CN101541002A - Web server-based method for downloading software license of mobile terminal - Google Patents
Web server-based method for downloading software license of mobile terminal Download PDFInfo
- Publication number
- CN101541002A CN101541002A CN200810034947A CN200810034947A CN101541002A CN 101541002 A CN101541002 A CN 101541002A CN 200810034947 A CN200810034947 A CN 200810034947A CN 200810034947 A CN200810034947 A CN 200810034947A CN 101541002 A CN101541002 A CN 101541002A
- Authority
- CN
- China
- Prior art keywords
- web server
- portable terminal
- software
- key
- identification information
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Images
Landscapes
- Storage Device Security (AREA)
Abstract
The invention relates to a Web server-based method for downloading a software license of a mobile terminal, which realizes the authentication and protection of software of the mobile terminal. The method comprises a technical proposal that: through comparison of an authentication code calculated by the mobile terminal and an authentication code calculated by the Web server in the Web server, whether the authentication can be obtained is determined. After the software of the mobile terminal passes the authentication, the corresponding software license is dispensed according to the specific requirement of the applied and used software. The method is applied to the field of mobile communication.
Description
Technical field
The present invention relates to a kind of method for down loading of software license, relate in particular to a kind of portable terminal and utilize Web server to carry out the method that software license is downloaded.
Background technology
Along with the continuous increase of bandwidth and the continuous introducing of new business, the software function of portable terminal also constantly strengthens.When having made things convenient for the user, also brought corresponding repayment such as download functions such as music, recreation, maps for content supplier.But because software reproducibility and portability, mobile terminal software is being faced with the same pirate situation of computer software.Along with the fusion day by day of mobile network and internet, have higher requirement to the protection of mobile terminal software in market.
At present, the protection of mobile terminal software also mainly is referred from the guard method of computer software, mainly contains input number of registration, external softdog or download mode such as the certificate of authority.Though the method simple and fast of input number of registration, fail safe is lower, is easy to victim and steals or decode, and number of registration is not portable yet in addition or memory, is not suitable for the software protection of portable terminal.
The method of softdog need be to the external independent hardware identification equipment of portable terminal, though it is safe, but carry inconvenience, keeping difficulty, also need the requirement of standard that the external design of portable terminal is proposed in addition, therefore also be difficult to popularize all portable terminals.
The guard method of downloading the certificate of authority is comparatively general, and it protects software content by cryptographic principle, and conditions such as the rights of using of all right flexible configuration software, access times in the certificate are therefore very popular.But this method need be by means of the fail safe of user's SIM card under most conditions, the condition of setting up that the security information of storing in the dependence SIM card is downloaded as certificate.Therefore, this method does not also have the real software security protection that realizes based on portable terminal self.
Summary of the invention
The objective of the invention is to address the above problem, a kind of method for downloading software license of the portable terminal based on Web server is provided,, realize authentication and protection mobile terminal software by the intrinsic parameter of the Internet Web server and portable terminal self.
Technical scheme of the present invention is: the present invention has disclosed a kind of method for downloading software license of the portable terminal based on Web server, comprising:
(1) portable terminal sends the request of access to Web server, and this access request comprises the unique identification information of this portable terminal self;
(2) this Web server is according to this unique identification information in this access request, and judgement should select to calculate first key of authentication code, produces random number and issues this portable terminal, and calculate first authentication code according to this random number;
(3) this portable terminal utilizes second key of self storing that this random number is calculated second authentication code, and issues this Web server;
(4) this Web server oneself this first authentication code and second authentication code of receiving relatively, if both are identical the expression authentication by and enter step (5), otherwise expression authentification failure and refusal provide follow-up service;
(5) behind authentication success, this portable terminal sends the specific requirement of software identification information and this software of application use to this Web server;
(6) after this Web server receives this software identification information and this specific requirement, content in this specific requirement is compared with set strategy, if this specific requirement meets set strategy, then allot corresponding software license to this portable terminal, if this specific requirement does not meet set strategy, then refusal uses the application of this software.
The method for downloading software license of above-mentioned portable terminal based on Web server, wherein, the unique identification information of the portable terminal self in the step (1) is a chip id number.
The method for downloading software license of above-mentioned portable terminal based on Web server, wherein, second key in the step (3) is to be stored in the memory cell of portable terminal.
The method for downloading software license of above-mentioned portable terminal based on Web server, wherein, the application in the step (5) uses the specific requirement of this software to comprise the service time and the access times of software.
