JP4012771B2 - License management method, license management system, license management program - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to a license for computer software, and more particularly to a license management method, a license management system, and a license management program using a server that manages licenses.
[0002]
[Prior art]
Unauthorized duplication and use of computer software is still occurring at a significant rate today. For this reason, software vendors take various measures to prevent unauthorized copying and use.
[0003]
As countermeasures, a small device is connected to a USB (Universal Serial Bus) and hard protected, or software is distributed on a compact disc (Compact Disc) that has been crafted so that copying is impossible. There is a type using a flexible disk.
[0004]
Recently, a software license service using a network has started. In this case, as a countermeasure against fraud, for example, a server provided by a software vendor is a client computer operating system version number, device ID number, software version number and other client information, and a license key. There is a method of making the client software available by obtaining and combining them through a network.
[0005]
[Problems to be solved by the invention]
However, when using the hard protection and flexible disk mentioned at the beginning, not only does the hardware itself cost, but also because the hardware is a small device, there is a possibility of loss or damage, It may not be easy to use because it may block the USB port. In addition, it is expensive to create a CD that cannot be copied.
[0006]
Moreover, although it is a countermeasure against fraud using a network, according to the recent survey results on the Internet, there is the most tendency to worry about the leakage or misuse of personal information of personal computers including personal information and information unique to users' computers. Therefore, there are many users who are reluctant to provide information even for computers that manage licenses based on information about individual personal computers.
[0007]
In view of such problems, the present invention prevents unauthorized duplication and use without using hardware or crafting a CD, and provides information to a computer that manages licenses based on personal computer information. It is an object of the present invention to provide a license management method, a license management system, and a license management program that can prevent leakage or misuse of personal information or personal information that is unique to a computer even if it is provided.
[0008]
[Means for Solving the Problems]
  The invention according to claim 1 is a license management server for managing software licenses, and a client connected to the license management server via a network.And the client sends the client specific information to the license management server as encrypted irreversible encryption specific information.A license management method in a license management system, wherein the license management server is a clientIncludes more irreversible encryption specific informationWhen the license request is received, the irreversible encryption specific information is registered and the clientBased on the result of the authentication process to authenticate to the clientA licensing step of granting a license;Lossless than clientEncryption specific informationIncludeWhen the license update request signal is received,Whether the irreversible encryption unique information included in the license update request signal matches the irreversible encryption unique information registered in the license management serverA confirmation step to confirmBased on the confirmation result of the confirmation stepclientAllow update toAn update step for transmitting a signal;A return step for deleting the irreversible encryption specific information registered in the license management server when receiving a license return request from the client;And the clientA first recording means and a second recording means, wherein the first and second recording means are provided with client-specific information, a license granted first, and a license grant time at the time of license grant.An initial information recording step for recording;Whether or not newly acquired client specific information matches the client specific information recorded in the first and second recording means when using the software.,Whether the licenses recorded in the first and second recording means respectively match.,Based on whether the software use start time is within a certain time from the license grant timeAn activation determination step for activating the software;An update request step for requesting the license management server to update the license at any time or periodically from the license grant time, and a request for returning the license to the license management server and returning the recorded license and the license grant time. A request step;It is characterized by having.
[0009]
  According to claim 1, while preventing unauthorized duplication and use without using hardware or crafting a CD, and providing information to a computer that manages licenses based on personal computer information, It is possible to provide a license management method that can prevent the leakage or misuse of personal information or unique information that is unique to a computer.
Further, since the license can be returned when the license is no longer needed, it is possible to provide a license management method in which the license is not fixed to a specific computer.
[0010]
In the invention according to claim 2, the license management server further gives the latest update time of the license management server at the time of license grant in the license grant step, and the client in the confirmation update stepUpdate permissionsignalincludeThe latest update time of the license management serverReceiveIn the initial information recording step, the assigned latest update time is recorded as the latest update time which is the license grant time.
[0011]
According to claim 2, it is possible to provide a license management method in which the latest update time of the license management server is assigned to the license.
