Method and apparatus for monitoring software using encryption

• US 6,446,211 B1
• Filed: 11/10/2000
• Issued: 09/03/2002
• Est. Priority Date: 06/04/1998
• Status: Expired due to Fees

• Current Assignee: z4 Technologies Incorporated
• Original Assignee: z4 Technologies Incorporated
• Inventors: Colvin, David
• Primary Examiner(s): Hayes, Gail
• Assistant Examiner(s): Revak, Christopher A.
• Application Number:
  US09/709,707
• Time in Patent Office: 662 Days
• Field of Search: 713/200, 713/201, 713/202, 713/182, 713/168, 713/155, 713/150, 709/229, 705/51, 705/52, 705/53, 705/55, 705/57, 705/59, 705/56, 705/14
• US Class Current: 726/22
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06Q 30/0207 Discounts or incentives, e.g. coupons or rebates
• CPC Class Codes: G06Q 30/0241 Advertisements

Abstract

A method and apparatus for securing software to reduce unauthorized use and provide repeated contact with a software user to transfer information which may include advertising, promotional, or marketing information include repeatedly contacting the software manufacturer or third party representative or agent for an authorization code for continued use of the software. Authorization codes and registration information may be used with encryption to transfer information from the authorized representative to resist tampering by unauthorized users. The user and/or software contacts an authorized representative of the software to obtain authorization information which may be downloaded directly to the software or provided to the user for entry. Authorization intervals may vary depending upon the particular application. For example, in one embodiment, the present invention provides authorization information which allows continued use of the software for a period based on value of the software. The value of the software may be based on price or the availability of a subsequent version of the software. Authorization intervals of decreasing length may be supplied for software of increasing value. As the value of the software decreases, for example when one or more subsequent versions are released, the authorization intervals may increase accordingly.

Claims

1. A method for securing software to reduce unauthorized use of the software, the method comprising:

associating a series of authorization codes with the software;

repeatedly requiring the user to obtain a new authorization code from an administrator to continue using the software;

encrypting information exchanged with the user, and

transferring an authorization code for continued use of the software from the administrator such that the software is useable without requiring continuous communication with the administrator.

2. The method of claim 1 wherein the step of encrypting comprises encrypting at least a portion of user registration information.

3. The method of claim 1 wherein the step of encrypting includes encrypting at least a portion of computer specific information of a computer of the user running the software.

4. The method of claim 3 wherein the computer specific information includes at least a portion of an electronic serial number which uniquely characterizes the hardware configuration of the computer.

5. The method of claim 3 wherein the computer specific information includes at least a portion of an electronic serial number which uniquely characterizes the hardware configuration of the computer based on information stored in non-volatile memory of the computer.

6. The method of claim 3 wherein the computer specific information includes at least a portion of a motherboard serial number of the computer.

7. The method of claim 3 wherein the computer specific information includes at least a portion of the information stored in a registry associated with the computer.

8. The method of claim 1 wherein the step of encrypting includes encrypting at least a portion of the authorization code.

9. The method of claim 8 wherein the authorization code is encoded as an alphanumeric string which appears to the user to be randomly generated.

10. The method of claim 8 wherein the authorization code comprises a hexadecimal string.

11. The method of claim 8 wherein the authorization code comprises a binary string.

12. The method of claim 1 wherein the step of encrypting includes encrypting at least a portion of registration information of the user, the method further comprising:

comparing registration information to previously obtained registration information to determine if the registration information is valid prior to providing the authorization code to the user.

13. The method of claim 12 wherein obtaining valid registration information comprises comparing registration information with registration information obtained during first use of the software.

14. The method of claim 1 wherein the authorization code authorizes continued use of the software for a period based on value of the software.

15. The method of claim 14 wherein the period is a calendar period of time.

16. The method of claim 14 wherein the period is a period of elapsed execution time of the software.

17. The method of claim 14 wherein the period is based on a number of times the software has been executed.

18. The method of claim 14 wherein the period is based on a version number associated with the software.

19. The method of claim 14 wherein the period is based on a new version of the software being released such that the period for authorized use of the user'"'"'s version increases based on a number of subsequently released versions of the software.

20. A method for providing continuing contact with a software user to repeatedly transfer information to the user, the method comprising:

receiving registration information from the user;

encrypting authorization information based on the registration information from the user;

transferring the encrypted authorization information from an administrator to authorize continued use of the software beyond a current authorization interval such that the software is useable without requiring continuous communication with the administrator; and

selectively transferring marketing, promotional, or advertising information when the user or software requests authorization for continued use beyond the current authorization interval.

21. The method of claim 20 wherein the authorization information authorizes continued use of the software for a period based on a subsequent version of the software being currently available.

