WO2006021382A1

WO2006021382A1 - Protection of data of a data carrier comprising a mass storage device and a chip against unauthorised use

Info

Publication number: WO2006021382A1
Application number: PCT/EP2005/008996
Authority: WO
Inventors: Thomas BRAÜTIGAM; Andreas Johne
Original assignee: Giesecke & Devrient Gmbh
Priority date: 2004-08-20
Filing date: 2005-08-19
Publication date: 2006-03-02
Also published as: DE102004040521A1

Abstract

The invention relates to a method for protecting data in the mass storage device of a data carrier comprising a mass storage device and a chip against unauthorised use. When a service device accesses the data carrier in order to use the data in the mass storage device, at least one status identifier of the data carrier is checked, by which means a maximum extent of the authorised use of the data in the mass storage device is determined. Only if the maximum extent of the authorised use of the data, fixed according to the status identifier, authorises further use of the data, can the use of the data in the mass storage device be granted.

Description

Backup of data of a data carrier with mass memory and chip against unauthorized use

The invention relates to a method for securing data of a data carrier with a mass storage device and a chip against unauthorized use, as well as a corresponding data carrier.

The volume with a mass storage is e.g. a data carrier with an optical memory such as e.g. a compact disc (CD), rewritable CD (CD-RW), digital versatile disc (DVD) or DVD-RW. Alternatively, a data carrier with an electronic mass memory such as e.g. a flash memory, ROM or EEPROM memory, e.g. a Compact Flash (CF) memory card, a Secure Disk (SD) memory card or a similar memory card, such as those described in U.S. Pat. in digital multimedia devices such as Digital cameras, camcorders, MP3 players and the like is used. A data carrier with an optical mass memory optionally has a round shape, corresponding to a conventional CD or DVD. Alternatively, the data carrier with an optical mass memory has a rectangular shape, corresponding to a chip card, which may be e.g. has the external dimensions of a chip card in accordance with ISO / IEC 7816, but which additionally has a center hole and an annular mass memory, wherein the outer dimensions of the data medium with respect to the center hole do not exceed the dimensions of a conventional CD or DVD, so that the optical mass • the memory of the data medium can be read in a commercially available CD or DVD drive.

Program software for installation in computers of all kinds, such as personal computers or small computers (Personal Digital Assistant, mobile phone) is widely distributed in data carriers with optical mass storage such as CDs or DVDs. Music data and movie data are also widely stored in CDs and DVDs. Multimedia data for digital multimedia - councils such as digital cameras, digital camcorders, music / movie playback devices such as MP3 players and the like are often stored in data carriers with elektroni¬ rule mass storage devices such as Compact Flash (CF) memory cards, Secure Disk (SD) memory cards etc .. ^■

To protect against piracy, the data in the mass storage are often completely or partially encrypted. As a result, the data, for example, unreadable. Multimedia data such as music data or movie data may be distorted or noisy by the encryption. In demo versions, it may be provided that the data is encrypted with the exception of a portion of the data which has been released for demonstration purposes.

WO 00/51119 discloses a CD-ROM or similar optical disk with a chip as access protection for the data of the CD-ROM. Data is stored in the CD-ROM, with all or part of the data being encrypted. The chip contains a key with which the encrypted data of the CD-ROM can be decrypted without the key leaving the chip, as well as a data exchange device. The chip preferably contains the crypto processor required for decryption. The key can be individual for each CD-ROM. When using the CD-ROM, data is read out of the CD-ROM into a computer and sent from the computer to the chip. In the chip, the data is decrypted with the key and finally output via the data exchange device of the chip, eg to the computer. When the CD-ROM is created, data is encrypted with a secret key and stored in the CD-ROM. The secret key used is stored in the chip for decrypting the encrypted data. The fact that the data is decrypted in the chip and the key never decrypts the chip leaves, the key can not be copied. Consequently, no functional copy of the CD-ROM can be made.

In the case of the CD-ROM from WO 00/51119, the owner of the original of the CD-ROM having the chip can decrypt and use the data as often as desired and use the decrypted data for any length of time.

Often, however, there is a desire that the use of data in a volume with a mass storage is limited in scope. For example, software stored in the mass memory, which is intended for installation in a computer, may only be installed once or a certain number of times. In another example, multimedia data such as e.g. Music or movie data only a vorbe¬ certain number of times (possibly only once) may be played. Often, it is desired that the useful life of the data be limited.

The object of the invention is to provide a method for securing access to data of a data carrier of the type mentioned with a mass storage device and a chip, in which the scope of use of the data is limited, in particular the number of possible uses of the data and / or Useful life is limited.

