Off-line software license tamper-proof verification system and method based on first networking activation

Abstract

The invention belongs to the technical field of computer software security and digital rights management, and particularly relates to an offline software license tamper-proofing verification system and method based on first networking activation. The multi-NTP server time synchronization module is used for acquiring trusted network time from a plurality of NTP servers; a license signature verification module; the local timestamp encryption storage module is used for encrypting credible time and hardware fingerprints and then storing the credible time and the hardware fingerprints into a plurality of hidden paths; the off-line time integrity verification module is used for verifying system time integrity in an off-line environment; the hardware fault-tolerant module is used for generating a device fingerprint and processing a hardware change scene; and the version compatibility module is used for providing a flexible version matching strategy. According to the invention, an authorization mode that only first networking activation is needed and subsequent complete offline work is needed is realized, and the problems of continuous networking dependence, easy tampering, time rollback, hardware change mistaken killing and the like in the prior art are effectively solved.

Description

Technical Field

[0001] This invention relates to the fields of computer software security and digital rights management technology, and in particular to an offline software license anti-tampering verification system and method based on initial online activation. Background Technology

[0002] With the development of software technology, software license protection mechanisms have become an important part of software copyright management. While traditional online verification methods are secure and reliable, they cannot be used in isolated network environments or scenarios without internet access.

[0003] Current offline license verification schemes mainly include: file-based validity period verification, hardware-based verification, and digital signature-based verification. However, these existing technologies have significant drawbacks: Continuous network connection dependency: Most solutions require the software to connect to the authorization server for verification every time it starts up; Time can be easily tampered with: Users can bypass the expiration check by modifying the operating system time; Incomplete hardware information collection: Some solutions only bind to a single hardware component; Lack of time integrity verification: Unable to detect whether the system time has been maliciously rolled back; Weak tamper resistance: Simply encrypted license files are easily cracked and tampered with; Single point of failure: It relies on a single time source or a single local record and has poor fault tolerance.

[0004] Therefore, this invention proposes an offline software license anti-tampering verification system and method based on initial online activation. Summary of the Invention

[0005] To address the problems existing in the prior art, this invention provides an offline software license anti-tampering verification system and method based on initial online activation.

[0006] To achieve the above objectives, the present invention adopts the following technical solution: On one hand, this invention proposes an offline software license anti-tampering verification system based on initial online activation, comprising: The initial activation detection module is used to determine whether the software is being run for the first time. A multi-NTP server time synchronization module is used to obtain trusted network time from multiple NTP servers; The license signature verification module is used to verify the digital signature and integrity of license documents; The local timestamp encryption storage module is used to encrypt trusted time and hardware fingerprint and store them in multiple hidden paths; The offline time integrity verification module is used to verify the system's time integrity in an offline environment. The hardware fault tolerance module is used to generate device fingerprints and handle hardware change scenarios. Version compatibility module, used to provide flexible version matching strategies.

[0007] Preferably, the first activation detection module determines whether it is the first run by checking whether there are hidden files in multiple preset locations.

[0008] Preferably, the multi-NTP server time synchronization module adopts a server polling mechanism and sets a timeout period to ensure the reliability of time acquisition.

[0009] Preferably, the license signature verification module uses the RSA asymmetric encryption algorithm to verify the signature, preventing the license file from being tampered with.

[0010] Preferably, the local timestamp encryption storage module uses the AES symmetric encryption algorithm to protect time records and prevent plaintext tampering.

[0011] Preferably, the offline time integrity verification module detects time backtracking by comparing encrypted time records from multiple storage points.

[0012] Preferably, the hardware fault-tolerant module generates a hash value by combining multiple hardware information, allowing for some hardware changes.

[0013] On the other hand, this invention proposes an offline software license anti-tampering verification method based on initial online activation, comprising the following steps: Initial run check: Checks for the existence of hidden files in multiple preset locations; Trusted Time Acquisition: Obtain trusted network time from multiple NTP servers; License verification: Verify the digital signature and integrity of the license document; Time and hardware information recording: Encrypt trusted time and hardware fingerprint and store them in multiple hidden paths; Offline verification: Upon subsequent startup, multiple time records are read and decrypted to verify time integrity; Hardware change handling: Allows partial hardware changes and provides a fault tolerance mechanism; Version matching: Determines compatibility between the license version and the current software version.

