CN104680041A - Offline software authorization validity verification method - Google Patents

Abstract

An off-line software authorization validity verification method of the present invention includes generation of authorization files and verification of authorization files; specifically, includes the following steps: S10: the authorization file generator reads terminal system information; S11: obtains system time, and calculates authorization Serial number; S12: Set the validity period of the authorization, generate a three-dimensional data space from the two-dimensional data map of the program, and finally output the authorization file; S13: Verify the authorization file, including solidified information verification, real-time information verification, program integrity verification, and authorization period verify. The invention makes the authorization verification function of the software in the off-line environment more reliable through the method of combining the binary data into space and using its own data space attribute in combination with system information for verification.

Description

A method for verifying the validity of offline software authorization

technical field

The invention relates to the technical field of software authorization validity verification, in particular to an off-line software authorization validity verification method.

Background technique

So far, the mainstream software authorization protection methods mainly include: hardware authentication (dongle), server authorization authentication, and serial number authentication, etc. These methods either exist independently or are combined with each other, but their control of the authorization period is often limited. Rely on data validation on the server. This is mainly because there are many unavoidable problems in the local authorization period verification of the client, such as: system time change, operating system reset, registry restoration, etc., making it difficult for the software to permanently save the verification credentials on the client , and when these credentials are lost, their verification methods will also become invalid.

Therefore, in order to solve the above-mentioned defects in the prior art, it is necessary to carry out research and development to provide a solution to make the authorization verification function of the software in an offline environment more reliable.

Contents of the invention

In order to solve the above problems, the object of the present invention is to provide a method for verifying the validity of an offline software authorization, so that the authorization verification function of the software in an offline environment is more reliable.

To achieve the above object, the technical solution of the present invention is:

A method for verifying the validity of an offline software authorization, including the generation of an authorization file and the verification of the authorization file; specifically, the following steps:

S10: the authorization file generator reads the terminal system information;

S11: Obtain the system time and calculate the authorization serial number;

S12: Set the validity period of the authorization, generate a three-dimensional data space from the two-dimensional data map of the program, and finally output the authorization file;

S13: authorization file verification, specifically including verification of fixed information, verification of real-time information, verification of program integrity, and verification of authorization period.

Further, the content in the authorization file mainly includes: authorization serial number, authorization period, system dynamic information records, and program two-dimensional data diagram;

Among them, the authorization serial number is calculated based on system solidification information, real-time information, and system time, and is mainly used to verify the validity of the system environment;

The authorization period is entered by the authorization file generator to verify the validity period of the program;

The system dynamic information record mainly records the system dynamic information when the authorization file is generated, and is used to test the validity of the authorization file;

The two-dimensional data map of the program is randomly calculated from the binary data of the authorization file, and is used to verify the integrity of the program file and calculate the running time of the program.

Further, randomly select a data value of a unit length, and then find the position of the value in the binary code of the program, set the position of the data bit as 1, and set the other positions as 0, to obtain the two-dimensional data map of the program, and convert the two-dimensional After the data graph is arranged in a certain direction, the three-dimensional data space of the program is formed.

The off-line software authorization validity verification method of the present invention makes the authorization verification function of the software in an off-line environment more reliable by spatializing the binary data and using its own data space attributes combined with system information for combined verification.

Description of drawings

Fig. 1 is a flow diagram of the method of the present invention.

Detailed ways

The embodiment of the present invention provides a method for verifying the validity of offline software authorization. After the binary data is spatialized, the combined verification method is performed using its own data space attributes combined with system information, so that the authorization verification function of the software in the offline environment is more efficient. reliable.

In order to make the purpose, features and advantages of the present invention more obvious and understandable, the technical solutions in the embodiments of the present invention will be clearly and completely described below in conjunction with the accompanying drawings in the embodiments of the present invention. Obviously, the following The described embodiments are only some, not all, embodiments of the present invention. All other embodiments obtained by those skilled in the art based on the embodiments of the present invention belong to the protection scope of the present invention.

The terms "first", "second" and the like in the description and claims of the present invention and the above drawings are used to distinguish similar objects, and are not necessarily used to describe a specific sequence or sequence. It should be understood that the terms used in this way can be interchanged under appropriate circumstances, and this is merely a description of the manner in which objects with the same attribute are described in the embodiments of the present invention. Furthermore, the terms "comprising" and "having", as well as any variations thereof, are intended to cover a non-exclusive inclusion, such that a process, method, system, product, or apparatus comprising a series of elements is not necessarily limited to those elements, but may include elements not expressly included. Other elements listed explicitly or inherent to the process, method, product, or apparatus.

Referring to FIG. 1 , detailed descriptions will be given below. the

An off-line software authorization validity verification method of the present invention includes generation of an authorization file and verification of the authorization file; specifically, includes the following steps:

S10: Authorization file generation

The contents of the authorization file mainly include: authorization serial number, authorization period, system dynamic information records, and program two-dimensional data diagram; the authorization serial number is calculated based on system solidification information, real-time information, and system time, and is mainly used for Verify the validity of the system environment. The authorization period is entered by the authorization file generator to verify the validity period of the program. The system dynamic information record mainly records the system dynamic information when the authorization file is generated, and is used to test the validity of the authorization file. The two-dimensional data map of the program is randomly calculated from the binary data of the authorization file, and is used to verify the integrity of the program file and calculate the running time of the program.

