Methods for preventing software piracy

• US 8,266,710 B2
• Filed: 08/13/2009
• Issued: 09/11/2012
• Est. Priority Date: 08/09/2004
• Status: Expired due to Fees

• Current Assignee: Jasim Saleh Al-Azzawi
• Original Assignee: Jasim Saleh Al-Azzawi
• Inventors: Al-Azzawi, Jasim Saleh
• Primary Examiner(s): Abrishamkar, Kaveh
• Assistant Examiner(s): Tran, Tri
• Application Number:
  US12/540,623
• Publication Number:
  US 20090300772A1
• Time in Patent Office: 1,125 Days
• Field of Search: 726 26- 33
• US Class Current: 726/26
• CPC Class Codes: G06F 21/12 Protecting executable software
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G11B 20/00086 Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00152 involving a password
• CPC Class Codes: G11B 20/00659 involving a control step which is implemented as an executable file stored on the record carrier
• CPC Class Codes: G11B 20/00782 wherein the usage restriction limits the number of times a program can be installed
• CPC Class Codes: G11B 20/00847 wherein the usage restriction is defined by a licence file
• CPC Class Codes: G11B 20/00855 involving a step of exchanging information with a remote server

Abstract

A method for preventing unauthorized installation of application software is disclosed wherein application software is distributed with a user-readable permanent password, one or more user-readable one-time disposable password, and a hidden password (hidden from users but accessible by the setup program). When the setup program is run, the user must enter the permanent password and disposable password(s). The setup program sends these passwords and the target computer serial number to a remote server which verifies their validity, stores the serial number, and returns a complex password and a new disposable password from a remote passwords folder stored on the remote server. The setup program displays the new disposable password to the user who records it for use in future installations. The complex password is used to enable installation of the software, and it is deleted after installation is complete. Subsequent installation or re-installations, if authorized by the terms of the software license agreement, are performed using the same procedure, except that for each such installation, a new disposable password must be used.

Claims

1. A method for preventing unauthorized installation of application software comprising

(a) distributing application software with a user-readable permanent password, a user-readable disposable password, and a hidden password, wherein said hidden password can be read by a software setup program;

(b) causing said software setup program to run on a target installation computing machine and to query a user for said permanent password and said disposable password;

(c) causing said software setup program to contact a designated remote server and transmit (1) said permanent password, (2) said disposable password, (3) said hidden password, and (4) a serial number associated with said target installation computing machine;

(d) causing software on said designated remote server to compare said permanent password, said disposable password, and said hidden password against stored records of legitimately distributed software, and only if all three passwords match against said stored records, causing said designated remote server to store said serial number in said stored records, to replace said disposable password in said stored records with a second disposable password and to return to said software setup program (1) a complex password and (2) said second disposable password; and

(e) causing said software setup program to display said second disposable password to said user, to attempt to use said complex password to enable said software setup program to proceed with the installation of said application software on said target installation computing machine, to abort if said complex password cannot successfully enable installation, and to delete said complex password.

2. The method of claim 1, wherein, after completing steps (a) through (e), a user reinstalls said application software on said target installation computing machine or installs said application on a second target installation computing machine by a method comprising

(f) causing said software setup program to run on a target installation computing machine and to query a user for said permanent password and a disposable password, wherein said user responds with said user-readable permanent password and said second disposable password;

(g) causing said software setup program to contact a designated remote server and transmit (1) said permanent password, (2) said second disposable password, (3) said hidden password, and (4) said serial number associated with said target installation computing machine;

(h) causing software on said designated remote server to compare said permanent password, said second disposable password, said hidden password, and said serial number against said stored records of legitimately distributed software, and only if all three passwords and said serial number match against said stored records, causing said designated remote server to replace said second disposable password in said stored records with a third disposable password and to return to said software setup program (1) said complex password and (2) said third disposable password;

(i) causing said software setup program to display said third disposable password to said user, to attempt to use said complex password to enable said software setup program to proceed with the installation of said application software on said target installation computing machine, to abort if said complex password cannot successfully enable installation, and to delete said complex password.

3. The method of claim 1, wherein step (d) further comprises causing said software on said designated remote server to return secret codes necessary to enable installation.

4. The method of claim 1, wherein step (d) further comprises causing said software on said designated remote server to return key parts of said application software necessary to complete installation.

5. The method of claim 1, wherein said application software is distributed on CD-ROM or DVD-ROM, and said permanent password and said disposable password are provided in printed form.

6. The method of claim 1, wherein application software is distributed over the internet, and said permanent password and said disposable password are provided separately by e-mail.

