Apparatus and method for licensing software on a network of computers

• US 5,138,712 A
• Filed: 10/02/1989
• Issued: 08/11/1992
• Est. Priority Date: 10/02/1989
• Status: Expired due to Term

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: Corbin, John R.
• Primary Examiner(s): Shaw, Gareth D.
• Assistant Examiner(s): Loomis, John C.
• Application Number:
  US07/415,984
• Time in Patent Office: 1,044 Days
• Field of Search: 364/200 MS File, 364/900 MS File, 235/380, 235/382, 235/375, 380/4
• US Class Current: 726/30
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/1077 Recurrent authorisation
• CPC Class Codes: G06F 21/125 by manipulating the program code, e.g. source code, compiled code, interpreted code, machine code
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213

Abstract

The present invention provides to the software application the verification and license check out functions which are normally performed by a license server of a network software license system. The encrypted license information is contained in a license token, and is sorted in the database controlled by the license server. In contrast to the prior art where the license server either grants or denies the request after verifying the user'"'"'s credentials, the license server in the preferred embodiment of the present invention finds the correct license token for the software application and transmits the license token to the licensing library. In application specific license access module attached to the application decodes the licensing token. Routines in the licensing library coupled to the software application verify the license information before checking out the license and updating the license token. The application specific license access module then encodes the updated license token before returning it to the license server. Thus, the impact of breaching the encryption/decryption of an application is limited to only one application. As a result, the present invention provides improved network-wide protection against unauthorized use of software applications in a network of computers.

Claims

1. In a network of computers comprising at least one computer executing at least one application programs, a method for licensing an application program that further increases network-wide protection against unauthorized execution of said application program, said method comprising the steps of:

storing a first license token in a first database by a first license server, said first license token comprising licensing information of said application program and being stored in encrypted format;

retrieving said stored first license token for said application program by said first license server, said retrieval being requested of said first license server by a licensing routine of a licensing library for licensing said application program for execution;

verifying said licensing information stored in said retrieved first license token against licensing information maintained by said application program in conjunction with said licensing routine after said retrieved first license token has been decrypted by an application program specific license access module integrated with said application program;

licensing said application program for execution upon said verification by said licensing routine;

updating said retrieved first license token upon said licensing by said licensing routine; and

returning said updated first license token to said first license server for storage in said first database by said licensing routine after said updated first license token has been re-encrypted by said application program specific license module integrated with said application program.

2. The method as defined in claim 1, wherein said first license token comprises licensing information for at least one version of said application program.

3. The method as defined in claim 1, wherein said re-encrypted first license token is returned by said licensing routine to said first license server for storage in said first database within a predeterminded time period.

4. The method as defined in claim 1, wherein said method further comprises the step of receiving said first license token from said application program'"'"'s vendor and providing said first license token to said first license server for storage in said first database,

said first license token being received from a distribution medium of said application program and provided to said first license server in encrypted format by a license administration tool.

5. The method as defined in claim 4, wherein said method further comprises the step of producing said first license token on said distribution medium in said encrypted format by said application program'"'"'s vendor by a license production tool.

6. The method as defined in claim 1, wherein said method further comprises the step of receiving said application program integrated with said application program specific license access module from a distribution medium of said application program and installed onto said computer:

said application program specific license access module being integrated with said application program and placed on said distribution medium by said application program'"'"'s vendor.

7. The method as defined in claim 1, wherein said application program specific license access module comprises a decrypting module for decrypting said first license token and an encrypting module for encrypting said first license token, said decrypting and encrypting module being executed by said computer.

8. The method as defined in claim 1, wherein said step of updating said retrieved first license token upon said licensing comprises decrementing license units in said retrieved first license token.

9. The method as defined in claim 1, wherein method further comprises the steps of:

retrieving said stored first license token for said application program by said first license server, said retrieval being requested of said first license server by an unlicensing routine of a licensing library for unlicensing said application program for execution;

verifying said licensing information stored in said retrieved first license token against licensing information maintained by said application program by said unlicensing routine after said retrieved first license token has been decrypted by said application program by an application program specific license access module integrated with said application program;

unlicensing said application program for execution upon said verification by said unlicensing routine;

updating said retrieved first license token upon said unlicensing by said unlicensing routine; and

returning said updated first license token to said first license server for storage in said first database by said unlicensing routine after said updated first license token has been re-encrypted by said application program specific license access module integrated with said application program.

10. The method as defined in claim 9, wherein step of updating said retrieved first license token upon said unlicensing comprises incrementing license units in said retrieved first license token.

11. The method as claimed in claim 1, wherein said method further comprises the steps of:

storing a second license token in a second database by a second license server, said second license token comprising licensing information of said application program and being stored in encrypted format;

storing a first and second license server identifiers identifying said first and second license servers in a binding file, said licensing library accessing said binding file to select said first license server to retrieve said first license token; and

identifying said first and second license servers and storing said first and second license server identifiers into said binding file by a license service binder.

