Method and apparatus for enabling trial period use of software products: method and apparatus for utilizing an encryption header

• US 5,757,908 A
• Filed: 09/04/1996
• Issued: 05/26/1998
• Est. Priority Date: 04/25/1994
• Status: Expired due to Term

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Philips, Hudson Wayne, Pryor, Robert Franklin, Cooper, Thomas Edward
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/712,630
• Time in Patent Office: 629 Days
• Field of Search: 380/4, 380/9, 380/23, 380/25, 380/49, 380/50, 380/59
• US Class Current: 713/165
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/126 Interacting with the operating system
• CPC Class Codes: G06F 21/78 to assure secure storage of data address-based protection against unauthorised use of memory G06F12/14; record carriers for use with machines and with at least a part designed to carry digital markings G06K19/00
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: H04L 9/088 Usage controlling of secret information, e.g. techniques for restricting cryptographic keys to pre-authorized uses, different access levels, validity of crypto-period, different key- or password length, or different strong and weak cryptographic algorithms network architectures or network communication protocols for using time-dependent keys in a packet data network H04L63/068

Abstract

A method and apparatus is provided in a data processing system for securing access to particular files which are stored in a computer-accessible memory media. A file management program is provided as an operating system component of the data processing system. A plurality of files are stored in a computer-accessible memory media, including at least one encrypted file and at least one unencrypted file. For each encrypted file, a preselected portion of the file is recorded in memory, a decryption block is generated which includes information which can be utilized to decrypt the file, and the decryption block is incorporated in the file in lieu of the preselected portion which has been recorded in memory. Then, a file management program is utilized to monitor data processing system calls for files stored in the computer-accessible memory media. The file management program determines whether the called file has an associated decryption block. The called file is processed in a particular manner dependent upon whether or not the called file has an associated decryption block.

Claims

1. At least one computer accessible memory medium in a data processing system for allowing a user to secure access to a particular file, comprising:

a plurality of files which are accessible to the data processing system, the particular file being on of the plurality of files;

at least one encrypted file, which is one of the plurality of files, having a preselected portion recorded in memory in a side file;

monitoring means for monitoring for a user request for access to the particular file;

receiving means for receiving the user request for access to the particular file;

transforming means for transforming the user request into a data processing system call for access to the particular file;

determining means for determining whether the called file has an inserted decryption block;

processing means for processing the called file in one manner if the called file has the inserted decryption block, and for processing the called file in a different manner if the called file does not have the inserted decryption block, wherein the monitoring means, the receiving means, the transforming means, the determining means, and the processing means are part of a file management program which is adapted to be functionally integrated with an operating system of the data processing system, and wherein the inserted decryption block includes information which is utilized to decrypt the file which is inserted in the at least one encrypted file in lieu of the preselected portion.

2. An apparatus according to claim 1:

wherein each of the at least one encrypted file has a particular file size; and

wherein insertion of the decryption block does not change the particular file size for each of the at least one encrypted file.

3. An apparatus according to claim 1, further comprising:

means for maintaining the at least one encrypted file in an encrypted condition for an interval which defines a customer trial period; and

means for replacing the preselected portion in the at least one encrypted file in lieu of the decryption block; and

means for decrypting the at least one encrypted file.

4. An apparatus according to claim 1, wherein the decryption block includes:

a unique identifier for each of the at least one encrypted file, and an address to the preselected portion for each of the at least one encrypted file.

5. An apparatus according to claim 1, wherein the decryption block includes:

a unique identifier for each of the at least one encrypted file, and an address for a key file which contains decryption keys for each of the at least one encrypted file.

6. An apparatus according to claim 1, wherein the decryption block includes:

a unique identifier for each of the at least one encrypted file, and a validation segment composed of an encrypted segment of each of the at least one encrypted file.

7. An apparatus according to claim 1, wherein the decryption block includes:

a unique identifier for each of the at least one encrypted file, and an identifier of which particular one of a plurality of available encryption operations has been utilized to encrypt the at least one encrypted file.

8. An apparatus according to claim 1, wherein the file management program is utilized to process the called file by performing at least one of:

(a) intercepting the called file;

(b) utilizing the decryption block to retrieve an address for a key file and reading a key for the called file;

(c) decrypting a validation segment of the decryption block, and comparing it to a selected segment of the called file, and continuing operations only if the decrypted validation segment matches the selected segment; and

(d) decrypting the called file at the same time as it is passed for further processing.