WO2007076665A1

WO2007076665A1 - Method, system and apparatus for managing license

Info

Publication number: WO2007076665A1
Application number: PCT/CN2006/002280
Authority: WO
Inventors: Yongzheng Xie; Zhong Lin
Original assignee: Huawei Technologies Co., Ltd.
Priority date: 2006-01-05
Filing date: 2006-09-04
Publication date: 2007-07-12
Also published as: CN1874218A

Abstract

Α method for managing a license includes the following steps: a license server receives a request for the license from a client (510); the license server generates a new license file according to said request (520); the license server transmits the new license file to the client (530). And there are also a system for managing the license and a license server. A mount of the licenses are managed automatically by implementing the invention, and there are many advantages such as the good security, high efficiency and so on, and generally it will not be fail.

Description

License management method, system and device

Technical field

The present invention relates to the field of information product protection, and in particular to a license

(License) management method, device and system. Background of the invention

In order to protect the intellectual property rights of information equipment, control its application scope, and ensure the legal benefits of product owners, current information products use various forms of protection technology to protect the legitimate rights and interests of developers, including serial number protection and password table protection. , CD physical protection, time limit protection, NAG window protection, key file protection, code pack protection, license protection, software dog encryption protection and many other programs.

Among them, the license protection scheme is widely used in commercial products. The license protection scheme needs to bind the application of the control object to the device feature and implement digital signature based on the characteristics of the control object, using a digital signature algorithm based on the asymmetric cryptosystem, and then store the signature data in the license file and issue it to the license file. Authorized user; During the operation of the product, the information device needs to obtain the digital signature from the license file on the one hand, and obtain the device identification from the product on the other hand, verify the content obtained by the two aspects, and then according to the verification result and the license file. The feature item in the specification specifies that the corresponding resources, services, and functions are enabled to achieve controlled operation of the product.

Figure 1 shows the digital signature verification model in the license protection scheme system. The digital signature based on the asymmetric cryptosystem is the core of the control in the license protection scheme system. The License Center digitally signs the device serial number (ESN) and feature (Feature) through the private key (private key) to obtain the license product feature information segment, and then generates a license. The file is sent to the license client (license Client); the information device as the license client uses itself after obtaining the license file The ESN and the Public Key are verified and decrypted to obtain the feature attributes of the device. In the prior art, there is a lack of effective management of the license file. When the license client needs to use the license file, the corresponding license file needs to be manually found and loaded into the information device. Therefore, when there are a large number of information devices, the corresponding license files may be very large, which makes the correspondence between the maintenance license files and the information devices very difficult, greatly increases the workload of the maintenance personnel, and artificially introduces the possibility of operation errors. Sex is also very big. Summary of the invention

It is an object of the present invention to provide a method of license management that automatically manages license files. The method includes the following steps:

The license server receives a license request from the client;

The license server generates a new license file according to the license request;

The license server transmits the new license file to the client.

The generating a new license file according to the license request is:

The license server finds the corresponding original license file stored locally according to the client characteristic information in the license request, and uses the original license file as a new license file or according to the original license file. Generate a new license file for all or part of the content.

The generating a new license file according to all or part of the original license file is:

The license server finds a license information segment corresponding to the client feature information from the original license file according to the client feature information in the license request, and assembles a new license according to the license information segment. Certificate document.

The receiving the client's license request further includes:

The license server analyzes the original license file, obtains and stores the client feature information and The correspondence of the original license file.

The generating a new license file according to the license request is:

The license server obtains a corresponding original license file from the corresponding relationship between the client feature information and the original license file according to the client feature information in the license request, and obtains a corresponding corresponding file from the original license file. The license information segment is assembled according to the obtained license information segment to generate a new license file.

The receiving the client's license request further includes:

The license server analyzes the original license file and obtains and stores the correspondence between the client feature information and the license information segment.

The generating a new license file according to the license request is:

The license server analyzes the license request, extracts client characteristic information therefrom, and searches for a corresponding license information segment according to the extracted client feature information to search for a corresponding relationship between the stored client feature information and the license information segment. And generate a new license file according to the obtained license information segment and the client feature information.

