CN106295254B - A kind of Compliance control method and device of licensing - Google Patents
A kind of Compliance control method and device of licensing Download PDFInfo
- Publication number
- CN106295254B CN106295254B CN201610674610.9A CN201610674610A CN106295254B CN 106295254 B CN106295254 B CN 106295254B CN 201610674610 A CN201610674610 A CN 201610674610A CN 106295254 B CN106295254 B CN 106295254B
- Authority
- CN
- China
- Prior art keywords
- member device
- license
- local license
- unlocking key
- personal unlocking
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 238000000034 method Methods 0.000 title claims abstract description 33
- 238000012544 monitoring process Methods 0.000 claims abstract description 8
- 238000012545 processing Methods 0.000 claims description 14
- 238000004364 calculation method Methods 0.000 claims description 4
- 230000001172 regenerating effect Effects 0.000 claims 1
- 230000008569 process Effects 0.000 description 7
- 238000010586 diagram Methods 0.000 description 4
- 238000013478 data encryption standard Methods 0.000 description 3
- 230000004048 modification Effects 0.000 description 3
- 238000012986 modification Methods 0.000 description 3
- 230000009471 action Effects 0.000 description 2
- 230000007246 mechanism Effects 0.000 description 2
- 230000006978 adaptation Effects 0.000 description 1
- 230000003044 adaptive effect Effects 0.000 description 1
- 230000008859 change Effects 0.000 description 1
- 238000004891 communication Methods 0.000 description 1
- 238000007796 conventional method Methods 0.000 description 1
- 238000005516 engineering process Methods 0.000 description 1
- 230000006872 improvement Effects 0.000 description 1
- 230000000750 progressive effect Effects 0.000 description 1
Classifications
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/10—Protecting distributed programs or content, e.g. vending or licensing of copyrighted material ; Digital rights management [DRM]
- G06F21/105—Arrangements for software license management or administration, e.g. for managing licenses at corporate level
-
- G—PHYSICS
- G06—COMPUTING; CALCULATING OR COUNTING
- G06F—ELECTRIC DIGITAL DATA PROCESSING
- G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
- G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
- G06F21/31—User authentication
Landscapes
- Engineering & Computer Science (AREA)
- Theoretical Computer Science (AREA)
- Software Systems (AREA)
- Computer Security & Cryptography (AREA)
- Computer Hardware Design (AREA)
- Physics & Mathematics (AREA)
- General Engineering & Computer Science (AREA)
- General Physics & Mathematics (AREA)
- Multimedia (AREA)
- Technology Law (AREA)
- Storage Device Security (AREA)
- Lock And Its Accessories (AREA)
Abstract
The embodiment of the present application provides a kind of Compliance control method and device of licensing, applied to the member device in IRF system, method therein specifically includes: after the foundation of IRF system, the local license of sharing member's equipment, and local license is locked, Personal Unlocking Key corresponding with the other member devices of each of IRF system is generated and saved for local license, and each Personal Unlocking Key is sent to corresponding other member devices；When member device is main member device, if monitoring the member device that IRF system is newly added, trial unlock is carried out to local license, and do not share local license when determining unlock local license failure.The embodiment of the present application can be alleviated to a certain extent unconditionally shares the state that member device caused by license obtains a large amount of additional license between member device.
Description
Technical field
This application involves fields of communication technology, Compliance control method more particularly to a kind of licensing (license) and
Device.
Background technique
IRF (Intelligent Resilient Framework, intelligent elastic framework) is a kind of software virtualization skill
Art can be connected multiple devices by IRF physical port by IRF, after carrying out relevant configuration, be virtualized into one
" distributed apparatus " (referred to as IRF system), so as to realize the collaborative work, unified management and uninterrupted dimension of multiple devices
Shield, and the function of redundancy backup can be provided.
Single device in IRF system is known as member device, currently, all member devices can share license.Example
Such as, referring to Fig.1, a kind of structural schematic diagram of IRF system is shown.It include member device A and member device in the IRF system
B, it is assumed that member device A possesses license, and member device B does not have license, due to can between member device in IRF system
To share license, therefore after the IRF System splitting, equipment B also has the shared license from equipment A, namely
Equipment A and B have license.As can be seen that unconditionally being shared between this member device in IRF system
The shared mechanism of license, can be by way of stacking and dividing again, so that member device obtains a large amount of additional license.
