EP1082647A2 - Dispositif commande par programme - Google Patents

Dispositif commande par programme

Info

Publication number
EP1082647A2
EP1082647A2 EP99936269A EP99936269A EP1082647A2 EP 1082647 A2 EP1082647 A2 EP 1082647A2 EP 99936269 A EP99936269 A EP 99936269A EP 99936269 A EP99936269 A EP 99936269A EP 1082647 A2 EP1082647 A2 EP 1082647A2
Authority
EP
European Patent Office
Prior art keywords
program
controlled device
controlled
user data
individual user
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Withdrawn
Application number
EP99936269A
Other languages
German (de)
English (en)
Inventor
Wolfgang Fraas
Franz Bonk
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens AG
Siemens Corp
Original Assignee
Siemens AG
Siemens Corp
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens AG, Siemens Corp filed Critical Siemens AG
Publication of EP1082647A2 publication Critical patent/EP1082647A2/fr
Withdrawn legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/12—Protecting executable software
    • G06F21/121—Restricting unauthorised execution of programs
    • G06F21/123—Restricting unauthorised execution of programs by using dedicated hardware, e.g. dongles, smart cards, cryptographic processors, global positioning systems [GPS] devices
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2211/00—Indexing scheme relating to details of data-processing equipment not covered by groups G06F3/00 - G06F13/00
    • G06F2211/007—Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress

