TweetFollow Us on Twitter

Copy Protection and Serial Numbers

Volume Number: 13 (1997)
Issue Number: 10
Column Tag: develop

Copy Protection and Serial Numbers

by Brian Bechtel, Apple Computer, Inc.

Copy protection is hard, and it is difficult to find a scheme which is not easily broken. The Mac OS was not designed with copy protection in mind, and there is no unique serial number available on Mac OS based computers. There are some techniques which can be used to help differentiate between two Mac OS computers, and these techniques are described in this article.

DTS does not support copy protection because of the significant compatibility liabilities it involves. This article is a summary of some specific techniques which we have used or recommended in the past. DTS does not maintain expertise in copy protection techniques. Serious copy protection is much more complicated than this article describes.

Uniquely Identifying a Mac OS Computer

In general, the only consistent serial number on a Mac OS based computer computer is on the bar code label which is attached to the outside of the case. There is no internal serial number on the logic board of any current Mac OS based computer computer. There is no internal serial number associated with the operating system. The only Macintosh with a real built-in serial number was the Macintosh XL. This machine had a serial number only because the Lisa (upon which it was based) had a serial number as part of the Lisa design.

There are some hardware devices, found on a limited range of Mac OS computers, which contain some unique identifier which could be used as a serial number. Examples are an Ethernet card installed or built-in Ethernet. (This is because Ethernet devices have an unique ID defined for each device.) Some (but not all) hard drives have a serial number which can be read using the SCSI Manager or ATA Manager. Other devices such as Token Ring cards or FireWire may also provide an unique identifier which may be used as a serial number. None of these hardware devices can be found across the entire Macintosh product line.

Semi-Unique Characteristics

There are some "semi-unique" characteristics which you can use to help you determine if you are running software on the same machine which you were running on before. These are listed roughly in the order I'd recommend considering them.

File ID References

You can create and store the file ID reference for the application file. Create a file ID reference using PBCreateFileIDRef() and store it in an appropriate place. (An example of an appropriate place would be the preferences file. An inappropriate place would be the application resource fork, since this would prevent your application from running from locked media or a network server.) Compare the file ID reference to the file ID reference of the running application (the file ID reference will be in the ioFileID field returned by PBGetCatInfo). If it isn't the same, you are running on a different volume. File ID references are unique within a particular volume; they don't get reused. It's unlikely that two machines will give you the same file ID reference for the same file.

 // AddFileID creates a file ID reference for the 
 // file specified by the FSSpec. It returns the
 // created file ID reference so that you can store
 // this reference for future use.
 //
 OSErr AddFileID(FSSpec *file, long *fileID)
 {
 OSErr err;
 HParmBlkPtr h;
 
 h = (HParmBlkPtr)NewPtrClear(sizeof(HParamBlockRec));
 
 h->fidParam.ioCompletion = nil;
 h->fidParam.ioNamePtr = file->name;
 h->fidParam.ioVRefNum = file->vRefNum;
 h->fidParam.ioSrcDirID = file->parID;

 err = PBCreateFileIDRefSync(h);
 *fileID = h->fidParam.ioFileID;
 DisposePtr((void *)h);
 return(err);
 }

 // GetFileID returns the File ID reference for a file
 // where the File ID reference has previously been
 // created (by calling PBCreateFileIDRef)
 //
 OSErr GetFileID(FSSpec *file, long *fileID)
 {
 OSErr err;
 CInfoPBPtr cInfo;
 
 cInfo = (CInfoPBPtr)NewPtrClear(sizeof(CInfoPBRec));
 
 cInfo->hFileInfo.ioCompletion = nil;
 cInfo->hFileInfo.ioNamePtr = file->name;
 cInfo->hFileInfo.ioVRefNum = file->vRefNum;
 cInfo->hFileInfo.ioFDirIndex = 0;
 cInfo->hFileInfo.ioDirID = file->parID;

 err = PBGetCatInfoSync(cInfo);
 *fileID = cInfo->hFileInfo.ioDirID;
 DisposePtr((void *)cInfo);
 return(err);
 }

Ethernet Address

For those Macs which have an Ethernet card installed or built-in Ethernet, you can use the EGetInfo() call with a csCode of ENetGetInfo to get the currently assigned Ethernet address. See Inside Macintosh:Networking, page 11-26 and 11-36 for more information. Apple publishes sample code demonstrating how to obtain the Ethernet address under Open Transport.

