Software-management system, recording medium, and information-processing device

Abstract

A recording medium that is not easily tampered with and capable of avoiding invalid attacks on a communication channel between the recording medium and a terminal targeted for software installation, while being incapable of unauthorized updating of a correspondence relationship between software and license information. The recording medium includes a tamper-resistant module and an information-recording unit that has a normal storage area and a secure storage area. Software is recorded in the normal storage area, while a license count showing a permitted usage count of the software is recorded in the secure storage area in correspondence with signature data relating to the software. The tamper-resistant module performs mutual device authentication with the terminal, and if the license count in the secure storage area is within a predetermined value, outputs the software and the signature data to the terminal.

Description

technical field [0001] The invention relates to the license management technology of computer software. Background technique [0002] Hitherto, various techniques for managing computer program licenses have been proposed. [0003] Japanese Laid-Open Patent Application No. 10-27426 aims at preventing unlimited installation of application programs recorded on recording media and eliminating unauthorized use of such programs. The above-mentioned Japanese Laid-Open Patent Application discloses installation control technology for : According to the execution of the installation, record the installation count in the storage / reproduction area of ​​the recording medium; when requesting to install the application program on another recording medium, check the recorded installation count; and only when the installation count is smaller than the predetermined count, Perform the installation as described. [0004] Japanese Laid-Open Patent Application No. 2002-268764 discloses a softw...

AI Technical Summary

Problems solved by technology

[0006] However, at first, with the installation control technology disclosed in Japanese Laid-Open Patent Application No. 10-27426, although the permissibility of the installation is judged using the installation count recorded on the recording medium, unlimited installation of the application program is prevented, but if malicious If a third party changes the installation count recorded in the recording / reproducing area of ​​the recording medium, then unlimited installation of the application becomes possible (Question 1)

Here, if a malicious third party changes the installation count via the communication channel, unlimited installation of the application becomes possible, as in the above case (problem 2)

[0009] Second, using the management system disclosed in Japanese Laid-Open Patent Application No. 2002-268764, since the license management information related to the software is stored on the IC card, even a malicious third party cannot easily change the license management information stored on the IC card. License management information for

Therefore, the possibility of a situation as described in question 1 is very small

Here, if a malicious third party changes the license management information on the communication channel, unlimited installation of the application program becomes possible, as in the case of the above-mentioned installation control technology disclosed in Japanese Laid-Open Patent Application No. 10-27426 ( Question 2)

[0012] Third, utilize the copy card implementation method disclosed in Japanese Laid-Open Patent Application No. 2002-182769, because the verification data for judging whether to allow software installation is recorded on the storage box, so even a malicious third party cannot easily change it. Verification data recorded in the storage box

Therefore, there is little chance of problems like those described in question 1

[0013] Also, with this copy card implementation method, if a malicious third party changes the license-related information transmitted on the communication channel between the storage box access device and the storage box, unlimited installation of applications becomes possible , as in the above example with the installation control technique disclosed in Japanese Laid-Open Patent Application No. 10-27426 (Question 2)

[0014] Furthermore, with the above-mentioned copy card implementation method, if a malicious third party changes the correspondence between the recording medium and the storage case, it becomes possible to install an expensive program, unlike the above-mentioned one disclosed by Japanese Laid-Open Patent Application No. 2002-268764 The same is true for the management system (question 3)

Images