Licensing and certificate distribution via secondary or divided signaling communication pathway

• US 8,800,049 B2
• Filed: 08/26/2009
• Issued: 08/05/2014
• Est. Priority Date: 08/26/2009
• Status: Active Grant

• Current Assignee: Avaya Incorporated
• Original Assignee: Avaya Incorporated
• Inventors: Michaelis, Paul Roller, Mohler, David S., Swartz, Douglas W., Toennis, Roger L.
• Primary Examiner(s): Khoshnoodi, Nadia
• Assistant Examiner(s): LEUNG, ROBERT B
• Application Number:
  US12/548,271
• Publication Number:
  US 20110055555A1
• Time in Patent Office: 1,805 Days
• Field of Search: None
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/18 using different networks or channels, e.g. using out of band channels cryptographic mechanisms or cryptographic arrangements for key distribution involving distinctive intermediate devices or communication paths H04L9/0827; cryptographic mechanisms or cryptographic arrangements for authentication using a plurality of channels H04L9/3215
• CPC Class Codes: H04L 9/3215 using a plurality of channels network architectures or network communication protocols using different networks H04L63/18
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

In one embodiment, the present invention is directed to the use of separate communication pathways over different types of networks to handle bearer and control signaling in connection with a license transaction.

Claims

1. A method, comprising:

establishing, over a first communication pathway, a first session between at least one of a customer and a customer computational component to be licensed and a licensing server, the first communication pathway being over a first network type comprising a digital telephone network;

establishing, over a second communication pathway, a second session between the customer computational component to be licensed and the licensing server, the second communication pathway being over a second network type comprising an untrusted network, the second network type being different from the first network type;

determining a configuration of the customer computational component to be licensed;

based on the configuration of the customer computational component to be licensed, negotiating between the customer computational component to be licensed and the licensing server, at least one session parameter, the at least one session parameter indicating one or more types of licensing information that will be exchanged and specific communication pathways to be used;

associating the first session on the first communication pathway with the second session on the second communication pathway, wherein signaling received over the first and second communication pathways is coordinated;

determining that media arriving from the first session on the first communication pathway and media arriving from the second session on the second communication pathway are arriving from the same source;

transmitting, by a processor of the licensing server, first license information over the first communication pathway; and

transmitting, by a processor of the licensing server, second license information over the second communication pathway, wherein the first and second license information permit the customer computational component to be licensed to execute.

2. The method of claim 1, wherein the first license information comprises at least one of session security information for the untrusted network and an encryption key and wherein the second license information comprises an encrypted license.

3. The method of claim 1, wherein the first license information comprises a digital certificate to authenticate the computational component and wherein the licensing server comprises a certificate authority.

4. The method of claim 1, wherein the first license information comprises at least one of transient state information of the computational component, a serial number collected from the customer computational component to be licensed, a software activation key to activate licensed software, a license validation key to validate the license, a feature-based computation result, a license validation query, a license validation response, license tracking information, a credit card number, and a permission to execute licensed software.

5. The method of claim 1, further comprising:

applying the following rules;

according to a first rule, when the customer computational component to be licensed comprises a modem, the first session is established using a modem protocol;

according to a second rule, when the customer computational component to be licensed comprises a wireless access card, the first session is established using a cellular telecommunications protocol; and

according to a third rule, when the customer computational component to be licensed comprises neither a modem nor a wireless access card, the first session is established by a customer manually dialing a telephone number associated with the licensing server.

6. The method of claim 1, further comprising:

associating, by a processor in the customer computational component to be licensed, a first calling number associated with the customer computational component to be licensed with a first IP address of the customer computational componentto be licensed;

associating, by a processor in the licensing server, a second calling number associated with the licensing server with a second IP address of the licensing server;

determining that media arriving from the first calling number associated with the customer computational component to be licensed and media arriving from the first IP address of the customer computational component to be licensed are arriving from a common computational component; and

determining that media arriving from the second calling number associated with the licensing server and media arriving from the second IP address of the licensing server are arriving from a common licensing server.

7. The method of claim 5, wherein the first license information is different when the first rule applies compared to when the third rule applies.

8. A non-transitory computer readable medium comprising processor executable instructions that, when executed, perform the method of claim 1.

