Digital product certificate authorization management system and method

Abstract

The invention discloses a digital product certificate authorization management system. The system comprises an authorization application information acquisition module used for automatically synchronizing authorization application information set by a client through a data synchronization interface; the authorization processing module is used for comparing the authorization application information with pre-stored authorization information to perform user identity verification and authorization condition verification, if the comparison is successful, generating an authorization certificate according to the authorization application information, and issuing the authorization certificate to the client; the real-time monitoring module is used for establishing a relation with the client through authorization application information in the generated authorization certificate, judging whether the behavior is an abnormal behavior or not by collecting use data of a client digital product in real time and utilizing a pre-constructed normal use model according to the collected use data of the client data product, and if yes, judging whether the behavior is the abnormal behavior or not; and if yes, outputting a preset response measure to the client. According to the application, countermeasures can be rapidly taken for illegal use or abuse behaviors.

Description

Technical Field

[0001] The present application relates to the technical field of software authorization management, and in particular to a digital product certificate authorization management system and method. Background Art

[0002] Digital product certificate authorization management is a key technical mechanism that ensures the legal use and distribution of software, hardware or other digital products. Through authorization management, enterprises can control product access rights and prevent unauthorized copying and use, thereby protecting intellectual property rights and ensuring compliance. Therefore, digital product certificate authorization management plays a vital role in maintaining market order, promoting technological innovation and protecting consumer rights.

[0003] However, in the prior art, a simple database or spreadsheet system is usually used to register and track the authorization information of digital products, so that the administrator can enter new authorizations, update existing authorizations, and query authorization status through a UI interface. However, this method relies on manual input and update of data, and the existing system is prone to data entry errors, resulting in inaccurate authorization information, which may cause misjudgment of legal authorizations and omission of illegal use, affecting the normal sales and use of digital products. In addition, after the digital product is authorized, many illegal uses or abuses will occur. Therefore, a method for supervising illegal use or abuse is urgently needed. Summary of the invention

[0004] Based on this, in response to the above technical problems, a digital product certificate authorization management system and method are provided to solve the problems of manual input of authorization information in the prior art, which is prone to data entry errors and has no supervision over illegal use or abuse.

[0005] In a first aspect, a digital product certificate authorization management system is provided, the system comprising: an authorization application collection module, a database server, an authorization processing module, and a real-time monitoring module;

[0006] The authorization application information collection module is used to automatically synchronize the authorization application information set from the client through the data synchronization interface; the authorization application information includes: MAC address, public network IP address, motherboard serial number, contract number, purchaser company name, tax number, system port;

[0007] The authorization processing module is used to compare the authorization application information with the pre-stored authorization information to perform user identity authentication and authorization condition verification. If the comparison is successful, an authorization certificate is generated according to the authorization application information and the authorization certificate is issued to the client;

[0008] The real-time monitoring module is used to establish contact with the client by generating the authorization application information in the authorization certificate, collect the usage data of the client digital product in real time, and use the pre-built normal usage model to determine whether it is an abnormal behavior based on the collected usage data of the client data product. If so, output the preset response measures to the client; the usage data includes: software running status, user identity information, usage time, usage frequency, MAC address, public IP address, motherboard serial number, contract number, purchaser company name, tax number, system port, server time, function usage times, and certificate location storage information.

[0009] In the above scheme, optionally, the system also includes a reporting and analysis module; the reporting and analysis module is used to classify the abnormal behaviors output by the real-time monitoring module, and count the number of each type of abnormal behavior to generate an authorized use report.

[0010] In the above solution, optionally, the authorization application information collection module is also used to obtain the authorization application information through a UI interface.

[0011] In the above solution, optionally, the real-time monitoring module is also used to construct a normal use model, including:

[0012] Acquire a large amount of legal usage data and abnormal usage data of historical data products, mark the legal usage data and abnormal usage data, and pre-process the legal usage data;

[0013] Key performance indicators are selected from legal usage data and abnormal usage data, and machine learning algorithms are used to learn the selected key performance indicators to build a normal usage model.

[0014] In the above solution, optionally, the system further comprises a data server, and the authorization certificate is persistently stored via the database server.

