System and method for generating and verifying application licenses

• US 20060122939A1
• Filed: 11/17/2005
• Published: 06/08/2006
• Est. Priority Date: 11/19/2004
• Status: Abandoned Application

• Current Assignee: Mark Sherman Cohen, Scott Stanley Allan Coby, Shailesh Chirputkar
• Original Assignee: Mark Sherman Cohen, Scott Stanley Allan Coby, Shailesh Chirputkar
• Inventors: Coby, Scott Stanley Allan, Cohen, Mark Sherman, Chirputkar, Shailesh
• Application Number:
  US11/280,204
• Publication Number:
  US 20060122939A1
• Time in Patent Office: Days
• US Class Current: 705/59
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/128 involving web programs, i.e. using technology especially used in internet, generally interacting with a web browser, e.g. hypertext markup language [HTML], applets, java
• CPC Class Codes: G06F 21/32 using biometric data, e.g. fingerprints, iris scans or voiceprints
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 2221/2117 User registration
• CPC Class Codes: G06V 10/95 structured as a network, e.g. client-server architectures
• CPC Class Codes: G06V 40/10 Human or animal bodies, e.g. vehicle occupants or pedestrians; Body parts, e.g. hands
• CPC Class Codes: G07C 9/37 using biometric data, e.g. fingerprints, iris scans or voice recognition
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0846 using time-dependent-passwords, e.g. periodically changing passwords
• CPC Class Codes: H04L 63/0861 using biometrical features, e.g. fingerprint, retina-scan cryptographic mechanisms or cryptographic arrangements for entity authentication using biological data H04L9/3231
• CPC Class Codes: H04L 9/3231 Biological data, e.g. fingerprint, voice or retina network architectures or network communication protocols for supporting authentication of entities using biometrical features in a packet data network H04L63/0861
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

Embodiments of the invention provide methods and systems for protecting access to a licensed application using an application license file for a network application, stored on the application server, the application license file including an application identifier, wherein the application identifier is used to verify the license when access to the application is requested.

Claims

1. A method of protecting access to a licensed application on an application server, the method comprising:

generating an application license file for a network application, the application license file including an identifier of the application; and

saving the application license file on the application server.

2. The method of claim 1 wherein the identifier of the application comprises a HTTP_Host value.

3. The method of claim 1 wherein the application license file further includes an expiration date for the application license.

4. The method of claim 1 wherein the application license file further includes a name of a licensed customer of the network application.

5. The method of claim 1 further comprising encrypting the application license file.

6. The method of claim 1 comprising saving the application license file as an XML file.

7. A method of verifying a license for accessing an application on an application server, the method comprising:

receiving a request from a web client to access a licensed application, the request including an identifier of the application;

comparing the identifier received from the web client against an identifier included in an application license file; and

if the received identifier does not match the identifier included in the application license file, determining that the application license is invalid for said application.

8. The method of claim 7 wherein the identifier of the application comprises a HTTP_Host value.

9. The method of claim 7 wherein the application license file further includes a license expiration date for the application and wherein the method further comprises:

comparing the expiration date in the application license file with a current date; and

if the current date is later than the expiration date, determining that the application license has expired for said application.

10. The method of claim 8 comprising, if the received identifier matches the identifier included in the application license file and the application license has not expired, verifying that the application license is valid.

11. The method of claim 10 wherein the identifier of the application comprises a HTTP_Host value.

12. The method of claim 8 comprising, if the application license is invalid or has expired, denying the web client access to the application.

13. The method of claim 7 wherein the application license file includes a customer name.

14. The method of claim 7 wherein receiving a request from a web client comprises receiving the request via a URL.

15. The method of claim 7 wherein the request from a client to access an application comprises a HTTPS-request.

16. The method of claim 7 comprising encrypting the application license file.

17. The method of claim 7 wherein the application license file comprises an XML file.

18. The method of claim 7 wherein receiving the request to access the application comprises receiving the request at a web server.

19. A system for protecting access to a licensed application, the system comprising:

an application server to host the licensed application, to store an application license file including an identifier of the application, to receive a request from a web client for access to the licensed application, the request including an identifier of the licensed application, to compare the received identifier included in the request against the identifier included in the application license file, and, if the received identifier does not match the identifier included in the application license file, to determine that the application license is invalid for said licensed application.

20. The system of claim 19 wherein the identifier of the application comprise a HTTP_Host value.

21. The system of claim 19 further comprising a client device configured to transmit the request from the web client for access to the licensed application.

22. The system of claim 19 further comprising an application license generator to generate the application license file including the identifier of the application.

23. The system of claim 19 wherein the application license file further includes a license expiration date for the application and wherein the server is further adapted to, compare the expiration date in the application license file with a current date;

and, if the current date is later than the expiration date, to determine that the application license has expired for said application.

24. The system of claim 23 wherein the application server is further adapted to, if the received identifier matches the identifier included in the application license file and the application license has not expired, verify that the application license is valid.

25. The system of claim 23 wherein the application server is further adapted, if the application license is invalid or has expired, to deny the web client access to the application.

26. The system of claim 19 wherein the application license file further includes a customer name.

27. The system of claim 19 wherein the application license file is encrypted.

28. The system of claim 19 where the application license file comprises an XML file.

29. The system of claim 19 wherein the application server is associated with a web server to communicate with the web client.