Software Protection
Contents
1. 20 1 Bool EPF Initiallze DG HARUM PL YR PINE EUR HUS HEAR Um EUER QN EUER 20 2 bool EPF essa aieo dea dean equ E RN edd a DE 20 Secure Mod le arisini Cn Fan e cdi C t eb ded Fa dE ed ra 21 3 bool EPR SetC ustomerlDDals MORE Id PEE Dex 21 4 bool SetSecureVendorIDDoata esses enne 21 5 bool enemies 22 POI NR RN ON E RN ONT 23 Supported BIOS Description essere eene 23 2004 2009 Advantech All Right Reserved Software Protection User Manual Introduction The embedded application is the most important property of a system integrator It contains valuable intellectual property design knowledge and innovation but it is easy to be copied An unscrupulous competitor only needs to purchase one system from the market to copy the embedded application and run it on a similar hardware platform voila The illegal copy is made Advantech Embedded Core Services developed a Software Protection utility which provides reliable security functions for customers to secure their application data within embedded BIOS We ve designed three unique Security ID functions inside the BIOS consis2. Platform Security Status SID Attribute Status Board ID Auto detect Vendor ID Auto detect OK Customer ID User input Gs 2004 2009 Advantech All Right Reserved 4 Input the Customer ID Click tab Customer ID input the previous Customer ID then input the New Software Protection User Manual Customer ID re type the New Customer ID again to confirm Click Write you can see the writing on status bar Software Protection Utility AD ANTECH Customer ID Update 12 bytes max Previous ID New ID Confirm New ID Platform Security Status SID Attribute Board ID Auto detect Vendor ID Auto detect Customer ID User input 2004 2009 Advantech All Right Reserved Software Protection User Manual 5 Check Security ID Status Run Check Security ID Status After installation It will appear a red icon on right lower side system tray the red mean there are no any Security IDs Vendor ID or Customer ID inside in your BIOS After input all IDs you can execute CheckSIDstatus exe again then you can see a green icon on right lower side the green mean the Security IDs is ready for application accessing If you double click it you will execute the SWProtection utility tool directly 2004 2009 Advantech All Right Reserved Software Protection User Manual Note 1 The Board ID will be the first LAN MAC address it will be writte
3. n em a ena uo 4 Sec rity D Structure P 5 How to protect your Application sse 6 Product Pac SER bna E Ua 6 3l d 5 1 O E 7 System ArchitectUrG seisis 7 Suppor BIOS 7 21161619188 2 UE MM 7 Tutorial of Using Software Protection 8 Step1 Install the Utility and LIDEFBIy uere rte tnb stp 8 Step2 Security BIOS is necessary 8 Step3 Check the Security Status Red sess 8 legium 9 Step4 Input the Customer 10 Stepb Double check the IDs essent 11 Step6 Check the Security Status Green eese 12 Step7 Write anie iate men nme Rp gone 13 Software Protection Program ccsssssccccccecssensseeeceeecsesesseaeseeesceeseeaeeeeeeeeeseeseaeeeeeesesssesssaeeeeeeeenses 14 aite el ETT 14 How to write the Security ID aos citer tton n ot ie nk e arde 15 How to check the Security ID 19 SUSI API Programmer s Documentation 20 Initialize Modu ule
4. 2004 2009 Advantech All Right Reserved
