JP2856594B2 - Software storage medium, software reader and software management system - Google Patents

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

The present invention relates to a software storage medium for recording software for distributing a distribution channel,
The present invention relates to a software reading device for reading software recorded on a software storage medium and a software management system for checking for unauthorized use of software recorded on the software storage medium. The present invention relates to a software storage medium capable of promoting prevention of use, a software reading device for reading software recorded on the software storage medium, and a software management system for checking unauthorized use of software recorded on the software storage medium. .

[0002] Recently, with the development of the information society, computer programs, software such as electronic publishing and entertainment videos are sold at bookstores and other stores in cooperation with communication networks, and rentals at rental video stores and the like. It is rented at the store. Software distributed through such a distribution channel is exposed to unauthorized use at the distribution stage, such as being illegally circulated, shoplifted, carried away, or illegally copied. Such abuse significantly impairs the interests of software providers, retailers and rental stores. From now on, the construction of a new mechanism that can prevent unauthorized use of software that distributes distribution channels is being called for.

[0003]

2. Description of the Related Art When renting software through a distribution channel, as a method of protecting the rented software, conventionally, a method of realizing this by management at a rental store has been adopted.

That is, when a medium maker adopts a configuration in which software is recorded on a non-rewritable non-volatile storage medium such as a CD-ROM, and provides the storage medium of the software to the software market, there is a problem. hand,
In order to prevent shoplifting, the rental store arranges only the software storage case on the display shelf, and adopts a configuration in which the software main body is managed in a separate storage location. At the time of lending, a structure is adopted in which the identity of the user is held down using an identification card or the like and then the user is lent. The rental fee is calculated based on the difference between the rental date and the return date and collected.

[0005] In accordance with this management configuration, the rental shop is trying to prevent as much illegal use as possible while preventing shoplifting and carrying away of the software. The media manufacturer may adopt a configuration in which the software is encrypted and recorded on a storage medium. At this time, the user purchases a decryption device capable of decrypting the encrypted software recorded on the storage medium. Will do.

[0006]

However, the method of lending software according to the prior art has a problem that illegal copying of software cannot be prevented. That is, there is a problem that a user other than the rental destination can easily obtain software without quality deterioration. Another problem is that it is not possible to prevent illegal distribution of software.

[0007] Further, there is a problem that it is not economically advantageous to manage the software main body in a storage place different from the display shelf in order to prevent shoplifting. In addition, there is also a problem that requesting presentation of an identification card or the like for the purpose of preventing carry-out imposes a mental burden on the user.

[0008] As described above, according to the prior art, it is not possible to effectively prevent unauthorized use of software that distributes a distribution channel, so that the profit of the software provider is significantly impaired and the profit of the rental store is significantly reduced. There was a problem that it would be harmed.

[0009] The present invention has been made in view of the above circumstances, and a new software storage medium capable of promoting prevention of unauthorized use of software that distributes a distribution channel, and reads software recorded on the software storage medium. And a new software management system for checking for unauthorized use of software recorded on the software storage medium.

[0010]

FIG. 1 shows the principle configuration of the present invention. The present invention is particularly effective when software for distributing a distribution channel is to be rented.

1 is a software storage medium constructed according to the present invention, 2 is a shipping source device installed at a shipping source such as a manufacturer, 3 is a relay destination device installed at a relay destination such as a rental store, and 4 is a user side Is a software reader installed in the computer.

As the software storage medium 1, a hybrid storage medium composed of a combination of a non-rewritable storage area 10 and a rewritable storage area 11 is used. The shipping source device 2 provides the first writing unit 20 that writes the encryption information of the software to be provided to the non-rewritable storage area 10 of the software storage medium 1 and the rewritable storage area 11 of the software storage medium 1. Second writing means 21 for writing encrypted software protection information that constitutes protection information of the target software
And

The encryption software protection information written by the second writing means 21 includes key information for decrypting the encryption software written by the first writing means 20 and encryption information of the usable time of the software. First, when the key information for decrypting the encryption software and the usable time of the software are encrypted with the key KY, then the encryption information is encrypted with the key KST. As described above, a configuration in which encryption is performed in a multiplex configuration may be adopted. Here, regarding the available time, a configuration written in the relay destination device 3 may be adopted, and when the software is not for sale but for rental, it is rather general.

