CN1874218A - Method, system and equipment for license management - Google Patents

Abstract

The invention relates to license management technology in the field of information product protection. The invention discloses a license management method, comprising the following steps: a license server receives a license request from a client, and the license server contains an original license file; the license server generates a new license file according to the request; The license server transmits the new license file to the client. The invention also discloses a license management system and a license server. Through the implementation of the present invention, a large number of License files can be managed automatically, and it has the advantages of good security, high efficiency, and not easy to make mistakes.

Description

A license management method, system and device

technical field

The invention relates to the field of information product protection, in particular to a license management technology.

Background technique

In order to protect the intellectual property rights of information equipment, control its application scope, and ensure the legitimate benefits of product owners, current information products use various protection technologies to safeguard the legitimate rights and interests of developers, including serial number protection, password table protection , Disc physical protection, time limit protection, NAG window protection, key file protection, code packing protection, license protection, software dog encryption protection and other programs.

Among them, the license (License) protection scheme is widely used in commercial products. The license protection scheme needs to use the digital signature algorithm based on the asymmetric cryptosystem to bind the application or device characteristics of the control object according to the characteristics of the control object and implement digital signature, and then store the signature data in the license file and release it to authorized users ;During the operation of the product, the information device needs to obtain the digital signature from the license file, obtain the device identification from the product for verification, and then enable the corresponding resources, services and functions according to the verification result and the feature items in the license file to realize Controlled operation of the product.

Please refer to Figure 1, which shows the digital signature verification model in the license protection scheme system, in which the digital signature based on the asymmetric cryptosystem is the core of the control in the license protection scheme system. The License Center (License Center) digitally signs the equipment identification (ESN) and feature item (Feature) of the device through the private key, obtains the license product feature information segment, and generates the license file. After the client (License Client) obtains the License file, it uses its own ESN and public key (Public Key) to verify and decrypt it, and obtain the feature item attributes of the device.

However, after the license file is generated from the license center, when the information device needs to be used, it is necessary to manually find the corresponding license file and load it into the information device. Therefore, when there are a large number of information devices, there will be many corresponding license files, and then It brings great difficulties to maintain the corresponding relationship between license file names and devices, greatly increases the workload of maintenance personnel, and the possibility of manual operation errors is also very high.

Contents of the invention

The invention provides a license management method, system and device, which can automatically manage License files.

For this reason, the technical scheme that the present invention solves technical problem is:

A license management method, comprising the steps of:

A. The license server receives the license request from the client, and the license server contains the original license file;

B. The license server generates a new license file according to the request;

C. The license server transmits the new license file to the client.

Described step B is specifically:

The license server finds the corresponding original license file according to the client feature information in the request, and uses the original license file as a new license file or copies the original license file to generate a new license file.

Described step B is specifically:

The license server finds out the corresponding license information segment from the original license file according to the client characteristic information in the request, and assembles and generates a new license file.

Also comprise steps before described step A:

The license server analyzes the original license file, obtains and records the corresponding relationship between the client feature information and the original license file.

Described step B is specifically:

According to the client feature information in the request, the license server obtains the relevant original license file from the correspondence between the client feature information and the original license file, finds out the corresponding license information segment, and assembles and generates a new license file .

Also comprise steps before described step A:

The license server analyzes the original license file, obtains and records the characteristic information of the client and its corresponding license information segment.

Described step B is specifically:

The license server obtains the corresponding license information segment according to the client characteristic information in the request, and assembles and generates a new license file.

The assembly to generate a new license file is specifically:

Put the original text of the product feature information segment in the corresponding license information segment into the new license file to generate a new license file.

Before generating a new license file, steps are also included:

Put the original text of the public information segment in the corresponding license information segment except the full-text digital signature into the new license file, and generate a full-text digital signature to the new license file, as the public information segment of the new license file Full text digital signature.

The original license file includes a product feature information segment, and the new license file also includes a product feature information segment, and the product feature information segment contained in the new license file is derived from the original license file, and is consistent with the original license The corresponding product feature information segment in the certification file is exactly the same.

