JPH0934799A - Data protection method - Google Patents

Abstract

PROBLEM TO BE SOLVED: To prevent a recording medium from being illegally used by permitting the install of data only in the case where identification information written in an install program, identification information provided for a computer system and inputted password are matched in the case of installing data in a storage device. SOLUTION: A CPU 1 copies the install program into a memory 2 inside the computer system and when starting an installer, the peculiar identification information provided for the computer system is written in the install program so that the install program can be made peculiar for the computer system. When installing the data in the internal memory 2 by starting the install program, the CPU 1 collates the identification information written in the install program, the identification information provided for the computer system and the inputted password and only in the case where they are matched, the install of data is permitted.

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a data protection method, and more particularly to a method for preventing data stored in a recording medium such as a CD-ROM from being illegally used in a computer system or the like. Regarding

[0002]

2. Description of the Related Art Conventionally, for a computer system such as a personal computer, various data (application programs, font data, image component data, etc.) have been recorded using various recording media (CD-ROM, floppy disk, etc.). It is provided.

[0003]

By the way, the price for the data provided on the recording medium is for each computer system or device (printer or the like) that uses the data.
It needs to be collected every time. For that purpose, one recording medium needs to be used by only one computer system or device.

However, heretofore, there has been no effective method for limiting the use of one recording medium to one computer system or device.

Therefore, it is an object of the present invention to provide a data protection method in which the provided recording medium is not illegally used in another computer system or device.

[0006]

The invention according to claim 1 is
A method for protecting data recorded on a recording medium and provided by a data provider to a user from an unauthorized use when the data is used by a computer system on the user side. Can be installed in a storage device in a computer system only by a dedicated installation program provided to a user by a data provider. When the installation program is copied to the storage device and first started up, By writing the unique identification information held by the system, the installation program is made unique to the computer system,
When the installation program is started and data is installed in the storage device, the password generated based on the identification information is input, the identification information written in the installation program, the identification information held by the computer system, The feature is that the installation of data is permitted only when the entered password matches.

According to a second aspect of the present invention, when the data recorded on the recording medium and provided to the user by the data provider is used by the device connected to the computer system on the user side, the data is stored. A method for protecting data from unauthorized use, the data can be downloaded to the device only by a dedicated download program provided by the data provider to the user, and the download program is stored in the storage device in the computer system. To the device and copy the downloaded program to the device by writing the identification information unique to the device when the program is started for the first time. Based on the identification information when downloading The password generated is entered and the download of the data is permitted only when the identification information written in the download program matches the identification information held by the device and the entered password. To do.

[0008]

In order to install the data stored in the recording medium into the storage device in the computer system, a dedicated installation program is required. Therefore, in the invention according to claim 1, the installation program is copied to the storage device in the computer system, and when the installation program is started for the first time, the unique identification information possessed by the computer system is written into the installation program to thereby install the installation program. Is unique to the computer system in question. Then, when the installation program is started and data is installed in the storage device, the identification information written in the installation program, the identification information held by the computer system, and the input password are collated, and the information The data installation is allowed only when the values match. As a result, the data stored in the recording medium can be installed only in the computer system that has received the password, and as a result, unauthorized use is prevented.

To download the data stored in the recording medium to the device connected to the computer system, a dedicated download program is required.
Therefore, in the invention according to claim 2, the download program is copied to a storage device in the computer system,
By writing the identification information unique to the specific device in the download program when starting for the first time,
The download program is unique to a specific device. Then, when the download program is started and the data is downloaded to the device, only when the identification information written in the download program, the identification information held by the device, and the input password match I'm trying to allow downloads. As a result, the data stored in the recording medium can be downloaded only to the device that has received the password, and as a result, unauthorized use is prevented.

[0010]

1 is a block diagram showing a general configuration of a computer system for implementing a data protection method according to an embodiment of the present invention. In FIG. 1, the computer system 10 includes a CPU 1, an internal memory 2,
A hard disk device 3, a CD-ROM driver 4,
A floppy disk driver 5, an input device 6, a display device 7, and printers 81 to 8n are provided.

The CD-ROM driver 4 is installed in the C
A device for reading data from a D-ROM. The floppy disk driver 5 is a device for reading and writing data with respect to a mounted floppy disk. The hard disk device 3 is a device for reading / writing data from / into a built-in hard disk. This hard disk usually contains data (CPU) read from a CD-ROM or floppy disk.
(Including one operation program) is stored. CPU1
According to the program stored on the hard disk,
Perform a predetermined operation. The internal memory 2 stores various data generated during the program execution of the CPU 1. The input device 6 is a device that includes a keyboard, a mouse, and the like, and that inputs various data or instructions to the CPU 1. The display device 7 includes a CRT display, a liquid crystal display, etc., and is a device for displaying the display data sent from the CPU 1. The printers 81 to 8n are C
This is a device for printing a predetermined image in accordance with the image data sent from PU1.

