Computer software licensing authentication method and apparatus

• US 5,579,479 A
• Filed: 10/03/1994
• Issued: 11/26/1996
• Est. Priority Date: 10/03/1994
• Status: Expired due to Fees

• Current Assignee: PLUM Hall Incorporated
• Original Assignee: PLUM Hall Incorporated
• Inventors: Plum, Thomas
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): HUA, LY
• Application Number:
  US08/316,888
• Time in Patent Office: 785 Days
• Field of Search: 345/188.01, 345/187.01, 345/186, 380/4, 380/23, 364/401
• US Class Current: 726/28
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself

Abstract

A method and apparatus provide a level of authentication or a computer software program sign-on that is intermediate trust-based licensing and hardware based protection. Entry of a registration name is required at the time of initial use of the program, and at each invocation of the program the computer determines if the invocation is within the freshness interval (based upon the number of sign-ons, e.g. 30, or the passage of time, e.g. 30 days). If the sign-on is not within the freshness level, the computer and display screen provide a re-authentication inquiry, which may require a response before a standard sign on is allowed. If the re-authentication response is at odds with the initial registration name, standard sign-on may be precluded, and the screen displays a phone/fax number or electronic address to contact for appropriate registration information. The software may be a Shell++ product, and the registration number is provided in an Init-File, a Chalkmark Checksum calculated encoded at initial registration. At each invocation the computer may also be controlled to determine if there is an Init-File in some directory in the current command search path for the software, and if is there is a Chalk-File in the same directory as an Init-File, and if the system'"'"'s file version date for Chalk-File is the same as the date encoded into the Chalkmark Checksum.

Claims

1. A method of providing a level of authentication for a computer software program sign-on intermediate trust-based licensing and hardware-based protection, using a computer and a display screen having a standard sign-on procedure, comprising the steps of:

(a) requiring entry of a registration name at the time of initial use of the computer software program which is provided in an Init-File;

(b) providing a freshness interval based upon number of sign-ons or the passage of time as the maximum allowable hiatus between re-authentication sign-ons;

(c) at each invocation of the computer software program determining if an invocation is within the freshness interval;

(d) if the invocation is within the freshness interval, controlling the computer and display screen to provide standard sign-on;

(e) if the invocation is not within the freshness interval, controlling the computer and display screen to provide a re-authentication query on the display screen which requires a response before standard sign-on will be allowed;

(f) if a correct response to the query in step (e) is given, controlling the computer and display screen to provide standard sign-on, and starting a new re-authentication freshness interval so that steps (c)-(e) may be repeated; and

(g) if an incorrect response to the query in step (e) is given, controlling the computer and display screen to provide information about authorized registration.

2. A method as recited in claim 1 wherein step (g) is further practiced to preclude standard sign-on to the computer software until an authorizing registration sequence has been entered into the computer.

3. A method as recited in claim 2 wherein step (g) is practiced, at least in part, by providing a phone or fax number or electronic address, or all, which may be contacted for appropriate registration information on the display screen.

4. A method as recited in claim 2 wherein step (e) is practiced to control the display screen to query what name, using the same spelling, the software program was initially registered under.

5. A method as recited in claim 4 wherein the software is a Shell++ product;

and comprising the further step of controlling the computer, in response to the query posed in step (e), to calculate a Checksum using the serial number from the Init-File and the entered registered user name, and to compare the calculated Checksum to the Checksum recorded in the Init-File.

6. A method as recited in claim 2 wherein step (e) is practiced to control the display screen to display the name of one or more registered users and inquire as to whether or not sign-on is being practiced by a registered user.

7. A method as recited in claim 2 wherein the software is a Shell++ product.

8. A method as recited in claim 7 wherein at each invocation of the computer software also determining if there is an Init-File in some directory in the current command search path for the software, and if there is not requiring re-authentication by initiating steps (e)-(g).

9. A method as recited in claim 7 wherein in response to step (a) there are the further steps of controlling the computer to compute a Chalkmark Checksum, and encoding the Chalkmark Checksum in a Chalk-File and recording the date encoded;

and wherein at each invocation of the computer software also determining (i) if there is a Chalk-File in the same directory as Init-File, and (ii) if the system'"'"'s file-version date for Chalk-File is the same as, within a predetermined deviation range, the date encoded into the Chalkmark Checksum; and

if there is not, requiring re-authentication by initiating steps (e)-(g).

10. A method as recited in claim 1 wherein step (b) is practiced to provide a freshness interval of between one and five weeks.

