CN106295254A - A kind of Compliance control method and device of licence - Google Patents

A kind of Compliance control method and device of licence Download PDF

Info

Publication number
CN106295254A
CN106295254A CN201610674610.9A CN201610674610A CN106295254A CN 106295254 A CN106295254 A CN 106295254A CN 201610674610 A CN201610674610 A CN 201610674610A CN 106295254 A CN106295254 A CN 106295254A
Authority
CN
China
Prior art keywords
member device
license
local license
unlocking key
personal unlocking
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Granted
Application number
CN201610674610.9A
Other languages
Chinese (zh)
Other versions
CN106295254B (en
Inventor
吕辉
雷伟
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Hangzhou H3C Technologies Co Ltd
Original Assignee
Hangzhou H3C Technologies Co Ltd
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by Hangzhou H3C Technologies Co Ltd filed Critical Hangzhou H3C Technologies Co Ltd
Priority to CN201610674610.9A priority Critical patent/CN106295254B/en
Publication of CN106295254A publication Critical patent/CN106295254A/en
Application granted granted Critical
Publication of CN106295254B publication Critical patent/CN106295254B/en
Active legal-status Critical Current
Anticipated expiration legal-status Critical

Links

Classifications

    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/10Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
    • G06F21/105Arrangements for software license management or administration, e.g. for managing licenses at corporate level
    • GPHYSICS
    • G06COMPUTING; CALCULATING OR COUNTING
    • G06FELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31User authentication

Landscapes

  • Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Software Systems (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • Physics & Mathematics (AREA)
  • General Engineering & Computer Science (AREA)
  • General Physics & Mathematics (AREA)
  • Multimedia (AREA)
  • Technology Law (AREA)
  • Storage Device Security (AREA)
  • Lock And Its Accessories (AREA)

Abstract

The embodiment of the present application provides the Compliance control method and device of a kind of licence, it is applied to the member device in IRF system, method therein specifically includes: after IRF system is set up, share the local license of member device, and local license is locked, generate and preserve the Personal Unlocking Key corresponding with other member device each in IRF system for local license, each Personal Unlocking Key is sent to other member device of correspondence;When member device is main member device, if monitoring the member device being newly added IRF system, then carry out attempting unlocking to local license, and do not share local license when determining the local license failure of unblock.The embodiment of the present application can be alleviated the member device that between member device, the unconditional license of sharing causes to a certain extent and obtain the state of the most extra license.

