Copy Protect

[longncsu]

Does anyone know a simple way to copy protect a database? I am going to be selling a database (multiple files) I created to several people and was looking for a way to copy protect it. I know I can use passwords and lock everyone out, but I was looking for something more. Any suggestions?

[LiveOak]

What exactly do you mean by "copy protect"?

It's absolutely safe if you have only one copy on CD, keep it in a safety deposit box, and never give it to anyone. Or you could code each copy uniquely and make each customer post a $1,000,000 bond against disclosure before taking delivery. .

Seriously, you can use a hardware key device keyed to each copy. The devices may cost close to $100 each in small quantities, but the database won't run without them. This still isn't copy protection, which is virtually impossible on a computer, if you intend the customer to acutally use the product.

-bd

[SteveB]

As Brent says, it depends on what you're trying to accomplish. If you want to protect against unauthorized and unpaid for use, you can use the Crypto Toolbox (a free plugin) from www.protolight.com which will return the disk serial # and encrypt it for you. What you do from there depends upon how much effort you put into the protection scheme.

If you give the user(s) unfettered access to all the files, you won't have much protection. The easiest type of solution to protect is a kiosk since all the menus are removed and the user is stuck with only what you provide.

[longncsu]

So, yes I do know that there is no such thing as copy protection. I wanted to put in some sort of registration code to keep unpaid users out. LiveOak, what is this hardware key device you speak of?

[SteveB]

You don't want a hardware key - commonly called a 'dongle', they were used in the 80's and typically were connected to the parallel port and then a printer was connected to it. I think they contained a serial # that you could interogate thru a small pgm. I think they have fallen out of favor over the last 5 years.

[LiveOak]

I don't agree. Many high end CAD and other programs (ArchiCAD,4Sight Fax, etc.) use hardware dongles. Almost all used the serial or ADB port rather than the parallel port and now use the USB port. All other means can be defeated. For truly high end programs, they are the ultimate control. Master CD's can be duplicated, activation codes passed on. Checking in dongles is undoubtedly based upon a code where the response can't be discerned from the seed passed to the device. Check are scattered through the program to prevent defeat by patching a single routine which does the check (easy).

The next question (ego aside) is whether your solution REALLY needs this level of protection. CAD programs can be $5,000 - $20,000 per seat and there is a lot of incentive to add seats without paying additional licenses. Your real needs might be much simpler. Often times you can customize reports with the customer's company name. This sort of simple means effectively prevents copying for commercial use, if some such method is applicable to your solution. The key is picking a method which is targeted at the type of copy abuse you are likely to encounter.

-bd

[longncsu]

I wasn't planning on using hardware dongles, I just never heard of them before. Wanted to know a little more about them, thanks. Simple and cheap are the ways I am going.

[kennedy]

Another mechanism suitable for some platforms is to generate keys based on the machine ID of the customers' CPU or their MAC address. They call with their number and are given the corresponding key. Someone could steal the software and the key, but it would only work if they also steal the machine. Again, only suitable for expensive software. (Some software sells for millions.)