METHOD, SYSTEM, AND PROGRAM FOR DISTRIBUTING SOFTWARE BETWEEN COMPUTER SYSTEMS

• US 20070300075A1
• Filed: 09/06/2007
• Published: 12/27/2007
• Est. Priority Date: 10/01/1999
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Shackelford, David
• Granted Patent: US 7,437,570 B2
• Time in Patent Office: Days
• US Class Current: 713/182
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

Disclosed is a system, method, and program for distributing computer software from a first computer system. The first computer system receives a request for software from a second computer system. In response, the first computer system generates a message, encrypts the generated message, and transmits the encrypted message to the second computer system. The first computer system later receives an encrypted response from the second computer system and processes the encrypted response to determine whether the second computer system is authorized to access the software. The second computer system is permitted access to the software after determining that the second computer system is authorized to access the software. To access the computer software with the second computer system, the second computer system transmits a request for the software to the first computer system. The second computer system receives an encrypted message from the first computer system and processes the encrypted message to generate a response message. The response message is transmitted to the first computer system. In response, the second computer system is permitted access to the requested software.

Claims

1. A system comprising a source computer system for distributing computer software to a target computer system, comprising:

a computer readable medium maintaining keys of computer systems authorized to access software to be distributed;

a program executed by the source computer system for performing operations, the operations comprising;

receiving a request for software from the target computer system;

generating a message;

encrypting the generated message;

transmitting the encrypted message to the target computer system;

receiving an encrypted response from the target computer system;

determining whether there is one maintained key for the target computer system capable of decrypting the received encrypted response;

decrypting the encrypted response with the determined key if there is one determined key;

determining whether the decrypted response includes a part of the generated message transmitted to the target computer system, wherein the target computer system is authorized to access the software if the decrypted response includes the part of the generated message and wherein the target computer system is not authorized to access the software if there is not one maintained key for the target computer system that is capable of decrypting the encrypted response or the decrypted response does not include the part of the generated message transmitted to the target computer system; and

permitting the target computer system access to the software after determining that the target computer system is authorized to access the software.

2. The system of claim 1, wherein the software comprises software that is a member of a set of software types comprising computer programs, data, text, images, sound, and video.

3. The system of claim 1, wherein the operations further comprise:

transmitting the software to the target computer system after permitting access.

4. The system of claim 1, wherein the means for generating the message further comprises generating a random component to include within the message, and wherein the means for determining whether the decrypted response includes the part of generated message comprises determining whether the decrypted response includes the random component.

5. The system of claim 1, wherein the software comprises a computer program, further comprising means for automatically causing the installation of the computer software on the target computer system when the computer software is transmitted to the target computer system.

6. The system of claim 1, wherein the processing of the encrypted response further comprises determining whether a message included in the encrypted response matches the generated message, wherein the target computer system is authorized to access the software if the message included in the encrypted response matches the generated message.

7. The system of claim 6, wherein the computer readable medium further includes a private key associated with the source computer system, and wherein the encrypting of the message comprises encrypting the message with the private key that can only be decrypted using a public key associated with the source computer system, wherein the target system maintains the public key that is capable of decrypting messages encrypted with the private key, wherein the encrypted response received from the target computer system is encrypted with the target computer system'"'"'s private key, wherein the maintained keys in the computer readable medium comprise public keys from the authorized computer systems, wherein the processing of the encrypted response further comprises decrypting the encrypted response with one of the maintained public keys.

8. The system of claim 1, wherein the generated message includes a random component and a request for configuration data from the target computer system, wherein processing the encrypted response comprises determining whether the response includes configuration data for one of the computer systems authorized to access the computer software.

9. The system of claim 8, wherein the generated message is encrypted with a private key of the source computer system, wherein the computer readable medium includes a private key that is the only key capable of being decrypted by a public key associated with the source computer system, and wherein the encrypted response is encrypted with a private key of the target computer system, wherein the maintained keys comprise public keys from authorized computer systems.

10. A system comprising a target computer system for accessing computer software from a source computer system, comprising:

a computer program executed by the target computer system to perform operations, the operations comprising;

providing a key to the source computer system capable of decrypting an encrypted response from the target computer system;

transmitting a request for the software to the source computer system;

receiving an encrypted message from the source computer system;

processing the encrypted message to generate a response message including a part of the encrypted message;

encrypting the response message, wherein the encrypted response message is capable of being decrypted by the provided key at the source computer system;

transmitting the encrypted response message to the source computer system; and

receiving access to the requested software in response to the encrypted response message.