The client's license request includes client characteristic information.

The characteristic information of the client includes: product name, device identification and product version.

The present invention also provides a license management system, including:

The client, which sends a license request and obtains license information from the license file after it is obtained;

A license server is connected to the client through a network, the license server contains the original license file, the license server receives the license request from the client, generates a new license file, and transmits it to the client.

The license server includes:

The original license file analysis module is used to analyze the original license file;

A client request receiving module, configured to receive a client request;

A new license file generation module, which obtains the corresponding license information segment or original license file through the original license file analysis module according to the request received by the client request receiving module, and generates a new license file;

A license file transmitting module, which transmits the new license file generated by the new license file generating module to the client.

The license management system also includes:

The license file relay device is connected to the client and the license server through the network, receives the request sent by the client, and forwards the request to the license server, and the license file relay device receives the license file sent by the license server. License file data and forwarded to the client.

The client is a license file relay.

The license server is a license file relay device.

The original license file includes a product feature information segment, and the new license file also includes a product feature information segment, and the product feature information segment contained in the new license file is derived from the original license file, and is consistent with the original license The corresponding product feature information segment in the certification file is exactly the same.

The present invention also provides a license server, including:

The original license file analysis module is used to analyze the original license file;

A client request receiving module, configured to receive a client request;

A new license file generation module, which obtains the corresponding license information segment or original license file through the original license file analysis module according to the request received by the client request receiving module, and generates a new license file;

A license file transmitting module, which transmits the new license file generated by the new license file generating module to the client.

The original license file analysis module specifically includes:

an original license file analysis unit, configured to analyze the original license file;

The original license file information storage unit stores the analysis result of the original license file by the original license file analysis unit.

The new license file generation module includes:

a client feature information analysis unit, configured to obtain client feature information from a client request;

The new license file synthesis unit obtains the corresponding license information segment or original license file from the original license file analysis module according to the client feature information obtained by the client feature information analysis unit, and synthesizes a new license file .

The new license file generation module also includes:

The digital signature unit is used to generate a digital signature. The new license file synthesis unit obtains the full-text digital signature of the new license file through the digital signature unit, and puts it into the new license file to generate a new license file containing the full-text digital signature. license file.

The license server also includes:

The original license file acquisition module, the module acquires the original license file to the license server from the outside.

The original license file includes a product feature information segment, and the new license file also includes a product feature information segment, and the product feature information segment contained in the new license file is derived from the original license file, and is consistent with the original license The corresponding product feature information segment in the certification file is exactly the same.

The beneficial effects of the present invention are as follows:

The present invention centrally manages a large number of license files in the license server, and automatically distributes the license files according to the client's request. The client does not need to know the name of the license file when requesting, which realizes the automatic management of the license file, avoids human error, and greatly reduces maintenance. cost. The license file is transmitted between the license server and the client, and the license file itself has high security, which greatly reduces the possibility of leakage during network transmission.

In the preferred solution of the present invention, the new License file that assembles and generates can filter the original License file, only extract the information segment relevant to the client of the request, and form a new License file, which reduces redundant data transmitted by the network and improves It improves the network transmission efficiency and the analysis efficiency of the client.

In the preferred solution of the present invention, relevant information can also be forwarded through a simple license file relay device, which improves the flexibility of client deployment.

Description of drawings

Fig. 1 is the digital signature verification model in the License protection scheme system in the prior art;

Fig. 2 is the sample of original license file in the embodiment of the present invention;

Fig. 3 is the sample of new license file in the embodiment of the present invention;

Fig. 4 is the block diagram of the license management system of the embodiment of the present invention;

Fig. 5 is the license management flowchart of the embodiment of the present invention;

FIG. 6 is a block diagram of a first embodiment of a license server in the license management system shown in FIG. 4;

Fig. 7 is the block diagram of the second embodiment of the license server in the license management system shown in Fig. 4;

Fig. 8 is the embodiment block diagram of original license file analysis module in the license server shown in Fig. 6;

Fig. 9 is a block diagram of an embodiment of a new license file generation module in the license server shown in Fig. 6 .

