Secure machine counting

• US 20060036552A1
• Filed: 09/15/2005
• Published: 02/16/2006
• Est. Priority Date: 01/31/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Gunyakti, Caglar, Miller, Ronald W., Tan, Xiaoxi (Michael)
• Granted Patent: US 8,181,265 B2
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06F 21/101 by binding digital rights to specific entities
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp

Abstract

A method and computer-readable medium for deterring software piracy in a volume license environment. An activation bypass message is generated and sent. Information contained in the activation bypass message is compared to a list of machine identifiers. A binding service message contains a count of the machine identifiers in the list. Once the count reaches a predetermined threshold, software activation bypass may occur.

Claims

1. A computer-readable medium having computer-executable instructions for performing steps comprising:

generating an activation bypass message, wherein the activation bypass message comprises a machine identifier and a software identifier associated with a software application that is to undergo activation bypass;

sending the activation bypass message to a binding service machine;

receiving from the binding service machine a binding service message that comprises a machine count;

comparing the machine count to a predetermined count; and

if the machine count is equal to or greater than the predetermined count, allowing activation bypass for the software application.

2. The computer-readable medium of claim 1, wherein the activation bypass message further comprises a timestamp indicating the time at which the activation bypass message was generated.

3. The computer-readable medium of claim 1, wherein the activation bypass message is sent by way of a computer network, and wherein the machine count corresponds to a number of machines present on the network that have sent at least one activation bypass message to the binding service.

4. The computer-readable medium of claim 3, wherein the activation bypass message is sent when a machine on which the activation of the software application is to be bypassed logs into the computer network.

5. The computer-readable medium of claim 4, wherein the machine identifier is derived from a hardware attribute of the machine on which the activation of the software application is to be bypassed.

6. The computer-readable medium of claim 1, wherein the predetermined count is defined by a policy associated with the software application.

7. The computer-readable medium of claim 6, wherein the activation bypass message further comprises the policy.

8. The computer-readable medium of claim 6, wherein the policy is stored as part of a signed extensible rights markup language file that is associated with the software application.

9. The computer-readable medium of claim 8, wherein said generating and sending steps are repeated at a predetermined interval.

10. The computer-readable medium of claim 1, wherein the activation bypass message further comprises a first message authentication code and the binding service message further comprises a second message authentication code, and further comprising authenticating the binding service message using the second authentication code.

11. A computer-readable medium having computer-executable instructions for performing steps comprising:

receiving an activation bypass message from a client machine, wherein the activation bypass message comprises a client machine identifier and a software identifier associated with a software application having an activation requirement to be bypassed;

determining whether the received client machine identifier is among a list of machine identifiers;

if the received client machine identifier is not among the list of machine identifiers, adding the received client machine identifier to the list;

determining a number of machine identifiers within the list; and

sending a binding service message, wherein the binding service message comprises the number of unique machine identifiers.

12. The computer-readable medium of claim 11, wherein the activation bypass message further comprises a first message authentication code and the binding service message further comprises a second message authentication code, and further comprising authenticating the activation bypass message using the second authentication code.

13. The computer-readable medium of claim 11, further comprising deleting the received client identifier from the list after a predetermined time.

14. The computer-readable medium of claim 11, wherein the client machine identifier is derived from a hardware attribute of the client machine.

15. The computer-readable medium of claim 11, wherein the activation bypass message further comprises a timestamp indicating a time at which the activation bypass message was generated by the client machine.

16. The computer-readable medium of claim 15, wherein each machine identifier in the list of machine identifiers is represented as an entry comprising the machine identifier and an associated timestamp.

17. The computer-readable medium of claim 16, and further comprising, if the received client machine identifier is among the list of machine identifier entries, updating or replacing the entry with an entry corresponding to the machine identifier associated with the most recent timestamp.

18. A method of deterring piracy in a volume license environment, comprising:

generating an activation bypass message at a client machine, wherein the activation bypass message comprises a machine identifier and a software identifier associated with a software application the activation of which is to be bypassed;

sending the activation bypass message to a binding service machine;

determining, at the binding service machine, whether the received client machine identifier is among a list of machine identifiers;

if the received client machine identifier is not among the list of machine identifiers, adding, at the binding service machine, the received client machine identifier to the list;

determining, at the binding service machine, a number of machine identifiers within the list;

sending a binding service message to the client machine, wherein the binding service message comprises the number of unique machine identifiers;

comparing, at the client machine, the machine count to a predetermined count; and

if the machine count is equal to or greater than the predetermined count, allowing activation bypass for the software application.

19. The computer-readable medium of claim 18, further comprising deleting, at the binding service machine, the received client identifier from the list after a predetermined time and repeating, at the client machine, said generating and sending steps at a predetermined interval.

20. The method of claim 18, wherein the activation bypass message further comprises a first message authentication code and the binding service message further comprises a second message authentication-code, and further comprising authenticating, at the binding service machine, the activation bypass message using the first authentication code, and authenticating, at the client machine, the binding service message using the second authentication code