[0015] In a second aspect, a digital product certificate authorization management method is provided, the method comprising:

[0016] Automatically synchronize the authorization application information set from the client through the data synchronization interface; the authorization application information includes: MAC address, public network IP address, motherboard serial number, contract number, purchaser company name, tax number, system port;

[0017] The authorization application information is compared with the pre-stored authorization information to perform user identity authentication and authorization condition verification. If the comparison is successful, an authorization certificate is generated according to the authorization application information and the authorization certificate is issued to the client;

[0018] By generating the authorization application information in the authorization certificate, a connection with the client is established. By collecting the usage data of the client's digital products in real time, a pre-built normal usage model is used to determine whether it is an abnormal behavior based on the collected usage data of the client data product. If so, a preset response measure is output to the client; the usage data includes: software running status, user identity information, usage time, usage frequency, MAC address, public IP address, motherboard serial number, contract number, purchaser's company name, tax number, system port, server time, function usage times, and certificate location storage information.

[0019] In the above solution, optionally, the method further includes: classifying the output abnormal behaviors, and counting the number of abnormal behaviors of each type, and generating an authorized use report.

[0020] In the above solution, optionally, the authorization application information is also obtained through a UI interface.

[0021] In the above solution, optionally, the construction of the normal use model includes:

[0022] Acquire a large amount of legal usage data and abnormal usage data of historical data products, mark the legal usage data and abnormal usage data, and pre-process the legal usage data;

[0023] Key performance indicators are selected from legal usage data and abnormal usage data, and machine learning algorithms are used to learn the selected key performance indicators to build a normal usage model.

[0024] In the above solution, optionally, the authorization certificate is stored in a database server.

[0025] This application has at least the following beneficial effects:

[0026] This application sets up an authorization application information collection module to automatically synchronize the authorization application information set by the client through the data synchronization interface to correctly collect the authorization application information of the client and ensure accurate judgment of legal information. At the same time, it establishes contact with the client that issues the authorization certificate, collects the usage data of the data product, and determines whether there is abnormal behavior through the pre-built normal usage model. If there is abnormal behavior, it can quickly take countermeasures against illegal use or abuse. BRIEF DESCRIPTION OF THE DRAWINGS

[0027] Figure 1 A schematic diagram of the framework of a digital product certificate authorization management system provided for one embodiment of the present application. DETAILED DESCRIPTION

[0028] In order to make the purpose, technical solution and advantages of the present application more clearly understood, the present application is further described in detail below in conjunction with the accompanying drawings and embodiments. It should be understood that the specific embodiments described herein are only used to explain the present application and are not used to limit the present application.

[0029] Definitions of key terms used in this application:

[0030] Authorization scope: refers to the specific conditions and restrictions for the permitted use of digital products, including but not limited to the time, location, and device type of use.

[0031] Real-time monitoring: refers to the system's ability to continuously track and record the authorized use of digital products, ensuring that managers can obtain relevant information instantly.

[0032] Intellectual property security: refers to the measures and status of protecting digital products from illegal copying, tampering or piracy.

[0033] Automated management: refers to management activities that are automatically performed through computer systems, reducing human intervention and improving efficiency and accuracy.

[0034] Intelligent management platform: refers to a management platform that integrates advanced algorithms and artificial intelligence technologies, which can intelligently process and analyze data and optimize management decisions.

[0035] Digital products: refers to products that exist in digital form, such as software applications, electronic documents, digital media content, etc., which usually require authorization for use.

[0036] Certificate authorization: refers to authorizing users through digital certificates to prove that they have the right to use specific digital products.

[0037] Manual management method: refers to the traditional method of recording and managing digital product licensing that mainly relies on manual operations, such as using electronic spreadsheets or paper documents.

[0038] Illegal use: refers to the use of digital products without authorization or beyond the authorized scope.

[0039] The management system of the prior art usually includes: Database server: stores the data of the authorization certificate, including product information, customer details, authorization period, etc. User interface: allows the administrator to enter new authorization, update existing authorization and query the authorization status. Authorization processing module: used to verify the authorization request and decide whether to approve it based on the information in the database.

