No.3/March 2002

T h e W I B U M a g a z i n e

KEYn o t e

Page 2 FAQsPage 4/5 Programming Tip: Modular Software ProtectionPage 6 Result: Hacker’s Contest Page 7 Web Remote Programming Page 10 SecuriKey Authentication SystemPage 12/13 Support teamPage 14/15 Case study EASY SOFTWARE AG

6 good reasons for protecting your software with WIBU-KEYAs one of the leading software copy manufacturers, we arecontinually confronted with prejudice against dongles.Dongles are hardware protection keys that are connectedto an interface at the PC. The WIBU-KEY software copy pro-tection system uses the WIBU-BOX hardware "dongle.”Read in this article everything about the advantages andfeautures of WIBU-KEY.

1.Reason: hardware protection withWIBU-KEY pays offWIBU-KEY is less expensive in the long run because youneed only one WIBU-BOX per customer. You can comforta-bly grant licenses, working places and metered-use unitswithin the WIBU-BOX at the customer’s site via the Inter-net. These are one-time costs per customer, which pay offin a short time. Moreover, WIBU-SYSTEMS offers a LITE va-riant, the WIBU-BOX/R. This LITE variant has been deve-loped for mass market applications. Restricted in some func-tions, it offers the unmistakable WIBU-KEY quality andhigh security at an unbeatable price.

continued on page 8

Hall 17 Booth C52

Don’t givecopies a chance!

CO

NTE

NT

KEYn o t e

3

k n o w h o wOur answers to your questions

FAQs

No.3/March 2002

At this point we sincerely want tothank all those who filled out theKEYnote questionnaire. Your feed-back gives us the possibilities to re-spond better to your wishes. Thenew FAQs column is presented forthis first time in this edition.

Question: We distribute oursoftware via the Internet.Doesn’t a dongle disturbthe transaction?Not at all! The WIBU-BOX has to be sentto the customer only once. You can sendit with your license contract, the manualor simply when the customer orders forthe first time. For purchasing more soft-ware or updates, the application can betransferred via the Internet and theWIBU-BOX can be updated simultaneously.

Question: We would like todeploy the WIBU-KEY license management. Howdo we proceed if anemployee also needs thelicense at home?That’s no problem. If the employee hasaccess to the company data from hishome office he will also be using the net-work dongle via an Internet connection.If the employee needs to work with thesoftware from abroad or without onlineconnection, you can deliver two WIBU-BOXes to your customer. For example, ifthey purchased a total of 10 licenses,send one WIBU-BOX with 9 licenses forthe server and a second WIBU-BOX with 1license for off-site use. This one can beused in the office or abroad, the other 9licenses can be used in the office, sincethe network WIBU-BOX is connected tothe server.

Question: We would like todeliver an unlimited testversion of our software. Isthis possible?

Sure. It’s very easy with a Limit Counter oran Expiration Date. Both entries are storedwithin the WIBU-BOX. Each softwarestart reduces the Limit Counter by 1. Theoperation fails if either the Limit Countervalue reaches 0, or if the Expiration Dateis reached.Since the time span depends on the com-puter system date, which can be modifiedby the user, it is recommended to alwaysuse an Expiration Date together with aLimit Counter or an Added Data Entrycontaining the system date from the lastexecution. These are stored inside theWIBU-BOX and cannot be changed by theend user. Plus, changing a system’s datecan cause big problems especially in anetwork, so it is not as prevalent as in thepast.

Question: How do you as ahardware manufactureravoid the failure of WIBU-BOXes?Our hardware failures mount up to lessthan 0.1%. For sure, this is a result of ourQuality Assurance System. Accordingly,every department at WIBU-SYSTEMS hasbeen certified according to EN ISO 9001standards, the toughest standards avai-lable. We offer a full three-year warrantyfor every WIBU-BOX.

Question: We want our service employee to beable to program the WIBU-BOX directly at thecustomer’s site.Simultaneously, we wantto be able to programWIBU-BOXes on-site at ourcompany.This is no problem. You simply order asecond Firm Security Box with your FirmCode for your service employee. For secu-rity reasons the second Firm Security Boxcan be programmed with an ExpirationDate if desired.

New features

WHAT IS NEW?WIBU-KEY is now compatiblewith PC – Mac – LinuxOne and the same WIBU-BOX/U nowworks on Windows, Mac OS and Linux.

Important note for theordering of WIBU-BOXesDue to internal specifications the itemnumber of the WIBU-KEY hardware hasbeen extended for 2 or 3 characters. Thenumbers are now composed as follows:AAAA-RR-VVV.AAAA: Description of article with fourdigits, e.g. 3001-xx for WIBU-BOX/P or3032-xx for WIBU-BOX/RU. RR: Hardware version, e.g. 3001-05 forthe current WIBU-BOX/P.VVV: Variant, e.g. color and imprint,3001-05-13: Color of case: turquoise, solid(RAL 5018), one side printed with WIBU-BOX/P.

WkList with extendedRemote ProgrammingcapabilitiesIt is now possible to easily display remotecontext files and create remote updatefiles in WkList. The user simply chooses aremote context file, and the contents ofthis file are displayed in a virtual port(RMT). Programming of a remote box isas simple as programming a local box.The modifications will be written into aRTU file by pressing the 'Write RMT' but-ton.

BOXen auch in anderen Farben produ-zierbar.

