JP2013109544A - Information processing device and program - Google Patents

Abstract

PROBLEM TO BE SOLVED: To suppress unauthorized use of a program in a device unmonitorable via a network.SOLUTION: An information processing device comprises: a reception unit that receives license information indicating use authority of software; a determination unit that determines whether identification information matching identification information of the license information is stored in a storage unit; and a use permission unit that makes the software available on the basis of the license information when the identification information matching the identification information of the license information is not stored in the storage unit.

Description

  The present invention relates to an information processing apparatus and program, and more particularly to an information processing apparatus and program that uses software based on a license.

  A system that remotely executes license management of software of an information processing apparatus using a network is already known. In such a system, a license server that is a license issuer and an information processing apparatus that is permitted to execute software based on the license need to be connected to a network. However, in an office or the like where an information processing apparatus is installed, there is an environment in which communication with the outside is blocked in order to prevent entry of a virus or the like or information leakage. In such an environment, license management cannot be performed by a license management server installed in an external network environment.

  Therefore, for example, Patent Document 1 discloses a technique for introducing license information to an image forming apparatus installed in an environment where communication with the outside is blocked.

  In the technique described in Patent Document 1, an operator who introduces license information needs to visit the environment where the image forming apparatus is installed a plurality of times. Such a situation is not only burdensome for the operator, but also takes time to introduce the license information, and is inconvenient for users who cannot use the software during that time.

  Therefore, the inventor of the present application sets a state in which communication with the outside is permitted for the specific information processing apparatus A in an environment where communication with the outside is blocked, and the user purchases in advance using the information processing apparatus A. We are studying the construction of a system that can download license information related to licenses from the license management server. The user can introduce the license information downloaded using the information processing apparatus A to the information processing apparatus B in which communication with the outside is interrupted and the licensed software operates. When the license information introduced to the information processing apparatus B is no longer necessary, the user deletes the license for the information processing apparatus B and then uses the information processing apparatus A to transfer the license to the license management server. Can be returned. When the returned license becomes necessary again, the user can download again the license information related to the license using the information processing apparatus A.

  According to such a system, the user can quickly obtain a license for the software used in the information processing apparatus B that is disconnected from the outside.

  However, if the handling of the license information is entrusted to the user, there is a possibility that the software is illegally used.

  For example, even if the license information is deleted from the information processing apparatus B and the license related to the license information is returned to the license management server, there may be a situation where the license information remains at the user's hand. This is because the license information is electronic data, and can be easily copied, for example, when the license information is downloaded. In this case, the license management server recognizes that the license has been returned for the user. Therefore, the user uses the information processing apparatus A, and the license information related to the returned license is related to the information processing apparatus C that is different from the information processing apparatus B and is disconnected from the outside. Can be downloaded from the license management server. Then, the user can own the license information for the information processing apparatus B and the license information for the information processing apparatus C based on one license, and the two information processing apparatuses (that is, authorized by the license). You will be able to use the software.

  Since the information processing apparatuses B and C are disconnected from the outside, the license management server cannot detect the occurrence of such a situation.

  The present invention has been made in view of the above points, and an object of the present invention is to provide an information processing apparatus and a program that can suppress unauthorized use of a program in an apparatus that cannot be monitored via a network.

  Therefore, in order to solve the above problem, the information processing apparatus determines whether or not the reception unit that receives the license information indicating the use right of the software and whether the identification information that matches the identification information of the license information is stored in the storage unit. A determination unit for determining, and a use permission unit that sets the software in a usable state based on the license information when identification information that matches the identification information of the license information is not stored in the storage unit. Have.

  Unauthorized use of programs in devices that cannot be monitored via the network can be suppressed.

It is a figure which shows the system configuration example of the license management system in embodiment of this invention. It is a figure which shows the hardware structural example of the information processing apparatus in embodiment of this invention. It is a figure which shows the function structural example of the license management system in 1st embodiment. It is a figure which shows the structural example of license information. It is a sequence diagram for demonstrating an example of the process sequence performed at the time of registration of the license information to information processing apparatus in 1st embodiment. It is a figure which shows the example of description of the license information in a license file. It is a figure which shows the structural example of a product key information storage part. It is a figure which shows the structural example of a license information production | generation history storage part. It is a flowchart for demonstrating an example of the process sequence of the production | generation process of license information. It is a flowchart for demonstrating an example of the process sequence of a registration process of license information. It is a sequence diagram for demonstrating an example of the process sequence performed at the time of return of the license in 1st embodiment. It is a figure which shows an example of the process sequence of the return process of a license. It is a figure which shows the function structural example of the license management system in 2nd embodiment. It is a sequence diagram for demonstrating an example of the process sequence performed at the time of registration of license information in 2nd embodiment. It is a sequence diagram for demonstrating an example of the process sequence performed at the time of return of the license in 2nd embodiment.

  Hereinafter, embodiments of the present invention will be described with reference to the drawings. FIG. 1 is a diagram showing a system configuration example of a license management system according to an embodiment of the present invention. In the license management system 1 of FIG. 1, a user environment E1 is a system environment in which software (hereinafter referred to as “management target software”) that is a management target of a license (use authority) is used. For example, the user environment E1 corresponds to the office of the user of the management target software. In the present embodiment, the functions and applications to be managed are not limited to predetermined ones. Moreover, the management target software is not necessarily a “program”. For example, as long as the software to be managed can be a license management target, it may be electronic data having contents such as sound, image, moving image, or text.