7. The method of claim 1, wherein said software setup program first queries a user for said permanent password and aborts if said permanent password does not match a digitally stored version of said permanent password.

8. The method of claim 1, wherein said application software is installed with said serial number stored in a hidden location, and wherein said application software cannot be run if said serial number does not match the serial number of the machine on which a user attempts to run said application software.

9. A method for preventing unauthorized installation of application software comprising

(a) distributing application software with a user-readable permanent password, two user-readable disposable passwords, and a hidden password, wherein said hidden password can be read by a software setup program;

(b) causing said software setup program to run on a target installation computing machine and to query a user for said permanent password and said two disposable passwords;

(c) causing said software setup program to contact a designated remote server and transmit (1) said permanent password, (2) said two disposable passwords, (3) said hidden password, and (4) a serial number associated with said target installation computing machine;

(d) causing software on said designated remote server to compare said permanent password, said two disposable passwords, and said hidden password against stored records of legitimately distributed software, and only if all four passwords match against said stored records, causing said designated remote server to store said serial number in said stored records, to mark the stored copies of said two disposable passwords in said stored records as “

user,” and

to return to said software setup program (1) a complex password and (2) a third disposable password; and

(e) causing said software setup program to display said third disposable password to said user, to attempt to use said complex password to enable said software setup program to proceed with the installation of said application software on said target installation computing machine, to abort if said complex password cannot successfully enable installation, and to delete said complex password.

10. The method of claim 9, wherein, after completing steps (a) through (e), a user reinstalls said application software on said target installation or installs said application on a second target installation computing machine by a method comprising

(f) causing said software setup program to run on a target installation computing machine and to query a user for said permanent password and two disposable passwords, wherein said user responds with said user-readable permanent password, one of the disposable passwords from step (a), and said third disposable password;

(g) causing said software setup program to contact a designated remote server and transmit (1) said permanent password, (2) said two disposable passwords, (3) said hidden password, and (4) said serial number associated with said target installation computing machine;

(h) causing software on said designated remote server to compare said permanent password, said hidden password, and said serial number against said stored records of legitimately distributed software, and;

only if both passwords and said serial number match against said stored records, to further compare said one of the disposable passwords from step (a) against the disposable passwords marked “

used”

in said stored records, and;

only if a match is found, to further compare said third disposable password against the stored record of the most recently sent disposable password, and;

only if said third disposable password matches said stored record, causing said designated remote server to mark said third disposable password in said stored records as “

used,” and

to return to said software setup program (1) said complex password and (2) a fourth disposable password;

(i) causing said software setup program to display said fourth disposable password to said user, to attempt to use said complex password to enable said software setup program to proceed with the installation of said application software on said target installation computing machine, to abort if said complex password cannot successfully enable installation, and to delete said complex password.

11. The method of claim 9, wherein step (d) further comprises causing said software on said designated remote server to return secret codes necessary to enable installation.

12. The method of claim 9, wherein step (d) further comprises causing said software on said designated remote server to return key parts of said application software necessary to complete installation.

13. The method of claim 9, wherein said application software is distributed on CD-ROM or DVD-ROM, and said permanent password and said disposable password are provided in printed form.

14. The method of claim 9, wherein application software is distributed over the internet, and said permanent password and said disposable password are provided separately by e-mail.

15. The method of claim 9, wherein said software setup program first queries a user for said permanent password and aborts if said permanent password does not match a digitally stored version of said permanent password.

16. A method for preventing unauthorized installation of application software comprising

(a) distributing application software with a user-readable permanent password, two user-readable disposable passwords, and a hidden password, wherein said hidden password can be read by a software setup program;

(b) causing said software setup program to run on a target installation computing machine and to query a user for said permanent password and said two disposable passwords;

(c) causing said software setup program to contact a designated remote server and transmit (1) said permanent password, (2) said two disposable passwords, (3) said hidden password, and (4) a serial number associated with said target installation computing machine;

(d) causing software on said designated remote server to compare said permanent password, said two disposable passwords, and said hidden password against stored records of legitimately distributed software, and only if all four passwords match against said stored records, causing said designated remote server to store said serial number in said stored records, to mark the stored copies of said two disposable passwords in said stored records as “

used,” and

to return to said software setup program (1) a complex password and (2) a third disposable password;

(e) causing said software setup program to display said third disposable password to said user, to attempt to use said complex password to enable said software setup program to proceed with the installation of said application software on said target installation computing machine, to store said serial number in a hidden location, to abort if said complex password cannot successfully enable installation, and to delete said complex password; and

wherein said application software cannot be run if said serial number does not match the serial number of the machine on which a user attempts to run said application software.