Summary of the invention
In view of the above problems, it proposes the embodiment of the present application and overcomes the above problem or at least partly in order to provide one kind
The Compliance control method and apparatus of the licensing to solve the above problems, can be unconditional to the new member device that IRF system is added
The process of shared license is controlled, and then can be alleviated to a certain extent and unconditionally be shared between member device
Member device caused by license obtains the state of a large amount of additional license.
To solve the above-mentioned problems, the embodiment of the present application discloses a kind of Compliance control method of licensing, is applied to IRF
Member device in system, which comprises
After IRF system foundation, the local license of the member device is shared, and to the local license
It is locked, generates and save corresponding with each of the IRF system other member devices for the local license
Each Personal Unlocking Key is sent to corresponding other member devices by Personal Unlocking Key；
When the member device is main member device, if monitoring the member device that the IRF system is newly added, from
Member device in addition to the member device being added in the IRF system except the member device and newly, which obtains, is directed to the local
The Personal Unlocking Key of license；
It is inconsistent for the Personal Unlocking Key of the local license and the Personal Unlocking Key of acquisition judging locally to save
When, it determines and unlocks the local license failure, do not share the local license
On the other hand, the embodiment of the present application discloses the Compliance control device of license a kind of, is applied in IRF system
Member device, comprising:
First shared processing module, for sharing the local of the member device after IRF system foundation
License, and the local license is locked, it generates and saves and the IRF system for the local license
Each Personal Unlocking Key is sent to corresponding other member devices by the corresponding Personal Unlocking Key of the other member devices of each of system；
Key Acquisition Module is used for when the member device is main member device, if monitoring that the IRF is newly added
The member device of system, the member device in addition to the member device being added from the IRF system except the member device and newly
Obtain the Personal Unlocking Key for being directed to the local license；And
First does not share processing module, for close in the unlock for the local license for judging locally to save
When key and the inconsistent Personal Unlocking Key of acquisition, determines and unlock the local license failure, do not share the local license.
The embodiment of the present application includes the following advantages:
The embodiment of the present application is when the member device of shared local license is main member device, if monitoring newly to add
Enter the member device of IRF system, then trial unlock can be carried out to local license, it, can not Xiang Xinjia if unlock failure
The member device for entering IRF system shares local license；Since the embodiment of the present application can be to the new member that IRF system is added
The process that equipment unconditionally shares license is controlled, therefore can be alleviated to a certain extent between member device without item
Part shares the state that member device caused by license obtains a large amount of additional license.
Detailed description of the invention
Fig. 1 is a kind of structural schematic diagram of existing IRF system；
Fig. 2 is a kind of step flow chart of the Compliance control method of licensing of the application one embodiment；
Fig. 3 is a kind of structural block diagram of the Compliance control device of licensing of the application one embodiment.
Specific embodiment
In order to make the above objects, features, and advantages of the present application more apparent, with reference to the accompanying drawing and it is specific real
Applying mode, the present application will be further described in detail.
The one of the inventive concepts of the embodiment of the present application are, in IRF system, local that member device has been shared
The lock status of license is set as locking, and is controlled by the lock status of local license to the shared procedure of licensing
System.Specifically, when the member device is main member device, if monitoring the member device that the IRF system is newly added,
Trial unlock can be carried out to local license, if unlock failure, can not set to the member that the IRF system is newly added
Standby shared local license.Relative to unconditionally sharing license between the member device in existing scheme in IRF system
The problem of shared mechanism makes member device obtain a large amount of additional license, since the embodiment of the present application can be added to new
The process that the member device of the IRF system unconditionally shares license is controlled, therefore can be alleviated to a certain extent
The state that member device caused by license obtains a large amount of additional license is unconditionally shared between member device.
