Authorization code recovering method

• US 20070094144A1
• Filed: 12/30/2004
• Published: 04/26/2007
• Est. Priority Date: 12/30/2003
• Status: Active Grant

• Current Assignee: WIBU-Systems AG
• Original Assignee: WIBU-Systems AG
• Inventors: Buchheit, Marcellus, Winzenried, Oliver
• Granted Patent: US 8,160,967 B2
• Time in Patent Office: Days
• US Class Current: 705/59
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 21/1082 Backup or restore
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/3829 involving key management

Abstract

A method for recovering an authorization code which is assigned to a licensee by a licensor and is stored in an access-protected data processing device that is connected to a computer of said licensee via an interface. A backup file which is part of the authorization code and contains the license parameters is stored on the licensee'"'"'s computer. The license parameters associated with the licensor are read out of the backup file, the license parameters are sent to the respective licensor, authorization codes corresponding to the received license parameters are recovered at the level of the licensor, the recovered authorization code is then returned to the licensee'"'"'s computer, and the recovered authorization codes are stored in the data processing device connected to the licensee'"'"'s computer.

Claims

1-10. -10. (canceled)

11. A method for restoring an authorization code assigned to a licensee by a licensor, with the authorization code being stored in an access-protected data-processing device, which is connected to a computer of the licensee via an interface, characterized in that a security file, which belongs to the authorization code and which contains the license parameters, is stored on the computer of the licensee, and said method including the following steps of:

reading of the license parameters belonging to the licensor from the security file;

sending the read license parameters to the licensor;

restoring the authorization code corresponding to the received license parameters at the licensor;

returning the restored authorization code to the computer of the licensee; and

storing the restored authorization code in the data-processing device connected to the computer of the licensee.

12. The method according to claim 11, characterized in that the authorization code is stored in a device-specific format in the data-processing device.

13. The method according to claim 11, characterized in that the license parameters are signed with time information for protection and are provided at least partially in encrypted form in the security file.

14. The method according to claim 11, further including the steps of:

receiving the license parameters at the licensor;

evaluating the license parameters; and

deciding whether the requested authorization code should be restored and returned to the licensee.

15. The method according to claim 11, further including the steps of:

sending time information stored in the security file to the licensor;

evaluating the time information by the licensor; and

generating an authorization code corresponding to the time information.

16. The method according to claim 11, characterized in that several authorization codes for licenses of several licensors are stored on the data-processing device.

17. The method according to claim 11, characterized in that remote data connections are established to all licensors, in order to permit the corresponding authorization codes to be restored.

18. The method according to claim 11, further including the steps of:

establishing a remote data connection between the computer of the licensee and a central management computer;

sending the security file to the management computer; and

establishing a data connection between the computer of the licensor and the management computer.

19. The method according to claim 18, including the step of:

establishing a remote data connection between the computer of the licensee and the computer of the licensor.

20. The method according to claim 11, characterized in that the security file contains an unmodifiable serial number of the data-processing device and said method includes the steps of:

reading the serial number from the security file;

sending the serial number to a management computer; and

storing the serial number in a block list at the management computer.

21. A method for restoring an authorization code assigned to a licensee by a licensor, with the authorization code being stored in an access-protected data-processing device, which is connected to a computer of the licensee via an interface, characterized in that a security file, which belongs to the authorization code and which contains the license parameters, is stored on the computer of the licensee, and said method including the following steps of:

reading of the license parameters belonging to the licensor from the security file;

sending the read license parameters to the licensor;

restoring the authorization code corresponding to the received license parameters at the licensor;

returning the restored authorization code to the computer of the licensee;

storing the restored authorization code in the data-processing device connected to the computer of the licensee in a device-specific format in the data-processing device;

receiving the license parameters at the licensor;

evaluating the license parameters; and

deciding whether the requested authorization code should be restored and returned to the licensee.

22. The method according to claim 21, characterized in that the license parameters are signed with time information for protection and are provided at least partially in encrypted form in the security file.

23. The method according to claim 21, further including the steps of:

sending time information stored in the security file to the licensor;

evaluating the time information by the licensor; and

generating an authorization code corresponding to the time information.

24. The method according to claim 21, characterized in that several authorization codes for licenses of several licensors are stored on the data-processing device.

25. The method according to claim 21, characterized in that remote data connections are established to all licensors, in order to permit the corresponding authorization codes to be restored.

26. The method according to claim 21, further including the steps of:

establishing a remote data connection between the computer of the licensee and a central management computer;

sending the security file to the management computer; and

establishing a data connection between the computer of the licensor and the management computer.

27. The method according to claim 26, including the step of:

establishing a remote data connection between the computer of the licensee and the computer of the licensor.

28. The method according to claim 21, characterized in that the security file contains an unmodifiable serial number of the data-processing device and said method includes the steps of:

reading the serial number from the security file;

sending the serial number to a management computer; and

storing the serial number in a block list at the management computer.

29. A method for restoring an authorization code assigned to a licensee by a licensor, with the authorization code being stored in an access-protected data-processing device, which is connected to a computer of the licensee via an interface, characterized in that a security file, which belongs to the authorization code and which contains the license parameters, is stored on the computer of the licensee and includes an unmodifiable serial number of the data processing device, and said method including the following steps of:

reading of the license parameters belonging to the licensor from the security file;

sending the read license parameters to the licensor;

restoring the authorization code corresponding to the received license parameters at the licensor;

returning the restored authorization code to the computer of the licensee;

storing the restored authorization code in the data-processing device connected to the computer of the licensee;

establishing a remote data connection between the computer of the licensee and a management computer;

sending the security file to the management computer;

establishing a data connection between the computer of the licensor and the management computer;

reading the serial number from the security file;

sending the serial number to the management computer; and

storing the serial number in a block list at the management computer.

30. The method according to claim 29, further including the steps of:

sending time information stored in the security file to the licensor;

evaluating the time information by the licensor; and

generating an authorization code corresponding to the time information.