Method and apparatus for feature authorization and software copy protection in RF communications devices

• US 5,499,295 A
• Filed: 08/31/1993
• Issued: 03/12/1996
• Est. Priority Date: 08/31/1993
• Status: Expired due to Term

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Ericsson, Inc. (Telefonaktiebolaget LM Ericsson)
• Inventors: Cooper, Gerald M.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/113,643
• Time in Patent Office: 924 Days
• Field of Search: 375/1, 375/200-210, 380/4, 380/9, 380/20, 380/23, 380/30, 380/34, 380/49, 380/50, 455/349
• US Class Current: 380/270
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: H04B 1/401 for selecting or indicating operating mode
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04M 1/72406 by software upgrading or downloading
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 12/10 Integrity
• CPC Class Codes: H04W 12/35 Protecting application or service provisioning, e.g. securing SIM application provisioning

Abstract

A hardware-software security arrangement enables manufacturers of digital RF communications equipment to provide differently configured products having substantially identical hardware and operational control software. Only authorized units are permitted to activate software-controlled "optional" features. The software is protected against unauthorized modifying, copying and uploading/downloading. The security arrangement allows a manufacturer to control the distribution of functional features and operational software upgrades by requiring a product-specific authorization. Each individual unit has a read-only storage device containing a unique device-specific value. "Checksum" data is uniquely computed by the manufacturer for each individual product unit according to a "feature authorization code" specifying particular authorized functional features and the device specific value by using a particular data transformation. This computed data is stored in the unit. On power-up, the unique checksum data is recalculated by the device and compared to the stored checksum data. The unit enables only the most basic functions if the comparison is unfavorable. If the comparison is favorable, then particular features specified by the "feature authorization code" are enabled. The unit may also be updated in the field to provide additional features by providing the manufacturer with the device serial number, obtaining a newly calculated "checksum" based on the desired additional features, and dynamically downloading this information into the device.

Claims

1. A program-controlled digital radio transceiver including:

digitally controlled radio frequency transceiving circuitry;

a digital controller for controlling a plurality of transceiving functions in response to control information stored in a memory associated therewith;

said memory storing said control information and also storing transceiver function-enabling information;

an identification storage device for storing an identifying value uniquely associated with said transceiver; and

feature authorization means for performing at least one predetermined mathematical transformation operation involving both said function-enabling information and said identifying value to compute results, said feature authorization means authorizing said digital controller to perform selected transceiving functions in response to said computed results.

2. The digital transceiver of claim 1 wherein said memory for storing transceiver function-enabling information is a non-volatile memory.

3. The digital transceiver of claim 1 wherein said identification storage device is a non-programmable read only memory.

4. The digital transceiver of claim 1 wherein said memory stores precomputed results, and said feature authorization means includes a means for comparing the computed results of said transformation operation with said precomputed results value stored in said memory.

5. A digital radio transceiver of the type including a microprocessor for controlling a plurality of radio transceiving functions in response to program control information stored in a memory associated therewith, comprising:

digitally controlled transceiving circuitry for transmitting and receiving radio frequency signals;

a memory for storing function-enabling program control information, said function-enabling information being stored in an encrypted form;

a serial number storage device for storing a serially assigned numerical value unique to said transceiver; and

feature authorization means for decrypting said function-enabling information and for performing at least one predetermined mathematical transformation operation involving both decrypted function-enabling information and said unique assigned value, said feature authorization means authorizing said microprocessor to perform selected transceiving functions only if said transformation operation resulted in a predetermined value.

6. The digital transceiver of claim 5 wherein said memory for storing transceiver function-enabling information is a programmable non-volatile memory.

7. The digital transceiver of claim 5 wherein said serial number storage device is a non-programmable read only memory.

8. The digital transceiver of claim 5 wherein said feature authorization means includes a means for comparing the results of said transformation operation with a predetermined value stored in said memory.