[0012]
  The invention described in claim 3 is a license management method in a client that receives a license from a license management server that manages a license of software,A first recording unit and a second recording unit, wherein the license management server transmits client-specific information for identifying the client to the license management server as encrypted irreversible encryption-specific information; In the first and second recording means, the client-specific information, the license granted first, and the license grant time at the time of license grantAn initial information recording step for recording;Whether or not newly acquired client specific information matches the client specific information recorded in the first and second recording means when using the software.,Whether or not the licenses recorded in the first and second recording means respectively match.,Based on whether the software use start time is within a certain time from the license grant timeAn activation determination step for activating the software;An update request step for requesting the license management server to update the license arbitrarily or periodically from the license grant time, and requesting the license management server to return the license, and erasing the recorded license and license grant time Return request step,It is characterized by having.
[0013]
According to claim 3, while preventing illegal duplication and use without using hardware or crafting a CD, and providing information to a computer that manages licenses based on personal computer information, It is possible to provide a license management method that can prevent the leakage or misuse of personal information or unique information that is unique to a computer.
[0016]
  Claim4In the described invention, in the activation determination step, the clientBuilt-in clockWhen the software is returned to the past, the software is not activated.
[0017]
  ClaimAccording to 4, it is possible to provide a license management method that does not activate software when there is a tampering such as the time being returned to the past.
[0018]
  In the invention according to claim 5, one of the first and second recording means is a file recorded in a registry.It is characterized by that.
[0019]
  According to claim 5,It is possible to provide a license management method that uses a file or registry as a recording location for licenses, license grant times, and client-specific information.
[0020]
Claim6The invention described inThe update menu displayed on the client that executed the softwareConfirmation update step is optionalExecuted at the timing ofIt is characterized by that.
[0021]
Claim6Since the license can be arbitrarily updated, it is possible to provide a license management method that enables the update process to be performed according to the convenience of the user.
[0022]
  The invention according to claim 7 is a license management method in a license management server for managing client software via a network, and when receiving a license request including the irreversible encryption specific information from the client, A license grant step for registering the irreversible encryption unique information and granting a license to the client based on a result of an authentication process for authenticating the client, and a license update request including the irreversible encryption unique information from the client A confirmation step of confirming whether or not the irreversible encryption unique information included in the license update request signal matches the irreversible encryption unique information registered in the license management server when the signal is received; And the class based on the confirmation result of the confirmation step. An updating step of transmitting an update permission signal to the ant, from the client, upon receiving the return request for the license, return step of erasing the non-reversible encrypting specific information registered in the license management serverAndIt is characterized by having.
[0023]
According to claim 7, while preventing unauthorized duplication and use without using hardware or crafting a CD, even if information is provided to a computer that manages licenses based on personal computer information, It is possible to provide a license management method that can prevent the leakage or misuse of personal information or unique information that is unique to a computer.
Further, since the license can be returned when the license is no longer needed, it is possible to provide a license management method in which the license is not fixed to a specific computer.
[0026]
The invention described in claim 8A license management server for managing software licenses and a client connected to the license management server via a networkAnd the client transmits the client unique information to the license management server as encrypted irreversible encrypted unique information.A license management system, wherein the license management server includes the clientIncluding the irreversible encryption specific informationWhen the license request is received, the irreversible encryption specific information is registered and the client isTo the client based on the result of the authentication process to authenticateA license granting means for granting a license;The irreversible from the clientEncryption specific informationIncludeWhen the license update request signal is received,Whether or not the irreversible encryption unique information included in the license update request signal matches the irreversible encryption unique information registered in the license management serverConfirmation means for confirming,Based on the confirmation result of the confirmation stepThe clientAllow update toUpdate means for transmitting the signal;When the request for returning the license is received from the client, the return is to delete the irreversible encryption specific information registered in the license management server.Means, the client comprising:First recording means and second recording meansWhenThe first and second recording means include the client-specific information, the license granted first, and the license grant time when granting the license.Initial information recording means for recording;Whether or not the newly acquired client unique information matches the client unique information recorded in the first and second recording means when using the software.,Whether or not the licenses recorded in the first and second recording means respectively match.,Based on whether the use start time of the software is within a certain time from the license grant timeActivation determining means for activating the software;Update request for requesting license update to the license management server arbitrarily or periodically from the license grant timeMeans andRequesting the license management server to return the license and deleting the recorded license and license grant timeMeans and,It is characterized by having.
[0027]
Claim 8According to the above, it is possible to prevent unauthorized duplication and use without using hardware or crafting a CD, and even if information is provided to a computer that manages licenses based on personal computer information, personal information or It is possible to provide a license management system that can prevent the leakage and abuse of specific information that is unique to a computer.