The object is achieved by a method according to the independent method claim and by a data carrier according to the independent device claim. Advantageous embodiments of the invention are specified in the dependent claims.

Claim 1 specifies a method for securing the data in the mass memory of a data carrier against unauthorized use. The disk has a mass storage in which the data is stored, and a chip. According to the invention, at least one state identifier is implemented in the chip, which defines a maximum extent of the permissible use of the data in the mass memory. In the method, upon access of a utilization device to the data carrier in order to use the data in the mass memory, the state identifier of the data carrier is checked. Only if the maximum extent of the permissible use of the data stipulated according to the state identifier permits further use of the data is the use of the data in the mass memory granted.

If, on the other hand, the condition indicator has a value which indicates that the maximum extent of the possible use has already been reached or exceeded, the data can not be used.

Therefore, according to claim 1, a method for securing the access of the data in the mass memory of a data carrier is specified, in which the extent of use of the data is limited.

The status code within the chip is preferably checked.

Optionally, the use of the data is not granted, because the status indicator does not allow any further use of the data by denying access to the mass storage device.

Optionally, the data is stored in the mass memory at least partially encrypted, wherein a key for decrypting the encrypted data is further stored in the chip. In embodiments of the invention in which the data in the mass memory are stored at least partially in encrypted form, wherein a key for decrypting the encrypted data is also stored in the chip, preferably only if the maximum extent determined according to the status identifier permitting the data to be used further, allowing access to the key for decrypting the data. In other words, the key stored in the chip for decrypting the data with the status identifier is preferably saved in the case of encrypted data, which is completely or partially encrypted. If the status indicator does not permit further use of the data, access to the key is denied. Thus, the data can not be used.

The maximum extent of use preferably comprises a maximum number of permissible uses and / or a maximum service life.

Preferably, the data from the mass storage, if granted access, is further provided for use outside of the mass storage.

Further preferably, the data is made available outside of the mass memory by being installed in an external memory outside the mass memory and outside the chip. Preferably, the data is installed in the utilization device. The utilization device may be, for example, a computer. Optionally, the data provided for use is provided to an output device, in particular to an output device for multimedia data such as music data and / or movie data.

Preferably, each time the data is made available for use outside the mass storage, in particular every time the data is installed in an external memory, the state flag is changed so as to reduce the maximum amount of allowable use. Alternatively, the state code is changed before or after the provision. In particular, the state flag is optionally changed before or after the installation of the data in an external memory.

Furthermore, the status code is preferably changed whenever the data is made available for its use, in particular whenever the data is removed from an external memory, in such a way that the maximum extent of the permissible use is increased. Optionally, undoing the provisioning only results in the state flag change so that the maximum amount of allowable use is increased if the undo is done within a predetermined time interval. The time interval can be, for example, a license period during which the use of the data is permissible. In this case, after the expiration of the time interval (eg license period), undoing (eg uninstalling the data) no longer leads to the change of the status code, which would increase the maximum scope of the permissible use. Optionally, the state flag is changed before or after undoing the provisioning. In particular, the state flag is optionally changed before or after uninstalling the data in an external memory. As a condition indicator, a flag with two different possible states is optionally used. Alternatively, a counter with more than two different possible states is used as the state identifier. For example, each time the data is installed in a computer or the like, the counter is incremented by a predetermined counting step (eg by one) and reduced by the counting step each time the data is uninstalled. If the counter has reached a maximum limit, no further installation of the data is possible. Alternatively, the counter is reduced during installation and increased by uninstalling, and further installation is no longer possible, for example, as soon as the counter reading has reached zero. Optionally, uninstalling the data leads to a reduction (or increase) of the counter reading by the predetermined counting step only within a predetermined license period.

The mass storage is preferably an optical memory. Alternatively, the mass storage may also be an electronic mass storage.

In embodiments where the data in the mass storage is at least partially encrypted, the data is optionally decrypted within the chip. Alternatively, the data can be decrypted in a security module, eg a trusted platform module (TPM), of the utilization device. The security module (eg TPM) has a Mikroprozes¬ sor chip in which data are installed encrypted. For a computer, for example, the serial number of the computer microprocessor and / or one or more other computer components such as Netzwerkkar¬ te, mass storage, etc. are installed encrypted in a security module (eg TPM). Alternatively or in addition to the serial number, other individual data of the computer microprocessor or of the computer component may be installed. The security module (eg TPM) makes it possible to nem user to read out the data installed in the security module (eg TPM) encrypted installed and made available for processing purposes, for example, to perform a comparison with other data without the data in plain text available to the user, ie where the data read against the Users remain secret.

