JP2011002978A - License management system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To solve a problem that the validation of an application pre-installed in an MFP is conventionally performed by directly inputting a numeral to the MFP, but in this method, only the validation of the application is performed without attaining the setting of an expiration date and a time limit of a license, although the license is installed by a network in an MFP device which is connected to a network and allows an application to be installed and executed by the license.SOLUTION: In order to solve the problem, the present invention includes a means for installing the application pre-installed in the device via the network.

Description

  The present invention relates to a license issuing method and a program for executing the method in a license management system.

There are devices connected to the network that can install licensed applications. In addition, there is a process that allows an application and its license to be transferred to another device without unauthorized use using a license issuing server (see, for example, Patent Document 1).
Patent Document 1 and the present invention are similar in that they provide means for transferring a license. However, the preceding case uses a 24-digit number called a transfer license key number for enabling the function, whereas the present invention is different in that it also supports installation via a network in a file format.

JP 2006-107468 A

  In the case of the above system, there is a problem that installation of an application on a device on which the licensed application can be installed is not considered.

  In order to solve the above-described problems, the present invention has the following means. A means for enabling applications built into devices via the network.

  According to the present invention, validation of an application built in a device can be realized via a network.

1 is a system configuration diagram according to an embodiment of the present invention. FIG. 2 is a functional block diagram of a multifunction machine according to an embodiment of the present invention. It is a block diagram of the license issuing server in one embodiment of this invention. It is a user interface for the license issue server of one embodiment of this invention for license issue start. It is a user interface for the license issue server of one embodiment of this invention for license issue start. It is a user interface for license issuance (confirmation) of the license issuance server in an embodiment of the present invention. It is a user interface for license issuance (issue completion) of the license issuance server in an embodiment of the present invention. 4 is a user interface for application transfer (start of invalidation processing) of a multifunction peripheral according to an embodiment of the present invention. 4 is a user interface for application transfer (invalidation process confirmation) of a multifunction peripheral according to an embodiment of the present invention. 6 is a user interface for application transfer (completion of invalidation processing) of a multifunction peripheral according to an embodiment of the present invention. It is an example of the license file format in one embodiment of this invention. It is an example of the license file in one embodiment of this invention. It is a flowchart in the license issue process of the license issue server in one embodiment of this invention. 7 is a flowchart of a license invalidation process of a multifunction machine according to an embodiment of the present invention.

  Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the drawings. However, the constituent elements described in this embodiment are merely examples, and are not intended to limit the scope of the present invention only to them.

(System configuration)
FIG. 1 is a configuration diagram of a network system including an information processing apparatus according to a preferred embodiment of the present invention.

  In FIG. 1, reference numeral 101 denotes a license information issuance server as an information processing apparatus that manages the entire license information issuance processing. Server access means, number request means, machine number recognition means, license issue confirmation request means, machine number inspection means, license key issue means, option information registration means identifier generation by the computer system provided in this license information issue server 101 Means, identifier transmission means, and the like are configured.

  Reference numerals 102 and 103 denote multifunction peripherals (MFPs) each having functions such as a printer, a scanner, a copier, and a FAX. A plurality of applications and licenses can be installed on the MFP, each having a unique device ID.

  The MFP 102 is an application / license transfer source MFP in the present invention.

  The MFP 103 is an application and license transfer destination MFP in the present invention.

  Reference numeral 104 denotes a network such as the Internet, and the MFP 102 can be connected to the license information issuing server 101 via the network 104.

  Similarly, reference numeral 105 denotes a network such as the Internet, and the MFP 103 can be connected to the license information issuance server 101 via the network 105.

  Reference numerals 106 and 107 denote operators of the MFPs 102 and 103.

  The operator 106 operates the MFP 102 to select an application to be transferred on the MFP 102 when transferring the licensed application.

  The operator 107 operates the MFP 103 to install the licensed application transferred from the MFP 102 on the MFP 103.

  In the present invention, the operators 106 and 107 may be different or the same.

(Explanation of the device)
<MFP>
FIG. 2 is a functional block diagram of the multifunction machine according to the present embodiment.

