Methods for controlling software usage

• US 9,792,417 B2
• Filed: 06/14/2013
• Issued: 10/17/2017
• Est. Priority Date: 06/15/2012
• Status: Active Grant

• Current Assignee: Infosys Limited
• Original Assignee: Infosys Limited
• Inventors: Saxena, Ashutosh, Ponnapalli, Harigopal K. B., Gorantla, Malakondayya Choudary, Jain, Ina
• Primary Examiner(s): Badii, Behrang
• Assistant Examiner(s): Greene, Daniel L
• Application Number:
  US13/918,523
• Publication Number:
  US 20130339251A1
• Time in Patent Office: 1,586 Days
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

Methods for controlling software usage are described. Methods comprise receiving a request for at least one software application license, wherein the request comprises a user count, generating, by the computing apparatus, one or more sets of license data in response to the request, wherein a set of license data comprises at least one of the user count and a corresponding sequence number, signing each of the one or more sets of license data digitally with a private key, embedding a set of signed license data into the software application, receiving user identification data from a user through an input interface associated with the computing apparatus, and validating the user identification data. Additional embodiments incorporate mechanisms for license renewal, user registration and user authentication by means of associating a range of user identification data with the license data.

Claims

1. A computer implemented method for controlling software usage, the method comprising:

receiving a request for at least one software application license for a software application by a computing apparatus comprising at least one processor and a readably coupled memory, wherein the request comprises a user count upper limit;

generating, by the computing apparatus, one or more sets of license data in response to the request, wherein the one or more sets of license data comprise the user count upper limit, a security certificate associated with the software application, and a corresponding sequence number;

signing each of the one or more sets of license data digitally with a private key;

embedding the one or more sets of signed license data into the software application;

performing registration for user identification data comprising a user identification string and a password string, wherein registration comprises (a)-(d);

(a) validating the license data, wherein validating the license data comprises validating the signed license data embedded into the software application;

(b) maintaining an active user count;

(c) checking availability of a license, wherein checking availability comprises comparing the active user count against the user count upper limit; and

(d) associating the user identification data with the corresponding sequence number in the signed license data;

receiving a request to access the software application, wherein receiving the request comprises receiving registered user identification data through an input interface associated with the computing apparatus and signed license data;

validating the registered user identification data, wherein validating comprises (e)-(g);

(e) identifying the sequence number associated with the registered user identification data;

(f) comparing the corresponding sequence number associated with the registered user identification data with the corresponding sequence number in the signed license data; and

(g) authenticating the registered user identification data, wherein authenticating comprises authenticating only if the corresponding sequence number associated with the registered user identification data and the corresponding sequence number in the signed license data match; and

responsive to successfully validating the registered user identification data, providing access to the software application by the user identification string.

2. The computer implemented method as claimed in claim 1, further comprising renewing the license data, wherein renewing comprises:

receiving a request comprising an additional user count for at least one license;

updating the one or more sets of license data with the additional user count;

signing each of the one or more sets of updated license data digitally with a private key; and

embedding a set of signed updated license data into the software application.

3. The computer implemented method as claimed in claim 1, wherein:

checking for the availability of a license comprises comparing a stored user count upper limit associated with the corresponding sequence number with the active user count on receiving a request.

4. The computer implemented method as claimed in claim 3, further comprising transmitting a non-availability message to a user by means of an output interface associated with the computing apparatus if the stored user count upper limit associated with the corresponding sequence number matches the active user count.

5. The computer implemented method as claimed in claim 1, further comprising associating a user with the software application, wherein associating comprises:

generating a first number;

validating the one or more sets of signed license data embedded in the software application against a retrieved set of signed license data;

generating user identification data, wherein user identification data includes a user group attribute and a user identification number attribute; and

mapping the first number and user identification data to the one or more sets of signed license data.

6. The computer implemented method as claimed in claim 5, further comprising encrypting data comprising the first number and user identification data and storing the encrypted data in a database.

7. The computer implemented method as claimed in claim 6, wherein validating comprises comparing received user identification data with the user identification data.

8. The computer implemented method as claimed in claim 1, further comprising deassociating a user from the software application, wherein deassociating comprises deleting the user identification data.

9. The computer implemented method as claimed in claim 8, further comprising restoring a deassociated user, wherein restoring comprises:

receiving user identification data;

checking for license availability;

generating a second number and assigning the second number to the user identification data received if a license is available; and

storing the user identification data in a database.