5. Software Protection User Manual MOSEL 2M CHIP ID MOSELV29C51002T 5 MOSEL 2 V29LC51002 ID MOSEL V29LC51002T 5 WINBOND 49F002T CHIP ID WINBOND 49F002U 5V i WINBOND 391020 CHIP ID WINBOND 291020 3 3V FA9BOO2UA CHIP ID EFST F49B002UA 5V WIN 49 002 CHIP ID WINBOND 49V002 3 V 551 491 020 CHIP ID SST49LFO20lPC 3 3V j 551 491 020 CHIP ID SST 49LFO20A LPC 3 3V J PMC_49LP002_Chip_ID PMC 491 002 LPC 3 3V PMC Pm49FLOO2T Chip ID Pm49FLOO2T LPC FWH ST 50 2 ID ST M50FW002 FWH ST 501 002 ID ST M50LPWOO2 LPC 5 WIN 49V002F ID WINBOND49VOO2F 3 3V j ATMEL 4911020 ID ATMEL AT49LLO20 2Mb LPC SST 49LF003A CHIP ID SST 49LF003A 3Mb 3 3V SST 49LF030A CHIP ID SST 49LF030A 3Mb 3 3V J 2000PPC ID 28 2000 12V i 2000TPC ID 28F2000TPC 12V 2 2M 2 CHIP ID MXIC 28 002 12V 29F002T ID 29 002 5V 29F022T ID 29 022 5V 2M CHIP ID 29 002 5V D PMC 39F020 CHIP ID PMC PM39F020 5V SST 2M CHIP ID SST 29 020 SV i SST_2M_1_CHIP_ID SST 291 020 BV y 551 39SF020 CHIP ID SST 39SF020 5V 2 551 39VF020 CHIP ID SST 39VF020 B 3V my 55 491 002 CHIP ID SST 491 2 3 3V 2Mb ST_2M_CHIP_ID
6. ST M29F040B ST M29F040B SV dh ATMEL 4911040 ID ATMEL 4911040 4Mb LPC 55 491 040 CHIP ID SST 49LFO40A LPC 3 3V 55 28SF040A ID SST 28SF040A 5V p 5 29 400 ID STM29F400T V WINBOND 29C040 ID WINBOND 29 040 5V b AMD HY ATMEL GTK BM PMC BMB MOSEL MXIC INTEL SST WINBOND ST MegaWin AMIC IMT WINBOND 391040 CHIP ID WINBOND 29L040 3 3V j MegaWin MM29F040 ID AMD AM29F040B 5V b MegaWin MM29LF040 ID MEGAWIN MM29LF040 3 3 MXIC MX29F040 ID MX29F040 ASV 29040 ID 29040 5 de ST MBO0FWOAO ID ST M50FW040 BV hb ST 501 040 ID ST M5OLPWOAO AV hb ST M50LPWOA1 ID ST MSOLPW041 AV hb 55 395 040 ID 55 395 040 5 hh 55 395 D SST 39SFO40P 5V 3 2004 2009 Advantech All Right Reserved Software Protection User Manual SST_39VFO40P_ID SST 39VFO40P 5V IMT 4M CHIP ID IMT IM29F004T 5V INTEL E8280AC ID INTEL E82802AC 3 3 8 SST 491 008 CHIP ID SST 49 3 3V SST_49LFO80A_CHIP_ID SST 49LFO80A 3 3V AMD ATMEL BM MOSEL MXIC INTEL SST WINBOND ST MegaWin IMT ST M5O0LPWOSO ID ST M50LPWOSO 8Mb LPC AV ST M5OFWOSO ID ST M50FW080 8Mb FWH 3V ATMEL 491 080 ID ATMEL AT49LWO080 8Mb FWH Flash Type 16M ROM Ox25bf SST 25VF016B 16Mb SPI SPI
7. re type the New Customer ID again to confirm Click Write Then you can see the writing on status bar Software Protection Utility AD ANTECH Vendor ID Customer ID ID Verification Customer ID Update 12 bytes max Previous ID New ID Confirm New ID Platform Security Status SID Attribute Status Board ID Auto detect Vendor ID Auto detect Customer ID User input Note If you forget the previous ID you have to re flash BIOS file Customer ID default value is AdvCID001 2004 2009 Advantech All Right Reserved Software Protection User Manual Step5 Double check the IDs After input all IDs go to tab ID Verification type your Vendor ID and Customer ID Click Check you can check it on status bar Software Protection Utility AD ANTECH Vendor ID Customer ID ID Verification Check for existing IDs Vendor ID 10 Bytes max 12 Bytes max Customer ID ME Check Platform Security Status SID Attribute Status Board ID Auto detect Pass Vendor ID Auto detect Pass Customer ID User input Pass 2004 2009 Advantech All Right Reserved Software Protection User Manual Step6 Check the Security Status Green After input all IDs then you can execute CheckSlDstatus exe again you will see a green icon on right lower side the green mean the Security IDs are rea
8. ST M29F002T 5 TI 2M CHIP ID INTEL TI TMS28F020 12V j WINBOND 2M CHIP ID WINBOND 29C020 in Flash Type 4M ROM AMD HY ATMEL GTK BM PMC BMB MOSEL MXIC AMD 4M CHIP ID AMD 29 400 5V E HY 29F040A HYUNDAI 29 040 AV AMD 16M CHIP ID 29F160D AV b BMB 16M CHIP ID MBM 29F160 5V b ATMEL 29 040 ID ATMEL 29 5V 2004 2009 Advantech All Right Reserved Software Protection User Manual GTK 040 CHIP ID AVF35LVO40 de BM 29F040 ID BRIGHT BM29FS040 5V b Bright BM29F040 ID BRIGHT BM29F040 SV E PMC 39 040 ID PMC PM39F040 5V PMC 29 004 29 5V ATMEL 49 040 ID ATMEL 49 040 5V b 29F040 ID EN EN29F040 SV BMB 29 040 ID Fujitsu BMB29F040C 5V MOSEL 29C51004 ID MOSEL29C51004T 5V MXIC_29F004_CHIP_ID MXIC 29 004 5V b AMD HY ATMEL GTK BM PMC BMB MOSEL MXIC INTEL SST WINBOND ST MegaWin AMIC IMT INTEL E8280AD INTEL E82802AB 3 3V 4Mb INTEL_E82F400B5T_ID INTEL E82F400B5 1551 491 004 CHIP ID SST 491 004 3 3V 1551 491 004 CHIP ID SST 49LF004A B 3 3V h Winbond FWH W39V040A Chip Winbond W39V040FA 4Mb Winbond_LPC_W39VO40AP_Chip Winbond W39VO40AP 4Mb PMC_Pm49FLOO4T_Chip_ID PMC Pm49FLOO4T LPC FWH ATMEL_AT49LW040_ID ATMEL AT49LW040 4Mb FWH ST_M29W040B_ID ST M29W040B BV hb
