Remote Authorization for Unlocking Electronic Data System and Method

• US 20080082446A1
• Filed: 10/31/2007
• Published: 04/03/2008
• Est. Priority Date: 10/01/1999
• Status: Abandoned Application

• Current Assignee: Greater Boston Authentication Solutions, LLC
• Original Assignee: Greater Boston Authentication Solutions, LLC
• Inventors: Creath, Peter, Hicks, Christian
• Application Number:
  US11/932,711
• Publication Number:
  US 20080082446A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

Controlling unauthorized access to software distributed to a user by a vendor. A verification key is generated by a product key generator and either embedded in the software prior to distribution or packaged with the software as a self-installing package. The verification key includes a public verification key. The combination of the software and the verification key create distributable software which is distributed to a user. The user installs the software on a user computer system as protected software. To obtain a user key, the user inputs identifying information, which may be for the user or for a group, which is sent to a user key generator. The user key generator converts the identifying information to a numeric representation and then generates, by signing the numeric representation with the private signing key, a user key, which is returned to the user. Using the verification key, a user key verifier verifies a relationship between the user key and the identifying information to determine an access level to the protected software. The system verifies the relationship between the user key and the identifying information every time the software is run to ensure continued protection of the software after installation.

Claims

1. A method for controlling unauthorized use of software distributed by a vendor, comprising the steps of:

generating, with a digital signature algorithm, a verification key;

combining the software and the verification key to create distributable software;

inputting identifying information;

generating, with the digital signature algorithm using the identifying information, a user key;

conveying the user key to a user computer system; and

verifying, with the verification key, a relationship between the user key and the identifying information to determine an access level to the software.

2. The method of claim 1, wherein the step of generating the user key uses a numeric representation of the identifying information.

3. The method of claim 2, further comprising the step of converting the identifying information to the numeric representation.

4. The method of claim 1, wherein the identifying information is numeric.

5. The method of claim 1, wherein the step of inputting comprises user entry of the identifying information.

6. The method of claim 1, wherein the step of inputting comprises automated collection of the identifying information.

7. The method of claim 6, wherein the automated collection of the identifying information occurs without requiring the user to input identifying information.

8. The method of claim 1, wherein the identifying information comprises computer system identifying information.

9. The method of claim 1, wherein the step of generating the user key uses other information in addition to the identifying information.

10. The method of claim 1, wherein the identifying information comprises personally identifiable information of a user.

11. A method for controlling unauthorized use of software distributed by a vendor, comprising the steps of:

generating, with a digital signature algorithm, a verification key;

combining the software and the verification key to create distributable software;

inputting user identifying information;

generating, with the digital signature algorithm using the user identifying information, a user key;

conveying the user key to a user computer system; and

verifying, with the verification key, a relationship between the user key and the user identifying information to determine an access level to the software.

12. The method of claim 11, wherein the step of generating the user key uses a numeric representation of the user identifying information.

13. The method of claim 12, further comprising the step of converting the user identifying information to the numeric representation.

14. The method of claim 11, wherein the user identifying information is numeric.

15. The method of claim 11, wherein the step of inputting comprises user entry of the user identifying information.

16. The method of claim 11, wherein the step of inputting comprises automated collection of the user identifying information.

17. The method of claim 16, wherein the automated collection of the user identifying information occurs without requiring the user to input user identifying information.

18. The method of claim 11, wherein the user identifying information comprises computer system identifying information.

19. The method of claim 11, wherein the step of generating the user key uses other information in addition to the user identifying information.

20. The method of claim 11, wherein the user identifying information comprises personally identifiable information of a user.

21. A computer program product comprising:

a computer-useable medium having a computer-readable program code embodied in said medium for controlling unauthorized use of software distributed by a vendor, the computer readable program code in said computer program product comprising;

computer-readable program code for causing the computer to receive identifying information; and

computer-readable program code for causing the computer to generate, with the digital signature algorithm using the identifying information, a user key for use in determining an access level to the software.

22. The computer program product of claim 21, further comprising computer-readable program code for causing the computer to convey electronically the user key to a user computer system.

23. A computer program product comprising:

a computer-useable medium having a computer-readable program code embodied in said medium for controlling unauthorized use of software distributed by a vendor, the computer readable program code in said computer program product comprising;

computer-readable program code for causing the computer to generate, with a digital signature algorithm, a verification key; and

computer-readable program code for causing the computer to combine the software and the verification key to create distributable software.

24. A computer program product comprising:

a computer-useable medium having a computer-readable program code embodied in said medium for controlling unauthorized use of software distributed by a vendor, the software having a verification key, the computer readable program code in said computer program product comprising;

computer-readable program code for causing the computer to receive identifying information;

computer-readable program code for causing the computer to receive a user key; and

computer-readable program code for causing the computer to verify, with the verification key generated with a digital signature algorithm, a relationship between the user key and the identifying information to determine an access level to the software.

25. The computer program product of claim 24, wherein the computer-readable program code comprises the software.