which reliably prevents unauthorized copying of the system software and / or unauthorized use of the system software.

This object is achieved according to the present invention by a program-controlled device with the features of claim 1. The subclaims describe preferred and advantageous embodiments of the present invention, which in turn contribute to better protection of the system software.

According to the present invention, the program-controlled device is used together with storage means, for example in the form of a crypto chip, which store individual user data which determine and define the possible extent of use of the system software for the respective user. When the program-controlled device is started up, this user data is read out and made the basis for the control of the system hardware in such a way that the system hardware is only controlled by the system software within the scope of use defined by the individual user data. In this way, only predefined features or a certain number of applications of the system software could be released for certain users.

If the storage means are implemented in the form of a crypto chip, this can be installed, for example, in the multi-layer backplane of the central unit of the device, so that it is permanently connected locally and particularly to the central unit, ie the system software is difficult to access. On delivery of the program Controlled device, for example, customer-specific keys or algorithms are programmed in this chip, so that the system software supplied can only run to the extent defined by the programmed keys / algorithms. The system software or the associated database of the program-controlled device can preferably be copied for backup purposes, but in this way it cannot run on other systems or devices without the crypto chip.

In order to nevertheless be able to carry out a diagnosis / maintenance of the program-controlled device, an external chip card reader can be connected for this purpose, for example, so that the entire system software is again accessible to an authorized person when a corresponding chip card is inserted. It is also conceivable to use other means of identification for diagnostic / maintenance purposes, with the aid of which the entry of a specific code which authorizes diagnosis / maintenance can be checked.

The present invention can be applied to various types of program-controlled devices, a preferred field of application being that of data processing or telecommunication devices. In particular, the present invention can be used in telecommunications systems which are used in private networks to set up communication connections between subscribers assigned to the telecommunications system.

The present invention is explained in more detail below on the basis of a preferred exemplary embodiment with reference to the attached drawing.

FIG. 1 shows a simplified block diagram of a program-controlled device in the form of a program-controlled telecommunication system, and Figure 2 shows a simplified block diagram of the in

Figure 1 shown control device according to the present invention.

Although the present invention can generally be applied to program-controlled devices of various types, in which hardware and software are present separately from one another, the invention is to be explained in more detail below, in particular using a telecommunication system.

FIG. 1 shows a simplified block diagram of a telecommunication system 1, as is used, for example, in private communication networks. The telecommunication system 1 is used to mediate voice, image, text and data connections between the subscribers assigned to the telecommunication system 1. The telecommunications system 1 preferably works digitally, i. H. digital information transmission takes place within the telecommunications system 1.

As the central hardware device, the telecommunications system 1 comprises a digital switching network 4, which represents the actual switching element of the telecommunications system 1. The coupling arrangement 4 enables a so-called room change from a transmission line connected to the telecommunication system 1 to another transmission line and a so-called time change from one transmission channel to another transmission channel. The digital switching arrangement 4 is generally divided into individual switching network modules or switching stages.

Different subscribers and transmission lines are assigned to the telecommunication system 1 and are brought to the digital coupling arrangement 4 via line adaptations 2a-2c. If necessary, the line adaptions 2a-2c contain an analog / digital conversion in the coming direction and a digital / analog conversion in the outgoing direction Direction instead. The line adaptations 2a-2c can be connected to the digital coupling arrangement 4, for example, via PCM transmission lines, which have, for example, 64 channels. For the sake of simplicity, multiple subscriber lines 3 are shown in FIG. 1 only for line adaptation 2a, it being possible for these subscriber lines to be assigned to both analog and digital subscriber terminals. Of course, the line adaptations 2b and 2c are each connected to a large number of subscriber lines 3.

The telecommunications system 1 is program-controlled. This takes place with the aid of a controller 5, which records the connection requests of the participants in the telecommunication system 1, carries out the route setting and the entire telecommunication system 1, in particular the hardware, i. H. the coupling arrangement 4, the telecommunications system 1 controls.

The structure of the control 5 shown in FIG. 1 will be explained in more detail below with reference to FIG. 2.

The control 5 comprises, as a central component, a central control unit (CPU) 6 in the form of a central processor which is used to control the system hardware of the telecommunications system 1. The central control unit 6 is program-controlled and is controlled for this purpose by system software 7, which provides a specific database with operating data for the operation of the system hardware. The system hardware or the telecommunications system 1 can thus be provided for a large number of performance features LM # 1 - LM # n, which are defined by the system software 7 or its database, in particular by the system software 7 for each Performance feature the required operating parameters are specified. That is, With reference to FIG. 2, the first feature LM # 1 can be implemented, for example, with three different operating parameters 1-A to 1-C, while for the second feature LM # 2 only two different operating parameters 2-A and - 2-B are possible. Overall, the telecommunication system 1 is equipped in this way by the system software 7 for realizing n performance features. These features can be generally known service features for digital telephone networks, such as. B. "Call waiting", "call forwarding", "call forwarding", "display of the caller's number" or "charge display" etc. The system software 7 and the corresponding database thus provide all the operating information required for the operation of the telecommunications system 1 to the central control unit 6, so that the telecommunications system 1 and its system hardware can be program-controlled.

