Security features in on-line and off-line delivery of applications

• US 20050091534A1
• Filed: 04/02/2004
• Published: 04/28/2005
• Est. Priority Date: 10/28/2003
• Status: Active Grant

• Current Assignee: Exent Technologies Incorporated
• Original Assignee: Exent Technologies Incorporated
• Inventors: Nave, Itay, Sheory, Ohad
• Granted Patent: US 7,533,370 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/554 involving event detection and direct action

Abstract

A method and system for determining whether a client is attempting to copy an application or use the application without authorization. First, data for at least one prediction log file for the application is created. Then, based on the at least one prediction log file, prediction knowledge is determined for the application, where the prediction knowledge is stored in a prediction file. The prediction file is then forwarded to the client executing the application. It is then determined by using the predication file whether the client is attempting to copy the application or use the application without authorization. If the client is attempting to copy the application or use the application without authorization, then the client'"'"'s access to the application is terminated. In an offline mode, usage information is bound to user saved data such that modification of usage information renders user saved data unusable. This prevents unauthorized access to an offline delivered application.

Claims

1. A method for determining whether a client is attempting to copy an application or use the application without authorization, the method comprising:

creating data for at least one prediction log file for the application;

based on said at least one prediction log file, determining prediction knowledge for the application, wherein said prediction knowledge is stored in a prediction file;

forwarding said prediction file to the client executing the application; and

using said prediction file to determine whether the client is attempting to copy the application or use the application without authorization.

2. The method of claim 1, further comprising:

if it is determined that the client is attempting to access the application without authorization, then terminating the client'"'"'s access to the application.

3. The method of claim 1, wherein the step of creating is comprised of the following:

merging block IDs;

creating short term strings;

deleting triggers;

creating long term strings;

sorting said short term strings and said long term strings; and

creating the triggers scheme data structure to create said at least one prediction log file.

4. The method of claim 3, wherein the step of merging block IDs is comprised of the following:

gathering at least one record in a connection table, wherein said at least one record has a first ID key and an second ID key;

sorting said gathered records by said second ID key, wherein said second ID key in said sorted records is sorted by average distance ascending; and

merging said gathered records with said first ID key and said second ID key with records with said second ID key and a third ID key to create records with said first ID key and said third ID key.

5. The method of claim 1, wherein the step of using said prediction file is comprised of the following:

using said prediction file to determine pairs of block IDs that are most likely to be accessed together, wherein said pairs of block IDs has a first ID block and a second ID block;

when the client accesses said first ID block, then starting a counter of D block requests; and

after D block requests if the client has not accessed said second ID block, then indicating that the client is attempting to copy the application or use the application without authorization.

6. A system for determining whether a client is attempting to copy an application or use the application without authorization, the method comprising:

means for creating data for at least one prediction log file for the application;

based on said at least one prediction log file, means for determining prediction knowledge for the application, wherein said prediction knowledge is stored in a prediction file;

means for forwarding said prediction file to the client executing the application; and

means for using said prediction file to determine whether the client is attempting to copy the application or use the application without authorization.

7. The system of claim 6, further comprising:

means for terminating the client'"'"'s access to the application if it is determined that the client is attempting to access the application without authorization.

8. The system of claim 6, wherein the means for creating is comprised of the following:

means for merging block IDs;

means for creating short term strings;

means for deleting triggers;

means for creating long term strings;

means for sorting said short term strings and said long term strings; and

means for creating the triggers scheme data structure to create said at least one prediction log file.

9. The system of claim 8, wherein the means for merging block IDs is comprised of the following:

means for gathering at least one record in a connection table, wherein said at least one record has a first ID key and an second ID key;

means for sorting said gathered records by said second ID key, wherein said second ID key in said sorted records is sorted by average distance ascending; and

means for merging said gathered records with said first ID key and said second ID key with records with said second ID key and a third ID key to create records with said first ID key and said third ID key.

10. The system of claim 6, wherein the means for using said prediction file is comprised of the following:

means for using said prediction file to determine pairs of block IDs that are most likely to be accessed together, wherein said pairs of block IDs has a first ID block and a second ID block;

means for starting a counter of D block requests when the client accesses said first ID block; and

means for indicating that the client is attempting to copy the application or use the application without authorization after D block requests if the client has not accessed said second ID block.