Definitions

  • the present invention relates generally to a program-controlled device according to the preamble of claim 1, in particular the present invention relates to a data processing or telecommunications device which is controlled by software.
  • Program-controlled devices or systems include system hardware to perform or perform certain functions of the program-controlled device.
  • the system hardware is supplemented by system software which provides operating data for the operation of the program-controlled device and thus represents the basis for the control of the system hardware.
  • copy protection in the form of the so-called dongle concept is used to ensure that the system software is only used together with the system hardware for which the user has also acquired licenses. In this way, an unauthorized copying of the system software from one individual system hardware to another system hardware is to be prevented.
  • the system checks when booting up whether the dongle is set or inserted in the system. If this is not the case, the system cannot be operated.
  • the problem with this concept is the fact that the dongle is removable and can therefore be placed in another system for which no license has actually been acquired, so that the togetherness check of the hardware and software of a system is artificially falsified can be. There is therefore a need for an improved concept which ensures that the systems -Soft- would only be used to the extent that it is also covered by licenses.
  • the present invention is therefore based on the object of specifying an improved program-controlled device which reliably prevents unauthorized copying of the system software and / or unauthorized use of the system software.
  • the program-controlled device is used together with storage means, for example in the form of a crypto chip, which store individual user data which determine and define the possible extent of use of the system software for the respective user.
  • storage means for example in the form of a crypto chip, which store individual user data which determine and define the possible extent of use of the system software for the respective user.
  • this user data is read out and made the basis for the control of the system hardware in such a way that the system hardware is only controlled by the system software within the scope of use defined by the individual user data. In this way, only predefined features or a certain number of applications of the system software could be released for certain users.
  • the storage means are implemented in the form of a crypto chip, this can be installed, for example, in the multi-layer backplane of the central unit of the device, so that it is permanently connected locally and particularly to the central unit, ie the system software is difficult to access.
  • the program Controlled device for example, customer-specific keys or algorithms are programmed in this chip, so that the system software supplied can only run to the extent defined by the programmed keys / algorithms.
  • the system software or the associated database of the program-controlled device can preferably be copied for backup purposes, but in this way it cannot run on other systems or devices without the crypto chip.
  • an external chip card reader can be connected for this purpose, for example, so that the entire system software is again accessible to an authorized person when a corresponding chip card is inserted. It is also conceivable to use other means of identification for diagnostic / maintenance purposes, with the aid of which the entry of a specific code which authorizes diagnosis / maintenance can be checked.
  • the present invention can be applied to various types of program-controlled devices, a preferred field of application being that of data processing or telecommunication devices.
  • the present invention can be used in telecommunications systems which are used in private networks to set up communication connections between subscribers assigned to the telecommunications system.
  • FIG. 1 shows a simplified block diagram of a program-controlled device in the form of a program-controlled telecommunication system
  • Figure 2 shows a simplified block diagram of the in
  • FIG. 1 shown control device according to the present invention.
  • FIG. 1 shows a simplified block diagram of a telecommunication system 1, as is used, for example, in private communication networks.
  • the telecommunication system 1 is used to mediate voice, image, text and data connections between the subscribers assigned to the telecommunication system 1.
  • the telecommunications system 1 preferably works digitally, i. H. digital information transmission takes place within the telecommunications system 1.
  • the telecommunications system 1 comprises a digital switching network 4, which represents the actual switching element of the telecommunications system 1.
  • the coupling arrangement 4 enables a so-called room change from a transmission line connected to the telecommunication system 1 to another transmission line and a so-called time change from one transmission channel to another transmission channel.
  • the digital switching arrangement 4 is generally divided into individual switching network modules or switching stages.
  • Different subscribers and transmission lines are assigned to the telecommunication system 1 and are brought to the digital coupling arrangement 4 via line adaptations 2a-2c.
  • the line adaptions 2a-2c contain an analog / digital conversion in the coming direction and a digital / analog conversion in the outgoing direction Direction instead.
  • the line adaptations 2a-2c can be connected to the digital coupling arrangement 4, for example, via PCM transmission lines, which have, for example, 64 channels.
  • PCM transmission lines which have, for example, 64 channels.
  • multiple subscriber lines 3 are shown in FIG. 1 only for line adaptation 2a, it being possible for these subscriber lines to be assigned to both analog and digital subscriber terminals.
  • the line adaptations 2b and 2c are each connected to a large number of subscriber lines 3.
  • the telecommunications system 1 is program-controlled. This takes place with the aid of a controller 5, which records the connection requests of the participants in the telecommunication system 1, carries out the route setting and the entire telecommunication system 1, in particular the hardware, i. H. the coupling arrangement 4, the telecommunications system 1 controls.
  • control 5 shown in FIG. 1
  • the structure of the control 5 shown in FIG. 1 will be explained in more detail below with reference to FIG. 2.
  • the control 5 comprises, as a central component, a central control unit (CPU) 6 in the form of a central processor which is used to control the system hardware of the telecommunications system 1.
  • the central control unit 6 is program-controlled and is controlled for this purpose by system software 7, which provides a specific database with operating data for the operation of the system hardware.
  • system software 7 which provides a specific database with operating data for the operation of the system hardware.
  • the system hardware or the telecommunications system 1 can thus be provided for a large number of performance features LM # 1 - LM # n, which are defined by the system software 7 or its database, in particular by the system software 7 for each Performance feature the required operating parameters are specified. That is, With reference to FIG.
  • the first feature LM # 1 can be implemented, for example, with three different operating parameters 1-A to 1-C, while for the second feature LM # 2 only two different operating parameters 2-A and - 2-B are possible.
  • the telecommunication system 1 is equipped in this way by the system software 7 for realizing n performance features.
  • These features can be generally known service features for digital telephone networks, such as. B. "Call waiting”, “call forwarding”, “call forwarding”, “display of the caller's number” or “charge display” etc.
  • the system software 7 and the corresponding database thus provide all the operating information required for the operation of the telecommunications system 1 to the central control unit 6, so that the telecommunications system 1 and its system hardware can be program-controlled.
  • the system software 7 or the associated database can be copied by the respective user for backup purposes.
  • the central control unit 6 of the telecommunications system 1 is coupled to an additional memory 8, which contains individual user data.
  • this memory 8 can be a crypto chip, as is generally used in connection with chip cards.
  • the memory 8 is permanently coupled locally to the central control unit 6 and installed, for example, in the multilayer rear wall or backplane of the central control unit 6, so that the memory 8 cannot be separated from the central control unit 6.
  • the aforementioned individual user data are programmed, ie stored, which, for example, comprise customer-specific keys or algorithms, and the one for the respective Define possible scope of use of the system software or the telecommunication system for the user.
  • the memory 8 is fixed, i.e. H. not removable, coupled with the system software or the central control unit 6, self-identification of the system hardware is possible with the aid of the memory 8 or the information stored therein, so that a clear 1: 1 assignment between the System software and the system hardware of the telecommunications system is given and it is ensured that the
  • the individual user data stored in the memory 8 include, in particular, information that defines the scope of use of the system software 7 that is possible for the respective user.
  • the user data stored in the memory 8 can thus determine which of the features offered by the telecommunication system or the system software 7 are accessible to the respective user and how many different applications are available through the license assigned to the memory or the crypto chip 8 are covered.
  • the LM # 3 feature is only accessible to the user with the 3-B operating parameter. In this way it is ensured that the system software 7 supplied with the system hardware is only available in the version of the volume previously ordered can be executed by the respective user.
  • the central control unit 6 can be coupled to an interface 9 to which, for example, an external chip card reader can be connected, so that an authorized person can identify himself with a special chip card to the telecommunication system or the central control unit 6 and the System 8 can remove any restrictions imposed by the memory 8.
  • an external chip card reader can be connected to an interface 9 to which, for example, an external chip card reader can be connected, so that an authorized person can identify himself with a special chip card to the telecommunication system or the central control unit 6 and the System 8 can remove any restrictions imposed by the memory 8.
  • the use of other identification means is also possible, which enables identification of a person authorized to access the entire system software 7 or its entire database.
  • a keyboard input can be provided, according to which the restrictions of the memory 8 are lifted when an appropriate access code is entered and the authorized person can access the entire system software 7.

