System for protection of software in memory against unauthorized use

Claim 3

The method of claim 1 further comprising the step of locating said descramble means outside said data processing unit.

Claim 4

The method of claim 1 further comprising the step of securely housing said descramble means and said memory unit in a security housing such that descrambled address signals transmitted from the descramble means to the memory unit are not accessible outside the security housing.

Claim 5

A data protection system comprising: (a) first memory means, having addressable memory locations, an address port and a data port, the first memory means being for storing protected datawords in the addressable memory locations where each protected dataword is associated with a source-file address different from a storage address defining the location in the first memory means where the protected dataword is stored. the address port of said first memory means being provided for receiving a storage address signal and the data port being provided for outputting a dataword signal representing a dataword stored in the addressable memory location designated by the storage address signal received at the address port; (b) data requesting means for supplying a data-request signal representative of the source-file address of a desired dataword; and (c) address scrambling means, coupled to the data requesting means the address port of the first memory means, for scrambling in accordance with one of a plurality of address scrambling algorithms the data-request signal supplied by the data requesting means to thereby produce and apply to the address port of the first memory means a scrambled storage address signal which is either representative or not representative of the storage address of the dataword associated with the source-file address represented by the data-request signal; where the address scrambling means has a key input port for receiving a key work which designates one of the plurality of address scrambling algorithms which may be carried out by the address scrambling means as the one to be carried out, where an appropriate key word is required for selecting the one address scrambling algorithm which will convert a data-request signal representative of the source-file address into a scrambled storage address signal representative of the storage address of the dataword desired by the data requesting means, and where said first memory means stores information representative of at least one appropriate key.

Claim 6

A data protection system comprising: (a) first memory means, having addressable memory locations, an address port and a data port, the first memory means being for storing protected datawords in the addressable memory locations where each protected dataword is associated with a source-file address different from a storage address defining the location in the first memory means where the protected dataword is stored. the address port of said first memory means being provided for receiving a storage address signal and the data port being provided for outputting a dataword signal representing a dataword stored in the addressable memory location designated by the storage address signal received at the address port; (b) data requesting means for supplying a data-request signal representative of the source-file address of a desired dataword; and (c) address scrambling means, coupled to the data requesting means the address port of the first memory means, for scrambling in accordance with one of a plurality of address scrambling algorithms the data-request signal supplied by the data requesting means to thereby produce and apply to the address port of the first memory means a scrambled storage address signal which is either representative or not representative of the storage address of the dataword associated with the source-file address represented by the data-request signal; where the address scrambling means has a key input port for receiving a key work which designates one of the plurality of address scrambling algorithms which may be carried out by the address scrambling means as the one to be carried out, where an appropriate key word is required for selecting the one address scrambling algorithm which will convert a data-request signal representative of the source-file address into a scrambled storage address signal representative of the storage address of the dataword desired by the data requesting means, and where said first memory means stores information representative of at least one appropriate key.

Claim 7

The data protection system of claim 4 wherein an address space defined by the memory locations of the first memory means is divided into a plurality of address spans, and wherein protected datawords stored in a first of the memory spans are scrambled in accordance with a first address scrambling algorithm and wherein datawords stored in a second of the memory spans are scrambled in accordance with a different, second address scrambling algorithm.

Claim 8

The method of claim 5 wherein the boundaries of said address spans are arbitrarily selected.

Claim 9

The data protection system of claim 4 further comprising: (d) second memory means, having accessible and addressable memory locations, an address port and a data port, the second memory means being for storing nonprotected datawords in its addressable memory locations, the second memory means including a volatile section for temporarily storing unscrambled data; and (e) key-switching means for downloading a key-switching program into the volatile section of the second memory means and executing the downloaded key-switching program.

Claim 10

The data protection system of claim 7 wherein the key-switching program includes downloading instructions for downloading key-switching code from a protected section in the first memory means to an unprotected section in the second memory means, transfer instructions for transferring execution from the protected area in the first memory means to an unprotected area in the second memory means where the downloaded code was downloaded to, key-generating instructions for generating a new scrambling key, and second transferring instructions for transferring execution from the unprotected area in the second memory means to a new protected area in the first memory means whose datawords are scrambled in accordance with the newly generated key.