The method for downloading software license of above-mentioned portable terminal based on Web server, wherein, the set strategy in the step (6) is by the corresponding relation between the unique identification information of the rights of using of predefined this software of software vendor and this portable terminal self.
The method for downloading software license of above-mentioned portable terminal based on Web server, wherein, this method also is included in sets up a database with key corresponding relation and licence corresponding relation between storage and the different mobile terminal on the Web server, wherein this key corresponding relation is that Web server is after receiving the unique identification information that portable terminal sends, according to this unique identification information inquire between Web server self and the portable terminal key to the relation, this licence corresponding relation is meant the archive database of setting up for the different software of different mobile terminal.
The method for downloading software license of above-mentioned portable terminal based on Web server, wherein, verification process is to adopt symmetric cryptography mechanism, first key of Web server storage and second key of mobile terminal stores are identical keys.
The method for downloading software license of above-mentioned portable terminal based on Web server, wherein, verification process is to adopt asymmetric encryption mechanism, and what portable terminal was preserved is private key, and what Web server was preserved is PKI.
The present invention contrasts prior art following beneficial effect: whether the present invention can access authentication with affirmation by relatively whether the authentication code of portable terminal calculating is identical with the authentication code that Web server calculates on Web server.Reauthentication by after use the specific requirement of software to allot corresponding software licensing card according to application again.The contrast prior art, the present invention has really realized the software security protection based on portable terminal self.
Description of drawings
Fig. 1 is the connection diagram of portable terminal of the present invention and Web server.
Fig. 2 is the flow chart of preferred embodiment of the method for downloading software license of the portable terminal based on Web server of the present invention.
Fig. 3 is the schematic diagram of key corresponding relation of the present invention.
Fig. 4 is the schematic diagram of licence corresponding relation of the present invention.
Embodiment
The invention will be further described below in conjunction with drawings and Examples.
Fig. 1 shows the annexation of portable terminal of the present invention and Web server.Multi-section portable terminal 10a～10c links to each other with the Internet 13 by mobile network 11 respectively, links to each other by gateway 12 between mobile network 11 and the Internet 13.The software that in portable terminal, needs protection dispatch from the factory or download and install after be through encryption, can not directly move.Move these protected software if desired, portable terminal needs at first to download corresponding licence to the Web server application.Fig. 2 shows portable terminal is downloaded the method for software license from Web server flow process.Seeing also Fig. 2, is the detailed description to each step in this method below.
Step S100: portable terminal sends the request of access to Web server, and the request of access comprises the unique identification information of portable terminal self.
In the present embodiment, the unique identification information of portable terminal self for example is chip id number (CHIP_ID).
Step S101:Web server is according to the unique identification information (being chip id CHIP_ID) that inserts in the request, and judgement should select to calculate the first key K ey_web of authentication code, produces random number R N, and calculates the first authentication code AUTH_web according to random number R N.
The first key K ey_web is stored in the database of Web server, is to inquire about to obtain from the key corresponding relation of this database.The key of this portable terminal of unique identification information match query that so-called key corresponding relation is a Web server to be sent according to portable terminal is right, as shown in Figure 3.
Step S102:Web server is issued portable terminal with random number R N.
Step S103: portable terminal utilizes the second key K ey_ME that self stores that random number R N is calculated the second authentication code AUTH_ME, and issues Web server.
The second key K ey_ME is stored in portable terminal inside for example in the memory cell, but not the SIM/USIM card, and this is different with ordinary numbers certificate pattern method for down loading maximum.
If what verification process adopted is symmetric cryptography mechanism, portable terminal and Web server storage is an identical key so.If what verification process adopted is asymmetric encryption mechanism, what portable terminal was preserved so is private key, and what Web server was preserved is PKI.
Step S104:Web server is oneself the first authentication code AUTH_web and the second authentication code AUTH_ME that receives relatively, if both are identical expression authentication by and enter step S105, if both differences then represent authentification failure and refusal provides follow-up service, flow process finishes.
Step S105: portable terminal sends the specific requirement SW_application_list of software identification information SW_ID and this software of application use to Web server.
In the present embodiment, application uses the specific requirement SW_application_list of this software to comprise service time of software and access times etc.
Step S106:Web server will apply for using the specific requirement of software to compare with set strategy, if the specific requirement SW_application_list of software meets set strategy, then enter step S107, if the specific requirement SW_application_list of software does not meet set strategy, then enter step S108.