  In the user environment E1, one or more information processing devices 10 such as the information processing devices 10a and 10b, and an intermediary device 20 are installed. The information processing apparatus 10 is a computer that is an installation destination of software to be managed.

  The intermediary device 20 is a computer that mediates information exchange between each information processing device 10 and the license management device 30. That is, in the present embodiment, each information processing apparatus 10 installed in the user environment E1 cannot communicate with the license management apparatus 30 via a network. For example, for the purpose of ensuring security or the like, each information processing apparatus 10 is disconnected from the external network of the user environment E1, and only the mediation apparatus 20 can communicate with the external network. May be assumed.

  Therefore, each information processing apparatus 10 cannot directly exchange information with the license management apparatus 30. Therefore, the intermediary device 20 indirectly implements the information exchange. For example, the mediation device 20 downloads license information, which is information indicating the scope of the license of the management target software, from the license management device 30 or transmits a request for returning the license to the license management device 30. In the present embodiment, “license” refers to the right to use software. The scope of the license is defined by the usage target, usage location, time, and the like. The usage target is managed software. The usage place is the information processing apparatus 10.

  In the user environment E1, each information processing device 10, the mediation device 20, and the like may be connected to each other by a network that cannot be connected to an external network.

  On the other hand, the vendor environment E2 is a system environment on the seller side of software to be managed. For example, the vendor environment E2 is operated by a manufacturer of software to be managed. A license management device 30 is installed in the vendor environment E2.

  The license management device 30 is a computer that manages licenses of software to be managed purchased by a user.

  FIG. 2 is a diagram illustrating a hardware configuration example of the information processing apparatus according to the embodiment of the present invention. The information processing apparatus 10 in FIG. 2 includes a drive device 100, an auxiliary storage device 102, a memory device 103, a CPU 104, an interface device 105, a display device 106, an input device 107, and the like that are mutually connected by a bus B.

  A program for realizing processing in the information processing apparatus 10 is provided by a recording medium 101 such as a CD-ROM. When the recording medium 101 storing the program is set in the drive device 100, the program is installed from the recording medium 101 to the auxiliary storage device 102 via the drive device 100. However, the program need not be installed from the recording medium 101 and may be downloaded from another computer in the user environment E1 via the network. The auxiliary storage device 102 stores the installed program and also stores necessary files and data.

  The memory device 103 reads the program from the auxiliary storage device 102 and stores it when there is an instruction to start the program. The CPU 104 realizes functions related to the information processing apparatus 10 according to a program stored in the memory device 103. The interface device 105 is used as an interface for connecting to a network in the user environment E1. The display device 106 displays a GUI (Graphical User Interface) or the like by a program. The input device 107 includes a keyboard and a mouse, and is used for inputting various operation instructions.

  Note that the intermediary device 20 and the license management device 30 also have hardware similar to the hardware shown in FIG. However, the license management apparatus 30 does not necessarily include the display device 106 and the input device 107.

  FIG. 3 is a diagram illustrating a functional configuration example of the license management system according to the first embodiment.

  3, the information processing apparatus 10 includes a device identification information display unit 121, a license information reception unit 122, a device identification information confirmation unit 123, a license ID confirmation unit 124, a product ID confirmation unit 125, a license registration unit 126, and a license ID save. A unit 127, a license return information generation unit 128, a license invalidation unit 129, a conversion unit 130, a use permission / rejection determination unit 131, and the like. Each of these units is realized by processing that the license management program 120 installed in the information processing apparatus 10 causes the CPU 104 to execute.

  The information processing apparatus 10 further includes a license information storage unit 141, a license ID storage unit 142, and the like. Each of these storage units can be realized using the auxiliary storage device 102, for example.

  The device identification information display unit 121 displays identification information (hereinafter referred to as “device identification information”) for identifying an individual (or body) of the information processing device 10 on the display device 106 in accordance with an instruction input by the user. Let The device identification information is information that is required when the license information is downloaded from the license management device 30 using the mediation device 20. As an example of the device identification information, the manufacturing number or the MAC address of the information processing device 10 can be cited.

  FIG. 4 is a diagram illustrating a configuration example of license information. In FIG. 4, the license information includes values for each item such as device identification information, license ID, product ID, license type, and expiration date.

  The device identification information is device identification information of the information processing device 10 that is permitted to use the management target software based on the license information. The license ID is identification information of license information. The product ID is identification information of managed software that is permitted to be used based on the license information. The product ID does not identify the individual managed software, but is identification information for each product of the managed software.

  The license type is a license type. The usage period is a period during which use of the management target software is permitted based on the license information.

  Returning to FIG. The license information receiving unit 122 receives an input of license information downloaded from the license management apparatus 30 using the mediation apparatus 20. The device identification information confirmation unit 123 confirms whether or not the device identification information included in the license information received by the license information reception unit 122 matches the device identification information of the information processing device 10. Whether license information is registered in the information processing apparatus 10 is determined.

