Method and Apparatus to Secure Proprietary Operation of Computer Equipment

The invention relates to methods and apparatus which discourage and/or prevent the use of unauthorized program material with proprietory computer hardware.

This application is related to U.S. patent application Ser. No. 324,744, of Robert T. Mayer, entitled "Protected Programmable Apparatus," filed concurrently herewith and assigned to an assignee of this application.

In many instances the manufacturer and/or proprietor of digital computer hardware may find it necessary or advantageous to exercise control over the nature, origin and/or quality of computer programs, data, or other software which is utilized with the hardware or, in some cases, to totally preclude the operation of certain software with the hardware.

The need to control software operation is particularly critical when the computer hardware is utilized to monitor or control the operation of moving or radiating equipment or other potentially dangerous instrumentalities where the uncontrolled use of software developed by a user or third party may expose the equipment manufacturer to liability claims. In many cases government or other certifications of equipment, for example, computerized medical equipment, are conditioned on the use of that equipment with particular software. A manufacturer's desire to control software use may also be based on commercial considerations. For example, a manufacturer may sell hardware at a small profit with the exception of recouping profits from the sale of software.

The computer industry has, for some time, utilized various protection code and password techniques to prevent unauthorized users from accessing and/or controlling programs and data at a particular hardware installation or for limiting the use of proprietory software to a particular installation. Those techniques generally require that a unique identification number be associated with each user and/or hardware installation. Their integrity also generally requires that the security of at least a portion of the system software or firmware (which contains and/or checks the password or identification number) be maintained. These prior art techniques are not, therefore, directly adoptable to preclude the use of unauthorized software on hardware systems which move outside of the proprietor's physical control and are thus subject to reverse engineering as, for example: video game consoles which are distributed to the consumer market.

The present invention provides methods and apparatus for preventing the wrongful use of separable software with electronic digital computer apparatus. In accordance with the methods of the invention the computer apparatus is operated to sense the presence of information at one or more predetermined addressable locations in the separable software and to produce, in response thereto, an audible and/or visual message and/or display which is uniquely derived from that information. The content of the message and/or display, or signals uniquely related thereto, are then compared with reference information which is recorded in hardware or firmware of the computer apparatus to determine if the message and/or display is congruent with the recorded reference information. Some or all further operation of the computer is inhibited if congruence is not detected.

In a preferred embodiment of the invention the recorded reference information represents a message and/or display which is lawfully usable only by the proprietor of the digital computer apparatus, for example by virtue of the protection afforded him by the patent, copyright, or trademark statutes or by virtue of the law of unfair competition.

The invention may be understood with reference to the attached drawings in which:

FIG. 1 is a block diagram showing the architecture of a programmable video game;

FIG. 2 is a memory map of the video game of FIG. 1; and

FIG. 3 is a flow chart of a software implementation of the invention in the video game of FIGS. 1 and 2.

FIG. 1 schematically represents the architecture of a bus oriented, programmable video game. The architecture of FIG. 1 is also analogous, for example, to the architecture of programmable medical diagnostic apparatus (for example ultrasound or CT scanners) and of some computer controlled machinery. A microprocessor 10 communicates data, instructions, and address information via a bus 11 with a read-only memory (the EXECUTIVE ROM) 12 which contains EXECUTIVE program software, a video generator 13, a random access memory (RAM) 14, a read-only memory 16 (the GAME ROM) containing software for a particular game, and, optionally, with various input-output interfaces 18 which communicate data to one or more accessories, for example a printer or a tape recorder. The mircoprocesor 10, EXECUTIVE ROM 12, video generator 13 and RAM 14 typically are all contained within a single hardware console unit. The GAME ROM 16 and interface 18 are external to and separable from the console and connect to the bus 11 via removable connectors 17 and 19.

The microprocessor 10 generally comprises an integrated circuit processor which is capable of addressing and executing program instructions which are stored in ROM's 12 and 16 or in RAM 14, of reading data resident in ROM's 12 and 16, and RAM 14, at I/O interface 18 or in data registers of the video generator 13. The microprocessor is also capable of writing data to addresses in RAM 14, registers in video generator 13, and to I/O interface 18.