Description

A kind of Compliance control method and device of licence
Technical field
The application relates to communication technical field, particularly relate to a kind of licence (license) Compliance control method and Device.
Background technology
IRF (Intelligent Resilient Framework, intelligent elastic framework) is a kind of software virtualization skill Multiple devices can be coupled together by IRF physical port by art by IRF, after carrying out relevant configuration, are virtualized into one " distributed apparatus " (referred to as IRF system), such that it is able to realize the collaborative work of multiple devices, unified management and uninterruptedly tie up Protect, and the function of redundancy backup can be provided.
Single device in IRF system is referred to as member device, and at present, all member devices can share license.Example As, with reference to Fig. 1, it is shown that the structural representation of a kind of IRF system.Member device A and member device is included in this IRF system B, it is assumed that member device A has license, and member device B does not has license, due to can between member device in IRF system With shared license, therefore after this IRF System splitting, equipment B also has the shared license from device A, namely Device A and B all have license.It can be seen that unconditionally share between this member device in IRF system The shared mechanism of license, can be by the way of stacking divides again so that member device obtains the most extra license.
Summary of the invention
In view of the above problems, it is proposed that the embodiment of the present application is to provide one to overcome the problems referred to above or at least in part Solve the Compliance control method and apparatus of the licence of the problems referred to above, can be unconditional to the member device being newly added IRF system The process sharing license is controlled, and then can alleviate to a certain extent and unconditionally share between member device The member device that license causes obtains the state of the most extra license.
In order to solve the problems referred to above, the embodiment of the present application discloses a kind of Compliance control method of licence, is applied to IRF Member device in system, described method includes:
After described IRF system is set up, share the local license of described member device, and to described local license Lock, generate and preserve corresponding with other member device each in described IRF system for described local license Personal Unlocking Key, is sent to other member device of correspondence by each Personal Unlocking Key;
When described member device is main member device, if monitoring the member device being newly added described IRF system, from In described IRF system, the member device in addition to described member device with the member device being newly added obtains for described this locality The Personal Unlocking Key of license;
Inconsistent with the Personal Unlocking Key of acquisition at the Personal Unlocking Key for described local license judging local preservation Time, determine the described local license failure of unblock, do not share described local license
On the other hand, the embodiment of the present application discloses the Compliance control device of a kind of license, is applied in IRF system Member device, including:
First shares processing module, after setting up in described IRF system, shares this locality of described member device License, and described local license is locked, generate and preserve for described local license and described IRF system The Personal Unlocking Key that other member device each in system is corresponding, is sent to other member device of correspondence by each Personal Unlocking Key;
Key Acquisition Module, for when described member device is main member device, is newly added described IRF if monitored The member device of system, member device in addition to described member device and the member device that is newly added from described IRF system Obtain the Personal Unlocking Key for described local license;And
First does not share processing module, for close in the unblock for described local license judging local preservation When key is inconsistent with the Personal Unlocking Key of acquisition, determines the described local license failure of unblock, do not share described local license.
The embodiment of the present application includes advantages below:
The embodiment of the present application, when the member device of shared local license is main member device, newly adds if monitored Enter the member device of IRF system, then can carrying out attempting unlocking to local license, if unlocking unsuccessfully, then can not add to newly The member device entering IRF system shares local license;Owing to the embodiment of the present application can be to the member being newly added IRF system Equipment is unconditionally shared the process of license and is controlled, and therefore can alleviate to a certain extent between member device without bar Part is shared the member device that license causes and is obtained the state of the most extra license.
Accompanying drawing explanation
Fig. 1 is the structural representation of existing a kind of IRF system;
Fig. 2 is the flow chart of steps of the Compliance control method of a kind of licence of one embodiment of the application;
Fig. 3 is the structured flowchart of the Compliance control device of a kind of licence of one embodiment of the application.
Detailed description of the invention
Understandable for enabling the above-mentioned purpose of the application, feature and advantage to become apparent from, real with concrete below in conjunction with the accompanying drawings The application is described in further detail by mode of executing.
The one of the inventive concepts of the embodiment of the present application is, in IRF system, and this locality that member device has been shared The lock status of license is set to lock, and is controlled the shared procedure of licence by the lock status of local license System.Specifically, when this member device is main member device, if monitoring the member device being newly added described IRF system, then Can carrying out attempting unlocking to local license, if unlocking unsuccessfully, then can not set to the member being newly added described IRF system Standby shared local license.The unconditional shared license relative between the member device in IRF system in existing scheme Shared mechanism makes member device obtain the problem of the most extra license, owing to the embodiment of the present application can be to being newly added The member device of described IRF system is unconditionally shared the process of license and is controlled, and therefore can alleviate to a certain extent The member device that between member device, the unconditional license of sharing causes obtains the state of the most extra license.
With reference to Fig. 2, it is shown that the flow chart of steps of the Compliance control method of a kind of licence of one embodiment of the application, Being applied to the member device in IRF system, described method specifically may include steps of:
Step 201, after described IRF system is set up, share the local license of described member device, and to described Ground license locks, and generates and preserves for described local license and other member each in described IRF system The Personal Unlocking Key that equipment is corresponding, is sent to other member device of correspondence by each Personal Unlocking Key;
In actual applications, it is that (that is, each member device in IRF system is not added initial IRF system in IRF system Lock) time, after the local license of member device is shared, it can be carried out by the embodiment of the present application by step 201 Lock, it is alternatively possible to be set to lock by the lock status of described local license.
Further, the embodiment of the present application can also be generated and preserve by step 201 for described local license and institute State the Personal Unlocking Key (key) that other member device each in IRF system is corresponding, each Personal Unlocking Key is sent to correspondence its Its member device;Wherein, above-mentioned Personal Unlocking Key can be as the unblock foundation of local license.
In a kind of application example 1 of the application, as a example by the IRF system of 4 member device compositions, in this IRF system Include member device A, member device B, member device C and member device D.Assume that member's device A, B, C, D have 100 respectively Individual local license, can mutually share local license between above-mentioned 4 member devices, then this IRF system external is permissible 400 available license are provided.After the local license of above-mentioned member device is shared by other member device, permissible The Personal Unlocking Key corresponding in other member device side each is generated for local license.Such as, key-a-b (local license Corresponding in member device B side) Personal Unlocking Key, key-a-c (local license is corresponding in member device C side) Personal Unlocking Key, Key-a-d (local license is corresponding in member device D side) Personal Unlocking Key.
In actual applications, the Personal Unlocking Key that respectively other member device is corresponding can be saved to this locality of member device, with Time, it is also routed to the member device of correspondence, such as, key-a-b, key-a-c, key-a-d are sent to member device respectively B, member device C and member device D, and key-a is saved to this locality of member device A.Wherein, the content of key-a can be The combination of key-a-b, key-a-c, key-a-d corresponding content, for example, it is assumed that key-a-b, key-a-c, key-a-d are respectively Ab, ac, ad, then the content of key-a can be { ab, ac, ad}.
It should be noted that in addition to the local license of member device A is shared by other member device, other becomes The local license of member's equipment can also be shared.Such as, when the local license of member device B is shared, can be with pin The local license of member device B is generated at member device A, the member device C Personal Unlocking Key corresponding with member device D side: Key-b-a, key-b-c and key-b-d, key-b-a, key-b-c and key-b-d can be sent to the member device of correspondence to protect Depositing, meanwhile, the key-b including key-b-a, key-b-c and key-b-d corresponding content can be saved to member device B this locality.Again As, when the local license of member device C is shared, can generate member for the local license of member device C The Personal Unlocking Key that device A, member device B are corresponding with member device D side: key-c-a, key-c-b and key-c-d, key-c-a, Key-c-b and key-c-d can be sent to correspondence member device with preserve, meanwhile, including key-c-a, key-c-b and key- It is local that the key-c of c-d corresponding content can be saved to member device D.In like manner, the local license at member device D is shared After, member device D this locality can also preserve key-d, member device A, member device B and member device C and can also preserve respectively For key-d-a, key-d-b and key-d-c that the local license of member device D is corresponding.It is appreciated that the application implements Example can generate corresponding Personal Unlocking Key arbitrary sharing under scene.
In a kind of alternative embodiment of the application, each Personal Unlocking Key can be generated by following manner: according to presetting AES, is encrypted computing to the MAC Address of described member device and the MAC Address of other member device each respectively, Obtain each Personal Unlocking Key.The above-mentioned MAC Address for member device and the MAC (Media of other member device each Access Control, media interviews control) address is encrypted computing in the way of obtaining Personal Unlocking Key, it is possible to ensure to unlock The safety of key.For above-mentioned application example 1, a, b, c, d can be respectively used to represent member's device A, member device B, member Equipment C and the MAC Address of member device D.In actual applications, above-mentioned predetermined encryption algorithm specifically may include that MD5 (Message-Digest Algorithm 5, Message Digest Algorithm 5), RSA (Ron Rivest, Adi Shamir, Leonard Adleman), DES (Data Encryption Standard, data encryption standards) etc., it will be understood that the application Embodiment is not any limitation as concrete predetermined encryption algorithm.
Step 202, when described member device is main member device, if monitoring the one-tenth being newly added described IRF system Member's equipment, from described IRF system member device acquisition in addition to described member device and the member device that is newly added for The Personal Unlocking Key of described local license;
For the member device as master (Master) member device, it can be to being newly added described IRF system Member device is monitored, if monitoring the member device being newly added described IRF system, can trigger the solution of local license Lock flow process.
The unblock flow process of local license specifically may include that from described IRF system except described member device and Xin Jia Member device outside the member device entered obtains the Personal Unlocking Key for described local license, and the pin preserving this locality The described local Personal Unlocking Key of license is judged with the concordance of the Personal Unlocking Key of acquisition.
It is alternatively possible in IRF system member device in addition to described member device and the member device that is newly added Send key unlocking request, and receive the Personal Unlocking Key that corresponding member device returns according to this key unlocking request.For above-mentioned Application example 1, when member device A is main member device, if in addition to member device A with the member device being newly added, Member device B, member device C and member device D are in normal operating condition, then can be respectively from member device B, Cheng Yuanshe Standby C and member device D obtains corresponding Personal Unlocking Key.
Step 203, close with the unblock of acquisition at the Personal Unlocking Key for described local license judging local preservation When key is inconsistent, determines the described local license failure of unblock, do not share described local license.
In actual applications, the Personal Unlocking Key for described local license that can first this locality be preserved and acquisition The concordance of Personal Unlocking Key judge, obtain judged result and may include that consistent or inconsistent.Such as, for above-mentioned Application example 1, it is assumed that the Personal Unlocking Key obtained from member device B, member device C and member device D is respectively as follows: ab, ac, ad, The Personal Unlocking Key that member device A this locality preserves is that { ab, ac, ad} then can obtain consistent judged result.Certainly, in reality In application, when obtaining Personal Unlocking Key, it is possible to occur that in member device B, member device C and member device D, few members sets Standby already out IRF system, it is also possible to occur because IRF system reboot causes few members's equipment also not restart the situation such as successfully, In this case, it is judged that result will be inconsistent.
The embodiment of the present application is judging the Personal Unlocking Key for described local license and the solution of acquisition of local preservation When lock key is inconsistent, it may be determined that unlock described local license failure, that is, lock status can be made to keep original adding Lock status, and then described local license can not be shared.
Not the sharing described local license and can be accomplished in that of the embodiment of the present application
Active mode,
For active mode, main member device can be when determining the described local license failure of unblock, to be newly added Member device sends the notice not sharing local license.For above-mentioned application example 1, it is assumed that be newly added described IRF system Member device is member device E, then the member device A as main member device can send to member device E and not share this locality The notice of license.
Passive mode,
For passive mode, main member device can receive the sharing request from other member device, and is receiving During sharing request, main member device can send refusal to correspondence member device and shares the notice of local license or be not total to Enjoy the notice of local license.For above-mentioned application example 1, member device E can call request corresponding for member device A and connect Mouthful, the local license of member device A is shared with request.Member device A is receiving the sharing request from member device E Afterwards, the lock status of the local license of described member device A can be obtained, when described lock status is for locking, can not be total to Enjoy the local license of self.
It is appreciated that those skilled in the art can use above-mentioned active mode and passive side according to practical application request Arbitrary in formula, or, it is also possible to realize by other means not sharing described local license, the embodiment of the present application for The specific implementation not sharing described local license is not any limitation as.
In a kind of alternative embodiment of the application, the method for the embodiment of the present application can also include: is judging this locality When the Personal Unlocking Key for described local license of preservation is consistent with the Personal Unlocking Key of acquisition, determine the described this locality of unblock License success, again shares described local license, and again locks, described local license for described Local license regenerates and preserves corresponding with other member device each being newly added in the IRF system after member device Personal Unlocking Key.
Wherein, after determining the described local license success of unblock, the local license being shared can be discharged, namely The lock status of local license can be set to released state, this released state shows that local license can be shared.
In actual applications, can use and be similar to member device A and member device B, member device C and member device D Sharing mode when sharing local license realizes again sharing of local license.The embodiment of the present application is sharing this again After ground license, again described local license can be locked, be set to add with the lock status by local license Lock.And, it is also possible to regenerate and preserve every be newly added in the IRF system after member device for local license The Personal Unlocking Key that other member device individual is corresponding.For above-mentioned application example 1, again share local license at member device A After, corresponding unblock can be regenerated respectively for member device B, member device C, member device D and member device E close Key, the Personal Unlocking Key regenerated can be preserved to other member device and member device A simultaneously.
In order to ensure the safety of the Personal Unlocking Key of local preservation, the embodiment of the present application can be by Personal Unlocking Key with hiding shape State is saved in member device, and the Personal Unlocking Key of hidden state is the most invisible, is therefore possible to prevent Personal Unlocking Key Loss or be tampered.And the Personal Unlocking Key of hidden state is visible for member device, therefore can ensure that step Rapid 203 from this locality reading Personal Unlocking Key.
Further, the method for the embodiment of the present application can also include: leaves described IRF system also at described member device After adding new IRF system, if described local license is in locking state, the most do not share described local license.
As a example by above-mentioned application example 1, if member device D leaves original IRF system 1 and adds new IRF system 2, If then its local license is in locking state, the most other member device in IRF system 2 does not shares this locality license。
After described member device leaves described IRF system and adds new IRF system, if described local license It is in locking state, then can realize not sharing described local license by aforesaid active mode or passive mode, That is, actively the notice not sharing local license can be sent other member device in new IRF system, or, can To receive after the sharing request of other member device, send to corresponding member device and do not share local license's Notice.
It addition, the method for the embodiment of the present application can also include: leave described IRF system at described member device and add After new IRF system, if described local license is in locking state, and receive unblock instruction, then judge described unblock The Personal Unlocking Key for described local the license whether Personal Unlocking Key carried in instruction preserves with this locality is consistent, and is sentencing When breaking as being, determine the described local license success of unblock, share described local license.
Still as a example by above-mentioned application example 1, leave original IRF system at member device D and add new IRF system In the case of, if needing the license to member device is local to unlock, can be realized by artificial assistance mode.That is, manager Member device A, member device B and member device C input the releasing order of license of release member equipment D, Cheng Yuanshe After standby A, member device B and the member device C license according to the release member equipment D that releases order, corresponding Personal Unlocking Key by Hidden state originally becomes visible state, and manager can obtain this at member device A, member device B and member device C A little visible Personal Unlocking Keys, and these Personal Unlocking Keys carried in unlocking instruction and be input to member device D, so that member sets The Personal Unlocking Key for local license that the Personal Unlocking Key unlocked in instruction and member device D this locality are preserved by standby D carries out one Cause is compared, and when comparative result is consistent, assert and unlocks successfully.
Certainly, if member device D be restart after add new IRF system, member device D can be automatically releasable shared Local license, makes local Personal Unlocking Key corresponding for license become visible, i.e. member device D automatically terminates locking state, After adding new IRF system, local license can be shared.
In sum, the embodiment of the present application is when the member device of shared local license is main member device, if prison Measure the member device being newly added IRF system, then can carry out attempting unlocking to local license, if unlocking unsuccessfully, the most permissible Local license is not shared to the member device being newly added IRF system;Owing to the embodiment of the present application can be to being newly added IRF system The member device of system is unconditionally shared the process of license and is controlled, and therefore can alleviate member device to a certain extent Between the member device that causes of the unconditional license of sharing obtain the state of the most extra license.
It should be noted that for embodiment of the method, in order to be briefly described, therefore it is all expressed as a series of action group Closing, but those skilled in the art should know, the embodiment of the present application is not limited by described sequence of movement, because depending on According to the embodiment of the present application, some step can use other order or carry out simultaneously.Secondly, those skilled in the art also should Knowing, embodiment described in this description belongs to preferred embodiment, and involved action not necessarily the application implements Necessary to example.
With reference to Fig. 3, it is shown that the Compliance control device of a kind of licence license of one of them embodiment of the application Structured flowchart.This device can apply to the member device in IRF system, specifically may include that
First shares processing module 301, after setting up in described IRF system, shares this locality of described member device License, and described local license is locked, generate and preserve for described local license and described IRF system The Personal Unlocking Key that other member device each in system is corresponding, is sent to other member device of correspondence by each Personal Unlocking Key;
Key Acquisition Module 302, for when described member device is main member device, if monitor be newly added described The member device of IRF system, from described IRF system, the member in addition to described member device with the member device being newly added sets The standby Personal Unlocking Key obtained for described local license;And
First does not share processing module 303, for judging the unblock for described local license of local preservation When key is inconsistent with the Personal Unlocking Key of acquisition, determines the described local license failure of unblock, do not share described this locality license。
In a kind of alternative embodiment of the application, described first shares processing module 301, can be specifically for according to presetting AES, is encrypted computing to the MAC Address of described member device and the MAC Address of other member device each respectively, Obtain each Personal Unlocking Key.
In the another kind of alternative embodiment of the application, described device can also include:
Second shares processing module, for judging the Personal Unlocking Key for described local license of local preservation Time consistent with the Personal Unlocking Key obtained, determine the described local license success of unblock, again share described local license, and Again described local license is locked, regenerate and preserve for described local license and be newly added member and set The Personal Unlocking Key that other member device each in IRF system after Bei is corresponding.
In another alternative embodiment of the application, described device can also include:
Second does not share processing module, for leaving described IRF system at described member device and adding new IRF system After, if described local license is in locking state, the most do not share described local license.
In another alternative embodiment of the application, described device can also include:
Release module, is used for after described member device leaves described IRF system and adds new IRF system, if institute State local license and be in locking state, and receive unblock instruction, then judge the described Personal Unlocking Key unlocking and carrying in instruction The Personal Unlocking Key for described local license whether preserved with this locality is consistent;
3rd shares processing module, for described unlock the Personal Unlocking Key that carries in instruction with local preserve for institute State the Personal Unlocking Key of local license consistent time, determine the described local license success of unblock, share described this locality license。
Each embodiment in this specification all uses the mode gone forward one by one to describe, what each embodiment stressed is with The difference of other embodiments, between each embodiment, identical similar part sees mutually.
About the device in above-described embodiment, wherein modules performs the concrete mode of operation in relevant the method Embodiment in be described in detail, explanation will be not set forth in detail herein.
Those skilled in the art, after considering description and putting into practice invention disclosed herein, will readily occur to its of the application Its embodiment.The application is intended to any modification, purposes or the adaptations of the application, these modification, purposes or Person's adaptations is followed the general principle of the application and includes the undocumented common knowledge in the art of the disclosure Or conventional techniques means.Description and embodiments is considered only as exemplary, and the true scope of the application and spirit are by following Claim is pointed out.
It should be appreciated that the application is not limited to precision architecture described above and illustrated in the accompanying drawings, and And various modifications and changes can carried out without departing from the scope.Scope of the present application is only limited by appended claim
The foregoing is only the preferred embodiment of the application, not in order to limit the application, all in spirit herein and Within principle, any modification, equivalent substitution and improvement etc. made, within should be included in the protection domain of the application.
Compliance control method and the Compliance control of a kind of licence to a kind of licence provided herein above Device, is described in detail, and principle and the embodiment of the application are set forth by specific case used herein, with The explanation of upper embodiment is only intended to help and understands the present processes and core concept thereof;General simultaneously for this area Technical staff, according to the thought of the application, the most all will change, in sum, This specification content should not be construed as the restriction to the application.

Claims (10)

1. the Compliance control method of a licence license, it is characterised in that be applied in intelligent elastic framework IRF system Member device, described method includes:
After described IRF system is set up, share the local license of described member device, and described local license is carried out Lock, generate and preserve the unblock corresponding with other member device each in described IRF system for described local license Key, is sent to other member device of correspondence by each Personal Unlocking Key;
When described member device is main member device, if monitoring the member device being newly added described IRF system, from described In IRF system, the member device in addition to described member device with the member device being newly added obtains for described this locality The Personal Unlocking Key of license;
When the Personal Unlocking Key for described local license judging local preservation is inconsistent with the Personal Unlocking Key of acquisition, Determine the described local license failure of unblock, do not share described local license.
Method the most according to claim 1, it is characterised in that generate each Personal Unlocking Key by following manner:
According to predetermined encryption algorithm, respectively the MAC Address of described member device and the MAC Address of other member device each are entered Row cryptographic calculation, obtains each Personal Unlocking Key.
Method the most according to claim 1, it is characterised in that described method also includes:
When the Personal Unlocking Key for described local license judging local preservation is consistent with the Personal Unlocking Key of acquisition, really Surely unlock described local license success, again share described local license, and again described local license is carried out Lock, for described local license regenerate and preserve and be newly added in the IRF system after member device each other The Personal Unlocking Key that member device is corresponding.
Method the most according to claim 1, it is characterised in that described method also includes:
After described member device leaves described IRF system and adds new IRF system, if described local license is in Locking state, does not the most share described local license.
Method the most according to claim 1, it is characterised in that described method also includes:
After described member device leaves described IRF system and adds new IRF system, if described local license is in Locking state, and receive unblock instruction, then judge described to unlock what whether the Personal Unlocking Key that carries in instruction preserved with this locality Personal Unlocking Key for described local license is consistent;
If so, determine the described local license success of unblock, share described local license.
6. the Compliance control device of a licence license, it is characterised in that be applied in intelligent elastic framework IRF system Member device, described device includes:
First shares processing module, after setting up in described IRF system, shares the local license of described member device, and Described local license is locked, for described local license generate and preserve with described IRF system each The Personal Unlocking Key that other member device is corresponding, is sent to other member device of correspondence by each Personal Unlocking Key;
Key Acquisition Module, for when described member device is main member device, is newly added described IRF system if monitored Member device, from described IRF system, the member device in addition to described member device and the member device that is newly added obtains Personal Unlocking Key for described local license;And
First does not share processing module, for judge local preservation for described local license Personal Unlocking Key with When the Personal Unlocking Key of acquisition is inconsistent, determines the described local license failure of unblock, do not share described local license.
Device the most according to claim 6, it is characterised in that described first shares processing module, specifically for according in advance If AES, respectively the MAC Address of described member device and the MAC Address of other member device each are encrypted fortune Calculate, obtain each Personal Unlocking Key.
Device the most according to claim 6, it is characterised in that described device also includes:
Second shares processing module, for judge local preservation for described local license Personal Unlocking Key with obtain When the Personal Unlocking Key that takes is consistent, determine the described local license success of unblock, again share described local license, and again Described local license is locked, after regenerating and preserve for described local license and be newly added member device IRF system in Personal Unlocking Key corresponding to other member device each.
Device the most according to claim 6, it is characterised in that described device also includes:
Second does not share processing module, is used for after described member device leaves described IRF system and adds new IRF system, If described local license is in locking state, the most do not share described local license.
Device the most according to claim 6, it is characterised in that described device also includes:
Release module, is used for after described member device leaves described IRF system and adds new IRF system, if described Ground license is in locking state, and receives unblock instruction, then judge described whether to unlock the Personal Unlocking Key that carries in instruction The Personal Unlocking Key for described local license preserved with this locality is consistent;
3rd shares processing module, for described unlock the Personal Unlocking Key that carries in instruction with local preserve for described When the Personal Unlocking Key of ground license is consistent, determines the described local license success of unblock, share described local license.
CN201610674610.9A 2016-08-16 2016-08-16 A kind of Compliance control method and device of licensing Active CN106295254B (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
CN201610674610.9A CN106295254B (en) 2016-08-16 2016-08-16 A kind of Compliance control method and device of licensing

Applications Claiming Priority (1)

Application Number Priority Date Filing Date Title
CN201610674610.9A CN106295254B (en) 2016-08-16 2016-08-16 A kind of Compliance control method and device of licensing

Publications (2)

Publication Number Publication Date
CN106295254A true CN106295254A (en) 2017-01-04
CN106295254B CN106295254B (en) 2019-06-25

Family

ID=57679208

Family Applications (1)

Application Number Title Priority Date Filing Date
CN201610674610.9A Active CN106295254B (en) 2016-08-16 2016-08-16 A kind of Compliance control method and device of licensing

Country Status (1)

Country Link
CN (1) CN106295254B (en)

Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1647052A (en) * 2002-04-12 2005-07-27 沃达方集团有限公司 Method ans system for distribution of encrypted data in a mobile network
US20060117191A1 (en) * 2004-11-30 2006-06-01 Kabushiki Kaisha Toshiba Content output apparatus, content output method and content aquisition apparatus
CN101043403A (en) * 2007-03-15 2007-09-26 西安电子科技大学 Field based digital copyright protecting family network system
US20070261114A1 (en) * 2006-05-01 2007-11-08 Michael Pomerantsev Method and system for secure sharing of personal information

Patent Citations (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
CN1647052A (en) * 2002-04-12 2005-07-27 沃达方集团有限公司 Method ans system for distribution of encrypted data in a mobile network
US20060117191A1 (en) * 2004-11-30 2006-06-01 Kabushiki Kaisha Toshiba Content output apparatus, content output method and content aquisition apparatus
US20070261114A1 (en) * 2006-05-01 2007-11-08 Michael Pomerantsev Method and system for secure sharing of personal information
CN101043403A (en) * 2007-03-15 2007-09-26 西安电子科技大学 Field based digital copyright protecting family network system

Also Published As

Publication number Publication date
CN106295254B (en) 2019-06-25

Similar Documents

Publication Publication Date Title
US10579793B2 (en) Managed securitized containers and container communications
US10984136B2 (en) Secure memory device with unique identifier for authentication
CN101350044B (en) Method for constructing virtual environment trust
CN106104558A (en) Secure hardware for striding equipment trusted applications
US20190258782A1 (en) Securing temporal digital communications via authentication and validation for wireless user and access devices with securitized containers
DE102018104637A1 (en) FAILSAFE RESPONSE USING A KNOWN GOOD CONDITION OF A DECENTRALIZED ACCOUNT BOOK
WO2019104988A1 (en) Plc security processing unit and bus arbitration method thereof
CN110891062B (en) Password changing method, server and storage medium
CN110233817B (en) Container safety system based on cloud computing
EP1282028A2 (en) Method and apparatus for locking an application within a trusted computing environment
CN107888609A (en) A kind of information security of computer network system
KR20060050661A (en) Security state watcher
US20170111388A1 (en) Centralized and Automated Recovery
DE112020000792T5 (en) TRUSTED EXECUTION ENVIRONMENT ACCELERATED BY GRAPHICS PROCESSING UNIT
CN108595983B (en) Hardware architecture based on hardware security isolation execution environment and application context integrity measurement method
CN104320389A (en) Fusion identify protection system and fusion identify protection method based on cloud computing
CN113596009A (en) Zero trust access method, system, zero trust security proxy, terminal and medium
US20050021996A1 (en) Method and apparatus for preventing un-authorized attachment of computer peripherals
CN109743319B (en) Trusted starting and safe operation method of networking type special server
CN109547450A (en) Method, apparatus, electronic equipment and the computer media in operational safety execution domain
CN111859379B (en) Processing method and device for protecting data model
US9043460B1 (en) Distributed management with embedded agents in enterprise apps
CN106295254A (en) A kind of Compliance control method and device of licence
US11163900B2 (en) Data processing means and method for operating the same
US9003560B1 (en) Secure enclosure with internal security components

Legal Events

Date Code Title Description
C06 Publication
PB01 Publication
C10 Entry into substantive examination
SE01 Entry into force of request for substantive examination
CB02 Change of applicant information
CB02 Change of applicant information

Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No.

Applicant after: Xinhua three Technology Co., Ltd.

Address before: 310053 Hangzhou science and Technology Development Zone, Zhejiang high tech park, No. six and road, No. 310

Applicant before: Huasan Communication Technology Co., Ltd.

GR01 Patent grant
GR01 Patent grant