[0028]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
[0029]
FIG. 1 shows an overall configuration diagram according to an embodiment of the present invention. As shown in FIG. 1, the license management system in the present embodiment is connected to a license management server 10, a software vendor server (download server) 12, and personal computers 16a, 16b, and 16c of company A. It comprises the Internet 14 and recording media 18a and 18b on which software is recorded.
[0030]
The license management server 10 is a server that manages software licenses. The software vendor server 12 is a server that supplies software to another personal computer through the Internet 14. The personal computers 16a, 16b, and 16c are personal computers installed with software.
[0031]
This installation is performed in advance prior to the use of the software, and the installation method may use the recording media 18a and 18b or the software vendor server 12.
[0032]
Incidentally, in the case of FIG. 1, software is installed from the recording medium 18a in the personal computer 16a, software from the recording medium 18b in the personal computer 16b, and software from the software vendor server 12 in the personal computer 16c.
[0033]
Further, the license management server 10 in FIG. 1 can issue one license for company A, and FIG. 1 shows a situation in which no other personal computer can be used because the license is given to the personal computer 16a. ing.
[0034]
Next, FIG. 2 shows a hardware configuration diagram of a computer such as the license management server 10, the software vendor server 12, or the personal computer 16 described above. Note that the personal computer 16 is an expression used to describe processes common to any of the personal computers 16a, 16b, and 16c.
[0035]
The hardware configuration shown in FIG. 2 includes an input device 22, a display device 23, a drive device 24, a recording medium 25, an auxiliary storage device 26, and a memory device 27 that are connected to each other via a bus B. The arithmetic processing unit 20 and the interface unit 21 are included.
[0036]
The input device 22 includes a keyboard and a mouse operated by a user of the computer system, and is used to input various operation signals to the computer system. The display device 23 displays various windows and data necessary for operating the computer system. The interface device 21 is an interface for connecting a computer system to a network, and includes, for example, a NIC (Network Interface Card) or a modem.
[0037]
A program for operating the computer system is provided by a recording medium 25 such as a CD-ROM or downloaded through a network. The recording medium 25 is set in the drive device 24, and data and programs are installed from the recording medium 25 to the auxiliary storage device 26 via the drive device 24.
[0038]
The auxiliary storage device 26 stores data and programs, and stores necessary files and the like. The memory device 27 reads and stores the program from the auxiliary storage device 26 when the computer system is started. The arithmetic processing unit 20 executes processing in accordance with a program read and stored in the memory device 27.
[0039]
Next, the overall flow in the license management system will be described with reference to FIG. First, in step S101, software is installed in the personal computer 16. Next, in step S102, the personal computer 16 transmits the encryption unique information described later to the license management server 10 to acquire a key from the license management server 10 and set information. This information is set in the file 34 and the registry 34 which is a file for storing information such as various environment settings, driver designations, and application associations. The set information includes PC specific information 36, time information 38, and key information 40. Of these, the PC-specific information includes the personal computer MAC (Media Access Control) address, computer name, processor information, HD (Hard Disk) volume serial number, etc. , And an OS (Operating System) name, version, and generation date and time of a folder in which a software program is installed.
[0040]
The time information 38 includes a plurality of date / time information. These are the server time stamp, the last time indicating the previous license update time, and the PC time stamp. The server time stamp uses the latest update time of the license management server 10. The next key information 40 is composed of a serial number acquired from the license management server 10. The key information 40 is managed by the key BANK 30 of the license management server 10 as shown in the figure.
[0041]
These pieces of information are set as client information together with the server time stamp received together with the “fixed period” that specifies the time interval for confirming update to the server when the license is received. These pieces of information are referred to, updated, or deleted when the software is started and ended as shown in step S103, when the license is updated in step S104, and when the key is returned in step S105.
[0042]
Further, the license management server 10 further includes a software update interval database shown in FIG. 4 and a license management database shown in FIG. The software update interval database is a database in which the license update interval is described for each software. For example, software A indicates that the license must be updated every 10 days.