More colorsIn addition to the classic turquoise-colo-red WIBU-BOXes, dark blue-coloredWIBU-BOXes are now available. Custo-mization is also possible. Depending onthe order quantity, the WIBU-BOXes canbe produced in other colors onrequest.

WIBU-BOX/STnow witheven morespeedDue to many customer demands thespeed of WIBU-BOX/ST has been raisedfrom 4800-19200 baud (item number3005-01-122) to 9600-38400 baud (itemnumber 3005-01-120). For a transitiontime of one year, the slower WIBU-BOX/ST can still be or-dered if needed. Inthis case, please give us a short notewhen ordering.

WIBU-BOX/SX discontinuedWIBU-SYSTEMS will stop the productionof WIBU-BOX/SX 3004-03. All orders willbe supplied until 2003. WIBU-BOX/SX canbe replaced by WIBU-BOX/ST.

VCCI Declaration ofConformitySince 2001, all WIBU-BOXes comply withthe technical standards of the VoluntaryControl Council for Interference by Infor-mation Technology Equipment regardingradio interference from informationtechnology equipment.

Dear customersand partnersThere’s no day that goes by without newsabout copy protection. The music sectorcomplains about losses in CD sales and blames the losses on private copies, down-loads from the Internet and commercial

pirate copies. Technicalprecautions for musicCDs as well as DVDsand Pay-TV are beingdeveloped and are con-troversially discussed. I think that we shouldtake into account boththe interests of theindustry in the commer-cialization of theircopyrights as well asthe interests of the

users in sensible use andthe protection of privacy.Today WIBU-SYSTEMS offers practice-ap-proved and future-proofed solutions in thesoftware and document protection sectors,which are far more advanced than what hasusually been associated with dongles. Thisedition of KEYnote shall give a few examples.

We are working at full speed on new globalsolutions for Digital Rights Management. Iwish you innovative solutions for newrequirements and a successful year in 2002.

Yours truly,Oliver Winzenried

P.S: Fill out our online questionnaire atwww.wibu.com/us/survey.htm and win a

case of Crémant d’Alsace!

2Remote Programming with WkList

Automatic Encryption ofapplicationsIn order to meet future requirementsWIBU-SYSTEMS has fundamentally revised the Automatic Encryption of 32bit Windows applications. The followingnew features have been integrated orrevised:! Automatic Encryption of DLLs.! Automatic Encryption of Macromediapresentations, Astound presentationsand self-extracting InstallShield executa-bles.! Runtime check for periodic checks ofthe WIBU-BOX during runtime whenusing console applications. Previously,only Windows GUI applications had aruntime check.! Error messages are now displayedmore significantly. The current version ofthe Runtime Kit must be installed (atleast version 3.00 or higher). ! Use of advanced copy protection tech-niques.! Scaling the size of the code to beencrypted (new WkCrypt.exe commandline option /CAS[p], with p=0..100). Thisis an advantage especially when usinglarge applications, since the start timecan be reduced.! Improvements in the virus check for 32bit applications.Using Automatic Encryption softwaredevelopers can protect their applicationssecurely, quickly and easily without longtraining periods.! The new WIBU-KEY CD-ROM 3.20 willbe available from the middle of March.

How to protect modularsoftware with MasterEntries?With a single Master Entry (24 bits) youcan protect up to 24 different moduleswithin a WIBU-BOX. Each of the 24 modules is protected by itsown User Code. In each User Code onlyone bit is set (see table 2).By setting the corresponding bit of theMaster Code, each single module can bereleased individually (see table 3).

With a second entry you can even definethe number of network licenses. If youwant to provide 20 licenses for the mo-dules 21, 20, 15, 9, 4 and 3 respectively,the WIBU-BOX must be programmed asfollows (Firm Code is 10):Entry 1: Master Entry 10:1589516

Entry 2: Basic Entry 10:1589536

The number of available licenses is thedifference between the User Code andMaster Entry = 1589536-1589516 = 20 (seeScreenshot).In order to individually enable more than24 modules, you can use up to all 10entries within the WIBU-BOX. But it is notpossible to simply use all 24 bits of theUser Code when using an identical FirmCode. It must be assured that the MasterEntries are distinguishable by the bits thatare set to "1”. One solution would be thecoding according to table 4.Is this too confusing? You can try it usingyour own example or ask our supportteam. We would like to explain this toyou. You just have to use it once and youwill be amazed. Using network licensingyou will have interesting licensing modelsfor your distribution.

Protection with WIBU-KEY is basedupon an encryption within the WIBU-BOX hardware, which is dependenton a Firm Code and a User Code thatare stored in the BOX. Program codeand other resources are pre-encryp-ted by the developer and are decryp-ted during runtime through theWIBU-BOX in the program memory ofthe PC. A program with various partsindependently sold to the customeris called a modular program. WIBU-KEY offers the possibility to uniquelyencrypt the different modules inorder to sell a standard, identical pro-gram to everyone. Then access to thedifferent modules is controlled bywhat is programmed into the WIBU-BOX on a particular user’s computer.This feature can make the life of asoftware developer much easier,especially with regard to updates. Inorder to protect many program mo-dules with one WIBU-BOX you useMaster Entries. The following articledescribes the use of and possibilitieswith Master Entries.

