CN105224829B - Embedded system and content protection method - Google Patents

Abstract

The present invention relates to an embedded system with content protection capability, comprising a security integrated circuit, provided with an identification key storage device for storing an identification key; and a system device, provided with a system key storage device for storing a system key. The system key is obtained by performing mathematical operations on the identification key and a function array. When the embedded system is to activate a function, the identification key and the system key are mathematically operated to obtain a function array, thereby activating the required function.

Description

Embedded system and content protection method

technical field

The invention relates to a content protection mechanism, in particular to a software protection architecture of an embedded system.

Background technique

Since the cost of software development is generally greater than that of hardware, it is necessary to use appropriate mechanisms to protect software to reduce illegal use or copying of software. FIG. 1A shows a traditional software protection mechanism. For a certain software function (or version) A, there is a corresponding passcode A. As shown in FIG. When the pass code A is confirmed as valid, the software function A can be started. When the software is upgraded to function B, as shown in FIG. 1B , another corresponding new passcode B is needed to start the software function B. The user has to send the system back to the factory to replace it with the new passcode B, thus causing increased cost and inconvenience to the user.

In order to improve the above-mentioned traditional software protection mechanism ( FIG. 1A , FIG. 1B ), the user needs to send the system back to the factory, so another software protection mechanism is proposed, as shown in FIG. 2 . In this software protection mechanism, the user only uses a single passcode C, and different software functions store different corresponding codes. If the system is software function C1, when the passcode C is confirmed to be valid, the software function C1 will be activated; if the system is software function C2, when the passcode C is confirmed to be valid, the software function C2 will be activated. For the software protection mechanism shown in FIG. 2 , software pirates (that is, those who have not legally purchased and upgraded the software function C2) can easily illegally use the software function C2 by copying the software function C2 and matching the original passcode C.

Since traditional software protection mechanisms cannot effectively prevent software from being illegally used or copied, it is urgent to propose a novel software protection mechanism to improve the shortcomings of traditional software protection mechanisms.

In view of the problems existing in the above-mentioned existing software protection mechanism, the inventor actively researches and innovates based on years of rich practical experience and professional knowledge engaged in the design and manufacture of such products, and cooperates with the application of academic theories, in order to create a new embedded system. The system and content protection method can improve the general existing software protection mechanism and make it more practical. Through continuous research, design, and after repeated trial samples and improvements, the present invention with practical value is finally created.

Contents of the invention

In view of the above, the main purpose of the present invention is to overcome the problems existing in the existing software protection mechanism, and propose an embedded system with content protection capability, and the technical problem to be solved is to prevent the content from being embezzled.

The purpose of the present invention and the solution to its technical problems are achieved by adopting the following technical solutions. An embedded system with content protection capability proposed according to the present invention includes a security integrated circuit and a system device. The security integrated circuit is provided with an identification key storage device for storing the identification key. The system device is provided with a system key storage device for storing the system key. The system key is obtained by performing mathematical operations on the identification key and the function array, and the function array represents one or more functions required by the embedded system. When the embedded system wants to activate the function, another mathematical operation is performed on the identification key and the system key to obtain a function array, and the required function is activated accordingly.

The purpose of the present invention and its technical problems can also be further realized by adopting the following technical measures.

In the aforementioned embedded system with content protection capability, the identification key storage device includes a mask read-only memory or a one-time programmable memory.

In the aforementioned embedded system with content protection capability, the system key storage device includes a flash memory or an electronically erasable programmable read-only memory.

In the aforementioned embedded system with content protection capability, the content includes software.

In the aforementioned embedded system with content protection capability, the mathematical operation performed to obtain the system key and another mathematical operation performed to obtain the function array include encryption operations.

In the aforementioned embedded system with content protection capability, the function array is expressed as a binary value, and the validity of the function is represented by a bit position.

The aforementioned embedded system with content protection capability further includes: the embedded system checks whether the security integrated circuit exists.

In the aforementioned embedded system with content protection capability, the step of performing another mathematical operation to obtain the functional array further includes: checking whether the functional array obtained by performing another mathematical operation to obtain the functional array is correct .

In the aforementioned embedded system with content protection capability, the identification keys of different embedded systems are different from each other, and the system keys are also different from each other.