10. A non-transitory computer readable storage medium having stored thereon computer executable instructions for performing a method for controlling software usage, the method comprising:

receiving a request for at least one software application license for a software application by a computing apparatus comprising at least one processor and a readably coupled memory, wherein the request comprises a user count upper limit;

generating, by the computing apparatus, one or more sets of license data in response to the request, wherein a set of license data comprises the user count upper limit, a security certificate associated with the software application, user details received from a user, and a corresponding sequence number, wherein the corresponding sequence number is in an arbitrarily determined range, and size of the range is equal to the user count upper limit;

signing each of the one or more sets of license data digitally with a private key;

embedding a set of signed license data into the software application;

performing registration for user identification data comprising a user identification string and a password string, wherein registration comprises (a)-(d);

(a) validating the license data;

(b) maintaining an active user count;

(c) checking availability of a license, wherein checking availability comprises comparing the active user count against the user count upper limit; and

(d) associating the user identification data with the corresponding sequence number in the signed license data;

receiving a request to access the software application, wherein receiving the request comprises receiving registered user identification data through an input interface associated with the computing apparatus and signed license data;

validating the registered user identification data, wherein validating comprises (e)-(g);

(e) identifying the sequence number associated with the registered user identification data;

(f) comparing the corresponding sequence number associated with the registered user identification data with the corresponding sequence number in the signed license data; and

(g) authenticating the registered user identification data, wherein authenticating comprises authenticating only if the corresponding sequence number associated with the registered user identification data and the corresponding sequence number in the signed license data match; and

responsive to successfully validating the registered user identification data, providing access to the software application by the user identification string.

11. The non-transitory computer readable storage medium as claimed in claim 10, wherein the method further comprises renewing the license data, wherein renewing comprises:

receiving a request comprising an additional user count for at least one license;

updating the one or more sets of license data with the additional user count;

signing each of the one or more sets of updated license data digitally with a private key; and

embedding a set of signed updated license data into the software application.

12. The non-transitory computer readable storage medium as claimed in claim 10, wherein:

checking for the availability of a license comprises comparing a stored user count upper limit associated with the corresponding sequence number with the active user count on receiving a request.

13. The non-transitory computer readable storage medium as claimed in claim 12, wherein the method further comprises transmitting a non-availability message to a user by means of an output interface associated with the computing apparatus if the stored user count upper limit associated with the corresponding sequence number matches the active user count.

14. The non-transitory computer readable storage medium as claimed in claim 10, wherein the method further comprises associating a user with the software application, wherein associating comprises:

generating a first number;

validating the set of signed license data embedded in the software application against a retrieved set of signed license data;

generating user identification data, wherein user identification data includes a user group attribute and a user identification number attribute; and

mapping the first number and user identification data to the set of signed license data.

15. The non-transitory computer readable storage medium as claimed in claim 14, wherein the method further comprises encrypting data comprising the first number and user identification data and storing the encrypted data in a database.

16. The non-transitory computer readable storage medium as claimed in claim 15, wherein validating comprises comparing received user identification data with the user identification data.

17. The non-transitory computer readable storage medium as claimed in claim 10, wherein the method further comprises deassociating a user from the software application, wherein deassociating comprises deleting the user identification data.

18. The non-transitory computer readable storage medium as claimed in claim 17, wherein the method further comprises restoring a deassociated user, wherein restoring comprises:

receiving user identification data;

checking for license availability;

generating a second number and assigning the second number to the user identification data received if a license is available; and

storing the user identification data in a database.

19. A system comprising:

a memory and at least one processor configured to perform;

receiving a request for at least one software application license for a software application by a computing apparatus comprising at least one processor and a readably coupled memory, wherein the request comprises a user count upper limit;

generating, by the computing apparatus, a set of license data in response to the request, wherein the set of license data comprises the user count upper limit, a security certificate associated with the software application, user details received from a user, and a corresponding sequence number, wherein the corresponding sequence number is in an arbitrarily determined range, and size of the range is equal to the user count upper limit;

signing the set of license data digitally with a private key;

embedding the set of signed license data into the software application;

performing registration for user identification data comprising a user identification string and a password string, wherein registration comprises (a)-(d);

(a) validating the license data, wherein validating the license data comprises validating the signed license data embedded into the software application;

(b) maintaining an active user count;

(c) checking availability of a license, wherein checking availability comprises comparing the active user count against the user count upper limit; and

(d) associating the user identification data with the corresponding sequence number in the signed license data;

receiving a request to access the software application, wherein receiving the request comprises receiving registered user identification data through an input interface associated with the computing apparatus and signed license data;

validating the registered user identification data, wherein validating comprises (e)-(g);

(e) identifying the sequence number associated with the registered user identification data;

(f) comparing the corresponding sequence number associated with the registered user identification data with the corresponding sequence number in the signed license data; and

(g) authenticating the registered user identification data, wherein authenticating comprises authenticating only if the corresponding sequence number associated with the registered user identification data and the corresponding sequence number in the signed license data match; and

responsive to successfully validating the registered user identification data, providing access to the software application by the user identification string.