[0043]
The license management database is a database for managing licenses for each user, and includes a user name, an ID number corresponding to the user name, a password, a software name, a license number, a latest update time, and encryption specific information. The ID number is a user ID number, the password is used for user authentication, and the software name is the name of software to be used. The latest update time represents the latest time when the update was performed. The encrypted unique information is information obtained by encrypting the PC unique information of the personal computer 16, and a detailed description thereof will be given in the following flowchart.
[0044]
The flowchart in FIG. 6 shows processing for obtaining key information and setting information, which is processing corresponding to step S102 in FIG.
[0045]
First, in step S201, the personal computer 16 acquires the PC-specific information described above. Next, in step S202, the personal computer 16 encrypts the PC specific information. This encryption has two purposes. One is to conceal the PC-specific information of the personal computer 16 from the network and the license management server 10. Another object is that the license management server 10 detects that the PC specific information of the personal computer has changed.
[0046]
Due to the concealment of the PC specific information, which is the first purpose, the PC specific information of the personal computer 16 does not leak to the network and the license management server 10 as it is, and users who are concerned about the leak or misuse of the PC specific information can be safe. You can use it with heart. The second purpose is detection of a change in PC-specific information. By this detection, the license management server 10 can distinguish between another personal computer and the personal computer 16, and other licenses that do not have a license. Unauthorized use such as using software on a personal computer can also be prevented. It is also possible to detect that the PC-specific information of the personal computer 16 has been tampered with.
[0047]
As described above, the encryption method here is not limited to a general encryption method, and the original PC unique information cannot be specified from the generated information, and a change in the PC unique information can be detected. Any method can be used. Therefore, the encryption here may encrypt the PC unique information itself, or may generate a hash value (message authenticator) of the PC unique information. Further, since the purpose of encryption is not encryption communication, the personal computer 16 can arbitrarily determine an algorithm for encryption. However, the management company that manages the license management server 10 may provide the encryption program to the personal computer 16 that receives the service in advance. In the following description, the encryption of the PC specific information is the above-described encryption.
[0048]
This is the end of the explanation about encryption, and the flowchart is explained again. In step S203, the personal computer 16 is connected to the key BANK 30 in the license management server 10 as shown in the figure, and the ID (IDentification) and PW (Pass Word) of the software user registered in the license management server 10 in advance. ), Software information that is software information, and encrypted unique information that is encrypted PC unique information are transmitted to the license management server 10.
[0049]
Although the description will be made assuming that the license key is already registered in the license management server, only the number of software licenses to be used in advance by the user may be determined, and may be generated when requested by the user.
[0050]
The license management server 10 that has received these pieces of information performs authentication processing with reference to the key BANK 30 in step S204. If the license management server 10 cannot issue the key as a result of the authentication processing, the license management server 10 transmits the fact to the personal computer 16, and the personal computer 16 obtains that the key cannot be issued in step S206. Impossible display is performed and the process is terminated.
[0051]
In the determination process in step S205, if the key may be issued as a result of the authentication process using the ID, PW, and software information, the license management server 10 determines whether the key has already been issued in step S207. To check. This check is a check of whether or not the latest update time coincides with 00:00:00 of 00:00. If they match, it is issued and the key cannot be issued. Therefore, the fact is transmitted to the personal computer 16, and the personal computer 16 displays an acquisition impossible display indicating that the key cannot be issued in step S 206. To end the process.
[0052]
If the latest update time does not coincide with 00:00:00, 00:00, AD, when the license management server 10 issues a key in step S208, the key BANK30 ( The current time is set as the latest update time (see FIG. 5), and the key and server time stamp are transmitted to the personal computer 16. The received encrypted unique information is registered in the license management database (see FIG. 5).
[0053]
Note that the key return check process in step S207 can be performed even if the license management server 10 does not have the latest update time. In this case, the latest update time in the license management database (see FIG. 5) is also unnecessary.
[0054]
The personal computer 16 that has received the key information and the server time stamp sets the key information for the two locations of the file 32 and the registry 34 in step S209. Next, in step S210, the personal computer 16 sets time information including a server time stamp, a final time, a PC time stamp, and a predetermined period for the file 32 and the registry 34. At this time, the server time stamp received earlier is substituted for the last time in the time information. In step S211, the personal computer 16 sets the program folder generation date and time for the file 32 and the registry 34. Next, in step S212, the personal computer 16 writes PC-specific information into the file 32 and the registry 34, and ends the processing for obtaining key information and setting information.