In the aforementioned embedded system with content protection capability, the identification key of the same embedded system is fixed, and its system key will be changed after software upgrade.

The purpose of the present invention and the solution to its technical problem also adopt the following technical solutions to achieve. A content protection method for an embedded system according to the present invention includes: performing a mathematical operation on an identification key and a function array to obtain a system key, the function array representing one or more functions required by the embedded system; storing the the identification key is in the security integrated circuit; the system key is stored in the system device; and when the embedded system is to activate the function, another mathematical operation is performed on the identification key and the system key, thereby obtaining the function array, Accordingly, the required function is activated.

The purpose of the present invention and its technical problems can also be further realized by adopting the following technical measures.

In the foregoing content protection method for an embedded system, the identification key is stored in a mask read-only memory or a one-time programmable memory.

In the aforementioned content protection method for an embedded system, the system key is stored in a flash memory or an electronically erasable programmable read-only memory.

The foregoing content protection method for an embedded system, wherein the content includes software.

In the foregoing content protection method for an embedded system, the mathematical operation performed to obtain the system key and another mathematical operation performed to obtain the functional array include encryption operations.

In the aforementioned content protection method for an embedded system, the function array is expressed as a binary value, and the validity of the function is represented by a bit position.

The foregoing content protection method for an embedded system further includes: the embedded system checks whether the security integrated circuit exists.

In the aforementioned content protection method for an embedded system, the step of performing another mathematical operation to obtain the functional array further includes: checking whether the functional array obtained by performing another mathematical operation to obtain the functional array is correct.

In the aforementioned content protection method for embedded systems, the identification keys of different embedded systems are different from each other, and the system keys are also different from each other.

In the aforementioned content protection method for an embedded system, the identification key of the same embedded system is fixed, and its system key will be changed after software upgrade.

Compared with the prior art, the present invention has obvious advantages and beneficial effects. By virtue of the above technical solution, the embedded system and content protection method of the present invention have at least the following advantages and beneficial effects: The present invention performs mathematical operations on the identification key and the function array to obtain the system key. When the embedded system wants to start a function, the function array can be obtained by performing mathematical operations on the identification key and the system key, so as to start the function required by the user. Since different identification keys and system keys are stored in different embedded systems, content can be prevented from being embezzled. In addition, when upgrading, the user does not need to change the identification key and can directly use the upgraded function.

The above description is only an overview of the technical solution of the present invention. In order to better understand the technical means of the present invention, it can be implemented according to the contents of the description, and in order to make the above and other purposes, features and advantages of the present invention more obvious and understandable , the following preferred embodiments are specifically cited, and in conjunction with the accompanying drawings, the detailed description is as follows.

Description of drawings

FIG. 1A and FIG. 1B show a traditional software protection mechanism.

Figure 2 shows another traditional software protection mechanism.

FIG. 3A shows a system block diagram of an embedded system according to an embodiment of the present invention.

FIG. 3B illustrates that the identification key is stored in the identification key storage device in FIG. 3A , and the system key is stored in the system key storage device.

FIG. 3C shows the corresponding relationship between the identification key and the system key.

FIG. 4 shows a flowchart of a content protection method for an embedded system according to an embodiment of the present invention.

FIG. 5 illustrates system block diagrams of embedded systems of three users respectively.

FIG. 6 illustrates a system block diagram of the embedded system of this embodiment applied to software upgrades.

[Description of main component symbols]

300: Embedded Systems 300X: Embedded Systems

300Y: Embedded System 300Z: Embedded System

31: Security integrated circuit 311: Identification key storage device

32: system device 321: system key storage device

41: Whether the safety integrated circuit exists or not 42: Mathematical operation

43: Whether the operation result is correct or not 44: Judging the function of the software

detailed description

In order to further explain the technical means and effects of the present invention to achieve the intended purpose of the invention, the specific implementation methods, methods, and features of the embedded system and content protection method proposed according to the present invention will be described below in conjunction with the accompanying drawings and preferred embodiments. and its efficacy are described in detail below.

FIG. 3A shows a system block diagram of an embedded system 300 according to an embodiment of the present invention, which has the capability of protecting content (eg, software). In this embodiment, the embedded system 300 mainly includes a security integrated circuit (securityIC) 31 and a system device 32 . Although the security integrated circuit 31 and the system device 32 shown in FIG. 3A are separated, they can also be integrated together.

