Software copying system

• US 5,805,699 A
• Filed: 10/28/1996
• Issued: 09/08/1998
• Est. Priority Date: 05/20/1996
• Status: Expired due to Term

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: Akiyama, Ryota, Yoshioka, Makoto, Uchida, Yoshiaki
• Primary Examiner(s): Cangialosi, Salvatore
• Application Number:
  US08/742,601
• Time in Patent Office: 680 Days
• Field of Search: 380/3, 380/4, 380/25, 380/49
• US Class Current: 705/58
• CPC Class Codes: G06F 21/1014 to tokens
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00094 involving measures which result in a restriction to authorised record carriers
• CPC Class Codes: G11B 20/00166 involving measures which result in a restriction to authorised contents recorded on or reproduced from a record carrier, e.g. music or software
• CPC Class Codes: G11B 20/0021 involving encryption or decryption of contents recorded on or reproduced from a record carrier
• CPC Class Codes: G11B 20/00224 wherein the key is obtained from a remote server
• CPC Class Codes: G11B 20/00347 wherein the medium identifier is used as a key
• CPC Class Codes: G11B 20/00528 wherein each title is encrypted with a separate encryption key for each title, e.g. title key for movie, song or data file
• CPC Class Codes: G11B 20/00543 wherein external data is encrypted, e.g. for secure communication with an external device or for encrypting content on a separate record carrier
• CPC Class Codes: G11B 20/00557 wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas
• CPC Class Codes: G11B 20/0071 involving a purchase action

Abstract

A software copying system which enables copyrighted software recorded in a master storage medium to be copied to a user'"'"'s target storage medium in a legitimate manner. A contents identifier reading unit reads out a software identifier from the master storage medium, while a storage medium identifier reading unit reads out a storage medium identifier from the target storage medium., The two identifiers are then sent to a central site which manages licenses for the right to copy software products. At the central site, a signature generating unit produces a first signature from those identifiers and sends it back to the user'"'"'s site, where a signature writing unit writes the received signature into the target storage medium. A signature generating/comparing unit produces a second signature out of the same identifiers as those sent to the central site, and compares it with the first signature stored in the target storage medium. A data copying unit copies the subject software data file from the master storage medium to the target storage medium, only when the first and second signatures coincide with each other.

Claims

1. A software copying system for duplicating software recorded in a master storage medium to a target storage medium in a legitimate -manner achieved through communications between an end user'"'"'s site that is requesting a license of copying the software and a central site that manages the license, the software copying system comprising:

contents identifier reading means for reading out a first identifier from the master storage medium, said first identifiers being uniquely assigned to the software program recorded in the master storage medium;

storage medium identifier reading means for reading out a second identifier from the target storage medium, the second identifier being uniquely assigned to the target storage medium;

signature generating means, disposed at the central site, for generating a first signature from the first identifier read out by said contents identifier reading means and the second identifier read out by said storage medium identifier reading means, the first signature serving as a certificate of a license to copy the software program;

signature writing means for writing the first signature generated by said signature generating means into the target storage medium;

signature generating/comparing means for generating a second signature, for a verification purpose, from the first identifier read out by said contents identifier reading means and the second identifier read out by said storage medium identifier reading means, and comparing the first signature stored in the target storage medium with the second signature; and

data copying means for retrieving the software program out of the master storage medium and writing the software program into the target storage medium, when the first and second identifiers turned out to be identical as a result of the comparison performed by said signature generating/comparing means.

2. A software copying system according to claim 1, wherein said signature generating means comprises

signature processing means for encrypting the first identifier read by said contents identifier reading means and the second identifier read by said storage medium identifier reading means using a certification key managed at the central site, to produce a certificate code that serves as the first signature, and

encrypting means for encrypting the certification key using a user key registered at the central site, and sending the encrypted certification key for use in said signature generating/comparing means to generate the second signature.

3. A software copying system according to claim 2, herein said signature generating/comparing means comprises

decrypting means for decrypting the encrypted certification key using the user key, which is registered at the central site, to produce a decrypted certification key,

certificate code generating means for generating another certificate code for verification, which will serve as the second signature, by encrypting the first identifier read by said contents identifier reading means and the second identifier read by said storage medium identifier reading means using the decrypted certification key, and

comparing means for comparing the certificate code for verification generated by said certificate code generating means with the certificate code stored as the first signature in the target storage medium.

