Timestamped license data structure

• US 10,333,717 B2
• Filed: 03/09/2017
• Issued: 06/25/2019
• Est. Priority Date: 03/09/2017
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: Peza Ramirez, Carlos, Bagrodia, Juhi, Beyel, III, Harold E.
• Primary Examiner(s): Zaidi, Syed A
• Application Number:
  US15/454,462
• Publication Number:
  US 20180260538A1
• Time in Patent Office: 838 Days
• Field of Search: 713155
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1075 Editing
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

Technology is disclosed herein for a timestamped license data structure. In at least one implementation, program instructions stored on one or more computer readable storage media, when executed by a processing system, direct the processing system to at least, responsive to a launch of an application, obtain a license file for the application, the license file comprising a license data structure comprising: a user license; a licensing service signature; a licensing service public key; and a trusted timestamp package. The processing system is also directed to analyze the license data structure using the trusted timestamp package to determine if the licensing service public key was valid when the user license was signed by the licensing service signature if the licensing service public key is invalid. If the licensing service public key was valid when the user license was signed by the licensing service signature: enable features of the application.

Claims

1. A computing apparatus comprising:

one or more computer readable storage media;

a processing system operatively coupled with the one or more computer readable storage media; and

program instructions stored on the one or more computer readable storage media for authenticating a user license for an application after the application has launched that, when executed by the processing system, direct the processing system to at least;

responsive to a launch of the application, obtain a license file for the application, the license file comprising;

a license data structure comprising;

a user license;

a licensing service signature;

a licensing service public key; and

a trusted timestamp package;

verify that the licensing service public key is invalid;

analyze the license data structure using the trusted timestamp package to determine if the licensing service public key was valid when the user license was signed by the licensing service signature; and

responsive to determining that the licensing service public key was valid when the user license was signed by the licensing service signature;

enable features of the application based on the user license; and

initiate presentation of the application in accordance with the enabled features.

2. The computing apparatus of claim 1 wherein trusted timestamp package comprises:

a timestamp;

a signed hash; and

a timestamp authority public key.

3. The computing apparatus of claim 2 wherein to determine that the licensing service public key was valid when the user license was signed by the licensing service signature, the program instructions direct the processing system to compare a timestamp authority hash with a license data structure hash.

4. The computing apparatus of claim 3 wherein the program instructions further direct the processing system to:

create a first hash based on the license data structure; and

create the license data structure hash based on the combination of the first hash with the timestamp.

5. The computing apparatus of claim 4 wherein the program instructions further direct the processing system to create the timestamp authority hash by applying the timestamp authority public key to the signed hash.

6. The computing apparatus of claim 3 wherein the program instructions further direct the processing system to authenticate the licensing service public key when the timestamp authority hash matches the license data structure hash.

7. The computing apparatus of claim 1 wherein the program instructions further direct the processing system to disable the application if the licensing service public key was invalid when the user license was signed by the licensing service signature.

8. A method for authenticating a user license for an application after the application has launched, the method comprising:

responsive to a launch of the application, obtaining a license file for the application, the license file comprising;

a license data structure comprising;

a user license;

a licensing service signature;

a licensing service public key; and

a trusted timestamp package;

verifying that the licensing service public key is invalid;

analyzing the license data structure using the trusted timestamp package to determine a validity of the licensing service public key when the user license was signed by the licensing service signature; and

in response to determining that the licensing service public key was valid when the user license was signed by the licensing service signature;

enabling features of the application based on the user license; and

initiating presentation of the application in accordance with the enabled features.

9. The method of claim 8 wherein trusted timestamp package comprises:

a timestamp;

a signed hash; and

a timestamp authority public key.

10. The method of claim 9 wherein determining the validity of the licensing service public key when the user license was signed by the licensing service signature comprises comparing a timestamp authority hash with a license data structure hash.

11. The method of claim 10 further comprising:

creating a first hash based on the license data structure; and

creating the license data structure hash based on the combination of the first hash with the timestamp.

12. The method of claim 11 further comprising creating the timestamp authority hash by applying the timestamp authority public key to the signed hash.

13. The method of claim 10 further comprising authenticating the licensing service public key when the timestamp authority hash matches the license data structure hash.

14. The method of claim 8 further comprising disabling the application in response to determining that the licensing service public key was invalid when the user license was signed by the licensing service signature.

15. One or more computer readable storage media having program instructions stored thereon for authenticating a user license for an application after the application has launched, wherein the program instructions, when executed by a processing system, direct the processing system to at least:

obtain a license file comprising a license file for an application responsive to a launch of the application, the license file comprising;

a license data structure comprising;

a user license;

a licensing service signature;

a licensing service public key; and

a trusted timestamp package;

analyze the license data structure using the trusted timestamp package to determine a validity of the licensing service public key when the user license was signed by the licensing service signature; and

responsive to determining that the licensing service public key was valid when the user license was signed by the licensing service signature;

enable features of the application based on the user license; and

initiate presentation of the application in accordance with the enabled features.

16. The one or more computer readable storage media of claim 15 wherein trusted timestamp package comprises:

a timestamp;

a signed hash; and

a timestamp authority public key.

17. The one or more computer readable storage media of claim 16 wherein to determine the validity of the licensing service public key when the user license was signed by the licensing service signature, the program instructions direct the processing system to compare a timestamp authority hash with a license data structure hash.

18. The one or more computer readable storage media of claim 17 wherein the program instructions further direct the processing system to:

create a first hash based on the license data structure; and

create the license data structure hash based on the combination of the first hash with the timestamp.

19. The one or more computer readable storage media of claim 18 wherein the program instructions further direct the processing system to create the timestamp authority hash by applying the timestamp authority public key to the signed hash.

20. The one or more computer readable storage media of claim 17 wherein the program instructions further direct the processing system to authenticate the licensing service public key when the timestamp authority hash matches the license data structure hash.