WO2016018176A1

WO2016018176A1 - Method for protecting intellectual property rights in user devices

Info

Publication number: WO2016018176A1
Application number: PCT/RU2015/000419
Authority: WO
Inventors: Геннадий Леонидович ВЫЧУЖИН
Original assignee: Геннадий Леонидович ВЫЧУЖИН
Priority date: 2014-08-01
Filing date: 2015-07-06
Publication date: 2016-02-04
Also published as: RU2014132028A

Abstract

The method has been developed with the aim of limiting the use of capabilities of software resources, hardware resources and software/hardware resources of an electronic device so as to protect intellectual property rights. The claimed method relates to the technical field of information technology, in the area of protecting intellectual property rights. The essence of the invention consists in an electronic device which will not function without an electronic key, the electronic key containing an operating system which controls the electronic device, controlling all of the electronic computational processes in the electronic device and also the files with which said electronic computational processes interact, wherein control consists in determining what is allowed for a given file and electronic computational process produced by same, and what is not allowed. The files which, under the present method, are subject to protection against violations of intellectual property rights, are located in a server which also contains data regarding all electronic keys which operate in accordance with the claimed method. These files are distributed to buyers in an encrypted form, and decryption is possible only by means of an electronic key corresponding to the given file.

Description

DESCRIPTION OF THE INVENTION.

Title:

METHOD OF PROTECTING INTELLECTUAL RIGHTS IN USER DEVICES

The technical field to which the invention relates:

The claimed method relates to the field of technology called

"Information Technology", in the sector of intellectual property protection.

The prior art:

To date, there is no way to protect intellectual property rights in the field of information technology, similar to the claimed method. The most approximate, but only partially analogous

of the claimed invention is the use of hardware electronic keys with USB connectors using data transmission over the Internet. What is a hardware electronic key can be found on the link:

http://m.wikipedia.org/w^^^

% D1% 80% D0% BE% D0% BD% D0% BD% D1% 8B% D0% B9% D0% BA% D0% BB% D1% 8E% D1% 87

Information, for example about USB tokens and electronic keys, is presented on the website of Aladdin R.D., Aktiv and other organizations that produce similar products.

Links to information resources:

http://www.aktiv-companv.ru/

http://www.aladdin-rd.ru/catalog/ In addition, information on USB tokens and USB keys is provided in the European Patent Database.

The presented analogs in the form of using electronic USB keys have only some features that coincide with some of the essential features of the claimed invention, however, as will be apparent from the foregoing, these are local similarities that have nothing to do with the integrity of the idea of the claimed invention.

These similarities are expressed only in the use of an electronic key. But how the electronic key is used, what are its application methods for protecting intellectual property rights - this in the claimed method is completely unlike these very similar analogues.

A significant difference between the claimed method and all other methods of information protection in the field of intellectual property protection, including the method using USB keys, is that all other protection methods do not take complete control of the entire electronic device, but only some highlighted area electronic device. For example, USB tokens implement a fully trusted environment only in the USB token itself, and the rest of the resources of the electronic device are provided to the attacker for use against the protection tools carried out by the same USB token or USB key.

The claimed invention takes control of the entire electronic device (for example, a computer) and implements a fully trusted and protected environment in the entire electronic device, and fundamentally does not allow the use of software and hardware resources

electronic device to overcome the protection provided by the claimed method. This is precisely the main difference between the claimed method and other existing today. Disclosure of the invention:

The task, for the solution of which the claimed method was developed, is protection in electronic devices (for example, computers,

video players, game consoles, smartphones, etc.)

intellectual rights and property rights to the acquired results of intellectual activity (acquired software, videos, etc.).

The technical result of the claimed method is to limit the use of the capabilities of software, hardware and software and hardware resources of an electronic device for protection

intellectual rights. This restriction blocks the use of malicious intellectual property rights.

software, and also blocks the possibility of illegal copying of files protected by law to protect intellectual property from illegal copying.

The limited use of the capabilities of the software, hardware and software and hardware resources of an electronic device occurs due to the implementation of a sequence of actions that implement the claimed method:

A server containing files is created. A server containing files (hereinafter referred to as SSF for short) is intended for the content and distribution of files that are protected by law to protect intellectual property rights. Everyone who wants to purchase a file from this server can only purchase it in encrypted form.