[0055]
Next, processing at the time of software activation will be described using the flowchart of FIG. First, in step S301, the personal computer 16 acquires its own PC specific information. Next, in step S302, the personal computer 16 encrypts the acquired PC specific information. Thereafter, the data is decrypted and used for comparison, but is omitted. This is a little less secure but may be used without encryption. In step S303, the personal computer 16 checks the PC specific information acquired earlier using the file 32 in which the PC specific information 36 is recorded and the registry 34. As a result, if the total of the PC specific information acquired and the two PC specific information 36 in the file 32 and the registry 34 match, the process proceeds to the next step S304. If they do not match, the personal computer 16 advances the processing to step S313, displays an error message, and ends the processing.
[0056]
When the verification of the PC unique information is completed, the personal computer 16 then verifies the key information using the file 32 and the registry 34 in step S305. As a result, the personal computer 16 proceeds to the next step S307 when the key information includes the two files 32 and the registry 34. If they do not match, the personal computer 16 advances the processing to step S313, displays an error message, and ends the processing.
[0057]
When the verification of the key information is completed, the personal computer 16 next acquires the PC time that is the current date and time information in step S307. The PC time indicates the time of the internal clock of the personal computer 16. In step S308, the personal computer 16 compares the final time recorded in the registry 34 with the PC time. The last time in this case represents the date / time information received from the license management server 10 or the date / time information when the software was last used.
[0058]
As a result of comparing the PC time and the final time, if the PC time is larger than the final time in step S309, the process proceeds to the next step S310. If the PC time is less than or equal to the final time, the current time and the time when the software was last used contradict each other. Therefore, the personal computer 16 advances the process to step S313, displays an error message, and ends the process.
[0059]
Next, in step S310, the personal computer 16 updates the final time of the registry 34 to the previously acquired PC time. In step S <b> 311, the personal computer 16 acquires folder information from the folder generation time, the file 32, and the registry 34. If the three of the folder, file, and registry do not match in the next step S312, the personal computer 16 displays an error message in step S313. If the three match, the personal computer 16 proceeds to step S314. If the value obtained by adding the specified period and the server time stamp is smaller than the PC time that is the current time, the personal computer 16 activates the software in step S317.
[0060]
A specific example of this process will be described. In the above processing, when the server time stamp is, for example, 00:00 on April 1 and the specified period is 5 days, April 6 which is 5 days after 00:00 on April 1 If the PC time is earlier than 0:00 of the day, the software can be used because it is within the specified period.
[0061]
In step S314, if the PC time is past April 7, for example, the specified period has passed, the software cannot be used as it is, so the personal computer 16 updates the license in step S315. Processing (see FIG. 8) is performed.
[0062]
Next, the personal computer 16 branches the process depending on whether or not the response from the license management server 10 by the license update process is a normal return value.
[0063]
If the response from the license management server 10 is a normal return value, the personal computer 16 activates the software in step S318. If the return value in step S316 is not a normal return value, the personal computer 16 advances the process to step S317.
[0064]
The process of step S317 is a process in which the software is started in step S318 until the period β elapses even after the specified period has passed, and is terminated without starting the software after the period β elapses.
[0065]
This is the end of the description when the software is activated. Next, a license update process performed periodically will be described with reference to FIG. In step S401, the personal computer 16 acquires its own PC-specific information. Next, in step S402, the personal computer 16 encrypts the acquired PC specific information.
[0066]
Next, if it is possible to connect to the key BANK 30 in the license management server 10 in step S403, the personal computer 16 proceeds to step S405. If not, the personal computer 16 displays the key BANK connection disabled display in step S404 and ends the processing. .
[0067]
In step S <b> 405, the personal computer 16 transmits the software user ID, PW, software information, key, and encryption specific information to the license management server 10.
[0068]
In step S406, the license management server 10 performs an authentication process with reference to the key BANK30. If the ID, PW, and key are the same in step S407, the license management server 10 proceeds to step S409. If they are different, the license management server 10 transmits that fact to the personal computer 16, and the personal computer 16 transmits the information in step S408. , A non-updatable display indicating that the key cannot be updated is performed, and the process ends.
