Homomorphic Encryption for Secure Software License Authentication
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Software license authentication methods in the related art transmit sensitive user information in plaintext, making it vulnerable to theft and resulting in significant losses for users.
Innovation Solution
A method and apparatus for license authentication using homomorphic encryption, where registration information including a public key and environment ciphertext is used to generate and verify license information, ensuring secure transmission and authentication without exposing private user data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If user information and environment information are transmitted in plaintext form, then the transmission process is simple and easy to implement, but the security of user information is compromised and vulnerable to theft
Solution Approach 1:
The patent introduces an environment fingerprint as an intermediary element that binds the license to specific device characteristics. Instead of directly encrypting sensitive user information, the system uses the environment fingerprint (derived from device hardware and software characteristics) as a mediator to create a secure binding between the license and the target device, thereby enhancing security without requiring complex encryption of personal data
Solution Approach 2:
The patent transforms sensitive user information into environment fingerprint parameters that represent device characteristics rather than personal data. By changing the parameter representation from directly identifiable user information to device-specific environmental parameters, the system maintains security while enabling license verification
2Reliability
If sensitive user information is collected and stored, then license authentication can be performed, but the risk of data theft and user loss increases
Solution Approach 1:
The patent extracts only the necessary authentication elements (environment fingerprint) from the complete user information set. Instead of collecting and storing all sensitive user data, the system extracts and uses only the device-specific environmental characteristics needed for license binding, thereby reducing the attack surface and risk of data theft while maintaining authentication authenticity
Solution Approach 2:
The patent creates a cryptographic copy of the environment fingerprint that is bound to the license. Rather than storing original sensitive user information, the system works with cryptographic representations (hashes/fingerprints) of device characteristics, which can verify authenticity without exposing the original sensitive data
Data Source
AI summary
Provided are a license authentication method and apparatus, an electronic device, a system, and a storage medium. The method includes: obtaining registration information provided by a licensed terminal, wherein the registration information includes a public key and a first environment ciphertext provided by the licensed terminal, the first environment ciphertext is obtained after the licensed terminal encrypts the currently obtained first environment fingerprint by using a private key, and the first environment fingerprint includes the software and hardware feature information of an environment where the licensed terminal is located; generating license information comprising the first environment ciphertext, encrypting the license information by using the public key, and encrypting the encrypted license information in a homomorphic mode to obtain a license ciphertext indicating a license range of a service to be licensed for which the licensed terminal requests license authentication; and transmitting the license ciphertext to the licensed terminal.