  The license ID confirmation unit 124 confirms whether the license ID that matches the license ID included in the license information received by the license information reception unit 122 is stored in the license ID storage unit 142. Whether license information is registered in the information processing apparatus 10 is determined. The license ID storage unit 142 stores the license ID of the license information registered in the information processing apparatus 10.

  The product ID confirmation unit 125 confirms whether or not the product ID included in the license information received by the license information reception unit 122 matches the product ID of the management target software installed in the information processing apparatus 10. As a result, whether or not to register the license information in the information processing apparatus 10 is determined.

  The license registration unit 126 makes the management target software available based on the license information whose registration is permitted by the device identification information confirmation unit 123, the license ID confirmation unit 124, and the product ID confirmation unit 125. For example, the license registration unit 126 registers the license information in the license information storage unit 141. The license information storage unit 141 is a predetermined storage area in which license information is registered in the auxiliary storage device 102. That is, when the license information is registered (stored) in the license information storage unit 141, the management target software that is the target of the license information becomes available. The management target software that is the target of the license information refers to management target software whose product ID is included in the license information.

  The license ID saving unit 127 saves the license ID of the license information registered in the license information storage unit 141 in the license ID storage unit 142.

  When a license information invalidation instruction is input, the license return information generation unit 128 returns information for returning a license based on the license information to be invalidated to the license management apparatus 30 (hereinafter, “license return”). Information ").

  The license invalidation unit 129 executes processing for invalidating the license information. The conversion unit 130 decrypts the encrypted license information, encrypts the license return information, and the like. That is, the license information received by the license information receiving unit 122 is encrypted.

  When a usage instruction for the management target software is input, the usage permission / rejection determination unit 131 determines whether the usage is permitted.

  The intermediary device 20 includes a license information request unit 21, a license information reception unit 22, a license return request unit 23, and the like. Each of these units is realized by processing that the mediation program 25 installed in the mediation device 20 causes the CPU of the mediation device 20 to execute.

  The license information request unit 21 transmits a license information acquisition request (download request) to the license management apparatus 30. In the acquisition request, the device identification information of the information processing apparatus 10 that is the usage target of the management target software and the product key for the management target software to be used are specified. The product key is identification information issued to a purchaser when purchasing a license for software to be managed. The product key is used as information for identifying the purchased license.

  In the present embodiment, the purchase form of the license of the management target software (that is, the acquisition form of the product key) and the acquisition form of the entity of the management target software are not questioned. For example, a license may be purchased through a license sales site operated by the vendor environment E2, and a product key for the license may be provided to the user at the sales site. The entity of the software to be managed may be provided to the user together with the purchase of the license, or may be downloaded separately from the purchase of the license.

  The license information receiving unit 22 receives license information generated by the license management apparatus 30 in response to a license information acquisition request from the license management apparatus 30.

  The license return request unit 23 transmits a license return request to the license management apparatus 30. In the return request, license return information related to the license to be returned is specified.

  The license management apparatus 30 includes a license information generation unit 31, a license return processing unit 32, a conversion unit 33, and the like. Each of these units is realized by processing that the program installed in the license management apparatus 30 causes the CPU of the license management apparatus 30 to execute. The license management apparatus 30 also includes a product key information storage unit 34, a license information generation history storage unit 35, and the like. Each of these units can be realized by using an auxiliary storage device of the license management device 30 or a storage device connected to the license management device 30 via a network.

  In response to the license information acquisition request, the license information generation unit 31 generates license information regarding the information processing apparatus 10 and the management target software specified by the device identification information and the product key specified in the acquisition request.

  In response to the license return request, the license return processing unit 32 executes a return process for the license relating to the license return information specified in the return request. Note that returning a license means that a license in use is put into an unused state. For an unused license, generation of license information is permitted.

  The conversion unit 33 performs encryption of license information generated by the license information generation unit 31, decryption of license return information, and the like.

  The product key information storage unit 34 stores information related to the purchased license. The license information generation history storage unit 35 stores the values of main items of the license information for each license information generated by the license information generation unit 31.

  Hereinafter, a processing procedure executed in the information processing system 1 according to the first embodiment will be described. FIG. 5 is a sequence diagram for explaining an example of a processing procedure executed when license information is registered in the information processing apparatus in the first embodiment. As a premise of FIG. 5, it is assumed that the management target software has already been installed in the information processing apparatus 10a, and a license for the management target software has been purchased in the user environment E1. That is, it is assumed that the product key has already been obtained in the user environment E1. However, it is assumed that the license information related to the management target software is not registered (or introduced) in the information processing apparatus 10a.

  In step S101, the operator inputs an instruction to display device identification information to the information processing device 10a. In response to the display instruction, the device identification information display unit 121 reads the device identification information of the information processing device 10a from a predetermined storage area and displays the information on the display device 106 (S102). For example, the operator writes down the displayed device identification information.

  Subsequently, the operator performs work in the mediation device 20. In step S <b> 103, the operator inputs the device identification information and the product key written down to the mediation device 20. Subsequently, the license information request unit 21 designates the input device identification information and product key, and transmits a license information acquisition request to the license management device 30 (S104).