[0069]
Next, in step S407, the license management server 10 checks whether the key has not been returned. This check is a check of whether or not the previous update time coincides with 00:00:00 of 00:00. If they match, it is returned and the key cannot be updated. Therefore, the fact is transmitted to the personal computer 16, and the personal computer 16 displays a non-updatable display indicating that the key cannot be updated in step S408. To end the process.
[0070]
If the previous update time does not coincide with 00:00:00, 00:00, AD, then, in step S408, the license management server 10 determines that the received encryption specific information is the license management database (FIG. 5). If it does not match the encryption specific information registered in the reference), since the license management server 10 cannot update the key, the license management server 10 transmits that fact to the personal computer 16, and the personal computer 16 updates the key in step S406. Is displayed indicating that updating cannot be performed, and the process ends.
[0071]
Note that the key return check process in step S407 can be performed even if the license management server 10 does not have the latest update time. In this case, the latest update time of the license management database (see FIG. 5) is also unnecessary.
[0072]
Next, in step S410, if the license management server 10 determines that the received encrypted unique information is the same as the registered encrypted unique information and is correct, the license management server 10 holds the license in step S410. Perform update processing. In this update process, a process for setting the current time to the previous update time of the corresponding key of the key BANK is performed, and the fact that the personal computer 16 has updated the key is written to the key BANK 30, and A server timestamp is sent.
[0073]
In step S412, the personal computer 16 that has received the server time stamp sets time information including the server time stamp, the last time, and the PC time stamp in the registry 34 and the file 32, and ends the process.
[0074]
As described with reference to FIG. 7, this update process is automatically performed when the specified period has passed when the software is started. However, if the user wants to update even when the specified period has not elapsed, the execution of the software is performed. It can also be updated by selecting an update menu 41 provided in the software shown in FIG. 10 on the middle screen.
[0075]
Processing when the user selects the update menu 41 will be described with reference to the flowchart of FIG. In step S601, the personal computer 16 detects that the license update menu is selected by the user. Next, in step S602, the personal computer 16 executes a license update process. If the license update process ends normally, the personal computer 16 ends the update process by branching in step S603. If the license update process ends abnormally, the personal computer 16 proceeds from step S603 to step S604, displays a warning that the update process ends abnormally, and ends the update process.
[0076]
As described above, since the user can arbitrarily perform the update process, for example, when the license cannot be updated due to a business trip during the designated period, the license can be updated in advance. Become.
[0077]
Next, the license return process will be described with reference to the flowchart of FIG. In step S501, the personal computer 16 acquires its own PC unique information. Next, in step S502, the personal computer 16 encrypts the acquired PC unique information.
[0078]
Then, in step S503, the personal computer 16 connects to the key BANK 30 in the license management server 10 as shown in the figure, and receives the software user ID, PW, software information, key, and encryption specific information. 10 to send.
[0079]
In step S504, the connected license management server 10 refers to the key BANK 30 and performs an authentication process. If the ID, PW, and software information are the same in step S505, the license management server 10 proceeds to step S507. If they are different, the license management server 10 transmits the message to the personal computer 16. In step S506, the personal computer 16 sends the information. , A non-returnable display indicating that the key cannot be returned is performed, and the process is terminated.
[0080]
Next, in step S507, the license management server 10 checks whether the key has already been returned. This check is a check of whether or not the previous update time coincides with 00:00:00 of 00:00. If they match, the key has already been returned, and the key cannot be returned. Therefore, the personal computer 16 sends a message to that effect, and the personal computer 16 returns that the key cannot be returned in step S506. Impossible display is performed and the process is terminated. In addition, after performing the non-returnable display, you may progress to S510.
[0081]
If it has not been returned, the license management server 10 advances the processing to step S508. If the received encrypted unique information is different from the encrypted unique information registered in the license management database (see FIG. 5), the key cannot be returned. In step S506, a non-returnable display indicating that the key cannot be converted is displayed, and the process ends. In addition, after performing the non-returnable display, you may progress to step S510.
[0082]
Note that the key return check process in step S507 is possible even if the license management server 10 does not have the latest update time. In this case, the latest update time of the license management database (see FIG. 5) is also unnecessary.
[0083]
If the received encrypted unique information is the same as the registered encrypted unique information and is correct, in step S509, the license management server 10 performs key return processing. In this key return process, the latest update time corresponding to the license management database (see FIG. 5) is set to 00:00 on 00th 00th of the year 2000, and the PC 16 returns the key to the key BANK30. Is written, the registration unique information is cleared, and the confirmation of authentication is transmitted to the personal computer 16.
