Distributed execution software license server

• US 6,343,280 B2
• Filed: 12/15/1998
• Issued: 01/29/2002
• Est. Priority Date: 12/15/1998
• Status: Expired due to Fees

• Current Assignee: Jonathan Clark
• Original Assignee: Jonathan Clark
• Inventors: Clark, Jonathan
• Primary Examiner(s): Stamber, Eric W.
• Assistant Examiner(s): CHAMPAGNE, DONALD
• Application Number:
  US09/212,373
• Publication Number:
  US 20010011254A1
• Time in Patent Office: 1,141 Days
• Field of Search: 705/1, 705/50-59, 380/201, 380/202
• US Class Current: 705/55
• CPC Class Codes: G06F 21/125 by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code

Abstract

A method of protecting an executable image from unlicensed use is provided by remote execution of sequences of microprocessor instructions. Means of selecting sequences of instructions that execute infrequently and provide a high level of security against reverse engineering is provided. Selection means includes run-time profiling of an executable running under normal conditions. The selected sequences of instructions are replaced with instructions that interrupt the normal flow of execution and transfer control to a license server. A client computer executes the modified executable until the replaced sequences interrupt the normal flow of execution and transfer control to a license server. The license server executes the instructions which were replaced in the modified executable upon proper authorization by emulating the client microprocessor.

Claims

1. A method of preventing unauthorized use of an executable file comprising

selecting from said executable file sequences of instructions,

creating a modified executable file by replacing each of said selected sequences of instructions with instructions that interrupt the normal flow of execution,

installing said modified executable file in a first computer,

installing said selected sequences of instructions in a license server,

executing said modified executable file in said first computer until one of said instructions that interrupt the normal flow of execution is encountered,

communicating said first computer'"'"'s machine state to said license server, determining in said license server whether said first computer is authorized,

executing one of said selected sequences of instructions in said license server if said first computer is authorized,

communicating the results of said license server'"'"'s execution of said one of said selected sequences of instructions to said first computer, and

continuing execution of said modified executable file in said first computer until another of said instructions that interrupt the normal flow of execution is encountered or until execution of said modified executable file is complete;

wherein said machine state comprises the contents of the CPU registers and the program counter value, and

wherein said license server emulates operation of said first computer when said license server executes said one of said selected sequences of instructions in said license server.

3. The system of claim 1 wherein said instructions that interrupt the normal flow of execution comprise breakpoint instructions.

4. The method of claim 1 wherein said machine state additionally comprises selected portions of the RAM contents.

5. The method of claim 1 wherein each of said selected sequences of instructions receives a different input or produces a different output when said executable file is executed multiple times.

6. The method of claim 1 wherein a plurality of said license servers are connected to a network and any one of said plurality of said license servers can be selected by said second computer whereby said network latency time and said license server processor load can be optimized.

7. The method of claim 1 wherein said selected sequences of instructions are encrypted and stored on said user'"'"'s computer until time of execution of said executable file.

8. The method of claim 1 wherein said selected sequences of instructions are encrypted using public/private key cryptography and said license server'"'"'s private key is used to decrypt said sequences of instructions.

9. The method of claim 1 wherein said license server resides in a physically secure microprocessor attached to or enclosed within said first computer.

2. A system which protects an executable file from unauthorized use comprising a license server, a user'"'"'s computer, a vendor'"'"'s computer, a first software object, a second software object, and a third software object;

wherein said first software object executes on said vendor'"'"'s computer,

selects from said executable file sequences of instructions,

creates a modified executable file by replacing said selected sequences of instructions with instructions that interrupt the normal flow of execution,

communicates said selected sequences of instructions to said license server, and

communicates said modified executable file to said user'"'"'s computer;

wherein said second software object executes on said user'"'"'s computer,

executes said modified executable file until one of said instructions that interrupt the normal flow of execution is encountered,

communicates said first computer'"'"'s machine state to said license server,

receives the results of said license server'"'"'s execution of said selected sequences of instructions, and

utilizes said results to continue execution of said modified executable file until another of said instructions that interrupt the normal flow of execution is encountered or until execution of said modified executable file is complete;

wherein said third software object executes on said license server,

determines whether said user'"'"'s computer is authorized,

receives said machine state from said user'"'"'s computer,

utilizes said user'"'"'s computer'"'"'s machine state to initialize execution of each of said selected sequences of instructions at the address of said user'"'"'s computer at the time that said instructions that interrupt the normal flow of execution were encountered if and only if said user'"'"'s computer is authorized, and

communicates said results of execution of said selected sequences of instructions to said user'"'"'s computer;

wherein said machine state comprises the contents of the CPU registers and the program counter value; and

wherein said license server emulates operation of said first computer when said license server executes said one of said selected sequences of instructions in said license server.

10. The system of claim 2 wherein said instructions that interrupt the normal flow of execution comprise breakpoint instructions.

11. The system of claim 2 wherein said machine state additionally comprises selected portions of the RAM contents.

12. The system of claim 2 wherein each of said selected sequences of instructions receives a different input or produces a different output when said executable file is executed multiple times.

13. The system of claim 2 wherein a plurality of said license servers are connected to a network and any one of said plurality of said license servers can be selected by said second computer whereby said network latency time and said license server processor load can be optimized.

14. The system of claim 2 wherein said selected sequences of instructions are encrypted and stored on said user'"'"'s computer until time of execution of said executable file.

15. The system of claim 2 wherein said selected sequences of instructions are encrypted using public/private key cryptography and said license server'"'"'s private key is used to decrypt said sequences of instructions.

16. The system of claim 2 wherein said license server resides in a physically secure microprocessor attached to or enclosed within said first computer.