  When the license management device 30 receives a license information acquisition request, the license information generation unit 31 generates license information (FIG. 4) based on the device identification information and the product key specified in the acquisition request. (S105). In the first embodiment, the generated license information is stored (described) in a file (hereinafter referred to as “license file”).

  FIG. 6 is a diagram illustrating a description example of license information in the license file. In FIG. 6, DeviceID, LicenseID, ProductID, LicenseType, and LicenseTerm respectively correspond to device identification information, license ID, product ID, license type, and expiration date.

  In the generated license information, the device identification information specified in the license information acquisition request is used as the device identification information. A license ID is newly generated. As the values of the other items, values associated with the product key specified in the license information acquisition request in the product key information storage unit 34 are used.

  FIG. 7 is a diagram illustrating a configuration example of the product key information storage unit. In FIG. 7, one record of the product key information storage unit 34 includes a product key, software name, product ID, license type, usage authority, number of licenses, number of remaining licenses, and the like. In the product key information storage unit 34, a record corresponding to the license is registered in accordance with the purchase of the license.

  The software name is the name of the management target software to be licensed. The number of licenses is the number that can use the licenses simultaneously. The number of remaining licenses is the number of licenses that are not used. At the time of license purchase, the number of remaining licenses matches the number of licenses. Each time license information is generated in response to a license information acquisition request, the number of remaining licenses decreases. Each time a license is returned in response to a license return request, the number of remaining licenses increases.

  In step S105, the license information generation unit 31 registers a record relating to the generated license information in the license information generation history storage unit 35.

  FIG. 8 is a diagram illustrating a configuration example of the license information generation history storage unit. In FIG. 8, one record in the license information generation history storage unit 35 includes device identification information, a product key, a license ID, and the like. In each item, the same value as the value included in the generated license information is recorded.

  Subsequently, the conversion unit 33 encrypts the generated license information using a public key cryptosystem private key (private key) (S106). This is because the license information is returned to the intermediary device 20 via the network, so that the license information is protected from eavesdropping and the like. In the encryption process, the license information itself (the contents of the license file) may be targeted, or the license file itself may be targeted. In the present embodiment, it is assumed that the license file itself is encrypted.

  Subsequently, the license information generating unit 31 returns an encrypted license file (S107). The license file is received by the license information receiving unit 22 in the mediating apparatus 20. Subsequently, the license information receiving unit 22 stores the received license file in the auxiliary storage device of the mediation device 20 (S108).

  Subsequently, the operator takes out the license file stored in the mediation device 20 to, for example, an external storage medium set in the mediation device 20 (S109). The external storage medium is a portable storage medium that can be read and written, such as a USB memory, an SD card, and a CD-RW.

  Subsequently, the operator sets the external storage medium in which the license file is stored in the information processing apparatus 10a, and inputs the license file to the information processing apparatus 10a (S110).

  In subsequent steps S111 to S114, whether or not to register the license information stored in the license file is determined. Details of steps S111 to S114 will be described later.

  If registration is permitted in steps S111 to S114, the license registration unit 126 registers the license information in the license information storage unit 141 (S115). As a result, the management target software installed in the information processing apparatus 10a becomes available. That is, when a usage instruction for the management target software is input, the usage permission / rejection determination unit 131 includes the product ID of the management target software and the device identification information of the information processing apparatus 10a, and the license whose usage period has not expired It is determined whether or not the information is registered (stored) in the license information storage unit 141. When the corresponding license information is registered, the use permission / refusal determination unit 131 permits the use of the management target software. When the corresponding license information is not registered, the use permission / refusal determination unit 131 prohibits the use of the management target software.

  In the license information storage unit 141, the license information is preferably stored after being encrypted. This is to prevent unauthorized editing of the license information.

  Next, details of step S105 will be described. FIG. 9 is a flowchart for explaining an example of the processing procedure of the license information generation processing.

  In step S121, the license information generation unit 31 acquires the device identification information and the product key specified in the license information generation request. Subsequently, the license information generation unit 31 searches the license information generation history storage unit 35 for a record including the device identification information and the product key (S123). When the corresponding record is searched, that is, when the license information is generated for the device identification information and the product key (Yes in S123), the license information generation unit 31 license information regarding the device identification information and the product key. Is regenerated (S124). In this case, the license information generated includes the license ID associated with the device identification information and the product key in the license information generation history storage unit 35. That is, the generated license information is the same as the previously generated license information regarding the device identification information and the product key. The same license information is regenerated because it is considered that there is no possibility of unauthorized use no matter how many times it is issued. The same license information is regenerated (reissued), for example, when the user who obtained the license information loses the license information before registering it in the information processing apparatus 10. .

  On the other hand, when the corresponding record is not searched, that is, when it is the first request for generating license information regarding the device identification information and the product key (No in S123), the license information generating unit 31 determines the license related to the product key. The number of remaining licenses is confirmed (S125). Specifically, it is determined in the product key information storage unit 34 whether or not the number of remaining licenses stored in association with the product key is 1 or more. When N (N ≧ 2) or more pieces of device identification information are specified for one product key in the license acquisition request, it is determined whether or not the number of remaining licenses is N or more. .