9. true 1 false 0 4 bool SetSecureVendorIDData bool SetSecureVendorlDString char vendor id string char old vendor id string HWND hWnd UINT msgID Description Set user define string into this field less than 10 characters Parameter secure_string OUT set secure string into BIOS old_secure_string OUT Which vendor id be insided hWnd Out Assign the progress bar on which windows handle msgID Out Assign one kind of action MsgID 0x0400 0x208 Return true 1 false 0 2004 2009 Advantech All Right Reserved Software Protection User Manual 5 bool CheckSecureID bool SetSecureVendorlDString char chk result char vid io buf char cid io buf HWND hWnd UINT msgID Description Check the all of securityID wheher valid or not Parameter chk_result IN The check result of security area The value mean is showing below XXXXXXX1 BOARD ID is fail XXXXXX1 X Vendor ID is fail XXXXX1XX Customer ID is fail X is don t care you can mask these bits vid io buf OUT Which vendor id be insided cid io buf OUT Which customer id be insided hWnd Out Assign the progress bar on which windows handle msgID Out Assign one kind of action Message ID 0x0400 0x20A WM VERIFY BIN FILE AND FLASH ROM 0x0400 0 206 Return true 1 false 0 2004 2009 Advantech All Right Reserved Software Protection User Manual Appendix Supported BIOS De
10. Trusted ePlatform Services ADNANTECH Software Protection Version 1 0 User Manual Advantech Co Ltd No 1 Alley 20 Lane 26 Rueiguang Road Neihu District Taipei 114 Taiwan R O C www advantech com Software Protection User Manual Copyright Notice This document is copyrighted 2008 by Advantech Co Ltd All rights reserved Advantech Co Ltd Reserves the right to make improvements to the products described in this manual at any time Specifications are thus subject to change without notice No part of this manual may be reproduced copied translated or transmitted in any form or by any means without prior written permission of Advantech Co Ltd Information provided in this manual is intended to be accurate and reliable However Advantech Co Ltd assumes no responsibility for its use or for any infringements upon the rights of third parties which may result from its use All the trade marks of products and companies mentioned in this data sheet belong to their respective owners Copyright 1983 2009 Advantech Co Ltd All Rights Reserved 2004 2009 Advantech All Right Reserved Version History Software Protection User Manual Date Version Author Description 2009 05 1 1 0 CL Wilson New release 2004 2009 Advantech All Right Reserved Software Protection User Manual Table of Contents
11. d with the device 2004 2009 Advantech All Right Reserved Software Protection User Manual Software Protection Program Installation Software Protection installation is a setup file please click the setup exe to do the installation follow the steps to complete the process After the installation you will see Software Protection Utility Uninstall Check Security ID Status in Advantech SWProtection folder m Accessories fr Startup Documents d 5 Internet Explorer m Realtek Programs 9 Software Protection Utility Settings E a SWProtection Search E Uninstall Check SecurityID Status Help and Support Run 5 uv Y p a x uw vU Turn Off Computer 2004 2009 Advantech All Right Reserved Software Protection