The relay destination device 3 includes a cryptographic structure changing unit 30 for changing the encryption structure of the encrypted software protection information written by the second writing unit 21, and a time for managing the usable time issued by the relay destination device 3. Data management means 31
By comparing the management value of the time data management means 31 with the tally value of the tally means 32, the tallying means 32 counts up the usable time of the software recorded in the software storage medium 1 collected from the distribution channel. Comparing means 33 for specifying the use time of the software.

As described in the above example, the encryption structure changing means 30 decrypts the last stage of the encrypted software protection information with the key KST, and then converts the decrypted encryption information with the key KST. The encryption structure of the encryption software protection information is changed by performing processing such as encryption with the key KX. Also, this relay destination device 3
Preferably, the total usable time of the software is calculated for each identification number of the software storage medium 1.

The software reading device 4 stores the rewritable storage area 1 of the software storage medium 1 given from the relay destination.
The first decryption unit 40 decrypts the key information for decrypting the encrypted software and the usable time of the software by decrypting the encrypted software protection information recorded in the first decryption unit 40. According to the key information to be decrypted, the non-rewritable storage area 10 of the software storage medium 1
A second decryption means 41 for decrypting the encryption software recorded in the storage means, and a calculation means 42 for calculating a new available time by subtracting the available time for decryption by the first decryption means 40 according to the elapsed time. An updating unit 43 for appropriately updating the usable time of the encrypted software protection information recorded in the software storage medium 1 in accordance with the new usable time calculated by the calculating unit 42, and the first decrypting unit 4
When either the usable time for decoding 0 or the usable time calculated by the calculating means 42 indicates a zero value, the suppressing means 44 for controlling the second decoding means 41 so as not to execute the decoding processing is provided. When the subtraction value of the usable time reaches a zero value, a use additional time that becomes a new usable time is set, and according to a mode that can be distinguished from the original usable time, according to the new usable time, Setting means 45 for updating the usable time of the encrypted software protection information recorded on the software storage medium 1.

[0017]

According to the present invention, as a software storage medium 1 for recording software for distributing a distribution channel, a hybrid storage medium composed of a hybrid of a non-rewritable storage area 10 and a rewritable storage area 11 is prepared. A configuration in which encryption information of software to be provided is recorded in the non-rewritable storage area 10 of the hybrid storage medium, and key information and software for decrypting the encryption software can be used in the rewritable storage area 11 A configuration is employed in which encryption information with time is recorded as encryption software protection information.

When the software reading device 4 on the user side reading the software in the software storage medium 1 obtains the usable time of the software by decrypting the encrypted software protection information, the usable time displays a zero value. If not, the encryption software is decrypted using the encryption software decryption key information obtained by decrypting the encryption software protection information, and the usable time is subtracted according to the elapsed time to update the encryption software protection information in a timely manner. On the other hand, when the usable time indicates a zero value, processing is performed so as not to execute the decryption of the encryption software. Then, the software reading device 4 that has entered the time measurement process of the usable time of the software storage medium 1 performs the process when the usable time of the encrypted software protection information of the software storage medium 1 for which the reading instruction is given does not display a zero value. Even if the usable time has reached the zero value while the software storage medium 1 is removed, similarly, processing is performed not to execute decryption of the encryption software.

According to the present invention, according to the present invention, even if software is illegally circulated, shoplifted, carried away, or illegally copied in the distribution stage, In accordance with the usable time indicated by the software protection information recorded integrally with the software, the use of the software beyond the usable time will be eliminated, so that the value of the unauthorized use can be greatly reduced. become.
From this, it is possible to prevent unauthorized use of software that distributes distribution channels.

In this configuration, the relay destination changes the encryption structure of the software storage medium 1 shipped from the shipping source and provides it to the user, and the software reading device 4 on the user side changes the encryption structure. If a configuration is adopted in which the software is decrypted by decrypting the encryption structure, unauthorized use between the shipping source and the relay destination does not make sense, so the software is actively prevented from being illegally used. Will be able to do it.

Further, in the present invention, the relay destination device 3 calculates the total value of the usable time of the software recorded on the software storage medium 1 collected from the distribution channel, and calculates the total value and the issued usable time. The usage time of the software is specified based on the difference from the time, and processing is performed to calculate the usage fee according to the usage time.

According to this configuration, according to the present invention, the use time of the lent software can be accurately specified, and
Even if software is pirated,
Since it is possible to identify which software has been illegally copied and how much, the actual situation of illegal use of the software can be accurately grasped.

[0023]

DESCRIPTION OF THE PREFERRED EMBODIMENTS The present invention will be described below in detail with reference to embodiments. FIG. 2 illustrates an example of a distribution system to which the present invention is applied. The distribution system shown in this figure includes a maker that ships software to be protected, a rental shop that rents out the software that the maker ships, and a user who purchases the software that is rented by the rental shop.