What is a Master Entry?The Master Entry is a bit mask 24 bits insize. The principle of Master Entries ismuch like the concept of a master key inan apartment building. Individual UserCodes are used to protect each moduleand they are compared against theMaster Entry to enable the protection.Each User Code that remains unchangedafter a bit-by-bit AND-combination withthe Master Entry can generate an encryp-tion or decryption sequence, and the cor-

responding program modulecan be used (see table 1). Inother words, a User Code canbe used if its "1” bits withinthe corresponding MasterEntry are set to "1”.

No.3/March 2002

KEYn o t e k n o w h o w✃Table 3: Examples for the access of the module with Master Code:

MC Binary MC Decimal release for module

111111111111111111111111 16777215 all

000000000000000000000001 1 1

000000000010000001100010 8290 14,7,6,2

000110000100000100001100 1589516 21,20,15,9,4,3

100000000000000000000000 8388608 24

Table 4: Coding of the upper bit of the Master Entry for up to:190 modules 120 modules 63 modules

1 00011 + 19 Bit 0011 + 20 Bit 011 + 21 Bit

2 00101 0101 101

3 00110 0110 110

4 01001 1001

5 01010 1010

6 01100 1100

7 10001

8 10010

9 10100

10 11000

The number of available licenses is the difference between the User Code andMaster Entry = 1589536-1589516 = 20

Table 1: Principle of the module to be accesssed:

Master Code 000110000100000100001100

User Code of the module 000000000100000000000000

Result of the AND-Combination 000000000100000000000000

Table 2: User Codes of the protected modules:UC Binary: 24 Bit UC Decimal: Module:000000000000000000000001 1 1 000000000000000000000010 2 2000000000000000000000100 4 3000000000000000000001000 8 4000000000000000000010000 16 5000000000000000000100000 32 6000000000000000001000000 64 7000000000000000010000000 128 8000000000000000100000000 256 9000000000000001000000000 512 10000000000000010000000000 1024 11000000000000100000000000 2048 12000000000001000000000000 4096 13000000000010000000000000 8192 14 000000000100000000000000 16384 15000000001000000000000000 32768 16000000010000000000000000 65536 17000000100000000000000000 131072 18000001000000000000000000 262144 19000010000000000000000000 524288 20000100000000000000000000 1048576 21001000000000000000000000 2097152 22010000000000000000000000 4194304 23100000000000000000000000 8388608 24

4 5

Tips & Tricks, issue 3

PROTECTING MODULAR SOF TWARE WITH MASTER ENTRIES

At CeBIT 2001, we wanted to knowfor certain: How safe is WIBU-KEY?Therefore we put ourselves and ourhardware-based copy protection tothe test with the Hacker’s Contest!

Hacker‘s Contest?The task was to crack a WIBU-SYSTEMS-provided program protected with WIBU-KEY by December 31, 2001. WIBU-SYSTEMS gave the source code andchanged only one function that was pro-tected by WIBU-KEY. The hacker had tocrack this function and to specify thesecret calculation result. The amount ofDM 10.000,00 was provided for thefirst one who cracked this protec-ted program.

What happened then?In spite of a lengthy competition time of285 days and a large degree of interest,WIBU-KEY wasn't cracked. We have con-cluded that the reliability and quality ofcopy protection in WIBU-KEY is proven bythe Hacker's Contest.Oliver Winzenried, CEO and founder ofWIBU-SYSTEMS AG, pointed out: ”WIBU-KEY withstood the cracking and hackingefforts of over 300 international regis-tered subscribers. In spite of the attractiveprize of DM 10.000 ($US 4,600) there wasno winner in the competition. CertainlyWIBU-KEY lives up to all our claims."

You are the winner!WIBU-SYSTEMS has demonstrated thatsoftware can be protected to the highestsecurity level by WIBU-KEY. Thus, the realwinners are our customers. WIBU-KEYeven meets the needs of software compa-nies who wish to enforce a distributionsystem such as Electronic Software Distri-bution (ESD) or wish to apply customaccounting of their software such as Pay-Per-Use and software leasing.

The problem of pirated software is still achallenge to doing business. The BusinessSoftware Alliance (BSA) Industry Associa-tion announced that in 2000 softwarepiracy rates in Germany are now up to28% (source: www.bsa.de). The resultingloss increased to 650 Million Euro inGermany alone.

Since 1997 WIBU-SYSTEMS has been anISO 9001 accredited firm and has adheredto a specific Quality Management System.Changes of the ISO directives have re-quired a modification of our existing qua-lity control. This year, we will change ourQuality Management System to ISO9001:2000. We want to continue with thehighest standards for our products, sothat you can be guaranteed of their qua-lity and reliability.

d a t e s

WE INVITE YOU!

2 7 . 0 2 . - 2 8 . 0 2 . 2 0 0 2B a s t a 2 0 0 2 ! M u n i c h

1 3 . 0 2 . - 2 0 . 0 2 . 2 0 0 2C e B I T H a n n o v e rHall 17 Booth C52Our lectures at CeFIS, Hall 17:Marcellus Buchheit:

Oliver Winzenried:

Stephan Süptitz:

You will find our US distributor Griffin Technologies at the US Internet Pavillion in hall 7 booth C30-G20.