[0040] Reporting Tool: Used to generate periodic reports on license usage.

[0041] Generally, administrators enter new authorization data or update existing data through the user interface. When a client requests authorization, the authorization processing module checks the corresponding information in the database and grants or denies authorization accordingly. The reporting tool generates reports on authorization usage periodically or upon request.

[0042] The limitations of existing technologies are that such systems lack real-time monitoring capabilities and cannot automatically detect and respond to illegal use or abuse. Security relies on the security of the database, and the description of protection measures is not particularly strengthened. Efficiency and accuracy are still limited by the process of manually entering and updating data.

[0043] In one embodiment, Figure 1 A digital product certificate authorization management system is provided, the system comprising: an authorization application collection module, a database server, an authorization processing module, and a real-time monitoring module;

[0044] The authorization application information collection module is used to automatically synchronize the authorization application information set from the client through the data synchronization interface; the authorization application information includes: MAC address, public IP address, motherboard serial number, contract number, purchaser company name, tax number, and system port.

[0045] In the authorization application information collection module, the authorization application information collection module integrates third-party data services to support automatic synchronization of data from other systems, thereby improving user experience and reducing operational errors, reducing management costs and improving work efficiency.

[0046] The authorization processing module is used to compare the authorization application information with the pre-stored authorization information to perform user identity authentication and authorization condition verification. If the comparison is successful, an authorization certificate is generated according to the authorization application information and issued to the client.

[0047] The authorization processing module processes authorization requests, verifies user identity and authorization conditions, and decides whether to approve them. This automates the authorization decision-making process and improves decision-making speed and accuracy.

[0048] At the same time, in the authorization management module, in addition to using traditional database servers, you can consider using distributed ledger technology (such as blockchain) to store authorization certificate information to increase the security and immutability of the data.

[0049] Moreover, the authorization management module can also introduce a token-based authorization mechanism, which allocates a temporary token when a customer requests authorization instead of direct approval, thereby increasing the flexibility and security of the authorization process.

[0050] The real-time monitoring module is used to establish contact with the client by generating the authorization application information in the authorization certificate, collect the usage data of the client digital product in real time, and use the pre-built normal usage model to determine whether it is an abnormal behavior based on the collected usage data of the client data product. If so, output the preset response measures to the client; the usage data includes: software running status, user identity information, usage time, usage frequency, MAC address, public IP address, motherboard serial number, contract number, purchaser company name, tax number, system port, server time, function usage times, and certificate location storage information.

[0051] In the real-time monitoring module, the usage status of digital products is monitored in a timely and continuous manner to detect illegal use or abuse. This protects intellectual property rights and compliant use in real time, and instantly discovers and responds to security issues.

[0052] At the same time, the real-time monitoring module can be combined with the Internet of Things (IoT) technology to obtain real-time usage data through direct connection with digital products, rather than relying solely on software monitoring.

[0053] In the above-mentioned digital product certificate authorization management system and method, the authorization application information collection module is set to automatically synchronize the authorization application information set by the client through the data synchronization interface, so as to correctly collect the authorization application information of the client and ensure the accurate judgment of legal information. At the same time, it establishes contact with the client that issues the authorization certificate, collects the usage data of the data product, and judges whether there is abnormal behavior through the pre-built normal use model. If there is abnormal behavior, it can quickly take countermeasures against illegal use or abuse.

[0054] In one embodiment, the system further includes a reporting and analysis module; the reporting and analysis module is used to classify the abnormal behaviors output by the real-time monitoring module, and to count the number of each type of abnormal behaviors to generate an authorized use report.

[0055] In this embodiment, the authorized use report includes: loss of system certificate, abnormal system startup, abnormal server time, multiple uses of one certificate, and software integrity damage.

[0056] Among them, the system certificate loss in the authorized use report is an automatic scheduled detection task after the system is started to ensure that the certificate is stored in a preset safe location. If it is detected that the system has been started but the certificate is not stored in the designated location, the system will identify it as a certificate loss event.

[0057] Abnormal system startup is to confirm the legitimacy of system startup by comparing the serialized certificate information in the memory with the certificate information stored on the disk. When the information is inconsistent, the system determines it as an abnormal startup, which may be caused by unauthorized or malicious operations.