The assembly generates a new license file including:

The product feature information segment in the license information segment is added to the new license file. The generating of the new license file further includes:

Adding a content other than the full-text digital signature in the public information section of the license information section as a public information section of the new license, and adding a full-text digital signature of the public information section of the new license file to In the new license file.

The generating the new license file includes: copying the product feature information segment in the original license file stored locally by the license server into the product feature information segment in the new license file.

The client's license request includes client feature information.

The client feature information includes: a product name, a device identifier, and a product version.

Another object of the present invention is to provide a license management system that can automatically manage Licensing documents. The system includes:

Client, used to send a license request;

a license server, connected to the client through a network, for receiving a license request from a client, generating a new license file, and transmitting the generated new license file to the client;

The client is further configured to receive a license file from a license server and obtain license information from the received license file.

The license server includes:

An original license file analysis module for analyzing the original license file to obtain information in the original license file;

a client request receiving module, configured to receive a license request from the client; a new license file generating module, configured to obtain information in the original license file obtained by the original license file analysis module, and a license of the client request receiving module Request, generate a new license file;

A license file transfer module for transmitting a new license file generated by the new license file generation module to the client.

The system further includes:

a license file relay device connected to the client and the license server through the network, for receiving a license request sent by the client, and forwarding the license request to the license server; and also for receiving the license Server new license file and forward it to the client.

The license file relay device is a license file relay device group in which one or more license file relay devices are connected in series.

It is also an object of the present invention to provide a license server that can automatically manage license files. The license server includes:

Original license file analysis module, used to analyze the original license file, obtain the original license The information in the document;

a client request receiving module, configured to receive a license request of the client;

a new license file generating module, configured to generate a new license file according to the license information segment obtained by the original license file analysis module or the original license file;

A license file transfer module that transmits a new license file generated by the new license file generation module to the client.

The original license file analysis module includes:

An original license file storage unit for storing the original license file;

The original license file analysis unit is configured to analyze the original license file stored in the original license file storage unit, and obtain a correspondence between the license information segment or the original license file and the client feature information.

The original license file analysis module further includes an analysis result storage unit configured to store the correspondence relationship obtained by the original license file analysis unit.

The new license file generation module includes:

a client characteristic information analyzing unit, configured to obtain, from a client request, a client feature letter new license file synthesizing unit, configured to obtain, according to the client feature information obtained by the client feature information analyzing unit, the original license The file analysis module obtains the corresponding license information segment or the original license file, and generates a new license file according to the obtained license information segment or the original license file.

The new license file generation module further includes a digital signature unit for generating a digital signature of the new license file.

The license server further includes:

An original license file acquisition module for obtaining an original license file from an external device. The beneficial effects of the present invention are as follows: The invention centrally manages a large number of license files in the license server, automatically distributes the license files according to the request of the client, does not need to know the license file name when the client requests, realizes automatic management of the license file, avoids human error, greatly Reduced maintenance costs. The license file is transmitted between the license server and the client. The license file itself has a high security, which greatly reduces the possibility of leaks in network transmission.

In a preferred solution of the present invention, the new license file generated by the assembly can filter the original license file, extract only the information segments related to the requested client, and form a new license file, thereby reducing redundancy of network transmission. Data improves network transmission efficiency and client resolution efficiency.

In a preferred embodiment of the present invention, related information can also be forwarded through a simple license file relay device, which increases the flexibility of client deployment. BRIEF DESCRIPTION OF THE DRAWINGS

1 is a digital signature verification model in a prior art license protection scheme system; FIG. 2 is an example of an original license file in an embodiment of the present invention;

3 is an example of a new license file in an embodiment of the present invention;

4 is a block diagram of a license management system according to an embodiment of the present invention;

FIG. 5 is a flowchart of license management according to an embodiment of the present invention; FIG.

