Virtual Identifier License Management in Virtualized Environments

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Current license management systems face limitations in virtual environments, where hardware identifiers are not reliable, leading to challenges in preventing license overuse, scalability, and high availability, especially in virtualized settings, and require additional hardware and licenses for backup and clustering.

Innovation Solution

A method where a master license server provides a cryptographically secured virtual identifier to production license server instances, allowing them to operate securely and uniquely in virtual environments, preventing license duplication and enabling scalable and reliable license management without relying on physical hardware identifiers.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If hardware identifiers are used for license management, then license overuse can be prevented in physical environments, but the system cannot operate reliably in virtualized environments where hardware identifiers are not permanent

Engineering Contradiction:
Improvelicense management reliabilityVSAvoidvirtual environment compatibility
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces a master license server as an intermediary between the licensing system and virtualized environments. This master server generates and manages virtual hardware identifiers that are distributed to production license servers, allowing the system to operate reliably in virtualized environments while maintaining license security. The master server acts as a mediator that translates between the need for unique identification and the dynamic nature of virtual hardware.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates virtual copies of hardware identifiers through the master license server. Instead of relying on physical hardware identifiers that change in virtualized environments, the master server generates consistent virtual identifier copies that are assigned to production license servers. These virtual identifiers behave like permanent hardware identifiers even though the underlying virtualization environment may change.

Inventive Principle:
Principle #26Copying

2Reliability

If additional hardware such as smart cards or secure cards are used to provide secure identifiers in virtual environments, then license security can be maintained, but the cost and complexity of the system increases

Engineering Contradiction:
Improvelicense securityVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent replaces the mechanical hardware-based security approach (smart cards, secure cards) with a software-based cryptographic solution. The master license server uses cryptographic algorithms to generate and secure virtual identifiers, eliminating the need for physical security devices. This substitution maintains security while reducing hardware complexity and cost.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

3Reliability

If clustering techniques are used to allow sharing of license certificates among multiple license servers, then high availability can be achieved, but scalability is limited to 12 servers and requires perfect initial planning

Engineering Contradiction:
Improvehigh availabilityVSAvoidscalability
Core Design Contradiction:
ReliabilityVSProductivity

Solution Approach 1:

The patent segments the licensing system into a hierarchical structure with a master license server and multiple production license servers. The master server handles identifier generation and license distribution, while production servers handle client license management. This segmentation allows unlimited scalability of production servers without the 12-server limitation of traditional clustering, as the master server can dynamically manage identifiers for any number of production servers.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements dynamic identifier management where the master license server can dynamically generate and assign virtual identifiers to production license servers as needed. Unlike static clustering configurations that require perfect initial planning, this dynamic approach allows the system to adapt to changing requirements and scale flexibly without predetermined limits on the number of servers.

Inventive Principle:
Principle #15Dynamics

Applied Scientific Principles

This section explains which scientific principles are used to turn an abstract innovation direction into a practical engineering solution.

Function Achieved in This Case

This approach enables secure, scalable, and reliable license management in virtual environments, allowing multiple production license server instances to share the same identifier while preventing overuse, and facilitates easy backup and high availability without the need for additional hardware or licenses.

Implementation Method 1

The virtual identifier is cryptographically secured against modification

Methodology Applied
Scientific EffectCryptography:

Data Source

PatentUS9065825B2Method and system for license management
Publication Date: 2015.06.23 INTERNATIONAL BUSINESS MACHINE CORPORATION
  • US9065825B2 patent drawing
  • US9065825B2 patent drawing
  • US9065825B2 patent drawing

AI summary

Embodiments of the invention relate to methods, apparatus and systems, including computer program products for license management in one or more computer systems. A first computer runs a master license server process instance. The master license service process instance is associated with a hardware identifier relates to the first computer and has a license to run a predefined number of concurrent production license server process instances that are responsible for license management towards clients. A request is received by the master license server process instance for a license from a production license server process instance in a second computer. The master license server process instance provides a virtual identifier to the production license server process instance to be used as a unique identifier for license management purposes towards clients by the production license server process instance. The virtual identifier is cryptographically secured against modification.