Referring to Fig. 2, a kind of step flow chart of the Compliance control method of licensing of the application one embodiment is shown,
Applied to the member device in IRF system, the method can specifically include following steps:
Step 201, the IRF system foundation after, share the local license of the member device, and to described
Ground license is locked, and is generated and is saved and each of the IRF system other members for the local license
Each Personal Unlocking Key is sent to corresponding other member devices by the corresponding Personal Unlocking Key of equipment；
It in practical applications, is initial IRF system (that is, each member device in IRF system is not added in IRF system
Lock) when, after the local license of member device is shared, the embodiment of the present application can carry out it by step 201
It locks, it is alternatively possible to which the lock status of the local license is set as locking.
Further, the embodiment of the present application can also be generated and be saved and institute for the local license by step 201
State the corresponding Personal Unlocking Key (key) of the other member devices of each of IRF system, by each Personal Unlocking Key be sent to it is corresponding its
Its member device；Wherein, above-mentioned Personal Unlocking Key can be used as the unlock foundation of local license.
In a kind of application example 1 of the application, by taking the IRF system of 4 member devices composition as an example, in the IRF system
In include member device A, member device B, member device C and member device D.Assuming that member device A, B, C, D possess 100 respectively
A local license can mutually share local license between above-mentioned 4 member devices, then the IRF system external can be with
400 available license are provided.It, can be with after the local license of above-mentioned member device is shared by other member devices
Personal Unlocking Key corresponding in each other member device sides is generated for local license.For example, key-a-b (local license
It is corresponding in the side member device B) Personal Unlocking Key, key-a-c (local license is corresponding in the side member device C) Personal Unlocking Key,
Key-a-d (local license is corresponding in the side member device D) Personal Unlocking Key.
In practical applications, the corresponding Personal Unlocking Key of each other member devices can be saved to the local of member device, together
When, it is also routed to corresponding member device, for example, key-a-b, key-a-c, key-a-d are sent to member device respectively
B, member device C and member device D, and key-a is saved to the local of member device A.Wherein, the content of key-a can be
The combination of key-a-b, key-a-c, key-a-d corresponding content, for example, it is assumed that key-a-b, key-a-c, key-a-d are respectively
Ab, ac, ad, then the content of key-a can be { ab, ac, ad }.
It should be noted that other than the local license of member device A is shared by other member devices, Qi Tacheng
The local license of member's equipment can also be shared.For example, when the local license of member device B is shared, it can be with needle
The local license of member device B is generated in the corresponding Personal Unlocking Key of member device A, member device C and the side member device D:
Key-b-a, key-b-c and key-b-d, key-b-a, key-b-c and key-b-d can be sent to corresponding member device to protect
It deposits, meanwhile, the key-b including key-b-a, key-b-c and key-b-d corresponding content can be saved local to member device B.Again
Such as, it when the local license of member device C is shared, can generate for the local license of member device C in member
The corresponding Personal Unlocking Key of equipment A, member device B and the side member device D: key-c-a, key-c-b and key-c-d, key-c-a,
Key-c-b and key-c-d can be sent to corresponding member device to save, meanwhile, including key-c-a, key-c-b and key-
The key-c of c-d corresponding content can be saved local to member device D.Similarly, it is shared in the local license of member device D
Afterwards, member device D locally can also save key-d, and member device A, member device B and member device C can also be saved respectively
For local license corresponding key-d-a, key-d-b and key-d-c of member device D.It is appreciated that the application is implemented
Example can generate corresponding Personal Unlocking Key under arbitrary shared scene.
In a kind of alternative embodiment of the application, each Personal Unlocking Key can be generated by following manner: according to default
Encryption Algorithm, the MAC Address of the MAC Address to the member device and each other member devices carries out cryptographic calculation respectively,
Obtain each Personal Unlocking Key.It is above-mentioned for the MAC Address of member device and the MAC (Media of each other member devices
Access Control, media access control) address carry out cryptographic calculation in a manner of obtaining Personal Unlocking Key, can guarantee to unlock
The safety of key.For above-mentioned application example 1, a, b, c, d can be respectively used to indicate member device A, member device B, member
The MAC Address of equipment C and member device D.In practical applications, above-mentioned predetermined encryption algorithm can specifically include: MD5
(Message-Digest Algorithm 5, Message Digest Algorithm 5), RSA (Ron Rivest, Adi Shamir,
Leonard Adleman), DES (Data Encryption Standard, data encryption standards) etc., it will be understood that the application
Embodiment is without restriction for specific predetermined encryption algorithm.