Security proved – Hackers fail to crack WIBU-KEY

HACKER’S CONTEST RESULTS

No.3/March 2002

KEYn o t e

7

k n o w h o wSecure programming of a WIBU-BOX via the Internet

WEB REMOTE PROGRAMMINGWIBU-KEY makes it possible to re-program entries in a WIBU-BOXwhile the box is located at the cus-tomer’s site. This option is calledRemote Programming. This is a bigadvantage for customers and soft-ware developers, since reprogram-ming the WIBU-BOX – for examplewhen buying an update or releasinganother module – is easy, fast andsecure.

What is Web RemoteProgramming?In the age of the Internet it is possible todo Remote Programming without thesometimes troublesome detour ofexchanging context and update files viaemail. WIBU-SYSTEMS has developed asample in order to facilitate the imple-mentation of Web Remote Program-ming (in short: WebRmtPgm) for "live”Remote Programming over the Internet.You will find it together with the otherprogramming samples in the developerarea of our homepage, ready for down-load. Customers and owners of theWIBU-KEY Protection Kit have theopportunity to test WebRmtPgm live.For this test, connect a WIBU-BOX to thecomputer. Program into the WIBU-BOXone or more of the following entries:Firm Code=10, User Code=any + LimitCounter, Expiration Date or Added DataEntry. The User Code also can be aMaster Entry.Now go to http://wibu5.wibu.de/WebRmtPgm. The contents of yourWIBU-BOX will be displayed on yourmonitor. By using the buttons you canincrease the Limit Counter by 100, theExpiration date by 30 days, or you canmodify the Added Data Entry or theMaster Entry. The Master Entry is repre-sented as a feature list: each bit canrelease a feature or a module of a pro-

gram. To simplify this demo, special bitcombinations (which can protect up to190 modules) are not taken into accounthere.

How does WebRmtPgmwork?At the client, the context of the WIBU-BOX is read out with the aid of theWIBU-KEY COM control and is sent viaHTTP to the server. This is achievedthrough hidden fields of the active ser-ver page (ASP) document. The serverreads the context information and

writes the content of the WIBU-BOXinto the appropriate fields. If the WIBU-BOX needs to be updated, the RemoteUpdate Information is calculated by theWIBU-KEY COM Control and is sent tothe client via HTTP, where the physicalprogramming of the WIBU-BOX is re-alized. The Development Kit needs to beinstalled (on the server) and a FSB has tobe connected to the server or be acces-sible via the network so that the RemoteUpdate Information can be calculatedon the server.

Of course, another protocol could beused for the transmission of the data.The data to be transmitted is the sameas the "classic” Remote Programmingdata, which is made up of printable cha-racters. Web Remote Programming and classicRemote Programming both have thesame high degree of security, becausethe transmitted data is the same. Even ifsomebody would record the transmittedUpdate Information, he couldn’t do any-thing with it, because with this dataonly a specific WIBU-BOX can be pro-grammed, and only exactly once.

A big advantage of WebRmtPgm is thepossibility to automate the process ofupdating the WIBU-BOX hardware. Theend user doesn’t have to manually gene-rate a context file, send it via email andmanually reprogram the WIBU-BOXwith the update file. He simply uses anInternet browser. And the softwaredeveloper doesn’t have to call WkCryptfor every update, but instead can writea script to perform this task. So you caneasily integrate WebRmtPgm into an E-Shop.

Requirements of systemWebRmtPgm presently runs only under32 bit Windows (95/98/Me/NT/2000/XP),since the WIBU-KEY COM Control (wibu-key.dll) is used.On the client, only the WIBU-KEY driversand the COM Control have to be installed.

On the server there must be a web ser-ver, the WIBU-KEY drivers, the COMControl and the Development Kit has tobe installed. In addition, a FSB as well asthe appropriate wkfirm.wbc (formerlywkfirm.dat) license file is necessary.

6

ISO CERTIFICATION

s p e c i a l

WIBU-KEY Web Remote ProgrammingDocument protection with WIBU-KEY SmartShelter14.03. 4.30pm • 15.03. 4pmHacker’s Contest – Competition and result13.03. 2.30pmElectronic Software Distribution andAuthentication with WIBU-KEY15.03. 3pm • 17.03. 2.30pm • 19.03. 4pmSecure log in with SecuriKey14.03. 3.30pm • 16.03. 2.30pm • 18.03. 5pm

p r o d u c t

No.3/March 2002

KEYn o t e

8 9

As soon as hardware-based copy protec-tion is at the customer’s site, there areonly advantages:! Easy and trouble-free for the customer! PCs can be changed without problems! There are no additional costs for up-

dates or additional sales! Trouble-free operation when using

new state-of-the-art operating systems.Advantage: hardware-based copy protec-tion is more secure than software-basedmethods. With WIBU-KEY you are playingsafe when protecting your software.WIBU-KEY is based on an effective systemconsisting of three security factors.a) True encryption within the hardware

(all security matters are handled com-pletely within the WIBU-KEY ASIC)

b) Combination of two encryption methods(two independent encryption concepts,RID and RED, make it almost impossibleto crack the WIBU-BOX)

c) The WIBU-KEY driver is completely trans-parent. It can’t be outwitted by simula-tors.

Triple security is simply better.

5. Reason: WIBU-KEY worksinvisibly in the backgroundBy deploying network dongles the userwon’t be disturbed and there are no con-flicts, since there are usually no end devi-ces connected to the server. The uniformstandards of today for the use of inter-faces have erased the former problems.USB technology has proved to be very

reliable. Therefore, WIBU-SYSTEMS gua-rantees the reliability of its hardware andthe easy deployment at the customer’ssite.