[0058] Server time anomaly is to regularly record the time information in the memory and compare it with the server time or the time of the authorization management system. Significant time difference or time discontinuity indicates that there may be an anomaly in the server time setting.

[0059] Multiple uses of one certificate means that the system regularly checks whether the server information stored in the certificate matches the hardware information of the current server (such as MAC address, motherboard serial number, public IP address). If the information does not match, the system considers that "multiple uses of one certificate" has occurred.

[0060] Authorization Abuse: To monitor abnormal operations performed by authorized users, such as frequently reaching resource usage limits, being active during non-normal working hours, etc., analyze these behavior patterns to identify potential abuse or internal threats.

[0061] Software integrity violation is to check whether the software has been tampered with by comparing the hash value or digital signature of the software. If the integrity of the software is found to be violated, the system will record the event and take necessary isolation measures.

[0062] In this embodiment, detailed authorization usage reports are generated for analysis and audit trail. Authorization management needs to be evaluated and optimized. Decision support and compliance proof are provided.

[0063] In one embodiment, the authorization application information collection module is further used to obtain the authorization application information through a UI interface.

[0064] In this embodiment, the form auto-fill function and intelligent suggestion system are developed. A UI interface that is easy to understand and operate is designed, including functions such as template selection and batch upload. Clear guidance and help documents are provided so that administrators can effectively use UI functions. This can improve user experience and reduce operational errors. This reduces management costs and improves work efficiency.

[0065] At the same time, an interactive interface based on speech recognition and natural language processing can also be developed, allowing administrators to manage authorization information through voice commands and improve operational efficiency.

[0066] In one embodiment, the real-time monitoring module is also used to construct a normal use model, including:

[0067] Acquire a large amount of legal usage data and abnormal usage data of historical data products, mark the legal usage data and abnormal usage data, and pre-process the legal usage data;

[0068] Key performance indicators are selected from legal usage data and abnormal usage data, and machine learning algorithms are used to learn the selected key performance indicators to build a normal usage model.

[0069] In this embodiment, the construction of a normal usage model generally includes the following contents:

[0070] (1) Data collection: Collect usage data from digital products, including but not limited to software operation status, user identity information, usage time, frequency, etc.

[0071] (2) Select key performance indicators as input features of the model, such as operation frequency, login time period, commonly used functions, etc.

[0072] (3) Behavioral modeling: Use machine learning algorithms, such as decision trees, random forests, or deep learning networks, to build a normal usage model based on legitimate usage data.

[0073] (4) Anomaly detection: Compares data collected in real time with normal behavior models to identify behaviors that deviate from normal patterns.

[0074] After determining that an illegal behavior is involved, a response mechanism is adopted. Once a behavior is determined to be illegal use, the system automatically executes the preset response measures, such as issuing a warning, suspending services, or notifying the administrator. All detected illegal behaviors and the system's responses are recorded, and audits and system evaluations are performed regularly. This allows the detection process and accuracy to be continuously optimized through audits and feedback, so as to improve the overall detection capability and adaptability of the system.

[0075] In one embodiment, the system further comprises a data server, and the authorization certificate is persistently stored via the database server.

[0076] In this embodiment, the data server securely stores all authorization certificate details, including product information, customer information, and authorization period, etc., so as to ensure centralized data management and rapid retrieval, and guarantee data consistency and integrity.

[0077] In one embodiment, a method for managing digital product certificate authorization is provided, the method comprising:

[0078] Automatically synchronize the authorization application information set from the client through the data synchronization interface; the authorization application information includes: MAC address, public network IP address, motherboard serial number, contract number, purchaser company name, tax number, system port;

[0079] The authorization application information is compared with the pre-stored authorization information to perform user identity authentication and authorization condition verification. If the comparison is successful, an authorization certificate is generated according to the authorization application information and the authorization certificate is issued to the client;

[0080] By generating the authorization application information in the authorization certificate, a connection with the client is established. By collecting the usage data of the client's digital products in real time, a pre-built normal usage model is used to determine whether it is an abnormal behavior based on the collected usage data of the client data product. If so, a preset response measure is output to the client; the usage data includes: software running status, user identity information, usage time, usage frequency, MAC address, public IP address, motherboard serial number, contract number, purchaser's company name, tax number, system port, server time, function usage times, and certificate location storage information.