Specifically, the authorization file generator reads the terminal system information, and the terminal system information includes solidification information and real-time information; the solidification information mainly includes hardware serial number, operating system information and current user information; and real-time information includes hard disk usage amount, time and times of use, random reference entries in the registry, and system directory tables. Obtain the system time, calculate the authorization serial number; set the validity period of the authorization, and generate a three-dimensional data space from the two-dimensional data map of the program. Among them, by randomly selecting a data value with a unit length, and then finding the position of the value in the binary code of the program, set The position of the data bit is set to 1, and the other positions are set to 0. Finally, the two-dimensional data map of the program is obtained. After the two-dimensional data map is arranged in a certain direction, the three-dimensional data space of the program is formed, and finally the authorization file is output.

Specifically, call the function GetSystemFixedInfo () to obtain the solidification information of the system; call the function GetSystemDynamicInfo () to obtain the dynamic information of the system; call the function GetSystemTime () to obtain the current system time; call the function GetCDKEY () to authorize the serial number; call the function SetValidity () to set Determine the validity period of the software; call the function GetBinaryMap () to obtain the two-dimensional data map of the program file; call the function CreateDataSpaceTime () to create the data space-time based on the above information; call the function EncodingSpace () to output the encrypted authorization file.

S10: Authorization file verification

The program authorization verification process mainly includes solidification information verification, real-time information verification, program integrity verification, and authorization period verification.

Among them, the fixed information verification mainly verifies the fixed information of the hardware ID and other systems to ensure the uniqueness of the authorization environment; the real-time information verification mainly judges the validity of the authorization file by comparing the changes of real-time information, such as whether there is a change value of the system time It is less than the increase of the hard disk usage time; the program integrity verification mainly uses the two-dimensional data map of the program to verify the integrity of the program file; and the authorization period verification mainly uses the three-dimensional data space, the program space structure, and the authorization period. For related settings, check whether the change of program authorization decay period complies with the change range of the current system time, if not, it means that the system time is abnormal.

The invention makes the authorization verification function of the software in the off-line environment more reliable through the method of combining the binary data into space and using its own data space attributes in combination with system information.

Through the description of the above embodiments, those skilled in the art can clearly understand that the present invention can be realized by means of software plus necessary general-purpose hardware. Special components, etc. to achieve. In general, all functions completed by computer programs can be easily realized by corresponding hardware, and the specific hardware structure used to realize the same function can also be varied, such as analog circuits, digital circuits or special-purpose circuit etc. However, software program implementation is a better implementation mode for the present invention in most cases. Based on this understanding, the essence of the technical solution of the present invention or the part that contributes to the prior art can be embodied in the form of a software product, and the computer software product is stored in a readable storage medium, such as a floppy disk of a computer , U disk, mobile hard disk, read-only memory (ROM, Read-Only Memory), random access memory (RAM, Random Access Memory), magnetic disk or optical disk, etc., including several instructions to make a computer device (which can be personal computer, server, or network equipment, etc.) to execute the methods described in various embodiments of the present invention.

In summary, the above embodiments are only used to illustrate the technical solutions of the present invention, rather than to limit them; although the present invention has been described in detail with reference to the above embodiments, those of ordinary skill in the art should understand that: it can still The technical solutions described in the above embodiments are modified, or some of the technical features are replaced equivalently; and these modifications or replacements do not make the essence of the corresponding technical solutions deviate from the spirit and scope of the technical solutions of the various embodiments of the present invention.

Claims (3)

1. an off-line soft ware authorization validation verification method, is characterized in that, includes generation and the authority checking of authority; Particularly, comprise the steps:

S10: authority maker reading terminals system information;

S11: obtain system time, calculates authorization sequence number;

S12: the term of validity is authorized in setting, generates three-dimensional data space, finally export authority by program 2-D data figure;

S13: authority is verified, specifically comprises solidification Information Authentication, real-time information checking, process integrity checking, and licensing term checking.

2. off-line soft ware authorization validation verification method as claimed in claim 1, is characterized in that: the content in authority mainly comprises: authorization sequence number, licensing term, system multidate information record, and program 2-D data figure;

Wherein, authorization sequence number is based on system cures information, real-time information, and system time calculates and obtains, and is mainly used in the validity of verification system environment;

Licensing term by the typing of authority maker, for the term of validity of proving program;

System multidate information when system multidate information record essential record authority generates, for the validity of test authority;

Program 2-D data figure is calculated at random by the binary data of authority and obtains, for the integrality of checking routine file, the working time of calculation procedure.

3. off-line soft ware authorization validation verification method as claimed in claim 2, it is characterized in that: the data value of a Stochastic choice unit length, then find the position of this value in program binary code, if the place of this data bit is set to 1, other positions are 0, obtain the 2-D data figure of program, 2-D data figure is carried out according to a certain direction the three-dimensional data space just forming program after arranging.