A hardware dongle containing

an operating system and made using a technology similar to the technology of selling electronic keys of the Active company (http: // aktiv- company.ru/).

According to the claimed method, the microprocessor of an electronic device (computer, video player, game console, smartphone) can work only if an electronic key working according to the claimed method is connected to this device.

When the electronic device is turned on, the microprocessor of this device first checks whether the electronic key is connected to this electronic device. If the electronic key is not connected, the microprocessor switches the electronic device off. If the microprocessor has detected an electronic key, then it finds out

whether the detected electronic key corresponds to an electronic key operating according to the claimed method.

The microprocessor checks if the key is connected

corresponding to the claimed method, using data exchange between the microprocessor and the detected electronic key.

The microprocessor sends the detected electronic key information-question, which must be processed in the electronic key in accordance with the specified algorithm and return back to the microprocessor. If the key answer is correct, then the microprocessor continues its work. If there is no correct answer, the microprocessor turns off the electronic device. In the microprocessor, the question-algorithm is embedded in the production of the microprocessor, as well as in the electronic key, the specified algorithm for processing information-question is embedded in the production of the electronic key.

According to the claimed method, the microprocessor of the electronic device can simultaneously interact with only one electronic key operating according to the claimed method.

The electronic key contains an operating system that identifies all files and electronic computing processes present in the electronic device, including files received from the SSF.

The electronic key operating system (hereinafter for the sake of brevity of the OSE) is a full-fledged operating system similar, for example, to the Linux operating system (what is the Linux operating system can be found at http: // ru. wikipedia.org/wiki/Linux). OSE is placed in an electronic key during its production.

Each electronic key used by the claimed method is assigned a unique external identification number

printed on the electronic key case. Each electronic key used by the claimed method is assigned a unique internal identification number, stitched in a chip

electronic key. To each such unique inner

identification number is assigned a unique algorithm

encryption and decryption.

Data on all unique numbers and encryption and decryption algorithms of all electronic keys working according to the claimed method is stored on a server containing files (SSF), which makes them belong to those working according to the claimed method.

For each electronic key, any file distributed from the SSF is encrypted with an encryption algorithm that matches only this electronic key, and only this electronic key can decrypt this file. When encrypting a file for a given electronic key, code labels corresponding to the extension of this file are entered into the encrypted file, in accordance with the extension of this file (what extension can be found on

http://m.wikipedia.org/wiki/%m%E0%Fl%F8%E8%F0%E5%ED%E8%E5% E 8% EOC% E5% EP% E8% F4% E0% E% EB% E0 and

http: //m.wiHpedia.or&/wiki/ ⁰ / oDl ⁰ / oEF ⁰ / oE8% Fl ° / oEE% EA% F4% EE% F0% EC% E0% F2% EE% E2% F4% E0% E9 % EB% EE% E2). For example, these code marks appear in video files as an image that is not visible to the user when viewing, in audio files such code marks appear in the form of sound that the user cannot hear when listening. This is implemented using image and sound frequencies which the human senses are not captured, but which can be detected by slowing down the playback of video or sound.

After the microprocessor has identified the electronic key as corresponding to the claimed method, it transfers control

electronic device operating system of this electronic key.

OSEC manages, controlling in an electronic device all electronic computing processes, and files with which

these electronic computing processes interact. Control consists in determining what is possible for a given file and electronic computing process by it, and what is not.

OSEC distinguishes files received from the SSF by code marks that are entered into the files distributed from the SSF when they are encrypted, and these marks are unique for each key. Such files

received from the SSF for this electronic key and working with the OSEC of this electronic key on this electronic device, the OSEC assigns the status “Files of the first level of protection”. OSEC treats itself as a file of the first level of protection. Electronic computing processes based on files of the first level of protection, OSEC assigns the status of "Electronic computing processes of the first level of protection."

