Software protection device and method

A method of protecting software executable by a computer from unauthorized access by a user, wherein the software is segmented into a first segment encrypted according to a first encryption key (CC0) and a second software segment comprising the steps of:

• coupling a hardware key to the computer, the hardware key having a segmented memory including a secure memory portion;
• executing the second software segment in the computer;
• decrypting the first software segment in the hardware key using the first encryption key stored in the secure memory portion of the hardware key unreadable by the user, wherein the software encryption key is stored in the secure memory portion in plaintext before the hardware key is supplied to the user;
• executing the decrypted software segment to produce a response message;
• transmitting a response message to the computer, and wherein the method further comprises the step of:
• managing the segmented memory of the hardware key by using a non-virtual memory manager module.

A method of securing software executable on a computer, comprising the steps of:

• storing an encrypted first software segment and a second software segment in a host computer communicatively coupled to a hardware key comprising a hardware key processor and a second hardware key memory having the first encryption key stored therein;
• wherein the encrypted software segment is generated by performing the steps of
• segmenting the software into a first and a second software segment;
• transmitting the first software segment to a first hardware key communicatively coupled to a developer computer, the first hardware key comprising a first hardware key processor and a first hardware key memory, the first hardware key memory having a secure segment with the first encryption key stored therein;
• encrypting the first software segment using the first encryption key and the first hardware key processor, and receiving an encrypted first software segment from the first hardware key;
• transmitting the encrypted first software segment to the hardware key;
• decrypting the encrypted first software segment using the first encryption key to produce first software segment instructions;
• storing the first software segment instructions in a secure portion of the second hardware key memory;
• performing the first software segment instructions by the second hardware key processor to produce a response message;
• and
• transmitting the response message to the host computer.

A hardware key, communicably coupleable with a computer, for enabling a user to execute software on the computer, the hardware key comprising:

• a memory for storing data used in translating a command message into a response message to enable execution of the software on the computer, the memory comprising a plurality of storage locations;
• a processor coupled to the memory, the processor interpreting the command messages and generating the response message, the processor comprising a non-virtual memory manager module logically segmenting the memory into at least one protected segment and controlling access to the protected segment by selectively mapping processor commands to the memory storage locations external to the protected segment;
• wherein the processor comprises a translator comprising:
• a message decryptor for decrypting command messages from the host computer;
• and
• a message encryptor for encrypting response messages.