6. Reason: WIBU-KEY is anall-round winnerYou can use one and the same WIBU-BOXhardware for computers with Windows,Mac OS, Linux and heterogeneous net-works. WIBU-KEY is available for all inter-faces (USB, LPT, COM, ADB, PCMCIA,RS232). Using the uniform API, you canmaster all operating systems and pro-gramming languages with one interface.You even can now use the same WIBU-BOX/U for PC, Mac and Linux.

...enjoy the many advan-tages of WIBU-KEY.

Visualize the possibilities you have usingWIBU-KEY hardware-based copy protec-tion. Order the WIBU-KEY Test Kit todayat ++49721-93172-0 or at info@wibu.com.

2. Reason: WIBU-KEY is up todateThe flexibility and technology of WIBU-KEY enables you to protect your softwareon the one hand, and on the other hand touse these additional possibilities:! ESD Electronic Software Distribution! Pay-Per-Use – a new method of accoun-

ting. The customer neither pays for theapplication nor for the data update ser-vice but only for the time he reallyworks with an application or for the useof special functions.

! Web Remote Programming – you can re-program the WIBU-BOXes at the custo-mer’s site directly via the Internet (Pleaseread the article about Web RemoteProgramming on page 7).

! License Management – you can administer any number of programs with any num-ber of licenses.

! Web Authentication – you can achieve asecure authentication of the WIBU-BOXuser via a two-way-encryption.

! Document Protection – Using WIBU-KEYSmartShelter you can encrypt all HTMLbased documents.

3. Reason: WIBU-KEY is notcomplicatedAs soon as your software is at the custo-mer’s site WIBU-KEY is handled very easily:The WIBU-KEY drivers can easily be in-stalled together with the protected soft-ware. You simply connect the WIBU-BOX tothe appropriate interface of the PC or Mac.Then your customer can work as normal. Using the USB technology, the deployment

of WIBU-KEY became even easier. Thecustomer can very easily install the WIBU-KEY driver with plug & play. In the case ofpossible questions, there is always our sup-port team, which takes care of you andyour customers.

4. Reason: Hardware basedcopy protection with WIBU-KEY is simply the bestBecause you cannot protect software withsoftware. The most common softwarebased copy protection systems are "copyprotected floppy disks” or serial numbersand enable codes which are necessary forthe installation.Disadvantages:! Backup copies are normally worthless,

since they can’t be used anymore afterthe hard disk of the PC has been changedor reinstalled. This contravenes §69d2 ofthe German copyright law and otherlaws in other countries.

! Some methods allow a one-time installa-tion to the hard disk. If the PC or harddisk fails, the software can’t be used ona new PC.

! Many protection methods can be bypassedusing special copy tools. Moreover, in theInternet you can find lists of serial num-bers and release codes for almost all pro-grams.

! Additional costs are encountered withevery update. High production andhandling costs due to personalizationand authorization.

! Long cryptic license codes must be entered(long characters and numbers).

...continued from frontpage

6 GOOD REASON S FOR WIBU-KEY

Authentication systems are no lon-ger for only large corporations, insti-tutions and government agencies.With the introduction of theSecuriKey Authentication System,any company that is concerned aboutprotecting itself against unautho-rized computer use can easily getsome peace of mind.

Griffin Technologies, WIBU-SYSTEMS’partner in the USA, is now shipping theSecuriKey™ Authentication System, thecompany’s breakthrough, USB-based userauthentication solution for networks andpersonal computers. The SecuriKeyAuthentication System is a highly conve-nient, easy-to-deploy solution that com-bines a small, key-like USB device withpassword protection. The system providesan effective, low-cost alternative to PKI(Public Key Infrastructure) technology.

Exceptional 2-factor security protectionThe SecuriKey Token attaches to any keyring and easily plugs into a computer’sUSB port or USB hub. By combining phy-sical (USB key) and informational (pass-word) requirements, the SecuriKey Au-thentication System offers exceptional 2-factor security protection, without theexpense and time-intensive rollout re-quired with PKI systems.

”The cost and complexity of PKI has crea-ted increasing resistance to its adoption”,said Bennett Griffin, president and foun-der of Griffin Technologies. ”TheSecuriKey Authentication System is anelegantly simple solution that can beimplemented in a single day, yet offerscomplete internal security within the cor-porate firewall. For almost any installa-tion, total the SecuriKey AuthenticationSystem expense, including maintenanceand other soft costs, is much less than halfthat of a comparable PKI solution”, henoted.”We assess new products very carefully”,said David Richter, president of Syberos, aKansas City-based information securityprovider. „The SecuriKey AuthenticationSystem is far more secure than a pass-word system. It is truly affordable out ofthe box, plug-and-play technology.”

Small, Simple, Cost-EffectiveThe SecuriKey Authentication Systemassures that the person using a particularworkstation is authorized for its use. It iscost-effective because it doesn’t require aspecial hardware device to work with thephysical token other than an availableUSB port; encryption inside the key itselfguarantees that only the person with theright password and the right SecuriKeytoken can log in.