Landscapes

  • Engineering & Computer Science (AREA)
  • Software Systems (AREA)
  • Theoretical Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Technology Law (AREA)
  • Multimedia (AREA)
  • Remote Sensing (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Radar, Positioning & Navigation (AREA)
  • Telephonic Communication Services (AREA)
  • Communication Control (AREA)

Abstract

L'invention concerne un dispositif (1) commandé par programme, se présentant notamment sous forme de système de télécommunication commandé par programme, selon lequel on utilise une puce mémoire (8) dans laquelle des données utilisateur individuelles sont programmées, au moment de la livraison du dispositif. Ces données définissent pour chaque utilisateur, le champ d'applications dont chacun dispose dans le cadre de l'utilisation des logiciels-système (7) du dispositif (1) commandé par programme. Ces mesures garantissent que les logiciels-système (7) fournis ne puissent tourner que dans le champ d'applications demandé par chacun des utilisateurs et couvert par la licence consentie. La puce mémoire (8) est montée de manière particulièrement solide dans la platine de la paroi arrière à couches multiple de l'unité de commande centrale (6) du dispositif (1) commandé par programme, de manière que ladite puce mémoire (8) ne puisse être séparée de l'unité de commande centrale (6) par un utilisateur.
EP99936269A 1998-06-03 1999-05-18 Dispositif commande par programme Withdrawn EP1082647A2 (fr)

Applications Claiming Priority (3)

Application Number Priority Date Filing Date Title
DE19824814 1998-06-03
DE1998124814 DE19824814C2 (de) 1998-06-03 1998-06-03 Einrichtung zur Ermittlung von freizugebenden Funktionen in einer Telekommunikationsanlage
PCT/DE1999/001489 WO1999063697A2 (fr) 1998-06-03 1999-05-18 Dispositif commande par programme

Publications (1)

Publication Number Publication Date
EP1082647A2 true EP1082647A2 (fr) 2001-03-14

Family

ID=7869788

Family Applications (1)

Application Number Title Priority Date Filing Date
EP99936269A Withdrawn EP1082647A2 (fr) 1998-06-03 1999-05-18 Dispositif commande par programme

Country Status (3)

Country Link
EP (1) EP1082647A2 (fr)
DE (1) DE19824814C2 (fr)
WO (1) WO1999063697A2 (fr)

Families Citing this family (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE10023818A1 (de) * 2000-05-15 2001-11-22 Siemens Ag Lizenzmanager
DE10260884A1 (de) * 2002-12-23 2004-07-29 Grundig Aktiengesellschaft Gerät der Unterhaltungselektronik und Verfahren für den Betrieb des Geräts der Unterhaltungselektronik
DE10353499A1 (de) * 2003-11-11 2005-06-16 Siemens Ag Verfahren zum Ändern der Leistungsmerkmale einer von einer Systemsoftware gesteuerten Vorrichtung
DE102006018039B4 (de) * 2006-04-11 2010-11-25 Michael Letterer Verfahren zum Ausführen eines Programmcodes
US10372104B2 (en) * 2015-02-27 2019-08-06 Rockwell Automation Technologies, Inc. Industrial automation control system content protection

Family Cites Families (5)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE3507744A1 (de) * 1985-03-05 1986-09-11 Neumann, Hans-Günter, Dr., 5047 Wesseling Verfahren zum schutz von datenbanken und/oder rechenanlagen der elektronischen datenverarbeitung und/oder datentechnik vor dem zugriff unberechtigter
EP0557566B1 (fr) * 1992-02-28 1996-04-17 Siemens Aktiengesellschaft Méthode d'accès par mot de passe administré hiérarchiquement aux indications d'accès d'utilisateur dans une base de données d'un central à commande programmée
CA2073495C (fr) * 1992-07-08 1999-01-12 Michael Wright Selection et controle d'options
JPH08305558A (ja) * 1995-04-27 1996-11-22 Casio Comput Co Ltd 暗号化プログラム演算装置
DE69528663T2 (de) * 1995-08-11 2003-06-26 International Business Machines Corp., Armonk Verfahren zum überprüfen der betriebsanordnung eines rechnersystems