Set strategy is the corresponding relation between the rights of using of predefined this software of software vendor and the unique identification information of portable terminal self (for example chip id).
Step S107:Web server is allotted corresponding software license to portable terminal, and the licence content can be but be not limited to time or the number of times that this soft ware authorization uses.
Flow process finishes, and portable terminal will move protected software according to the License Info that licence provides.
Allotting corresponding software license is to carry out according to the licence corresponding relation of storing in the Web server database.The licence corresponding relation is meant an archive database of setting up for the different protected software of different mobile terminal.Its corresponding software function can be set up, inquire about and manage to Web server according to CHIP_ID number of portable terminal.The licence corresponding relation as shown in Figure 4.
Step S108:Web server refusal portable terminal uses the application of this software.Flow process finishes.
The software and the portable terminal self that need protection can be realized man-to-man binding by above-mentioned method, the real effective protection that realizes mobile terminal software.
The foregoing description provides to those of ordinary skills and realizes or use of the present invention; those of ordinary skills can be under the situation that does not break away from invention thought of the present invention; the foregoing description is made various modifications or variation; thereby protection scope of the present invention do not limit by the foregoing description, and should be the maximum magnitude that meets the inventive features that claims mention.
Claims (8)
1, a kind of method for downloading software license of the portable terminal based on Web server comprises:
(1) portable terminal sends the request of access to Web server, and this access request comprises the unique identification information of this portable terminal self;
(2) this Web server is according to this unique identification information in this access request, and judgement should select to calculate first key of authentication code, produces random number and issues this portable terminal, and calculate first authentication code according to this random number;
(3) this portable terminal utilizes second key of self storing that this random number is calculated second authentication code, and issues this Web server;
(4) this Web server oneself this first authentication code and second authentication code of receiving relatively, if both are identical the expression authentication by and enter step (5), otherwise expression authentification failure and refusal provide follow-up service;
(5) behind authentication success, this portable terminal sends the specific requirement of software identification information and this software of application use to this Web server;
(6) after this Web server receives this software identification information and this specific requirement, content in this specific requirement is compared with set strategy, if this specific requirement meets set strategy, then allot corresponding software license to this portable terminal, if this specific requirement does not meet set strategy, then refusal uses the application of this software.
2, the method for downloading software license of the portable terminal based on Web server according to claim 1 is characterized in that, the unique identification information of the portable terminal self in the step (1) is a chip id number.
3, the method for downloading software license of the portable terminal based on Web server according to claim 1 is characterized in that second key in the step (3) is to be stored in the memory cell of portable terminal.
4, the method for downloading software license of the portable terminal based on Web server according to claim 1 is characterized in that the application in the step (5) uses the specific requirement of this software to comprise the service time and the access times of software.
5, the method for downloading software license of the portable terminal based on Web server according to claim 1, it is characterized in that the set strategy in the step (6) is by the corresponding relation between the unique identification information of the rights of using of predefined this software of software vendor and this portable terminal self.
6, the method for downloading software license of the portable terminal based on Web server according to claim 1, it is characterized in that, this method also is included in sets up a database with key corresponding relation and licence corresponding relation between storage and the different mobile terminal on the Web server, wherein this key corresponding relation is that Web server is after receiving the unique identification information that portable terminal sends, according to this unique identification information inquire between Web server self and the portable terminal key to the relation, this licence corresponding relation is meant the archive database of setting up for the different software of different mobile terminal.
7, the method for downloading software license of the portable terminal based on Web server according to claim 1, it is characterized in that, verification process is to adopt symmetric cryptography mechanism, and first key of Web server storage and second key of mobile terminal stores are identical keys.