Detailed ways

The specific implementation manners of the present invention will be described in detail below in conjunction with the accompanying drawings.

Fig. 2 shows an example of the original license file in the embodiment of the present invention. The original license file may be in text form and may be composed of public information segments, product feature information segments, and the like. The public information segment is not necessary, and it can contain information such as some copyright statements, and can also include a full-text digital signature to protect the entire file from being modified. The product feature information segment can be composed of product name, product version, device identification, product features, product feature attributes and other plaintext data and corresponding digital signatures. It can be determined which device the information segment belongs to through the product name, product version, and device identification. If the product does not have multiple versions or the product feature information segment can be used for multiple versions, then the product version is not necessary. The product feature attribute indicates the licensed attribute of the device, such as the ability to perform certain functions, how many users can be accommodated, and so on. There can be multiple product feature information segments in the original license file, which can contain multiple feature information segments of one device or multiple device feature information segments. There is no limit.

Shown in Fig. 3 is the example of new license file in the embodiment of the present invention, and the new License file that the license server generates in the embodiment of the present invention is basically the same as the format of the original License file, and the client needn't understand whether the License file that obtains Generated after a rebuild of the license server. However, a better way is to reassemble the license file generated by the license server to only contain the product feature information segment required by the client, and remove information irrelevant to the client, so as to improve network transmission efficiency and client resolution efficiency. The product feature information section of the new license file can be directly copied from the original license file. In this way, the license server does not need to encrypt and decrypt the product feature information section, which is simple to implement and has low security requirements. When the new license file is different from the original license, the full-text digital signature of the original license file can no longer be used, and the full-text digital signature can be removed, or even the entire public information section. Of course, the better way is that the license server generates a new license. Full text digital signature of the document.

The composition and basic working process of the license management system in the embodiment of the present invention will be described below with reference to FIG. 4 . The license management system in the embodiment of the present invention includes a license server 100 and a client 200 . There can be more than one license server to realize distributed processing or backup, and there can be more than one client, but at least one client is connected to one license server through the network. In order to improve the flexibility of client deployment, this system can also include one or more license file relay devices 300, the client can be connected to the license file relay device through the network, and the license file relay device is connected to the license file again. The license server is connected, and the client obtains the license file through the forwarding of the license file relay device. The license file relay device can directly forward the data between the client and the license server. At this time, the license file relay device is similar to a message forwarder; After obtaining the entire license file from the license server, the entire license file is forwarded to the client. At this time, the license file relay device is similar to a combination of a simplified client and a simplified license server. The license file relay devices in this system can also be connected in series one by one, and through multiple forwarding, the client can obtain the license file. The network mentioned above refers to all media that can communicate between two devices, including but not limited to Ethernet, WLAN, ATM, TDM, etc., communication protocols between clients, license servers, and license file relay devices There are no restrictions, including but not limited to TCP, UDP, custom protocols, etc.

An application example of a license file relay device is given below. If a device is only connected to a network management server that manages the device through the RS-232 serial port, and the network management server can be connected to the license server through Internet, then the network management server can be used as a license file relay The device forwards the license request sent by the client through the serial port to the license server through Internet, and forwards the license file from the license server to the device through the serial port.

The specific implementation process of the license management method in the embodiment of the present invention will be described below with reference to FIG. 5 .

Step 510, the license server receives the license request from the client;

Here, the license request received by the license server may be directly sent by the client, or may be forwarded by the license file relay device, and the license server regards it as a request sent by the client. The license request includes the characteristic information of the client, such as the client product name "xx switch", product version "1.0", and device identifier "0050BA20CDD5".

Assuming that the specified directory c:\lcense in the license server has already stored multiple original license files, one of the original license files license1.txt contains a public information segment, and two product names are product name "xx switch" , product version "1.0", product feature information segment with device ID "0050BA20CDD5", and 3 product feature information segments with product name "xx switch", product version "1.0", and device ID "1040BA20CDD5", and There are 4 product characteristic information segments of product name "xx router", product version "2.0", and device identifier "0050BA20CDD5".

