Method and device for protecting software delivered to a user by a supplier

• US 4,683,553 A
• Filed: 02/05/1986
• Issued: 07/28/1987
• Est. Priority Date: 03/18/1982
• Status: Expired due to Term

• Current Assignee: CP8 Technologies (Thales SA)
• Original Assignee: CII Honeywell Bull
• Inventors: Mollier, Jean
• Primary Examiner(s): Shaw, Gareth D.
• Assistant Examiner(s): Kriess, Kevin A.
• Application Number:
  US06/828,080
• Time in Patent Office: 538 Days
• Field of Search: 364/200 MS File, 364/900 MS File, 235/376, 235/380, 235/382, 235/382.5, 235/384, 235/385, 235/487, 178/22.08, 178/22.09
• US Class Current: 705/55
• CPC Class Codes: G06F 21/123 by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06Q 20/346 Cards serving only as information carrier of service
• CPC Class Codes: G07F 7/1008 Active credit-cards provided with means to personalise their use, e.g. with PIN-introduction/comparison system

Abstract

The invention relates to a method and a device for protecting software delivered to a user by a supplier. The method amounts to rendering the programs non-executable in the state in which they have been delivered to the users. With each program (P_i) there is associated a validation key defined via a main validation key (V_i) delivered by the supplier and recorded in a storage area (M) of the user'"'"'s machine (1), and via a supplementary key (V'"'"'_i) computed on the lever of a card (C) issued to the user via a secret code (S) and via arguments (b_i) that identify each program (P_i) and are recorded in a storage area (M1) of the card (C).

Claims

1. A system for protecting software programs (P_l. . . , P_i, . . . P_n) adapted to be executed on a data processing machine (1) of a user of the software programs, said machine having at least one memory (M), control and processing circuits (2), and an input/output device (3), the system comprising:

a card (C), specific to the user, possessing at least one memory (M1) and processing circuits (4), and

a card reader (LC) coupled with the input/output device (3) of the machine (1) and with the card (C) to enable data transfer therebetween;

the memory (M) of the machine (1) containing at least one program (P_i) delivered by a supplier of the software programs, the one program including an identification parameter (a_i) which identifies the one program and having a scrambled portion which renders the one program non-executable on the machine, containing a main validation key code (V_i), specific to the one program, issued by the supplier, and containing a master program (SPP);

the memory (M1) of the card (C) containing at least one secret code (S) specific to the user and known only to the suppler, and identification arguments which identify the programs, at least one of said identification arguments (b_i) identifying said one program, the card having means responsive to the identification parameter (a_i) contained in the one program (P_i) for addressing said identification argument (b_i), and the processing circuits (4) of the card having means for computing a supplementary validation key code (V'"'"'_i) from the secret code (S) and the addressed identification argument (b_i) of the program (P_i) and for transferring the supplementary validation key code to the machine; and

wherein the master program (SPP) is formed to combine the supplementary validation key code (V'"'"'_i) and the main validation key code (V_i) for unscrambling the scrambled portion of the program (P_i) and rendering the program executable.

2. A method of protecting software programs (P₁, . . . P_i, . . . P_n) delivered by a supplier to prospective users, each user possessing a data processing machine (1) on which said programs can be executed, the method comprising:

prior to delivery to a user rendering the programs nonexecutable in the state in which the programs are delivered, said rendering comprising scrambling a portion of each program (P_i) such that a predetermined validation key (V_i, V'"'"'_i) is required for unscrambling the program (P_i) to transform it into an executable state, said predetermined validation key comprising a combination of a main validation key (V_i) and a supplementary validation key (V'"'"'_i), the main validation key being defined in accordance with the program (P_i) and a secret code (S) which is unique to the user and known solely to the supplier, and the program (P_i) having an identification parameter (a_i) which identifies the program;

coupling to the user'"'"'s machine a portable card having processing circuits (4) and a storage area (M₁) in which are recorded the user'"'"'s unique secret code and identification arguments (b₁, . . . b_i, . . . b_n) which are associated with the identification parameters (a₁, . . . a_i, . . . a_n) of the programs (P₁, . . . P_i, . . . P_n);

storing in a memory (M) of the user'"'"'s machine the program (P_i) and the corresponding main validation code (V_i);

transferring to the card the identification parameter (a_i);

producing in the processing circuits of the card the supplementary validation key (V'"'"'_i) for the program (P_i) as a function of the secret code and an associated identification argument (b_i) and supplying said supplementary validation key to the user'"'"'s machine;

combining in the user'"'"'s machine, the main validation key and the supplementary validation key to produce the predetermined validation key; and

applying the predetermined validation key to the program (P_i) to unscramble the program (P_i) and transform it into an executable state.

3. The method as defined in claim 2 further comprising:

prerecording in each user'"'"'s card prior to delivery of the card to the user identical identification arguments (b_i) for identifying the same program regardless of the user of said program, and

wherein said storing comprises storing in each user'"'"'s machine a main validation key (V_i) which differs for each program (P_i) delivered to the user and which differs from the main validation key for the same program (P_i) delivered to another user.

4. The method as defined in claim 3, wherein said prerecording further includes:

prerecording in the storage area of the card the identification arguments (b₁, . . . b_i, . . . b_n) of the programs in the form of a table (TB); and

wherein the card is formed to permit addressing of at least one said identification argument (b_i) of the program (P_i) by means of at least one associated identification parameter (a_i) which is transferred to the card by the user'"'"'s machine.

5. The method as defined in claim 2 comprising:

recording in the memory of the user'"'"'s machine a main subprogram (SPP);

said subprogram (SPP) being formed to transfer the identification parameters (a_i) to the card (C), for addressing said identification arguments (b_i), to receive from the processing circuits (4) of the card (C) the supplementary validation key (V'"'"'_i) produced from the arguments (b_i) addressed by the identification parameters (a_i) and from the secret code (S) of the card (C), and to combine said supplementary validation key (V'"'"'_i) with the main validation key (V_i) of the program (P_i) to be executed in order to produce said predetermined validation key and render said program executable.

6. The method as defined in claim 2, wherein said scrambling comprises rendering at least one instruction of each program non-executable through scrambling of an instruction code of the instruction.

7. The method as defined in claim 6 further comprising forming each main validation key (V_i) and each supplementary validation key (V'"'"'_i) as a binary configuration with p bits.

8. The method as defined in claim 7, wherein, for the purpose of unscrambling the instruction code, the method further comprises forming the main validation key (V_i) and the supplementary validation key (V'"'"'_i) so as to unscramble of the instruction code upon the keys being combined in a logic operation.