[0081] In one embodiment, the method further includes: classifying the output abnormal behaviors, counting the number of abnormal behaviors of each type, and generating an authorized use report.

[0082] In one embodiment, the authorization application information is also obtained through a UI interface.

[0083] In one embodiment, the construction of the normal use model includes:

[0084] Acquire a large amount of legal usage data and abnormal usage data of historical data products, mark the legal usage data and abnormal usage data, and pre-process the legal usage data;

[0085] Key performance indicators are selected from legal usage data and abnormal usage data, and machine learning algorithms are used to learn the selected key performance indicators to build a normal usage model.

[0086] In one embodiment, the authorization certificate is stored in a database server.

[0087] This application also includes a security module: implement data encryption, prevent data tampering, and ensure communication security. To protect sensitive information from unauthorized access and attacks. Enhance the overall security of the system. The security module is used to encrypt sensitive information (such as user data, transaction records, and authorization information) stored and transmitted in the system using a public key or a symmetric key. Before storing or sending data, encrypt the data first. Ensure the security of data during transmission, use secure communication protocols (such as TLS / SSL) to encrypt data for transmission, and ensure that the data is not intercepted and interpreted when transmitted in the network. It is crucial to store keys securely to avoid unauthorized access. Use a secure key management solution, such as a hardware security module or a trusted platform module to store keys.

[0088] The working principle of this application is as follows:

[0089] (1) The administrator enters new authorization information or updates existing information through the user interface, or automatically synchronizes the authorization application information set from the client through the data synchronization interface.

[0090] (2) The database server securely stores this information and makes it available for retrieval by other modules.

[0091] (3) When a customer requests authorization, the authorization processing module automatically decides whether to approve it based on the information stored in the database.

[0092] (4) The real-time monitoring unit continuously detects the usage of the product and notifies the administrator if any abnormality is found.

[0093] (5) All data transmission and storage are protected by the security module to ensure the security of the process.

[0094] (6) The reporting and analysis module regularly generates authorization usage reports to help administrators make decisions and audits.

[0095] The technical solution of this application, a digital product certificate authorization management system (DPC-AMS) and its method, brings a series of beneficial technical effects compared with the prior art, as follows:

[0096] Improve data accuracy and reduce human errors: Through automated data management and reduced reliance on manual input, DPC-AMS significantly improves the accuracy of data processing. Experimental data shows that after adopting DPC-AMS, the incidence of data entry errors has been reduced by nearly 70%, ensuring the accuracy of authorized information.

[0097] Enhanced real-time monitoring and rapid response capabilities: The real-time monitoring unit of DPC-AMS can continuously track the usage status of digital products, and promptly detect and respond to illegal use or abuse. During the test, the system successfully identified all simulated unauthorized use attempts, and the response time was shortened from several hours to within a few minutes.

[0098] Improve system security: The introduction of the security module effectively improves the overall security of the system through encryption and anti-tampering mechanisms. In the security vulnerability test, DPC-AMS successfully resisted 99.9% of network attacks and intrusion attempts, which is much higher than the protection effect of existing technologies.

[0099] Improve user experience and reduce management costs: The user interface design of DPC-AMS is simple and intuitive, which reduces the difficulty and time cost of administrators. In the user experience survey, administrators' satisfaction with the new system increased by 80%, and the average time required for each authorization process was reduced by 60%.

[0100] Enhanced reporting and auditing capabilities: The reporting and analysis module provides comprehensive authorized use reports and audit trails to help enterprises better formulate strategies and comply with compliance requirements. After implementing DPC-AMS, enterprises were able to save up to 40% of report preparation time each quarter and improve the accuracy and reliability of reports.

[0101] The technical features of the above embodiments may be combined arbitrarily. To make the description concise, not all possible combinations of the technical features in the above embodiments are described. However, as long as there is no contradiction in the combination of these technical features, they should be considered to be within the scope of this specification.

