Application License Key Verification for Authorized Device Binding

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current applications lack authorization functions, allowing unauthorized devices to run applications, posing security risks and potential for misuse.

Innovation Solution

Implementing a dual authorization verification system that includes online verification by an authorization platform and offline verification by the target device, using license key information generated based on application and device descriptions to ensure authorized devices can run the application.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If authorization functions are added to applications, then application security is improved, but device complexity increases

Engineering Contradiction:
Improveapplication securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

An authorization platform is introduced as an intermediary between the application provider and the target device. The platform generates license key information based on application description information and device information, then verifies authorization by matching the license key with device characteristics. This mediator handles the complex authorization logic externally, keeping the application itself relatively simple while achieving strong security.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If dual authorization verification is implemented, then application security is enhanced, but operation complexity increases

Engineering Contradiction:
Improveapplication securityVSAvoidoperation complexity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The authorization platform performs preliminary authorization verification before the application is imported to the target device. The platform generates license key information in advance and verifies it against device information. Only after successful verification is the application package allowed to be imported. This preliminary action ensures security is established before deployment, simplifying the overall operation flow.

Inventive Principle:
Principle #10Preliminary action

3Reliability

If license key verification is performed, then unauthorized access is prevented, but processing time increases

Engineering Contradiction:
Improveaccess controlVSAvoidverification time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The authorization platform creates a license key information copy that contains verification data derived from the application description information and device information. This license key is then used for rapid verification by comparing against device characteristics. The copying approach allows pre-computed verification data to be used, reducing the time required during actual authorization checks.

Inventive Principle:
Principle #26Copying

Data Source

PatentUS12517986B2Authorization verification system, method and apparatus for application, and storage medium
Publication Date: 2026.01.06 HANGZHOU HIKVISION DIGITAL TECHNOLOGY CO LTD
  • US12517986B2 patent drawing
  • US12517986B2 patent drawing
  • US12517986B2 patent drawing

AI summary

An authorization verification system, method, and apparatus for an application and storage medium is disclosed. A license key information corresponding to the application is generated according to description information of the application and information of the admission device, and before importing the application into the target device, the license key information corresponding to the application is used to perform authorization verification. It is determined whether to import the software package of the application into the target device based on a result of the authorization verification; after importing the software package of the application into the target device, secondary authorization verification is performed again on the target device according to the software package of the application, and it is determined whether to allow the target device to run the software package of the application based on a result of the secondary authorization verification.