91% ofemployeeabuse of net-work accessBy locking corporate workstations—the”front door” of any enterprise—theSecuriKey Authentication System offersflexible, reliable protection against cor-porate data compromise and unautho-rized computer use. According to the2001 Computer Crime and Security Surveyconducted by the FBI and the CSI, 91% ofall corporate respondents reported somesort of employee abuse of networkaccess. The SecuriKey AuthenticationSystem limits widespread abuse not onlyby securing access to employee worksta-tions, but also by authenticating theidentity of employees using the Internetand internal networks, thereby increasinguser accountability.SecuriKey is available in Germany, Austriaand Switzerland exclusively at WIBU-SYSTEMS. More information is availableat +49-721-93172-0 or www.wibu.com. For distribution requests, please contactGriffin Technologies or www.securikey. com.You will find our US distributor GriffinTechnologies at the US Internet Pavillionin hall 7 booth C30-G20.

No.3/March 2002

KEYn o t e

11

m o m e n t s

Ready for Mac OS X:The new Macintosh driver version 3.0 wasavailable when Mac OS X shipped in early2001.

Hacker’s Contest launchedat CeBIT 2001: WIBU-SYSTEMS offered DM 10.000 forthe first person to successfully crack a spe-cially created WIBU-protected program.

Now 2001 CeBIT in Sydney:WIBU-SYSTEMS has stronger distributionin Australia and New Zealand.

COMDEX 2001: Demand for WIBU-SYSTEMS products hasrisen enormously despite the terribleevents of September 11th.

Software protection forLinux:Protecting Linux applications with thehighest degree of WIBU-KEY security isnow made possible with the WIBU-BOX/Ufor the USB interface and the WIBU-BOX/ST for the RS232 interface.

Document protection nowavailable with SmartShelter:With SmartShelter all HTML-based docu-ments including texts, graphics, sounds,JavaScript etc can be encrypted. This kindof protection is suitable for documents,catalogues, manuals, stock exchange ana-lysis, tax tips and confidential informa-tion, which at the moment mostly are dis-tributed via CD-ROM or over the Internet.

WIBU-SYSTEMS wins 5thplace at CyberOne 2001!:WIBU-SYSTEMS came 5th in the CyberOnecompetition by presenting its new accoun-ting system for Computer applications.WIBU-SYSTEMS was the only company ofKarlsruhe to win in the top levels of thiscontest.

WIPS 2001 a success:At the beginning of August, all WIBU-SYSTEMS distributors met at the Inter-national Partner Summit in Karlsruhe.Besides attending information work-shops, distributor experiences and wisheswere exchanged.

WIBU-KEY supports Java:WIBU-SYSTEMS offers a Java Native Inter-face (JNI) and a platform-independentadaptation library for Java apps onWindows, Mac OS and Linux.

SYSTEMS 2001 in Munich:Conference attendees showed interest inthe new WIBU-solutions such as WebAuthentication, eShop Integration andasknet Leanshop.

Electronic SoftwareDistribution (ESD) withWIBU-KEY:WIBU-SYSTEMS’ answer to the transfer-ring of licenses via the Internet with WebRemote Programming and accountingsoftware for time of use was introduced.With WIBU-KEY you can achieve ASP con-cepts. Customers and software develo-pers profit by easy, fast and secure releasesof updates or new modules.

WIBU-KEY speakes Japanese:All programs in the WIBU-KEY RuntimeKit now support the Japanese language.

Autumn

S u m m e r

S p r i n g

Winter

10 f u t u r e n o w

Highlights 2001

FLASHBACKSecuriKey™ Authentication System For Internal Security

SECURIKEY

As one of the longest-serving supportteam members, Roger Anton, born in1973, is engaged in user support andconsulting within the scope ofWIBUconcepts. Since September 1997,this experienced IT system electronicstechnician has been at our customer’sdisposal for general questions aboutWIBU-KEY and for special solutionsregarding Borland Delphi. Even duringhis training at WIBU-SYSTEMS he wasenergetically assisting the supportteam. Moreover, Roger Anton is nowin charge of the system administrationin our company.

Since July 2001, Klaus Boos, born in1959, a CAD specialist by profession,has been standing by with moral sup-port and practical advice via the corres-pondent hotlines. The 42-year-old isour resident expert for MicrosoftVisualBasic and supports ourWIBUconcepts department using hisknow-how.

After finishing his studies in ComputerScience, Christian Goebel, born in1968, came to the WIBU-SYSTEMS sup-port team in September 2001. He isresponsible for the technical supportof both the WIBU-SYSTEMS customersand their end customers as well as con-sulting within WIBUconcepts. His special field is the C/C++ programminglanguage and the implementation ofWIBU-KEY into network licensemodels.

Matthias Pfefferle, born in 1978, is ournew blood. He is just completing hissecond year as a trainee with us as anIT specialist. Since September 2000, hehas been an inherent part of the sup-port team and is in charge of the tech-nical support for end-users as well asproduct testing according to ISO 9001standards.

The newest member of the supportteam is Stephan Scott, born in 1972.After finishing his training, he workedfor several years in the semiconductorindustry before he came to WIBU-SYSTEMS in October 2001. He now isresponsible for the technical supportof our end-users and for producttesting.

Indeed, our support team consists ofvarious personalities who have haddifferent careers. Our common aim isto support you and your customers.Make your demands on us and don’thesitate to give constructive criticism.We are happy with your feedback andwe always listen to your questions andproblems.