  201 represents first, second and third multifunction devices. A scanner function unit 202 has a function of reading a paper document and converting it into binary image data. Reference numeral 203 denotes a print function unit, which has a function of outputting an image read by the scanner function unit 202 and converted into binary image data to a printer device by adding a command to the printer. Reference numeral 204 denotes a facsimile function unit. The image previously read by the scanner function unit 202 and converted into binary image data is encoded according to a facsimile standard such as G3 or G4. Further, it has a function of performing image communication with an external facsimile by a protocol according to the facsimile standard. Also, it has a function of transmitting and receiving a facsimile image from an external facsimile according to the facsimile standard. A job control function unit 205 queues the binary image data received from the scanner function unit 202 or the facsimile image data received from the outside by the facsimile function unit 205 as a print job. The job control function unit 205 has a job control function that appropriately outputs to the print function unit 203, the facsimile function unit 204, and the network function unit 206 described later. A network function unit 206 has various network protocol functions such as TCP / IP, HTTP, FTP, LDAP, SNMP, SMTP, and SSL. A user interface function unit 207 manages input / output by the user of the operation panel of the multifunction machine 201, and displays input fields, output message fields, and the like on the operation panel. The user interface function unit 207 has a function of receiving an input value for an input field from the user, notifying the other function unit, and displaying a message for the user from the other function unit on a predesigned screen. Reference numeral 208 denotes a user authentication function unit. It responds to user authentication requests for various applications in the application function unit 209 using the UI function unit 207 or an information terminal (not shown) on the network. That is, various user authentication functions are set for each application using a user authentication setting file. The user authentication function unit 208 has a function of authenticating a user who operates various functions of the multifunction peripheral using a user authentication server on the network or user authentication information inside the multifunction peripheral.

  Reference numeral 209 denotes an application function unit, which has functions for installing, authenticating, executing, and uninstalling various applications that operate on the multifunction machine 201. The application function unit 209 sets an expiration date of the application when installing the application. Then, an application with an expiration date is realized by determining an expiration date set in advance at the time of application installation by using a function of the time management unit 214 described later when the application is executed. The application expiration date may be set by storing expiration date information inside the application object, or may be set as a separate object as additional information of the application at the time of application installation. This expiration date is indicated by the number of days from the time of installation until the application stops operating. The expiration date may be the number of days indicating the expiration date, or may be an expiration date such as what year, month, day. Even if it is an expiration date, it is obvious that the number of days indicating the expiration period is calculated from the system clock inside the multifunction machine 201. Further, it may be a unit smaller than the number of days, for example, a second unit. It goes without saying that the expiration date can be calculated within the range of the unit of the system internal clock. This expiration date is passed as an argument to an installation time setting function, which will be described later, at the time of application installation, and stored in a non-volatile storage area in the multifunction machine 201.

  Among the applications on the MFP, those whose application main body is already installed can be validated by installing only the license key.

  In order to use an application on the MFP, an activation procedure is required after the application is installed. In order to validate the application, a license key normally input from the user interface function unit is used. The license key includes a function type and a device ID to be activated. Note that the license key may be input via a network using the network function unit.

  The application is activated by inputting a license key to the MFP. Actually, the license bit that exists in the nonvolatile storage area inside the MFP corresponding to each application is turned on.

  Similarly, by turning off the license bit, the corresponding application can be invalidated.

  Reference numeral 210 denotes a Mail application which is one of the applications of the multifunction machine 201 that operates on the application function unit. The Mail application 210 has a function of receiving an electronic mail attached with an electronic document transmitted from an information terminal on a network using the network function unit 206 and printing using the print function unit. The Mail application 210 has a function of attaching an electronic document read by using the scanner function unit 202 to an electronic mail and transmitting the electronic mail with the electronic document attached to a preset transfer destination. Reference numeral 211 denotes a remote operation application that is one of the applications of the multifunction machine 201 that operates on the application function unit. The remote operation application 211 has a function for enabling remote operation by displaying the same interface as the main body touch panel displayed on the MFP main body using the UI function unit on an information terminal (not shown) on the network. . Reference numeral 212 denotes one application of the multifunction machine 201 that operates on the application function unit, and indicates a document format conversion application. The document format conversion application 212 has a function of converting into a preset electronic data format. Electronic data read by the operator using the scanner function unit 202 and electronic data transmitted from an information terminal on the network and transmitted using the network function unit 206 are to be converted. Reference numeral 213 denotes a document management system application which is one of the applications of the multifunction machine 201 that operates on the application function unit. The document management system application 213 has a function of storing in a document storage location set in advance on the network or in the MFP main body. Electronic data read using the scanner function unit 202 by the operation of the main body by the operator, and electronic data transmitted from the information terminal on the network and transmitted using the network function unit 206 are stored.

  The Mail transmission / reception application 210, the remote operation application 211, the document format conversion application 212, and the document management system application 213 can perform user authentication. In any case, when the operator uses the application, the user authentication function unit 208 is used through the application function unit 209.

  The time management function unit 214 has a system built-in clock and provides a system built-in clock interface capable of setting and referring to all the function modules of the multifunction machine 201. In addition, it has a function of holding a cumulative set differential time from a system start described later in a non-volatile storage area such as a so-called flash ROM. In addition, it has a time synchronization function by a time synchronization service on the network to which the multifunction machine 201 is connected. The time synchronization service is a time synchronization service using a protocol defined by the TIME protocol (RFC868), the NTP protocol (RFC1305), the SNTP protocol (RFC1769), or the like. Furthermore, in order to determine the expiration date of an application with an expiration date, an installation time setting function at the time of application installation described later is provided.