9. A licensing server apparatus, comprising:

a processing device configured to;

establish, over a first communication pathway and by a first communication modality, a first session with at least one of a customer and a customer computational component to be licensed;

establish, over a second communication pathway and by a second communication modality, a second session with the customer computational component to be licensed, the network type of the second communication modality being different from the network type of the first communication modality;

based on a configuration of the customer computational component to be licensed, negotiate between the customer computational component to be licensed, at least one session parameter, the at least one session parameter indicating one or more types of licensing information that will be exchanged and specific communication pathways to be used;

associate, by a processor in the licensing server apparatus, the first session on the first communication pathway with the second session on the second communication pathway, wherein signaling received over the first and second communication pathways is coordinated;

determine that media arriving from the first session on the first communication pathway and media arriving from the second session on the second communication pathway are arriving from the same customer computational component to be licensed;

transmit and/or receive first license information over the first communication pathway; and

transmit and/or receive second license information over the second communication pathway, wherein the first and second license information permit the customer computational component to be licensed to execute.

10. The server of claim 9, wherein the first communication modality is a digital telephone network, wherein the second communication modality is an untrusted network, wherein the first license information comprises at least one of session security information for the untrusted network and an encryption key, and wherein the second license information comprises an encrypted license.

11. The server of claim 9, wherein the first license information comprises a digital certificate to authenticate the computational component and wherein the licensing server comprises a certificate authority.

12. The server of claim 9, wherein the first license information comprises at least one of transient state information of the computational component, a serial number collected from the computational component, a software activation key to activate licensed software, a license validation key to validate the license, a feature-based computation result, a license validation query, a license validation response, license tracking information, a credit card number, and a permission to execute licensed software.

13. The server of claim 9, wherein the first communication modality is a digital telephone network, wherein the second communication modality is the Internet, and wherein the processing device is further configured to:

apply the following rules;

according to a first rule, when the customer computational component to be licensed comprises a modem, establish the first session using a modem protocol;

according to a second rule, when the customer computational component to be licensed comprises a wireless access card, establish the first session using a cellular telecommunications protocol; and

according to a third rule, when the customer computational component to be licensed comprises neither a modem nor a wireless access card, request the customer to establish the first session by manually dialing a telephone number associated with the licensing server.

14. The server of claim 9, wherein the processing device is further configured to:

associate a calling number associated with the customer computational component to be licensed with an IP address of the computational component; and

determine that media arriving from the calling number associated with the customer computational component to be licensed and media arriving from the IP address of the customer computational component to be licensed are arriving from a common computational component.

15. A computational component, comprising:

a software application to be licensed; and

a processing device configured to;

establish, over a first communication pathway and by a first communication modality, a first session with a licensing server;

establish, over a second communication pathway and by a second communication modality, a second session with the licensing server, the network type of the second communication modality being different from the network type of the first communication modality;

determine a configuration of the computational component;

based on the configuration of the computational component, negotiate between the customer computational component and the licensing server, at least one session parameter, the at least one session parameter indicating one or more types of licensing information that will be exchanged and specific communication pathways to be used;

associate the first session on the first communication pathway with the second session on the second communication pathway, wherein signaling received over the first and second communication pathways is coordinated;

determine that media arriving from the first session on the first communication pathway and media arriving from the second session on the second communication pathway are arriving from the same source;

transmit and/or receive first license information over the first communication pathway; and

transmit and/or receive second license information over the second communication pathway, wherein the first and second license information permit the software application to execute.

16. The computational component of claim 15, wherein the first communication modality is a digital telephone network, wherein the second communication modality is an untrusted network, wherein the first license information comprises at least one of session security information for the untrusted network and an encryption key, and wherein the second license information comprises an encrypted license.

17. The computational component of claim 15, wherein the first license information comprises a digital certificate to authenticate the computational component and wherein the licensing server comprises a certificate authority.

18. The computational component of claim 15, wherein the first license information comprises at least one of transient state information of the computational component, a serial number collected from the computational component, a software activation key to activate licensed software, a license validation key to validate the license, a feature-based computation result, a license validation query, a license validation response, license tracking information, a credit card number, and a permission to execute licensed software.

19. The computational component of claim 15, wherein the first communication modality is a digital telephone network, wherein the second communication modality is the Internet, and wherein the processing device is further configured to:

apply the following rules;

according to a first rule, when the computational component comprises a modem, establish the first session using a modem protocol;

according to a second rule, when the computational component comprises a wireless access card, establish the first session using a cellular telecommunications protocol; and

according to a third rule, when the computational component comprises neither a modem nor a wireless access card, request the customer to establish the first session by manually dialing a telephone number associated with the licensing server.

20. The computational component of claim 15, wherein the processing device is further configured to:

associate a calling number associated with the licensing server with an IP address of the licensing server; and

determine that media arriving from the calling number associated with the licensing server and media arriving from the IP address of the licensing server are arriving from a common computational component.