[0014] Preferably, in the time and hardware information recording step, the encrypted time record is stored in at least three different paths, including the application data directory and the program installation directory.

[0015] Preferably, in the offline verification step, if the current system time is earlier than any recorded time, it is determined to be time tampering, and the software operation is terminated.

[0016] The above-described technical solution of the present invention has the following beneficial technical effects: This invention implements an authorization mode that requires only initial network activation and then operates entirely offline, effectively solving problems in existing technologies such as continuous network dependence, susceptibility to tampering, time rollback, and false positives due to hardware changes. The system ensures high security and reliability through multiple encryption layers and redundant storage, making it particularly suitable for licensing scenarios involving industrial software, embedded systems, and offline devices. Attached Figure Description

[0017] Figure 1 This is a schematic diagram of the overall system structure of the present invention.

[0018] Figure 2 This is a flowchart of the initial network activation process.

[0019] Figure 3 This is a flowchart of the offline verification process.

[0020] Figure 4 Logic diagram for time tampering detection. Detailed Implementation

[0021] To make the objectives, technical solutions, and advantages of this invention clearer, the invention will be further described in detail below with reference to specific embodiments and the accompanying drawings. It should be understood that these descriptions are merely exemplary and not intended to limit the scope of the invention. Furthermore, descriptions of well-known structures and techniques are omitted in the following description to avoid unnecessarily obscuring the concept of the invention.

[0022] like Figures 1-4 As shown, the present invention provides an offline software license anti-tampering verification system and method based on initial online activation.

[0023] I. System Overall Architecture: The offline software license anti-tampering verification system based on first-time online activation provided by this invention mainly consists of seven core modules: First-time activation detection module: Determines whether the software is being run for the first time; Multi-NTP server time synchronization module: Obtains trusted network time; License signature verification module: Verifies the authenticity and completeness of license documents; Local timestamp encrypted storage module: Encrypts key information and stores it through multiple paths; Offline time integrity verification module: detects time tampering in offline mode; Hardware fault tolerance module: generates device fingerprint and handles hardware changes; Version compatibility module: Ensures compatibility between different versions of software and licenses.

[0024] These modules work together to form a complete anti-tampering verification system, enabling an authorization mode that activates only upon the first online connection and then runs completely offline.

[0025] II. Initial Online Activation Process: 1. Initial run test: When the system starts up, it checks whether a hidden file exists in a preset location to determine if it is the first run. If none of these specific marker files exist, it is determined to be the first run and the activation process begins.

[0026] 2. Reliable time acquisition: The system sequentially attempts to connect to multiple Network Time Protocol (NTP) servers to obtain standard network time. A server polling mechanism is employed, with a reasonable timeout setting to ensure successful acquisition of reliable time even in unstable network environments.

[0027] 3. License verification: The digital signature of the license document is verified using an asymmetric encryption algorithm. The signature is decrypted using a public key and compared with the document content to ensure that the license has not been tampered with and is of legitimate origin.

[0028] The license document contains key information such as the application name, version number, and validity period, as well as a digital signature generated based on this information.

[0029] 4. Hardware fingerprint generation: It collects various hardware information (such as CPU serial number, motherboard serial number, hard drive serial number, network card MAC address, etc.) and generates a unique hardware fingerprint using a hash algorithm. This composite fingerprint technology improves the reliability of hardware binding.

[0030] 5. Time and hardware information storage: The acquired trusted time is combined with the generated hardware fingerprint, encrypted using a symmetric encryption algorithm, and then stored in multiple hidden paths, including the application data directory and the program installation directory, to achieve multi-path redundancy backup.

[0031] III. Offline verification process: 1. Time record reading and verification: When the system starts up, it reads and decrypts time records from multiple hidden paths. By comparing these records, it determines whether the system time has been tampered with.

[0032] 2. Hardware Change Handling: Compare the current hardware fingerprint with the recorded hardware fingerprint. If a discrepancy exists, the system allows the user to reactivate the software, preventing the software from becoming unusable due to legitimate hardware upgrades.

[0033] 3. Time tampering detection: The current system time is compared with all recorded times. If the current time is found to be earlier than any recorded time, it is determined as a time rollback, and the software operation is immediately terminated.

