SECURITY CONTROL METHOD FOR DATA TRANSMISSION PROCESS OF SOFTWARE PROTECTION APPARATUS AND APPARATUS THEREOF

• US 20070179891A1
• Filed: 11/29/2006
• Published: 08/02/2007
• Est. Priority Date: 01/27/2006
• Status: Abandoned Application

• Current Assignee: Feitian Technologies Company Limited
• Original Assignee: Feitian Technologies Company Limited
• Inventors: LU, Zhou, YU, Hua Zhang
• Application Number:
  US11/564,464
• Publication Number:
  US 20070179891A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes

Abstract

The present invention relates to a secure transmission method and apparatus, particularly to a security control method for a data transmission process and a software protection apparatus using the same, where data transmitted between a computer running protected software and the software protection apparatus is in a cipher-text form, and thus a plain text does not appear in a communication line during the whole process. Moreover, since a random number is involved for scrambling and the data is encrypted, hence commands sent from the protected software to and those returned from the software protection apparatus change constantly even when the same command is sent from the sending end. In this way, it will be more difficult for a cracker to crack, thus securing the transmission of private confidential data.

Claims

1. A security control method for a data transmission process between a software protection apparatus and a computer, wherein data is transmitted in a cipher-text form between the computer running protected software and the software protection apparatus, and the method comprises the steps of:

1) encrypting or/and scrambling data or a command to be sent and generating the cipher text at a data sending end;

2) transmitting the cipher text;

3) decrypting or/and descrambling the received cipher text and generating a plain text or command at a data receiving end; and

4) performing a predetermined operation on the plain text or command.

2. A security control method according to claim 1, wherein a random number is involved in the encrypting or scrambling.

3. A security control method according to claim 2, wherein one same random number is involved in a roundtrip process for the data or command to verify returned data or command.

4. A security control method according to claim 1, wherein the encryption algorithm or scrambling method for the data sending end and the decryption algorithm or descrambling method for the data receiving end are reversible with respect to each other and are confidential.

5. A security control method according to claim 2, wherein the encryption algorithm or scrambling method for the data sending end and the decryption algorithm or descrambling method for the data receiving end are reversible with respect to each other and are confidential.

6. A security control method according to claim 3, wherein the encryption algorithm or scrambling method for the data sending end and the decryption algorithm or descrambling method for the data receiving end are reversible with respect to each other and are confidential.

7. A security control method according to claim 1, wherein a use privilege varying from one user to another is permitted for the protected software, and the encryption algorithm or scrambling method is adopted depending upon the varying privilege.

8. A security control method according to claim 2, wherein a use privilege varying from one user to another is permitted for the protected software, and the encryption algorithm or scrambling method is adopted depending upon the varying privilege.

9. A security control method according to claim 3, wherein a use privilege varying from one user to another is permitted for the protected software, and the encryption algorithm or scrambling method is adopted depending upon the varying privilege.

10. A software protection apparatus using a security control method according to claim 1, comprising a master chip and a communication module and a memory respectively connected with the master chip, wherein the communication module is a USB interface communication module, a serial interface communication module or a parallel interface communication module.

11. A software protection apparatus according to claim 10, wherein the master chip is a microprocessor or a smart card chip comprising a Central Processing Unit (CPU), a Micro Controller Unit (MCU) or a Single Chip Micyoco (SCM).

12. A software protection apparatus according to claim 10, wherein at least one of the communication module and the memory is built in or separated from the master chip.

13. A software protection apparatus according to claim 11, wherein at least one of the communication module and the memory is built in or separated from the master chip.