PENN PRINTOUT
The University of Pennsylvania's Online Computing Magazine

PENN PRINTOUT April 1992 - Volume 8:7

[Printout | Contents | Search ]


Are you legal?

By Donna Milici

It's 5 PM and you haven't finished your report, which is due at 9 AM tomorrow. No problem-you'll simply take the files home with you and finish everything tonight. After all, you have copies of the software applications you'll need on your home machine.

Although most people would never think of blatantly violating copyright laws by providing their friends with illegal copies of commercial software, the scenario described above is fairly typical. Many would argue that they are within their rights making copies of commercial software for home use as long as they're using the software on only one machine at a time. Is this legal? The answer is that it depends-licensing conditions vary considerably among software developers, and it is your responsibility to know the specific rules for each software application you use.


Who's watching?

Are you aware that the University's Internal Audit Department could audit your office, department, or lab at any time to determine whether you are in compliance with copyright laws? Do you know about the industry watchdog, the Software Publishers Association (SPA)? SPA, with a membership of approximately 900, including software developers (Lotus, Microsoft, etc.) and software distributors, is engaged in an effort to increase awareness about software piracy. In addition to making available information about the legal use of software, the SPA actively pursues those suspected of copyright violations. It has filed more than 100 lawsuits against individuals and organizations, including non-profit institutions, when it has found sufficient evidence of unauthorized duplication of software. The SPA even provides a toll-free hotline number to accept reports of copyright violations.

One of the more noteworthy lawsuits filed by SPA was against the University of Oregon, the first higher-education institution involved in a software copyright suit. Filed on behalf of several software vendors, the federal suit alleged that University employees made unauthorized copies of software programs and training manuals. In its settlement the university agreed to pay $130,000, as well as organize and host a national conference on copyright law and software use. According to an SPA representative, the organization is currently investigating several reports of universities using unauthorized copies of computer software.


Copyright laws and ethical use

Unauthorized use of copyrighted software is in direct violation of U.S. copyright laws and is considered a federal crime. Under Title 17, Section 106 of the U.S. Copyright Code it is generally illegal to make or distribute copies of copyrighted material without authorization. One exception, specified in Section 117, is the user's right to make a copy for archival purposes. According to the SPA, penalties, in addition to a potential civil suit, can include fines of up to $100,000 and jail terms of up to five years.

Many efforts, both local and international, are underway to increase awareness about the legal and ethical use of software among educational institutions. EDUCOM, a non-profit consortium of higher education institutions committed to the use and management of information technology, publishes a code that many colleges and universities have adopted. At Penn, several ethical use policies exist, and numerous efforts are underway to guide the University community in the ethical use of computers, software, networks, and intellectual property. Penn initiatives include:

  • University of Pennsylvania Policy on Reproduction of Software (1985): The University of Pennsylvania does not condone or tolerate the illegal copying of computer software by staff, faculty, or students. It is important that the University adhere to its contractual responsibilities, that it recognize its obligations under the copyright law, and that it has paid the agreed upon prices to software vendors.
  • Several schools and organizations on campus have established their own policies to supplement the University policy (e.g., the ENIAC policy posted on PennInfo under "Policies and Procedures").
  • The Academic Committee of the Advisory Council to the Vice Provost for Information Systems and Computing is currently drafting a statement on ethical behavior with respect to the electronic information environment, to be endorsed as University policy.
  • The Office of Data Administration and Information Resource Planning is developing an information security and access policy that, among other things, will provide standards for the appropriate use of all software and information technology.
  • The office of Data Communications and Computing Services has convened a working group that is developing University network policies to address access, acceptable use, security, and privacy.


What's in it for me?

In addition to protection from legal liability, the benefits you'll gain from adhering to the license agreements for copyrighted software include:

  • Complete documentation, including user guides, reference materials, and tutorials
  • Access to support
  • Notification of, and access to, bug fixes and interim releases
  • Notification of product updates and possible incentives for upgrading existing versions
Moreover, the University works closely with software vendors to negotiate educational discounts, volume purchase agreements, and site licenses to help ease the burden of software costs to campus users. It must, therefore, be able to present itself as an institution that respects the work of software developers and publishers, and strives to ensure that they are fairly compensated.


Adhering to license terms

Make sure you read and adhere to the terms of the software licenses for all the applications you use. Most commercial license agreements include the following standard conditions (see sidebar opposite for specific examples from several popular software vendors):

  • Breaking the shrink wrap on the software package or the seal on the disk envelope constitutes acceptance of the terms and conditions of the software license.
  • If you do not agree to these terms and conditions, you are required to return the unopened software package (manuals and disks) to the place of sale for a refund.
  • The software is owned by the developer and is protected by U.S. copyright law and international treaty provisions.
  • You may either make one copy of the software for backup or archival purposes or transfer the software to a single hard disk and retain the original software for backup or archive.
  • Modifications to the software and decompiling of the program code require the permission of the copyright holder.
  • Development of new works based upon the licensed software is not allowed without the permission of the copyright holder.
Two other classes of software-shareware and freeware-are also covered by copyright, but the distribution terms are very different. Selling software as shareware is a marketing approach and does not change the legal requirements with respect to copyright. Shareware purchasers are authorized to make and distribute copies of the software to others, but anyone who adopts the software for use is required to pay for it. ProComm 2.4.2, the CRC-supported communications software, falls into the shareware category. The distribution conditions for freeware are in direct opposition to normal copyright conditions in that freeware licenses generally stipulate that copies of the software can be made for both archival and distribution purposes as long as distribution is not for profit. Freeware includes many desk accessories and utilities.