11. A method of providing a level of authentication for a computer software program sign-on intermediate trust-based licensing and hardware-based protection, using a computer and a display screen having a standard sign-on procedure, comprising the steps of:

(a) requiring entry of a registration name at the time of initial use of the computer software program which is provided in an Init-File;

(b) providing a freshness interval based upon number of sign-ons or the passage of time as the maximum allowable hiatus between re-authentication sign-ons;

(c) at each invocation of the computer software program determining if an invocation is within the freshness interval;

(d) if the invocation is within the freshness interval, controlling the computer and display screen to provide standard sign-on;

(e) if the invocation is not within the freshness interval, controlling the computer and display screen to provide a re-authentication query on the display screen which requires a response before standard sign-on will be allowed;

(f) if a correct response to the query in step (e) is given, controlling the computer and display screen to provide standard sign-on, and starting a new re-authentication freshness interval so that steps (c)-(e) may be repeated;

(g) if an incorrect response to the query in step (e) is given, controlling the computer and display screen to provide information about authorized registration; and

wherein there are at least two successive versions of the computer software, and comprising the further step of controlling the computer and display screen to provide a different Checksum for each of the versions to initiate steps (e)-(g) if one of the versions had not be properly registered.

13. A method as recited in claim 11 comprising the further step of controlling the computer and display screen to display a message on the display screen reminding the user, at least near the end of the demonstration period, that registration is necessary, and providing information about effecting registration.

12. A method of providing a level of authentication for a computer software program sign-on intermediate trust-based licensing and hardware-based protection, using a computer and a display screen having a standard sign-on procedure, comprising the steps of:

(a) requiring entry of a registration name at the time of initial use of the computer software program which is provided in an Init-File;

(b) providing a freshness interval based upon number of sign-ons or the passage of time as the maximum allowable hiatus between re-authentication sign-ons;

(c) at each invocation of the computer software program determining if an invocation is within the freshness interval;

(d) if the invocation is within the freshness interval, controlling the computer and display screen to provide standard sign-on;

(e) if the invocation is not within the freshness interval, controlling the computer and display screen to provide a re-authentication query on the display screen which requires a response before standard sign-on will be allowed;

(f) if a correct response to the query in step (e) is given, controlling the computer and display screen to provide standard sign-on;

(g) if an incorrect response to the query in step (e) is given, controlling the computer and display screen to provide information about authorized registration; and

(h) controlling the computer and display screen so that steps (e)-(g) are disabled for an initial predetermined period of time or sign-on procedures to provide a demonstration period.

14. A method of providing an authentication procedure for a computer software program sign-on, using a computer and a display screen having a standard sign-on procedure, comprising the steps of:

(a) requiring entry of a registration name at the time of initial use of the computer software program which is provided in an Init-File;

(b) providing a freshness interval based upon number of sign-ons or the passage of time as the maximum allowable hiatus between re-authentication sign-ons;

(c) at each invocation of the computer software program determining if an invocation is within the freshness interval;

(d) if the invocation is within the freshness interval, controlling the computer and display screen to provide standard sign-on;

(e) if the invocation is not within the freshness interval, controlling the computer and display screen to display the name of one or more registered users and inquire as to whether or not sign-on is being practiced by a registered user and to simultaneously provide information about authorized registration and starting a new re-authentication freshness interval so that steps (c) and (d) may be repeated; and

(f) after step (e) controlling the computer and the screen to provide standard sign-on.

15. A method as recited in claim 14 wherein step (e) is further practiced to control the computer and the display screen to provide a query as to whether the user is one of the registered users displayed on the screen, and if the query response is negative, bypassing step (f) and controlling the computer to preclude standard sign-on to the computer software until an authorizing registration sequence has been entered into the computer.

16. A method as recited in claim 14 wherein step (b) is practiced to provide a freshness interval of between one and five weeks.

17. Apparatus for providing authentication for a computer software program sign-on, comprising:

a computer;

a display screen connected to and controlled by said computer;

means for entering commands into said computer; and

means for providing a predetermined task to said computer comprising;

means for requiring entry of a registration name at the time of initial use of said computer software program and for storing said registration name in an Init-File;

means for providing a freshness interval based upon number of sign-ons or the passage of time as the maximum allowable hiatus between re-authentication sign-ons;

means for at each invocation of said computer software program determining if an invocation is within the freshness interval;

means for, if the invocation is within the freshness interval, controlling said computer and display screen to provide standard sign-on;

means for, if the invocation is not within the freshness interval, controlling said computer and display screen to provide a re-authentication query on said display screen which requires a response before standard sign-on will be allowed;

means for, if the correct response to the query is given, controlling said computer and display screen to provide standard sign-on and starting a new re-authentication freshness interval using said means for providing a freshness interval; and

means for, if an incorrect response to the query is given, controlling said computer and display screen to provide information about authorized registration.

18. Apparatus as recited in claim 17 wherein said software program further comprises means for precluding standard sign-on to said computer software until an authorizing registration sequence has been entered into said computer.

19. Apparatus as recited in claim 18 wherein said means for, if an incorrect response is given, controlling said computer and display screen to provide information about authorized registration comprises means for, at least in part, providing a phone or fax number, or electronic address, or all, which may be contacted for appropriate registration information, on said display screen.

20. Apparatus as recited in claim 18 wherein said means for, if the invocation is not within the freshness interval, controlling said computer and display screen to provide a re-authentication query on said display screen which requires a response before standard sign-on will be allowed, comprises means for controlling said display screen to pose thereon as a query what name, using the same spelling, said software program was initially registered under.