[0034] 4. Version compatibility check: Verify that the current software version is within the range allowed by the license. Supports wildcard matching and semantic versioning, improving the flexibility of license management.

[0035] IV. Anti-tampering mechanism: This system ensures high security through multiple mechanisms: License tamper-proof: Digital signature is performed using an asymmetric encryption algorithm; any modification will result in verification failure. Time record tamper protection: Uses a symmetric encryption algorithm to protect time records and prevent plaintext tampering. Multi-path storage: Critical information is stored in multiple locations, so tampering with a single record does not affect the overall verification. Multiple NTP servers: Time is retrieved from multiple servers during initial activation to prevent single point of failure. This invention implements an authorization mode that requires only initial network activation and then operates entirely offline, effectively solving problems in existing technologies such as continuous network dependence, susceptibility to tampering, time rollback, and false positives due to hardware changes. The system ensures high security and reliability through multiple encryption layers and redundant storage, making it particularly suitable for licensing scenarios involving industrial software, embedded systems, and offline devices.

[0036] The above description is merely a preferred embodiment of the present invention and is not intended to limit the present invention. Although the present invention has been described in detail with reference to the foregoing embodiments, those skilled in the art can still modify the technical solutions described in the foregoing embodiments or make equivalent substitutions for some of the technical features. Any modifications, equivalent substitutions, improvements, etc., made within the spirit and principles of the present invention should be included within the protection scope of the present invention.

Claims

1. A tamper-proof verification system for offline software licenses based on initial online activation, characterized in that, include: The initial activation detection module is used to determine whether the software is being run for the first time. A multi-NTP server time synchronization module is used to obtain trusted network time from multiple NTP servers; The license signature verification module is used to verify the digital signature and integrity of license documents; The local timestamp encryption storage module is used to encrypt trusted time and hardware fingerprint and store them in multiple hidden paths; The offline time integrity verification module is used to verify the system's time integrity in an offline environment. The hardware fault tolerance module is used to generate device fingerprints and handle hardware change scenarios. Version compatibility module, used to provide flexible version matching strategies.

2. The offline software license anti-tampering verification system based on initial online activation as described in claim 1, characterized in that, The first activation detection module determines whether it is the first run by checking whether hidden files exist in multiple preset locations.

3. The offline software license anti-tampering verification system based on initial online activation as described in claim 1, characterized in that, The multi-NTP server time synchronization module adopts a server polling mechanism and sets a timeout period to ensure the reliability of time acquisition.

4. The offline software license anti-tampering verification system based on initial online activation as described in claim 1, characterized in that, The license signature verification module uses the RSA asymmetric encryption algorithm to verify the signature, preventing the license file from being tampered with.

5. The offline software license anti-tampering verification system based on initial online activation as described in claim 1, characterized in that, The local timestamp encryption storage module uses the AES symmetric encryption algorithm to protect time records and prevent plaintext tampering.

6. The offline software license anti-tampering verification system based on initial online activation as described in claim 1, characterized in that, The offline time integrity verification module detects time backtracking by comparing encrypted time records from multiple storage points.

7. The offline software license anti-tampering verification system based on initial online activation as described in claim 1, characterized in that, The hardware fault-tolerant module generates a hash value by combining multiple hardware information, allowing for some hardware changes.

8. A method for preventing tampering with offline software licenses based on initial online activation, characterized in that, Includes the following steps: Initial run check: Checks for the existence of hidden files in multiple preset locations; Trusted Time Acquisition: Obtain trusted network time from multiple NTP servers; License verification: Verify the digital signature and integrity of the license document; Time and hardware information recording: Encrypt trusted time and hardware fingerprint and store them in multiple hidden paths; Offline verification: Upon subsequent startup, multiple time records are read and decrypted to verify time integrity; Hardware change handling: Allows partial hardware changes and provides a fault tolerance mechanism; Version matching: Determines compatibility between the license version and the current software version.

9. The offline software license anti-tampering verification method based on first-time online activation as described in claim 8, characterized in that: In the time and hardware information recording step, the encrypted time record is stored in at least three different paths, including the application data directory and the program installation directory.

10. The offline software license anti-tampering verification method based on first-time online activation as described in claim 8, characterized in that: In the offline verification step, if the current system time is earlier than any recorded time, it is determined to be time tampering, and the software operation is terminated.

Images