BORE-resistant digital goods configuration and distribution methods and arrangements

• US 7,249,105 B1
• Filed: 03/14/2000
• Issued: 07/24/2007
• Est. Priority Date: 03/14/2000
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Venkatesan, Ramarathnam, Peinado, Marcus, Jakubowski, Mariusz H.
• Primary Examiner(s): Backer; Firmin
• Application Number:
  US09/525,206
• Time in Patent Office: 2,688 Days
• Field of Search: 705/56, 705/55, 705/51, 705/201, 705/50, 705/52, 713/201, 713/190, 713/194, 380/42, 380/63, 717/108
• US Class Current: 705/56
• CPC Class Codes: G06F 21/1083 Partial license transfers

Abstract

Break-Once, Run-everywhere (BORE) resistant software configurations and digital goods and content distribution methods and arrangements are provided for use in computer systems and networks. An initial digital good is selectively divided into at least two portions. The first portion is provided to a destination computer, for example, via a CD ROM, floppy disk, or pre-loaded on a hard disk drive. The second portion is operatively modified within a source computer based on unique data associated with the destination computer. The modified second portion is then provided to the destination computer, for example, over a network, along with a key that can be used to operatively modify the first portion to be compatible with the modified second portion. The destination computer then modifies the first portion accordingly, and combines the modified first portion with the modified second portion to produce a modified digital good that is operatively different in configuration, but substantially functionally equivalent to the initial digital good. During subsequent initialization or operation, the modified digital good verifies that the destination computer is properly associated with the key and/or the unique data previously associated with the destination computer.

Claims

1. A method comprising:

providing an initial digital good to at least one computer, wherein the initial digital good includes a plurality of selectively arranged parts in an initial configuration and the initial digital good is configured as to not properly function with the computer;

with the at least one computer;

receiving unique key data;

converting the initial digital good into a modified digital good using the unique key data to selectively individualize the initial digital good for use with the computer, such that the plurality of selectively arranged parts in the modified digital good have been rearranged to have a substantially unique operative configuration that properly functions with the computer and is different than the initial configuration; and

causing the at least one computer to run the modified digital good.

2. A method as recited in claim 1, wherein converting the initial digital good into the modified digital good further includes manipulating at least one flow control operation within the initial digital good.

3. A method as recited in claim 1, further comprising:

causing at least one other computer to generate the unique key data based on at least one unique identifier data associated with the at least one computer.

4. A method as recited in claim 3, further comprising:

selectively limiting operation of the modified digital good to computers that are properly associated with at least the unique identifier data.

5. A method as recited in claim 3, wherein causing the at least one other computer to generate the unique key data further includes:

causing the at least one computer to provide the unique identifier data associated with the at least one computer to the at least one other computer; and

causing the at least one other computer to cryptographically generate the unique key data based on the unique identifier data provided by the at least one computer and at least one secret key.

6. A method as recited in claim 5, wherein the at least one other computer generates at least a first key and a second key, and the first key and the second key are different, but cryptographically related to the secret key, and wherein the received unique key data includes the first key.

7. A method as recited in claim 1, wherein providing an initial digital good to the at least one computer further includes:

dividing the initial digital good into at least a first portion and a second portion using at least one other computer;

providing the first portion to the at least one computer via a first computer readable medium; and

subsequently providing the second portion to the at least one computer via a second computer readable medium.

8. A method as recited in claim 7, wherein the first computer readable medium includes a different type of computer readable medium than the second computer readable medium.

9. A method as recited in claim 8, wherein the first computer readable medium includes a fixed computer readable medium and the second computer readable medium includes a network communication.

10. A method as recited in claim 7, wherein providing the second portion to the at least one computer further includes:

converting the second portion into a modified second portion using the unique key data to selectively manipulate at least one flow control operation within the second portion, such that the modified second portion is operatively different in configuration to the second portion; and

providing the modified second portion to the at least one computer via the second computer readable medium, in place of the second portion.

11. A method as recited in claim 10, wherein the at least one other computer is used to convert the second portion into the modified second portion.