Figure 6 is a block diagram of a first embodiment of a license server in the license management system shown in Figure 4;

Figure 7 is a block diagram showing a second embodiment of the license server in the license management system shown in Figure 4;

8 is a block diagram showing an embodiment of an original license file analysis module in the license server shown in FIG. 6 or FIG. 7;

Figure 9 is a diagram of the new license file generation module in the license server shown in Figure 6 or Figure 7. Example block diagram. Mode for carrying out the invention

The core idea of the solution of the present invention is to centrally manage and decentralize the license files. Specifically, the license server (License Server) centrally manages and stores the original license files of the plurality of client devices; the client device sends a request for the license file to the license server, and the license server is configured according to the client device The request and the stored corresponding original license file generate a new license file and send to the client device.

In order to make the objects, technical solutions and advantages of the present invention more comprehensible, the present invention will be further described in detail with reference to the accompanying drawings.

Fig. 2 is a diagram showing an example of an original license file in the embodiment of the present invention. The original license file may be in the form of text and may include a public information segment and at least one product feature information segment, wherein the public information segment is not required.

The public information section may include, but is not limited to, copyright notice information, full-text digital signatures, and the like, and is used to protect the entire file from being modified. The product feature information segment may include, but is not limited to, plaintext data such as product name, product version, device identification, product characteristics, product feature attributes, and corresponding digital signatures. The product name, product version, and device identification are used to determine which device the information segment belongs to; where the product version is not required, for example, if the product does not have multiple versions or the product feature information segment can be used for multiple versions, the product feature information segment There is no product version in it. The product feature attribute describes the properties that the device is licensed to, such as the ability to perform certain functions, the maximum number of users, and so on. The original license file may contain multiple pieces of feature information of one device, or may contain pieces of feature information of multiple devices.

FIG. 3 is a schematic diagram of a new license file in the embodiment of the present invention. In the embodiment of the present invention, the new license file generated by the license server is basically the same as the original license file format, and the client does not have to understand the obtained license file. Whether the license file is a license server Reassemble the new license file generated by the build. In other words, the license server can directly send the stored original license file to the client device. Preferably, the following processing manner can be adopted:

The license server reassembles according to the request of the client device to generate a new license file, which only contains the product feature information segment required by the client, and removes information unrelated to the client to improve network transmission. Efficiency and client resolution efficiency. The product feature information segment of the new license file may be a corresponding product feature information segment copied from the original license file, so that the license server does not need to encrypt and decrypt the product feature information segment, and the implementation is simple, and the security requirement is also very low. When the new license file is different from the original license, the full-text digital signature of the original license file can no longer be used, the full-text digital signature can be removed, and the entire public information segment can be removed. Of course, the preferred method is the license server. Generate a full-text digital signature of the new license file.

The composition and basic working process of the license management system in the embodiment of the present invention will be described below with reference to FIG. The license management system in the embodiment of the present invention includes a license server 100 and a client 200. There can be more than one license server for distributed processing or backup; there can be more than one client, but one client is connected to at least one license server over the network. In order to improve the flexibility of the client deployment, the system may further include one or more license file relay devices 300, and the client 200 may be connected to the license file relay device 300 through the network, and the license file relay device 300 Further connected to the license server 100, the client 200 obtains the license file from the license server 100 by forwarding the license file relay device.

The license file relay device can directly forward the data between the client and the license server. At this time, the license file relay device is similar to a message forwarder; it can also be after receiving the client request or before the client request After obtaining the entire license file from the license server, the entire license file is forwarded to the client, and the license file relay device is similar. A combination of a simplified client and a simplified license server. The license file relay device in the system can also be connected in series one level, and the client obtains the license file through multiple forwarding. The network described above refers to all media that can be communicated between two devices, including but not limited to Ethernet, Wireless Local Area Network (WLAN), Asynchronous Transfer Mode (ATM) networks, Time Division Multiplexing (TDM) networks, and the like. There are also no restrictions on the communication protocol between the client, the license server, and the license file relay device, including but not limited to Transmission Control Protocol (TCP), User Data Protocol (UDP), File Transfer Protocol (FTP), and single file. Transmission Protocol (TFTP) and various custom protocols.