When the present invention is applied to such a distribution system, the shipping source device 2 described in FIG. 1 is installed at the manufacturer, the relay destination device 3 is installed at the rental store, and the software reading device 4 is installed at the user side. Will be installed.

As described with reference to FIG. 1, according to the present invention, software placed on a distribution channel is encrypted, and the encrypted information is recorded in the non-rewritable storage area 10 of the hybrid storage medium. The software protection information including the key information for decryption and the usable time of the software is encrypted, and the encrypted information is recorded in the rewritable storage area 11 of the hybrid storage medium. It is intended to prevent the unauthorized use of.

As the mixed-type software storage medium 1, for example, a storage medium in which the non-rewritable storage area 10 is constituted by an optical storage medium and the rewritable storage area 11 is constituted by a magnetic storage medium is used. . Note that the non-rewritable storage area 10 may be hereinafter referred to as a ROM area in correspondence with the non-rewritable state.
Although the rewritable storage area 11 is non-volatile, it may be referred to as a RAM area in accordance with the fact that it is rewritable.

FIG. 3 shows an embodiment of the device configuration of the shipping source device 2 which manages the processing at the shipping stage for the hybrid software storage medium 1 adopting this recording structure.
One embodiment of the device configuration of the relay destination device 3 that manages the processing at the distribution stage with respect to the software storage medium 1, FIGS. 6 and 7 show the processing at the usage stage with respect to the software storage medium 1. An embodiment of the device configuration of the software reading device 4 is illustrated.

Next, the software protection mechanism of the present invention will be described in detail with reference to FIGS. As shown in FIG. 3, the shipping source device 2 includes a first encryption unit 200, a second encryption unit 201, a third encryption unit 202, a first key management unit 203, A second key management unit 204, a third key management unit 205, and an input unit 206.

At the time of adopting this device configuration, when plaintext software to be shipped is provided from the software storage device, the first encryption means 200 manages the software by the first key management means 203. First key KU
The encryption software "E"
_KU (DATA) ”, and the cryptographic software is stamped in the ROM area of the hybrid software storage medium 1. Here,“ EOF ”in the figure that is simultaneously stamped indicates the end position of the cryptographic software. To display.

Next, the second encryption means 201 manages the first key KU necessary for decryption of the encryption software “E _KU (DATA)” by the second key management means 204.
Then, encrypted software protection information “E _KY (KU)” is generated by encrypting with the key KY. Subsequently, the third encrypting means 202 converts the various rental information input from the input means 206 and the encrypted software protection information “E _KY (KU)” output from the second encrypting means 201 into
By encrypting with the third key KST managed by the third key management means 205, the encrypted software protection information “E
_“KST (rental information / E _KY (KU))” is generated, and the encrypted software protection information is electrically written in the RAM area of the mixed-type software storage medium 1.

Although not shown in FIG. 3, the writing means (not shown) of the shipping source apparatus 2 electrically stores the rental information of the encrypted software protection information in the RAM area of the software storage medium 1 in plain text. Will be processed. Here, the rental information provided by the input means 206 includes a selection code (in this case, rental) for indicating whether the rental is for sale, an identification number of the software storage medium 1, and a software name.

In this way, the shipping source apparatus 2 records the encryption information of the software to be provided in the ROM area of the hybrid software storage medium 1, and decrypts the encrypted software in the RAM area. The process is to record the encryption information of the software protection information including the key information and various rental information.

When the software storage medium 1 is supplied from the maker, the relay destination apparatus 3 which manages the processing at the distribution stage for the hybrid software storage medium 1 having such a recording configuration is shown in FIG. Thus, the decryption means 300
, A first encryption unit 301 and a second encryption unit 30
2, third key management means 303, and fourth key management means 3
04, first conversion key management means 305, time management means 306, rental management book 307, input / output means 308
Is adopted.

At the time of adopting this apparatus configuration, when the software storage medium 1 is received from the manufacturer, the decryption means 3
00 stores the encrypted software protection information “E _KST (rental information / E _KY (KU))” written in the RAM area of the software storage medium 1 in the third key management unit 3.
03 by using a third key KST managed by the third key management unit 205 (the same key as the key managed by the third key management unit 205 of the shipping source apparatus 2), the encrypted software protection information “rental information / E _KY (KU ) "Is generated.

