Biometric based method for software distribution

• US 6,035,403 A
• Filed: 09/08/1997
• Issued: 03/07/2000
• Est. Priority Date: 09/11/1996
• Status: Expired due to Term

• Current Assignee: Hush, Inc.
• Original Assignee: Hush, Inc.
• Inventors: Li, Yang, Subbiah, Subramanian, Rao, D. Ramesh K.
• Primary Examiner(s): Palys, Joseph E.
• Assistant Examiner(s): Mai, Rijue
• Application Number:
  US08/925,201
• Time in Patent Office: 911 Days
• Field of Search: 395/187.01, 395/186, 395/188.01, 395/712, 382/124, 382/115, 382/116, 380/4, 380/3, 380/25, 380/23, 713/200, 713/201, 713/202, 705/39, 283/68, 283/78, 709/217, 709/218, 709/219
• US Class Current: 726/28
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress

Abstract

A method is provided for protecting distributed software, either through the internet/telephone networks or via physical storage media like floppy diskettes, magnetic tapes, CD-ROMS, DVD-ROMS, etc., by using biometric information (personal fingerprint information in particular). In one approach, the fingerprint of the software purchaser is embedded into the purchased software at the time of purchase. All subsequent use of the software by the purchaser at his/her home or office is subject to (a) providing his/her fingerprint again and (b) the fingerprint matches that embedded in the purchased software. In another related approach, prior to the use or installation of distributed software, the user'"'"'s computer calls a central management server station. The software then requests the user to provide his or her fingerprint by any device that would capture such information. The fingerprint information is then processed on the local user computer by any image processing program, and the relevant information is then sent to the central server along with a key or serial number that is built into the distributed software. The central management server then compares the provided information with the information previously stored in its central database and decides whether the user is authorized. Such a method can also be employed in a license management system whereby software product usage can be remotely monitored and fees for usage charged appropriately.

Claims

1. A method for controlling installation of a software product, the method comprising:

(a) when fingerprint data has not been previously provided for the software product, storing a user'"'"'s fingerprint data in association with a separate identifier for the software product, such that in installations of the software product, newly presented fingerprint data is matched against the stored fingerprint data;

(b) prior to an installation of the software product and after storing the user'"'"'s fingerprint data, transmitting the user'"'"'s fingerprint data and the separate identifier from a local computer of the user to a remote authentication system controlled by an enterprise responsible for distribution of the software product;

(c) determining whether the fingerprint data provided allows installation of the software product, such that if the transmitted fingerprint data is not found to match the stored fingerprint data, blocking installation of the software product; and

(d) determining whether the number of installations exceeds a pre-set maximum, such that installation is blocked if the number of installations is found to exceed the pre-set maximum.

2. The method of claim 1, wherein blocking installation comprises transmitting instructions to block to a local computer of the user from a remote authentication system controlled by an enterprise responsible for distribution of the software product.

3. The method of claim 1, wherein the software product is purchased over the Internet.

4. The method of claim 1, further comprising monitoring a length of time during which the software product is operated by said user so that the user can be charged for the quantity of use.

5. The method of claim 1, further comprising:

(i) beginning execution of the software product; and

(ii) prompting the user to provide said fingerprint data prior to continued execution of the software product.

6. The method of claim 1, further comprising storing fingerprint data for a plurality of users, each of whom can use or install the software product.

7. A computer readable medium on which is provided instructions for operating a computer system to control installation of a software product, the instructions, when executed by the computer system, performing the steps of:

(a) when fingerprint data has not been previously provided for the software product, storing a user'"'"'s fingerprint data in association with a separate identifier for the software product, such that in installations of the software product, newly presented fingerprint data is matched against the stored fingerprint data;

(b) prior to an installation of the software product and after storing the user'"'"'s fingerprint data, transmitting the user'"'"'s fingerprint data and the separate identifier from a local computer of the user to a remote authentication system controlled by an enterprise responsible for distribution of the software product;

(c) determining whether the fingerprint data provided allows installation of the software product, such that if the transmitted fingerprint data is not found to match the stored fingerprint data, blocking installation of the software product; and

(d) determining whether the number of installations exceeds a pre-set maximum, such that installation is blocked if the number of installations is found to exceed the pre-set maximum.

8. The computer readable medium of claim 7, wherein instructions for blocking installation comprise instructions for transmitting instructions to block to a local computer of the user from a remote authentication system controlled by an enterprise responsible for distribution of the software product.

9. The computer readable medium of claim 7, wherein the software product is purchased over the Internet.

10. The computer readable medium of claim 7, further comprising instructions for monitoring a length of time during which the software product is operated by said user so that the user can be charged for the quantity of use.

11. The computer readable medium of claim 7, further comprising instructions for prompting the user to provide said fingerprint data after beginning execution of the software product and prior to continued execution of the software product.

12. The computer readable medium of claim 7, further comprising instructions for storing fingerprint data for a plurality of users, each of whom can use or install the software product.