12. A method as recited in claim 10, wherein the unique key data includes at least a first key and a second key, and converting the second portion into a modified second portion further includes using the second key to selectively manipulate at least one flow control operation within the second portion.

13. A method as recited in claim 10, wherein the unique key data includes at least a first key and a second key, and providing the second portion to the at least one computer further includes providing the first key to the at least one computer.

14. A method as recited in claim 13, wherein converting the initial digital good into a modified digital good further includes

with the at least one computer, converting the first portion into a modified first portion using the first key to selectively manipulate at least one flow control operation within the first portion, such that the modified first portion is operatively different in configuration;

and

causing the at least one computer to operatively combine the modified first portion and the modified second portion to produce the modified digital good.

15. A method as recited in claim 13, further comprising:

selectively limiting operation of the modified digital good to computers that are properly associated with at least the first key.

16. A method as recited in claim 3, further comprising:

causing the at least one computer to provide the unique identifier data associated with the at least one computer to the at least one other computer; and

accessing computer identification data within the at least one computer and including the computer identification data within the unique identifier data associated with the at least one computer.

17. A method as recited in claim 16, wherein causing the at least one computer to provide the unique identifier data associated with the at least one computer to the at least one other computer further includes:

receiving user identification data at the at least one computer and including the user identification data within the unique identifier data associated with the at least one computer.

18. A computer-readable medium comprising computer-executable instructions for:

with the at least one computer;

receiving an initial digital good, wherein the initial digital good includes a plurality of selectively arranged parts in an initial configuration and the initial digital good is configured as to not properly function with the computer;

receiving unique key data; and

converting the initial digital good into a modified digital good using the unique key data to selectively individualize the initial digital good for use with the at least one computer, such that the plurality of selectively arranged parts in the modified digital good are rearranged to have a substantially unique operative configuration that properly functions with the at least one computer and is different than the initial configuration.

19. A computer-readable medium as recited in claim 18, wherein converting the initial digital good into the modified digital good further includes manipulating at least one flow control operation within the initial digital good.

20. A computer-readable medium as recited in claim 18, comprising further computer-executable instructions for:

subsequently determining if the at least one computer is properly associated with at least the unique identifier data; and

disabling operation of the modified digital good if the at least one computer that is not properly associated with the unique identifier data.

21. A computer-readable medium as recited in claim 18, comprising further computer-executable instructions for:

causing the at least one computer to provide unique identifier data associated with the at least one computer to at least one other computer that is configurable to cryptographically generate the unique key data based on the unique identifier data and at least one secret key.

22. A computer-readable medium as recited in claim 18, wherein:

receiving the initial digital good further includes receiving a first portion of the digital good via a first type of computer readable medium and a modified second portion of the digital good via a second computer readable medium; and

converting the initial digital good into a modified digital good further includes converting the first portion using the unique key data to selectively manipulate at least one flow control operation within the first portion, to produce a modified first portion that is operatively different in configuration, and then operatively combining the modified first portion and the modified second portion to produce the modified digital good.

23. A computer-readable medium as recited in claim 22, wherein the first computer readable medium includes a different type of computer readable medium than the second computer readable medium.

24. A computer-readable medium as recited in claim 23, wherein the first computer readable medium includes a fixed computer readable medium and the second computer readable medium includes a network communication.

25. A computer-readable medium as recited in claim 20, wherein causing the at least one computer to provide unique identifier data further includes:

accessing computer identification data within the at least one computer and including the computer identification data within the unique identifier data associated with the at least one computer.

26. A computer-readable medium as recited in claim 20, wherein causing the at least one computer to provide unique identifier data further includes:

receiving user identification data and including the user identification data within the unique identifier data associated with the at least one computer.

27. A computer-readable medium comprising computer-executable instructions for:

receiving unique identifier data associated with at least one computer;

generating unique key data based on at least the unique identifier data;

receiving at least a portion of an initial digital good having a plurality of selectively arranged parts in an initial configuration;

converting the at least a portion using the unique key data to selectively individualize the portion, such that a modified portion of the digital good is produced having the plurality of parts rearranged in a different configuration than the initial configuration; and

providing at least the modified portion of the digital good and at least a portion of the unique key data to the at least one computer.