9. In a digital radio communications device performing a plurality of radio transceiving functions in response to program control information stored in a memory associated therewith, said program control information including function-enabling information for selectively enabling various predetermined combinations of transceiving functions, a method for preventing use of unauthorized program control information comprising the following steps:

providing said digital radio communications device, at time of manufacture, with a serially assigned numerical value unique to said digital radio communications device, said serial number stored within said digital radio; and

said digital radio communications device performing the further steps of;

(a) performing a mathematical data-transformation operation on said function-enabling information and said stored unique assigned value and

(b) performing various transceiving functions authorized by said function-enabling information only if said data-transformation operation results in a predetermined value.

10. The digital radio communications device of claim 9, further comprising the step of comparing the results of said transformation operation to a predetermined value in said associated memory prior to said performing step (b), said predetermined value calculated, using the same data transformation operation, unique assigned value and function-enabling information as in step (a), and stored in said associated memory prior to power-up.

11. In a digital radio communications device for transmitting and receiving radio frequency signals of the type including a microprocessor for performing a plurality of radio transceiving functions in response to program control information stored in a memory associated therewith, said program control information including encrypted function-enabling information for selectively permitting the operation of various predetermined combinations of transceiving functions, a method for preventing unauthorized alteration, copying and/or downloading of said program control information into other products while allowing an authorized alteration of said function-enabling information to provide a different combination of functions, comprising the following steps:

providing said digital radio communications device, with;

a serially assigned numerical value unique to said digital radio communications device, a predetermined check value, and an encryption seed, said serial number, check value and encryption seed data stored electronically in said digital radio; and

said digital radio communications device performing the further steps of;

(a) decrypting said function-enabling information stored in said associated memory based on said encryption seed data;

(b) performing a mathematical data-transformation operation on the decrypted function-enabling information of step (a) using said unique serial number; and

(c) performing various transceiving functions authorized by said decrypted function-enabling information only if said data transformation operation results in said predetermined check value, said predetermined check value calculated using the same data-transformation operation, unique assigned value and function-enabling information as in steps (a) and (b), and stored in said associated memory prior to power-up.

12. In a digital radio communications device for transmitting and receiving radio frequency signals of the type including a microprocessor for performing at least first and second radio transceiving functions in response to program control information stored in a memory associated therewith, said program control information including function-enabling information for selectively permitting the operation of various predetermined combinations of transceiving functions, an arrangement for preventing unauthorized alteration, copying or downloading of said program control information into other products, while permitting an authorized alteration of said enabling information to provide a different combination of functions, comprising:

digitally controlled transceiver circuitry for transmitting and receiving radio frequency signals;

a memory for storing transceiver function-enabling information;

a serial number storage device for storing a serially assigned numerical value unique to said transceiver; and

feature authorization means for performing at least one predetermined data transformation operation using said function-enabling information and based on said unique assigned value, said feature authorization means allowing selected transceiving functions to operate if said transformation operation resulted in a predetermined value.

13. The digital radio communications device of claim 12, wherein said feature authorization means includes a means for comparing the results of said transformation operation with a predetermined value stored in said associated memory.

14. In a digital radio communications device for transmitting and receiving radio frequency signals of the type including a microprocessor for performing a plurality of radio transceiving functions in response to program control information stored in a memory associated therewith, said program control information including function-enabling data for selectively permitting the operation of various predetermined combinations of transceiving functions, a method for providing function-enabling data that is specifically tailored for an individual communications device and for preventing unauthorized use of said program control information by alteration, duplication or downloading into other products, comprising the following steps of:

(a) providing said digital radio communications device with a serially assigned numerical value unique to said digital radio communications device, said assigned value stored within said digital communications device;

(b) performing a data transformation operation on selected function-enabling data using said assigned value, said transformation operation performed prior to storing said function-enabling data in said associated memory;

(c) storing the transformed function-enabling data in said associated memory along with program information for performing a reverse data transformation operation for reproducing said selected function-enabling data from transformed function-enabling data.