Step 202, when the member device is main member device, if monitor newly to be added the IRF system at
Member's equipment, the member device in addition to the member device being added from the IRF system except the member device and newly, which obtains, to be directed to
The Personal Unlocking Key of the local license；
It, can be to the IRF system be newly added for the member device as master (Master) member device
Member device is monitored, if monitoring the member device that the IRF system is newly added, can trigger the solution of local license
Lock process.
The unlock process of local license can specifically include: the member device and Xin Jia are removed from the IRF system
Member device except the member device entered obtains the Personal Unlocking Key for being directed to the local license, and to the needle locally saved
The consistency of the Personal Unlocking Key of Personal Unlocking Key and acquisition to the local license judges.
It is alternatively possible to the member device in addition to the member device being added into IRF system except the member device and newly
Key unlocking request is sent, and receives the Personal Unlocking Key that corresponding member device is returned according to the key unlocking request.For above-mentioned
Using example 1, when member device A is main member device, if other than the member device in addition to member device A and being newly added,
Member device B, member device C and member device D are in normal operating condition, then can be respectively from member device B, Cheng Yuanshe
Standby C and member device D obtains corresponding Personal Unlocking Key.
Step 203, judge locally to save it is close for the Personal Unlocking Key of the local license and the unlock of acquisition
When key is inconsistent, determines and unlock the local license failure, do not share the local license.
It in practical applications, can be first to the Personal Unlocking Key and acquisition locally saved for the local license
The consistency of Personal Unlocking Key judged that it may include: consistent or inconsistent for obtaining judging result.For example, for above-mentioned
Using example 1, it is assumed that the Personal Unlocking Key obtained from member device B, member device C and member device D is respectively as follows: ab, ac, ad,
The Personal Unlocking Key that member device A is locally saved is { ab, ac, ad }, then available consistent judging result.Certainly, in reality
In, when obtaining Personal Unlocking Key, it is possible to few members in member device B, member device C and member device D occur and set
It is standby to have left IRF system, it is also possible to situations such as appearance causes few members' equipment not restarted successfully also because of IRF system reboot,
In this case, judging result will be inconsistent.
The embodiment of the present application is directed to the local Personal Unlocking Key of license and the solution of acquisition judge locally to save
When lock key is inconsistent, it can determine the unlock local license failure, add that is, lock status can be made to keep original
Lock status, and then the local license can not be shared.
The embodiment of the present application is not shared the local license and can be accomplished in that
Active mode,
For active mode, main member device can be when determining that unlocking the local license fails, to what is be newly added
Member device sends the notice of not shared local license.For above-mentioned application example 1, it is assumed that the IRF system is newly added
Member device is member device E, then can send to member device E as the member device A of main member device not shared local
The notice of license.
Passive mode,
For passive mode, main member device can receive the sharing request from other member devices, and receive
When sharing request, main member device can send the notice for refusing shared local license or untotal to corresponding member device
Enjoy the notice of local license.For above-mentioned application example 1, member device E can call the corresponding request of member device A to connect
Mouthful, to request the local license of sharing member's equipment A.Member device A is receiving the sharing request from member device E
Later, the lock status of the local license of the available member device A can not be total to when the lock status is to lock
Enjoy the local license of itself.
It is appreciated that those skilled in the art can be according to practical application request, using above-mentioned active mode and passive side
Any in formula does not share the local license alternatively, can also realize by other means, the embodiment of the present application for
The specific implementation for not sharing the local license is without restriction.
In a kind of alternative embodiment of the application, the method for the embodiment of the present application can also include: to judge local
When the Personal Unlocking Key for the local license saved is consistent with the Personal Unlocking Key of acquisition, determines and unlock the local
License success, shares the local license, and lock again to the local license, for described again
Local license is regenerated and is saved corresponding with the other member devices of each of IRF system after member device are newly added
Personal Unlocking Key.