Before this, the license server can analyze all the original license files first, find out the corresponding relationship between the client feature information and the original license file, and store them. For example, the license server records the product name "xx switch", product version The product feature information segment of "1.0" and device identifier "0050BA20CDD5" exists in the file c:\lcense\license1.txt. The license server can analyze all the license files in the specified directory c:\license when it is started; it can also be manually started to analyze some or some or all of the original license files and so on. The original license file can be directly stored on the license server, or can be obtained from the outside and placed on the license server in various ways, for example, it can be copied to the license server through a storage medium, or transmitted to the license server through the network In, wait.

The license server can also store the information segment corresponding to the client feature information (which can include the product feature information segment, or the public information segment, etc.) after analyzing the original License file, such as storing in a database or a specific In the file, the original license file does not need to be kept after the analysis is completed. For example, the license server product name "xx switch", product version "1.0", device identifier "0050BA20CDD5" and all corresponding product feature information segments are stored in the database.

Step 520, the license server generates a new license file according to the request;

The license server analyzes the client's request, obtains the client's feature information, and generates a new license file that meets the client's requirements.

The simplest implementation method is that the license server directly finds the original license file containing client feature information, and uses it directly as a new license file, or copies the original license file to obtain a new license file without filtering the original license file. It can also achieve the purpose of automatic centralized management.

However, a better implementation method is that the license server only composes the corresponding license information requested by the client into a new license file, and this implementation method will be further described below.

When assembling a new license file, the license server needs to obtain the license information segment corresponding to the characteristic information of the client.

If the license server has not analyzed the original license file before, the license server needs to search each original license file, find the original license file containing the client characteristic information, and obtain the license corresponding to the client characteristic information information segment. If the product feature information segment of the product name "xx switch", product version "1.0", and device identifier "0050BA20CDD5" is found from the original license file c:\lcense\license1.txt, the license server then obtains the Obtain the corresponding license information section, that is, the public information section in the file and two product feature information sections with the product name "xx switch", product version "1.0", and device identifier "0050BA20CDD5".

If the license server has analyzed and obtained the corresponding relationship between the client feature information and the original license file before, then obtain the corresponding original license file from the corresponding relationship according to the client feature information, and then obtain the license corresponding to the client feature information certificate information segment. If the license server has recorded the original license file corresponding to the product name "xx switch", product version "1.0", and device identifier "0050BA20CDD5" as c:\lcense\license1.txt, the license server can directly find the original license file c:\lcense\license1.txt, and get the corresponding license information section from it, that is, the public information section in this file and the two product names are product name "xx switch", product version "1.0", and device identification "0050BA20CDD5 ” of the product feature information segment.

If the license server has analyzed the original license file before and recorded the client feature information and its corresponding license information segment, then the corresponding license information segment can be directly obtained according to the client feature information without searching for the original license file up.

After obtaining the license information segment corresponding to the client feature information, the license server can directly copy the product feature information segment therein to the new license file. For example, two product feature information segments whose product names are product name "xx switch", product version "1.0", and device identifier "0050BA20CDD5" are directly copied to the new license file. Such a new license file contains product feature attributes. The client can control related properties accordingly. In addition, the license server can also copy the public information section to the new license file to provide more information. If the new license file is not exactly the same as the original license file, the full-text digital signature in it can no longer be used and needs to be removed. , at this time, the license server can also generate a new full-text digital signature for the new license file, and put it into the new License file to provide more complete protection.

Step 530, the license server transmits the new license file to the client.

The license server transmits the new license file to the client through the network. The client here can be the final client or the license file relay device that forwards the request, and then the license file relay device forwards the license file to the client. Ultimately the client, the license server doesn't need to care what it is directly connected to.

The transmission protocol can be through FTP, TFTP and other protocols, or a custom protocol. Encryption can also be performed during transmission. These are all well-known or relatively simple technologies and will not be described in detail.

After the client obtains the license file, it can be verified and decrypted, so that it can be used to control its own functional attributes, etc.

