Method for synchronous encryption between a client and a licensing agent

Abstract

A licensing system is disclosed for performing synchronous encryption with a client over an IP-compliant network. In disclosed embodiments, the system includes a licensing agent configured to pass a data structure unencrypted in an initial communication between the licensing agent/client pair and pass a first key to said client responsive to an initial communication. The licensing agent then receives the data structure from the client having designated fields encrypted according to the first key. The licensing agent then sends a second key to the client for use in subsequent communications.

1 . A method for synchronous encryption between a client and a licensing agent comprising: 
 establishing a connection between a licensing agent/client pair over an IP-compliant network;    passing a data structure unencrypted in an initial communication between the licensing agent/client pair, the licensing agent passing a first key to said client responsive to the initial communication;    resending, by said client, said data structure having designated fields of said data structure encrypted according to said first key; and    sending, by said license agent, a second key to said client for use in subsequent communications.    
   
   
       2 . The method of  claim 1 , wherein said client and licensing agent maintain encryption synchronization by supplying the same key to their respective encryption engines.  
   
   
       3 . The method of  claim 2 , the key is a random number generated by an agent.  
   
   
       4 . The method of  claim 3 , wherein the encrypted fields of the data structure comprise a license authorization identification.  
   
   
       5 . The method of  claim 4 , wherein the encrypted fields of the data structure comprise proprietary data required for license validation.  
   
   
       6 . The method of  claim 5 , wherein at least one of an application name, feature name, hardware identifier, and a licensing system version number are left unencoded.  
   
   
       7 . The method of  claim 2 , further comprising the act of reverting back to the most recent encryption key.  
   
   
       8 . The method of  claim 7 , wherein unencrypted fields of said data structure are used to determine the most recent key.  
   
   
       9 . The method of  claim 8 , further comprising the act of returning said client to an initial message state in the event of a lack of synchronization in keys between said licensing agent/client pair.  
   
   
       10 . An apparatus for synchronizing encryption between a client and a licensing agent comprising: 
 means for establishing a connection between a licensing agent/client pair over an IP-compliant network;    means for passing a data structure unencrypted in an initial communication between the licensing agent/client pair;    means for passing a first key to said client responsive to the initial communication;    means for resending said data structure having designated fields of said data structure encrypted according to said first key; and    means for sending a second key to said client for use in subsequent communications.    
   
   
       11 . The apparatus of  claim 10 , further comprising means for maintaining encryption synchronization by supplying the same key to their respective encryption engines.  
   
   
       12 . The apparatus of  claim 11 , the key is a random number generated by an agent.  
   
   
       13 . The apparatus of  claim 12 , wherein the encrypted fields of the data structure comprise a license authorization identification.  
   
   
       14 . The apparatus of  claim 13 , wherein the encrypted fields of the data structure comprise proprietary data required for license validation.  
   
   
       15 . The apparatus of  claim 14 , wherein at least one of an application name, feature name, hardware identifier, and a licensing system version number are left unencoded.  
   
   
       16 . The apparatus of  claim 11  further comprising means for reverting back to the most recent encryption key.  
   
   
       17 . The apparatus of  claim 16 , wherein unencrypted fields of said data structure are used to determine the most recent key.  
   
   
       18 . The apparatus of  claim 17 , further comprising means for returning said client to an initial message state in the event of a lack of synchronization in keys between said licensing agent/client pair.  
   
   
       19 . A licensing system for performing synchronous encryption with a client over an IP-compliant network comprising: 
 a licensing agent configured to:    pass a data structure unencrypted in an initial communication between the licensing agent/client pair;    pass a first key to said client responsive to the initial communication;    receive said data structure from the client having designated fields of said data structure encrypted according to said first key; and    send a second key to said client for use in subsequent communications.    
   
   
       20 . The system of  claim 19 , wherein said client and licensing agent maintain encryption synchronization by supplying the same key to their respective encryption engines.  
   
   
       21 . The system of  claim 20 , the key is a random number generated by an agent.  
   
   
       22 . The system of  claim 21 , wherein the encrypted fields of the data structure comprise a license authorization identification.  
   
   
       23 . The system of  claim 22 , wherein the encrypted fields of the data structure comprise proprietary data required for license validation.  
   
   
       24 . The system of  claim 23 , wherein at least one of an application name, feature name, hardware identifier, and a licensing system version number are left unencoded.  
   
   
       25 . The system of  claim 20 , further comprising the act of reverting back to the most recent encryption key.  
   
   
       26 . The system of  claim 25 , wherein unencrypted fields of said data structure are used to determine the most recent key.  
   
   
       27 . The system of  claim 26 , further comprising the act of returning said client to an initial message state in the event of a lack of synchronization in keys between said licensing agent/client pair.  
   
   
       28 . A computer readable device for causing a computer to perform a method for synchronous encryption between a client and a licensing agent, the method comprising: 
 establishing a connection between a licensing agent/client pair over an IP-compliant network;    passing a data structure unencrypted in an initial communication between the licensing agent/client pair, the licensing agent passing a first key to said client responsive to the initial communication;    resending, by said client, said data structure having designated fields of said data structure encrypted according to said first key; and    sending, by said license agent, a second key to said client for use in subsequent communications.    
   
   
       29 . The device of  claim 28 , wherein said client and licensing agent maintain encryption synchronization by supplying the same key to their respective encryption engines.  
   
   
       30 . The device of  claim 29 , the key is a random number generated by an agent.  
   
   
       31 . The device of  claim 30 , wherein the encrypted fields of the data structure comprise a license authorization identification.  
   
   
       32 . The device of  claim 31 , wherein the encrypted fields of the data structure comprise proprietary data required for license validation.  
   
   
       33 . The device of  claim 32 , wherein at least one of an application name, feature name, hardware identifier, and a licensing system version number are left unencoded.  
   
   
       34 . The device of  claim 29 , further comprising the act of reverting back to the most recent encryption key.  
   
   
       35 . The device of  claim 34 , wherein unencrypted fields of said data structure are used to determine the most recent key.  
   
   
       36 . The device of  claim 35  further comprising the act of returning said client to an initial message state in the event of a lack of synchronization in keys between said licensing agent/client pair.