12. The method as defined in claim 11, wherein said second license token comprises licensing information for at least one version of said application program.

13. The method as defined in claim 11, wherein said method further comprises the step of receiving said first and second license tokens from a distribution medium of said application program and providing said first and second license tokens to said first and second license servers for storage in said first and second databases respectively by a license administration tool, said first and second license tokens being received by said license administration tool and provided to said first and second license servers in encrypted format.

14. The method as defined in claim 13, wherein said method further comprises the step of producing said first and second license tokens on said distribution medium in said encrypted format by said application program'"'"'s vendor by a license production tool.

15. In a network of computers comprising at least one computer executing at least one application program, an apparatus for licensing an application program that increases network-wide protection against unauthorized execution of said application program, said apparatus comprising:

first database means comprising a first database for storing a first license token, said first license token comprising licensing information of said application program and being stored in encrypted format;

first license server means coupled to said first computer and said first database means comprising a first license server for storing said first license token into said first database and for retrieving said stored first license token from said first database;

a licensing library comprising a licensing routine for requesting said first license server to retrieve said first license token for said application program, verifying said licensing information stored in said retrieved first license token against licensing information maintained by said application program after said retrieved first license token has been decrypted by said application program, licensing said application program for execution upon said verification, updating said retrieved first license token upon said licensing, and returning said updated first license token to said first license server for storage in said first database after said updated first license token has been re-encrypted by said application program, said licensing library including said licensing routine being executed by said computer; and

a license access module specific for said application program and integrated with said application program for decrypting said retrieved first license token and re-encrypting said updated first license token, said license access module being executed by said computer.

16. The apparatus as defined in claim 15, wherein, said first license token comprises licensing information for at least one version of said application program.

17. The apparatus as defined in claim 15, wherein said re-encrypted first license token is returned by said licensing routine to said first license server for storage in said first database within a predetermined time period.

18. The apparatus as defined in claim 15, wherein, said apparatus further comprises license administration tool means coupled to said first license server means comprising a license administration tool for initially receiving said first license token from a distribution medium of said application program and providing said first license token to said first license server for storage in said first database, said first license token being received by said license administration tool and provided to said first license server in encrypted format.

19. The apparatus as defined in claim 18, wherein, said apparatus further comprises license production tool means comprising a license production tool for producing said first license token on said distribution medium in said encrypted format by said application program'"'"'s vendor.

20. The apparatus as defined in claim 15, wherein, said application program integrated with said application program specific license access module is received from a distribution medium of said application program, and installed onto said computer, said application program specific license access module being integrated with said application program and placed on said distribution medium by said application program'"'"'s vendor.

21. The apparatus as defined in claim 15, wherein said application program specific license access module comprises a decrypting module for decrypting said first license token and an encrypting module for encrypting said first license token, said decrypting and encrypting modules being executed by said computer.

22. The apparatus as defined in claim 15, wherein said licensing routine performs said update of said retrieved first license token upon said licensing by decrementing license units in said retrieved first license token.

23. The apparatus as defined in claim 15, wherein said licensing library further comprises an unlicensing routine for requesting said first license server to retrieve said first license token for said application program, verifying said licensing information stored in said retrieved first license token against licensing information maintained by said application program after said retrieved first license token has been decrypted by said application program, unlicensing said application program for execution upon said verification, updating said retrieved first license token upon said unlicensing, returning said updated first license token to said first license server for storage in said first database after said updated first license token has been re-encrypted by said application program.

24. The apparatus as defined in claim 23, wherein, said unlicensing routine performs said update of said retrieved first license token upon said unlicensing by incrementing license units in said retrieved first license token.

25. The apparatus as defined in claim 15, wherein said apparatus further comprises:

second database means comprising a second database for storing a second license token, said second license token comprising licensing information of said application program and being stored in encrypted format;

second license server means coupled to said computer and second database means comprising a second license server for storing said second license token into said second database and for retrieving said stored second license token from said second database;

binding file means coupled to said computer comprising a binding file for storing a first and second license server identifiers identifying said first and second license servers, said licensing library accessing said binding file to select said first license server to retrieve said first license token; and

license binding means coupled to said first and second license server means and said binding file means comprising a license service binder for identifying said first and second license servers and storing said first and second license server identifiers into said binding file.

26. The apparatus as defined in claim 25, wherein said second license token comprises licensing information for at least one version of said application program.

27. The apparatus as defined in claim 25, wherein said apparatus further comprise license administration tool means coupled t said first license and second license server means comprising a license administration tool for initially receiving said first and second license tokens from a distribution medium of said application program and providing said first and second license tokens to said first and second license servers for storage in said first and second databases respectively, said first and second license tokens being received by said license administration tool and provided to said first and second license servers in encrypted format.

28. The apparatus as defined in claim 27, wherein said apparatus further comprises a license production tool means comprising a license production tool for producing said first and second license tokens on said distribution medium in said encrypted format by said application program'"'"'s vendor.