OSEC makes it possible for files that have been encrypted in SSF and electronic computing processes based on them to be able to crack files and electronic compression processes, decompile, debug, dump, disassemble and other actions that have the potential for infringement of intellectual property rights its capabilities regarding OSEC, as well as files and electronic computing processes of the first level of protection. OSEC implements this activity by identifying code labels for such files that have the potential for harmfulness to intellectual rights, and suppressing

the impact of such files and electronic computing processes on their based on files of the first level of protection and electronic computing processes of the first level of protection. Malware code tags are entered into files that have a malware potential when encrypted in SSF.

OSEC controlling an electronic device, identifies files

obtained on the basis of the operation of files and electronic computing processes of the first level of protection, and assigns them the status “Files of the second level of protection”, entering code labels identifying them as files of the second level of protection. OSEC assigns the status of "Electronic Computing Processes of the Second Level of Protection" to electronic computing processes implemented on the basis of files of the second level of protection.

All other files and electronic computing processes based on them implemented by OSEC without detecting identification marks of files of the first and second level of protection are assigned the status “Files of the third protection level” and “Electronic computing processes of the third protection level”.

OSEC controls that files of the second level of protection and

second-level electronic computing processes cannot be affected (hacking, copying, debugging, decompilation,

disassembling, dumping, deleting, modifying and

additions) to files and electronic computing processes of the first level of protection.

OSEC controls that files of the third level of protection and

electronic computing processes of the third level of protection do not

affected (hacking, copying, debugging, decompilation,

disassembling, dumping, deleting, modifying and

additions) to files of the first and second level of protection and to electronic computing processes of the first and second level of protection.

OSEC of this electronic device does not allow impact (hacking, copying, debugging, decompilation, disassembling, dumping, deleting, making changes and additions) to files and electronic computing processes of the first and second level of protection from any files and electronic computing processes of other electronic devices.

It is known that at the current moment of development of the prior art,

attackers, such as crackers, hackers (who crackers can be found on ht ^: //m.wildpedia^r^wiki/ ⁰ / oCA ⁰ / oF0 ⁰ / oFD ⁰ / oEA ⁰ / oE5% FO)

use the resources of that electronic device for which it is intended to use IT products protected by law for the protection of intellectual

property.

However, the claimed method finally solves the allegedly insoluble problem, the so-called "analogue gap" (Details on

http://www.seobuildmg.ru/wik^/oD0%A2%D0%B5%Dl%85%D0%BD

8% D1% 87% D0% B5% D1% 81% D0% BA% D0% B8% D0% B5% D1% 81% D1% 8 0% D0% B5% D0% B4% D1% 81% D1% 82 % D0% B2% D0% B0% D0% B7% D0% B 0% D1% 89% D0% B8% D1% 82% D1% 8B% D0% B0% D0% B2% D1% 82% D0% BE% D1% 80% D1% 81% D0% BA% D0% B8% D1% 85% D0% BF% D1% 80% D0% B 0% D0% B2 section “Efficiency”).

As it became clear from the above, according to the claimed method

an attacker simply cannot turn on an electronic device without an electronic security key working according to the claimed method. Even if an attacker bought an electronic key that works according to the claimed method, connected it to an electronic device (for example,

computer), then in this case it no longer controls this computer. He is forced to work with a preinstalled operating system, which he has no tools to hack, because OSEC will see these tools as files and electronic computing processes of the third level of protection, and accordingly will block attempts to influence them. Even if an attacker acquires an encrypted file of a debugger program, or a disassembler from an SSF (after all, such files can also be protected by law protecting intellectual

property), then in this case he will not be able to use their power for his evil purposes. For in such files there are labels about the potential for harmfulness, and OSEC will not allow to use their capabilities to crack the OSE or any other files and electronic computing processes of the first level of protection.

If the attacker just wants to copy the encrypted array received from the SSF to the given electronic key to this computer (which is basically possible, as when placing such an array on the hard drive of this computer), to decrypt this file on any another electronic device, then in this case it will not work. Because when using modern encryption systems (and the claimed method also allows you to use symmetric encryption systems) using multi-bit keys, an attacker may need millions of years to decrypt such an array of encrypted information.

