System and method for managing try-and-buy usage of application programs

• US 5,708,709 A
• Filed: 12/08/1995
• Issued: 01/13/1998
• Est. Priority Date: 12/08/1995
• Status: Expired due to Term

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Rose, John R.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US08/569,804
• Time in Patent Office: 767 Days
• Field of Search: 380/4, 380/9, 380/23, 380/25, 380/30, 380/49, 380/50
• US Class Current: 705/59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 8/61 Installation
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30

Abstract

A system and method for managing the distribution of licensed application programs stored on a server over a distributed computer system maintains control over the program even after the program has been distributed to a client computer from a provider on an information server. Protection may include license expiration date verification, authorized user ID verification, and protection against decompilation and reverse engineering by maintaining the program in an encrypted form until verification of the expiration date and user identity are complete and the program is ready for decoding, loading into the client computer CPU, and execution. A user identifies a program for trial use by any conventional means such as by using a network browser on the World Wide Web. The server recognizes a user request to access the application program. The server may have an agent on the client computer for performing certain predetermined administrative tasks. This agent may take the form of an application builder program module, provided by the trial application provider, which is resident on the client computer. The server (including the agent) determines whether program access conditions are satisfied, and if satisfied transmits a version of the program to the client. The transmitted file includes an encrypted portion. The server and agent also verify that the user is currently entitled to execute the application program including that the trial license has not expired at the time the user initiates execution, and generates an executable version of the application program.

Claims

1. A method for managing usage of an application program by a user on a distributed computer system, said application program being initially stored as a stored version of said application program on a server coupled to said distributed computer system, said method comprising the steps of:

at said server, performing steps of;

recognizing a user request to access said application program;

determining whether predetermined access conditions are satisfied;

transmitting a transmission version of said application program to a computer associated with said user for receipt and storage only when said access conditions have been satisfied;

wherein said transmission version of said application program is at least partially encrypted and is not directly executable;

at a client computer, performing steps of;

verifying prior to execution of said program that said user is currently entitled to execute said received application program; and

generating an executable version of said application program from said transmission version only if said verification is affirmative, said generating step including decrypting encrypted portions of said transmission version.

2. The method in claim 1, wherein said user request to access said application program is made using a network browser.

3. The method in claim 1, wherein said predetermined conditions comprise ownership of a valid license to an application builder module which performs said verifying and generating steps.

4. The method in claim 1, wherein said determining step includes:

providing said user with an opportunity to satisfy and accept said predetermined but as yet unsatisfied access conditions; and

recognizing explicit acceptance of said access conditions by said user.

5. The method in claim 4, wherein providing an opportunity to accept a trial license for said application program.

6. The method in claim 1, wherein said transmission version of said application program is encrypted with a public key associated with said user, and wherein said decryption is performed with a corresponding private key.

7. The method in claim 6, wherein said user associated public key and corresponding private keys are generated by said application builder module.

8. The method in claim 1, wherein said step of verifying that said user is entitled to execute said program includes verifying that a usage expiration date has not expired.

9. The method in claim 1, wherein said verifying and generation steps are performed when said user requests execution of said application program.

10. A program usage management system for managing usage of an application program by a user associated with a client computer on a distributed computer network, said system comprising:

a server coupled to said distributed computer system and having memory storage for storing said application program;

a controller coupled to said client computer for recognizing a user request to access said application program and for determining whether predetermined program access conditions associated with said application program are satisfied by said client computer;

a program file formatter for generating a transmission version of said program file that incorporates identification information associated with said client and a version of said application program that is at least partially encrypted, said program file formatter responsive to said controller to generate said transmission version only when said access conditions are satisfied;

a transmitter for transmitting said transmission version of said application program to said client computer associated with said user for receipt and storage only when said access conditions have been satisfied;

a license verifier for verifying prior to execution of said application program by said client computer that the user associated with said client computer is currently entitled to execute said application program; and

a program decoder coupled to said client computer for generating a decrypted machine executable version of said application program from said transmission version of said application program only if said license verifier verifies that the user associated with said client computer is currently entitled to execute said application program, said program decoder including instructions for decrypting encrypted portions of said transmission version.

11. The system in claim 10, wherein said controller includes an application builder program module installed and executing on said client computer, said application builder program module includes said license verifier and said program decoder.

12. The system in claim 11, wherein said predetermined program access conditions associated with said application program include receipt of an encryption key from a valid copy of said application builder program on said client computer.

13. The system in claim 11, wherein

said transmission version of said application program is at least partially encrypted with a public key associated with said user, and wherein said program decoder decrypts said transmission version of said application program with a corresponding private key, and

said user associated public key and corresponding private key are generated by said application builder module.

14. The system in claim 10, wherein said license verification means for verifying includes means for verifying a usage expiration date associated with said application program has not expired.

15. The system in claim 10, wherein said transmission version of said application program is at least partially encrypted with a public key associated with said user, and wherein said program decoder decrypts said transmission version of said application program with a corresponding private key.