Web System License Verification via Multi-Way Tree Search
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional software license verification mechanisms are insecure and lack fine-grained control, as they rely on clear messages and large authorizing granularities, making them susceptible to leaks and misuse.
Innovation Solution
A method utilizing multi-way tree search and asymmetric encryption to securely verify web system licenses by encrypting license information and establishing a multi-way tree structure based on authorized function URLs, allowing for fine-grained authorization and efficient function access control.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If clear message license is used for verification, then the verification process is simple, but the license is easy to leak and security is compromised
Solution Approach 1:
The patent uses asymmetric encryption to create a cryptographic copy of the license information. The original license data is transformed into an encrypted form that can be verified without exposing the actual license contents, thus maintaining security while enabling verification.
Solution Approach 2:
The patent transforms the license information from clear text to encrypted text, changing its state from readable to unreadable without proper decryption keys. This parameter change ensures that even if the encrypted license is intercepted, the actual license information remains secure.
2Ease of operation
If function collection information is stored in software for verification, then verification is straightforward, but users can modify it to access unauthorized functions
Solution Approach 1:
The patent stores function collection information in encrypted form within the license rather than in plain text in the software. This cryptographic copy prevents modification while still allowing verification through decryption with the appropriate key.
Solution Approach 2:
The patent performs encryption of the license information in advance, before the verification process. This preliminary encryption action ensures that the function collection information is protected from modification attempts during the verification process.
3Device complexity
If conventional license verification is used, then the system is simple to implement, but the authorizing granularity is too large and flexibility is low
Solution Approach 1:
The patent segments the function collection information into individual function URLs within the encrypted license. This segmentation allows for fine-grained authorization control, where specific functions can be authorized or revoked independently, increasing flexibility and adaptability.
Data Source
AI summary
A web system license based on multi-way tree search includes steps of: identifying a requiring URL of each function; using the requiring URL of the function as a mark, writing the mark in a license; encrypting the license for generating a cipher text, and storing the cipher text in a web system; during initializing of the web system, decrypting the cipher text and sending to a memory; establishing a multi-way tree according to a URL of an authorized function in the license; and receiving a requirement for a specific function by the web system, using the requiring URL as a searching value and matching in the multi-way tree; wherein if a corresponding URL is found, the function is authorized and further operation is required until response returning; if the corresponding URL is not found, the requirement is intercepted, and a response is returned.