8, the method for downloading software license of the portable terminal based on Web server according to claim 1 is characterized in that, verification process is to adopt asymmetric encryption mechanism, and what portable terminal was preserved is private key, and what Web server was preserved is PKI.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810034947A CN101541002A (en) | 2008-03-21 | 2008-03-21 | Web server-based method for downloading software license of mobile terminal |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200810034947A CN101541002A (en) | 2008-03-21 | 2008-03-21 | Web server-based method for downloading software license of mobile terminal |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN101541002A true CN101541002A (en) | 2009-09-23 |
Family
ID=41123924
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200810034947A Pending CN101541002A (en) | 2008-03-21 | 2008-03-21 | Web server-based method for downloading software license of mobile terminal |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN101541002A (en) |
Cited By (15)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101853359A (en) * | 2010-05-25 | 2010-10-06 | 中华电信股份有限公司 | Software license, prevention method and system based on application software dispersion |
| CN101984575A (en) * | 2010-10-14 | 2011-03-09 | 中兴通讯股份有限公司 | Method and device for protecting mobile terminal software |
| CN103065071A (en) * | 2012-12-14 | 2013-04-24 | 北京思特奇信息技术股份有限公司 | Software copyright control method and system |
| WO2013155887A1 (en) * | 2012-04-21 | 2013-10-24 | 华为技术有限公司 | Method, device and system for interaction between web client terminal and server |
| CN103400062A (en) * | 2013-07-30 | 2013-11-20 | 深圳创维数字技术股份有限公司 | Method and system for authorized use of software |
| CN103457922A (en) * | 2012-06-05 | 2013-12-18 | 腾讯科技（深圳）有限公司 | Electronic authentication client-side system, processing method, electronic authentication system and method |
| CN103560997A (en) * | 2013-10-09 | 2014-02-05 | 北京奇虎科技有限公司 | Application program download management method and device and download server |
| CN103714638A (en) * | 2013-03-15 | 2014-04-09 | 福建联迪商用设备有限公司 | Method and system for quickly locating terminal master key downloading failure |
| CN104010044A (en) * | 2014-06-12 | 2014-08-27 | 北京握奇数据系统有限公司 | Application limitation installing method, manager and terminal based on trusted execution environment technology |
| CN104715187A (en) * | 2013-12-11 | 2015-06-17 | 国际商业机器公司 | Method and apparatus used for authenticating nodes of electronic communication system |
| WO2015158173A1 (en) * | 2014-04-18 | 2015-10-22 | 天地融科技股份有限公司 | Agreement key-based data processing method |
| WO2015180459A1 (en) * | 2014-05-26 | 2015-12-03 | 国云科技股份有限公司 | Method for verifying license of web system based on multiway tree search |
| CN105262605A (en) * | 2014-07-17 | 2016-01-20 | 阿里巴巴集团控股有限公司 | Method, apparatus and system for obtaining local information |
| CN108121898A (en) * | 2016-11-30 | 2018-06-05 | 西门子公司 | A kind of program protection method and device |
| US20220012310A1 (en) * | 2020-03-31 | 2022-01-13 | Boe Technology Group Co., Ltd. | Method for license authentication, and node, system and computer-readable storage medium for the same |
-
2008
- 2008-03-21 CN CN200810034947A patent/CN101541002A/en active Pending
Cited By (24)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101853359A (en) * | 2010-05-25 | 2010-10-06 | 中华电信股份有限公司 | Software license, prevention method and system based on application software dispersion |
| CN101984575A (en) * | 2010-10-14 | 2011-03-09 | 中兴通讯股份有限公司 | Method and device for protecting mobile terminal software |
| US8751824B2 (en) | 2010-10-14 | 2014-06-10 | Zte Corporation | Method and apparatus for protecting software of mobile terminal |
| CN101984575B (en) * | 2010-10-14 | 2015-06-03 | 中兴通讯股份有限公司 | Method and device for protecting mobile terminal software |
| WO2013155887A1 (en) * | 2012-04-21 | 2013-10-24 | 华为技术有限公司 | Method, device and system for interaction between web client terminal and server |
| CN103457922A (en) * | 2012-06-05 | 2013-12-18 | 腾讯科技（深圳）有限公司 | Electronic authentication client-side system, processing method, electronic authentication system and method |
| US9998440B2 (en) | 2012-06-05 | 2018-06-12 | Tencent Technology (Shenzhen) Company Limited | System and processing method for electronic authentication client, and system and method for electronic authentication |
| CN103065071A (en) * | 2012-12-14 | 2013-04-24 | 北京思特奇信息技术股份有限公司 | Software copyright control method and system |
| CN103714638B (en) * | 2013-03-15 | 2015-09-30 | 福建联迪商用设备有限公司 | A kind of method and system of quick position terminal master key failed download |