The analogue gap includes the circumstance presented in the last paragraph of the “Efficiency” section on the resource

5% F1% F0% E5% E4% F1% F2% E2% E0% E7% E0% F9% E8% F2% FB% E0% E2% F2% EE% F0% F1% EA% E8% F5% EF% F0% E0% E2. Quote: “For

of certain types of information, the task of complete protection against copying is fundamentally insoluble by the so-called “analogue gap”: if music is heard with ears, then it ^* can be recorded with a microphone, if a book can be read, then it can also be scanned. As clear from

of the foregoing, this supposedly fundamentally insoluble circumstance is solved by the claimed method quite easily. After all, the code marks in the files corresponding to the file extension encrypted in the SSF will show up in the sound, and show on which electronic security key working according to the claimed method this music file was distributed. A book in the form of an electronic document will only be opened using the corresponding electronic key.

Thus, an attacker who did not legally record a music file that was legally purchased from the SSF using the sound recording technique will be surely detected and subject to sanctions - his electronic key can simply be blocked in the SSF until a fine is paid.

The same applies to unlawful acts when filming from a home cinema screen, or in a full-screen cinema in a cinema, or in other similar circumstances.

In general, since the file from the SSF is encrypted for only one electronic key, and it is impossible to decrypt this encrypted file with other electronic keys working according to the claimed method, or decrypt it by selecting an algorithm

decryption on an external electronic device, insofar as the result is achieved in which the owner of the intellectual

property may not worry about their rights as a copyright holder. For each copy of the product sold by him through SSF in the form of a file with a certain type of extension will be used only with that

an electronic key, to a unique identification number of which the purchase was encrypted.

Thus, the following significant advantage of the claimed method of protecting intellectual property over the existing ones is revealed. Namely - the universality of the electronic key working according to the claimed method.

After all, the current methods of software protection using hardware electronic keys protect software products in a very limited amount. Most often, one electronic key accounts for only one copy of the software product. Those. for each copy of the software product you need your own, individual electronic key. And about the electronic key for each copy of the video, video producers do not even think about it, due to economic inexpediency (although, of course, they dream of such a degree of protection for their products).

The claimed method, as mentioned above, is

universal. Just one key - and an unlimited number of copies of different information products for this key. This is obviously nowhere to be found anywhere. Which, of course, speaks of inventive novelty.

Of course, when implementing the claimed method in the SSF, there can be no viruses and other malicious software.

Such malicious software, if it gets into an electronic device equipped with an electronic key that works according to the claimed method, it will of course be perceived by the OSE as a file of the third level of protection with corresponding restrictions in activity.

In fact, the virus cannot do any harm to the user at all. Because all the video files of home videos, photos, documents, etc., will be processed by files (software

security) received from the SSF, and therefore such personal files will be considered by OSEC as files of the second level of protection. And since the virus will be a file of the third level of protection, it will not be able to affect files of the second level of protection (personal files).

Based on the above advantages and capabilities of the claimed method of protecting intellectual property rights, we can make an unambiguous conclusion that today there are simply no such ways of protecting intellectual property. The claimed method, among other things, solves those problems and tasks that were previously considered simply unsolvable by specialists (an analogue gap among them). The implementation of the invention:

The claimed method includes the use of at least one server that contains files intended for protection

the claimed method. From a server containing files (hereinafter referred to as SSF for short), files are distributed to customers over the Internet at

encrypted form.

The claimed method includes the use of unlimited

the number of electronic hardware keys made using the technology of a similar technology for the implementation of Active key electronic keys and containing an operating system that identifies everything

files and electronic computing processes present in the electronic device, including files obtained from the SSF.

electronic key. To each such unique inner

identification number is assigned a unique algorithm

encryption and decryption.

Data on all unique numbers and encryption and decryption algorithms of all electronic keys working according to the claimed method is stored on a server containing files, which makes them

belonging to working according to the claimed method.

For each electronic key, any file distributed from the SSF is encrypted with an encryption algorithm that matches only this electronic key, and only this electronic key can decrypt this file. When encrypting a file for a given electronic key, the encrypted file, in accordance with the extension of this file, is entered

the code labels corresponding to the extension of this file, which appear when playing this file, show which electronic key the file belongs to.

An electronic device with a microprocessor is turned on.

