WO2015013474A3 - Anti-piracy protection for software - Google Patents

Anti-piracy protection for software Download PDF

Info

Publication number
WO2015013474A3
WO2015013474A3 PCT/US2014/047932 US2014047932W WO2015013474A3 WO 2015013474 A3 WO2015013474 A3 WO 2015013474A3 US 2014047932 W US2014047932 W US 2014047932W WO 2015013474 A3 WO2015013474 A3 WO 2015013474A3
Authority
WO
WIPO (PCT)
Prior art keywords
certificate
software
target device
attributes
encrypted
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Ceased
Application number
PCT/US2014/047932
Other languages
French (fr)
Other versions
WO2015013474A2 (en
Inventor
Kerry L. Miller
Bestin ABRAHAM
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Siemens Healthcare Diagnostics Inc
Original Assignee
Siemens Healthcare Diagnostics Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Siemens Healthcare Diagnostics Inc filed Critical Siemens Healthcare Diagnostics Inc
Priority to US14/904,166 priority Critical patent/US9940446B2/en
Priority to EP14830278.9A priority patent/EP3025235B1/en
Publication of WO2015013474A2 publication Critical patent/WO2015013474A2/en
Publication of WO2015013474A3 publication Critical patent/WO2015013474A3/en
Anticipated expiration legal-status Critical
Ceased legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/12—Protecting executable software
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/101—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by binding digital rights to specific entities
    • G06F21/1011—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM] by binding digital rights to specific entities to devices
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/107—License processing; Key processing
    • G06F21/1079—Return
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/33—User authentication using certificates
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/50—Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
    • G06F21/57—Certifying or maintaining trusted computer platforms, e.g. secure boots or power-downs, version controls, system software checks, secure updates or assessing vulnerabilities
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0428—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the data content is protected, e.g. by encrypting or encapsulating the payload
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3247—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving digital signatures
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
    • H04L9/32—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
    • H04L9/3263—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements
    • H04L9/3268—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]
    • G—PHYSICS
    • G06—COMPUTING OR CALCULATING; COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F2221/00—Indexing scheme relating to security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F2221/03—Indexing scheme relating to G06F21/50, monitoring users, programs or devices to maintain the integrity of platforms
    • G06F2221/033—Test or assess software

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Security & Cryptography (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Physics & Mathematics (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Multimedia (AREA)
  • Technology Law (AREA)
  • Computing Systems (AREA)
  • Storage Device Security (AREA)

Abstract

A certificate for a target device includes encrypted system attributes that are verified against attributes of the target device prior to software usage. A certificate server securely obtains system attributes from the target system and generates a certificate with encrypted components including some system attributes. The certificate is stored on the target device and software installation/execution is made dependent on validation of the certificate. An encrypted system fingerprint in the certificate is decrypted by the software at the target device and compared with locally obtained system attributes to verify authorization for software usage on the target device. The certificate represents an easy to use paradigm for anti-piracy protection of software.
PCT/US2014/047932 2013-07-25 2014-07-24 Anti-piracy protection for software Ceased WO2015013474A2 (en)

Priority Applications (2)

Application Number Priority Date Filing Date Title
US14/904,166 US9940446B2 (en) 2013-07-25 2014-07-24 Anti-piracy protection for software
EP14830278.9A EP3025235B1 (en) 2013-07-25 2014-07-24 Anti-piracy protection for software

Applications Claiming Priority (2)

Application Number Priority Date Filing Date Title
US201361858209P 2013-07-25 2013-07-25
US61/858,209 2013-07-25

Publications (2)

Publication Number Publication Date
WO2015013474A2 WO2015013474A2 (en) 2015-01-29
WO2015013474A3 true WO2015013474A3 (en) 2015-11-12

Family

ID=52393977

Family Applications (1)

Application Number Title Priority Date Filing Date
PCT/US2014/047932 Ceased WO2015013474A2 (en) 2013-07-25 2014-07-24 Anti-piracy protection for software

Country Status (3)

Country Link
US (1) US9940446B2 (en)
EP (1) EP3025235B1 (en)
WO (1) WO2015013474A2 (en)

