Software License Monitoring Through Tamper-Evident Information Chains
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing license control methods for software are inadequate in virtual and containerized environments, as they rely on hardware information that is difficult to obtain, leading to security risks from tampering and limited applicability in distributed clusters.
Innovation Solution
A method and apparatus for monitoring software license information using transaction information blocks, root encryption values, and information chains, which are generated and verified without relying on hardware information, ensuring security through cryptographic validation.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If hardware information is used for encryption, then license information security is improved, but applicability in virtual and containerized environments deteriorates
Solution Approach 1:
The patent extracts the encryption mechanism from hardware dependency. Instead of using hardware information (MAC address, serial number) for encryption, the system uses software-based transaction information blocks that can be generated in any environment. This separates the security function from hardware requirements, enabling deployment in virtual and containerized environments while maintaining encryption capability.
Solution Approach 2:
The patent introduces transaction information blocks as an intermediary between the license control system and the runtime environment. These blocks contain encrypted license information and can be generated and verified without hardware dependencies. The intermediary layer (transaction information block) mediates between the need for secure encryption and the requirement for environment-agnostic deployment.
2Reliability
If hardware information is used for encryption, then license information security is improved, but security against tampering deteriorates
Solution Approach 1:
The patent implements preliminary action by generating transaction information blocks with encrypted license information before software deployment. The blocks are created with embedded verification mechanisms (hash values, timestamps) that enable future detection of tampering. This advance preparation ensures that even if hardware information is compromised, the pre-encrypted blocks remain secure and tamper-evident.
Solution Approach 2:
The patent incorporates feedback mechanisms through verification processes that check the integrity of transaction information blocks. The system continuously verifies whether the decrypted license information matches the original encrypted data, providing feedback that detects tampering attempts. This feedback loop maintains security by identifying and rejecting modified license information.
Data Source
AI summary
Examples of the present disclosure provide a method and an apparatus for monitoring license information of a software, a server and a storage medium, which relate to the technical field of software management. The solution of the examples of the present disclosure includes: generating a transaction information block every specified duration; wherein, the transaction information block includes license information, and the license information includes an available duration balance of a software to be protected when generating the transaction information block; calculating a root encryption value based on the generated transaction information block; then, generating an information block; wherein, the information block includes the root encryption value and a transaction list, and the transaction list includes transaction information blocks generated in order; adding the information block into an information chain; wherein, the information chain includes information blocks generated in order. By using this method, it is possible to avoid effective tampering of the license information of the software and improve the security.