User Manual How to write the Security ID 1 Run Software Protection Utility 2 Then Input the Authentication Number Note The Authentication Number is on cover of the CD it is required whenever you launch the application please don t lose it 3 Input the Vendor ID Click tab Vendor ID input the previous Vendor ID then input the New Vendor ID re type the New Vendor ID again to confirm Click Write you can see the writing on status bar Software Protection Utility AD ANTECH Vendor ID Customer ID ID Verification Vendor ID Update 10 bytes max Previous ID New ID Confirm New ID
12. dy for application accessing If you double click it you will execute the SWProtection utility tool directly 2004 2009 Advantech All Right Reserved Software Protection User Manual Step7 Write application Run the Utility Software Protection input the Authentication No Click tab Sample Code you can get the sample code of how to access Security IDs Please copy and paste to Microsoft Visual Studio 2005 click the Build and then run it on an Advantech ePlatform device API Sample Code Using Namespace Part using System Runtime InteropServices DllImport Part i Initialize Module DllImport S WProtection dll public unsafe static extern bool InitializeOpen byte extend info DllImport 5 WProtection d11 public static extern bool InitializeClose 0 i Secure Module Implement Part i define message public const int WM USER 0x0400 const int WM SAVE CUSTOMER ID AS FLASH ROM WM USER 0x207 const int WM SAVE VENDOR ID AS FLASH ROM WM USER 0x208 const int WM PROBE SECURE AREA WM_USER 0x204 public unsafe bool InitializeOpen byte szText new byte 0 fixed byte psz authorize 2 InitislizeOpen psz authorize key retum false Congratulations You have successfully completed this tutorial and created a custom application to access the Security ID on your device your application now are protecte
13. g defined by customer input by customer Note1 The SHA hash functions are a set of cryptographic hash functions designed by the National Security Agency NSA and published by the NIST as a U S Federal Information Processing Standard SHA stands for Secure Hash Algorithm The three SHA algorithms are structured differently and are distinguished as SHA 0 SHA 1 and SHA 2 The SHA 2 family uses an identical algorithm with a variable key size which is distinguished as SHA 224 SHA 256 SHA 384 and SHA 512 SHA 1 is the best established of the existing SHA hash functions and is employed in several widely used security applications and protocols 2004 2009 Advantech All Right Reserved Software Protection User Manual How to protect your Application System Integrators embedded application can access the Security ID by calling our API Application Programming Interface There are 3 IDs for checking see below if the Security IDs are not correct it can stop to run and send a message back from LAN for further action depending on your application design SSS ee ees HA BOMBA M NE Hec SERRE RRP Product Features Protection by Security ID via BIOS Security ID consist of Board ID Vendor ID amp Customer ID Security ID is stored in special area in BIOS Security ID is encrypted using hash function SHA 1 Utility and API for fast implementation of custom applications 6 2004 2009 Adva