An application example of a license file relay device is given below. For example, if a device is connected to a network management server that manages the device through an RS-232 serial port, and the network management server can be connected to the license server through the Internet, the network management server can be relayed as a “license file”. The device forwards the license request sent by the client through the serial port to the license server through the Internet, and forwards the license file transmitted by the license server to the device through the serial port.

The specific implementation process of the method for license management in the embodiment of the present invention will be described below with reference to FIG.

Step 510: The license server receives a license request of the client.

Here, the license request received by the license server may be sent directly by the client, or may be forwarded by the license file relay device, and the license server considers the request sent by the client. The license request contains the client's feature information, such as the client's product name "XX switch", product version "1.0", and device ID "0050BA20CDD5".

Assume that there are multiple original license files in the specified directory c:\license in the license server. One of the original license files named licensel.txt includes the following.

Valley:

1 public information segment; The two product names are the product feature information sections of the product name "XX switch", the product version "1.0", and the device identifier "0050BA20CDD5";

The three product names are the product feature information sections of the product name "XX switch", product version "1,0", and device identifier "1040BA20CDD5";

Product feature information section for 4 product names "XX Router", product version "2.0", device ID "0050BA20CDD5". Find the correspondence between the client feature information and the original license file, and store the corresponding relationship; for example, record the license server with the product name "XX switch", product version "1.0", device identifier "0050BA20CDD5" The product feature information section exists in the file c:\license\licensel.txt. The license server can analyze all license files in the specified directory c:\license at startup, or it can be manually initiated to analyze some or all of the original license files. The original license file can be stored directly on the license server, or it can be obtained from the outside world and placed on the license server in various ways, such as copying it to the license server through a storage medium, or transferring it to the license through the network. In the server, and so on. The information segment corresponding to the information (which may include product feature information segments, may also include public information segments, etc.) is extracted and stored, such as stored in a database or in a specific file. After the analysis is completed, the original license file may not be retained. . In the example above, the product name "XX switch", product version "1.0", device ID "0050BA20CDD5" and its corresponding product feature information segments in the license server are stored in the database.

Step 520: The license server generates a new license file according to the request.

Specifically, the license server analyzes the client's request, obtains the client feature information, and generates a new license file that meets the client's requirements according to the client feature information. The easiest way to do this is for the license server to directly locate the original license file containing the client's feature information and use it directly as a new license file, or copy the original license file to get a new license file, instead of the original license. The files are filtered, which also achieves the purpose of automatic centralized management.

However, the preferred implementation method is that the license server only composes the corresponding license information requested by the client into a new license file, and the implementation method is further described below.

When assembling a new license file, the license server needs to obtain the license information segment corresponding to the client feature information, which is divided into the following three cases:

Case 1: If the license server has not analyzed the original license file before, the license server needs to search each original license file, find the original license file containing the client feature information, and obtain the corresponding client profile information. License information section. If the product feature information section of the product name "xx switch", the product version "1.0", and the device identifier "0050BA20CDD5" is found in the original license file c:\license\licensel.txt, the license server is again from the file. Obtain the corresponding license information segment, that is, the public information segment and the two product names in the file are the product feature information segments of the product name "xx switch", the product version "1.0", and the device identifier "0050BA20CDD5"'.

Case 2: The license server has previously analyzed and obtained the correspondence between the client feature information and the original license file, and then obtains the corresponding original license file from the corresponding relationship according to the client feature information, and obtains the client from the client. The license information segment corresponding to the feature information. If the license server has recorded the product name "xx switch", the product version "1.0", the device ID "0050BA20CDD5", and the corresponding original license file is c:\license\licensel.txt, the license server can directly find the original. The license file c:\license\licensel.txt, and the corresponding license information segment is obtained from it, that is, the public information segment and the two product names in the file are the product name "xx switch", the product version "1.0", the device Identify the product feature information section of "0050BA20CDD5". Case ³ : The license server has previously analyzed the original license file, and recorded the client feature information and its corresponding license information segment, then directly obtains the corresponding license information segment according to the client feature information, and does not need to search again. The original license file is gone.

