Refreshing software licenses

• US 8,127,367 B2
• Filed: 03/20/2008
• Issued: 02/28/2012
• Est. Priority Date: 03/20/2007
• Status: Active Grant

• Current Assignee: S Aqua Semiconductor LLC (Intellectual Ventures LLC)
• Original Assignee: Dmvich Software LLC (Intellectual Ventures LLC)
• Inventors: Chuprov, Dmitry Vladislavovich, Shmakov, Vladimir Eduardovich
• Primary Examiner(s): Smithers, Matthew
• Assistant Examiner(s): FIELDS, COURTNEY D
• Application Number:
  US12/052,652
• Publication Number:
  US 20080285758A1
• Time in Patent Office: 1,440 Days
• Field of Search: 726/27, 726/18, 726/19, 726/7, 380/278, 705/59
• US Class Current: 726/27
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems

Abstract

A license access agent is configured to execute on a client computer. The license access agent comprises a license manager configured to receive a software license upon a request for authorizing usage of a protected software product so as to allow one or more functionalities of the protected software product to run on the client computer. The license manager is configured to disable the protected software product upon expiration of the software license unless the license manager obtains a refreshed software license.

Claims

1. A system, comprising:

a license access agent configured to execute on a client computer, the license access agent comprising a license manager configured to receive a software license in response to a request for authorizing usage of a protected software product so as to allow one or more functionalities of the protected software product to run on the client computer, the license manager further configured to disable the protected software product upon expiration of the software license unless the license manager obtains a refreshed software license.

2. The system of claim 1, the license access agent further comprising an initializer configured to establish a connection with a license server and further configured to send a request for the software license via the connection, the request comprising a client identifier and an initial key provided in a license packet.

3. The system of claim 1, the license access agent further comprising a license server verifier configured to verify a license server by receiving a server session identifier and comparing the server session identifier to a client session identifier stored on the client computer.

4. The system of claim 1, the license access agent further comprising a client key manager configured to store at least two client session keys, which include a previous session key and a current session key, the previous session key and the current session key being updated upon a communication with a license server.

5. The system of claim 1, the license access agent further comprising a client authenticator configured to authenticate the license access agent executing on the client computer to a license server.

6. The system of claim 1, further comprising a license server configured to execute on a server computer while the license access agent is executed on the client computer, the license server comprising a server license manager configured to generate the software license in a license packet upon receipt of confirmation from the license access agent that a session key has been updated.

7. The system of claim 6, the license server further comprising a client verifier configured to establish a connection with the client computer upon receipt of the request for the software license, the client verifier configured to verify the client computer by a client identifier and forward to the client computer a session identifier corresponding to the client identifier, the client verifier configured to update the session identifier that defines a current session.

8. The system of claim 7, the license server further comprising a server authenticator configured to authenticate the client computer.

9. The system of claim 8, the license server further comprising a server key manager configured to generate a new session key during a current session for use by the server authenticator during a next session, the server key manager configured to forward the new session key to the client computer.

10. A method, comprising:

disabling a protected software product by a license access agent on a client computer upon expiration of a software license unless a refreshed software license is obtained by making a request for a license packet; and

receiving, at the license access agent, the license packet including the refreshed software license so as to allow one or more functionalities of the protected software product to run on the client computer in response to verifying that a client identifier of the client computer is found in a licensing database and verifying that a server session identifier is equal to a client session identifier or a previous session identifier.

11. The method of claim 10, further comprising generating the license access agent by a license system producer.

12. The method of claim 11, further comprising incorporating the license access agent with a software product to be distributed to the client computer to form the protected software product.

13. The method of claim 12, further comprising invoking the license access agent by the protected software product upon execution, thereby causing the license access agent to request the license packet from a vendor.

14. The method of claim 10, further comprising assigning a client session key a value stored as a current client key if the server session identifier is equal to the client session identifier and assigning the client session key a value stored as a previous client key if the server session identifier is equal to the previous client session identifier.

15. The method of claim 14, further comprising:

generating a new server session key and transmitting the new server session key to the client computer by a server key manager;

assigning a new client session key and sending a receipt confirmation to the server key manager by the license server verifier;

generating a new server session identifier corresponding to the client identifier by the server key manager in response to receiving the receipt confirmation; and

generating the license packet by a server license manager.