4. A software copying method for duplicating software recorded in a master storage medium to a target storage medium in a legitimate manner achieved through communications between an end user'"'"'s site that is requesting a license to copy the software and a central site that manages the license, the software copying method comprising the steps of:

sending from the end user'"'"'s site to the central site a storage medium identifier that is uniquely assigned to the target storage medium and a contents identifier that is uniquely assigned to a subject data file, together with a message requesting a software license;

generating at the central site a first certificate code from the storage medium identifier and the contents identifier received from the end user site, through a signature generating process using a certification key that is managed at the central site;

generating at the central site an encrypted certification key by encrypting the certification key using a user key;

sending from the central site to the end user'"'"'s site the first certificate code and the encrypted certification key;

writing at the end user'"'"'s site the first certificate code and the encrypted certification key received from the central site into the target storage medium;

obtaining at the end user'"'"'s site a decrypted certification key by decrypting the encrypted certification key, which is stored in the target storage medium, using the user key;

generating at the end user'"'"'s site a second certification code for a verification purpose by applying a signature generating process using the decrypted certification key to the storage medium identifier and the contents identifier;

comparing the first certificate code stored in the target storage medium with the second certificate code that is generated at the end user'"'"'s site; and

reading out the subject data file stored in the master storage medium and writing the subject data file into the target storage medium if the first and second certificate codes coincide with each other.

5. A software copying system for duplicating software recorded in a master storage medium to a target storage medium in a legitimate manner achieved through communications between an end user'"'"'s site that is requesting a license to copy the software and a central site that manages the license, the software copying system comprising:

contents identifier reading means for reading a first identifier uniquely assigned to a software product, which are both recorded in the master storage medium;

storage medium identifier reading means for reading a second identifier uniquely assigned to the target storage medium and recorded therein;

conversion key generating means, disposed at the central site, for generating a storage medium conversion key from the first identifier read by said contents identifier reading means, generating a master medium conversion key from the second identifier read by said storage medium identifier reading means, and generating an encrypted storage medium conversion key and an encrypted master medium conversion key by respectively encrypting the storage medium conversion key and the master medium conversion key using the second identifier;

conversion key writing means for writing the encrypted storage medium conversion key generated by said conversion key generating means into the target storage medium;

conversion key decrypting means for generating a decrypted storage medium conversion key and a decrypted master medium conversion key by respectively decrypting, using the second identifier read by said storage medium identifier reading means, the encrypted storage medium conversion key and the encrypted master medium conversion key generated by said conversion key generating means;

data decrypting means for reading out the target data file recorded in the master storage medium and producing a plaintext data file by decrypting the target data file using the decrypted master medium conversion key generated by said conversion key decrypting means; and

data writing means for producing an encrypted data file by encrypting the plaintext data file using the decrypted storage medium conversion key generated by said conversion key decrypting means and writing the encrypted data file into the target storage medium.

6. A software copying system according to claim 5, wherein said conversion key generating means comprises

first encrypting means for generating the storage medium conversion key by encrypting the first identifier read out by said contents identifier reading means, using a master key that is managed at the central site;

second encrypting means for producing the master medium conversion key by encrypting the second identifier read out by said storage medium identifier reading means, using the master key; and

third encrypting means for producing the encrypted storage medium conversion key and the encrypted master medium conversion key by encrypting the storage medium conversion key and the master medium conversion key using the second identifier read out by said storage medium identifier reading means.

7. A software copying system for duplicating a subject data file recorded in a master storage medium to a target storage medium, the subject data file being encrypted with a master medium conversion key produced from a contents identifier to identify software products and a master key managed at a central site which deals licenses to copy software products, the software copying system comprising the steps of:

sending from the end user'"'"'s site to the central site a contents identifier that is uniquely assigned to the subject data file and a storage medium identifier that is uniquely assigned to the target storage medium;

producing at the central site a master medium conversion key and a storage medium conversion key by respectively encrypting the contents identifier and the storage medium identifier using a master key managed at the central site;

generating an encrypted storage medium conversion key and an encrypted master medium conversion key by respectively encrypting the storage medium conversion key and the master medium conversion key using the storage medium identifier;

sending from the central site to the end user'"'"'s site the encrypted master medium conversion key and the encrypted storage medium conversion key

writing the encrypted storage medium conversion key into the target storage medium;

generating a decrypted storage medium conversion key and a decrypted master medium conversion key by respectively decrypting the encrypted storage medium conversion key and the encrypted master medium conversion key using the storage medium identifier;

decrypting the subject data file recorded in the master storage medium to produce a plaintext data file by decrypting the target data file using the decrypted master medium conversion key;

producing an encrypted data file by encrypting the plaintext data file using the decrypted storage medium conversion key; and

writing the encrypted data file into the target storage medium.