Video generator 13 may be one or more dedicated integrated circuits which produce a raster scan television signal in response to image data received via bus 11 from microprocessor 10 and/or one or more of memories 12, 14 and 16. The video generator may typically include a character generator for producing alphanumeric characters in a video image in response to ASCII coded character information and position addresses received from the data and may, additionally, contain circuitry for generating object oriented displays and/or for mapping information contained in random access memory 14 to points in the video image. The raster scan television signal produced by video generator 13 is fed to and displayed on cathode ray tube 15 which may be contained in the video game console or may be a separate television monitor or receiver. The video generator may also be capable of generating audible signals which are produced either through television receiver 15 or through a separate loudspeaker in the game console.

Microprocessor 10 communicates with memories 12, 14 and 16, and the registers of video generator 13 by transmitting discrete address information, identified with those components, over bus 11. The "address space" of a preferred embodiment of the video game is illustrated in FIG. 2. A group of, for example, 4K addressable locations comprise data stored in the EXECUTIVE read only memory. The EXECUTIVE read-only memory contains data and program routines which are utilized by all or many of the separable game programs which operate with the console unit. These may, for example, comprise programs for initializing the console at the start of each game or for generating standard displays.

The address space further includes for example approximately 32K addresses assigned to the separable GAME ROM 16 which contains program routines and data which are uniquely associated with one or more particular video games and which function to generate the displays, score keeping, and logic function of those games.

The address space further includes for example approximately 16K of random access memory 14 which may alternately be utilized for storage of a video display in any format (for example as a direct bit map of in a coded character or object oriented format) or for scratch-pad data storage.

A relatively small number of locations of the address space are associated with registers and control functions in the video generator and are utilized by the microprocessor to control the mode and operation of the generator and to determine the status of the display.

As indicated in FIG. 2 the video generator 13 is capable of reading information from the GAME ROM and of reading and/or writing information to and from the RAM 14 as well as to and from its own registers 21. The microprocessor 10 can read and write information to and from the video generator registers, the RAM 14, and the external I/O port and can read information from the GAME and EXECUTIVE ROM's. Hardware circuitry associated with the microprocessor 10 automatically reads a first program instruction from address 0 of the EXECUTIVE ROM whenever the console is RESET. A RESET typically occurs whenever power is applied to the console, when a "RESET" key is depressed, and whenever a new GAME ROM 16 is inserted in connector 17.

FIG. 3 is a flow chart of an initialization routine which implements the present invention in the video game console of FIG. 1. Except as indicated in the following text, the initialization routine is implemented as firmware instructions installed in the EXECUTIVE ROM 12 and is thus contained, in unalterable form, as a physical part of the video game control console hardware. A RESET (whether produced by power on, the insertion of a ROM cartridge in connector 17, or by a manual reset key), causes the microprocessor hardware to execute the instruction at location 0 in the EXECUTIVE read-only memory 12. Location 0 contains an instuction which causes program execution to jump to an ENABLE routine which is stored at a previously determined location in the EXECUTIVE ROM. The ENABLE routine first issues a command to the video generator 13 which causes the video generator to clear the video display to a blank screen and then proceeds to read information from a DATA TABLE which is contained at predetermined addresses in the GAME ROM, and to write corresponding information into the video display control area of the RAM.

The video generator 13 may, possibly, include hardware which disables the operation of the audio and/or video display upon receipt of a given command or sequence of commands. After loading the data from the GAME ROM into the RAM the ENABLE routine checks the loaded data to determine whether or not it contains instructions which, if supplied to the video generator would disable the generator operation. If such instructions are present in the RAM the program loops back to location 0 and will continue to execute an endless loop of the previously described program instructions until the GAME ROM is removed. During execution of the loop, the video display will remain blank and the console will be incapable of executing any program code contained in the GAME ROM. Alternately, the display may be made to present the text "INVALID SOFTWARE" or a similar appropriate message.

If the ENABLE routine determines that the DATA TABLE does not contain a code which would disable the video generator, it then utilizes the data contained in the DATA TABLE as a display input to the video generator 13. The microprocessor issues a command to the video generator 13 to display the stored inputted data on the display 15. After the video generator has been enabled and while the image is being displayed the microprocessor compares the data stored in the RAM 14 and/or the contents of DATA TABLE in GAME ROM 16 with a field of reference data which is recorded at locations in the EXECUTIVE ROM 12. If the comparison indicates that the data stored for input to the video display is different from that stored in the reference table of the EXECUTIVE ROM, the microprocessor loops back to location 0 and continues to execute an endless loop until the GAME ROM is removed. The loop will alternately clear the screen and present the display defined by the DATA TABLE in the GAME ROM; but no execution of programs or other display fields contained in the data stored in the GAME ROM will be permitted.