<License issuing server>
In FIG. 3, reference numeral 301 denotes a license information issuance server as an information processing apparatus that manages the entire license information issuance processing. Server access means, number request means, machine number recognition means, license issue confirmation request means, machine number inspection means, license key issue means, option information registration means identifier generation by the computer system provided in this license information issue server 301 Means, identifier transmission means, and the like are configured.

  Reference numeral 302 denotes a user terminal as an information processing apparatus managed by the user. Any information processing apparatus that can be connected to a network and can install software, such as a personal computer, a portable terminal, a printer, and a copier, can be the user terminal 302. The computer system of the user terminal 302 constitutes server access means, number transmission means, license information confirmation means, and the like according to this embodiment.

  Reference numeral 303 denotes a sales company terminal as an information processing apparatus managed by the sales company, and 304 denotes a software developer (manufacturer) terminal as an information processing apparatus managed by the software developer. A personal computer or a workstation can be the sales company terminal 303 or the software developer terminal 304.

  Reference numeral 305 denotes a network such as the Internet. The user terminal 302, the sales company terminal 303, and the software developer terminal 304 are connected to the license information issuing server 301 via the network 305.

  In FIG. 3, reference numerals 380, 381, and 382 denote multifunction machines in which various applications operate by installing a license issued from the license information issuing server. There are a plurality of multifunction devices, and each multifunction device communicates with a user terminal. By using a computer system provided in the multi-function peripherals 380, 381, and 382, scanner means, print means, FAX transmission / reception means, job control means, network function means, UI function means, user authentication function means, license management means, Web application Means and application function means.

  The license information management database 306 is connected to the license information issuance server 301, and includes application information, product information including license information, actor information, software identification code (SID) information, device serial number (DS #) information, device product information, and machine information. This is a license information management database that stores number data band information, application ID, device product code association information, option product information, license access number information, license key information, option information, and customer information.

  Reference numeral 307 denotes a product registration unit included in the license information issuing server 301. The product registration unit 307 includes an application designation module 308, a product type designation module 309, a product registration screen display module 310, a product information input module 311, and license conditions. A designation module 312, a product registration module 313, an optional function name registration module 350, an optional product registration module 351, and a device registration module 352 are included.

  Reference numeral 314 denotes an SID issuing unit included in the license information issuing server 301, which includes a product selection module 315, an option code specifying module 353, and an SID issuing module 316.

  Reference numeral 317 denotes an LF (license file) issuing unit included in the license information issuing server 301, which includes an SID # input module 318, a DS # input module 319, a product selection module 320, a license condition specifying module 321 and an LF issuing module 322. It is.

  Reference numeral 360 denotes an LA # issuing unit which is a license access number included in the license issuing server 301, an option code specifying module 361 for specifying an option for issuing a license access number (LA #), and the number to be acquired. Is input to issue a license access number (LA #).

  Reference numeral 354 denotes an L key issuing unit (license key issuing unit) included in the license information issuing server 301, which includes an LA # input module 355, a DS # input module 356, and an L key issuing module 357.

  Reference numeral 323 denotes a display unit included in the user terminal 302, and reference numeral 324 denotes an input unit included in the user terminal 302. Reference numeral 325 denotes a display unit included in the sales company terminal 303, and reference numeral 326 denotes an input unit included in the sales company terminal. Reference numeral 327 denotes a display unit included in the software developer terminal 304, and reference numeral 328 denotes an input unit included in the software developer terminal.

  In order to install the software managed by this system in the information processing apparatus managed by the user, the license information issued from the license information issuing server 301 is always required. If there is proper access via the network 305, the license information issuing server 301 issues license information.

  In the license information, identification information unique to the information processing apparatus to which the software is installed can be embedded. In this case, different license information is required when installing the same software on another apparatus. Thereby, unauthorized duplication of software can be prevented.

(License issuance flow)
Hereinafter, the license issue in the present embodiment will be described in detail.

  4 to 7 are diagrams showing user interface screens in the license issuing server 101 in this embodiment.

  In the license issuance of the present invention, a license that can be installed via a network and a license key number that can be directly installed on a device are issued.

  Reference numeral 401 in FIG. 4 denotes a license issuance user interface of the license issuance server 101. The operator 106 has a license for an application to be used issued.

  The operator 106 sets an expiration date and a counter value in 403 for the application name and application ID indicated by 402. If the expiration date or the counter value is set, the LK # check box cannot be selected in 404, and only the LF can be selected.

  When the next button 405 is pressed, the screen changes to a confirmation screen. If the Cancel button 406 is pressed, the license issue process can be canceled.

  FIG. 5 shows a screen when “30 days” is input as the expiration date in the input portion of the expiration date 502 and the counter value. In 504, only LF can be selected.