Claim 11

The data protection system of claim 4 wherein the address scrambling means interposes no more than a delay of three logic levels between the data requesting means and the address port of the first memory means.

Claim 12

The data protection system of claim 9 wherein the three or less logic levels of the address scrambling means consist of a NOT level, an AND level and an OR level.

Claim 13

A data protection system according to claim 4 further comprising a dataword scrambling means coupled to the data port of the first memory means for scrambling or descrambling data passing between the data port of the first memory means and the data requesting means in accordance with one of a plurality of predetermined dataword-scrambling algorithms.

Claim 14

The data protection system of claim 11 wherein the dataword scrambling means interposes a delay of four or less logic levels between the data requesting means and the data port of the first memory means.

Claim 15

The data protection system of claim 4 wherein the address scrambling means is programmable on the fly such that a different address scrambling algorithm may be selected by applying a new key word to the key input port of the address scrambling means.

Claim 16

The data scrambling device of claim 12 wherein the dataword scrambling means has two data-key input ports, one for selecting a scrambling key when datawords are input into the first memory means for storage and another data-key input port for descrambling datawords as they are output from the first memory means data port to the data requesting device.

Claim 17

A data protection system according to claim 4 wherein the address scrambling means includes electrically programmable circuitry for defining the address scrambling algorithms such that the address scrambling algorithms and the keys necessary for selecting an appropriate one of the address scrambling algorithms may be changed on the fly by reprogramming the electrically erasable/programmable (EEPROM) section of the address scrambling means.

Claim 18

A computer system structured to discourage unauthorized use of software stored therein, the system comprising: a data processing unit; a system bus operatively coupled to the data processing unit for opening carrying address signals generated by the data processing unit, data signals produced or used by the data processing unit and cipher-key signals generated by the data processing unit; address scrambling means operatively coupled to the system bus to receive the address signals and cipher-key signals of the system bus for scrambling the address signals of the system bus in accordance with one of a plurality of predefined scrambling algorithms selected by a cipher-key signal received over the system bus to thereby produce corresponding scrambled-address signals; and dataword storing means operatively coupled to the address scrambling means to receive the scrambled-address signals produced by the scrambling means and to output data signals representing datawords stored in locations of the dataword storing means as indicated by the received scrambled-address signals, wherein the dataword storing means stores key-generating datawords which are used by the data processing unit to generate the cipher-key signals and file-specified datawords which are used by the data processing unit to carry out operations specified by a source file, the file-specified datawords being distributed among the locations of the storing means such that one or more appropriate cipher-key signals must be generated by the data processing unit to select an appropriate one or more of the predefined scrambling algorithms if the operations specified by the source file are to be appropriately carried out.

Claim 19

A computer system structured to discourage unauthorized use of software stored therein, the system comprising: a data processing unit; a system bus operatively coupled to the data processing unit for opening carrying address signals generated by the data processing unit, data signals produced or used by the data processing unit and cipher-key signals generated by the data processing unit; address scrambling means operatively coupled to the system bus to receive the address signals and cipher-key signals of the system bus for scrambling the address signals of the system bus in accordance with one of a plurality of predefined scrambling algorithms selected by a cipher-key signal received over the system bus to thereby produce corresponding scrambled-address signals; and dataword storing means operatively coupled to the address scrambling means to receive the scrambled-address signals produced by the scrambling means and to output data signals representing datawords stored in locations of the dataword storing means as indicated by the received scrambled-address signals, wherein the dataword storing means stores key-generating datawords which are used by the data processing unit to generate the cipher-key signals and file-specified datawords which are used by the data processing unit to carry out operations specified by a source file, the file-specified datawords being distributed among the locations of the storing means such that one or more appropriate cipher-key signals must be generated by the data processing unit to select an appropriate one or more of the predefined scrambling algorithms if the operations specified by the source file are to be appropriately carried out.

Claim 20

The system of claim 16 wherein said address scrambling means includes a programmable logic array.

Claim 21

The system of claim 16 wherein said address scrambling means and datawords storing means are securely enclosed in a security enclosure.

Claim 22

The system of claim 16 wherein two or more key-generating datawords are stored in said storing means and one key-generating dataword is used to generate an appropriate cipher-key signal used for locating a next key-generating dataword.