Virtual Machine License Control via Security Device
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current license management systems for virtual machines are ineffective in preventing illicit use of replicated virtual machines, leading to reduced profits for vendors due to the inability to enforce valid license requirements.
Innovation Solution
A method that involves transmitting requests with signatures and identifiers from a computing device to a security device to authorize the execution of virtual machine replicas, including checks for valid licenses and limiting the number of replicas, ensuring only authorized replicas with valid licenses can run.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If virtual machines are replicated for easy deployment and portability, then the versatility and ease of operation improve, but the risk of illicit use and loss of vendor revenue increases
Solution Approach 1:
The patent implements preliminary licensing checks before virtual machine replication and execution. A license server validates replication requests and issues time-limited license certificates that must be verified before the virtual machine can execute. This preliminary action prevents illicit use by ensuring that only authorized replicas with valid licenses can run, directly addressing the security risk while maintaining replication capabilities
Solution Approach 2:
The patent establishes a continuous feedback mechanism where the license server monitors virtual machine execution status and periodically validates license certificates. The system tracks the number of active replicas and communicates with the virtual machine runtime to ensure license compliance. This feedback loop enables real-time detection and prevention of unauthorized replication, resolving the contradiction between replication versatility and illicit use prevention
2Ease of operation
If traditional license keys are used for software protection, then ease of operation is maintained, but the ability to prevent virtual machine copying is lost
Solution Approach 1:
The patent introduces a license server as an intermediary between the user and the virtual machine execution system. Instead of relying solely on static license keys embedded in the software, the system uses a centralized license server that issues, validates, and revokes licenses dynamically. This intermediary maintains ease of operation through automated processes while significantly improving reliability by preventing copying through centralized control and time-limited certificates
Solution Approach 2:
The patent replaces the mechanical license key system with an electronic certificate-based system. Traditional license keys are static and can be copied indefinitely, while the new system uses digitally signed certificates with embedded validity periods and replication counters. This substitution maintains operational simplicity through automated validation while providing robust protection against illicit copying through cryptographic verification and centralized control
3Reliability
If remote licensing servers are implemented with validity periods, then license control reliability improves, but the complexity of the licensing system increases
Solution Approach 1:
The patent uses parameter changes to manage license complexity, specifically by encoding validity periods, replication counts, and execution conditions directly into the license certificate parameters. The license server validates these parameters automatically without requiring complex external verification systems. This approach improves reliability through enforceable validity controls while minimizing system complexity by keeping all necessary information within the certificate structure itself
Data Source
Figure 1
Figure 2
Figure 3
AI summary
The method involves transmitting a request with a signature and an identifier of a virtual machine (VM1) from an informatic device i.e. host device (DH), to a safety device (DS) e.g. chip card. A response including instructions for allowing execution of replicates of the machine is transmitted from the safety device to the informatic device if number of the replicates of the machine is lower than a predetermined number during functioning, if the signature is valid, and if the identifier of the machine is conformed to another identifier stored in the safety device. Independent claims are also included for the following: (1) an informatic device comprising a transmission unit for transmitting a request comprising a signature and an identifier of a virtual machine (2) a safety device comprising a receiving unit for receiving a request comprising a signature and an identifier of a virtual machine.