  Reference numeral 601 denotes a user interface screen for confirming items input by the operator 106.

  At 602, the name of the application that issues the license and the license ID are displayed. At 603, the expiration date, counter value, and license file format are displayed. A license is issued by pressing an issue button 604. If a cancel button 605 is pressed, the license issue process can be canceled.

  Reference numeral 701 denotes a license issuance confirmation screen. In 702, the fact that the license has been issued is displayed. Clicking on the link 703 downloads the license file. When the OK button 704 is pressed, the license issuance process is terminated.

(Flow of license invalidation)
8 to 10 are diagrams showing user interface screens in the MFP 102 in this embodiment.

  FIG. 8 shows a user interface for invalidating the license of the MFP 102.

  Reference numeral 801 denotes a user interface for selecting an application to be invalidated.

  In 802, an application to be invalidated is selected.

  When a next button 803 is pressed, the screen transitions to a confirmation screen. If a cancel button 804 is pressed, the license invalidation process can be canceled.

  Reference numeral 901 denotes a confirmation screen for a license selected by the user and desired to be invalidated. In 902, the application name, expiration date, counter value, and license format of the license to be invalidated are displayed.

  An invalidation license is issued by pressing an issue button 903. When the cancel button 904 is pressed, the license invalidation process can be canceled.

  Reference numeral 1001 denotes an invalidation certificate license issuance screen. In 1002, a message indicating that an invalidation certification license has been issued is displayed.

  Clicking on the link 1003 downloads the invalidation certification license. When the OK button 704 is clicked, the license invalidation process is terminated.

  1101 is an example of the format of the license file in the present embodiment. 1102 is described as a readable text file. Reference numeral 1103 denotes an encrypted part. In 1104, the version of the license file is described. In 1105, the license file ID is described. In 1106, the function ID is described. Reference numeral 1107 describes a serial number. In 1108, the expiration date is manipulated. The unit is “day”. Reference numeral 1109 describes a counter value. The unit is “times”. Reference numeral 1110 describes a license key number.

  1201 is an example of a license file. 1202 to 1206 are 1102 readable text files, and 1208 is an encrypted portion of 1103.

  Reference numeral 1202 describes version 2 of the license file. Reference numeral 1203 describes the license file ID 22222. Reference numeral 1203 describes a function ID 12432. 1204 describes the serial number AAA00000. Reference numeral 1206 describes an expiration date of 30 days. Reference numeral 1207 describes a counter value of 100 times. Reference numeral 1208 describes the encrypted information.

  FIG. 13 shows processing on the license issuing server side.

  In 1301, a license issuance process is started. In step 1302, it is determined whether an expiration date and a counter value are specified in the items input by the user. When the expiration date and counter value are specified, a license file (LF) is issued in 1303. If the expiration date and counter value are not specified, the user selects a license file (LF) or a license key number (LK #) in 1304 and issues a license.

  In 1305, the license issuance process is terminated.

  FIG. 14 is a flowchart of license invalidation in the MFP 102.

  In 1401, license invalidation processing is started. In 1402, it is determined whether the license to be invalidated is an expiration date or a license for which a counter value is designated. If the license has an expiration date or a counter value specified, an invalidation certification license file is issued in 1403. In the case of a license for which the expiration date or counter value is not specified, it is determined in 1404 whether the device is connected to the network. If the device is connected to the network, an invalidation certification license file is issued at 1405. If the device is not connected to the network, an invalidation certification license key number is issued at 1406. In 1407, the license invalidation processing is terminated.

201 Multifunction machine in which a plurality of applications with expiration dates run 202 Scan function unit in the multi-function machine 203 Print function unit in the multi-function machine 201 FAX function unit in the multi-function machine 205 Job control function part 206 in the multi-function machine 201 Network function unit 207 UI function unit in MFP 201 208 User authentication function unit in MFP 201 209 Application function unit in MFP 201 210 Mail transmission / reception application in application function unit 209 211 Remote operation application in application function unit 209 212 Application function unit Document format conversion application in 209 213 Document in application function unit 209 Management system application 214 Time management function unit in MFP 201

Claims (1)

An information processing device that operates one or more applications managed by a license and a license management device that manages the license are connected via a network.
A license management system capable of transferring licenses between information processing devices,
The license management device has a license issuing means that can be installed in the information processing device,
If usage restrictions are specified, the license issuing means that issues licenses that can be installed via the network, and if the usage restrictions are not specified, license issuing means that issues licenses that can be installed directly on the device are the first. The information processing device has,
When transferring the license, the first information processing apparatus has a license invalidation means for invalidating the license in the first information processing apparatus,
A license management system characterized in that the second information processing means has an enabling means for enabling an application based on a license transferred by a license management device.

Images