If the microprocessor determines that the data field stored in the RAM is congruent with the reference field stored in the EXECUTIVE ROM the mircoprocessor commands a delay loop, for example 5 seconds, during which the display defined by the DATA TABLE of the ROM is presented on the display screen 15; it then branches to execute a video game or other program contained in the GAME ROM.

It is a feature of the invention that the display which is produced by the video generator 13 in response to the DATA TABLE stored in the RAM be a humanly recognizable display which can only legally be used by or with the permission of the manufacturer or proprietor of the console. For example, the display may comprise audio or visual material which is copyrighted by the console proprietor; may contain one or more registered trademarks or other industrial or commercial property rights of the proprietor or may present text which unequivocally indicates that the program material originated from, was manufactured by or was produced under license of or with the permission of the proprietor. If the program material contained in the read-only memory is protected by a patent or is the subject of a patent application the text may also unequivocally state that fact.

Apparatus which is the subject of a U.S. patent application could also include a phrase indicating that the apparatus practices the invention of that application and/or corresponding foreign applications and/or patents granted thereon or some other similar identifying phrase. For example, such language could include a phrase similar to "This apparatus uses the invention of U.S. patent application Ser. No. 324,744 entitled Protected Programmable Apparatus filed on Nov. 25, 1981 and assigned to U.S. Philips Corporation and any patent issuing thereon." This phrase, of course, includes the filing date of that application, which is the related application filed concurrently herewith. Alternatively, the phrase could read "This apparatus practices the invention of U.S. patent application Ser. No. 324,744" which is the serial number of the application identified two sentences above. This latter phrase could include the language "the invention of the claims etc." This phrase could also include reference to corresponding foreign applications and patents. Under some conditions it might be found objectionable to display these types of phrases. If it should be so found the program material can be arranged so that the delay loop of FIG. 3 is bypassed and the signals which produce these phrases are short lived enough to produce a display which is imperceptible to a normal viewer. Nevertheless, the phrase or phrases could be viewed if the display were, for example, filmed by a slow motion camera. Such displays by non-licensed equipment may constitute an admission of infringement.

In one of the embodiments in which the subject matter disclosed herein can be used, namely a programmable TV game the program material including its instructions and the code that will produce the particular desired display would be contained in a ROM mounted in a cassette like cartridge which is made to be plugged into a console containing the computer equipment which the ROM operates with.

The information contained in the DATA TABLE which is stored in the GAME ROM and read by the ENABLE routine may be an actual bit pattern memory map of the image to be presented on the display 15. Alternately, the information in the program ROM DATA TABLE may be a code which enables a character generator in the video generator 13 to present a display or it may be a predetermined set of characters which are recognized by the microprocessor as an instruction which has no function other than to cause the set-up of the RAM for example by using data stored in the EXECUTIVE ROM to present the indicated display. Likewise, the comparison made between the DATA TABLE and the reference data stored in the EXECUTIVE ROM need not indicate equivalence but merely a predetermined relationship therewith, such as congruence between the data. As used herein, the term "congruence" means that the data, when processed by the video generator 13, will produce a display having the same recognizable and distinguishing features which can only be used by or with the permission of the console manufacturer.

In a preferred embodiment of the invention the display is cleared before the image controlled by the data in the DATA TABLE is presented. In this way, it is assured that the display does not contain any text, in addition to the commanded display, which might alter its meaning or interpretation.

In a further preferred embodiment of the invention claimed herein, the commanded image is retained on the display 15 for a predetermined minimum time, for example 5 seconds, to assure that it is recognizable and understandable by a viewer.

The invention is not restricted to hardware which determines that a predetermined data field is visually displayed at the start of program operation. Thus, in alternate embodiments, the EXECUTIVE ROM routine may contain program code which assures that some or all of the display produced by the Data Table is continuously shown during operation of the program contained in the GAME ROM. Alternately, the console may contain timing interrupt circuits (20, FIG. 1) and/or program code which causes the microprocessor to jump to the ENABLE routine at regular intervals so that the proprietory image is likewise displayed at regular intervals.

Although the preferred embodiment of the invention has been described as a software program which operates in conjunction with a video game hardware console, those skilled in the art will recognize that some or all of the functions described in software terms could alternately be implemented by hardware circuits and that the circuitry described herein is operable in other computer controlled apparatus, for example medical imaging or machine control apparatus. Likewise the source of program which is separable from the console need not be a read-only memory but might, alternately, be any other known program source which is separable from the console, for example magnetic tape or disc memory or a modem which receives data from a remote location over a communication circuit.