According to a further development, an access authorization is checked. Access to the data carrier is possible only after a successful verification of the access authorization. Preferably, the access authorization (PIN, etc.) is first checked before the state identifier can subsequently be checked. The checking of the access authorization can in particular be carried out with a password and / or a PIN and / or a biometric identification feature such as e.g. Fingerab¬ pressure, eye iris, face shape, hand shape or the like can be performed. Optionally, a separate security element, such as e.g. used a "dongle".

According to another development of the method, after each provision of the data for use, a cumulative counter is incremented (incremented) by a predetermined counting step. The cumulative counter is not decremented if the provision of the data for use is reversed, because e.g. the data will be uninstalled. The cumulative counter thus counts the total number of uses of the data from the mass memory.

The status code within the chip is preferably checked. This has the advantage that the check is carried out in the protected against unauthorized manipulation environment of the chip. Preferably, the state flag is stored within the chip. If now the verification takes place in the chip, the state tag never needs to leave the chip and is therefore particularly well secured against manipulation. Optionally, the status code is stored encrypted in the chip. Optionally, the state flag can not be changed from outside the chip. Optionally, the state identifier from outside the chip is at most readable and therefore verifiable, but not changeable. Optionally, the access to the status code from outside the chip is completely denied, so that only internal data processing operations within the chip can access the status code. Optionally, the status code is encrypted stored so that it is additionally secured against manipulation.

The data carrier according to the invention is preferably designed as an optical data carrier with an optical mass memory, in particular CD, CD-RW, DVD or DVD-RW, which additionally has the chip. Alternatively, the data carrier can also be designed as an electronic data carrier with an electronic mass memory, which additionally has an at least logically separate chip in which the state code and possibly the key are stored or implemented.

In the following the invention with reference to exemplary embodiments and with reference to the drawing is explained in more detail, in which:

1 shows a CD / DVD according to the invention, which has an optical memory, a chip, a contact pad for contacting the chip and two balancing weights; 2 shows an example of a contact field provided for mounting on a CD / DVD, for making contact with a chip arranged on the CD / DVD;

3 shows a further example of a contact field provided for mounting on a CD / DVD for the contact-type contacting of a chip arranged on the CD / DVD;

4 shows a CD / DVD according to the invention with an optical memory, a chip and a balance weight, and a reading device equipped for the inventive CD / DVD with a device for accessing the chip;

5 shows a flow chart for illustrating a method for securing the data in the mass memory of a data carrier with a mass storage device and with a chip, according to a preferred embodiment of the invention.

FIG. 1 shows a CD / DVD 100 according to the invention. Like a conventional CD / DVD, the CD / DVD 100 has a center hole 101 around the ring-shaped area 102 free of optical memory, around the one further annular data area 103 is arranged. An optical memory (mass memory) is provided in the data area 103. In contrast to a conventional CD / DVD 100, in the case of the inventive CD / DVD 100 from FIG. 1 in the free region 102 between the optical memory 103 and the center hole 101, a chip 104, a contact field 105 for contacting the chip 104 and two balance weights 106 are arranged. The chip 104 and the balance weights 106 are arranged so that the CD / DVD 100 has as possible no imbalance, and that the center of gravity as possible in the center of the circular CD / DVD 100 is located. Optionally, no or a different number of counterweights are provided.

FIG. 2 shows an example of a contact field 205 provided for mounting on a CD / DVD, such as that shown in FIG. 1, for the contact-contacting of a chip likewise arranged on the CD / DVD. The contact field is ring-shaped, so that it can be arranged on a CD / DVD 100 in the free area 102 between the center hole 101 and the data area 103, as shown in FIG. The contact field 205 has eight individual contact surfaces (generally typically a number of two to ten contact surfaces) in the form of ring segments, which are arranged along a circular path.

FIG. 3 shows a further example of a contact field 305 provided for mounting on a CD / DVD. The contact field 305, like the contact field 205 of FIG. 2, is annular, but has six (generally approx ) concentric with each other, annular contact surfaces.

In a CD / DVD according to the invention, for example, a contact field 205, 305 according to FIG. 2 or FIG. 3 is provided in the free area 102 between the center hole 101 and the data area 103, so that a chip 104 arranged on the CD / DVD 100 can be contacted. The individual contact surfaces (for example six or eight pieces) may be e.g. according to ISO / IEC 7816, USB, RS232 / V.24 or another protocol.