The microprocessor of this device first checks whether the electronic key is connected to this electronic device. If the electronic key is not connected, then the microprocessor is electronic

the device turns off. If the microprocessor has detected an electronic key, then it will find out whether the detected electronic key corresponds to an electronic key operating according to the claimed method.

The microprocessor sends the detected electronic key information-question, which must be processed in an electronic key working according to the claimed method in accordance with a given algorithm and return back to the microprocessor. If the key answer is correct, then the key corresponds to the claimed method and

microprocessor continues its work. If there is no correct answer, the microprocessor turns off the electronic device. Moreover, according to

the claimed method, the microprocessor of the electronic device can simultaneously interact with only one electronic key operating according to the claimed method.

In the microprocessor, the question-algorithm is laid in the production of the microprocessor, as well as in the electronic key, the specified algorithm for processing information-question is laid in the production

electronic key.

electronic device operating system of this electronic key (hereinafter for the sake of brevity OSEC). OSEC manages, controlling in an electronic device all electronic computing processes, and files with which

received from the SSF for this electronic key and working with the operating system of this electronic key on this electronic device, OSEC assigns the status “Files of the first level of protection”. OSEC treats itself as a file of the first level of protection. Electronic computing processes based on files of the first level of protection, OSEC assigns the status of "Electronic computing processes of the first level of protection."

OSEC restricts the use of the capabilities of files encrypted in SSF and electronic computing processes based on them, which have the ability to crack files and electronic computing processes, decompilation, debugging, dumping,

disassembling, in relation to OSEC, as well as files and electronic computing processes of the first level of protection.

OSEC implements this activity by identifying code labels of such files that have the potential for harmfulness of intellectual rights, and suppressing the impact of such files and electronic computing

processes based on them, to files of the first level of protection and electronic computing processes of the first level of protection. Malware code tags are entered into files that have a malware potential when encrypted in SSF.

OSEC controlling an electronic device, identifies files

obtained on the basis of the work of files and electronic computing processes of the first level of protection, and assigns them the status “Files of the second level of protection”, entering code labels identifying them as files of the second level of protection. OSEC assigns the status of "Electronic Computing Processes of the Second Level of Protection" to electronic computing processes implemented on the basis of files of the second level of protection.

OSEC controls that files of the second level of protection and

electronic computing processes of the second level of protection could not be affected (hacking, copying, debugging, decompilation,

disassembling, dumping, deleting, modifying and

OSEC controls that files of the third level of protection and

electronic computing processes of the third level of protection do not

affected (hacking, copying, debugging, decompilation,

disassembling, dumping, deleting, modifying and

OSEC of this electronic device does not allow impact (hacking, copying, debugging, decompilation, disassembling, dumping, deleting, making changes and additions) to files and

electronic computing processes of the first and second level of protection from any files and electronic computing processes of other electronic devices.

Claims

CLAIM.

1. A way to limit access to software features,

hardware and software of an electronic device for protecting intellectual property rights, characterized in that the electronic device is turned off if the microprocessor of the electronic device detects that the electronic device in which it is installed does not have a hardware electronic key that gives it a signal to continue working with this electronic devices, despite the fact that the electronic key contains an operating system that controls the electronic device, controlling in the electronic device all electronic computing processes, and files with which

these electronic computing processes interact, despite the fact that the control consists in determining what is possible for a given file and

the electronic computing process that he produced, and what cannot be done; files that are protected by the claimed method from intellectual property violations are contained on a server that also contains data on all electronic keys working according to the claimed method, while these files are distributed to customers in encrypted form.

2. The method according to claim 1, characterized in that the claimed method includes the use of at least one server that contains files intended to be protected by the claimed method, while from the server containing the files, the files are distributed to customers over the Internet in an encrypted form.

3. The method according to p. 1, characterized in that each electronic key used by the claimed method is assigned a unique external identification number printed on the electronic housing key; each electronic key used by the claimed method is assigned a unique internal identification number, stitched in the electronic key chip, and each

a unique internal identification number is assigned a unique encryption and decryption algorithm; on server

containing files that are protected by the claimed method from intellectual property violations, data is stored for all unique numbers and encryption and decryption algorithms of all electronic keys working according to the claimed method, which makes them belong to those working according to the claimed method.