The specific implementation manner of the license server in the embodiment of the present invention will be described below with reference to FIG. 6 .

In this embodiment, the license server 100 includes an original license file analysis module 110 , a client request receiving module 120 , a new license file generation module 130 , and a license file transmission module 140 . The client request receiving module 120 receives the client request, and the new license file generation module 130 obtains the corresponding license information segment or the original license file from the original license file analysis module 110 according to the request, and generates a new license file. A license file, the new license file is transmitted to the client through the license file transmission module 140 . For the working method of the license server, please refer to the relevant description of the above license management process.

Please refer to Fig. 7, which is another embodiment of the license server 100. In this embodiment, with respect to Fig. 6, the license server 100 has an additional original license file acquisition module, which obtains the original license file into the license from the outside world. In the server, copy the original license file to the license server from an external storage medium (floppy disk, CD, etc.), or transfer the original license file to the license server through the network.

Please also refer to FIG. 8 , in this embodiment, the original license file analysis module 110 includes an original license file analysis unit 111 and an original license file information storage unit 112 . The original license file information storage unit 112 stores the analysis result of the original license file by the original license file analysis unit 111 .

Another implementation of the original license file analysis module 110 is to only include the original license file analysis unit 111 . The analysis result of the original license file analysis unit 111 is directly sent to the new license file generation module.

Please also refer to FIG. 9 , in this embodiment, the new license file generation module 130 includes a client characteristic information analysis unit 131, a new license file synthesis unit 132, and a digital signature unit 133, and the client characteristic information analysis unit 131 The client characteristic information is obtained from the client request, and the new license file synthesis unit 132 obtains the corresponding license information segment or the original license file from the original license file analysis module 110 according to the client characteristic information, The full-text digital signature of the new license file is obtained from the digital signature unit 133, and the new license file is synthesized.

Another embodiment of the new license file generation module 130 is to only include the client characteristic information analysis unit 131 and the new license file synthesis unit 132 . In this embodiment, the new license file synthesis unit 132 can not filter the original license file, directly use the corresponding original license file as the new license file, or directly copy the original license file as the new license file; the new license file synthesis unit 132 also The new license file may not be digitally signed in full; the new license file synthesis unit 132 may not put the public information segment into the new license file, and the new license file only includes the product feature information segment.

As can be seen from the above technical solutions of the present invention, the present invention can centrally manage a large number of License files at the license server, and automatically distribute the License files according to the client's request. Automatic management to avoid human error and greatly reduce maintenance costs. The license file is transmitted between the license server and the client, and the license file itself has high security, which greatly reduces the possibility of leakage during network transmission.

In the preferred solution of the present invention, the new License file that assembles and generates can filter the original License file, only extract the information segment relevant to the client of the request, and form a new License file, which reduces redundant data transmitted by the network and improves efficiency.

In the preferred solution of the present invention, relevant information can also be forwarded through a simple license file relay device, which improves the flexibility of client deployment.

The above is only a preferred embodiment of the present invention, but the scope of protection of the present invention is not limited thereto. Any person skilled in the art within the technical scope disclosed in the present invention can easily think of changes or Replacement should be covered within the protection scope of the present invention. Therefore, the protection scope of the present invention should be determined by the protection scope of the claims.

Claims (24)