15. A method of operating a radio frequency communications device comprising:

(a) reading a feature authorization code;

(b) reading an identification code that identifies said device;

(c) computing a value in response to said feature authorization code and said identification code;

(d) testing said computed value; and

(e) selectively enabling at least one radio communicating feature based on results of said test and said feature authorization code.

16. A method as in claim 15 wherein:

said feature authorization code specifies plural radio transceiving features; and

said selectively enabling step (e) enables the plural radio transceiving features specified by said feature authorization code.

17. A method as in claim 15 wherein said enabling step (e) disables said feature if said test is unfavorable, and selectively enables said feature based on the content of said feature authorization code if said test is favorable.

18. A method as in claim 15 further including decrypting said read feature authorization code.

19. A method as in claim 15 wherein said testing step comprises comparing said computed value with a predefined stored value.

20. A method of operating radio frequency equipment comprising:

(a) reading feature authorization information from a medium;

(b) determining whether said read feature authorization information authorizes performance of an optional radio feature;

(c) testing authenticity of said read feature authorization information to determine whether it originated from an authorized source; and

(d) enabling said equipment to operate in accordance with said optional radio feature only if said determining step (b) determines that said optional radio feature is authorized and said testing step (c) reveals that said feature authorization information is from said authorized source.

21. The method as set forth in claim 20 wherein said testing step (c) comprises performing a least one computation involving said read feature authorization information that ensures that said read feature authorization information corresponds to feature authorization information specifically authorized for said equipment.

22. The method as set forth in claim 20 wherein said feature authorization information read in step (a) is in an encrypted form and said determining step (b) includes decrypting said read feature authorization information.

23. The method as set forth in claim 20 wherein said testing step (c) comprises:

computing a first numerical value from a mathematical transformation of said read feature authorization information that employs a preassigned serial-number for said equipment, and

comparing the results of said first numerical value to a predetermined second numerical value previously stored in said equipment.

24. The method as set forth in claim 23 wherein said second numerical value is the result of an earlier calculation of said mathematical transformation of said computation step.

25. A method of operating radio frequency transceiving equipment comprising:

(a) reading feature authorization information from a medium;

(b) testing of said feature authorization information read by said reading step (a) to determine whether said authorization information is from an authorized source;

(c) if said testing step (b) reveals said read feature authorization information is from said authorized source, enabling at least one optional radio feature specified by said read feature authorization information; and

(d) transmitting and receiving radio frequency electromagnetic signals in accordance with said enabled optional radio feature.

26. A method as in claim 25 wherein:

said feature authorization information specifies whether said equipment is authorized to perform a first tier of optional functions and also specifies whether said equipment is authorized to perform a second tier of optional functions; and

said enabling step (c) selectively enables said first and second tiers based on said feature authorization information.

27. The method as set forth in claim 25 wherein said testing step (b) comprises performing a least one computation involving said read feature authorization information that ensures that said read feature authorization information corresponds to feature authorization information specifically authorized for said equipment.

28. The method as set forth in claim 25 wherein said feature authorization information read in step (a) is in an encrypted form and said reading step (a) further includes decrypting said read feature authorization information.

29. The method as set forth in claim 25 wherein said testing step (b) comprises:

computing a first digital value from a predetermined mathematical transformation of said read feature authorization information that employs a binary number uniquely preassigned to said equipment, and

comparing the results of said transformation to a predetermined second digital value previously stored in a non-programmable read-only memory in said equipment.

30. The method as set forth in claim 29 wherein said second digital value is the result of an earlier calculation of said mathematical transformation of said computation step.

31. Radio frequency equipment comprising:

a housing;

a storage medium disposed within said housing, said storage medium storing coded feature authorization information;

enabling means, disposed within said housing and coupled to said storage medium, for enabling performance of an optional radio feature if read feature authorization information indicates said optional radio feature is to be enabled and said read feature authorization information is from an authorized source; and

radio frequency circuitry connected to said enabling means and at least partially disposed within said housing, said radio frequency circuitry functioning in accordance with said optional radio feature if said enabling means enables performance of said optional radio feature.