After obtaining the license information segment corresponding to the client feature information, the license server can directly copy the product feature information segment into the new license file. For example, the product feature information sections of the product name "XX switch", the product version "1.0", and the device identifier "0050BA20CDD5" are directly copied to the new license file, and the new license file contains the product feature attributes. The client can control the relevant properties accordingly. In addition, the license server can also copy the public information segment to the new license file to provide more information. If the new license file is not identical to the original license file, the full-text digital signature can no longer be used. It cannot be copied to a new license file; in this case, the license server can also generate a new full-text digital signature for the new license file and place it in a new license file for more complete protection.

Step 530, the license server transmits the new license file to the client.

The license server transmits the new license file to the client through the network, where the client can be either the final client or the license file relay device; the license file relay device then re-applies the new license file Forwarded to the final client, or forwarded to the next level of license file relay, the license server does not need to care about what is directly connected to it.

The protocol to be transmitted can be via TCP, UDP, FTP, TFTP^^, or a custom protocol. Encryption can also be performed during the transfer. These are all techniques well known to those skilled in the art and will not be described again.

After the client obtains the license file, it can be verified and decrypted, which can be used to control its own functional attributes.

A specific implementation manner of the license server in the embodiment of the present invention will be described below with reference to FIG. 6 to FIG. Figure 6 is a first embodiment of a license server of the present invention. The license server 100 includes an original license file analysis module 110, a client request receiving module 120, a new license file generating module 130, and a license file transmitting module 140.

The original license file analysis module 110 is configured to analyze the stored original license file to obtain a correspondence between the client feature information and the license information segment or the original license file;

The client request receiving module 120 is configured to receive the client request, and send the received client request to the original license file analysis module 110 and the new license file generating module 130;

The new license file generation module 130 generates a new license file based on the client request from the client request receiving module 120 and the license information segment or the original license file from the original license file analysis module 110;

The license file transfer module 140 is for transmitting the generated new license file to the client.

For details on how the license server works, refer to the related description of the license management process described above.

Figure 7 shows a second embodiment of the license server of the present invention. In this embodiment, compared with the structure of the license server shown in FIG. 6, the license server 100 further adds an original license file obtaining module 150 for acquiring the original license file from the external device to the license server. The original license file is copied from the external storage medium (floppy disk, CD, etc.) to the license server, or the original license file is transferred to the license server via the network.

FIG. 8 is a block diagram showing the internal structure of the original license file analysis module 110 in FIG. 6 or 7. The original license file analysis module 110 includes an original license file analysis unit 111, an original license file storage unit 112, and an analysis result storage unit 113. Among them, the original Xu The certificate file analysis unit 111 is configured to analyze the original license file stored in the original license file storage unit 112 to obtain an analysis result; the original license file storage unit 112 is configured to store the original license file; the analysis result storage unit 112 It is used to store the analysis result obtained by the original license file analyzing unit 111. The analysis result is a correspondence between the license information segment or the original license file and the client feature information.

The original license file analysis module 110 may also include only the original license file analysis unit 111 and the original license file storage unit 112, and the analysis result of the original license file analysis unit 111 is directly sent to the new license file generation module 130.

FIG. 9 is a structural block diagram of a new license file generating module 130 in the license server shown in FIG. 6 or FIG. 7. The new license file generating module 130 includes a client feature information analyzing unit 131, a new license file synthesizing unit 132, and a digital signature unit 133. The client feature information analyzing unit 131 is configured to obtain a client from a client request. Feature information, the new license file synthesizing unit 132 is configured to obtain a corresponding license information segment or an original license file from the original license file analysis module 110 according to the client feature information, and obtain the digital license unit 133. The full-text digital signature of the new license file, synthesizing a new license file; the digital signature unit 133 is used to generate a full-text digital signature of the new license file.

Another embodiment of the new license file generating module 130 is to include only the client feature information analyzing unit 131 and the new license file synthesizing unit 132. The new license file synthesizing unit 132 may not filter the original license file, directly use the original license file corresponding to the 4 bar as a new license file, or directly copy the original license file as a new license file; The unit 132 may also not perform full-text digital signature on the new license file; the new license file synthesizing unit 132 may not put the public information segment into the new license file, and the new license file only includes the product feature information segment.