On the other hand, the time management means 306 sends the usable time ΔT of the software storage medium 1 from the input / output means 308.
And the rental information issued by the rental store (rental store code, user code, etc.) are input to the first encrypting means 301 and receive the rental information decrypted by the decrypting means 300. Then, the received rental information and the input information from the input / output unit 308 are registered in the rental management book 307. Then, when the identification number of the software storage medium 1 is input from the input / output unit 308, the second encryption unit 302 encrypts the identification number with the conversion key managed by the first conversion key management unit 305. To obtain a fourth key KX,
Is registered in the fourth key management means 304.

When the decryption means 300 finishes the decryption processing and the time management means 306 notifies the available time ΔT and the like, the first encryption means 301 then makes the decryption means 30
0, the rental information / encrypted software protection information “E _KY (KU)” and the rental information / available time ΔT notified by the time management means 306 are stored in the fourth key management means 304 By encrypting with the key KX, encrypted software protection information “E _KX (rental information issued by rental shop / ΔT / E _KY (KU))” is generated, and the encrypted software protection information is mixed with a software storage medium of a hybrid type. One RAM area is electrically written.

Although not shown in FIG. 4, the not-shown writing means of the relay destination apparatus 3 stores rental software issued rental information of the encryption software protection information (which may include the usable time ΔT). The processing is performed such that the plain text is also written electrically in the RAM area of the software storage medium 1.

As described above, when the software storage medium 1 is supplied from the manufacturer, the relay destination apparatus 3 supplies the encrypted software protection information “E _KST (rental) written in the RAM area of the supplied software storage medium 1. Information / E _KY (KU)) ”, and add a usable time ΔT and rental information to create another encryption structure called“ E _KX (rental information issued by rental shop / ΔT / E _KY (KU)) ”. It processes to rewrite what you have.

As will be described later, the software reading device 4 arranged on the user side employs a configuration in which the cryptographic software protection information of the software storage medium 1 is decrypted with the key KX, so that the software The written encryption software “E _KU (DAT
A) "is decrypted. As described above, the shipping source apparatus 2 generates the encryption software protection information with the key KST and the relay destination apparatus 3
However, by adopting a configuration in which the encrypted software protection information is rewritten to be encrypted with the key KX, the unauthorized use of the software storage medium 1 between the manufacturer and the distribution channel of the rental store is completely eliminated. Can be realized.

As described with reference to FIG. 1, the present invention employs a configuration that permits the use of software stored in the ROM area of the software storage medium 1 for the usable time recorded on the software storage medium 1. It is intended to eliminate unauthorized use of software.
In order to realize this configuration, it is necessary to satisfy the following time management requirements.

That is, when the rental store lends out a single software storage medium 1, as shown in FIG. 8A, regardless of whether or not the software storage medium 1 is used, a specified rental time (14 in FIG. When the time unit elapses), it is necessary to make subsequent use impossible. Here, ID1i (i = 1)
3) indicate that the device is in use. When the rental store lends a plurality of software storage media 1, as shown in FIG. 8B, regardless of the use or non-use, when the respective rental time elapses from the lending time, the subsequent use is not performed. We need to make it impossible. Here, in the figure, ID1 is assumed to be a rental time in units of 14 hours, ID2 is assumed to be a rental time in units of 13 hours, ID3 is assumed to be a rental time in units of 11 hours, and ID4 is assumed to be a rental time in units of 8 hours.

Also, when the rental shop lends out a single software storage medium 1 and the user uses it while using a different decryption device, as shown in FIG. In addition, when a prescribed rental time (in this figure, a unit of 14 hours is assumed) has elapsed from the time of lending, it is necessary to make the subsequent use impossible. Further, even when the rental shop lends a plurality of software storage media 1 and the user uses it while using a different decryption device, as shown in FIG. When the specified rental time elapses, it is necessary to make the subsequent use impossible. Here, in the figure, I
D1 is assumed to be a rental time in units of 14 hours, and ID2 is assumed to be a rental time in units of 13 hours.

As shown in FIG. 6, the software reading device 4 which is responsible for fulfilling the time management requirement of the rental use of the software includes a first encrypting means 400 and
Second encryption means 401 and third encryption means 402
, A first decoding unit 403, and a second decoding unit 404
, Third decryption means 405, and status display memory 406
And rental information processing means 407 and output means 408
And an input / output unit 409.