| CN103714638A (en) * | 2013-03-15 | 2014-04-09 | 福建联迪商用设备有限公司 | Method and system for quickly locating terminal master key downloading failure |
| CN103400062A (en) * | 2013-07-30 | 2013-11-20 | 深圳创维数字技术股份有限公司 | Method and system for authorized use of software |
| CN103560997A (en) * | 2013-10-09 | 2014-02-05 | 北京奇虎科技有限公司 | Application program download management method and device and download server |
| CN104715187A (en) * | 2013-12-11 | 2015-06-17 | 国际商业机器公司 | Method and apparatus used for authenticating nodes of electronic communication system |
| CN104715187B (en) * | 2013-12-11 | 2017-11-14 | 国际商业机器公司 | Method and apparatus for the node in certification electronic communication system |
| WO2015158173A1 (en) * | 2014-04-18 | 2015-10-22 | 天地融科技股份有限公司 | Agreement key-based data processing method |
| WO2015180459A1 (en) * | 2014-05-26 | 2015-12-03 | 国云科技股份有限公司 | Method for verifying license of web system based on multiway tree search |
| CN104010044A (en) * | 2014-06-12 | 2014-08-27 | 北京握奇数据系统有限公司 | Application limitation installing method, manager and terminal based on trusted execution environment technology |
| CN105262605A (en) * | 2014-07-17 | 2016-01-20 | 阿里巴巴集团控股有限公司 | Method, apparatus and system for obtaining local information |
| WO2016008349A1 (en) * | 2014-07-17 | 2016-01-21 | 阿里巴巴集团控股有限公司 | Local information acquisition method, apparatus and system |
| CN105262605B (en) * | 2014-07-17 | 2018-09-25 | 阿里巴巴集团控股有限公司 | A kind of method, apparatus and system obtaining local information |
| US11240210B2 (en) | 2014-07-17 | 2022-02-01 | Advanced New Technologies Co., Ltd. | Methods, apparatuses, and systems for acquiring local information |
| CN108121898A (en) * | 2016-11-30 | 2018-06-05 | 西门子公司 | A kind of program protection method and device |
| US20220012310A1 (en) * | 2020-03-31 | 2022-01-13 | Boe Technology Group Co., Ltd. | Method for license authentication, and node, system and computer-readable storage medium for the same |
| US11790054B2 (en) * | 2020-03-31 | 2023-10-17 | Boe Technology Group Co., Ltd. | Method for license authentication, and node, system and computer-readable storage medium for the same |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN101541002A (en) | Web server-based method for downloading software license of mobile terminal | |
| US20050137889A1 (en) | Remotely binding data to a user device | |
| CN103067914B (en) | Be present in the mobile confidence platform (MTP) on WTRU | |
| US9215593B2 (en) | Systems and methods for providing security to different functions | |
| CN101589361B (en) | Controlling distribution and use of digital identity representations | |
| EP2420036B1 (en) | Method and apparatus for electronic ticket processing | |
| CN103310169B (en) | A kind of method protecting SD card data and protection system | |
| US20060089123A1 (en) | Use of information on smartcards for authentication and encryption | |
| CN103198030A (en) | Method for accessing a secure storage, secure storage and system comprising the secure storage | |
| CN103250434A (en) | Management systems for multiple access control entities | |
| WO2006107542A3 (en) | System and method for achieving machine authentication without maintaining additional credentials | |
| CN104023333A (en) | Secure subscriber identity module service | |
| KR20120027306A (en) | Service binding method and system | |
| CN104868998B (en) | A kind of system, apparatus and method that encryption data is supplied to electronic equipment | |
| CN102999711A (en) | Application copyright protection method, network platform and system | |
| CN103905514B (en) | Server, terminal device and network data access authority management method | |
| US8863241B2 (en) | System and method for managing usage rights of software applications | |
| CN110182171A (en) | Digital car key system and vehicle based on block chain technology | |
| CN109977039A (en) | HD encryption method for storing cipher key, device, equipment and readable storage medium storing program for executing | |
| CN103390122A (en) | Application program transmitting method, application program operating method, sever and terminal | |
| CN109543365A (en) | A kind of authorization method and device | |
| CN102170638B (en) | Air loss reporting method and equipment | |
| WO2012163975A1 (en) | A method for accessing at least one service, corresponding communicating device and system | |
| WO2006123280A2 (en) | Drm system for devices communicating with a portable device. | |
| CN104361304A (en) | Method and device for downloading application program of smart card |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C12 | Rejection of a patent application after its publication | ||
| RJ01 | Rejection of invention patent application after publication |
Open date: 20090923 |