A method for protecting data provided by a CD-ROM in the above-mentioned configuration will be described below as an example. In addition, the present invention
It can also be applied to the case of protecting data provided by a recording medium (floppy disk, magnetic tape, IC card, etc.) other than the CD-ROM.

(1) First Embodiment In the first embodiment, the CD-ROM contains main body data (application program etc.) that the user wants to use.
It is assumed that a program (hereinafter, referred to as an installer) for installing this body data on the hard disk is stored. Further, the main body data includes a plurality of files, and the user is permitted to use the file by designating the file to be used. The installer may be stored in another recording medium (such as a floppy disk) and provided to the user.

FIG. 2 is a flow chart showing a procedure for obtaining a password after copying the installer from the CD-ROM to the hard disk. FIG. 3 is a flowchart showing a procedure for installing the main body data in the CD-ROM on the hard disk after the password is acquired. The first embodiment of the present invention will be described below with reference to FIGS. 2 and 3.

First, the CD-ROM storing the main body data and the installer is mounted on the CD-ROM driver 4. Next, the CPU 1 reads the installer from the CD-ROM based on the instruction from the input device 6, and stores the installer in the hard disk in the hard disk device 3.

Next, the CPU 1 activates the installer stored in the hard disk (step S101).
Next, the CPU 1 acquires the initialization date and time of the hard disk in which the installer is stored according to the program described in the installer (step S102). Such initialization date and time is recorded in the hard disk when the hard disk is initialized. Next, CP
U1 encrypts the acquired initialization date and time, writes it in the installer in the hard disk as computer unique information, and displays it on the display device 7 (step S10).
3).

Next, the user informs the data provider of the file name to be used in the CD-ROM and the computer-specific information displayed in step S103 (step S104). Various contact methods can be used such as telephone and online communication. Next, the data provider
Based on the contacted file name and computer-specific information, the installer is used to issue a password for installing the data to be used, and the password is notified to the user (step S105).

Next, the CPU 1 activates the installer in the hard disk based on the instruction from the input device 6 (step S201). Next, the CPU 1 checks the consistency between the hard disk initialization date / time information and the computer-specific information written in the installer (step S202). Next, the CPU 1 executes step S
As a result of the check in 202, it is determined whether or not the two pieces of information are consistent with each other (step S203). If the two pieces of information are not consistent, the CPU 1
Stops the operation without installing the main unit data. This ensures that if an installer stored on the hard disk of a particular computer system (the computer system where the installer was copied first) is illegally copied to the hard disk of another computer system and used, the installer will not be used. prohibited.

On the other hand, when the two pieces of information are consistent with each other in step S203, the user is required to perform the above-mentioned step S105.
The password obtained in step 1 and the file name of the data to be used are input to the CPU 1 via the input device 6 (step S204). Next, the CPU 1 checks the consistency between the password, the file name, and the computer unique information written in the installer (step S20).
5). Next, as a result of the check in step S205, the CPU 1 determines whether or not the above three pieces of information are consistent (step S206). If the above three pieces of information are not consistent, the CPU 1 does not perform the installation operation of the main body data and stops the operation. As a result, in a computer system other than the computer system to which the password is given, the CD-RO
Unauthorized use of M data is prevented. Also,
Prevents the use of files that are not authorized by the data provider. On the other hand, if the three pieces of information are consistent in step S206, the CPU 1 uses the installer to install the main body data in the CD-ROM to the hard disk (step S207).

Although the hard disk initialization date and time is used as the computer-specific information in the first embodiment, other information may be used as long as the information can identify the computer system.

(2) Second Embodiment In the second embodiment, a CD-ROM has main body data (font data, etc.) that the user wants to use, and the main body data for downloading to the hard disk in the printer. It is assumed that a program (hereinafter referred to as a downloader) is stored. Further, the main body data includes a plurality of files, and the user is permitted to use the file by designating the file to be used. The downloader may be stored in another recording medium (floppy disk or the like) and provided to the user.

FIG. 4 is a flow chart showing a procedure for obtaining a password after copying the downloader from the CD-ROM to the hard disk. FIG. 5 is a flowchart showing a procedure for downloading the main body data in the CD-ROM to the hard disk in the printer after the password is acquired. The second embodiment of the present invention will be described below with reference to FIGS. 4 and 5.

First, the CD-ROM storing the main body data and the downloader is loaded into the CD-ROM driver 4. Next, the CPU 1 reads the downloader from the CD-ROM based on the instruction from the input device 6, and stores the downloader in the hard disk in the hard disk device 3.

Next, the CPU 1 activates the downloader stored in the hard disk (step S301).
Next, the CPU 1 accesses any one of the printers according to the program described in the downloader, and acquires the access date and time at this time (step S30).
2). Next, the CPU 1 encrypts the acquired access date and time, writes it as device unique information in the downloader in the hard disk, and displays it on the display device 7 (step S303). Next, the CPU 1 transfers the device-specific information in the downloader to the printer accessed in step S302 and writes it in the internal hard disk (step S304).

