Secure software rental system using continuous asynchronous password verification

• US 5,638,513 A
• Filed: 06/07/1995
• Issued: 06/10/1997
• Est. Priority Date: 12/22/1993
• Status: Expired due to Term

• Current Assignee: Stamps.com, Inc.
• Original Assignee: Mohan Ananda
• Inventors: Ananda, Mohan
• Primary Examiner(s): Beausoliel, Jr., Robert W.
• Assistant Examiner(s): Wright, Norman M.
• Application Number:
  US08/482,429
• Time in Patent Office: 734 Days
• Field of Search: 395/188.01, 395/187.01, 395/186, 395/185.02, 395/185.01, 380/4, 380/25, 380/3, 380/23
• US Class Current: 726/5
• CPC Class Codes: G06F 21/125 by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0645 Rental transactions; Leasing transactions
• CPC Class Codes: G06Q 40/10 Tax strategies

Abstract

The present invention is a system for providing secure access and execution of application software stored on a first computer by a second computer using a communication device while a communication link is maintained between the first and second computers. More specifically, the present invention is a secure software rental system. The system enables a user in a remote location using a personal computer and a modem to connect to a central rental facility, transfer application software from the central rental facility to the remote computer, and execute the application software on the remote computer while electronically connected to the central rental facility. When the communication link between the central rental facility and the remote computer is interrupted or terminated, the application software no longer executes on the remote computer. This is accomplished by integrating header software with the application software according to the present invention. The application software stored on the central rental facility is integrated with the header software to provide a security feature of present invention. The use of header software allows the user to execute the application software only while the user is electronically connected to the central rental facility continuously. This prevents the user from copying the application software to a storage device of the remote computer, and subsequently executing the application software after interrupting or terminating the communications link between the central rental facility and the remote computer.

Claims

1. A method for securely executing software, comprising the steps of:

establishing a communication between a first computer and a second computer;

selecting at least one application software from a plurality of application software stored in said second computer;

transferring said at least one application software from said second computer to said first computer;

executing said at least one application software on said first computer;

said at least one application software initiating an asynchronous header;

checking a first password generated by said first computer using said asynchronous header;

said asynchronous header maintaining said communication continuous when said first password is verified;

said asynchronous header repeating said checking step until said first password is not verified;

said asynchronous header terminating said communication and said at least one application software when said first password is not verified.

2. The method of claim 1 wherein said communication is established using a first modem coupled to said first computer and a second modem coupled to said second computer.

3. The method of claim 1 further comprising the step of recording a transfer time in said second computer for said at least one application software when said at least one application software is transferred, wherein said transfer time is used by said first computer to generate said first password.

4. The method of claim 3 wherein said transfer time is transmitted from said second computer to said first computer.

5. The method of claim 4 wherein an application identification number for said at least one application software is transmitted to said second computer, wherein said application identification number is used by said second computer to generate a second password.

6. The method of claim 1 wherein said step of establishing said communication between said first computer and said second computer comprises the steps of:

executing a communication manager on said first computer; and

said first computer accessing said second computer using said communication manager to transfer said at least one application software from said second computer to said first computer.

7. The method of claim 6 wherein said step of initiating said asynchronous header comprises the steps of:

generating by said first computer a transfer time request;

transmitting, by said application software being executed on said first computer, said transfer time request comprising a user identifier and an application identifier of said application software to said second computer;

checking said communication manager using said asynchronous header for a transfer time response from said second computer when a first time interval elapses; and

said asynchronous header receiving said transfer time response from said communication manager when said second computer transmits said transfer time response.

8. The method of claim 7 wherein said step of verifying said first password using said asynchronous header comprises the steps of:

(a) obtaining a current time of said first computer using said asynchronous header;

(b) computing said first password dependent on a time difference between said current time of said first computer and said transfer time and storing said first password in said first computer; and

(c) transmitting a password verification request comprising said current time to said second computer;

(d) said asynchronous header checking said communication manager for a password response when a second time interval elapses;

(e) receiving said password response comprising a second password from said second computer when said second time interval elapses;

(f) comparing said second password from said second computer and said first password of said first computer using said asynchronous header; and

(g) said asynchronous header terminating said rental application when said second password does not match said first password, said asynchronous header allowing a third time interval to elapse and repeating steps (a)-(g) when said second password matches said first password.

