System and method for software licensing

• US 7,809,648 B2
• Filed: 12/17/2004
• Issued: 10/05/2010
• Est. Priority Date: 03/18/1998
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Misra, Pradyumna K., Graziado, Bradley J., Spies, Terence R.
• Primary Examiner(s): Korzuch; William R
• Assistant Examiner(s): WRIGHT, BRYAN F
• Application Number:
  US11/016,641
• Publication Number:
  US 20050102240A1
• Time in Patent Office: 2,118 Days
• Field of Search: 705/59
• US Class Current: 705/59
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0633 Lists, e.g. purchase orders, compilation or processing
• CPC Class Codes: G06Q 50/184 Intellectual property management

Abstract

A software licensing system includes a license generator located at a licensing clearinghouse and at least one license server and multiple clients located at a company or entity. When a company wants a software license, it sends a purchase request (and appropriate fee) to the licensing clearinghouse. The license generator at the clearinghouse creates a license pack containing a set of one or more individual software licenses. The license generator digitally signs the license pack and encrypts it with the license server'"'"'s public key. The license server is responsible for distributing the software licenses from the license pack to individual clients. When a client needs a license, the license server determines the client'"'"'s operating system platform and grants the appropriate license. The license server digitally signs the software license and encrypts it using the client'"'"'s public key. The license is stored locally at the client.

Claims

1. One or more computer-readable media, wherein the media does not consist of a propagated data signal, the media having computer readable instructions stored thereon, the computer readable instructions, when executed by one or more processors, cause the one or more processors to perform acts comprising:

receiving a request for a software license from a particular client, wherein the request includes a client ID;

determining an authenticity of the particular client, wherein determining the authenticity comprises;

maintaining a set of client executable images in a client image cache located on a license server, wherein the set of client executable images is maintained in the client image cache to prevent a third party from replaying exchanges between the particular client and the license server;

and determining whether a first client executable image corresponding to the particular client is present in the client image cache by using the client ID to identify the first client executable image in the client image cache;

if the first client executable image is present in the client image cache;

generating, at the license server, a client challenge and sending the client challenge to the particular client to establish a trust relationship with the particular client;

receiving from the particular client a client hash value in response to the client challenge;

computing, by the license server, a test hash value, wherein the test hash value is generated by concatenating the client challenge and the first client executable image;

comparing, at the license server, the test hash value with the client hash value received from the particular client to determine whether the client hash value was generated by concatenating the client challenge and a second client executable image stored on the particular client;

if the test hash value and the client hash value received from the particular client are the same;

establishing a trust relationship;

evaluating whether the requested software license is available for the;

particular client;

and if the requested software license is available, issuing the requested software license to the particular client;

if the test hash value and the client hash value received from the particular client are different, denying the requested software license and returning a software license rejection to the particular client;

and if the client executable image is not present in the client image cache, returning a software license rejection to the particular client.

2. One or more computer-readable media as recited in claim 1, wherein the requested software license comprises:

a license ID;

a platform type indicating a type of operating platform for which the requested software license can be used;

an issue date indicating a date on which the requested software license is issued to the particular client;

an expiration date indicating a date on which the requested software license will expire;

a product ID identifying a product with which the requested software license can be used;

the client ID identifying the particular client; and

a version of the software license.

3. One or more computer-readable media as recited in claim 1, wherein the computer readable instructions further cause the one or more processors to perform acts comprising:

determining a platform of the particular client; and

selecting the requested software license as appropriate for the platform of the particular client.

4. One or more computer-readable media as recited in claim 1, wherein the computer readable instructions further cause the one or more processors to encrypt the requested software license using a public key of the particular client.

10. One or more computer-readable media as recited in claim 1, wherein in the event the first client executable image is present in the client image cache, the computer readable instructions further cause the one or more processors to perform acts comprising:

querying a license store to determine whether the software license has already been issued to the particular client;

updating a client assignment table with the software license granted to the particular client;

signing the granted software license with a digital signature;

encrypting the granted software license with the particular client'"'"'s public key; and

forwarding the granted software license.

5. A license server for issuing individual software licenses from a software pack received from a licensing clearinghouse, the license server comprising:

a computer processor for executing computer executable instructions;

and at least one computer storage medium storing computer executable instructions that when executed by the computer processor provide;

means for storing the software pack of individual software licenses, each software license having an associated license ID;

means for receiving a request for a software license from a client, wherein the request comprises a client ID identifying the client;

means for determining whether the client is authentic and can receive the requested software license, wherein determining whether the client is authentic comprises;

maintaining a plurality of client executable images in a client image cache;

determining whether a first client executable image corresponding to the client is present in the client image cache by using the client ID to identify the first client executable image in the client image cache;

when the first client executable image is present, generating a client challenge and sending the client challenge to the client;

receiving from the client a client hash value in response to the client challenge;

computing a test hash value, wherein the test hash value is generated by concatenating the client challenge and the first client executable image;

comparing the test hash value with the client hash value received from the client to determine whether the client hash value was generated by concatenating the client challenge and a second client executable image stored on the particular client;

when the test hash value and the client hash value match, determining that the client is authentic and establishing a trust relationship;

means for granting a software license from a license store to each authenticated client and to associate a license ID corresponding to the granted software license with each authenticated client; and

client assignment table means for maintaining a list of the granted software licenses and each associated authenticated client, wherein the client assignment table comprises a plurality of records, each record having a unique license ID corresponding to each software license of a plurality of software licenses, and each record having an associated license pack ID identifying a license pack corresponding to the plurality of software licenses.

6. A license server as recited in claim 5, wherein the means for granting is further for updating the client assignment table means after granting the software license to the authenticated client.

7. A license server as recited in claim 5, wherein the means for determining further comprises determining an operating platform of the client.

8. A license server as recited in claim 5, wherein the software license contains at least one of the following items:

a version indicator of a software license;

a license ID;

the client ID that identifies the authenticated client;

an issue date on which the software license was issued to the authenticated client;

a platform type of the client'"'"'s operating platform for which the software license can be used;

an expiration date on which the software license will expire; and

a product ID that identifies a product with which the software licenses can be used.

9. A license server as recited in claim 5, further comprising license pack table means for storing information pertaining to the license pack that is stored in the license store.