32. Radio frequency equipment as in claim 31 wherein said enabling means includes cryptographic means for determining whether said feature authorization information is from said authorized source.

33. Radio frequency transceiving equipment comprising:

radio frequency transceiving circuitry that transmits and receives radio frequency electromagnetic signals;

a medium that stores feature authorization information indicating whether an optional radio transceiving function is authorized;

an authenticating arrangement connected to said medium, said authenticating arrangement testing whether said feature authorization information is from an authorized source; and

a controller for said radio frequency transceiving equipment, said controller cooperating with said radio frequency transceiving circuitry, said medium and said authenticating arrangement to perform said optional radio transceiving function if said optional radio transceiving function is authorized by said feature authorization information and authenticating arrangement testing indicates said feature authorization information is from an authorized source.

34. A digital radio comprising:

a digitally controlled radio transmitter;

a digitally controlled radio receiver;

a digital controller connected to said radio transmitter and said radio receiver, said digital controller operating in accordance with stored program control information; and

an arrangement for preventing unauthorized alteration, copying or downloading of said program control information into other products, comprising;

a memory storing feature authorization information and a digital code identifying said radio;

wherein said digital controller authenticates, using at least one predetermined data transformation operation, said stored feature authorization information and said digital code as being from an authorized source and wherein said digital controller allows selected transceiving functions to operate if said function enabling information and said digital code are authentic.

35. A digital radio comprising:

a digitally controlled radio transmitter;

a digitally controlled radio receiver;

a memory storing feature authorization information and a digital ID code identifying said digital radio;

a digital controller connected to said radio transmitter and said radio receiver;

wherein said digital controller includes means for transforming said ID code and said feature authorization information to provide transformed results, and means for testing said transformed results to determine whether said feature authorization code is authorized for said ID code.

36. A method for preventing unauthorized alteration, copying or downloading of control information stored in a digitally controlled communications device into other products, comprising:

(a) storing feature authorization information and a digital ID code identifying said digital communications device in a memory in said device;

said communications device digitally controlled to perform only communications functions authorized in said feature authorization information;

(b) transforming said ID code and said feature authorization information to provide transformed results, and

(c) storing said transformed results in a memory in said communications device;

said communications device transforming said ID code and said feature authorization information to provide transformed results, and testing said transformed results to determine whether said feature authorization code is authorized for said ID code.

37. A method of operating radio equipment having at least one memory device storing code and also storing feature authorization information, said stored code at least in part defining a first processing operation and associated characteristics of the operation of said radio equipment, said method comprising the following steps:

(a) reading at least a part of said feature authorization information from said memory device;

(b) determining if said feature authorization information authorizes said first processing operation;

(c) determining if said feature authorization information is authentic;

(d) tuning to selected radio frequencies based at least in part on said stored code; and

(e) processing radio frequency signals transmitted over the air at said selected radio frequencies, including performing said first processing operation if said determining step (b) determines said first processing operation is authorized and said determining step (c) determines said feature authorization information is authentic.

38. A method as in claim 37 wherein said step (e) includes transmitting and receiving radio frequency signals.

39. A method as in claim 37 wherein said determining step (c) includes performing at least one cryptographic operation based at least in part on said feature authorization information using a cryptographic key based at least in part on a value distinguishing said radio equipment from other radio equipment.

40. A method as in claim 39 wherein said radio equipment includes a read only arrangement providing said value, and said method further includes reading said value from said read only arrangement.

41. A method as in claim 37 wherein said determining step (c) includes authenticating that said feature authorization information was created by a known source.

42. A method as in claim 37 wherein said determining step (c) includes authenticating that said feature authorization information is customized to correspond on a one-to-one basis with said radio equipment.