22. The method of claim 20 wherein the authorization information authorizes continued use of the software for a period based on value of the software with increasing values associated with decreasing periods.

23. The method of claim 20 further comprising:

comparing at least a portion of the registration information with previously received registration information; and

transferring authorization information which authorizes continued use of the software only if the registration information is substantially similar to the previously received information.

24. The method of claim 20 further comprising:

comparing the registration information with previously received registration information to determine whether the user is an authorized user;

transferring authorization information which authorizes continued use of the software if the registration information indicates that the user is an authorized user;

transferring information which disables continued operation of the software if the registration information indicates that the user is an unauthorized user; and

transferring the marketing, promotional, or advertising information regardless of whether the registration information indicates the user is authorized or unauthorized.

25. A method for securing software to reduce unauthorized use of the software while providing repeated contact with a software user, the method comprising;

providing computer-specific information to an authorized representative;

based at least partially on the computer-specific information, transferring encrypted information including an authorization code for the software authorizing continued use of the software such that the software is useable without requiring continuous communication with the authorized representative; and

subsequently requiring another authorization code to continue using the software.

26. The method of claim 25 wherein the step of subsequently requiring is performed at regular intervals.

27. The method of claim 25 wherein the step of subsequently requiring is performed at random intervals.

28. The method of claim 25 wherein the step of subsequently requiring is performed at scheduled intervals.

29. The method of claim 25 wherein the step of subsequently requiring is performed at predetermined intervals based on release dates of subsequent versions of the software.

30. The method of claim 25 further comprising:

requiring entry of registration information prior to receiving another authorization code to continue using the software.

31. A computer readable storage medium having stored data which is directly or indirectly readable by a computer, representing instructions executable by a computer to secure software and reduce unauthorized use of the software, the computer readable storage medium comprising:

instructions for repeatedly requiring the user to obtain a new authorization code to continue using the software; and

instructions for processing an encrypted authorization code received from an administrator to authorize continued use of the software such that the software is usable without requiring continuous communication with the administrator.

32. The computer readable storage medium of claim 31 further comprising:

instructions for associating a series of authorization codes with the software.

33. The computer readable storage medium of claim 31 further comprising:

instructions for encrypting information exchanged with an authorized software representative.

34. The computer readable storage medium of claim 33 wherein the instructions for encrypting include instructions for encrypting at least a portion of registration information of the user.

35. The computer readable storage medium of claim 33 wherein the instructions for encrypting use at least a portion of computer specific information of a computer of the user running the software.

36. The computer readable storage medium of claim 35 wherein the computer specific information includes an electronic serial number which uniquely characterizes hardware configuration of the computer.

37. The computer readable storage medium of claim 35 wherein the computer specific information includes a motherboard serial number.

38. The computer readable storage medium of claim 35 wherein the computer specific information includes at least a portion of the information stored in a registry associated with the computer.

39. The computer readable storage medium of claim 33 wherein the instructions for encrypting include instructions for encrypting at least a portion of the authorization code.

40. The computer readable storage medium of claim 39 wherein the authorization code is encoded as an alphanumeric string which appears to the user to be randomly generated.

41. The computer readable storage medium of claim 39 wherein the authorization code comprises a hexadecimal string.

42. The computer readable storage medium of claim 39 wherein the authorization code comprises a binary string.

43. The computer readable storage medium of claim 31 further comprising:

instructions for comparing registration information to previously obtained registration information to determine if the registration information is valid.

44. A method for securing software to reduce unauthorized use of the software, the method comprising:

generating authorization codes;

repeatedly requiring a user to obtain a new authorization code from an administrator to continue using the software; and

encrypting at least a portion of each authorization code before providing the authorization code to the user to authorize continued use of the software such that the software is useable without requiring continuous communication with the administrator.

45. The method of claim 44 wherein the step of encrypting further comprises encrypting registration information.

46. The method of claim 44 further comprising:

comparing registration information to previously obtained registration information to determine if the registration information is valid prior to providing the authorization code to the user.

47. The method of claim 46 wherein determining if the registration information is valid includes comparing at least a portion of the registration information with registration information obtained during first use of the software.

48. The method of claim 44 wherein the authorization code authorizes continued use of the software for a period based on value of the software.

49. The method of claim 48 wherein the period is a calendar period of time.

50. The method of claim 48 wherein the period is a period of elapsed execution time of the software.

51. The method of claim 48 wherein the period is based on a number of times the software has been executed.

52. The method of claim 48 wherein the period is based on a version number associated with the software.

53. The method of claim 48 wherein the period is based on a new version of the software being released such that the period for authorized use of the user'"'"'s version increases based on a number of subsequently released versions of the software.