The system software 7 or the associated database can be copied by the respective user for backup purposes. In order to ensure, however, that the system software 7 or its database cannot run on other systems or telecommunications systems with other system hardware, the central control unit 6 of the telecommunications system 1 is coupled to an additional memory 8, which contains individual user data. In particular, this memory 8 can be a crypto chip, as is generally used in connection with chip cards. The memory 8 is permanently coupled locally to the central control unit 6 and installed, for example, in the multilayer rear wall or backplane of the central control unit 6, so that the memory 8 cannot be separated from the central control unit 6.

When the telecommunications system or the program-controlled device is delivered, the aforementioned individual user data are programmed, ie stored, which, for example, comprise customer-specific keys or algorithms, and the one for the respective Define possible scope of use of the system software or the telecommunication system for the user.

Since the memory 8 is fixed, i.e. H. not removable, coupled with the system software or the central control unit 6, self-identification of the system hardware is possible with the aid of the memory 8 or the information stored therein, so that a clear 1: 1 assignment between the System software and the system hardware of the telecommunications system is given and it is ensured that the

System software 7 not on another telecommunication system, i. H. in connection with other system hardware, is executable. Since in particular the memory 8 is permanently coupled to the central control unit 6, the problem of the dongle concept described at the outset, which is given by the interchangeability of the dongle, does not occur according to the present invention.

As shown in FIG. 2, the individual user data stored in the memory 8 include, in particular, information that defines the scope of use of the system software 7 that is possible for the respective user. The user data stored in the memory 8 can thus determine which of the features offered by the telecommunication system or the system software 7 are accessible to the respective user and how many different applications are available through the license assigned to the memory or the crypto chip 8 are covered. In the example shown in FIG. 2, it is provided, for example, that only the features LM # 1 and LM # 3 are accessible to the user, the feature LM # 1 also being operated, for example, only with the parameters 1-A and 1-C The LM # 3 feature is only accessible to the user with the 3-B operating parameter. In this way it is ensured that the system software 7 supplied with the system hardware is only available in the version of the volume previously ordered can be executed by the respective user.

Despite the limitation of the scope of use by the user data stored in the memory 8, the case may arise that the entire system software 7 must be accessed for diagnostic or maintenance purposes. For this purpose, the central control unit 6 can be coupled to an interface 9 to which, for example, an external chip card reader can be connected, so that an authorized person can identify himself with a special chip card to the telecommunication system or the central control unit 6 and the System 8 can remove any restrictions imposed by the memory 8. Of course, the use of other identification means is also possible, which enables identification of a person authorized to access the entire system software 7 or its entire database. For example, instead of a chip card reader, a keyboard input can be provided, according to which the restrictions of the memory 8 are lifted when an appropriate access code is entered and the authorized person can access the entire system software 7.

Claims

claims

1. Program-controlled device, with a hardware device (2a-2c, 4) for executing a specific function of the program-controlled device (1), and with control means (6, 7) program-controlled by system software for controlling the hardware device (2a-2c, 4), characterized by storage means (8) which are permanently connected locally to the program-controlled control means (6, 7) for storing individual user data which define the scope of use of the program-controlled device (1) which is possible for the respective user, the program-controlled control means (6 , 7) control the hardware device (2a-2c, 4) only within the scope of use defined by the individual user data.

2. Program-controlled device according to claim 1, characterized in that the program-controlled control means (6, 7) comprise a central control unit (6) and a database (7) which provides operating data for the system software, the central control unit (6) is designed in such a way that it accesses the individual user data stored in the storage means (8) and, on the basis of this individual user data, determines the scope of use of the program-controlled device (1) which is stored in the database (7) and which is possible for the respective user Reads operating data and controls the hardware device (2a-2c, 4) on the basis of this read operating data.

3. Program-controlled device according to claim 2, characterized in that the database is part of the system software (7) of the program-controlled device (1).

4. Program-controlled device according to claim 2 or 3, so that the operating data stored in the database define all of the features offered by the program-controlled device (1).

5. Program-controlled device according to claim 4, so that the individual user data stored in the storage means (8) define the performance features of the program-controlled device (1) which are only accessible to the respective user.

6. Program-controlled device according to one of the preceding claims, g e k e n n z e i c h n e t d u r c h

Identification means (9) for entering an identification code, the program-controlled control means (6, 7) being designed in such a way that if the identification code entered via the identification means (9) matches a certain predetermined access code, it controls the hardware device (2a-2c , 4) independently of the individual user data stored in the storage means (8).

7. Program-controlled device according to claim 6 and one of claims 2-5, characterized in that the program-controlled control means (6, 7) are designed such that, if the identification code entered via the identification means (9) matches the particular access code, it controls the Hardware device (2a-2c, 4) on the basis of the total operating data stored in the database independent of the data in the Allow storage means (8) stored individual user data.

8. Program-controlled device according to claim 6 or 7, d a d u r c h g e k e n n z e i c h n e t that the identification means (9) comprise a chip card reader.

9. Program-controlled device according to claim 2, that the storage means (8) are installed in the backplane of the central control unit (6).

10. Program-controlled device according to one of the preceding claims, d a d u r c h g e k e n n z e i c h n e t that the memory means (8) comprise a memory chip.

11. Program-controlled device according to one of the preceding claims, characterized in that the program-controlled device (1) is a program-controlled telecommunication system, the hardware device (2a-2c, 4) switching means (4) for establishing a communication link between the subscribers assigned to the telecommunication system includes.