14. n when you first time run the Software Protection Utility If the board doesn t have MAC ID we will use FFFFFFFFFFFF string to write it to Board ID Note 2 Vendor ID usually for customer to input project name Ex you have one project with 100 devices you can use project 1 in Vendor ID Vendor ID default value is AdvPRJ001 Vendor ID max length 10 byte Note 3 Customer ID usually for customer to input flow number to identify all available devices Ex project 1 with 100 devices in Customer ID you can input device001 for the first devices device 002 for second device device100 for 100 device Customer ID default value is AdvCID001 Customer ID max length 12 byte 2004 2009 Advantech All Right Reserved Software Protection User Manual How to check the Security ID Run the Utility Software Protection Utility input the Authentication No After input all IDs go to tab ID Verification type your Vendor ID and Customer ID Click Check you can check it on status bar You need to type the correct ID and it will only show Software Protection Utility AD ANTECH vendor ID Customer ID ID Verification Check for existing IDs Vendor ID 10 Bytes max LEE Customer ID 12 Bytes max Check All Platform Security Status SID Attribute Status Board ID Auto detect Pass Vendor ID Auto detect Pass Customer ID User input Pa
15. ntech All Right Reserved Software Protection User Manual Environments System Architecture X86 Systems Support BIOS Type Flash Size 1M 2M 4M 16M KB Flash Type 1M ROM Note The Standard BIOS don t contain Security ID space please contact Advantech local sales to request a customize BIOS file Support OS 1 Windows XP Professional 2 Windows XP Embedded Standard 3 Windows Embedded Standard Note For Other OS support we will go by project please contact Advantech local sales 2004 2009 Advantech All Right Reserved Software Protection User Manual Tutorial of Using Software Protection Step1 Install the Utility and Library Install the Software Protection Utility and Library on an Advantech ePlatform device The OS must be Window XP Professional or Windows XP Embedded Step2 Security BIOS is necessary Please flash the Software Protection version image to the BIOS You can find some evaluation version in the CD BIOS file folder If you don t find the image for your platform please contact us You must flash the whole Software Protection version image boot block mean block to the BIOS If you use BiosFlash to flash the BIOS you have to choose follow options like this Select Block Blocks Main Block Boot Block Select All Default Make sure no possible power shutdown or reset during flashing OK Cancel Step3 Check the Security Status Red After installation you can execu
16. scription Flash Size 1M 2M 4M 16M KB Flash Type 1M ROM AMD ATMEL CSI INTEL MOSEL MX AP MX P SST AMIC WIN AMD CHIP ID AMD 29F010 5V hb ATMEL CHIP ID 1 ATMEL 29C010A SV ATMEL CHIP ID 3 ATMEL 49 001 5V T CSI CHIP ID CSI CAT28F001P 12V s INTEL CHIP ID INTEL 28F001BX T 12V h MOSEL 1M CHIP ID MOSEL V29C51001T 5 b MX AP CHIP ID MXIC 28F1000AP 12V T MX P CHIP ID MXIC 28F1000P 12V E 29 001 ID 29 001 5V 55 CHIP ID SST 28 010 amp 28 11 SV 55 CHIP ID 1 SST 29EE010 5V h 551 395 010 CHIP ID SST 395 010 SV p AMIC A29001 ID AMIC A29001 5V i WIN_CHIP_ID WINBOND 29 011 SV E AMD AMIC ATMEL BM CSI EN IMT INTEL MOSEL WINBOND EFST WIN SST PMC ST MXIC PMC TI Flash Type 2M ROM AMD 2M CHIP ID 29F002 N T 5V 29002 ID AMIC 429002 5V ATMEL 2M 1 CHIP ID ATMEL 49F002T 5V 2 ATMEL 2M 2 CHIP ID ATMEL 29LV020 3V ATMEL 2M CHIP ID ATMEL 29 020 5V BM 2M CHIP ID BRIGHT BM29FS020 5V 2M CHIP ID CSI 2 2 12V d EN 29 002 ID EN 29 002 5V 020 CHIP 51 020 y 022 CHIP ID AVF351V020 ny 29 2 ID HYUNDAIHY29F002T SV IMT 2M CHIP ID IMT IM29F002T 5V ty INTEL 2M CHIP ID INTEL 28F002BX T 12V b 2004 2009 Advantech All Right Reserved