Wherein, after determining the unlock local license success, the local license being shared can be discharged, namely
Unlocked state can be set by the lock status of local license, which shows that local license can be shared.
It in practical applications, can be using similar to member device A and member device B, member device C and member device D
Sharing mode when shared local license realizes sharing again for local license.The embodiment of the present application is sharing this again
After ground license, the local license can be locked again, the lock status of local license is set as adding
Lock.Also, can also for local license regenerate and save with newly addition member device after IRF system in it is every
The corresponding Personal Unlocking Key of a other member devices.For above-mentioned application example 1, local license is shared again in member device A
Afterwards, it is close that corresponding unlock can be regenerated respectively for member device B, member device C, member device D and member device E
Key, the Personal Unlocking Key regenerated can be saved simultaneously to other member devices and member device A.
In order to guarantee the safety of the Personal Unlocking Key locally saved, the embodiment of the present application can be by Personal Unlocking Key to hide shape
State is stored in member device, and the Personal Unlocking Key of hidden state is invisible for a user, therefore can prevent Personal Unlocking Key
Loss or be tampered.And the Personal Unlocking Key of hidden state is visible for member device, therefore can guarantee to walk
Rapid 203 read Personal Unlocking Key from local.
Further, the method for the embodiment of the present application can also include: to leave the IRF system simultaneously in the member device
After new IRF system is added, if the local license is in locking state, the local license is not shared.
By taking above-mentioned application example 1 as an example, if member device D leaves original IRF system 1 and new IRF system 2 is added,
Then if its local license is in locking state, other member devices not into IRF system 2 are shared local
license。
After the member device leaves the IRF system and new IRF system is added, if the local license
In locking state, then it can be realized by active mode above-mentioned or passive mode and not share the local license,
That is, actively the notice for not sharing local license can be sent other member devices into new IRF system, alternatively, can
To send not shared local license's to corresponding member device after receiving the sharing request from other member devices
Notice.
In addition, the method for the embodiment of the present application can also include: to leave the IRF system in the member device and be added
After new IRF system, if the local license is in locking state, and unlock instruction is received, then judge the unlock
Whether the Personal Unlocking Key carried in instruction is consistent for the local Personal Unlocking Key of license with what is locally saved, and is sentencing
When breaking to be, determines and unlock the local license success, share the local license.
Still by taking above-mentioned application example 1 as an example, original IRF system is left in member device D and new IRF system is added
In the case of, it unlocks, can be realized by artificial assistance mode if necessary to the license to member device local.That is, administrator
Releasing order for the license of release member's equipment D, Cheng Yuanshe are inputted on member device A, member device B and member device C
After the license of standby A, member device B and member device C according to release member's equipment D that releases order, corresponding Personal Unlocking Key by
Hidden state originally becomes visible state, and administrator can obtain this from member device A, member device B and member device C
A little visible Personal Unlocking Keys, and these Personal Unlocking Keys are carried in unlock instruction and are input to member device D, so that member sets
Personal Unlocking Key in unlock instruction is carried out one with the Personal Unlocking Key for local license that member device D is locally saved by standby D
Cause property compares, and when comparison result is consistent, identification is unlocked successfully.
Certainly, if member device D is that new IRF system is added after restarting, member device D can discharge shared automatically
Local license, becomes the corresponding Personal Unlocking Key of local license as it can be seen that i.e. member device D automatically terminates locking state,
After new IRF system is added, local license can be shared.
In conclusion the embodiment of the present application is when the member device of shared local license is main member device, if supervised
The new member device that IRF system is added is measured, then trial unlock can be carried out to local license, it, can be with if unlock failure
Local license is not shared to the new member device that IRF system is added；Since IRF system can be added to new in the embodiment of the present application
The process that the member device of system unconditionally shares license is controlled, therefore can alleviate member device to a certain extent
Between unconditionally share the state that member device caused by license obtains a large amount of additional license.
It should be noted that for simple description, therefore, it is stated as a series of action groups for embodiment of the method
It closes, but those skilled in the art should understand that, the embodiment of the present application is not limited by the described action sequence, because according to
According to the embodiment of the present application, certain steps can use other sequences or carry out simultaneously.Secondly, those skilled in the art also should
Know, the embodiments described in the specification are all preferred embodiments, and related movement not necessarily the application is implemented
Necessary to example.