Your support team

i n s i d eKEYn o t e

12

Our excellent support team is always ready to help you!

SUPPORT@WIBU-SYSTEMS

No.3/March 2002 13

It’s not always easy to understandand utilize all the features of acomplex product like WIBU-KEY.Sometimes questions arise whichcan’t be answered even thoughwe have tried to include as muchas possible in the documentationand examples. When this occurs,our support team will help you.

Our support team will assist you withany and all questions about WIBU-KEY. Just so that you know who youare speaking and exchanging emailswith, we want to introduce our sup-port team and explain how and whenyou can best reach us.

Who’s the right contactperson?The easiest way to contact us is callingus by telephone. For organizationalreasons, we do have two separate hot-lines for our developer and end-usersupport. Being our customer you getus non-stop from 8 am to 5 pm at++49-721-93172-14. This hotline isoccupied by at least two supportersduring the core time. Your end custo-mers can reach us at ++49-721-93172-15.Also, this hotline is occupied by atleast two supporters from 8 am to 12pm and from 1 pm to 5 pm.The best to reach us is sending emailto support@wibu.com or filling outthe support form at http://www.wibu.com/us/support.htm. We try to keep veryquick response times - as a rule you willget your solution within 24 hours.Please help us by describing as manyof the details as possible so that wecan help you. It is a prerequisite toprecisely describe the problem with all

conditions.Of course you can also send your ques-tions by mail or fax (++49-721-93172-22).

Our team:Now we want to introduce our sup-port team in person:At the moment, the team has 6employees who, in addition to sup-port, also take part in consultingactivities. In order to give you the bestinformation, each supporter needstime in which he can reproduce andsolve problems. Therefore, not everysupporter is available non-stop from 8am to 5 pm. Each supporter has fixedhours where he is reachable by tele-phone. We ask you to understand it ifa supporter who is working on yourproblem is not always reachable bytelephone. In such a case communica-tion via email is preferred, since therecipient can answer at an adequatetime.Two supporters are especially respon-sible for the end-user hotline, whilefour supporters care for the developerhotline.

The heads...Stephan Süptitz, born in 1966, is thehead of the support team. Originallyemployed in 1994 in order to assist dis-tribution, he soon noticed his interestsand talents leaned to development,consulting and support. The 36-year-old qualified engineer is, apart fromthe support team, also in charge of theconsulting department WIBUconcepts,and actively takes part in user support.

Stephan Süptitz Roger Anton Klaus Boos Christian Goebel Matthias Pfefferle Stephan Scott

s u p p o r t @ w i b u . d e

Why WIBU-KEY?As an international company with a largeclientele worldwide, EASY needed a reli-able copy protection system that can beflexibly adapted to the requirements ofthe company. Here are the most impor-tant reasons for EASY to choose WIBU-KEY.

Extremely easy implementationThe implementation was extremely easyusing the uniform API that is independentof programming languages and opera-ting systems. Also the installation at thecustomer’s site was trouble-free, since theWIBU-BOX hardware is available for alloperating systems and interfaces. Thecontent of a WIBU-BOX is the same for allhardware variants. For this reason, it doesnot matter which variant the software isdelivered with. The WIBU-KEY driversautomatically search all available interfacesfor a correctly configured WIBU-BOX.

Universal programming of the WIBU-BOXThe EASY software developers have seve-ral ultra-modern functions for program-ming the WIBU-BOX. The programming in

the development is achieved with interac-tive tools (WkCrypt, WkList) and for theserial production with their own applica-tions. An especially interesting option forEASY was the ability to subsequentlyreprogram the WIBU-BOX at the custo-mer’s site.

Efficient WIBU-KEY set upThe WIBU-KEY set up provided easy inte-gration into the EASY product set up.EASY was able to configure the WIBU-KEYset up to install exactly what it needed.Thus, the different components for thevarious operating systems are automati-cally chosen during the installation andproperly installed.Genuine encryption: The encryption viathe WIBU-BOX hardware is also used forsecurely saving extensive configurationdata. These are saved to be safe frommanipulation and are not interchangeablebetween different licenses or users.

Multilingualism of WIBU-KEYThe WIBU-KEY software supports English,German, French, Spanish, Portuguese,Italian, Hungarian and Japanese and thusfacilitates our deployment internationally.

First class first-Level support and end-user supportThe efficient support of WIBU-SYSTEMSmade it easy for EASY to decide in favourof WIBU-KEY. Above all the support forEASY development was very importantand offered fast and competent help forcomplicated questions. Another impor-tant fact was the end-user support, whichreduces the amount of technical supportthat must be provided by EASY.

KEYn o t e

14 15

h o t s p o t

KEYnote 3. Edition March 2002

PublisherWIBU-SYSTEMS AG Rueppurrer Strasse 52-54 • D-76137 KarlsruhePhone: 0721/93172-0 • Fax: 0721/93172-22Email: info@wibu.com • www.wibu.com

Responsible for the contentMarcellus Buchheit, Oliver Winzenried

Editiors:Klaus Boos, Uwe Ernst, Bennett Griffin, Nicole Harant,Manuela Kögel, Ulrike Lindner, Jürgen Ockert, RainerOpitz, Alexander Schmitt, Stephan Süptitz, OliverWinzenried.