17. ss 2004 2009 Advantech All Right Reserved Software Protection User Manual SUSI API Programmer s Documentation The library is place on folder for detail please check the API introduction txt and How to use library txt All APIs return the BOOL data type except Susi Available and some special cases that are of type int If any function call fails i e a BOOL value of FALSE or an int value of 1 the error code can always be retrieved by an immediate call to SusiGetLastError Initialize Module 1 bool EPF InitializeOpen bool InitializeOpen void extend info Description Initialize Parameter extend info1 OUT a reserved parameter you can set a empty string Return true 1 false 0 2 bool EPF InitializeClose bool InitializeClose Description Un Initialize Parameter None Return true 1 false 0 2004 2009 Advantech All Right Reserved Software Protection User Manual Secure Module 3 bool SetCustomerIDData bool SetCustomerlDData char secure string char old secure string HWND hWnd UINT msgID Description Set user define string into this field less than 12 characters Parameter secure_string OUT set secure string into BIOS old_secure_string OUT Which customer id be insided hWnd Out Assign the progress bar on which windows handle msgID Out Assign one kind of action MsgID 0 0400 0x207 Return
18. te an application that is called CheckSIDStatus exe At first times It will appear a red icon on right lower side system tray the red mean there are no any Security IDs Vendor ID or Customer ID inside in your BIOS Jis 59 1 47AM LJ e 2004 2009 Advantech All Right Reserved Software Protection User Manual Input the Vendor ID Run the Utility Software Protection input the Authentication No At the first times the application will take a longer time for execute it because it will register the hardware information into BIOS Click tab Vendor ID input the previous Vendor ID then input the New Vendor ID re type the New Vendor ID again to confirm Click Write Then you can see the writing on status bar Software Protection Utility AD ANTECH Vendor ID Customer ID ID Verification Vendor ID Update 10 bytes max Previous ID New ID Confirm New ID Platform Security Status Status SID Attribute Board ID Auto detect Vendor ID Auto detect OK Customer ID User input Note If you forget the previous ID you have to re flash BIOS file Vendor ID default value is AdvPRJ001 2004 2009 Advantech All Right Reserved Software Protection User Manual Step4 Input the Customer ID Run the Utility Software Protection input the Authentication No Click tab Customer ID input the previous Customer ID then input the New Customer ID
19. ting of Board ID Vendor ID and Customer ID The Security ID is a unique string defined by the customer and encrypted by using hash function SHA 1 The system Integrators embedded application can then access the Security ID by calling Advantech Application Programming Interface and if the Security IDs are not correct the application will stop executing and send a message over the LAN for further action depending on customers application design security is assured 2004 2009 Advantech All Right Reserved Software Protection User Manual Security ID Structure The Security ID consists of Board ID Vendor ID and Customer ID stored in a special area in the BIOS The Board ID will store the first MAC address of the board or system so each board or system will have a unique Board ID which will be factory installed and read only Vendor ID is a unique string for each customer or project this is pre defined by the customer or can be input at the factory The last is Customer ID a unique string defined by the customer and input by customer using our utility or the customer 5 own application calling our API The three IDs provide a triple level protection for the customer s system The Security ID is encrypted by using hash function SHA 1 See Note1 1 Board ID unique string for each board ready in Factory Read Only 2 Vendor ID unique string for each customer or project input by customer 3 Customer ID unique strin
Download Pdf Manuals
Related Search