Computer implemented method and system for controlling use of digitally encoded products

• US 7,376,971 B2
• Filed: 10/10/2002
• Issued: 05/20/2008
• Est. Priority Date: 10/30/2001
• Status: Active Grant

• Current Assignee: Meta Platforms, Inc. (f/k/a Facebook, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Pastorelli, Bernardo, Rossi, Riccardo, Di Giulio, Domenico
• Primary Examiner(s): Barron, Jr.; Gilberto
• Assistant Examiner(s): Dinh; Minh
• Application Number:
  US10/476,945
• Publication Number:
  US 20040133801A1
• Time in Patent Office: 2,049 Days
• Field of Search: 726/26
• US Class Current: 726/26
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/126 Interacting with the operating system
• CPC Class Codes: G06F 2221/2135 Metering

Abstract

A method (300) and system for controlling use of software programs on multiple workstations of a network. An agent running on each workstation detects (306) any new process (using a kernel hooking technique), which is started in response to the request of execution of a program (397). The process is suspended (308) and an authorisation to run the program is requested (334) to an associated metering server. The metering server compares (380) the current usage of the product with the respective authorised conditions of use, and answers (382) the agent granting or denying the authorisation to run. The process is accordingly resumed (312), in order to enable the program to start, or aborted (315), so as to prevent execution of the program. In any case, the program is not stopped (but it is prevented from starting); this avoids killing the program while it is performing potentially risky operations.

Claims

1. A computer-implemented method of controlling use of digitally encoded products including the steps of:

requesting execution of a digitally encoded product on a computer;

intercepting the execution request before starting of execution of the product;

determining whether the product is included in a control memory structure of the computer indicative of products to be controlled;

responsive to determining that the product is included in the control memory structure;

verifying compliance of the execution request with authorised conditions of use of the product, wherein verifying compliance of the execution request includes;

sending a request message indicative of the execution request from the computer to a metering server associated with a plurality of computers;

granting or denying an authorisation to run the product by the metering server according to a comparison between licensing information indicative of the authorised conditions of use for all the associated computers and a metering memory structure indicative of authorisations to run currently granted by the metering server,

sending a corresponding response message from the metering server to the computer, and

adding the product to the metering memory structure when the authorisation to run has been granted; and

enabling or preventing starting of execution of the product according to the result of the verification; and

responsive to determining that the product is not included in the control memory structure;

enabling starting of the product;

adding an indication of the product to a log stored on the computer;

periodically transmitting the log to the associated metering server; and

updating the control memory structure and the licensing information according to the log.

2. The method according to claim 1, further including the steps of:

detecting the starting of a process associated with the execution request,

suspending the process, and

resuming or aborting the process according to the result of the verification.

3. The method according to claim 2, further including the steps of:

notifying the starting of the process to a kernel extension module of an operating system controlling operation of the computer,

the kernel extension module reporting the execution request to an agent running on the computer and suspending the process in response to the notifying, and

the agent causing the kernel extension module to resume or abort the process according to the result of the verification.

4. The method according to claim 1, further including the steps of:

sending the request message from the computer to at least one further metering server in response to the denying of the authorisation to run.

5. The method according to claim 1, further including the steps of:

terminating execution of the product on the computer,

intercepting the execution termination,

sending a termination message indicative of the execution termination from the computer to a current metering server which has granted the authorisation to run, and

removing the product from the metering memory structure in response to the termination message.

6. The method according to claim 5, further including the steps of:

periodically sending a checking message from the computer to each corresponding current metering server, and

removing each product running on the computer from the metering memory structure stored on the corresponding current metering server when the checking message is not received for a pre-set period of time.

7. The method according to claim 1, further including the steps of:

periodically collecting installation information indicative of the products installed on the computer, and

sending the installation information from the computer to the corresponding metering server.

8. The method according to claim 1, further including the step of controlling a plurality of metering servers from a single central administrative server.

9. The method according to claim 1, and further comprising:

sending a notification when a pre-set number of available licenses have been granted.

10. The method according to claim 9, wherein the notification is sent by e-mail to a system administrator.