DISTRIBUTED LEDGER SYSTEM THAT FACILITATES DEVICE MANAGEMENT

• US 20200134139A1
• Filed: 10/26/2018
• Published: 04/30/2020
• Est. Priority Date: 10/26/2018
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: VAISH, Sonal Gaurav, BAUMANN, Timothy Paul, GULABRANI, Seema Lal, MOORE, Brittany Jon
• Granted Patent: US 11,126,698 B2
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/1805 Append-only file systems, e.g. using logs or journals to store data
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/64 Protecting data integrity, e.g. using checksums, certificates or signatures
• CPC Class Codes: G06Q 50/184 Intellectual property management
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 9/0643 Hash functions, e.g. MD5, SHA, HMAC or f9 MAC
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees

Abstract

A distributed ledger system includes a device registry and a software registry. The device registry includes a plurality of device identifiers. Each device identifier uniquely identifies a device that has been registered with the distributed ledger system. The software registry includes a plurality of software license identifiers. Each software license identifier uniquely identifies a software license that has been registered with the distributed ledger system. The distributed ledger system also includes transaction management components that are configured to record device transaction information associated with the plurality of devices and software transaction information associated with the plurality of software licenses. The distributed ledger system also includes access control components that are configured to enforce access control policies related to the plurality of devices and the plurality of software licenses.

Claims

1. A distributed ledger system that is configured to facilitate device management, comprising:

one or more processors;

memory in electronic communication with the one or more processors;

a device registry stored in the memory, the device registry comprising a plurality of device identifiers, each device identifier uniquely identifying a device that has been registered with the distributed ledger system;

a software registry stored in the memory, the software registry comprising a plurality of software license identifiers, each software license identifier uniquely identifying a software license that has been registered with the distributed ledger system;

transaction management components stored in the memory, the transaction management components being executable by the one or more processors to record, in a distributed ledger that is maintained by the distributed ledger system, device transaction information associated with the plurality of devices and software transaction information associated with the plurality of software licenses; and

access control components stored in the memory, the access control components being executable by the one or more processors to enforce access control policies related to the plurality of devices and the plurality of software licenses.

2. The distributed ledger system of claim 1, further comprising:

a plurality of device tokens stored in the memory, each device token being associated with a registered device; and

a plurality of software license tokens stored in the memory, each software license token being associated with a registered software license.

3. The distributed ledger system of claim 2, wherein:

the plurality of device tokens are executable by the one or more processors to perform one or more of changing ownership of the device tokens, recording the device transaction information in the device registry, and enforcing device access control policies associated with the device tokens; and

the plurality of software license tokens are executable by the one or more processors to perform one or more of changing ownership of the software license tokens, recording the software transaction information in the software registry, enforcing software access control policies associated with the software license tokens, and tracking consumption of licensed software products on the plurality of devices.

4. The distributed ledger system of claim 3, wherein recording the device transaction information and recording the software license transaction information comprise associating a device token with a software license token in response to a purchase of a registered software license for a registered device, the registered device being associated with the device token, and the registered software license being associated with the software license token.

5. The distributed ledger system of claim 3, wherein changing the ownership of the device tokens comprises changing an owner identifier associated with a device token in response to a change in ownership of a registered device, the registered device being associated with the device token.

6. The distributed ledger system of claim 3, wherein changing the ownership of the software license tokens comprises changing an owner identifier associated with a software license token in response to a purchase of a registered software license, the registered software license being associated with the software license token.

7. The distributed ledger system of claim 3, wherein enforcing the device access control policies associated with the device tokens comprises at least one of:

restricting visibility of a device token within the distributed ledger system;

or

defining one or more users who are authorized to modify attributes of the device token and record transactions associated with the device token.

8. The distributed ledger system of claim 3, wherein enforcing the software access control policies associated with the software license tokens comprises at least one of:

restricting visibility of a software license token within the distributed ledger system;

or

defining one or more users who are authorized to modify attributes of the software license token and record transactions associated with the software license token.

9. The distributed ledger system of claim 1, further comprising:

an application programming interface corresponding to the distributed ledger system; and

a user interface that facilitates access to data maintained by the distributed ledger system via the application programming interface.

10. A method for facilitating device management through use of a distributed ledger system, comprising:

registering a plurality of devices with the distributed ledger system;

creating a plurality of device identifiers for the plurality of devices, each device identifier uniquely identifying a device that has been registered with the distributed ledger system;

registering a plurality of software licenses with the distributed ledger system;

creating a plurality of software license identifiers for the plurality of software licenses, each software license identifier uniquely identifying a software license that has been registered with the distributed ledger system;

recording device transaction information associated with the plurality of devices in a device registry;

recording software transaction information associated with the plurality of software licenses in a software registry; and

enforcing access control policies related to the plurality of devices and the plurality of software licenses.

11. The method of claim 10, further comprising:

creating a plurality of device tokens, each device token being associated with a registered device; and

creating a plurality of software license tokens, each software license token being associated with a registered software license.

12. The method of claim 11, further comprising managing ownership of the plurality of device tokens, wherein managing the ownership of the plurality of device tokens comprises changing an owner identifier associated with a device token in response to a purchase of a registered device, the registered device being associated with the device token.

13. The method of claim 11, further comprising managing ownership of the plurality of software license tokens, wherein managing the ownership of the plurality of software license tokens comprises changing an owner identifier associated with a software license token in response to a purchase of a registered software license, the registered software license being associated with the software license token.

14. The method of claim 10, wherein enforcing the access control policies related to the plurality of devices comprises at least one of:

restricting visibility of a device token within the distributed ledger system;

or

defining one or more users who are authorized to modify attributes of the device token and record transactions associated with the device token.

15. The method of claim 10, wherein enforcing the access control policies related to the plurality of software licenses comprises at least one of:

restricting visibility of a software license token within the distributed ledger system;

or

defining one or more users who are authorized to modify attributes of the software license token and record transactions associated with the software license token.

16. The method of claim 10, wherein recording the device transaction information and recording the software transaction information comprise associating a device token with a software license token in response to a purchase of a registered software license for a registered device, the registered device being associated with the device token, and the registered software license being associated with the software license token.

17. The method of claim 10, further comprising:

exposing an application programming interface corresponding to the distributed ledger system; and

providing a user interface that facilitates access to data maintained by the distributed ledger system via the application programming interface.

18. A non-transitory computer-readable medium having computer-executable instructions stored thereon that, when executed, cause one or more processors to perform operations comprising:

registering a plurality of devices with a distributed ledger system;

creating a plurality of device identifiers for the plurality of devices, each device identifier uniquely identifying a device that has been registered with the distributed ledger system;

registering a plurality of software licenses with the distributed ledger system;

creating a plurality of software license identifiers for the plurality of software licenses, each software license identifier uniquely identifying a software license that has been registered with the distributed ledger system;

recording device transaction information associated with the plurality of devices in a device registry;

recording software transaction information associated with the plurality of software licenses in a software registry; and

enforcing access control policies related to the plurality of devices and the plurality of software licenses.

19. The non-transitory computer-readable medium of claim 18, wherein the operations further comprise:

creating a plurality of device tokens, each device token being associated with a registered device; and

creating a plurality of software license tokens, each software license token being associated with a registered software license.

20. The non-transitory computer-readable medium of claim 18, wherein recording the device transaction information and recording the software transaction information comprise associating a device token with a software license token in response to a purchase of a registered software license for a registered device, the registered device being associated with the device token, and the registered software license being associated with the software license token.