  When the number of remaining licenses is 1 or N or more (Yes in S126), the license information generation unit 31 generates 1 or N pieces of license information regarding the device identification information and the product key (S127). At this time, different license IDs are assigned to the respective license information.

  Subsequently, the license information generation unit 31 updates the value of the number of remaining licenses associated with the product key in the product key information storage unit 34 (S128). Specifically, the number of remaining licenses is subtracted by the number of generated license information. As a result, it is recorded in the product key information storage unit 34 that the license relating to the product key is used or consumed by the number of generated license information.

  Subsequently, the license information generation unit 31 registers a record including the device identification information, the product key, and the license ID of each generated license information in the license information generation history storage unit 35 (S129).

  On the other hand, when the number of remaining licenses is 1 or less than N (No in S126), the license information generation unit 31 generates information indicating an error without generating license information. In this case, in step S107 of FIG. 5, information indicating an error is returned to the mediation apparatus 20, and the subsequent processing is stopped.

  Next, with reference to FIG. 5, details of processing (S111 to S115) executed when a license file is input to the information processing apparatus 10a will be described. FIG. 10 is a flowchart for explaining an example of the processing procedure of the license information registration processing. In FIG. 10, steps corresponding to FIG. 5 are given the same step numbers as in FIG. 5.

  In step S111a, the conversion unit 130 decrypts the license file using a public key corresponding to the secret key obtained by encrypting the license file (S111). If the decryption is successful (Yes in S111b), the device identification information confirmation unit 123 acquires the device identification information from the decrypted license information (hereinafter simply referred to as “license information”) (S112a). Subsequently, the device identification information confirmation unit 123 acquires the device identification information of the information processing device 10a from the information processing device 10a (S112b). Subsequently, the device identification information confirmation unit 123 compares the device identification information acquired from the license information with the device identification information acquired from the information processing device 10a (S112c). If both pieces of device identification information match (Yes in S112d), the process proceeds to step S113.

  That is, in step S112, the validity of the registration destination of the license information is confirmed.

  In step S113a, the license ID confirmation unit 124 acquires a license ID from the license information. Subsequently, the license ID confirmation unit 124 determines whether or not the license ID acquired from the license information is stored (registered) in the license ID storage unit 142 (S113b). If the license ID acquired from the license information is not stored in the license ID storage unit 142 (Yes in S113b), the process proceeds to step S114.

  As will be described later, the license ID storage unit 142 stores a license ID of license information that has been registered in the information processing apparatus 10a. Therefore, by executing step S113, the license information permitted to be registered is limited to the license information registered for the first time. The significance that the license information permitted to be registered is limited to the license information registered for the first time will be described later.

  In step S114a, the product ID confirmation unit 125 acquires the product ID from the license information. Subsequently, the product ID confirmation unit 125 acquires the product ID of each managed software installed in the information processing apparatus 10a (S114b). The product ID of each management target software installed in the information processing apparatus 10a is acquired from the auxiliary storage device 102 of the information processing apparatus 10a, for example.

  Subsequently, the product ID confirmation unit 125 compares the product ID acquired from the license information with the product ID acquired from the information processing apparatus 10a (S114c). If any of the product IDs acquired from the information processing apparatus 10a matches the product ID acquired from the license information (Yes in S114d), the process proceeds to step S115.

  That is, in step S114, it is determined whether or not the license information corresponds to the management target software installed in the information processing apparatus 10a.

  In step S115, the license registration unit 126 registers the license information in the license information storage unit 141 (S115). As a result, the management target software becomes available.

  On the other hand, if the device identification information of the license information does not match the device identification information acquired from the information processing device 10a (No in S112d), the license ID of the license information is stored in the license ID storage unit 142 (S113b). No), or if the management target software having the product ID of the license information is not installed in the information processing apparatus 10a (No in S114b), the license registration unit 126 indicates that the license information is not correct for the information processing apparatus 10a. For example, information indicating an error is displayed on the display device 106 (S116).

  In FIG. 10, the order of steps S112, S113, and S114 may be changed.

  Next, processing executed when the license is returned will be described. For example, when the information processing apparatus 10 a no longer needs to use the management target software, the license related to the license information corresponding to the management target software is returned to the license management apparatus 30.

  FIG. 11 is a sequence diagram for explaining an example of a processing procedure executed when a license is returned in the first embodiment. As a premise of FIG. 11, it is assumed that the license information related to the license to be returned is registered in the information processing apparatus 10a.

  In step S201, the operator inputs a license invalidation instruction to the information processing apparatus 10a. In the instruction, for example, a product key is designated. Subsequently, the license ID saving unit 127 stores, in the license ID storage unit 142, the license ID included in the license information to be invalidated among the license information stored in the license information storage unit 141. Register (S202). That is, the license ID of the license information is saved in the license ID storage unit 142. Note that the license information to be invalidated refers to license information including the product key specified in the license invalidation instruction.