At the time of adopting this apparatus configuration, when the user instructs to read the software storage medium 1 borrowed from the rental store, first, the first encrypting means 400 starts the RAM of the software storage medium 1. By encrypting the identification number written in the area with the specified conversion key, the fourth key management unit 30 of the relay destination device 3
Then, the same key KX as the key managed by No. 4 is generated.

Next, the first decryption means 403 outputs the encrypted software protection information “E _KX (rental information issued by rental shop / ΔT / E _KY (KU))” written in the RAM area of the software storage medium 1. By decrypting with the key KX generated by the first encryption means 400, the encrypted software protection information “rental information issued by the rental shop /
ΔT / E _KY (KU) ”is generated. Then, the rental information issued by the rental store and the available time ΔT are written into the status display memory 406, and the encryption software protection information“ E _KY (KU) ”is The available time ΔT written in the status display memory 406 matches the value set by the input / output means 308 of the relay destination device 3 at the beginning of the purchase.

Subsequently, the second decryption means 404 transmits the key KY (the second key management means 204 of the shipping source apparatus 2) stored in the battery-backed up status display memory 406.
And the encrypted software protection information “E” output from the first decryption unit 403.
_KY (KU) ”with this key KY,
A key KU required for decrypting the encryption software “E _KU (DATA)” recorded on the software storage medium 1 is generated. Then, the second decryption means 404 writes the decrypted key KU in the status display memory 406.

On the other hand, when the rental information processing means 407 reads the identification number of the software storage medium 1 and the usable time ΔT from the state display memory 406, the usable time ΔT displays a zero value in accordance with the processing described later. Sometimes the key KU stored in the status display memory 406 immediately
Is cleared and the zero value is not displayed, the usable time ΔT is subtracted according to the elapsed time,
It is checked whether or not the usable time ΔT ′ to be subtracted has reached a zero value. When the available time ΔT ′ has reached the zero value, the key KU stored in the state display memory 406 is cleared. Processing is performed so as not to execute the clear processing. Furthermore, even when the zero value is not displayed,
If the usable time ΔT ′ has reached the zero value according to the timekeeping process while the software storage medium 1 is removed, the key KU stored in the status display memory 406 is cleared.

When the third decryption means 405 reads the key KU stored in the status display memory 406, the third decryption means 405 decrypts the encryption software “E _KU (DATA)” written in the ROM area of the software storage medium 1. By decrypting with the read key KU, software to be provided is generated, and the output unit 408 outputs the decrypted software to an output device (not shown). At this time, the third decryption means 405 outputs the status display memory 40
When the key KU stored in No. 6 is cleared, this decryption process cannot be executed.

That is, when the usable time ΔT recorded on the software storage medium 1 indicates a zero value, or when the usable time ΔT reaches a zero value with the passage of time, the software reading device 4 reads the software storage medium The operation is performed so that the use of the software recorded in No. 1 cannot be performed.

When the end of use of the software is detected in accordance with “EOF”, the second encrypting means 401
Is the rental shop issued rental information read from the state display memory 406, the new available time ΔT ′ output by the rental information processing means 407, and the first decryption means 403.
Software protection information “E _KY (KU)” output by
Is encrypted with a given key KX, thereby obtaining new encryption software protection information “E _KX (rental information issued by a rental store / ΔT / E) whose usable time has been reduced.
_KY (KU)) ”, and rewrites the encrypted software protection information in the RAM area of the software storage medium 1 with this new one.

On the other hand, when the end of use of the software is detected in accordance with “EOF”, the third encrypting means 402
Encrypts the device parameter status information read from the status display memory 406 with a specified conversion key, and then writes the encrypted information into the RAM area of the software storage medium 1 for maintenance or the like.

Next, the time management processing executed by the rental information processing means 407 will be described with reference to FIG. The rental information processing means 407, as shown in FIG.
A table 411, a battery-backed cyclic counter 412, a subtractor 413, and a comparator 41.
4, a data bus 415, and a control bus 416
, Interfaces 417 and 418, and a selector 419.
And

At the time of adopting this apparatus configuration, when the user instructs to read the software storage medium 1 borrowed from the rental store, the CPU 410 determines the identification number ID of the software storage medium 1 given from the status display memory 406 and The available time ΔT and the ID table 41
Register to 1. Here, the entry of the ID table 411 indicates that the software storage medium 1
The CPU 410 does not execute the registration processing in the ID table 411 for the software medium 1 for which a read request has been issued before, even if the software medium 1 is removed from the software medium 1.