4 shows a further CD / DVD 100 according to the invention with an optical memory 103, a chip 104 and a balance weight, as well as a reading device 410 configured for the CD / DVD 100 according to the invention with a device for accessing the chip. 5 shows a flow chart for illustrating a method for securing access to the data in the mass memory of a data carrier with a mass memory and with a chip according to a preferred embodiment of the invention.

In a first step 1, a PIN is checked and, if the PIN is verifi¬ ed, advanced to step 2. If no PIN check is required, the method begins with step 2. In step 2, a counter implemented in the chip is checked which indicates the number of uses of the data and limits them to a maximum number of uses. If, according to the meter, the maximum number of uses has already been reached, access to the data in the mass storage is denied in step 3. If, according to the counter, the maximum permissible number of uses has not yet been reached, step 4 grants access to the data in the mass memory. Following step 4, the data are installed in a computer in step 5 and the counter in the chip of the data carrier is incremented (incremented) by one. If the data were to be deinstaled again, the counter would again be decremented by one (decremented).

The chip in which the counter is implemented is typically a microprocessor chip with an operating system and one or more applications. The counter is typically incremented or counted down by the microprocessor, and typically using the operating system. In particular, the counter can optionally be implemented as an operating system function or as an application in the chip. In the following, a preferred embodiment of a method according to the invention for securing the access of the data in the mass memory of a data carrier with a mass memory and a chip will be described in detail.

The data carrier is a DVD with an optical mass storage. The optical mass memory stores data of a program which is to be installed in the memory of a computer in order to subsequently run it on the computer. The data is at least partially encrypted. The DVD has an unencrypted area in the optical memory for booting the DVD. On the DVD, for example, as shown in Fig. 1 or Fig. 4, a chip is mounted. A key for decrypting the data in the optical mass memory is stored in the chip. Optio¬ nal a PIN is stored in the chip. The access to the key in the chip is protected by a condition indicator according to the invention, which is also implemented in the chip. The status indicator is a flag with two states, deleted and set.

For other types of media (CD, SC, CF, MMC) with optical or electronic mass storage, for other types of media players, especially for other CD / DVD drives such as CD-ROMs. CD / DVD drives in CD / DVD players, the procedure works analogue analog.

A user who wants to install the program in a computer inserts the DVD into the DVD drive of the computer (or player, etc.). From the unencrypted area of the optical mass storage of the DVD, an installation program (boot or boot program) is booted, through which a first communication with the DVD is made possible. The installer detects that a usage device is trying to access the DVD through a DVD drive and requires the user to first enter a PIN. In alternative embodiments, PIN entry is not required. In the present embodiment, the user inputs the PIN via a keyboard, for example via the keyboard of the computer. In the case of a playback device, alternatively, the PIN can be entered via buttons which are present on the playback device anyway, or the playback device has one or more additional buttons.

To check and verify the PIN must be gripped on the chip of the CD.

According to a first alternative, the DVD drive contains a chip reader (more precisely a chip read / write device). In this case, the chip reader next begins communication with the chip of the CD. The communication can be contactless or contact-based.

According to a second alternative, the DVD drive has no chip reader. In this case, the user is prompted to remove the DVD from the DVD drive. Subsequently, the user contacts the chip with a contact-type or contactless chip reader. According to a preferred embodiment, a contactless chip reader is used, which is integrated in the computer. Further preferably, the integrated chip reader can be contacted via an NFC interface which "automatically" communicates with the chip as soon as the DVD has been approximated close enough.

The chip reader (internal or external) sends the entered PIN to the chip. The entered PIN and the saved PIN are saved in the chip. chen. Optionally, the PIN check is coupled with a known malfunction counter, which registers the number of incorrect PIN entries and blocks the chip if the PIN input is too frequently incorrect.

If the PINs match, verification of the status code is possible. In embodiments of the method without a PIN check, the checking of the status code is started immediately, as soon as the chip is addressed with the chip reader.

The state flag is a flag implemented in the chip of the CD. The flag is now checked with the chip reader (internal or external). The DVD is used for the first time in this example. The flag is therefore (still) deleted, which indicates that a (further) use of the data is permitted.

After the flag in the chip has been recognized as erased, the communication is transferred to the DVD drive, and the data from the optical mass memory is read into a temporary storage accessible to both the DVD drive and the chip reader , Subsequently, the data is read into the chip. The data is decrypted with the key in the chip.

The decrypted data is finally installed in the computer.