  Subsequently, the license invalidation unit 129 invalidates the license information of the license to be invalidated (S203). An example of invalidation of license information is deletion from the license information storage unit 141. Alternatively, the license information may be stored in the license information storage unit 141 and information indicating that the license information is invalid may be added. Note that the license invalidation unit 129 may execute the uninstallation of the management target software related to the product ID included in the license information together with the invalidation of the license information.

  If the license information is successfully invalidated, steps S204 and S205 are executed. In other words, when the invalidation of the license information has failed, step S204 and subsequent steps are not executed.

  In step S204, the license return information generation unit 128 generates license return information. The license return information is information for notifying the license management apparatus 30 of the license to be returned. In the present embodiment, it is assumed that license information related to a license to be returned is used as license return information. However, the license return information may be information that can identify the license to be returned. For example, the license return information may be configured only by the license ID related to the license to be returned.

  Subsequently, the conversion unit 130 encrypts a file (hereinafter referred to as “license return file”) in which the license return information is stored (S205). For encryption, a public key in a public key encryption method is used. Note that the combination of the public key and the secret key is different from the combination of the secret key and the public key used for encryption and decryption of the license information. In the present embodiment, since the license return information has the same configuration as the license information, it is possible to distinguish between the license file and the license return file. The significance of enabling the distinction between the two will be described later.

  Subsequently, for example, the operator sets an external storage medium in the information processing apparatus 10a, and takes out a license return file to the external storage medium (S206).

  Subsequently, the operator sets an external storage medium in which the license return file is stored in the mediation device 20, and inputs the license return file to the mediation device 20 (S207).

  The license return request unit 23 of the intermediary device 20 reads, for example, a license return file from the external storage medium in response to an input of a license return instruction by the operator, and sends a license return request including the license return file to the license management device. 30 (S208).

  When the license return file is received by the license management apparatus 30, the conversion unit 33 decrypts the license return file using the secret key (S209). The secret key is a secret key corresponding to the public key used for encrypting the license return file. Therefore, it is different from the secret key used for encrypting the license file.

  If decryption fails, the license return processing unit 32 determines that the license return information is invalid and stops the license return processing. If the decryption is successful, the license return processing unit 32 executes a license return process based on the license return information (S210).

  The saving of the license ID in the license ID storage unit 142 does not necessarily have to be performed in response to a license invalidation request. For example, when registering license information, the license ID of the license information may be saved in the license ID storage unit 142. That is, the license ID storage unit 142 stores the license ID of the license information that can be used for the managed software based on the license information at any timing from the registration of the license information to the invalidation of the license information. It only has to be done.

  Further, when the license information is invalidated not by deleting the license information but by adding information indicating that the license information is invalid, saving the license ID in the license ID storage unit 142 is not necessarily performed. You don't have to. In this case, the license information to which information indicating invalidity is added can perform the same function as the license ID saved in the license ID storage unit 142.

  Details of step S210 will be described. FIG. 12 is a diagram illustrating an example of a processing procedure of a license return process.

  In step S221, the license return processing unit 32 acquires a product key from the license return information. Subsequently, the license return processing unit 32 compares the number of remaining licenses stored in the product key information storage unit 34 with the number of licenses with respect to the acquired product key (S222). Specifically, it is determined whether the number of remaining licenses is less than the number of licenses.

  If the number of remaining licenses is the same as the number of licenses (No in S222), no more licenses can be returned, so the license return processing unit 32 determines that the license return process is an error (S223).

  On the other hand, when the number of remaining licenses is less than the number of licenses (Yes in S222), the license return processing unit 32 updates the value of the number of remaining licenses (S224). That is, 1 is added to the value of the number of licenses. Subsequently, the license return processing unit 32 acquires a license ID from the license return information (S225). Subsequently, the license return information deletes the record including the acquired license ID from the license information generation history storage unit 35 (S226).

  The returned license can be used again by executing FIG. 5 at an arbitrary timing thereafter.

  As described above, according to the license management system 1 in the first embodiment, the unauthorized use of the management target program in the information processing apparatus 10 that the license management apparatus 30 cannot monitor via the network is suppressed. Can do.

  That is, since the license information includes the device identification information and the product ID, the execution of steps S112 and S114 allows the use of the licensed management target software in the information processing device 10 that is not licensed or the license target. In the information processing apparatus 10, use of management target software that is not licensed can be prevented.

  Further, the possibility of unauthorized use due to the license information being handled by the user can also be suppressed. Here, for convenience, it is assumed that the number of licenses purchased by the user is “1”.

  For example, the user who acquired the license information including the device identification information of the information processing device 10a does not register the license information in the information processing device 10a or after registering the license information, and uses the license information to relate to the license information. Assume that a license is to be returned to the license management apparatus 30. Specifically, it is assumed that an external storage medium storing license information downloaded from the license management device 30 is set in the mediation device 20 and a license return instruction is input to the mediation device 20. In this case, the intermediary device 20 treats the license information as license return information, and transmits a license return request including the license information to the license management device 30.

  Such an action returns a license that has already been acquired, and obtains license information for another information processing apparatus 10b, thereby purchasing a license whose number of licenses is “1”. The purpose is to acquire two or more licenses. That is, if the already acquired license is successfully returned, the user can obtain another license information in addition to the license information for the information processing apparatus 10a, and may own two license information in total. it can. As a result, the user can use the management target software in the information processing apparatus 10a and the information processing apparatus 10b.

