LICENSING AND CERTIFICATE DISTRIBUTION VIA SECONDARY OR DIVIDED SIGNALING COMMUNICATION PATHWAY

• US 20110055555A1
• Filed: 08/26/2009
• Published: 03/03/2011
• Est. Priority Date: 08/26/2009
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Toennis, Roger L., Swartz, Douglas W., Mohler, David S., Michaelis, Paul Roller
• Granted Patent: US 8,800,049 B2
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

In one embodiment, the present invention is directed to the use of separate communication pathways over different types of networks to handle bearer and control signaling in connection with a license transaction.

Claims

1. A method, comprising:

(a) establishing, over a second communication pathway, a second session between a customer computational component to be licensed and a licensing server, the second communication pathway being over the Internet;

(b) establishing, over a first communication pathway, a first session between at least one of a customer and the customer computational component and the licensing server, the first communication pathway being over a digital telephone network;

(c) transmitting, by a processor, first license information over the first communication pathway; and

(d) transmitting, by a processor, second license information over the second communication pathway, wherein the first and second license information permit the customer computational component to execute.

2. The method of claim 1, wherein the first license information comprises at least one of session security information for the untrusted network and an encryption key and wherein the second license information comprises an encrypted license.

3. The method of claim 1, wherein the first license information comprises a digital certificate to authenticate the computational component and wherein the licensing server comprises a certificate authority.

4. The method of claim 1, wherein the first license information comprises at least one of transient state information of the computational component, a serial number collected from the computational component, a software activation key to activate licensed software, a license validation key to validate the license, a feature-based computation result, a license validation query, a license validation response, license tracking information, a credit card number, and a permission to execute licensed software.

5. The method of claim 1, further comprising:

determining a configuration of the computational component; and

applying the following rules;

according to a first rule, when the computational component comprises a modem, the first session is established using a modem protocol;

according to a second rule, when the computational component comprises a wireless access card, the first session is established using a cellular telecommunications protocol; and

according to a third rule, when the computational component comprises neither a modem nor a wireless access card, the first session is established by a customer manually dialing a telephone number associated with the licensing server.

6. The method of claim 1, further comprising:

associating, by a processor in the computational component, a first calling number associated with the computational component with a first IP address of the computational component; and

associating, by a processor in the licensing server, a second calling number associated with the licensing server with a second IP address of the licensing server, whereby signaling received over the first and second communication pathways is coordinated.

7. The method of claim 5, wherein the first license information is different when the first rule applies compared to when the third rule applies.

8. A computer readable medium comprising processor executable instructions that, when executed, perform the steps of claim 1.

9. A licensing server, comprising:

a processor operable to;

establish, over a second communication pathway and by a second communication modality, a second session with a customer computational component to be licensed;

establish, over a first communication pathway and by a first communication modality, a first session with at least one of a customer and the customer computational component, the first and second communication modalities being different;

transmit and/or receive first license information over the first communication pathway; and

transmit and/or receive second license information over the second communication pathway, wherein the first and second license information permit the customer computational component to execute.

10. The server of claim 9, wherein the first communication modality is a digital telephone network, wherein the second communication modality is the Internet, wherein the first license information comprises at least one of session security information for the untrusted network and an encryption key, and wherein the second license information comprises an encrypted license.

11. The server of claim 9, wherein the first license information comprises a digital certificate to authenticate the computational component and wherein the licensing server comprises a certificate authority.

12. The server of claim 9, wherein the first license information comprises at least one of transient state information of the computational component, a serial number collected from the computational component, a software activation key to activate licensed software, a license validation key to validate the license, a feature-based computation result, a license validation query, a license validation response, license tracking information, a credit card number, and a permission to execute licensed software.

13. The server of claim 9, wherein the first communication modality is a digital telephone network, wherein the second communication modality is the Internet, and wherein the processor is further operable to:

determine a configuration of the computational component; and

apply the following rules;

according to a first rule, when the computational component comprises a modem, establish the first session using a modem protocol;

according to a second rule, when the computational component comprises a wireless access card, establish the first session using a cellular telecommunications protocol; and

according to a third rule, when the computational component comprises neither a modem nor a wireless access card, request the customer to establish the first session by manually dialing a telephone number associated with the licensing server.

14. The server of claim 9, wherein the processor is further operable to:

associate a calling number associated with the computational component with an IP address of the computational component, whereby signaling received over the first and second communication pathways is coordinated.

15. A computational component, comprising:

a software application to be licensed; and

a processor operable to;

establish, over a second communication pathway and by a second communication modality, a second session with a customer computational component to be licensed;

establish, over a first communication pathway and by a first communication modality, a first session with at least one of a customer and the customer computational component, the first and second communication modalities being different;

transmit and/or receive first license information over the first communication pathway; and

transmit and/or receive second license information over the second communication pathway, wherein the first and second license information permit the software application to execute.

16. The computational component of claim 15, wherein the first communication modality is a digital telephone network, wherein the second communication modality is the Internet, wherein the first license information comprises at least one of session security information for the untrusted network and an encryption key, and wherein the second license information comprises an encrypted license.

17. The computational component of claim 15, wherein the first license information comprises a digital certificate to authenticate the computational component and wherein the licensing server comprises a certificate authority.

18. The computational component of claim 15, wherein the first license information comprises at least one of transient state information of the computational component, a serial number collected from the computational component, a software activation key to activate licensed software, a license validation key to validate the license, a feature-based computation result, a license validation query, a license validation response, license tracking information, a credit card number, and a permission to execute licensed software.

19. The computational component of claim 15, wherein the first communication modality is a digital telephone network, wherein the second communication modality is the Internet, and wherein the processor is further operable to:

determine a configuration of the computational component; and

apply the following rules;

according to a first rule, when the computational component comprises a modem, establish the first session using a modem protocol;

according to a second rule, when the computational component comprises a wireless access card, establish the first session using a cellular telecommunications protocol; and

according to a third rule, when the computational component comprises neither a modem nor a wireless access card, request the customer to establish the first session by manually dialing a telephone number associated with the licensing server.

20. The computational component of claim 15, wherein the processor is further operable to:

associate a calling number associated with the licensing server with an IP address of the licensing server, whereby signaling received over the first and second communication pathways is coordinated.