Establishing privileges through claims of valuable assets
A service accessible by a set of entities may be provided to each entity at a different service level (e.g., with a different set of privileges) based on the privilege level of the entity. However, many users may attempt to perform malicious activities through the service, and may do so with impunity if the penalties of detection are inconsequential. Instead, privilege levels of entities may be established based on the claims of assets having identifiable value. Such claims may be established by submitting an asset identifier to the service, such as proof of a software license identified by the submission of a license key purchased at a substantial cost. The penalties of malicious activities performed by such users may include the invalidation of such asset identifiers. Establishing the privilege levels of respective entities in this manner raises the penalties, and hence the deterrence, of attempted malicious use of the service.
1. A method of providing a service to an entity using a device having a processor, the method comprising:
executing on the processor instructions configured to:
assign to the entity a privilege level for accessing the service;
upon detecting an activity of the entity, adjust the privilege level of the entity based upon the activity; and
upon receiving from the entity a software license identifier verifying an acquisition of a software license by the entity for a software asset that is unrelated to the service:
verify the software license identifier of the acquisition of the software license of the software asset by the entity; and
upon verifying the software license identifier, raise the privilege level of the entity.
2. The method of claim 1 :
the device comprising an alternative software license verification technique; and
the instructions configured to, upon receiving a request from an entity to raise the privilege level of the entity:
present to the entity an asset-based software license verification option and an alternative software license verification option;
upon receiving from the entity a selection of the asset-based software license verification option, request from the entity a software license identifier verifying the acquisition of the software license of the software asset by the entity; and
upon receiving from the entity a selection of the alternative verification option, invoke the alternative software license verification technique.
3. The method of claim 2 , wherein the alternative software license verification technique further comprises:
presenting to the entity an image and a request for the entity to identify at least one symbol present in the image; and
upon receiving from the entity an identification of the symbol in the image, raising the privilege level of the entity.
4. The method of claim 1 :
the device comprising a service provided to respective entities with a service quality associated with the privilege level of the entity; and
the instructions configured to provide the service to the entity at the service quality associated with the privilege level of the entity.
5. The method of claim 1 :
the software license acquired by the entity at software license cost; and
raising the privilege level of the entity comprising: raising the privilege level of the entity proportional to the software license cost of the software license of the software asset.
6. The method of claim 1 :
the software license identifier verifiable by a software licensing service; and
the instructions configured to:
send the software license identifier to the software licensing service, and
receive from the software licensing service a verification of the software license identifier.
7. The method of claim 6 , the instructions configured to:
upon receiving the verification of the software licensing identifier from the software licensing service:
generate a verification ticket representing the verification of the software licensing identifier, and
send the verification ticket to the entity; and
verifying the software license identifier comprising:
receiving from the entity a verification ticket, and
verifying the verification ticket of the entity.
8. The method of claim 7 , the verification ticket comprising a verification ticket restriction.
9. The method of claim 8 , the verification ticket restriction selected from a verification ticket restriction set comprising:
a verification ticket duration restriction;
a verification ticket device restriction;
a verification ticket entity restriction; and
a verification ticket use count restriction.
10. The method of claim 8 , the instructions configured to, upon receiving a verification ticket violating at least one verification ticket restriction, invalidate the verification ticket.
11. The method of claim 8 , the instructions configured to, upon receiving a verification ticket violating at least one verification ticket restriction:
request the software licensing identifier from the entity; and
upon receiving the verification of the software licensing certificate from the software licensing service:
generate an updated verification ticket representing the verification of the software licensing identifier, and
send the updated verification ticket to the entity.
12. The method of claim 8 :
respective verification tickets comprising at least one device identifier of at least one device; and
verifying the asset identifier comprising:
receiving at least one device identifier from a device sending the verification ticket, and
verifying that the verification ticket comprises the at least one device identifier of the device.
13. The method of claim 12 :
at least one device comprising a non-verification ticket representing a withholding of verification of software license identifiers received from the device; and
verifying the asset identifier comprising: upon receiving a non-verification ticket from the device, refusing to verify software license identifiers received from the device.
14. The method of claim 1 , the instructions configured to, upon detecting an abuse of a software license, invalidate the software license identifier of the software license of the software asset.
15. The method of claim 14 :
at least one software license identifier associated with a software license verification count limit;
verifying the software license identifier comprising: upon verifying the software license identifier, increment a software license verification count of the software license identifier; and
detecting an abuse of the software license comprising: incrementing the software license verification count above the software license verification count limit.
16. The method of claim 15 :
respective verifications of a software license identifier associated with a device; and
the instructions configured to, upon incrementing the software license verification count of the software license identifier above the software license verification count limit:
present a list of devices associated with the software license identifier;
upon receiving a selected device to be dissociated with the software license identifier:
dissociate the selected device from the software license identifier, and
decrement the asset verification count of the software license identifier; and
verifying the software license identifier comprising: upon receiving the software license identifier from a selected device that has been dissociated from the software license identifier, refusing to verify the software license identifier.
17. The method of claim 14 , the instructions configured to, upon invalidating a software license identifier of a software license of a software asset:
identify at least one entity associated with the software license identifier, and
reduce the privilege level of the entity.
18. The method of claim 1 , the instructions configured to, upon adjusting the privilege level of an entity to a lower privilege level based upon an activity:
identify at least one software license identifier associated with the entity, and
invalidate the at least one software license identifier.
19. A system configured to provide a service level to an entity on a device having a memory and a processor, the system comprising:
an entity privilege initiator comprising instructions stored in the memory that, when executed on the processor, cause the device to assign to the entity a privilege level for accessing the service;
an entity monitor comprising instructions stored in the memory that, when executed on the processor, cause the device to, upon detecting an activity of the entity, adjust the privilege level of the entity based upon the activity; and
an entity asset verifier comprising instructions stored in the memory that, when executed on the processor, cause the device to, upon receiving from the entity a software license identifier of an acquisition of a software license by the entity for a software asset that is unrelated to the service:
verifying the software license identifier of the acquisition of the software license of the software asset by the entity; and
upon verifying the software license identifier, raising the privilege level of the entity.
20. A memory device storing instructions that, when executed on a processor of a device, cause the device to provide a service to an entity by:
assigning to the entity a privilege level for accessing the service;
upon detecting an activity within the service of the entity, adjusting the privilege level of the entity based upon the activity; and
upon receiving from the entity a software license identifier of an acquisition of a software license by the entity for a software asset that is unrelated to the service:
verifying the software license identifier of the acquisition of the software license of the software asset by the entity; and
upon verifying the software license identifier, raising the privilege level of the entity.