As soon as the installation of the data in the computer is completed, the flag (status code) is set in the chip of the data medium. This indicates and achieves that no further installation of the data is possible. In alternative embodiments, the flag is set at another point in the procedure. For example, that will Flag set alternatively after the encrypted data has been read into the Zwischen¬ memory. Alternatively, the flag is set after the data has been decrypted. Alternatively, the flag is set after it has been checked and found to be deleted.

The fact that the data can not be reinstalled is achieved, for example, by granting no access to the optical mass memory after the set flag has been detected, so that the data is not read from the optical mass memory for decryption can. Alternatively or additionally, after the set flag has been detected, no access to the key is granted, so that the encrypted data can possibly be read out, but can not be de-keyed.

If the data is recovered from the disk using the disk

Uninstalled computer, the flag is deleted again as soon as the Deinstalla¬ tion is completed or as soon as at least predetermined sub-steps of the deinstallation are completed, so that the data are no longer usable. In this case, an uninstalling function implemented in the data carrier is preferably used for uninstalling.

In alternative embodiments, instead of a flag, a counter is installed in the chip which is incremented (or alternatively counted down) by one as soon as the installation of the data is completed and counted down by one (or alternatively counted up), when the data is uninstalled again.

According to one development of the invention, which is described in another patent application filed on the same day, the data carrier is In addition, personalization is made to one or more predetermined utilization devices, so that the use of the data carrier is only possible with the intended use device (s).

Claims

Patent claims

1. A method for securing the data in the mass memory of a data carrier with a mass storage and a chip against unauthorized use, characterized in that at an access of a utilization device to the disk to use the data in the mass storage, at least one state identifier of the disk is checked, by which a maximum extent of the permissible use of the. Data in the mass memory is fixed, and the use of the data in the mass memory is granted at most, if the maximum extent of the permitted use of the data determined according to the state identifier permits further use of the data.

2. The method of claim 1, wherein the data in the mass storage at least partially encrypted are stored, and wherein in the chip further a key for decrypting the encrypted data is stored chert.

3. The method according to claim 2, wherein access to the key for decrypting the data is granted at most if the maximum extent of the permissible use of the data determined according to the status indicator permits further use of the data.

4. The method according to any one of claims 1 to 3, wherein the maximum extent of use comprises a maximum number of permissible uses and / or a maximum useful life.

5. The method according to any one of claims 1 to 4, wherein the further data from the mass storage outside the mass storage for use bereitge¬ provides.

6. The method of claim 5, wherein the data is provided outside the mass storage by being installed in an external memory outside the mass storage and off-chip.

The method of claim 6, wherein the data is installed in the utilization device.

8. The method according to any one of claims 5 to 7, wherein the be¬ provided for use be¬ data provided to an output device, in particular to an output device for multimedia data such. Music data and / or movie data.

9. Method according to one of claims 5 to 8, wherein the state flag - in particular optionally before or after - one, in particular each, providing the data for their use outside of the mass storage, in particular with each installation of the data in An external memory is changed in such a way that the maximum extent of the permissible use is reduced.

10. The method as claimed in claim 5, wherein the status code is - in particular optionally before or after - one, in particular each, undoing the provision of the data for its use, in particular every time the data is removed from an external memory is changed, that the maximum extent of the permitted use is increased.

11. The method according to any one of claims 1 to 10, wherein as state flag a flag with two different possible states verwen¬ det is used.

12. The method according to any one of claims 1 to 11, wherein as state flag a counter with more than two different possible Zustän¬ the used.

13. The method according to any one of claims 1 to 12, wherein an optical memory is provided as mass storage.

14. The method according to any one of claims 1 to 13, wherein further an access authorization is checked - in particular with a password and / or PIN and / or a biometric identifier or a separate security element - and wherein access to the disk at most after one successful verification of access authorization.

15. The method according to any one of claims 1 to 14, wherein the state identifier is checked within the chip.

16. The method according to any one of claims 1 to 15, wherein the state identifier is stored within the chip.

17. The method according to claim 1, wherein the state identifier is readable from the outside of the chip at most and / or can not be changed from outside the chip.

18. The method according to any one of claims 1 to 17, wherein the state identifier is stored in encrypted form.

19. A data carrier with a mass memory and a chip and with a method implemented in the chip according to one of claims 1 to 18, characterized in that the data carrier has at least one state tag implemented in the data carrier, by which a maximum extent of permissible the data in the mass storage is set.

20. A data carrier according to claim 19, which is designed as an optical disk, insbeson dere CD, CD-RW, DVD or DVD-RW.