16. A non-transitory computer-readable medium having computer-executable instructions stored thereon for executing a method for inhibiting unauthorized software usage, the method comprising:

disabling a protected software product upon expiration of a software license;

making a request for a license packet;

receiving the license packet containing the refreshed software license so as to allow one or more functionalities of the protected software product to run on a client computer in response to verifying that a client identifier of the client computer is found in a licensing database and verifying that a server session identifier is equal to either a client session identifier or a previous session identifier; and

enabling the one or more functionalities of the protected software product.

17. The non-transitory computer-readable medium of claim 16, further comprising generating a license access agent by a license system producer, wherein the disabling the protected software product and the enabling the one or more functionalities of the protected software product are performed by the license access agent.

18. The non-transitory computer-readable medium of claim 17, further comprising incorporating the license access agent with a software product to be distributed to the client computer to form the protected software product.

19. The non-transitory computer-readable medium of claim 16, further comprising assigning a client session key a value stored as a current client key if the server session identifier is equal to the client session identifier and assigning the client session key a value stored as a previous client key if the server session identifier is equal to the previous client session identifier.

20. The non-transitory computer-readable medium of claim 19, further comprising generating the license packet by a server license manager after a server key manager generates a new server session key and transmits the new server session key to the client computer, after a new client session key is assigned by the license server verifier, after a receipt confirmation is sent to the server key manager, and after the server key manager generates a new server session identifier corresponding to the client identifier in response to receiving the receipt confirmation.

21. A system comprising:

a license server configured to execute on a server computer, the license server comprising a server license manager configured to;

receive a request for a software license for authorizing usage of a protected software product from a license access agent at a client computer, wherein the request includes a client identifier associated with the client computer;

in response to verification that the client identifier of the client computer is found in a licensing database and that a server session identifier is equal to a client session identifier or a previous session identifier, generate the software license in a license packet; and

send the software license to the license access agent at the client computer to allow one or more functionalities of the protected software product to run on the client computer.

22. The system of claim 21, wherein the license server further comprises a server authenticator configured to authenticate the client computer.

23. The system of claim 22, wherein the license server further comprises a server key manager configured to generate a new session key during a current session for use by the server authenticator during a next session, and wherein the server key manager is further configured to forward the new session key to the client computer.

24. The system of claim 21, wherein the license server further comprises a client verifier configured to establish a connection with the client computer upon receipt of the request for the software license, wherein the client verifier is further configured to verify the client computer by the client identifier, forward to the client computer a session identifier corresponding to the client identifier, and update the session identifier that defines a current session.

27. The system of claim 21, further comprising:

establishing a connection with the client computer upon receipt of the request for the software license;

verifying the client computer at the server computer using the client identifier;

forwarding from the server computer to the client computer a session identifier corresponding to the client identifier; and

updating the session identifier that defines a current session.

25. A method comprising:

receiving, at a license server on a server computer, a request for a software license for authorizing usage of a protected software product from a license access agent at a client computer, wherein the request includes a client identifier associated with the client computer;

in response to verification that the client identifier of the client computer is found in a licensing database and that a server session identifier is equal to a client session identifier or a previous session identifier, generating the software license in a license packet at the license server; and

sending the software license from the license server at the server computer to the license access agent at the client computer to allow one or more functionalities of the protected software product to run on the client computer.

26. The method of claim 25, further comprising generating a new session key during a current session for use during a next session, and forwarding the new session key from the server computer to the client computer.

28. A non-transitory computer-readable medium having computer-executable instructions stored thereon for executing a method for inhibiting unauthorized software usage, the method comprising:

receiving a request for a software license for authorizing usage of a protected software product from a license access agent at a client computer, wherein the request includes a client identifier associated with the client computer;

in response to verification that the client identifier of the client computer is found in a licensing database and that a server session identifier is equal to a client session identifier or a previous session identifier, generating the software license in a license packet; and

sending the software license to the license access agent at the client computer to allow one or more functionalities of the protected software product to run on the client computer.

29. The non-transitory computer-readable medium of claim 28, further comprising generating a new session key during a current session for use during a next session, and forwarding the new session key to the client computer.

30. The non-transitory computer-readable medium of claim 28, further comprising:

establishing a connection with the client computer upon receipt of the request for the software license;

verifying the client computer using the client identifier;

forwarding to the client computer a session identifier corresponding to the client identifier; and

updating the session identifier that defines a current session.