28. A computer-readable medium as recited in claim 27, wherein converting at least the portion of the initial digital good using the unique key data to selectively individualize the portion of the initial digital good further includes manipulating at least one flow control operation within the portion of the initial digital good.

29. A computer-readable medium as recited in claim 27, wherein generating the unique key data further includes:

cryptographically generating the unique key data based on the unique identifier data provided by the at least one computer and at least one secret key.

30. A computer-readable medium as recited in claim 29, wherein the unique key data includes at least a first key and a second key, and the first key and the second key are different, but cryptographically related to the secret key.

31. A computer-readable medium as recited in claim 29, wherein converting at least portion of the initial digital good using the unique key data further includes:

dividing the initial digital good into at least a first portion and a second portion;

providing the first portion to the at least one computer via a first computer readable medium;

converting the second portion using the second key to selectively manipulate at least one flow control operation within the second portion, such that a modified second portion is produced that is operatively different in configuration; and

providing the modified second portion and the first key to the at least one computer via a second computer readable medium.

32. A computer-readable medium as recited in claim 31, wherein the first computer readable medium includes a different type of computer readable medium than the second computer readable medium.

33. A computer-readable medium as recited in claim 32, wherein the first computer readable medium includes a fixed computer readable medium and the second computer readable medium includes a network communication.

34. An apparatus for use in a host computer, the apparatus comprising:

an individualizer configured to receive unique key data and at least a portion of an initial digital good that includes a plurality of selectively arranged parts in an initial configuration, and produce at least a portion of a modified digital good using the unique key data to selectively individualize the initial digital good for use with the host computer, and such that the plurality of selectively arranged parts in the modified digital good are rearranged to be operatively different in configuration than the initial configuration of the digital good.

35. An apparatus as recited in claim 34, wherein the individualizer is further configured to selectively individualize the initial digital good by selectively manipulating at least one program flow control operation within the initial digital good.

36. An apparatus as recited in claim 34, wherein the unique key data is cryptographically related to unique identifier data associated with the host computer.

37. An apparatus as recited in claim 36, further comprising:

an identifier configured to output the unique identifier data associated with the host computer to the source computer.

38. An apparatus as recited in claim 34, further comprising:

a program combiner configured to receive a modified first portion of the digital good from the individualizer and a modified second portion from the source computer, and output the modified digital good by combining the modified first portion with the modified second portion.

39. An apparatus as recited in claim 34, wherein the modified digital good is operatively configured to selectively verify that the host computer is properly associated with the unique identifier data output by the identifier.

40. An apparatus as recited in claim 34, wherein the modified digital good is operatively configured to selectively verify that the host computer is properly associated with the unique key data.

41. An apparatus as recited in claim 37, wherein the identifier is further configured to access computer identification data within the host computer and include the computer identification data within the unique identifier data associated with the host computer.

42. An apparatus as recited in claim 37, wherein the identifier is further configured to receive user identification data at the host computer and include the user identification data within the unique identifier data associated with the host computer.

43. An apparatus for use in a source computer, the apparatus comprising:

a key generator configured to receive a unique identifier data from a destination computer and generate unique key data based on the received unique identifier data associated with the destination computer; and

an individualizer configured to receive the unique key data and at least a portion of an initial digital good having a plurality of selectively arranged parts in an initial configuration and output at least a portion of a modified digital good using the unique key data to selectively individualize the initial digital good, such that in the modified digital good the plurality of selectively arranged parts have been rearranged to have an operatively different configuration than the initial configuration.

44. An apparatus as recited in claim 43, wherein the individualizer is further configured to selectively individualize the initial digital good by manipulating at least one program flow control operation within the initial digital good.

45. An apparatus as recited in claim 43, further comprising:

a splitter configured to divide the initial digital good into at least a first portion and a second portion, provide the first portion to the individualizer, and provide the second portion to the destination computer.

46. An apparatus as recited in claim 45, wherein the key generator is further configured to cryptographically generate the unique key data based on the unique identifier data and at least one secret key, the unique key data includes at least a first key and a second key which are unique, but cryptographically related to the secret key, and wherein the key generator is configured to provide the first key is to the individualizer, and the second key to the destination computer.