Families Citing this family (12)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
DE102015225651A1 (en) * 2015-12-17 2017-06-22 Robert Bosch Gmbh Method and apparatus for transmitting software
CN106789891A (en) * 2016-11-22 2017-05-31 国云科技股份有限公司 A multi-dimensional software authorization control method suitable for IaaS cloud platform
CN110089070B (en) * 2016-12-30 2022-08-02 英特尔公司 Techniques for key exchange to establish secure connections in a network function virtualization environment
CN106888087B (en) * 2017-03-15 2018-09-04 腾讯科技（深圳）有限公司 A kind of method and apparatus of management certificate
US10305874B2 (en) 2017-06-16 2019-05-28 Microsoft Technology Licensing, Llc Multi-factor execution gateway
JP2019159752A (en) * 2018-03-13 2019-09-19 オムロン株式会社 Controller, license management method, and license management program
CN108616517B (en) * 2018-04-10 2021-07-09 甘肃柏隆电子商务科技有限责任公司 High-reliability cloud platform service providing method
CN111181809A (en) * 2019-12-27 2020-05-19 北京华力创通科技股份有限公司 Monitoring method and device for reference station in network RTK center resolving software
CN112528236B (en) * 2020-12-18 2022-03-11 深圳竹云科技有限公司 Application software authorization method based on virtual machine
CN115168816B (en) * 2022-08-03 2023-08-04 明阳产业技术研究院(沈阳)有限公司 Software anti-piracy method, device, equipment and medium
US20250125978A1 (en) * 2023-10-11 2025-04-17 Micron Technology, Inc. Passive photonic physically unclonable functionality for securing an automotive powertrain control area network
CN119676700A (en) * 2025-02-21 2025-03-21 山东省邮电工程有限公司 End-to-end encrypted communication method and electronic equipment in wireless communication construction

Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030149670A1 (en) * 2002-02-05 2003-08-07 Cronce Paul A. Method and system for delivery of secure software license information
US20050182732A1 (en) * 2003-01-31 2005-08-18 Microsoft Corporation Systems and methods for using machine attributes to deter software piracy in an enterprise environment
US20110026714A1 (en) * 2009-07-29 2011-02-03 Motorola, Inc. Methods and device for secure transfer of symmetric encryption keys

Family Cites Families (28)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US5850443A (en) 1996-08-15 1998-12-15 Entrust Technologies, Ltd. Key management system for mixed-trust environments
US6243468B1 (en) 1998-04-29 2001-06-05 Microsoft Corporation Software anti-piracy system that adapts to hardware upgrades
US6463535B1 (en) 1998-10-05 2002-10-08 Intel Corporation System and method for verifying the integrity and authorization of software before execution in a local platform
US6460023B1 (en) 1999-06-16 2002-10-01 Pulse Entertainment, Inc. Software authorization system and method
US6427091B1 (en) 2000-01-24 2002-07-30 Dell Usa, L.P. System and method for associating a certificate of authenticity with a specific computer
US6931545B1 (en) 2000-08-28 2005-08-16 Contentguard Holdings, Inc. Systems and methods for integrity certification and verification of content consumption environments
US7234636B1 (en) 2000-09-27 2007-06-26 Diebold Self-Service Systems, Division Of Diebold, Incorporated Cash dispensing automated banking machine software authorization system and method
US7313828B2 (en) 2001-09-04 2007-12-25 Nokia Corporation Method and apparatus for protecting software against unauthorized use
US8041957B2 (en) 2003-04-08 2011-10-18 Qualcomm Incorporated Associating software with hardware using cryptography
US8185475B2 (en) 2003-11-21 2012-05-22 Hug Joshua D System and method for obtaining and sharing media content
CA2541639C (en) 2004-05-03 2011-04-19 Research In Motion Limited System and method for application authorization
US6875648B1 (en) 2004-07-09 2005-04-05 Atmel Corporation Fabrication of an EEPROM cell with emitter-polysilicon source/drain regions
US7750914B2 (en) 2004-08-26 2010-07-06 Intel Corporation Subdividing geometry images in graphics hardware
US7747851B1 (en) 2004-09-30 2010-06-29 Avaya Inc. Certificate distribution via license files
US8189788B2 (en) 2005-07-15 2012-05-29 Tyfone, Inc. Hybrid symmetric/asymmetric cryptography with user authentication
US7788181B2 (en) 2005-12-27 2010-08-31 Microsoft Corporation Software licensing using certificate issued by authorized authority
US7900243B2 (en) 2006-10-19 2011-03-01 Oracle America, Inc. Method and system for managing execution of an application module
US8620818B2 (en) 2007-06-25 2013-12-31 Microsoft Corporation Activation system architecture
US8544093B2 (en) * 2009-02-16 2013-09-24 Panasonic Corporation Illegal module identifying device, information processing device, illegal module identifying method, illegal module identifying program, integrated circuit, illegal module disabling system, and illegal module disabling method
US9633183B2 (en) * 2009-06-19 2017-04-25 Uniloc Luxembourg S.A. Modular software protection
US8700893B2 (en) * 2009-10-28 2014-04-15 Microsoft Corporation Key certification in one round trip
EP2583225A4 (en) 2010-06-21 2014-03-05 Hewlett Packard Development Co System for testing and certifying a virtual appliance on a customer computer system
AU2011100168B4 (en) 2011-02-09 2011-06-30 Device Authority Ltd Device-bound certificate authentication
US9276752B2 (en) * 2011-02-11 2016-03-01 Siemens Healthcare Diagnostics Inc. System and method for secure software update
DE102011015711A1 (en) * 2011-03-31 2012-10-04 Giesecke & Devrient Gmbh Update a disk application
CN103502991B (en) * 2011-05-06 2016-10-12 诺基亚技术有限公司 Equipment configuration and the determination of programming data
US20130091353A1 (en) * 2011-08-01 2013-04-11 General Instrument Corporation Apparatus and method for secure communication
US8725649B2 (en) 2011-12-08 2014-05-13 Raytheon Company System and method to protect computer software from unauthorized use

