Software fingerprinting and branding

• US 6,000,030 A
• Filed: 06/20/1996
• Issued: 12/07/1999
• Est. Priority Date: 06/20/1996
• Status: Expired due to Term

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: EMC Corporation (Dell Technologies Inc.)
• Inventors: Gordon, Scott B., Steinberg, Henry L.
• Primary Examiner(s): Grant, William
• Assistant Examiner(s): GARLAND, STEVEN R
• Application Number:
  US08/667,337
• Time in Patent Office: 1,265 Days
• Field of Search: 364/200, 364/479.07, 380/4, 380/23, 380/25, 395/186, 395/187.01, 395/188.01, 707/9, 711/151, 711/152, 711/163, 711/164, 713/200, 713/201, 713/202
• US Class Current: 726/28
• CPC Class Codes: B82Y 30/00 Nanotechnology for materials or surface science, e.g. nanocomposites
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

A method and apparatus for controlling the distribution of computer software products stored at a file server provide for requesting the identity of the user and the user'"'"'s secret key prior to enabling access to a requested program product. The program product, upon proper verification of the user identify, is encoded using a second key which is known to the user, and preferably an identification of the user is embedded in the encoding program. Various methods are employed for tracking user access to particular programs, including storing the identify of the user either camouflaged in a commonly found program in non-volatile memory or hidden in a typically overlooked portion of non-volatile memory. In addition, the encoded program can have embedded therein one, and preferably two identifications of the user which can be used to track the program as well as to ensure that the program, when executed has not been tampered with. Upon execution of the encoded program by the user'"'"'s system, the code is executed "on the fly" and no executable copy of the code is stored in non-volatile memory at any time. In the event that decoding does not result in a properly executable program, the system may need to be rebooted and/or the program may be at least partially destroyed.

Claims

1. A method of controlling the distribution of computer software products stored at a file server to target computers comprising the steps of

requesting the identity of a user and the user'"'"'s first secret key to enable access to requested program product,

encoding the requested program product, if the user identity and the secret key match corresponding entries in a file server, using a second key known to the user, and

embedding in said encoded program an identification of said user.

2. The method of claim 1 further comprising the steps of storing at said file server, written in a camouflaged manner in a program on a disk memory, an identification of the user accessing said requesting program.

3. The method of claim 2 further comprising the step of

storing in non-volatile, non-disk memory, at the file server, an identification of the user accessing said requested program.

4. The method of claim 1 wherein said embedding step further comprises the step of

embedding at least two identifications of said user in said encoded program, at least one identification being difficult to find and at least one identification being easy to find.

5. The method of claim 4 further comprising the steps of

encoding the requested program with a CRC for determining whether any of the embedded user identifications has been changed after encoding, and

disabling at least portions of the encoded program when a CRC check calculation fails during program execution.

6. The method of claim 1 further comprising the steps of

decoding said program upon receipt of the second key from the user, and

executing said decoded program.

7. The method of claim 6 wherein said decoding and executing steps operate without storing a copy of said decoded program in non-volatile memory.

8. The method claim 1 further comprising the steps of

decoding said program using a decoding key provided by a user, and

executing said decoded program in a normal operating fashion when said decoding key corresponds to the second key, and in a program destruct fashion when said decoding key does not correspond to said second key.

9. The method of claim 8 wherein said executing step, operating in a program destruct fashion, comprises the step of

rendering at least portions of said encoded program unexecutable.

10. The method of claim 8 wherein said executing step, operating in said program destruct fashion, comprises the step of

disabling the computer system attempting to execute said program, thereby requiring said system to at least be rebooted.

11. The method of claim 1 wherein said encoding step is further dependent upon a third key derived from the address on hard disk at which the encoded program is stored.

12. A method of controlling the distribution of computer software products stored at a file server and delivered upon a request from a user over a network to a target client comprising the steps of

receiving from a user a request to deliver a computer program over said network,

requesting the identity of said user and the user'"'"'s secret key before enabling access to the requested computer program

verifying the identity of the user, using the user'"'"'s secret key,

encoding the requested program using at least an encoding key known to the user,

embedding in the encoded program at least one identification of the user, and

delivering the encoded program over the network to the user.

13. Apparatus for controlling the distribution of computer software products stored at a file server to target computers comprising

means for requesting the identity of a user and the user'"'"'s first secret key to enable access to requested program product,

means for encoding the requested program product, if the user identity and the secret key match corresponding entries in a file server using a second key known to the user, and

means for embedding in said encoded program an identification of said user.

14. The apparatus of claim 13 further comprising

means for storing at said file server, written in a camouflaged program on a disk memory, an identification of the user accessing said requesting program.

15. The apparatus of claim 14 further comprising

means for storing in non-volatile, non-disk memory, at the file server, an identification of the user accessing said requested program.

16. The apparatus of claim 13 wherein said embedding means further comprises

means for embedding at least two identifications of said user in said encoded program, at least one identification being difficult to find and at least one identification being easy to find.

17. The apparatus of claim 16 further comprising

means for encoding the requested program with a CRC for determining whether any of the embedded user identifications has been changed after encoding, and

means for disabling at least portions of the encoded program when a CRC check calculation fails during program execution.

18. The apparatus of claim 13 further comprising

means for decoding said program upon receipt of the second key from the user, and

executing said decoded program.

19. The apparatus of claim 18 wherein said decoding and executing means operate without storing a copy of said decoded program in non-volatile memory.

20. The apparatus of claim 13 further comprising

means for decoding said program using a decoding key provided by a user, and

means for executing said decoded program in a normal operating fashion when said decoding key corresponds to the second key, and in a program destruct fashion when said decoding key does not correspond to said second key.

21. The apparatus of claim 20 wherein said executing means, operating in a program destruct fashion, comprises

means for rendering at least portions of said encoded program unexecutable.

22. The apparatus of claim 20 wherein said executing means, operating in said program destruct fashion, comprises

means for disabling the computer system attempting to execute said program, thereby requiring said system to at least be rebooted.

23. The apparatus of claim 13 wherein said encoding means is further dependent upon a third key derived from the address on hard disk at which the encoded program is stored.

24. Apparatus for controlling the distribution of computer software products stored at a file server and delivered upon a request from a user over a network to a target client comprising

means for receiving from a user a request to deliver a computer program over said network,

means for requesting the identity of said user and the user'"'"'s secret key before enabling access to the requested computer program

means for verifying the identity of the user, using the user'"'"'s secret key,

means for encoding the requested program using at least an encoding key known to the user,

means for embedding in the encoded program at least one identification of the user, and

means for delivering the encoded program over the network to the user.