  However, in this case, the license management apparatus 30 fails to decrypt the license information received together with the license return request. This is because the secret key used for encrypting the license information does not correspond to the secret key used for decrypting the license return information. As a result, unauthorized use as described above can be prevented.

  As is clear from the above, in the present embodiment, the secret key and public key used for encryption and decryption of the license information and the public key and secret key used for encryption and decryption of the license return information are mutually The difference is that it is possible to detect that the license has been returned in a state where the license is not invalidated. In other words, the encryption of the license return information has a role as a signature that proves that the license is invalidated in the information processing apparatus 10.

  Therefore, other methods may be used as long as the purpose of the signature can be achieved. For example, such a signature may be performed by making the configuration of the license return information different from the license information. Differences in configuration include differences in the arrangement order of items, excess or deficiency of items, and the like. The excess or deficiency of items means, for example, a situation in which predetermined information (such as an electronic signature) is added to the license return information, or at least one of device identification information and a product key is missing. In this case, the same public key as the public key used for decrypting the license information may be used for encrypting the license return information. The license return processing unit 32 of the license management apparatus 30 that has received such license return information can confirm that the license has been invalidated based on the received and decrypted configuration of the license return information. .

  Note that encryption is merely an example, and the format of license information or license return information may be converted by applying conversion processing other than encryption to license information and license return information.

  Further, the registration of license information including the license ID saved in the license ID storage unit 142 is rejected, so that the following unauthorized use can be suppressed.

  For example, a user who has successfully invalidated a license registered in the information processing apparatus 10a and has successfully returned the license to the license management apparatus 30 can obtain license information related to the license regarding the information processing apparatus 10b. In this case, if the user holds license information for the information processing apparatus 10a, the user owns two pieces of license information. Therefore, it is assumed that the user tries to register license information for the information processing apparatus 10a in the information processing apparatus 10a again. However, since the license ID of the license information is stored in the license ID storage unit 142 of the information processing apparatus 10a, the registration is rejected. Therefore, the information processing apparatus 10 that can use the management target software based on the two license information owned by the user is limited to the information processing apparatus 10b.

  As described above, the saving of the license ID in the license ID storage unit 142 is performed in order to obtain an effect of preventing reuse of invalid license information.

  Note that the license ID may be information generated from the license information instead of the information included in the license information. For example, the hash value of the license information may be used as the license ID. In this case, the license information may not include the license ID. However, in this case, the license management program 120 installed in the information processing apparatus 10 also needs to know a method (for example, a hash function) for generating a license ID from the license information.

  By the way, there is a possibility that the license management program 120 is analyzed and the configuration of the license information and the license return information, the generation method of the license information and the license return information, etc. are leaked. However, in the present embodiment, the license information or the license return information is encrypted using the encryption key (public key, secret key) that the information processing apparatus 10 or the license management apparatus 30 has. Therefore, even if the license management program 120 is successfully analyzed, it is difficult to illegally generate correctly encrypted license information or license return information unless an encryption key is obtained.

  Next, a second embodiment will be described. In the second embodiment, differences from the first embodiment will be described. Therefore, the points not particularly mentioned may be the same as those in the first embodiment.

  FIG. 13 is a diagram illustrating a functional configuration example of the license management system according to the second embodiment.

  In the second embodiment, the intermediary device 20 has a Web browser 24. That is, it is not necessary to install a dedicated program (mediation program 25) in the mediation device 20 in advance. Note that the license information requesting unit 21, the license information receiving unit 22, and the license return requesting unit 23 are realized by the processing that the Web browser 24 causes the mediation device 20 to execute based on the Web page downloaded from the license management device 30. .

  On the other hand, the license management apparatus 30 further includes a Web page generation unit 36, a data acquisition unit 37, and the like. The web page generation unit 36 generates a web page for displaying a screen on the mediating apparatus 20. The data acquisition unit 37 acquires data input via a screen displayed on the mediation device 20 based on the Web page.

  Hereinafter, a processing procedure executed in the information processing system 1 according to the second embodiment will be described. FIG. 14 is a sequence diagram for explaining an example of a processing procedure executed when license information is registered in the second embodiment. The assumption of FIG. 14 is the same as that of FIG.

  Steps S301 and S302 may be the same as steps S101 and S102 in FIG.

  In step S303, the operator inputs device identification information and a product key on the screen displayed by the Web browser 24. The web browser 24 transmits an HTTP request indicating the license information acquisition request to the license management apparatus 30 including the input device identification information and product key according to the definition of the web page associated with the screen (S304).

  In the license management device 30, when the HTTP request is received, the data acquisition unit 37 acquires device identification information and a product key from the HTTP request (S305). Subsequent steps S306 and S307 may be the same as steps S105 and S106 in FIG. However, in the second embodiment, the license information is not stored in the file but is generated as one character string (text data). The information included in the character string may be the same as in FIG. Hereinafter, the character string indicating the license information is referred to as “license code”. Therefore, in step S307, the license code is encrypted. It is assumed that the result of the license code encryption is also text data.