Subsequently, the CPU 410 determines that the usable time ΔT of the software storage medium 1 for which the read instruction has been issued is I
If it is not registered in the D table 411, it is determined according to the comparator 414 whether or not the newly registered usable time ΔT is displaying a zero value. By instructing the clearing process of the key KU stored in the display memory 406, the decryption process executed by the third decryption unit 405 is suppressed. When the software storage medium 1 to which the reading instruction has been issued is registered in the ID table 411, the ID table 4
It is determined whether or not the usable time ΔT of the software storage medium 1 indicates a zero value according to the management data of the software storage medium 11. When the zero value is indicated, the key KU stored in the status display memory 406 is determined. , The decryption process executed by the third decryption unit 405 is suppressed. If the usable time ΔT of the software storage medium 1 for which reading has been instructed is not left according to this inhibition processing, the software storage medium 1
Will be banned.

On the other hand, when the battery-backed cyclic counter 412 reaches a prescribed elapsed time,
By notifying the CPU 410 of the interrupt,
An interrupt is notified to the CPU 410 every time a predetermined time elapses. When this interrupt is notified, the subtractor 413
Sequentially reads out the available time ΔT from the ID table 411, subtracts the available time ΔT by the specified elapsed time detected by the cyclic counter 412, and sets the available time ΔT of the ID table 411 to a new value according to the subtraction value. When the usable time ΔT, which is updated according to the subtraction processing of the subtractor 413, reaches zero, the ID table 41 is updated.
The invalid data is registered in the invalid flag of the corresponding entry of No. 1.

Subsequently, upon completion of this interrupt processing, the CPU 410 determines whether or not the usable time ΔT of the software storage medium 1 in use has reached zero, and has become invalid data. In this case, the decryption process executed by the third decryption unit 405 is suppressed by instructing the clear process of the key KU stored in the status display memory 406. When the usable time ΔT disappears according to the inhibition processing, the use of the software storage medium 1 being read is prohibited. When the end of use of the software is detected in accordance with “EOF”, the CPU 410 reads the usable time ΔT ′ of the used software storage medium 1 from the ID table 411 and notifies the second encryption unit 401 of the available time ΔT ′. As a result, the generation of the encrypted software protection information “E _KX (rental information issued by a rental store / ΔT / E _KY (KU))” is realized, and the usable time ΔT ′ is stored in the software storage medium 1. Writing to the RAM area.

Thus, the rental information processing means 4
07 reads the identification number of the software storage medium 1 and the usable time ΔT from the state display memory 406, and clears the key KU stored in the state display memory 406 immediately when the usable time ΔT indicates a zero value. And
When the zero value is not displayed, the usable time ΔT is subtracted according to the elapsed time, and it is checked whether the subtracted usable time ΔT ′ has reached the zero value. Sometimes, the key KU stored in the state display memory 406 is cleared, and even when the zero value is not displayed, the usable time ΔT ′ reaches the zero value while the software storage medium 1 is removed. If there is, the key KU stored in the state display memory 406 is cleared. Then, when the end of use of the software is detected, processing is performed so as to notify the second encrypting means 401 of the subtracted usable time ΔT ′.

As described above, the rental information processing means 407 does not immediately prohibit the use of the software storage medium 1 in which the usable time ΔT is not left, but uses the usable time. It is also possible to adopt a configuration that allows the addition of That is, the input / output means 40
9, the user is inquired whether or not to request the addition of the usable time. When the request is made, the identification number and the additional time of the software storage medium 1 for which the request is made Is input, and the additional time is registered in the ID table 11 (the invalid flag is also cleared). At this time, the software reading device 4 determines that the usable time ΔT recorded on the software storage medium 1 can be distinguished from the original usable time ΔT in order to accurately realize the usable time totaling process described later. Processing is performed so as to record the new usable time ΔT while following a certain mode.

Thus, the software reading device 4
When the usable time of the software is obtained by decrypting the encrypted software protection information recorded on the software storage medium 1 according to the configuration of FIGS. 6 and 7, when the usable time does not indicate a zero value, And decrypting the encrypted software using the key information obtained by decrypting the encrypted software protection information, and providing the decrypted software to the user. On the other hand, when the usable time indicates a zero value, processing is performed so that the decryption of the encryption software is not executed.

Then, the software reading device 4 which has entered the time keeping process of the usable time of the software storage medium 1
Even when the usable time of the encrypted software protection information of the software storage medium 1 for which the reading instruction is given does not indicate a zero value, the usable time is zero while the software storage medium 1 is removed. Is reached, processing is similarly performed so as not to execute decryption of the encryption software.

