SYSTEM AND METHOD FOR SECURE SOFTWARE LICENSE DISTRIBUTION

• US 20130124867A1
• Filed: 11/15/2012
• Published: 05/16/2013
• Est. Priority Date: 11/16/2011
• Status: Abandoned Application

• Current Assignee: NL Systems LLC
• Original Assignee: NL Systems LLC
• Inventors: Clayton, William P. II, Hart, Brandon, Roach, Courtney, Thomas, Patryck, Gilmore, John, Stephenson, Terry
• Application Number:
  US13/678,235
• Publication Number:
  US 20130124867A1
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials
• CPC Class Codes: H04L 9/3247 involving digital signatures

Abstract

In one embodiment, a method includes receiving a request to remove one or more limitations imposed on a full-featured base application executing on a client computer. The method further includes creating a license package. The license package includes a first layer and a second layer separately encrypted therein. The second layer includes a license key operable to be consumed by the full-featured base application to remove the one or more limitations. The first layer comprises information sufficient to identify the license key. In addition, the method includes encapsulating the license package into a file having a file-type association with the full-featured base application. Further, the method includes transmitting the file to the client computer. The method also includes interacting with the full-featured base application to allow decryption of the first layer and the second layer so that the license key can be applied.

Claims

1. A method comprising:

receiving, on a computer system comprising at least one server computer, a request to remove one or more limitations imposed on a full-featured base application executing on a client computer;

wherein the request comprises a user signature and a hardware fingerprint;

creating, by the computer system, a license package, the license package comprising a first layer and a second layer separately encrypted therein;

wherein the second layer comprises a license key operable to be consumed by the full-featured base application to remove the one or more limitations;

wherein the first layer comprises information sufficient to identify the license key;

encapsulating, by the computer system, the license package into a file having a file-type association with the full-featured base application;

transmitting, by the computer system, the file to the client computer;

the computer system interacting with the full-featured base application to allow decryption of the first layer and the second layer so that the license key can be applied; and

wherein the interacting comprises verifying a user of the client computer, hardware of the client computer, and the license key.

2. The method of claim 1, wherein the interacting comprises:

receiving a candidate user signature and a new hardware fingerprint;

verifying the candidate user signature and the new hardware fingerprint against the user signature and the hardware fingerprint, respectively; and

responsive to the verifying, transmitting an unlock key, the unlock key operable to decrypt the first layer.

3. The method of claim 2, wherein the interacting comprises:

receiving information decrypted from the first layer;

verifying the license key via the information; and

responsive to the verifying, returning a success code operable to decrypt the second layer.

4. The method of claim 1, wherein the transmitting comprises transmitting the file to an email address associated with the user as an email attachment.

5. The method of claim 1, wherein the first layer comprises the user signature, the hardware fingerprint, an activation code identifying the license key, and a list of the one or more limitations.

6. A method comprising:

transmitting, by a client computer, a request to remove one or more limitations imposed on a full-featured base application;

wherein the request comprises a user signature and a hardware fingerprint;

receiving a file having a file-type association with the full-featured base application, the file encapsulating a license package;

wherein the license package comprises a first layer and a second layer separately encrypted therein;

wherein the second layer comprises a license key operable to be consumed by the full-featured base application to remove the one or more limitations;

wherein the first layer comprises information sufficient to identify the license key;

the client computer interacting with a secure computer system to decrypt the first layer and the second layer; and

applying the license key to the full-featured base application.

7. The method of claim 6, wherein the interacting comprises:

obtaining a candidate user signature and a new hardware fingerprint;

transmitting the candidate user signature and the new hardware fingerprint to a secure computer system for authentication; and

receiving an unlock key, the unlock key operable to decrypt the first layer.

11. The method of claim 6, wherein the receiving comprises receiving the file via an email address associated with a user of the client computer.

12. The method of claim 6, wherein the applying comprises the full-featured base application self-consuming the license key.

8. The method of claim 8, wherein the interacting comprises decrypting the first layer.

9. The method of claim 8, wherein the interacting comprises:

transmitting information decrypted from the first layer to the secure computer system; and

receiving a success code operable to decrypt the second layer.

10. The method of claim 9, wherein the interacting comprises decrypting the second layer to obtain the license key.

13. A system comprising:

a license server operable to create and verify license keys;

an authentication server operable to authenticate users and client-computer hardware;

an email server operable to transmit emails;

a secure network for enabling communication among the license server, the authentication server, and the email server; and

wherein the license server, the authentication server, and the email server, in combination, are operable to;

receive a request to remove one or more limitations imposed on a full-featured base application executing on a client computer;

wherein the request comprises a user signature and a hardware fingerprint;

create a license package, the license package comprising a first layer and a second layer separately encrypted therein;

wherein the second layer comprises a license key operable to be consumed by the full-featured base application to remove the one or more limitations;

wherein the first layer comprises information sufficient to identify the license key;

encapsulate the license package into a file having a file-type association with the full-featured base application; and

transmit the file to the client computer;

interact with the full-featured base application to allow decryption of the first layer and the second layer so that the license key can be applied; and

wherein the interaction comprises verification of a user of the client computer, hardware of the client computer, and the license key.

14. The system of claim 13, wherein the interaction comprises:

receipt of a candidate user signature and a new hardware fingerprint;

verification of the candidate user signature and the new hardware fingerprint against the user signature and the hardware fingerprint, respectively; and

responsive to the verification, transmission of an unlock key, the unlock key operable to decrypt the first layer.

15. The system of claim 14, wherein the interaction comprises:

receipt of information decrypted from the first layer;

verification of the license key via the information; and

responsive to the verification, return of a success code operable to decrypt the second layer.

16. The system of claim 13, wherein the transmission comprises transmission of the file to an email address associated with the user as an email attachment.

17. The system of claim 13, wherein the first layer comprises the user signature, the hardware fingerprint, an activation code identifying the license key, and a list of the one or more limitations.

18. A computer-program product comprising a computer-usable medium having computer-readable program code embodied therein, the computer-readable program code adapted to be executed to implement a method comprising:

receiving a request to remove one or more limitations imposed on a full-featured base application executing on a client computer;

wherein the request comprises a user signature and a hardware fingerprint;

creating a license package, the license package comprising a first layer and a second layer separately encrypted therein;

wherein the second layer comprises a license key operable to be consumed by the full-featured base application to remove the one or more limitations;

wherein the first layer comprises information sufficient to identify the license key;

encapsulating the license package into a file having a file-type association with the full-featured base application;

transmitting the file to the client computer;

interacting with the full-featured base application to allow decryption of the first layer and the second layer so that the license key can be applied; and

wherein the interacting comprises verifying a user of the client computer, hardware of the client computer, and the license key.

19. The computer-program product of claim 18, wherein the interacting comprises:

receiving a candidate user signature and a new hardware fingerprint;

verifying the candidate user signature and the new hardware fingerprint against the user signature and the hardware fingerprint, respectively; and

responsive to the verifying, transmitting an unlock key, the unlock key operable to decrypt the first layer.

20. The computer-program product of claim 19, wherein the interacting comprises:

receiving information decrypted from the first layer;

verifying the license key via the information; and

responsive to the verifying, returning a success code operable to decrypt the second layer.