Abstract: A method and apparatus provide a level of authentication or a computer software program sign-on that is intermediate trust-based licensing and hardware based protection. Entry of a registration name is required at the time of initial use of the program, and at each invocation of the program the computer determines if the invocation is within the freshness interval (based upon the number of sign-ons, e.g. 30, or the passage of time, e.g. 30 days). If the sign-on is not within the freshness level, the computer and display screen provide a re-authentication inquiry, which may require a response before a standard sign on is allowed. If the re-authentication response is at odds with the initial registration name, standard sign-on may be precluded, and the screen displays a phone/fax number or electronic address to contact for appropriate registration information.