The complication for this technique is that the default Ethernet address may be overridden by a resource of type 'eadr' in the System file. This is documented in Inside Macintosh:Networking on page 11-26. Because it is easily possible to override the hardware address, and because Ethernet is not guaranteed to exist on any particular model, this is not a good scheme.

Similar techniques can be used for a Mac OS computer with Token Ring cards or other cards, but a discussion of these cards is outside the scope of this document.

Hard Disk Serial Number

Some hard disks have serial numbers. Many ATA drives have such a serial number, but most SCSI hard disks do not. Apple publishes ATA demo sample code which shows how to get the serial number of an ATA drive. Only some Macintosh models have ATA drives, so this is not a good general purpose scheme.

SCSI Defect List

Some developers use the defect list from a SCSI drive. This won't work for a non-SCSI machine, but might be a good approach for a SCSI based Mac. See the SCSI-2 specification and Inside Macintosh:Devices for details of using the SCSI Manager. Source code demonstrating use of the SCSI Manager in a general case is on the tool chest developer CD. Only some Macintosh models have SCSI drives, so this is not a good general purpose scheme.

Directory ID of the System Folder

Compare the dirID of the System Folder. Use FindFolder() to get the dirID of the System Folder, and compare it to a previously stored parID. This isn't quite as unique as the file ID, since the system folder as preinstalled will tend to have the same directory ID from one machine to another. If the user creates a new System Folder (e.g. by doing a clean install of System Software, which appears to be a frequent activity when upgrading) then you will have different directory IDs. This is not a good scheme.

 // GetVolumeDirID returns the dirID of the System Folder
 //
 OSErr GetVolumeDirID(long *dirID)
 {
 OSErr err;
 short notUsed;

 err=FindFolder(kOnSystemDisk, kSystemFolderType, no,
 notUsed,dirID);
 return(err);
 }

Volume Creation Date

Compare the creation date of the volume. You can get this information from PBHGetVInfo(). This isn't quite as unique as the file ID, since the volume creation date will be set at the factory when system software is placed on the volume and will only be reset when a volume is reinitialized. Because this value tends to remain the same for a given set of machines, this is not a good scheme.

 long GetVolCreationDate(short vRefNum ) 
 { 
 OSErr err = noErr;
 HParamBlockRec pb;
 Str255 vName;

 vName [ 0 ] = '\0';
 pb.volumeParam.ioCompletion = nil;
 pb.volumeParam.ioNamePtr = vName;
 pb.volumeParam.ioVRefNum = vRefNum;
 pb.volumeParam.ioVolIndex = 0;
 err = PBHGetVInfoSync ( &pb );
 
 return ( pb.volumeParam.ioVCrDat);
 }

Network Registration

Rather than identifying an unique Macintosh, you may decide that you want to prevent multiple copies of the same application running on a network. The method some developers use is to register a fictitious device on the network using NBP (Name Binding Protocol) with the name being single serial number of the license. Other attempts to register the same device and serial number give an error that the program acts on to deny the use of the program. Chapter 3 of Inside Macintosh: Networking is a useful reference for NBP.

 /* 
 * Registers a entity with the specified object and type on the
 * specified socket. The pointer to the NamesTableEntry is
 * returned in ntePtr if the function returns noErr.
 * 
 */
 OSErr MyRegisterName(ConstStr32Param entityObject, 
 ConstStr32Param entityType,
 short socket, 
 NamesTableEntry **ntePtr)
 {
 MPPParamBlock mppPB;
 OSErr result;
 Str32 entityZone = "\p*";
 
 /* Allocate non-relocatable memory in the system heap for 
 * the names table entity 
 */
 *ntePtr = (NamesTableEntry *) 
 NewPtrSys((Size)sizeof(NamesTableEntry));

 if ( ntePtr == NULL )
 {
 result = MemError(); /* Return memory error */
 }
 else
 {
 /* Build the names table entity */
 NBPSetNTE((Ptr) *ntePtr, 
 (Ptr) entityObject, 
 (Ptr) entityType, 
 (Ptr) entityZone, 
 socket);
 
