Method for establishing licensor changeable limits on software usage

• US 5,343,526 A
• Filed: 10/30/1992
• Issued: 08/30/1994
• Est. Priority Date: 10/30/1992
• Status: Expired due to Term

• Current Assignee: American Telephone & Telegraph Company (AT&T, Inc.)
• Original Assignee: AT&T, Inc.
• Inventors: Lassers, Harold A.
• Primary Examiner(s): Gregory, Bernarr E.
• Application Number:
  US07/968,693
• Time in Patent Office: 669 Days
• Field of Search: 380/1, 380/4, 380/23, 380/25, 380/49, 380/50
• US Class Current: 705/59
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2135 Metering

Abstract

A system and method for establishing licensor changeable limits on shared software usage without the licensor having access to the system on which the shared software is running. An encrypted numerical limit value is embedded in the licensed software (program); when the program is executed ("accessed"), as a first step, the program decrypts the limit value and compares it to the number of users currently accessing the shared program. If the number of users is less than the limit, then access is allowed. If the number of users is equal to (or greater than) the limit, then access is denied.

Claims

1. In a computer system, said computer system executing a plurality of licensed programs, wherein one or more of said plurality of licensed programs is accessible by a plurality of users, a method for providing licensor control of a maximum number of users accessing said one or more licensed programs without requiring a reference to information stored outside of said licensed program, said method comprising the steps of:

receiving a request from a user for access to said program;

establishing a limit value defining said maximum number by decrypting a portion of a previously encrypted alphanumeric string provided in said program by said licensor;

determining a count of users currently accessing said program;

comparing said limit value to said count of users currently accessing said program;

denying access to said program is said count is greater than said limit value; and

allowing access to said program if said count is less than said limit value;

wherein said limit value is changeable by said licensor informing a licensee of a further alphanumeric string containing a new limit value, and said licensee replacing said alphanumeric string with said further alphanumeric string using a program change facility of said computer system, so that change of limit value is controllable by said licensor without said licensor having physical access to said system.

2. A method according to claim 1 wherein a number of changes by said licensee of said encrypted alphanumeric string over a predetermined period of time is limited to prevent said licensee from determining an encryption algorithm used to generate said encrypted alphanumeric string.

3. A method according to claim 1 further comprising the step of verifying that said limit value is a valid numeric value after said step of decrypting said encrypted alphanumeric string;

and

denying access to said licensed program is said limit value is not a valid numeric value, so that a licensee cannot replace said encrypted alphanumeric string with random values in order to circumvent said encrypted alphanumeric string.

4. In a computer system, said computer system executing a licensed program, wherein said licensed program is accessible a limited number of times, said limited number being set by a licensor, a method of limiting the number of accesses to said licensed program without requiring reference to information stored outside of said licensed program comprising the steps of:

requesting access to said program;

establishing a number of accesses by decrypting a previously encrypted first alphanumeric string stored in said program;

establishing a limit defining said limited number by decrypting a previously encrypted second alphanumeric string stored in said program;

comparing said limit to said number of accesses;

if said number of accesses is equal to or greater than said limit, denying access to said licensed program; and

if said number of accesses is less than said limit, allowing access to said licensed program incrementing said number of accesses, encrypting said number of accesses into said first alphanumeric string, and storing said first alphanumeric string in said program.

5. A method according to claim 4, wherein said second encrypted alphanumeric string is changeable by a licensee replacing said second encrypted alphanumeric string with a further encrypted alphanumeric string provided by said licensor, whereby a licensor changes the limit value of the number of accesses without having physical access to said computer system.

6. A method according to claim 5, wherein a number of changes by said licensee of said second encrypted alphanumeric string over a predetermined period of time is limited to prevent said licensee from determining an encryption algorithm used to generate said alphanumeric string.

7. A method according to claim 4 further comprising the steps of verifying that said number of accesses is a valid numeric value after said step of decrypting said first encrypted alphanumeric string;

verifying that said limit is a valid numeric value after said step of decrypting said second encrypted alphanumeric string; and

denying access to said licensed program if said number of accesses or said limit is not a valid numeric value, to prevent said licensee from replacing said first or second encrypted alphanumeric string with random values in order to circumvent said first and second alphanumeric strings.

8. In a telephone switching system, said system providing a plurality of features, wherein one or more of said features is accessible by a plurality of users, a method for a licensor to limit a maximum number of simultaneous users accessing said one or more features without requiring reference to information stored outside of said licensed program, said method comprising the steps of:

receiving a request from a user for access to one of said features;

establishing a limit value defining said maximum number of simultaneous users by decrypting a portion of a previously encrypted alphanumeric string provided by said licensor in said one feature;

comparing said limit to a determined count of users currently accessing said one feature;

denying access to said one feature if said count is greater than said limit; and

allowing access to said one feature if said count is less than said limit;

wherein said limit value is changeable by said licensor informing a licensee of a further alphanumeric string containing a new limit value, and said licensee replacing said alphanumeric string with said further alphanumeric string using a program change facility of said computer system, so that change of said limit value is controllable by said licensor without said licensor having physical access to said system.

9. A method according to claim 8 wherein a number of changes by said licensee of said encrypted alphanumeric string over a predetermined period of time is limited to prevent said a licensee from circumventing an encryption algorithm used to generate said encrypted alphanumeric string.

10. A method according to claim 8 further comprising the step of verifying that said limit is a valid numeric value after said step of decrypting said encrypted alphanumeric string;

and

denying access to said feature if said limit is not a valid numeric value, to prevent a licensee from replacing said encrypted alphanumeric string with random values in order to circumvent said alphanumeric string.

11. In a telephone switching system, said system having a plurality of features, wherein one of more of said features is accessible by a plurality of users, a system for providing licensor control of a maximum number of users accessing one or more features without requiring reference to information stored outside of said features, said control system comprising:

means responsive to a request for access to one of said features for decrypting a portion of a previously encrypted alphanumeric string provided by said licensor in said one feature to establish a limit value defining said maximum number of users;

means for determining a count of users;

means responsive to said decrypted limit value for comparing said limit value to said count of users currently using said feature, wherein said comparing means denies access to said feature if said count is greater than said limit, and allows access to said feature if said count is less than said limit; and

means for changing said encrypted alphanumeric string that replaces said encrypted alphanumeric string in said one feature with a further encrypted alphanumeric string containing a new limit value after said licensor informs said licensee of said further encrypted string so that said limit value is changeable by said licensor without said licensor having physical access to said system.

12. A system according to claim 11 further including means for limiting a number of changes by a licensee of said encrypted alphanumeric string over a predetermined period of time to prevent said licensee from circumventing an encryption algorithm used to generate said encrypted alphanumeric string.

13. A system according to claim 11 further comprising means for verifying that said limit is a valid numeric value responsive to said decrypting means, said verifying means denying access to said feature if said limit is not a valid numeric value, to prevent said licensee from replacing said encrypted alphanumeric string with random values in order to circumvent said encrypted alphanumeric string.