  Subsequently, the Web page generation unit 36 generates a Web page for displaying a screen including the license code (S308). Subsequently, the Web page generation unit 36 returns an HTTP response including the generated Web page to the Web browser 24 of the mediation apparatus 20 (S309).

  When the Web browser 24 of the intermediary device 20 receives the Web page, the Web browser 24 displays a screen including an encrypted license code in accordance with the definition of the Web page (S310). The operator can know the encrypted license code by browsing the screen.

  Subsequently, the operator inputs the encrypted license code to the information processing apparatus 10a via, for example, a screen displayed on the display device 106 of the information processing apparatus 10a (S311).

  Steps S312 to S316 may be the same as steps S111 to S115 in FIG. 5 except that the processing target is replaced with the license code from the license file.

  Next, processing executed when the license is returned will be described. FIG. 15 is a sequence diagram for explaining an example of a processing procedure executed when a license is returned in the second embodiment. The assumption of FIG. 15 is the same as that of FIG.

  Steps S401 to S405 may be the same as steps S201 to S205 in FIG. However, in the second embodiment, the license return information is not stored in the file but is generated as one character string (text data). The information included in the character string may be the same as the license return information in the first embodiment. Hereinafter, the character string indicating the license return information is referred to as “license return code”. Accordingly, in step S405, the license return code is encrypted. Assume that the result of encryption of the license return code is also text data.

  In step S406, the license return information generating unit 128 causes the display device 106 to display the encrypted license return code.

  Subsequently, the operator inputs the displayed license return code on a screen displayed by the Web browser 24 of the mediating apparatus 20 (S407). Subsequently, the Web browser 24 transmits an HTTP request indicating a license return request to the license management apparatus 30 including the input license return code in accordance with the definition of the Web page related to the screen (S408).

  In the license management device 30, when the HTTP request is received, the data acquisition unit 37 acquires a license return code from the HTTP request (S409).

  Subsequent steps S410 and S411 may be the same as steps S209 and S210 in FIG. 11 except that the processing target is replaced with the license return code from the license return file.

  As described above, the function of the intermediary device 20 may be realized by the Web browser 24 and the Web page. Further, the license information may be distributed as text data instead of as a file. According to the text data, since it is less necessary to use an external storage medium or the like, the work load on the operator can be further reduced.

  In each of the above embodiments, the license information receiving unit 122 is an example of a receiving unit. The license ID confirmation unit 124 is an example of a determination unit. The license registration unit 126 is an example of a usage permission unit. The license ID storage unit 142 is an example of a storage unit. The conversion unit 130 is an example of a generation unit.

  As mentioned above, although the Example of this invention was explained in full detail, this invention is not limited to such specific embodiment, In the range of the summary of this invention described in the claim, various deformation | transformation・ Change is possible.

DESCRIPTION OF SYMBOLS 1 License management system 10 Information processing apparatus 20 Mediation apparatus 21 License information request part 22 License information reception part 23 License return request part 24 Web browser 25 Mediation program 30 License management apparatus 31 License information generation part 32 License return process part 33 Conversion part 34 Product key information storage unit 35 License information generation history storage unit 36 Web page generation unit 37 Data acquisition unit 100 Drive device 101 Recording medium 102 Auxiliary storage device 103 Memory device 104 CPU
105 interface device 106 display device 107 input device 120 license management program 121 device identification information display unit 122 license information reception unit 123 device identification information confirmation unit 124 license ID confirmation unit 125 product ID confirmation unit 126 license registration unit 127 license ID save unit 128 License return information generation unit 129 License invalidation unit 130 Conversion unit 131 Usage permission determination unit 141 License information storage unit 142 License ID storage unit B Bus

JP 2011-060241 A

Claims (7)

A reception unit for receiving license information indicating the right to use the software;
A determination unit that determines whether identification information that matches the identification information of the license information is stored in the storage unit;
An information processing apparatus comprising: a use permission unit that sets the software in a usable state based on the license information when identification information that matches the identification information of the license information is not stored in the storage unit.   The information processing apparatus according to claim 1, wherein the storage unit stores identification information of the license information used to make the software usable in the information processing apparatus.   The said usage permission part does not make the said software usable state, when the identification information in agreement with the identification information of the said license information which the said reception part received is memorize | stored in the said memory | storage part. Information processing device.   And a generation unit that generates identification information including the identification information of the license information and indicating that the license information is invalidated in response to invalidation of the license information used to make the software usable. Item 4. The information processing apparatus according to any one of Items 1 to 3.   The said generation part produces | generates the information which shows that the said license information was invalidated by converting the said license information into the format different from the format of the said license information which the said reception part received. Information processing device.   The generator generates information indicating that the license information is invalidated by encrypting the license information with a public key that does not correspond to the secret key obtained by encrypting the license information received by the receiving unit. The information processing apparatus according to claim 5 to be generated. A procedure for accepting license information indicating the right to use the software;
A determination procedure for determining whether identification information that matches the identification information of the license information is stored in the storage unit;
A program for causing a computer to execute a use permission procedure for making the software usable based on the license information when identification information that matches the identification information of the license information is not stored in the storage unit.

Images