Secure data authentication apparatus

A secure data authentication apparatus to authenticate an owner of a software file and of a telephony switching system on which the software file is stored, the apparatus comprising:

• a first feature file and a software file, the first feature file having a plurality of features and a first owner signature appended thereto, wherein a first subset of the plurality of features is activated;
• a secure microprocessor within the telephony switching system, the secure microprocessor having an encryption algorithm, wherein the secure microprocessor hashes the first feature file to generate a first hash value;
• and
• a first owner key with in the secure microprocessor, wherein the secure microprocessor encrypts the first hash value with the first owner key to generate a second owner signature and the secure microprocessor compares the first owner signature with the second owner signature and if the first owner signature matches the second owner signature the telephony switching system operates in accordance with the first subset of the plurality of features of the first feature file.

A method for authenticating an owner of a software file having a first identification means attached thereto for use on a computer system, the computer system comprising a secure processing means having an encryption algorithm and a key, the method comprising:

• initiating the computer system;
• hashing the software file within the secure processing means to generate a first hash value;
• encrypting the first hash value with the key to generate a second identification means;
• and
• comparing the first identification means with the second identification means and if the first identification means matches the second identification means the computer system accepts the software file as being authenticated for the owners use.

A method for authenticating an owner of a software file having a first owner signature appended to the software file, for use on a computer system having a secure processing device to generate an authorization signal, the secure processing device comprising a security routine, an encryption algorithm and a first owner key, the process comprising:

• receiving the software file by the computer system and sending the software file to the secure processing device;
• hashing the software file to generate a first hash value;
• encrypting the first hash value within the secure processing device with the first owner key to generate a second owner signature;
• and
• comparing the first owner signature to the second owner signature, wherein if the first owner signature and the second owner signature match the secure processing device generates the authorization signal.

A method for authenticating a source of a software file having a first source signature appended to the software file, for use on a computer system having a secure processing device to generate an authorization signal, the secure processing device comprising a security routine, an encryption algorithm and a first source key, the process comprising:

• receiving the software file by the computer system and sending the software file to the secure processing device;
• hashing the software file to generate a first hash value;
• encrypting the first hash value within the secure processing device with the first source key to generate a second source signature;
• and
• comparing the first source signature to the second source signature, wherein if the first source signature and the second source signature match the secure processing device generates the authorization signal.

A method for authenticating a software file from a PBX manufacturer, the software file comprising a feature file having a plurality of features wherein a subset of the plurality of features are activated, the software file operating on a PBX, the PBX comprising a secure microprocessor having an encryption algorithm and a first key, the method comprising:

• hashing the feature file at the PBX manufacturer to generate a first hash value;
• encrypting the first hash value with a second key to generate a first signature;
• appending the first signature to the feature file;
• receiving the feature file and appended first signature by the secure microprocessor;
• hashing the received feature file within the secure microprocessor to generate a second hash value;
• encrypting the second hash value with the first key to generate a second signature;
• and
• comparing the first signature with the second signature and if the first signature matches the second signature the PBX accepts the software file as being authenticated.