Referring to Fig. 3, the Compliance control device of licensing license of the one of embodiment of the application a kind of is shown
Structural block diagram.The device can be applied to the member device in IRF system, can specifically include:
First shared processing module 301, for sharing the local of the member device after IRF system foundation
License, and the local license is locked, it generates and saves and the IRF system for the local license
Each Personal Unlocking Key is sent to corresponding other member devices by the corresponding Personal Unlocking Key of the other member devices of each of system；
Key Acquisition Module 302 is used for when the member device is main member device, if monitored described in newly addition
The member device of IRF system, the member in addition to the member device being added from the IRF system except the member device and newly set
It is standby to obtain the Personal Unlocking Key for being directed to the local license；And
First does not share processing module 303, in the unlock for the local license for judging locally to save
When key and the inconsistent Personal Unlocking Key of acquisition, determines and unlock the local license failure, do not share the local
license。
In a kind of alternative embodiment of the application, the first shared processing module 301 can be specifically used for according to default
Encryption Algorithm, the MAC Address of the MAC Address to the member device and each other member devices carries out cryptographic calculation respectively,
Obtain each Personal Unlocking Key.
In another alternative embodiment of the application, described device can also include:
Second shared processing module, in the Personal Unlocking Key for the local license for judging locally to save
When consistent with the Personal Unlocking Key of acquisition, determine and unlock the local license success, share the local license again, and
Again the local license is locked, regenerated for the local license and save with newly be added member set
Each of IRF system after the standby corresponding Personal Unlocking Key of other member devices.
In another alternative embodiment of the application, described device can also include:
Second does not share processing module, for leaving the IRF system in the member device and new IRF system being added
Afterwards, if the local license is in locking state, the local license is not shared.
In another alternative embodiment of the application, described device can also include:
Release module, for after the member device leaves the IRF system and new IRF system is added, if institute
It states local license and is in locking state, and receive unlock instruction, then judge the Personal Unlocking Key carried in the unlock instruction
It is whether consistent for the local Personal Unlocking Key of license with what is locally saved；
Third shares processing module, and the Personal Unlocking Key for carrying in the unlock instruction is directed to institute with what is locally saved
State local license Personal Unlocking Key it is consistent when, determine and unlock the local license successfully, share the local
license。
All the embodiments in this specification are described in a progressive manner, the highlights of each of the examples are with
The difference of other embodiments, the same or similar parts between the embodiments can be referred to each other.
About the device in above-described embodiment, wherein modules execute the concrete mode of operation in related this method
Embodiment in be described in detail, no detailed explanation will be given here.
Those skilled in the art after considering the specification and implementing the invention disclosed here, will readily occur to its of the application
Its embodiment.This application is intended to cover any variations, uses, or adaptations of the application, these modifications, purposes or
Person's adaptive change follows the general principle of the application and including the undocumented common knowledge in the art of the disclosure
Or conventional techniques.The description and examples are only to be considered as illustrative, and the true scope and spirit of the application are by following
Claim is pointed out.
It should be understood that the application is not limited to the precise structure that has been described above and shown in the drawings, and
And various modifications and changes may be made without departing from the scope thereof.Scope of the present application is only limited by the accompanying claims
The foregoing is merely the preferred embodiments of the application, not to limit the application, it is all in spirit herein and
Within principle, any modification, equivalent replacement, improvement and so on be should be included within the scope of protection of this application.
Compliance control method to a kind of licensing provided herein and a kind of Compliance control of licensing above
Device is described in detail, and specific examples are used herein to illustrate the principle and implementation manner of the present application, with
The explanation of upper embodiment is merely used to help understand the present processes and its core concept；Meanwhile for the general of this field
Technical staff, according to the thought of the application, there will be changes in the specific implementation manner and application range, in conclusion
The contents of this specification should not be construed as limiting the present application.