As can be seen from the above technical solution of the present invention, the present invention can centrally manage a large number of license files in the license server, and automatically distribute the license files according to the request of the client, the client When the request is made, the license file name does not need to be known, the automatic management of the license file is realized, the human error is avoided, and the maintenance cost is greatly reduced. The license file is transmitted between the license server and the client. The license file itself has high security and greatly reduces the possibility of leaks in network transmission.

In a preferred solution of the present invention, the original license file can be filtered, only the information segments related to the requested client are extracted and formed into a new license file, thereby reducing redundant data transmitted by the network and improving the data. effectiveness.

In a preferred embodiment of the present invention, related information can also be forwarded through a simple license file relay device, which increases the flexibility of client deployment.

The above is only a preferred embodiment of the present invention, but the scope of the present invention is not limited thereto, and any person skilled in the art can easily think of changes or within the technical scope disclosed by the present invention. Alternatives are intended to be covered by the scope of the present invention. Therefore, the scope of protection of the present invention should be determined by the scope of the claims.

Claims

Claim

A license management method, characterized in that it comprises the following steps:

The license server receives a license request from the client;

The license server transmits the new license file to the client.

2. The method of claim 1 wherein said generating a new license file based on said license request is:

The license server finds the corresponding original license file stored locally according to the client characteristic information in the license request, and uses the original license file as a new license file or in the original license file. Generate a new license file for all or part of the content.

The method according to claim 2, wherein the generating a new license file according to all or part of the content in the original license file is:

4. The method according to claim 1, wherein the receiving the client's license request further comprises:

The license server analyzes the original license file and obtains and stores the correspondence between the client feature information and the original license file.

The method according to claim 4, wherein said generating a new license file according to said license request is:

The license server obtains the corresponding original license file from the correspondence between the client feature information and the original license file according to the client feature information in the license request. And obtaining a corresponding license information segment from the original license file, and assembling a new license file according to the obtained license information segment.

The method according to claim 1, wherein the receiving the client's license request further comprises:

7. The method of claim 6 wherein said generating a new license file based on said license request is:

8. The method according to claim 3, 5 or 7, wherein the assembling the new license file comprises:

The product feature information segment in the license information segment is added to the new license file.

The method according to claim 8, wherein the generating the new license file further comprises:

Adding the content other than the full-text digital signature in the public information section of the license information section as a public information section of the new license, and adding the full-text digital signature of the new license file to the new license file in.

10. The method according to claim 1, wherein the generating the new license file comprises: copying the product feature information segment in the original license file stored locally by the license server into a product feature in the new license file. Information segment.

11. The method according to claim 1, wherein the client's license request includes client feature information.

The method according to claim 11, wherein the client feature information comprises: a product name, a device identifier, and a product version.

13. A license management system, comprising:

Client, used to send a license request;

The license management system according to claim 13, wherein the license server comprises:

The license management system according to claim 13 or 14, wherein the system further comprises:

The license management system according to claim 15, wherein said license The provable file relay device is a license file relay device group formed by connecting one or more license file relay devices in series.

17. A license server, comprising:

a new license file generating module, configured to generate a new license file according to the information in the original license file obtained by the original license file analysis module and the license request of the client request receiving module;

The license server according to claim 17, wherein the original license file analysis module comprises:

An original license file storage unit for storing the original license file;

The license server according to claim 18, wherein the original license file analysis module further comprises an analysis result storage unit configured to store the correspondence relationship obtained by the original license file analysis unit.

The license server according to claim 17, 18 or 19, wherein the new license file generating module comprises:

a client feature information analyzing unit, configured to obtain client feature information from a client request;

a new license file synthesizing unit, configured to analyze the unit according to the client characteristic information The obtained client feature information is obtained from the original license file analysis module to obtain a corresponding license information segment or an original license file, and a new license file is generated according to the obtained license information segment or the original license file.

The license server according to claim 20, wherein the new license file generating module further comprises a digital signature unit for generating a digital signature of the new license file.

The license server according to claim 21, wherein the license server further comprises:

An original license file acquisition module for obtaining an original license file from an external device.