4. The method according to claim 1, characterized in that for each electronic key, any file distributed from the server containing the files is encrypted with an encryption algorithm corresponding only to this electronic key, and only this electronic key can decrypt this file, despite the fact that during encryption file for a given electronic key, in the encrypted file, in accordance with the extension of this file, the code labels corresponding to the extension of this file are entered, which, when playing this file, show which This key belongs to this file.

5. The method according to claim 1, characterized in that when turned on

the electronic device, the microprocessor of this device first checks whether the electronic key is connected to this electronic device, if the electronic key is not connected, then the electronic device turns off the microprocessor, if the microprocessor detects the electronic key, it finds out whether

a detected electronic key to an electronic key operating according to the claimed method; microprocessor sends detected

the electronic key information is a question that should be processed in an electronic key working according to the claimed method in accordance with a given algorithm and return back to the microprocessor if the answer the key is correct, then the key corresponds to the claimed method and the microprocessor continues to work, if there is no correct answer, the microprocessor turns off the electronic device, while

the claimed method, the microprocessor of the electronic device can simultaneously interact with only one electronic key working according to the claimed method; the microprocessor algorithm-question is laid in the production of the microprocessor, as well as in

an electronic key, a given algorithm for processing information-question is laid in the production of an electronic key; after the microprocessor has identified the electronic key as appropriate

the claimed method, it transfers control of the electronic device to the operating system of this electronic key.

6. The method according to claim 5, characterized in that the electronic key operating system performs control by controlling all electronic computing processes in the electronic device and the files with which these electronic computing processes interact, while the control consists in determining what can this file and

the electronic computing process that he produced, and what cannot be done; electronic key operating system distinguishes between files

received from the server containing the files by code marks, which are added to the files distributed from the server containing the files when they are encrypted, and these labels are unique for each electronic key, to such files received from the server containing the files for this electronic key and working with the operating system of this electronic a key on this electronic device,

the electronic key operating system assigns the status “Files of the first level of protection”, while the operating system of the electronic key also refers to the files of the first level of protection; electronic computing processes based on files of the first level of protection, the electronic key operating system assigns the status of "Electronic computing processes of the first level of protection";

the electronic key operating system limits the use of the capabilities of files encrypted in a server containing files and electronic computing processes based on them

implemented with the ability to hack files and electronic computing processes, decompilation, debugging, dumping,

of disassembling, in relation to the electronic key operating system, as well as files and electronic computing processes of the first level of protection, the electronic key operating system implements this activity by identifying code marks of such files that have the potential for harmfulness of intellectual rights, and suppressing the impact of such files and electronic computing processes based on them, on files of the first level of protection and electronic computing processes of the first level of protection, despite the fact that code labels about harmfulness are introduced files that have the potential for harmfulness when encrypted in a server containing files;

the electronic key operating system, controlling the electronic device, identifies files obtained on the basis of the operation of files and electronic computing processes of the first level of protection, and assigns them the status “Files of the second level of protection”, entering code labels identifying them as files of the second level of protection, that electronic computing processes implemented on the basis of files of the second level of protection, the electronic key operating system assigns the status of "Electronic computing processes of the second level of protection ";

all other files and electronic computing processes based on them implemented, the electronic key operating system, without detecting the identification marks of files of the first and second level protection, assigns the status “Files of the third level of protection” and “Electronic computing processes of the third level are protected”;

The electronic key operating system controls that the files of the second level of protection and the electronic computing processes of the second level of protection cannot be affected (breaking, copying, debugging, decompiling, disassembling, dumping, deleting, adding

changes and additions) to files and electronic computing processes of the first level of protection;

The electronic key operating system controls that files of the third level of protection and electronic computing processes of the third level of protection are not affected (hacking, copying, debugging,

decompilation, disassembly, dumping, removal, insertion

changes and additions) to files of the first and second level of protection and to electronic computing processes of the first and second level of protection; the electronic key operating system of this electronic device does not allow impact (hacking, copying, debugging, decompilation, disassembling, dumping, deleting, making

changes and additions) to files and electronic computing processes of the first and second level of protection from any files and electronic computing processes of other electronic devices.