The security integrated circuit 31 includes an identification key (ID key) storage device 311 for storing the identification key. The system device 32 includes a system key storage device 321 for storing the system key, which corresponds to the identification key. In this embodiment, the identification key storage device 311 can be implemented using a mask read-only memory (Mask ROM), or a one-time programmable (one time programming, OTP) memory. The system key storage device 321 can be implemented using a flash memory (flash) or an electronically erasable programmable read-only memory (EEPROM).

FIG. 3B shows that the identification key A is stored in the identification key storage device 311 , and the system key B is stored in the system key storage device 321 . The identification key A in this embodiment has a corresponding relationship with the system key B, but generally speaking, the contents of the two are different. FIG. 3C shows the corresponding relationship between the identification key A and the system key B. In detail, according to one or more functions F0, F1, F2...Fn required by the user, a function array (function array) is assigned, which can be represented by binary values. For example, if the user requires functions F0, F1 and F4, the value of the function array can be expressed as 00...0010011 (bits 0, 1, 4 are "1", and other bits are "0"). In other words, an array of functions is represented as a binary value with a bit position indicating the availability of said function. Mathematical operations, such as encryption operations, are performed on the function array and the identification key A, thereby obtaining the system key B. When the embedded system 300 wants to activate software functions, the identification key A and the system key B are subjected to mathematical operations, such as encryption operations, so that a function array can be obtained to activate one or more software functions required by the user.

FIG. 4 shows a flow chart of the content protection method of the embedded system 300 according to the embodiment of the present invention. Before executing the software, the system device 32 checks in step 41 whether the security integrated circuit 31 is present. If it exists, go to step 42 and use an algorithm, such as an encryption algorithm, to perform mathematical operations on the identification key A and the system key B. Next, in step 43, it is checked whether the result of the mathematical operation (that is, the function array) is correct. For example, it is checked whether the cyclic redundancy check code (cyclic redundancy check, CRC) is correct. If it is correct, then enter step 44, according to the mathematical operation result (in step 42), to judge which one or more software functions the user needs. For example, if the binary value of the mathematical operation result obtained in step 42 is represented as "00...0010011", after checking that the bits 0, 1, and 4 are "1", it is known that the required software functions are F0, F1 and F4.

FIG. 5 illustrates system block diagrams of embedded systems 300X, 300Y, and 300Z of three users X, Y, and Z, respectively. In this example, the identification key storage device 311 of the user X stores the identification key A1, and the system key storage device 321 stores the corresponding system key B1. The identification key storage device 311 of the user Y stores the identification key A2, and the system key storage device 321 stores the corresponding system key B2. The identification key storage device 311 of the user Z stores the identification key A3, and the system key storage device 321 stores the corresponding system key B3. Generally, the identification keys A1, A2, A3 are different from each other, and the system keys B1, B2, B3 are also different from each other. According to the embodiment illustrated in FIG. 5 , since different identification keys and system keys are stored in different embedded systems 300X, 300Y, and 300Z, software pirates cannot illegally use the software by copying other people's system keys or software functions. .

FIG. 6 illustrates a system block diagram of the embedded system 300 of this embodiment applied to software upgrades. In this example, the corresponding system key of the software function FI is B1, and the corresponding system key of the upgraded software function FII is B2. When the user legally upgrades, the system key storage device 321 will store the system key B2 instead, but the identification key storage device 311 still stores the original identification key A1.

According to the embodiment shown in Figure 6, when performing software upgrades, the user does not need to change the identification key (that is, does not need to send the embedded system 300 back to the factory to replace the security integrated circuit 31), but can directly use the upgraded software Function. In addition, as mentioned above, because different embedded systems store different identification keys and system keys, software pirates (that is, those who have not legally purchased upgrade software functions) are not easy to steal software by copying.

