Digital Certificate Time Frame Constraints Disconnected Software
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for protecting software against unauthorized use are inefficient in disconnected or read-only computing environments, where modifications are not possible and network connections are unavailable, making it difficult to enforce usage controls and ensure secure, time-limited access.
Innovation Solution
A method involving the generation of a digital certificate with time frame constraints, signed by a certificate authority, which is associated with the software and validated upon execution in a disconnected computing environment, ensuring that the software can only run within specified time frames and by authorized parties.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If existing software protection methods (online key checking or hidden flags) are used, then software usage can be controlled, but they cannot be applied in disconnected or read-only computing environments
Solution Approach 1:
The system performs preliminary actions by generating a digital certificate with time frame constraints and embedding it into the software before distribution. The certificate authority signs the certificate in advance, creating a self-contained validation mechanism that does not require online verification. This allows the software to be protected and controlled even in disconnected environments where the software is later executed.
2Stability of the object's composition
If read-only file systems are used to prevent modifications, then system integrity is maintained, but software usage control becomes impossible
Solution Approach 1:
Instead of modifying the read-only file system or requiring write permissions, the system creates a digital certificate that is embedded into the software. This certificate contains all necessary usage control information (time frame constraints, authorized parties) and is validated through cryptographic verification. The validation process reads the certificate without modifying the underlying read-only system, thus maintaining system integrity while enabling usage control.
3Reliability
If network connections are required for software validation, then centralized control is achieved, but disconnected computing environments cannot use the software
Solution Approach 1:
The system extracts the essential validation functionality from the network environment and embeds it directly into the software through a digitally signed certificate. The certificate contains the time frame constraints and authorization information that would otherwise require network verification. By taking out the validation data and embedding it locally with cryptographic signatures, the system maintains centralized control (through the certificate authority's digital signature) while enabling operation in disconnected environments.
Data Source
AI summary
A method, computer program product and system of handling usage of software in a disconnected computing environment. A digital certificate including time frame constraints is generated, signed by a certificate authority and associated to the software. To be executed, the digital certificate previously signed must be validated by the certificate authority by checking public keys and the time frame constraints must be simultaneously satisfied in the disconnected computing environment. The use of software is controlled in disconnected computing environments and/or read-only computing environments, i.e. environments which are not modifiable or in which brought modifications are not persistent. The data collected by the software may be further encrypted and thus be controlled.