Letters are welcome at any time. They are protectedby the secret of the editioril staff. Articles identifiedby name don’t absolutely reflect the opinion of theeditors.

Our mission:"EASY is the recognised solution pro-vider for corporate information andknowledge management. Our goal isabove-average, profit-oriented growthin the international market for elec-tronic document management sys-tems. With innovative products, com-prehensive services, competentemployees and partners, we promoteour customers' commercial success."

Document Managementmade by EASYEASY SOFTWARE AG, trading on theNeuer Markt of the Frankfurt stockexchange, belongs to the leading develo-pers of archiving and document manage-ment systems.The company is active in a growing mar-ket which is receiving increasingly morestimulus from Internet and Intranet com-munications.Apart from its headquarters in Mülheiman der Ruhr, Germany, the company,founded in 1990 and transformed to astock corporation in 1998, has branch of-fices in Berlin, Walldorf (SAP competencecenter), Andernach and Munich. EASY'sinternational activities continue to beexpanded:Since 1999, the US branch in Philadelphiahas been acquiring and supporting salespartners and customers who implementmajor DMS projects with EASY software.With offices in London and Manchester,EASY has been represented in the Britishmarket - the second largest IT market inEurope - since early 2000.EASY also has subsidiaries in France andAustria.

Make your office processesquicker and more flexiblewith EASY SOFTWARE Software must be able to be used easilyand intuitively - this is the guideline thatEASY has followed from the beginning.The result: five products which, under thename EASYWARE, are key to the successof the company. The typical processes of everyday officelife - acquisition of incoming post, forwar-ding and processing, archiving and retrie-val of documents - can be made quicker,more flexible and more efficient withEASY software:EASY CAPTURE ensures the professionalacquisition and allocation of incomingdocuments. Among other things, it con-trols the operation of high-end scanners,text or handwriting recognition (OCR /ICR) and fully-automatic indexing withbarcode.EASY DMS opens up the numerousadvantages of document control withouthaving an expensive project to adjust thesoftware or the business cases. The docu-ments can - with the possibility of conti-nuous access - be forwarded and proces-sed in the company.EASY ARCHIVE guarantees revision-proofarchiving as well as full text retrieval inseconds.EASY WEB also makes these functionsavailable over the Internet or intranet.The EASY APPLICATIONS product lineoffers independent applications, whichexpand ERP programs such as SAP, andgroupware solutions such as Lotus Notesand Microsoft Exchange, to include essen-tial EASYWARE functions. EASY APPLICA-TIONS also features ASP services such asmodern and secure archiving via theInternet.

Case study: EASY SOFTWARE AG - Steps into the Future

Make IT EASY

No.3/March 2002EASY at CeBIT: Hall 1 Booth 8g 1

KEYn o t e r e s p o n s e

WIBU-SYSTEMS AGRueppurrer Strasse 52-54D-76137 KarlsruhePhone +49-721/93172-0Fax +49-721/93172-22Email info@wibu.comWeb www.wibu.com

Open for Action:

FAX TO YOUR DISTRIBUTOR

✃COUPON FOR CEBIT 2002

On presentation of this coupon you will get:

❑ new solutions for your software distribution❑ a WIBU-KEY Protection Kit ❑ a glass of sparkling wine

Visit our booth and we endeavor to distinguish the optimum software protection strategy for your specific situation!

Hall 17Booth C52

Order the WIBU Know-How!

Argentina

Safield Service

fax +54-11-4954-4596

mail info@safield-group.com

Egypt

ODEC

fax +202-419-7827

mail esafwat@odec.com.eg

Japan

SUNCARLA Corporation

fax +81-3-3249-3444

mail info@suncarla.co.jp

Portugal

DUBIT - Sistemas de Informacao,

Lda

fax +351-21-4986789

mail dubit@dubit.pt

Belgium

IMPAKT N.V.

fax ++32-9-26580-59

mail wibu@impakt.be

Finland

FinebyteCom Oy

fax +358-6-8233120

mail finebyte@finebyte.com

Korea

CP Systems

fax +82-2-2246-4914

mail dhkimm@wibu.co.kr

Spain

S.E.M. Servicio de Entorno

Multimedia

fax +34-91-40513-83

mail sem@sinix.net

Croatia

ARIES

fax +385-1-2340-163

mail aries@aries.hr

France

NEOL S.A.

fax +33-3-88333772

mail info@neol.fr

Lebanon, Jordan

Starsoft

fax +963-11-4452927

mail starsoft@mail.com

United Kingdom

CODEWORK Limited

fax +44-161-499-7899

mail info@codework.com

Denmark

DANBIT

fax +45-5666-2030

mail ivha@danbit.dk

Hungary

MrSoft Training and Trading Ltd.

fax +36-1-3220465

mail info@mrsoft.hu

Netherlands

IMPAKT N.V.

fax ++32-9-26580-59

mail wibu@impakt.be

USA, Canada

GRIFFIN Technologies

tel +1-800-986-6578

fax +1-785-832-8787

mail sales@griftech.com

Nam

e

Co

mp

any

Ad

dre

ss

Cit

y, S

tate

, ZIP

Pho

ne

Fax

Emai

l

❑ Yes, Protection Kit!Your information sounds interesting. Please sendme your free of charge Protection Kit for a no-obligation evaluation.

❑ Yes! Appointment!I am really interested. Let’s talk about it. Please call me for an appointment.