According to this configuration, in the present invention, even if software is illegally circulated, shoplifted, carried away, or illegally copied in the distribution stage, In accordance with the usable time indicated by the software protection information recorded integrally with the software, the use of the software beyond the usable time will be eliminated, so that the value of the unauthorized use can be greatly reduced. As a result, unauthorized use can be prevented.

On the other hand, the relay destination device 3 installed in the rental shop also manages the use state of the software of the software storage medium 1 which adopts this usage mode. That is, when the software storage medium 1 is collected from the user because the lending time has expired, the relay destination device 3, as shown in FIG. 5, decrypts the first storage unit 300, the first encryption unit 301, and the second encryption unit 301. Encryption means 302, fourth key management means 304, first conversion key management means 305, time management means 306, rental management book 307, input / output means 308, and third encryption means 309. , A second converted key management unit 310, a fourth key management unit 311, and a modem unit 312.

At the time of adopting this apparatus configuration, when the software storage medium 1 is received from the user directly or via the modem means 312, first, the third encryption means 309 makes the input / output means 308 By encrypting the given identification number with the conversion key managed by the second conversion key management unit 310, the fourth key KX (same as the key managed by the fourth key management unit 304 described in FIG. 4). Things)
And the fourth key KX is registered in the fourth key management means 311.

Next, the decryption means 300 transmits the encrypted software protection information “E _KX (rental information issued by the rental store / Δ) written in the RAM area of the software storage medium 1.
T / E _KY (KU)) ”in the fourth key management unit 304
By decrypting with the key KX managed by the company, the encrypted software protection information “rental information issued by rental shop / ΔT /
E _KY (KU) ”. The rental information issued by the rental store and the usable time ΔT are notified to the time management means 306, and the encryption software protection information“ rental information issued by the rental store / ΔT / E _KY (K
U) "is notified to the first encryption means 301.

On the other hand, when the identification number of the software storage medium 1 is input from the input / output unit 308, the second encryption unit 302 converts the identification number into a conversion key managed by the first conversion key management unit 305. By encrypting with the fourth
(The same as the key managed by the fourth key management unit 304 described with reference to FIG. 4), and the fourth key KX is registered in the fourth key management unit 304. When the decrypting means 300 completes the decrypting process, the first encrypting means 301 outputs the encrypted software protection information “Rental store issued rental information / ΔT / E _KY (K
U) is encrypted with the fourth key KX managed by the fourth key management means 304, so that the encrypted software protection information “E _KX (rental information issued by the rental store / ΔT / E _KY)
(KU)) ”, and the encrypted software protection information is electrically written in the RAM area of the hybrid software storage medium 1.

As described above, when the software storage medium 1 is collected from the user, the relay destination apparatus 3 stores the rental store issued rental information and the available time ΔT recorded on the software storage medium 1 in the time management means 306. It is processed so that it may be notified.

When the time management means 306 of the relay destination device 3 collects the rental store issued rental information and the available time ΔT, the information is registered in the rental management book 307, and the collected available time ΔT and The software usage fee is calculated from the available time at the time of lending ΔT registered in the rental management book 307. Upon receiving this calculation process, the rental shop requests the user for a rental fee. Then, subsequently, the usable time ΔT of the collected software storage medium 1 is set to a zero value, and then arranged on a display shelf and lent to the user again.

Further, the time counting means 306 executes a process of checking for unauthorized use of the software by executing a process of counting the management data of the rental management book 307. That is, the usable time before use managed by the rental management book 307 is specified in units of the identification number of the software storage medium 1. Then, the usage time used for calculating the rental fee is totaled by using the identification number of the software storage medium 1 as a unit, and it is checked whether or not this total value exceeds the available time at the specified rental time,
The check result is output to the input / output means 308.

According to this configuration, according to the present invention, it is possible to identify which software has been illegally used and how much at the distribution stage, so that it is possible to accurately grasp the actual situation of illegal use of software. In this configuration, if the rental destination user name of the software storage medium 1 can be specified, it is also possible to specify which user has made unauthorized use such as unauthorized copying.

Although the illustrated embodiment has been described, the present invention is not limited to this. For example, in the embodiment,
Although the configuration in which the initial value of the usable time of the software is recorded at the rental store in the middle of distribution is disclosed, the present invention is not limited to this, and may be recorded at the shipping source. Further, in the embodiment, the software storage medium 1 is disclosed in the form of use for rent, but the present invention is not limited to this, and may be in the form of sale.