Next, the user informs the data provider of the file name to be used in the CD-ROM and the device unique information displayed in step S303 (step S305). The contact method is telephone, online communication, etc.
Various methods are possible. Next, the data provider uses the downloader to issue a password for downloading the data that the user wants to use, based on the file name and the device-specific information that have been contacted, and informs the user (step S306).

Next, the CPU 1 activates the downloader in the hard disk based on the instruction from the input device 6 (step S401). Next, the CPU 1 checks the consistency between the device-specific information written in the downloader and the device-specific information written in the printer hard disk (step S402). Next, CP
As a result of the check in step S402, U1 determines whether or not the two pieces of information are consistent with each other (step S403). If the two pieces of information are not consistent with each other, the CPU 1 does not download the main body data and stops the operation. As a result, even if an attempt is made to access a printer in which the device-specific information is not written and download the body data to the printer, such download is prohibited. In addition, even if the downloader stored in the hard disk of a specific computer system (the computer system where the downloader was first copied) is illegally copied to the hard disk of another computer system and used, the use of such downloader is prohibited. To be done.

On the other hand, if the two pieces of information are consistent with each other in step S403, the user is required to perform the above-mentioned step S306.
The password obtained in step 1 and the file name of the data to be used are input to the CPU 1 via the input device 6 (step S404). Next, the CPU 1 checks the consistency between the password, the file name, and the device unique information written in the downloader (step S40).
5). Next, the CPU 1 determines whether or not the above three pieces of information are consistent as a result of the check in step S405 (step S406). If the above three pieces of information are not consistent, the CPU 1 does not perform the main body data installation operation and stops the operation. This prevents the data on the CD-ROM from being illegally downloaded to a printer other than the printer to which the password is added. In addition, it is possible to prevent a file that is not permitted by the data provider from being downloaded. On the other hand, when the three pieces of information are matched in step S406, the CPU 1 uses the downloader to
The body data in the CD-ROM is downloaded to the hard disk in the printer (step S407).

In the second embodiment, the date and time of the first access to the printer is used as the device unique information, but other information may be used as long as the information can identify the specific printer. Is also good. Further, in the second embodiment, the case where the printer is used as the device whose use is restricted is shown, but the data use may be restricted to other devices.

[0029]

According to the invention of claim 1, the installation program is unique to the computer system using the data, and the identification information written in the installation program and the identification information held by the computer system are provided. Since the data installation is permitted only when the entered password matches, the data stored in the recording medium can be prevented from being installed in a computer system other than the computer system that received the password. . As a result, illegal use of data can be effectively prevented.

According to the second aspect of the present invention, the download program is unique to the specific device of the download destination, and the identification information written in the download program and the identification information held by the specific device, Since the data download is allowed only when the entered password matches, it is possible to prevent the data stored in the recording medium from being downloaded to any device other than the specific device that received the password. .
As a result, illegal use of data can be effectively prevented.

[Brief description of drawings]

FIG. 1 is a block diagram showing a general configuration of a computer system that implements a data protection method according to an embodiment of the present invention.

FIG. 2 is a flowchart showing a procedure for copying a installer from a CD-ROM to a hard disk and obtaining a password in the first embodiment of the present invention.

FIG. 3 is a flowchart showing a procedure for installing body data in a CD-ROM on a hard disk after obtaining a password in the first embodiment of the present invention.

FIG. 4 is a flowchart showing a procedure for copying a downloader from a CD-ROM to a hard disk and obtaining a password in the second embodiment of the present invention.

FIG. 5 is a flowchart showing a procedure for downloading body data in a CD-ROM to a hard disk in a printer after obtaining a password in the second embodiment of the present invention.

[Explanation of symbols]

 DESCRIPTION OF SYMBOLS 1 ... CPU 2 ... Internal memory 3 ... Hard disk device 4 ... CD-ROM driver 5 ... Floppy disk driver 6 ... Input device 7 ... Display device 81-8n ... Printer 10 ... Computer system

Claims (2)

[Claims] 1. A method for protecting data recorded on a recording medium and provided from a data provider to a user to a user when the data is used on a computer system on the user side. The data can be installed in the storage device in the computer system only by a dedicated installation program provided to the user by the data provider, and the installation program is copied to the storage device and activated for the first time. In this case, by writing unique identification information that the computer system has in the installation program, the installation program is made unique to the computer system, and the installation program is started to store the data in the storage device. When installing , A password generated based on the identification information is input, and only when the identification information written in the installation program, the identification information held by the computer system, and the input password match, A data protection method characterized by permitting the installation of data. 2. When data recorded on a recording medium and provided by a data provider to a user is used by a device connected to a user's computer system, the data is protected from unauthorized use. The data can be downloaded to the device only by a dedicated download program provided to a user by a data provider, and the download program can be copied to a storage device in the computer system. Then, when the program is started up for the first time, the download program is made unique to the specific device by writing the identification information unique to the specific device in the download program, and the download program is started to transfer the data to the device. When downloading to A password generated based on different information is input, and only when the identification information written in the download program, the identification information held by the device, and the input password match, the data download A method of protecting data, characterized by permitting.