Non-Patent Citations (1)

* Cited by examiner, † Cited by third party
Title
See references of WO9963697A3 *

Also Published As

Publication number Publication date
WO1999063697A2 (fr) 1999-12-09
WO1999063697A3 (fr) 2000-01-27
DE19824814A1 (de) 1999-12-09
DE19824814C2 (de) 2000-06-21

Similar Documents

Publication Publication Date Title
EP2691940B1 (fr) Gestion de droits d'accès à des données de fonctionnement et/ou de commande de bâtiments ou complexes de bâtiments
EP0557566B1 (fr) Méthode d'accès par mot de passe administré hiérarchiquement aux indications d'accès d'utilisateur dans une base de données d'un central à commande programmée
EP0532102B1 (fr) Système pour contrÔler l'accès aux données d'un appareil de données
WO1999063697A2 (fr) Dispositif commande par programme
DE19533209C2 (de) Vorrichtung zur Zuordnung der Benutzer in einem Computer-Netzwerk
EP1723815B1 (fr) Synchronisation de donnees dans au moins deux cartes d'abonne pour le fonctionnement d'un terminal mobile
DE60023978T2 (de) Verfahren und System in einem Fernsprechvermittlungssystem
EP1163807A2 (fr) Procede permettant de verifier l'authentification d'une application de gestion d'un systeme de commande de reseau de gestion des telecommunications par un element reseau et element reseau adapte
EP1521395A1 (fr) Méthode de gestion de licences et/ou d'autorisation d'accès pour logiciels dans un dispositif de commutation
DE19755012A1 (de) Verfahren zur Verwaltung teilnehmerindividueller Daten eines Telekommunikationsendgerätes
DE19548296C2 (de) Bidirektionaler Datenaustausch (Protokoll) zwischen einer TK-Anlage und einer Endeinrichtung
DE60300964T2 (de) Generierung nutzerspezifischer Einstellungsdaten
DE102005015792A1 (de) Diagnosesystem mit Identifikationsanzeigeeinrichtung
DE10021550A1 (de) Netzweite Endkundenadministration über Administrationstechnik des Betreibers
DE9315580U1 (de) Einrichtung zum Abrufen von Informationen
DE3214657A1 (de) Einrichtung fuer die sprach- und/oder datenvermittlung und -uebertragung
DE2744302C3 (de) Schaltunganordnung zur Beschränkung der Verkehrsmöglichkeit bei Externverbindungen in einer Fernmelde-, insbesondere Fernsprechnebenstellenanlage
DE4323847C1 (de) Verfahren zur Fernabfrage einer Zugangsberechtigung für eine Teilnehmereinrichtung
EP0460403B1 (fr) Procédé pour la transmission de signaux de données dans des centraux de communication
DE2816093C2 (de) Verfahren zur gesicherten Änderung von Kunden- und Programmdaten in Fernmelde-, insbesondere Fernsprechanlagen von einer zentralen Verwaltungsstelle aus
EP1065867B1 (fr) Méthode pour configurer des droits d'utilisateurs pour un central de communication
DE10254620A1 (de) Mehrfachregistrierung in Telefonsystemen
DE3743956A1 (de) Verfahren zur initiierung von vermittels eines digitalen kommunikationssystems steuerbaren kommunikationsverbindungen durch eine daran angeschlossene externe rechneranlage
DE3445627A1 (de) Mehrrechnersystem
EP1325610A2 (fr) Procede et programme de commande permettant la mise en service d'une connexion d'abonne d'un dispositif de communication

Legal Events

Date Code Title Description
PUAI Public reference made under article 153(3) epc to a published international application that has entered the european phase

Free format text: ORIGINAL CODE: 0009012

17P Request for examination filed

Effective date: 20000531

AK Designated contracting states

Kind code of ref document: A2

Designated state(s): DE FR GB IT

STAA Information on the status of an ep patent application or granted ep patent

Free format text: STATUS: THE APPLICATION IS DEEMED TO BE WITHDRAWN

18D Application deemed to be withdrawn

Effective date: 20051202