[0071]

As described above, according to the present invention,
Software protection information that is recorded integrally with software, even if the software is exposed to unauthorized use such as illegally distributed, shoplifted, carried away, or illegally copied during distribution According to the usable time indicated by the above, the use of the software longer than the usable time is eliminated, so that the value of the unauthorized use can be greatly reduced. From this, it is possible to prevent unauthorized use of software that distributes distribution channels. Moreover, unauthorized use between the shipping source and the relay destination can be completely eliminated.

According to the present invention, at the distribution stage, it is possible to specify which software has been illegally used and how much, so that the actual situation of illegal use of the software can be accurately grasped. Moreover, in this configuration, if it is possible to record the distribution destination of the software, it is also possible to specify who has made unauthorized use such as illegal copying.

[Brief description of the drawings]

FIG. 1 is a principle configuration diagram of the present invention.

FIG. 2 is an example of a distribution system to which the present invention is applied.

FIG. 3 is an example of a device configuration of a shipping source device.

FIG. 4 is an example of a device configuration of a relay destination device.

FIG. 5 is an example of a device configuration of a relay destination device.

FIG. 6 is an embodiment of a device configuration of a software reading device.

FIG. 7 is an example of a device configuration of a software reading device.

FIG. 8 is an explanatory diagram of a time management requirement.

FIG. 9 is an explanatory diagram of a time management requirement.

FIG. 10 is an explanatory diagram of a time management requirement.

[Explanation of symbols]

 REFERENCE SIGNS LIST 1 software storage medium 2 shipping source device 3 relay destination device 4 software reading device 10 non-rewritable storage area 11 rewritable storage area 20 first writing means 21 second writing means 30 encryption structure changing means 31 time data management Means 32 Tabulation means 33 Comparison means 40 First decoding means 41 Second decoding means 42 Calculation means 43 Updating means 44 Inhibiting means 45 Setting means

────────────────────────────────────────────────── ─── Continuation of the front page (56) References JP-A-5-298085 (JP, A) JP-A-5-224072 (JP, A) (58) Fields investigated (Int.Cl. ⁶ , DB name) G06F 9/06

Claims (7)

(57) [Claims] A software storage medium for recording software for distributing a distribution channel, wherein the software storage medium has a non-rewritable storage area (10).
And a rewritable storage area (11), and prepares a hybrid storage medium having the configuration of the rewritable storage area (11).
0), the encryption information of the software to be provided is adopted, and the rewritable storage area (11) of the hybrid storage medium has the key information for decrypting the encryption software and the usable time of the software. A software storage medium characterized in that the cryptographic information of the above is recorded as cryptographic software protection information. 2. The software storage medium according to claim 1, wherein an initial value of a usable time of the software is recorded in a distribution route. 3. The software storage medium according to claim 1, wherein the encrypted software protection information is encrypted in a multiplex configuration, and the multiplex encryption configuration is changed in the middle of a distribution path. A software storage medium characterized by being constituted. 4. A software reading device for reading encrypted software recorded on a software storage medium having the recording configuration according to claim 1, 2 or 3, wherein the encrypted software is protected by decrypting the encrypted software protection information. First decryption means (40) for decrypting key information for decrypting the software and the usable time of the software, and second decryption means for decrypting the encrypted software according to the key information decrypted by the first decryption means (40). A calculating means (41) for calculating a new usable time by subtracting the usable time for decoding by the first decoding means (40) according to the elapsed time; Means for updating the usable time of the cryptographic software protection information recorded on the software storage medium in a timely manner according to the new usable time calculated by the means (42).
3) When either the usable time for decoding by the first decoding means (40) or the usable time calculated by the calculating means (42) indicates a zero value, the second decoding Means (41)
Deterrence means (44) that controls to prevent execution of decryption processing
And a software reading device. 5. The software reading apparatus according to claim 4, wherein when the subtraction value of the usable time reaches a zero value, a use additional time which becomes a new usable time is set, and is distinguished from the original usable time. A software reading device, characterized by comprising setting means (45) for updating the usable time of the encrypted software protection information recorded on the software storage medium in accordance with the new usable time while following a possible mode. 6. A software management system for managing a use state of software recorded on a software storage medium having a recording configuration according to claim 1, 2 or 3, wherein the software storage medium collected from a distribution channel is stored in a software storage medium. By totaling the usable time of the recorded software,
A software management system characterized by being configured to calculate software usage time. 7. The software management system according to claim 6, wherein the software usable time is totalized by using the identification number of the software storage medium as a unit. .