 /* ioRefNum and csCode are filled in by 
 * PRegisterName's glue */
 mppPB.NBPinterval = 0x0f; /* Reasonable values for the */
 mppPB.NBPcount = 0x03; /* interval and retry count */
 mppPB.NBPentityPtr = (Ptr) *ntePtr;
 mppPB.NBPverifyFlag = (char) true; /* unique name */
 
 result = PRegisterName(&mppPB, false);

 if ( result != noErr )
 DisposePtr((Ptr) *ntePtr);
 }

 return ( result );
 }

Note: DTS advises against applications searching the entire intranet for a matching entity. Such a search is time consuming. On a large network with many zones, you can spend substantial amounts of time doing this search. This would be not be considered reasonable in startup code. Instead, we advise that you search the local zone. If necessary, implement an asynchronous background search into the other zones.

Thing You Shouldn't Do

We discourage you from trying to use special tracks on formatted floppies, or special floppies. Apple does not document the floppy drive sufficiently for DTS to support such an action. Also, DiskCopy and other disk copying programs work very well at copying floppies, thus defeating such schemes. (DiskCopy was written inside Apple with access to the source of the floppy driver; we do not publish these details externally.) You should not rely on specific bizarre sectors of the hard disk (Apple relies on multiple vendors for its components. You cannot make undocumented assumptions about a particular machine or class of machines.)

Note: At some point in the future, Apple will create machines which do not support 800K GCR-formatted floppies. You should not depend upon specific hardware features such as 800K GCR formatting for copy protection purposes.

Conclusion

Copy protection is difficult to implement, and it is difficult to find a scheme which is not easily broken. The Mac OS was not designed with copy protection in mind, and there is no unique serial number available across the entire set of Mac OS based computers. There are some techniques which can be used to help differentiate between Mac OS computers, and these techniques are described in this article.

There are many more sophisticated schemes for copy protection. If you are serious about copy protection, you should probably be contacting one of the many companies which specialize in such solutions, rather than writing a solution yourself. Both hardware solutions (such as ADB dongles) and software solutions (such as licensing software) are widely available from third parties. DTS does not support copy protection because of the significant compatibility liabilities it involves. DTS does not maintain expertise in copy protection techniques.

Further References

  1. Inside Macintosh:Devices.
  2. ATA Device Software Guide.
  3. Inside Macintosh:Networking, chapter 3, Name Binding Protocol SCSI-2 specification.

Acknowledgments

Thanks to Quinn, Jim Luther, Vinnie Moscaritolo, and Pete Gontier.


Brian Bechtel works in Developer Technical Support at Apple Computer, where he deals with PC Cards, PowerBooks, and device drivers. In his non-work life (yes, there is such a thing) he enjoys time with his family (Mary, Meg and Tacy), is passionate about the San Jose Sharks hockey team, and plays lousy acoustic guitar.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

Latest Forum Discussions

See All

Six fantastic ways to spend National Vid...
As if anyone needed an excuse to play games today, I am about to give you one: it is National Video Games Day. A day for us to play games, like we no doubt do every day. Let’s not look a gift horse in the mouth. Instead, feast your eyes on this... | Read more »
Old School RuneScape players turn out in...
The sheer leap in technological advancements in our lifetime has been mind-blowing. We went from Commodore 64s to VR glasses in what feels like a heartbeat, but more importantly, the internet. It can be a dark mess, but it also brought hundreds of... | Read more »
Today's Best Mobile Game Discounts...
Every day, we pick out a curated list of the best mobile discounts on the App Store and post them here. This list won't be comprehensive, but it every game on it is recommended. Feel free to check out the coverage we did on them in the links below... | Read more »
Nintendo and The Pokémon Company's...
Unless you have been living under a rock, you know that Nintendo has been locked in an epic battle with Pocketpair, creator of the obvious Pokémon rip-off Palworld. Nintendo often resorts to legal retaliation at the drop of a hat, but it seems this... | Read more »
Apple exclusive mobile games don’t make...
If you are a gamer on phones, no doubt you have been as distressed as I am on one huge sticking point: exclusivity. For years, Xbox and PlayStation have done battle, and before this was the Sega Genesis and the Nintendo NES. On console, it makes... | Read more »
Regionally exclusive events make no sens...
Last week, over on our sister site AppSpy, I babbled excitedly about the Pokémon GO Safari Days event. You can get nine Eevees with an explorer hat per day. Or, can you? Specifically, you, reader. Do you have the time or funds to possibly fly for... | Read more »
As Jon Bellamy defends his choice to can...
Back in March, Jagex announced the appointment of a new CEO, Jon Bellamy. Mr Bellamy then decided to almost immediately paint a huge target on his back by cancelling the Runescapes Pride event. This led to widespread condemnation about his perceived... | Read more »
Marvel Contest of Champions adds two mor...
When I saw the latest two Marvel Contest of Champions characters, I scoffed. Mr Knight and Silver Samurai, thought I, they are running out of good choices. Then I realised no, I was being far too cynical. This is one of the things that games do best... | Read more »
Grass is green, and water is wet: Pokémo...
It must be a day that ends in Y, because Pokémon Trading Card Game Pocket has kicked off its Zoroark Drop Event. Here you can get a promo version of another card, and look forward to the next Wonder Pick Event and the next Mass Outbreak that will be... | Read more »
Enter the Gungeon review
It took me a minute to get around to reviewing this game for a couple of very good reasons. The first is that Enter the Gungeon's style of roguelike bullet-hell action is teetering on the edge of being straight-up malicious, which made getting... | Read more »