The only type of software that can be freely copied and distributed is public domain software, which comes into being when the original copyright holder explicitly relinquishes all rights to the software. Game software on public bulletin boards fall into this category.


Passing an audit

Would you or your organization be in compliance if Internal Audit or the SPA were to audit your computing environment? It is your responsibility as an individual software user, network administrator, or lab manager to be able to prove compliance with software copyright laws. The following guidelines are provided to assist you.

  • Keep a log of all software that is purchased, and store original disks and licensing agreements in a logical order in a safe location.
  • Keep invoices and receipts as proof of purchase.
  • Register all software so that the publishers will have records of your purchases.
  • Inventory all existing personal, office, or lab software. Include in your tally software being used from floppy disks, hard disks, network servers, and on home or portable machines.
  • Use a database or other tracking mechanism to record all software inventoried. Include fields for important data such as purchase date, registration date, serial number, version number, machine(s) on which software is installed, updates, etc.
  • Compare the software in the inventory against the respective licensing agreements.
  • Make sure that, where required, there exists an original set of disks and documentation for all software installed on floppy disks, hard disks, and networks.
  • Erase software that requires an original set of disks and manuals but for which none can be found, and purchase legitimate copies of software for all machines that are required to have them.
  • Don't give away previous versions when upgrading existing software.
  • Don't make duplicate copies of software for colleagues or for other machines in your office or lab unless you have a licensing agreement that specifically states that such duplication is authorized.
  • Don't make duplicate copies of software for your home machine or portable computer unless the terms of your licensing agreement specify that you may.
  • When providing licensed software on a server, meter its use so that you don't exceed the number of concurrent uses permitted.
  • Make sure that copyrighted software in classrooms and labs is licensed, and that precautions are used to prevent illegal copying.

Software inventory tools

Employing special diagnostics programs that will provide an inventory or listing of software resident on computer systems can make tracking software use much easier. Examples of such programs include Norton Utilities or Xtree for IBM PC/compatible systems, and Apple's System 7.0 Compatibility Checker or applications such as Status*Mac and Help! for Macintosh systems. In addition, the SPA provides a software inventory tool, SPAudit, at no cost for IBM PC/compatible systems (a similar tool for Macintosh systems will be available shortly). SPAudit will search a microcomputer hard disk for the presence of more than 675 commercial software products and itemize each copy that it identifies. Copies of SPAudit can be obtained without charge by bringing a blank disk to the Computing Resource Center (CRC) at 38th and Locust Walk or by contacting SPAudit, 1101 Connecticut Ave. NW, Suite 901, Washington, D.C. 20036; 202/452-1600 (phone); 202/223-8756 (fax).


An ongoing project

Your commitment to adhere to software licenses cannot be viewed as a "project du jour"-it's a continual process that requires a mechanism for tracking software acquisition and use in your environment. The mechanism must address handling upgrades, staff turnover, and machines being phased into and out of use. The cost to ensure compliance to software copyright is admittedly high, both in time and in dollars, but the price is potentially much higher if you are found to be in violation.


Sidebar: License examples: terms and variations

The following excerpts describing selected commercial software licenses illustrate the variations in terms among software developers and the trend in the industry to adapt license conditions to the way people work.

Microsoft: Microsoft's licensing policy allows you to use one copy of the software on your principal computer and a second copy on a home or laptop computer in certain circumstances; i.e., if you have a Microsoft product loaded on the hard disk or other storage device of your computer and you use that computer at least 80 percent of the time it is powered up, then you may make a second copy for home or laptop use. In addition, the license sets out the rules for concurrent use on a computer network. To comply with the concurrent license, adequate controls and mechanisms must be in place to ensure that a network has at least as many licenses as there are users of the product at any one time. Electronic or manual controls or procedures are required to justify the calculation of the number of licenses.

Claris: Claris Corp's. new software license program, effective March 13, 1992, addresses home and travel use, and concurrent use in network environments. Claris software is licensed to an individual user and accommodates users who work on more than one computer. For example, when not in the office, a user can legally use a copy of the software on a portable computer or on a second computer at home; only one copy of software with a specific serial number can be in use at one time, and 80 percent of the use must occur at the primary work location. The license also provides for concurrent use in networked environments that maintain a network management application that meters software usage and can count and "lock out" users whenever the number of concurrent users exceeds the number of licensed copies. Customers can choose their preferred metering software.

WordPerfect: WordPerfect's new licensing policy allows people who buy single software packages to make a copy on a home or travel computer with the stipulation that both copies never be used at the same time. However, this new policy does not apply to most software purchased for use at the University. WordPerfect Corp. software purchased under the discounted single-unit program (i.e., $135 special discount price, with "ed" appearing in the serial number) does not fall under the new licensing policy. WordPerfect Corp. feels that because educational pricing is extended to faculty, staff, and students to purchase software for personal use, the home and travel use provision of the new license agreement does not apply to these discounted pro-ducts. The home and travel provision also does not apply to the 8-for-1 licensing program for schools.


DONNA MILICI is Manager of Resource Planning for the Computing Resource Center.