Claims (10)
1. a kind of Compliance control method of licensing license, which is characterized in that be applied in intelligent elastic framework IRF system
Member device, which comprises
After IRF system foundation, the local license of the member device is shared, and carry out to the local license
It locks, is generated for the local license and save unlock corresponding with each of the IRF system other member devices
Each Personal Unlocking Key is sent to corresponding other member devices by key；
When the member device is main member device, if monitoring the member device that the IRF system is newly added, from described
Other member devices in addition to the member device being added in IRF system except main member device and newly, which obtain, is directed to the local
The Personal Unlocking Key of license；
When judging locally to save for the Personal Unlocking Key of the local license and the inconsistent Personal Unlocking Key of acquisition,
It determines and unlocks the local license failure, do not share the local license.
2. the method according to claim 1, wherein generating each Personal Unlocking Key by following manner:
According to predetermined encryption algorithm, respectively the MAC Address of the MAC Address to the member device and each other member devices into
Row cryptographic calculation obtains each Personal Unlocking Key.
3. the method according to claim 1, wherein the method also includes:
When the Personal Unlocking Key for the local license for judging locally to save is consistent with the Personal Unlocking Key of acquisition, really
Surely the local license success is unlocked, shares the local license again, and carry out again to the local license
It locks, regenerated for the local license and saves and is other with each of the IRF system after newly addition member device
The corresponding Personal Unlocking Key of member device.
4. the method according to claim 1, wherein the method also includes:
After the member device leaves the IRF system and new IRF system is added, if the local license is in
Locking state does not share the local license then.
5. the method according to claim 1, wherein the method also includes:
After the member device leaves the IRF system and new IRF system is added, if the local license is in
Locking state, and receive unlock instruction, then judge the Personal Unlocking Key carried in the unlock instruction whether with locally save
It is consistent for the Personal Unlocking Key of the local license；
The local license success is unlocked if so, determining, shares the local license.
6. a kind of Compliance control device of licensing license, which is characterized in that be applied in intelligent elastic framework IRF system
Member device, described device includes:
First shared processing module, for sharing the local license of the member device after IRF system foundation, and
Each of the local license is locked, generate and saved with the IRF system for the local license
The corresponding Personal Unlocking Key of other member devices, is sent to corresponding other member devices for each Personal Unlocking Key；
Key Acquisition Module is used for when the member device is main member device, if monitoring that the IRF system is newly added
Member device, other member devices in addition to the member device being added from the IRF system except main member device and newly obtain
Take the Personal Unlocking Key for the local license；And
First does not share processing module, in the Personal Unlocking Key judging locally to save for the local license and
When the Personal Unlocking Key of acquisition is inconsistent, determines and unlock the local license failure, do not share the local license.
7. device according to claim 6, which is characterized in that the first shared processing module is specifically used for according to pre-
If Encryption Algorithm, the MAC Address of the MAC Address to the member device and each other member devices carries out encryption fortune respectively
It calculates, obtains each Personal Unlocking Key.
8. device according to claim 6, which is characterized in that described device further include:
Second shared processing module, for judging the Personal Unlocking Key locally saved for the local license and obtaining
When the Personal Unlocking Key taken is consistent, determines and unlock the local license success, share the local license again, and again
The local license is locked, after regenerating for the local license and save and member device newly is added
Each of the IRF system corresponding Personal Unlocking Key of other member devices.
9. device according to claim 6, which is characterized in that described device further include:
Second does not share processing module, for after the member device leaves the IRF system and new IRF system is added,
If the local license is in locking state, the local license is not shared.