[0084]
The personal computer 16 deletes the key information for the file 32 and the registry 34 in step S510. Next, the personal computer 16 deletes the time information from the registry 34 in step S511. In step S512, the personal computer 16 deletes the program folder creation date and time for the file 32 and the registry 34. Next, in step S513, the personal computer 16 deletes the PC-specific information from the file 32 and the registry 34, and ends the key information return process.
[0085]
Since the license can be returned in this way, it is possible to share the license among the personal computers possessed by a plurality of persons. For example, if two people share one license, when one person has finished using the license and returned the license, the remaining one can run the software on their computer with the returned license. Become
In addition, even if one person is traveling, the license used on his / her desktop personal computer is returned to the license management server 10 for a business trip, and a new license is returned to the laptop for business trip. The license can be used flexibly.
[0086]
The unique information may be any information that can identify a personal computer regardless of the above. After a certain period, the latest update time necessary for confirming the license from the personal computer, and the certain period may not be recorded on the server, but may be retained on the personal computer side. It is not necessary to have a server for a specified period.
[0087]
Further, in the above embodiment, the process of writing to the file or registry is slightly less secure, but it is not limited to writing to two locations of the file or registry, and one of them may be used.
[0088]
Furthermore, although the example in which the license issuance management is performed only at the latest update time on the server, the license management confirmation may be clarified by separately having a license management flag for managing the license issuance.
[0089]
【The invention's effect】
As described above, it is possible to prevent unauthorized duplication or use without using hardware or crafting a CD, and to provide information to a computer that manages licenses based on personal computer information. It is possible to obtain a license management method and a license management system that can prevent leakage or misuse of information or unique information that is unique to a computer.
[Brief description of the drawings]
FIG. 1 is an overall configuration diagram in an embodiment of the present invention.
FIG. 2 is a hardware configuration diagram of a computer.
FIG. 3 is a flowchart showing an overall processing flow;
FIG. 4 is a diagram showing an update interval database for each software.
FIG. 5 is a diagram showing a license management database.
FIG. 6 is a flowchart showing a key acquisition process and an information setting process.
FIG. 7 is a flowchart showing processing at the time of software activation.
FIG. 8 is a flowchart showing processing upon license update.
FIG. 9 is a flowchart showing a process for returning a license.
FIG. 10 is a diagram showing an update menu displayed on software.
FIG. 11 is a flowchart showing an update process by an update menu.
[Explanation of symbols]
10 ... License management server
12 ... Software vendor server
14 ... Internet
16, 16a, 16b, 16c ... PC
18a, 18b ... Recording medium
20 ... arithmetic processing unit
21 ... Interface device
22 ... Input device
23 ... Display device
24 ... Drive device
25. Recording medium
26. Auxiliary storage device
27 ... Memory device
30 ... Key BANK
32 ... File
34 ... Registry
36 ... PC-specific information
38… Time information
40 ... Key information
41 ... Update menu

Claims (9)

A license management server that manages a license of the software; and a client that is connected to the license management server via a network, the client managing the client specific information as encrypted irreversible encryption specific information. A license management method in a license management system for transmitting to
The license management server
When the license request including the irreversible encryption unique information is received from the client, the irreversible encryption unique information is registered, and a license is granted to the client based on a result of an authentication process for authenticating the client. Licensing step,
When the license update request signal including the irreversible encryption specific information is received from the client, the irreversible encryption specific information included in the license update request signal is registered in the license management server. A confirmation step for confirming whether or not the encrypted unique information matches,
An update step of transmitting an update permission signal to the client based on the confirmation result of the confirmation step;
A return step of erasing the irreversible encryption specific information registered in the license management server when the license return request is received from the client;
The client
Having a first recording means and a second recording means,
An initial information recording step for recording the client-specific information, the license granted first, and the license grant time at the time of granting, in the first and second recording means;
Whether the client-specific information newly acquired when the software is used matches the client-specific information recorded in the first and second recording means, and the first and second recording means Starting determination step of starting the software based on whether or not the licenses recorded in each of the licenses match, and whether or not the use start time of the software is within a certain time from the license grant time;
An update requesting step for requesting the license management server to update the license arbitrarily or periodically from the license grant time;
Requesting the license management server to return a license, and a request to return to delete the recorded license and license grant time;
A license management method comprising: The license management server
In the license granting step, further granting the latest update time of the license management server at the time of license granting,
The client
In the confirmation update step, the latest update time of the license management server included in the update permission signal is received,
In the initial information recording step, the assigned latest update time is recorded as a latest update time which is a license grant time.