9. A method of providing secure application software, the method comprising the steps of:

initiating a rental session by accessing a central rental facility using a communication manager, said communication manager executing on a user computer;

selecting a rental application from a plurality of rental applications stored in said central rental facility, said rental application comprising an application software and an asynchronous header;

transferring said selected rental application from said central rental facility to said user computer;

executing said rental application on said user computer;

said execution of said rental application causing said asynchronous header to be initiated by said user computer, said asynchronous header causing said user computer to generate a first password;

said user computer transmitting a password verification request to said central rental facility, said central rental facility generating and transmitting a second password to said user computer in response to said password verification request;

said user computer using said asynchronous header for continuously checking to determine if said second password matches said first password, said asynchronous header terminating said rental application when said first and second passwords do not match.

10. The method of claim 9 further comprising the step of transferring said communication manager from said central rental facility to said user computer.

11. The method of claim 9 wherein said rental application is selected using a directory request module for browsing said plurality of rental applications.

12. A method for securely executing software, comprising the steps of:

establishing a communication between a first computer and a second computer;

selecting at least one application software from a plurality of application software stored in said second computer;

transferring said at least one application software from said second computer to said first computer;

recording a transfer time in said second computer for said at least one application software when said at least one application software is transferred, wherein said transfer time is used by said first computer to generate a first password;

executing said at least one application software on said first computer;

said at least one application software initiating an asynchronous header; and

checking said first password generated by said first computer using said asynchronous header;

said asynchronous header maintaining said communication continuous when said first password is verified;

said asynchronous header repeating said checking step until said first password is not verified;

said asynchronous header terminating said communication and said at least one application software when said first password is not verified.

13. The method of claim 12 wherein said transfer time is transmitted from said second computer to said first computer.

14. The method of claim 13 wherein an application identification number for said at least one application software is transmitted to said second computer, wherein said application identification number is used by said second computer to generate a second password.

15. A method for securely executing software, comprising the steps of:

establishing a communication between a first computer and a second computer, said step of establishing said communication comprises the steps of;

executing a communication manager on said first computer; and

said first computer accessing said second computer using said communication manager to transfer said at least one application software from said second computer to said first computer;

transferring said at least one application software from said second computer to said first computer;

executing said at least one application software on said first computer;

said at least one application software initiating an asynchronous header, said step of initiating an asynchronous header comprising the steps of;

generating by said first computer a transfer time request;

transmitting, by said application software being executed on said first computer, said transfer time request comprising a user identifier and an application identifier of said application software to said second computer;

checking said communication manager using said asynchronous header for a transfer time response from said second computer when a first time interval elapses;

said asynchronous header receiving said transfer time response from said communication manager when said second computer transmits said transfer time response; and

checking a first password generated by said first computer using said asynchronous header;

said asynchronous header maintaining said communication continuous when said first password is verified;

said asynchronous header repeating said checking step until said first password is not verified;

said asynchronous header terminating said communication and said at least one application software when said first password is not verified.

16. The method of claim 15 wherein said step of verifying said first password using said asynchronous header comprises the steps of:

(a) obtaining a current time of said first computer using said asynchronous header;

(b) computing said first password dependent on a time difference between said current time of said first computer and said transfer time and storing said first password in said first computer; and

(c) transmitting a password verification request comprising said current time to said second computer;

(d) said asynchronous header checking said communication manager for a password response when a second time interval elapses;

(e) receiving said password response comprising a second password from said second computer when said second time interval elapses;

(f) comparing said second password from said second computer and said first password of said first computer using said asynchronous header; and

(g) said asynchronous header terminating said rental application when said second password does not match said first password, said asynchronous header allowing a third time interval to elapse and repeating steps (a)-(g) when said second password matches said first password.