10. device according to claim 6, which is characterized in that described device further include:
Release module, for after the member device leaves the IRF system and new IRF system is added, if described
Ground license is in locking state, and receives unlock instruction, then whether judges the Personal Unlocking Key carried in the unlock instruction
It is consistent for the local Personal Unlocking Key of license with what is locally saved；
Third shares processing module, and the Personal Unlocking Key for carrying in the unlock instruction is directed to described with what is locally saved
When the Personal Unlocking Key of ground license is consistent, determines and unlock the local license success, share the local license.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610674610.9A CN106295254B (en) | 2016-08-16 | 2016-08-16 | A kind of Compliance control method and device of licensing |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201610674610.9A CN106295254B (en) | 2016-08-16 | 2016-08-16 | A kind of Compliance control method and device of licensing |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN106295254A CN106295254A (en) | 2017-01-04 |
| CN106295254B true CN106295254B (en) | 2019-06-25 |
Family
ID=57679208
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201610674610.9A Active CN106295254B (en) | 2016-08-16 | 2016-08-16 | A kind of Compliance control method and device of licensing |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN106295254B (en) |
Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1647052A (en) * | 2002-04-12 | 2005-07-27 | 沃达方集团有限公司 | Method ans system for distribution of encrypted data in a mobile network |
| CN101043403A (en) * | 2007-03-15 | 2007-09-26 | 西安电子科技大学 | Field based digital copyright protecting family network system |
Family Cites Families (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| JP2006155332A (en) * | 2004-11-30 | 2006-06-15 | Toshiba Corp | Apparatus and method for outputting contents, and apparatus and method for acquiring contents |
| US20070261114A1 (en) * | 2006-05-01 | 2007-11-08 | Michael Pomerantsev | Method and system for secure sharing of personal information |
-
2016
- 2016-08-16 CN CN201610674610.9A patent/CN106295254B/en active Active
Patent Citations (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1647052A (en) * | 2002-04-12 | 2005-07-27 | 沃达方集团有限公司 | Method ans system for distribution of encrypted data in a mobile network |
| CN101043403A (en) * | 2007-03-15 | 2007-09-26 | 西安电子科技大学 | Field based digital copyright protecting family network system |
Also Published As
| Publication number | Publication date |
|---|---|
| CN106295254A (en) | 2017-01-04 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US10181037B2 (en) | Secure creation of encrypted virtual machines from encrypted templates | |
| RU2620998C2 (en) | Method and authentication device for unlocking administrative rights | |
| CN106462718B (en) | Store the rapid data protection of equipment | |
| US8984651B1 (en) | Integrated physical security control system for computing resources | |
| US9317708B2 (en) | Hardware trust anchors in SP-enabled processors | |
| KR20190033580A (en) | Block Chain Implementation Method and System | |
| CN104008345B (en) | Guard method to the privacy of user data of application program and device | |
| CN106104558A (en) | Secure hardware for striding equipment trusted applications | |
| US20190258782A1 (en) | Securing temporal digital communications via authentication and validation for wireless user and access devices with securitized containers | |
| CN110891062B (en) | Password changing method, server and storage medium | |
| CN106462438A (en) | Attestation of a host containing a trusted execution environment | |
| CN103870749B (en) | A kind of safety monitoring system and method for realizing dummy machine system | |
| CN108038384B (en) | High-safety cluster shared storage virtualization method | |
| CN104320389A (en) | Fusion identify protection system and fusion identify protection method based on cloud computing | |
| CN108595983B (en) | Hardware architecture based on hardware security isolation execution environment and application context integrity measurement method | |
| Banirostam et al. | A trust based approach for increasing security in cloud computing infrastructure | |
| CN103077345A (en) | Software authorization method and system based on virtual machine | |
| CN104471584A (en) | Network based management of protected data sets | |
| Banerjee et al. | Blockchain-based security layer for identification and isolation of malicious things in IoT: A conceptual design | |
| CN112784258A (en) | Trusted computing system and safety protection system | |
| US9043460B1 (en) | Distributed management with embedded agents in enterprise apps | |
| CN106295254B (en) | A kind of Compliance control method and device of licensing | |
| CN102983969A (en) | Security login system and security login method for operating system | |
| CN106295267B (en) | It is a kind of access electronic equipment physical memory in private data method and apparatus | |
| Debes et al. | Blindtrust: Oblivious remote attestation for secure service function chains |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| CB02 | Change of applicant information |
Address after: 310052 Binjiang District Changhe Road, Zhejiang, China, No. 466, No. Applicant after: Xinhua three Technology Co., Ltd. Address before: 310053 Hangzhou science and Technology Development Zone, Zhejiang high tech park, No. six and road, No. 310 Applicant before: Huasan Communication Technology Co., Ltd. |
|
| CB02 | Change of applicant information | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |