Authorization management method and firewall system

Abstract

The invention aims to provide an authorization management method of software or equipment and a firewall system applying the method, and effective management and control of the use duration, the function authority and the time length of a product are realized through the process control of generation, authorization, upgrading and monitoring of authorization permission; and through encryption and decryption verification, the reliability and security of authorization permission can be ensured.

Description

Technical Field

[0001] The present invention belongs to the field of device or software authorization management and control, and in particular relates to an authorization management method and a firewall system. Background Art

[0002] Currently, commercial software typically uses licenses to control software usage rights. License technology can control the software functions available to users, the number of manageable resources, and the duration of use. For example, a complex software application often has many features. If a user does not need all of them immediately, a specific license file can be generated for that user, allowing them to use the necessary features at a lower price. If the user later requires more features, a new license can be generated and purchased for a fee.

[0003] Chinese patent publication number CN104751025B discloses a "License Control Method and Device," which calculates the license lifecycle based on the license's time limit using a time calculation method. The invention also provides a license control device. This invention allows for the configuration and adjustment of license lifecycles based on specific circumstances, increasing the flexibility of license control.

[0004] However, the above solution only solves the problem of effective control of the license lifecycle, but does not propose control solutions for functional permission control, license generation, verification, etc. Summary of the Invention

[0005] In view of the above background, the present invention aims to provide a method for managing software or device authorization and a firewall system using the method.

[0006] First, the present invention provides an authorization management method, comprising: The license generation tool generates a license when the product is produced. When writing the disk, write the generated license into the license database through the license writing tool. After the whole system is running, the enabling of the function modules and the self-inspection will be completed by the watchdog, the timely inspection, the updating of the fields in the license database, especially the use time, the closing of the expired functions, the possible verification of the update license operation issued by the interface, and the updating of the license database. The enabling standard of the modules under the authorization control will be provided by the license database. Each inspection is complete, and all the function modules under the authorization control will participate in the inspection, even if the module is not authorized or enabled.

[0007] The above-mentioned license generation tool is an independent Windows program for generating and verifying the license. It combines the authorization parameters required during production to generate an encrypted string format license serial number. It can also reverse the serial number to verify it.

[0008] Further, the above-mentioned generation and verification of the license combine the authorized modules and the authorized time into a certain length of string and encrypt it to obtain the license in the form of string. The encryption includes base64 encoding.

[0009] The above-mentioned license includes the following contents: the device model identified by the serial number, the license serial number, the authorized days, the automatically generated authorized date, the activated function items, and the authorized times.

[0010] As a preferred embodiment, the above-mentioned authorization management method further includes performing the expiration check, regularly updating the database content, and regularly checking the function authorization situation. (1) Check whether the function module is expired: check the authorization situation of the function module, and stop the module running and the device forwarding after expiration; (2) Regularly update the use time: update the used time field in the license database; (3) Function control: stop the function module running after expiration; (4) License expiration log: log alarm and interface warning when the remaining use time of the license reaches the threshold.

[0011] It also includes receiving the license update instruction issued by the interface, specifically: (1) License decryption: decode and decrypt the license string; (2) License verification: verify according to the decrypted license and the data in the original database; (3) License storage: update the license database according to the license.

[0012] Secondly, the application further provides a firewall system applying the above-mentioned authorization management method, comprising: A license generation module, configured to combine authorization parameters required during production to generate a license serial number in an encrypted string format, and also to inversely solve the serial number for verification; A license writing module, configured to write the generated license into a license database through a license writing tool; An authorization inspection module, configured to perform an expiration check once per minute and accept an update instruction issued by an interface.

[0013] Further, the authorization inspection module inspects on time, updates fields in the license database, especially the usage time, closes expired functions, and may check an update license operation issued by the interface and update the license database, and the enabling standard of the authorization control module is provided by the license database, and each inspection is complete, and all the authorization control function modules will participate in the inspection, even if the module is unauthorized or not enabled.

[0014] Moreover, other modules except the license writing module are prevented from operating the license database, and a locking mechanism is adopted to prevent concurrent operation from causing data damage or read / write failure.

[0015] Finally, the application further provides a computer readable storage medium, wherein the storage medium stores a computer program, and when the computer program is executed by a processor, the authorization management method is realized.

[0016] The application adopting the above technical solution has at least the following beneficial effects: through process control of generation, authorization, upgrade and monitoring of authorization permission, effective management and control of product usage time, function permission and time length are realized; and through encryption and decryption verification, the reliability and security of the authorization permission can be ensured. DETAILED DESCRIPTION

[0017] In order to make the purpose, technical scheme and advantages of the application more clear, the technical scheme of the application will be described clearly and completely in combination with embodiments. EMBODIMENT

[0018] An authorization management method, comprising: A license generation program generates a license during product production, A writing disk, configured to write the generated license into a license database through a license writing tool, After the whole system is running, the enabling of the function module and the self-inspection will be completed by the watchdog, the timely inspection, the updating of the field in the license database, especially the use time, the closing of the expired function, the possible checking of the update license operation issued by the interface, and the updating of the license database. The enabling standard of the module of the authorization control will be provided by the license database. Each inspection is complete, and all the function modules of the authorization control will participate in the inspection, even if the module is not authorized or enabled.

[0019] The license generation tool is an independent Windows program for generating and verifying the license. It combines the authorization parameters required during production to generate an encrypted string format license serial number, and can also reverse the serial number to verify it.

[0020] The license is generated and verified. The authorized module and the authorized time are combined into a string of a certain length and encrypted to obtain a license in the form of a string. The encryption includes base64 encoding.

[0021] The license content includes: device model identified by serial number, license serial number, authorized days, automatically generated authorized date, activated function item, and authorized number of times.

[0022] As a preferred embodiment, the above-mentioned authorization management method further comprises performing expiration check, regularly updating database content, and regularly checking function authorization: (1) Check if the function module is expired: check the authorization of the function module, stop the module running and device forwarding after expiration; (2) Update the use time regularly: update the used time field in the license database; (3) Function control: stop the function module running after expiration; (4) License expiration log: log warning and interface warning when the remaining use time of the license reaches the threshold.

[0023] And receiving the license update instruction issued by the interface, specifically: (1) license decryption, decoding and decryption of the license string; (2) license verification, verifying the decrypted license and comparing the original database data; (3) license storage, updating the license database according to the license. Embodiment

[0024] A firewall system, comprising: The license generation module is used to combine the authorization parameters required during production to generate a license serial number in the encrypted string format. It can also decrypt the serial number for verification; The license writing module is used to write the generated license into the license database through the license writing tool; The authorization inspection module performs expiration checks every minute and accepts update instructions issued by the interface.

[0025] The authorization inspection module conducts inspections on schedule, updates the fields in the license database, especially the usage time, disables expired functions, verifies the license update operation issued by the interface, and updates the license database. The enabling standards for the authorization control modules will be provided by the license database. Each inspection is complete, and all authorization control function modules will participate in the inspection, even if the module is not authorized or enabled.

[0026] Avoid modules other than the license writing module from operating the license database, and adopt a locking mechanism to prevent concurrent operations from causing data corruption or read and write failures. Example

[0027] The present invention also provides a computer-readable storage medium having a computer program stored thereon. When the computer program is executed by a processor, the aforementioned authorization management method is implemented. Persons skilled in the art will appreciate that the storage medium may be, for example, ROM / RAM, a magnetic disk, or an optical disk.

[0028] The above description of the disclosed embodiments is intended to enable one skilled in the art to implement or use the present invention. Various modifications to these embodiments will be readily apparent to one skilled in the art, and the general principles defined herein may be implemented in other embodiments without departing from the spirit or scope of the present invention. Therefore, the present invention is not limited to the embodiments shown herein, but is intended to be embodied in the widest possible manner consistent with the principles disclosed herein.

Claims

1. An authorization management method, characterized in that: include: The license generation program generates a license when the product is produced. When writing the disk, write the generated license into the license database through the license writing tool. After the entire system is running, the enabling of functional modules and self-inspection will be completed by the watchdog. It will conduct inspections on schedule, update the fields in the license database, especially the usage time, close expired functions, verify the license update operation issued by the interface, and update the license database. The enabling standards for the authorization-controlled modules will be provided by the license database. Each inspection is complete, and all authorization-controlled functional modules will participate in the inspection, even if the module is not authorized or enabled.

2. The authorization management method according to claim 1, characterized in that: The license generation tool is an independent Windows program used to generate and verify licenses. It combines the authorization parameters required for production to generate a license serial number in the encrypted string format. It can also decrypt the serial number for verification.

3. The authorization management method according to claim 2, characterized in that: The license is generated and verified by combining the authorized module + the authorization time into a string of a certain length and encrypting the string to obtain the license in the form of a string; the encryption includes base64 encoding.

4. The authorization management method according to claim 1, characterized in that: The license content includes: device model identified by the serial number, license serial number, authorization days, automatically generated authorization date, activated functions, and authorization times.

5. The authorization management method according to claim 1, characterized in that: It also includes performing expiration checks, regularly updating database content, and regularly checking function authorizations: (1) Check whether the function module is expired: Check the authorization of the function module, and stop the module operation and device forwarding after expiration; (2) Regularly update usage time: update the used time field in the license database; (3) Function control: stop the function module from running when it expires; (4) License expiration log: When the remaining usage time of the license reaches the threshold, a log alarm and interface warning will be issued.

6. The authorization management method according to claim 1, characterized in that: It also includes the license update instructions issued by the receiving interface, specifically: (1) License decryption: decoding and decrypting the license string; (2) License verification: verify the decrypted license and compare it with the data in the original database; (3) The license is stored in the database and the license database is updated according to the license.

7. A firewall system, characterized in that: include: The license generation module is used to combine the authorization parameters required during production to generate a license serial number in the encrypted string format. It can also decrypt the serial number for verification; The license writing module is used to write the generated license into the license database through the license writing tool; The authorization inspection module performs expiration checks every minute and accepts update instructions issued by the interface.

8. The firewall system according to claim 7, characterized in that: The authorization inspection module conducts inspections on schedule, updates the fields in the license database, especially the usage time, disables expired functions, verifies the license update operation issued by the interface, and updates the license database. The enabling standards for the authorization control modules will be provided by the license database. Each inspection is complete, and all authorization control function modules will participate in the inspection, even if the module is not authorized or enabled.

9. The firewall system according to claim 7, characterized in that: Avoid modules other than the license writing module from operating the license database, and adopt a locking mechanism to prevent concurrent operations from causing data corruption or read and write failures.

10. A computer-readable storage medium, characterized in that The storage medium stores a computer program, and when the computer program is executed by the processor, the authorization management method according to any one of claims 1 to 6 is implemented.