1. An Efficient Software Protection Scheme Antonio Maña, Ernesto Pimentel Antonio Maña, Ernesto Pimentel University of Málaga, SPAIN in Trusted Information: The New Decade Challenge, IFIP TC11 Sixteenth Annual Working Conference on Information Security, June 11-13, 2001, Paris, France. ISBN 0-7923-7389-8, pp.385-402, 2001 This paper presents a robust software protection scheme based in the use of smart cards and cryptographic techniques … to make the attack to the scheme difficult enough to discourage dishonest users “This paper presents a robust software protection scheme based in the use of smart cards and cryptographic techniques … to make the attack to the scheme difficult enough to discourage dishonest users.” Presented by Phil JIN

2. Production and Authorization Production Phase Authorization Phase

3. Appreciative Comments + In general, the scheme + Is a combination of software and hardware +Makes use of modern cryptographic techniques +Takes advantages of hardware token – Smart Card + Allows a single card to be used to protect many applications + Allows card to execute any number of functions + Utilizes the complexity of the protected functions

4. Critical Comments - The diagram was not explained clearly and completely. - Vague expressions on principles - Decryption part is missing - This scheme is barely practical. - Users are forced to purchase smart readers - Performance impacts to the system - Software manufacturers may find it expensive

5. ... …... …... …... … SymmetricEncryption B’’ The Complete Scheme Random Key BB’B’ Translator AsymmetricEncryption SmartcardSmartcard Card Public Key Card Private Key Original Code Final Code Card-specific Code LicenseAsymmetricDecryption Random Key SymmetricDecryption Production Phase Authorization Phase Execution Phase

6. Questions  From the descriptions and comments of the software protection scheme: As a customer and an end user, would you be likely to accept this solution to the problem of software piracy? As a customer and an end user, would you be likely to accept this solution to the problem of software piracy? If so, what is waiting to be improved before it’s adopted? If so, what is waiting to be improved before it’s adopted? Otherwise, what other solutions would you like to suggest (in short)? Otherwise, what other solutions would you like to suggest (in short)?