1. A license management method, comprising the following steps: A. The license server receives the license request from the client, and the license server contains the original license file; B. The license server generates a new license file according to the request; C. The license server transmits the new license file to the client. 2. The method according to claim 1, wherein the step B is specifically: The license server finds the corresponding original license file according to the client feature information in the request, and uses the original license file as a new license file or copies the original license file to generate a new license file. 3. The method according to claim 1, characterized in that the step B is specifically: The license server finds out the corresponding license information segment from the original license file according to the client characteristic information in the request, and assembles and generates a new license file. 4. The method according to claim 1, characterized in that before said step A, it also includes the steps of: The license server analyzes the original license file, obtains and records the corresponding relationship between the client feature information and the original license file. 5. The method according to claim 4, wherein the step B is specifically: According to the client feature information in the request, the license server obtains the relevant original license file from the correspondence between the client feature information and the original license file, finds out the corresponding license information segment, and assembles and generates a new license file . 6. The method according to claim 1, characterized in that before said step A, it also includes the steps of: The license server analyzes the original license file, obtains and records the characteristic information of the client and its corresponding license information segment. 7. The method according to claim 6, wherein the step B is specifically: The license server obtains the corresponding license information segment according to the client characteristic information in the request, and assembles and generates a new license file. 8. The method according to claim 3, 5 or 7, wherein said assembling and generating a new license file is specifically: Put the original text of the product feature information segment in the corresponding license information segment into the new license file to generate a new license file. 9. The method according to claim 8, characterized in that before said generating a new license file, it further comprises the steps of: Put the original text of the public information segment in the corresponding license information segment except the full-text digital signature into the new license file, and generate a full-text digital signature to the new license file, as the public information segment of the new license file Full text digital signature. 10. The method according to claim 1, wherein the original license file contains a product characteristic information segment, the new license file also contains a product characteristic information segment, and the product contained in the new license file The feature information segment is derived from the original license file, and is identical to the corresponding product feature information segment in the original license file. 11. The method according to claim 1, wherein the license request of the client includes client feature information. 12. The method according to claim 11, wherein the characteristic information of the client includes: product name, device identification and product version. 13. A license management system, characterized in that it comprises: The client, which sends a license request and obtains license information from the license file after it is obtained; A license server is connected to the client through a network, the license server contains the original license file, the license server receives the license request from the client, generates a new license file, and transmits it to the client. 14. The license management system according to claim 13, wherein the license server comprises: The original license file analysis module is used to analyze the original license file; A client request receiving module, configured to receive a client request; A new license file generation module, which obtains the corresponding license information segment or original license file through the original license file analysis module according to the request received by the client request receiving module, and generates a new license file; A license file transmitting module, which transmits the new license file generated by the new license file generating module to the client. 15. The license management system according to claim 13 or 14, further comprising: The license file relay device is connected to the client and the license server through the network, receives the request sent by the client, and forwards the request to the license server, and the license file relay device receives the license file sent by the license server. License file data and forwarded to the client. 16. The license management system according to claim 15, wherein the client is a license file relay device. 17. The license management system according to claim 15, wherein the license server is a license file relay device. 18. The license management system according to claim 13, wherein the original license file contains a product feature information segment, the new license file also includes a product feature information segment, and the new license The product feature information segment contained in the file is derived from the original license file and is identical to the corresponding product feature information segment in the original license file. 19. A license server, comprising: The original license file analysis module is used to analyze the original license file; A client request receiving module, configured to receive a client request; A new license file generation module, which obtains the corresponding license information segment or original license file through the original license file analysis module according to the request received by the client request receiving module, and generates a new license file; A license file transmitting module, which transmits the new license file generated by the new license file generating module to the client. 20. The license server according to claim 19, wherein the original license file analysis module specifically includes: an original license file analysis unit, configured to analyze the original license file; The original license file information storage unit stores the analysis result of the original license file by the original license file analysis unit. 21. The license server according to claim 19 or 20, wherein the new license file generating module comprises: a client feature information analysis unit, configured to obtain client feature information from a client request; The new license file synthesis unit obtains the corresponding license information segment or original license file from the original license file analysis module according to the client feature information obtained by the client feature information analysis unit, and synthesizes a new license file . 22. The license server according to claim 21, wherein the new license file generation module further comprises: The digital signature unit is used to generate a digital signature. The new license file synthesis unit obtains the full-text digital signature of the new license file through the digital signature unit, and puts it into the new license file to generate a new license file containing the full-text digital signature. license file. 23. The license server according to claim 22, further comprising: The original license file acquisition module, the module acquires the original license file to the license server from the outside. 24. The license server according to claim 19, wherein the original license file contains a product feature information segment, the new license file also includes a product feature information segment, and the new license file The included product characteristic information segment is derived from the original license file and is identical to the corresponding product characteristic information segment in the original license file.

Images