[0102] The above-mentioned embodiments only express several implementation methods of the present application, and the descriptions thereof are relatively specific and detailed, but they cannot be understood as limiting the scope of the invention patent. It should be pointed out that, for a person of ordinary skill in the art, several variations and improvements can be made without departing from the concept of the present application, and these all belong to the protection scope of the present application. Therefore, the protection scope of the patent of the present application shall be subject to the attached claims.

Claims

1. A digital product certificate authorization management system, characterized in that: The system includes: an authorization application collection module, a database server, an authorization processing module, and a real-time monitoring module; The authorization application information collection module is used to automatically synchronize the authorization application information set from the client through the data synchronization interface; the authorization application information includes: MAC address, public network IP address, motherboard serial number, contract number, purchaser company name, tax number, system port; The authorization processing module is used to compare the authorization application information with the pre-stored authorization information to perform user identity authentication and authorization condition verification. If the comparison is successful, an authorization certificate is generated according to the authorization application information and the authorization certificate is issued to the client; The real-time monitoring module is used to establish contact with the client by generating the authorization application information in the authorization certificate, collect the usage data of the client digital product in real time, and use the pre-built normal usage model to determine whether it is an abnormal behavior based on the collected usage data of the client data product. If so, output the preset response measures to the client; the usage data includes: software running status, user identity information, usage time, usage frequency, MAC address, public IP address, motherboard serial number, contract number, purchaser company name, tax number, system port, server time, function usage times, and certificate location storage information.

2. The digital product certificate authorization management system according to claim 1, characterized in that: The system also includes a reporting and analysis module; the reporting and analysis module is used to classify the abnormal behaviors output by the real-time monitoring module, and to count the number of each type of abnormal behavior to generate an authorized use report.

3. The digital product certificate authorization management system according to claim 1, characterized in that: The authorization application information collection module is also used to obtain authorization application information through the UI interface.

4. The digital product certificate authorization management system according to claim 1, characterized in that: The real-time monitoring module is also used to construct a normal usage model, including: Acquire a large amount of legal usage data and abnormal usage data of historical data products, mark the legal usage data and abnormal usage data, and pre-process the legal usage data; Key performance indicators are selected from legal usage data and abnormal usage data, and machine learning algorithms are used to learn the selected key performance indicators to build a normal usage model.

5. The digital product certificate authorization management system according to claim 1, characterized in that: The system also includes a data server, and the authorization certificate is persistently stored through the database server.

6. A digital product certificate authorization management method, characterized in that: The method comprises: Automatically synchronize the authorization application information set from the client through the data synchronization interface; the authorization application information includes: MAC address, public network IP address, motherboard serial number, contract number, purchaser company name, tax number, system port; The authorization application information is compared with the pre-stored authorization information to perform user identity authentication and authorization condition verification. If the comparison is successful, an authorization certificate is generated according to the authorization application information and the authorization certificate is issued to the client; By generating the authorization application information in the authorization certificate, a connection with the client is established. By collecting the usage data of the client's digital products in real time, a pre-built normal usage model is used to determine whether it is an abnormal behavior based on the collected usage data of the client data product. If so, a preset response measure is output to the client; the usage data includes: software running status, user identity information, usage time, usage frequency, MAC address, public IP address, motherboard serial number, contract number, purchaser's company name, tax number, system port, server time, function usage times, and certificate location storage information.

7. The digital product certificate authorization management method according to claim 6, characterized in that: The method further includes: classifying the output abnormal behaviors, counting the number of abnormal behaviors of each type, and generating an authorized use report.

8. The digital product certificate authorization management method according to claim 6, characterized in that: The authorization application information is also obtained through the UI interface.

9. The digital product certificate authorization management method according to claim 6, characterized in that: The construction of the normal use model includes: Acquire a large amount of legal usage data and abnormal usage data of historical data products, mark the legal usage data and abnormal usage data, and pre-process the legal usage data; Key performance indicators are selected from legal usage data and abnormal usage data, and machine learning algorithms are used to learn the selected key performance indicators to build a normal usage model.

10. The digital product certificate authorization management method according to claim 6, characterized in that: The authorization certificate is stored in a database server.

Images