Patent Citations (3)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US20030149670A1 (en) * 2002-02-05 2003-08-07 Cronce Paul A. Method and system for delivery of secure software license information
US20050182732A1 (en) * 2003-01-31 2005-08-18 Microsoft Corporation Systems and methods for using machine attributes to deter software piracy in an enterprise environment
US20110026714A1 (en) * 2009-07-29 2011-02-03 Motorola, Inc. Methods and device for secure transfer of symmetric encryption keys

Also Published As

Publication number Publication date
EP3025235A2 (en) 2016-06-01
US20160147981A1 (en) 2016-05-26
WO2015013474A2 (en) 2015-01-29
EP3025235B1 (en) 2020-10-28
EP3025235A4 (en) 2017-02-15
US9940446B2 (en) 2018-04-10

Similar Documents

Publication Publication Date Title
WO2015013474A3 (en) Anti-piracy protection for software
IN2014CN00759A (en)
MX2016014461A (en) Provisioning drm credentials on a client device using an update server.
WO2016049636A3 (en) Remote server encrypted data provisioning system and methods
MX2017001090A (en) Wireless key management for authentication.
MX383704B (en) METHOD, DEVICE, SERVER AND SYSTEM FOR AUTHENTICATING A USER.
AU2018256568A1 (en) Systems and methods for software based encryption
MX2015005454A (en) BUSINESS METHOD INCLUDING CHALLENGE-RESPONSE SYSTEM TO SECURELY AUTHENTICATE SOFTWARE APPLICATION PROGRAM INTERFACES (APIs).
WO2013020705A3 (en) Cryptographic data distribution and revocation for handheld medical devices
EP2947594A3 (en) Protecting critical data structures in an embedded hypervisor system
WO2011119985A3 (en) Firmware authentication and deciphering for secure tv receiver
MY200878A (en) Virtual Reality Identity Verification
WO2015134760A3 (en) Secure hardware for cross-device trusted applications
BR112015031853A2 (en) process authentication and resource permissions
WO2017019201A8 (en) Cryptographic assurances of data integrity for data crossing trust boundaries
WO2016175914A3 (en) Transaction signing utilizing asymmetric cryptography
WO2012097231A3 (en) System and method for tamper-resistant booting
WO2015023341A3 (en) Secure authorization systems and methods
WO2014116528A3 (en) Providing an encrypted account credential from a first device to a second device
GB2533727A (en) Registry apparatus, agent device, application providing apparatus and corresponding methods
MX2015011289A (en) Methods and systems for accessing account information electronically.
IN2013MU03727A (en)
JP2015534343A5 (en)
WO2014120436A3 (en) Framework for provisioning devices with externally acquired component-based identity data
JP2015505225A5 (en)

Legal Events

Date Code Title Description
121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14830278

Country of ref document: EP

Kind code of ref document: A2

WWE Wipo information: entry into national phase

Ref document number: 14904166

Country of ref document: US

NENP Non-entry into the national phase

Ref country code: DE

WWE Wipo information: entry into national phase

Ref document number: 2014830278

Country of ref document: EP

121 Ep: the epo has been informed by wipo that ep was designated in this application

Ref document number: 14830278

Country of ref document: EP

Kind code of ref document: A2