Price Scanner via MacPrices.net

Take $150 off every Apple 11-inch M3 iPad Air
Amazon is offering a $150 discount on 11-inch M3 WiFi iPad Airs right now. Shipping is free: – 11″ 128GB M3 WiFi iPad Air: $449, $150 off – 11″ 256GB M3 WiFi iPad Air: $549, $150 off – 11″ 512GB M3... Read more
Apple iPad minis back on sale for $100 off MS...
Amazon is offering $100 discounts (up to 20% off) on Apple’s newest 2024 WiFi iPad minis, each with free shipping. These are the lowest prices available for new minis among the Apple retailers we... Read more
Apple’s 16-inch M4 Max MacBook Pros are on sa...
Amazon has 16-inch M4 Max MacBook Pros (Silver and Black colors) on sale for up to $410 off Apple’s MSRP right now. Shipping is free. Be sure to select Amazon as the seller, rather than a third-party... Read more
Red Pocket Mobile is offering a $150 rebate o...
Red Pocket Mobile has new Apple iPhone 17’s on sale for $150 off MSRP when you switch and open up a new line of service. Red Pocket Mobile is a nationwide MVNO using all the major wireless carrier... Read more
Switch to Verizon, and get any iPhone 16 for...
With yesterday’s introduction of the new iPhone 17 models, Verizon responded by running “on us” promos across much of the iPhone 16 lineup: iPhone 16 and 16 Plus show as $0/mo for 36 months with bill... Read more
Here is a summary of the new features in Appl...
Apple’s September 2025 event introduced major updates across its most popular product lines, focusing on health, performance, and design breakthroughs. The AirPods Pro 3 now feature best-in-class... Read more
Apple’s Smartphone Lineup Could Use A Touch o...
COMMENTARY – Whatever happened to the old adage, “less is more”? Apple’s smartphone lineup. — which is due for its annual refresh either this month or next (possibly at an Apple Event on September 9... Read more
Take $50 off every 11th-generation A16 WiFi i...
Amazon has Apple’s 11th-generation A16 WiFi iPads in stock on sale for $50 off MSRP right now. Shipping is free: – 11″ 11th-generation 128GB WiFi iPads: $299 $50 off MSRP – 11″ 11th-generation 256GB... Read more
Sunday Sale: 14-inch M4 MacBook Pros for up t...
Don’t pay full price! Amazon has Apple’s 14-inch M4 MacBook Pros (Silver and Black colors) on sale for up to $220 off MSRP right now. Shipping is free. Be sure to select Amazon as the seller, rather... Read more
Mac mini with M4 Pro CPU back on sale for $12...
B&H Photo has Apple’s Mac mini with the M4 Pro CPU back on sale for $1259, $140 off MSRP. B&H offers free 1-2 day shipping to most US addresses: – Mac mini M4 Pro CPU (24GB/512GB): $1259, $... Read more

Jobs Board

All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.