The license management method according to claim 1. A license management method in a client that receives a license from a license management server that manages a software license,
Having a first recording means and a second recording means,
Transmitting the client specific information for identifying the client by the license management server to the license management server as encrypted irreversible encryption specific information;
An initial information recording step for recording the client-specific information, the license granted first, and the license grant time at the time of granting, in the first and second recording means;
Whether the client-specific information newly acquired when the software is used matches the client-specific information recorded in the first and second recording means, and the first and second recording means Starting determination step of starting the software based on whether or not the licenses recorded in each of the licenses match, and whether or not the use start time of the software is within a certain time from the license grant time;
An update requesting step for requesting the license management server to update the license arbitrarily or periodically from the license grant time;
Requesting the license management server to return a license, and a request to return to delete the recorded license and license grant time;
A license management method comprising:   4. The license management method according to claim 3, wherein, in the activation determination step, the software is not activated when the internal clock of the client is returned to the past. One of the first and second recording means is a registry.
The license management method according to claim 3. By the update menu displayed on the client that executed the software,
The confirmation update step is executed at an arbitrary timing.
The license management method according to claim 3. A license management method in a license management server for managing client software via a network,
When the license request including the irreversible encryption unique information is received from the client, the irreversible encryption unique information is registered, and a license is granted to the client based on a result of an authentication process for authenticating the client. Licensing step,
When the license update request signal including the irreversible encryption specific information is received from the client, the irreversible encryption specific information included in the license update request signal is registered in the license management server. A confirmation step for confirming whether or not the encrypted unique information matches,
An update step of transmitting an update permission signal to the client based on the confirmation result of the confirmation step;
A return step of erasing the irreversible encryption specific information registered in the license management server when the license return request is received from the client ;
A license management method comprising: A license management server that manages a license of the software; and a client that is connected to the license management server via a network, the client managing the client specific information as encrypted irreversible encryption specific information. A license management system for sending to
The license management server
When the license request including the irreversible encryption unique information is received from the client, the irreversible encryption unique information is registered, and a license is granted to the client based on a result of an authentication process for authenticating the client. Licensing means;
When the license update request signal including the irreversible encryption specific information is received from the client, the irreversible encryption specific information included in the license update request signal is registered in the license management server. A confirmation means for confirming whether or not the encrypted unique information matches,
Updating means for transmitting an update permission signal to the client based on the confirmation result of the confirmation step;
A return means for erasing the irreversible encryption specific information registered in the license management server when the license return request is received from the client;
The client
A first recording means and a second recording means;
Initial information recording means for recording the client-specific information, the first granted license, and the license grant time at the time of granting in the first and second recording means;
Whether the client-specific information newly acquired when the software is used matches the client-specific information recorded in the first and second recording means, and the first and second recording means Activation determination means for activating the software based on whether or not the licenses recorded in each match, and whether or not the use start time of the software is within a certain time from the license grant time;
Update request means for requesting license update to the license management server arbitrarily or periodically from the license grant time;
Requesting the license management server to return the license, and a request for returning to erase the recorded license and the license grant time;
A license management system comprising: A computer-readable program executed by a client that receives a license from a license management server that manages software licenses.
On the computer,
Transmitting the client specific information for identifying the client by the license management server to the license management server as encrypted irreversible encryption specific information;
An initial information recording step for recording the client-specific information, the license granted first, and the license grant time at the time of granting in the first and second recording means;
Whether the client-specific information newly acquired when the software is used matches the client-specific information recorded in the first and second recording means, and the first and second recording means Starting determination step of starting the software based on whether or not the licenses recorded in each of the licenses match, and whether or not the use start time of the software is within a certain time from the license grant time;
An update requesting step for requesting the license management server to update the license arbitrarily or periodically from the license grant time;
Requesting the license management server to return a license, and a request to return to delete the recorded license and license grant time;
A program characterized by having executed.

Images