47. An apparatus as recited in claim 46, wherein the individualizer is further configured to use the second key to selectively individualize the second portion, such that a resulting modified second portion is operatively different in configuration from the second portion.

48. An apparatus as recited in claim 45, wherein the splitter is further configured to allow the first portion to be provided to the destination computer via a first computer readable medium, and to provide the modified second portion to the destination computer via a second computer readable medium that is a different type of computer readable medium than the first computer readable medium.

49. An apparatus as recited in claim 48, wherein the first computer readable medium includes a fixed computer readable medium and the second computer readable medium includes a network communication.

50. A system comprising:

an identifier configured to output unique identifier data associated with a computer;

a key generator coupled to receive the unique identifier data and generate at least one unique key data based on the received unique identifier data; and

at least one individualizer configured to receive the unique key data and at least a portion of an initial digital good that includes a plurality of selectively arranged parts in an initial configuration, and output at least a portion of a modified digital good using the unique key data to selectively individualize the initial digital good, such that the plurality of selectively arranged parts in the modified digital good have been rearranged to be operatively different in configuration than the initial configuration of the digital good.

51. A system as recited in claim 50, wherein the individualizer is further configured to selectively individualize the initial digital good by manipulating at least one program flow control operation within the initial digital good.

52. A system as recited in claim 50, further comprising:

at least one source computer; and

at least one destination computer coupled to the source computer.

53. A system as recited in claim 52, wherein the identifier is provided within the destination computer and is configured to output unique identifier data associated with the destination computer to the source computer, and the key generator and individualizer are each provided within the source computer.

54. A system as recited in claim 52, wherein the identifier is provided within the destination computer and is configured to output unique identifier data associated with the destination computer to the source computer, the key generator is provided within the source computer, and the individualizer is provided within the destination computer.

55. A system as recited in claim 52, wherein the identifier is provided within the destination computer and is configured to output unique identifier data associated with the destination computer to the source computer, the key generator is provided within the source computer, a first individualizer is provided within the destination computer, and a second individualizer is provided within the source computer.

56. A system as recited in claim 55, further comprising:

a splitter provided within the source computer and configured to divide the initial digital good into at least a first portion and a second portion, provide the first portion to the first individualizer, and provide the second portion to the second individualizer.

57. A system as recited in claim 56, wherein the key generator is further configured to cryptographically generate the unique key data based on the unique identifier data and at least one secret key, the unique key data includes at least a first key and a second key which are unique, but cryptographically related to the secret key, the first key is provided to the first individualizer, and the second key is provided to the second individualizer.

58. A system as recited in claim 57, wherein the first individualizer is further configured to use the first key to selectively individualize the first portion, such that the resulting modified first portion is operatively different in configuration from the first portion.

59. A system as recited in claim 58, wherein the second individualizer is further configured to use the second key to selectively individualize the second portion, such that the resulting modified second portion is operatively different in configuration from the second portion.

60. A system as recited in claim 59, further comprising:

a combiner provided within the destination computer and configured to receive the modified first portion from the first individualizer and the modified second portion from the second individualizer, and output the modified digital good by combining the modified first portion with the modified second portion.

61. A system as recited in claim 50, wherein the modified digital good is operatively configured to selectively verify that the destination computer is properly associated with the unique identifier data output by the identifier.

62. A system as recited in claim 50, wherein the modified digital good is operatively configured to selectively verify that the destination computer is properly associated with the first key as provided by the key generator.

63. A system as recited in claim 56, wherein the first portion is provided to the destination computer via a first computer readable medium, the modified second portion is provided to the destination computer via a second computer readable medium that is a different type of computer readable medium than the first computer readable medium.

64. A system as recited in claim 63, wherein the first computer readable medium includes a fixed computer readable medium and the second computer readable medium includes a network communication.

65. A system as recited in claim 50, wherein the identifier is further configured to access computer identification data within a destination computer and includes the computer identification data within the unique identifier data associated with the destination computer.

66. A system as recited in claim 65, wherein the identifier is further configured to receive user identification data at a destination computer and include the user identification data within the unique identifier data associated with the destination computer.