11. The system of claim 10, wherein the received encrypted message is encrypted with a private key of the first computer system that is the only key capable of being decrypted by a public key associated with the first computer system, wherein the operations further comprise;

decrypting the received encrypted message with the public key associated with the first computer system that is the only key capable of decrypting messages encrypted with the first computer system'"'"'s private key;

encrypting the decrypted message with the target computer system'"'"'s private key; and

transmitting the message encrypted with the target computer system'"'"'s private key to the source computer system, wherein the key made available by the target computer system that is capable of decrypting the received encrypted response comprises a public key associated with the target computer system.

12. A system, comprising:

a target computer system;

a source computer system in communication with the target computer system;

wherein the source and the target computer systems perform operations, the operations comprising;

maintaining, by the source computer system, keys of computer systems authorized to access software to be distributed;

providing, by the target computer system, a key to the source computer system capable of decrypting an encrypted response from the target computer system;

transmitting, by the target computer system, a request for the software to the source computer system;

receiving, by the source computer system, the request for software from the target computer system;

generating, by the source computer system;

a message;

encrypting, by the source computer system, the generated message;

transmitting, by the source computer system, the encrypted message to the target computer system;

receiving, by the target computer system, the encrypted message from the source computer system;

processing, by the target computer system, the encrypted message to generate a response message including a part of the encrypted message;

encrypting, by the target computer system, the response message, wherein the encrypted response message is capable of being decrypted by the provided key at the source computer system;

transmitting, by the target computer system, the encrypted response message to the source computer system;

receiving, by the sourcecomputer system, the encrypted response from the target computer system;

determining, by the source computer system, whether there is one maintained key for the target computer system capable of decrypting the received encrypted response;

decrypting, by the source computer system, the encrypted response with the determined key if there is one determined key;

determining, by the source computer system, whether the decrypted response includes a part of the generated message transmitted to the target computer system, wherein the target computer system is authorized to access the software if the decrypted response includes the part of the generated message and wherein the target computer system is not authorized to access the software if there is not one maintained key for the target computer system that is capable of decrypting the encrypted response or the decrypted response does not include the part of the generated message transmitted to the target computer system; and

transmitting, by the source computer system, indication of access to the target computer system after determining that the target computer system is authorized to access the software;

receiving, by the target computer system, access to the requested software in response to the encrypted response message; and

permitting, by the source computer system, the target computer system access to the software after determining that the target computer system is authorized to access the software.

13. The system of claim 12, wherein the software comprises software that is a member of a set of software types comprising computer programs, data, text, images, sound, and video.

14. The system of claim 12, wherein the operations further comprise:

transmitting, by the source computer system, the software to the target computer system after permitting access.

15. The system of claim 12, wherein generating the message further comprises generating a random component to include within the message, and wherein determining whether the decrypted response includes the part of generated message comprises determining whether the decrypted response includes the random component.

16. The system of claim 12, wherein the software comprises a computer program, wherein the software automatically causes the installation of the computer software on the target computer system when the computer software is transmitted to the target computer system.

17. The system of claim 12, wherein the processing of the encrypted response further comprises determining whether a message included in the encrypted response matches the generated message, wherein the target computer system is authorized to access the software if the message included in the encrypted response matches the generated message.

18. The system of claim 17, wherein the source computer system further maintains a private key associated with the source computer system, and wherein the encrypting of the message comprises encrypting the message with the private key that can only be decrypted using a public key associated with the source computer system, wherein the target system maintains the public key that is capable of decrypting messages encrypted with the private key, wherein the encrypted response received from the target computer system is encrypted with the target computer system'"'"'s private key, wherein the keys maintained by the source computer system comprise public keys from the authorized computer systems, wherein the processing of the encrypted response further comprises decrypting the encrypted response with one of the maintained public keys.

19. The system of claim 12, wherein the generated message includes a random component and a request for configuration data from the target computer system, wherein processing the encrypted response comprises determining whether the response includes configuration data for one of the computer systems authorized to access the computer software.

20. The system of claim 19, wherein the generated message is encrypted with a private key of the source computer system, wherein the source computer system maintains a private key that is the only key capable of being decrypted by a public key associated with the source computer system, and wherein the encrypted response is encrypted with a private key of the target computer system, wherein the maintained keys comprise public keys from authorized computer systems.

21. The system of claim 12, wherein the received encrypted message is encrypted with a private key of the source computer system that is the only key capable of being decrypted by a public key associated with the source computer system, wherein the operations further comprise:

decrypting, by the target computer system, the received encrypted message with the public key associated with the source computer system that is the only key capable of decrypting messages encrypted with the source computer system'"'"'s private key;

encrypting, by the target computer system, the decrypted message with the target computer system'"'"'s private key; and

transmitting, by the target computer system, the message encrypted with the target computer system'"'"'s private key to the first computer system, wherein the key made available by the target computer system that is capable of decrypting the received encrypted response comprises a public key associated with the target computer system.