The above description is only a preferred embodiment of the present invention, and does not limit the present invention in any form. Although the present invention has been disclosed as above with preferred embodiments, it is not intended to limit the present invention. Anyone familiar with this field Those skilled in the art, without departing from the scope of the technical solution of the present invention, can use the technical content disclosed above to make some changes or modify them into equivalent embodiments with equivalent changes, but any content that does not depart from the technical solution of the present invention, according to the present invention Any simple modifications, equivalent changes and modifications made to the above embodiments by the technical essence still belong to the scope of the technical solution of the present invention.

Claims (20)

1. a kind of embedded system for having content protecting ability, it is characterised in that include：

Safety integrated circuit, provided with identification key storage device, to store identification key；And

System and device, provided with system key storage device, to stocking system key；

Wherein the system key is to be performed mathematical calculations by the identification key and obtained with function array, and the function array represents the insertion One or more required functions of formula system；

When the embedded system will start the function, the identification key and the system key are subjected to another secondary mathematical operation, because And the function array is obtained, start the required function according to this.

2. the embedded system of tool content protecting ability according to claim 1, it is characterised in that wherein the identification key stores up Cryopreservation device includes light shield read-only storage or single programmable internal memory.

3. the embedded system of tool content protecting ability according to claim 1, it is characterised in that wherein system key stores Device can erase comprising flash memory or electronics can program read-only memory.

4. the embedded system of tool content protecting ability according to claim 1, it is characterised in that wherein the content includes Software.

5. the embedded system of tool content protecting ability according to claim 1, it is characterised in that wherein in order to be somebody's turn to do Mathematical operation that system key is carried out and another secondary mathematical operation carried out to obtain the function array include cryptographic calculation.

6. the embedded system of tool content protecting ability according to claim 1, it is characterised in that the wherein function array Binary numeral is expressed as, and the validity of the function is represented with bit position.

7. the embedded system of tool content protecting ability according to claim 1, it is characterised in that further include：

The embedded system checks that the safety integrated circuit whether there is.

8. the embedded system of tool content protecting ability according to claim 1, it is characterised in that wherein in order to be somebody's turn to do Function array and further include the step of another secondary mathematical operation carried out：

Whether the function array inspected obtained by another secondary mathematical operation carried out to obtain the function array is correct.

9. the embedded system of tool content protecting ability according to claim 1, it is characterised in that wherein different embedded The identification key of system is different from each other, and system key is also different from each other.

10. the embedded system of tool content protecting ability according to claim 1, it is characterised in that wherein same embedded The identification key of system is immobilizes, and its system key can be because changing after software upgrading.

11. a kind of content protecting method of embedded system, it is characterised in that include：

Identification key is performed mathematical calculations to obtain system key with function array, the function array is represented needed for the embedded system One or more functions of asking；

The identification key is stored in safety integrated circuit；

The system key is stored in system and device；And

When the embedded system will start the function, the identification key and the system key are subjected to another secondary mathematical operation, because And the function array is obtained, start the required function according to this.

12. the content protecting method of embedded system according to claim 11, it is characterised in that wherein the identification key stores up It is stored in light shield read-only storage or single programmable internal memory.

13. the content protecting method of embedded system according to claim 11, it is characterised in that wherein the system key stores up Be stored in flash memory or electronics can erase can program read-only memory.

14. the content protecting method of embedded system according to claim 11, it is characterised in that wherein the content includes Software.

15. the content protecting method of embedded system according to claim 11, it is characterised in that wherein in order to be somebody's turn to do Mathematical operation that system key is carried out and another secondary mathematical operation carried out to obtain the function array include cryptographic calculation.

16. the content protecting method of embedded system according to claim 11, it is characterised in that the wherein function array Binary numeral is expressed as, and the validity of the function is represented with bit position.

17. the content protecting method of embedded system according to claim 11, it is characterised in that further include：

The embedded system checks that the safety integrated circuit whether there is.

18. the content protecting method of embedded system according to claim 11, it is characterised in that wherein in order to be somebody's turn to do Function array and further include the step of another secondary mathematical operation carried out：

Whether the function array inspected obtained by another secondary mathematical operation carried out to obtain the function array is correct.

19. the content protecting method of embedded system according to claim 11, it is characterised in that wherein different embedded The identification key of system is different from each other, and system key is also different from each other.

20. the content protecting method of embedded system according to claim 11, it is characterised in that wherein same embedded The identification key of system is immobilizes, and its system key can be because changing after software upgrading.