IP Library › Granted Patent US 10,015,143
Granted Patent B1
US 10,015,143 · App. 14/732,476 · Granted Jul 3, 2018

Methods for securing one or more license entitlement grants and devices thereof

Inventors: Jc Ferguson (Harvard, MA); Bruce L. Donohue (Seattle, WA)
Assignee: F5 Networks, Inc.
H04L63/0428H04L9/14H04L9/3247H04L2209/24H04L2209/72
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,015,143
App. No.
14/732,476
Granted
Jul 3, 2018
Kind
B1
Abstract

Methods, non-transitory computer readable media and application management apparatuses, and application management systems that secure one or more entitlement grants includes transmitting a registration license request encrypted with a first public key to a license server. The registration license request comprises a registration identifier and a second public key. A registration license response is received from the license server. The registration license response comprises one or more license entitlement grants, the second public key, and a first secure signature encrypted with a first private key. The one or more license entitlement grants are authenticated when the first decrypted secure signature matches the first check signature.

Claims (58)

1. A method for securing one or more entitlement grants, the method comprising:

transmitting, by an application management computing device, a registration license request encrypted with a first public key to a license server, the registration license request comprising a registration identifier and a second public key;

receiving, by the application management computing device, a registration license response from the license server, the registration license response comprising one or more license entitlement grants, the second public key, and a first secure signature encrypted with a first private key, the first secure signature is based on at least the one or more license entitlement grants;

generating, by the application management computing device, a first check signature based on at least the one or more license entitlement grants and the second public key;

decrypting, by the application management computing device, the first encrypted secure signature with the first public key to obtain the first decrypted secure signature; and

authenticating and proving integrity, by the application management computing device, of the one or more license entitlement grants when the first decrypted secure signature matches the first check signature.

2. The method of claim 1 wherein the first secure signature and the first check signature are each further based on the second public key and are each a hash sum of at least the one or more license entitlement grants and the second public key.

3. The method of claim 1 further comprising adding, by the application management computing device, a dossier of one or more authorized client devices to a supplemented license response.

4. The method of claim 3 further comprising:

generating, by the application management computing device, a second signature based on at least the one or more license entitlement grants and the dossier;

encrypting, by the application management computing device, the second signature with a second private key; and

adding, by the application management computing device, the second signature to the supplemental license response.

5. The method of claim 4 wherein the generating the second signature is further based on the second public key and the first check signature.

6. The method of claim 4 further comprising transmitting, by the application management computing device, the supplemental license response in response to an initial license request with the registration identifier.

7. An application management computing apparatus, comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:

transmit a registration license request encrypted with a first public key to a license server, the registration license request comprising a registration identifier and a second public key;

receive a registration license response from the license server, the registration license response comprising one or more license entitlement grants, the second public key, and a first secure signature encrypted with a first private key, the first secure signature is based on at least the one or more license entitlement grants;

generate a first check signature based on at least the one or more license entitlement grants and the second public key;

decrypt the first encrypted secure signature with the first public key to obtain the first decrypted secure signature; and

authenticate and provide integrity, by the application management computing device, of the one or more license entitlement grants when the first decrypted secure signature matches the first check signature.

8. The apparatus of claim 7 wherein the first secure signature and the first check signature are each further based on the second public key and are each a hash sum of at least the one or more license entitlement grants and the second public key.

9. The apparatus of claim 7 wherein the one or more processors are further configured to be capable of executing the stored programmed instructions to add a dossier of one or more authorized client devices to a supplemented license response.

10. The apparatus of claim 9 wherein the one or more processors are further configured to be capable of executing the stored programmed instructions to:

generate a second signature based on at least the one or more license entitlement grants and the dossier;

encrypt the second signature with a second private key; and

add the second signature to the supplemental license response.

11. The apparatus of claim 10 wherein the generating the second signature is further based on the second public key and the first check signature.

12. The apparatus of claim 10 wherein the one or more processors are further configured to be capable of executing the stored programmed instructions to transmit the supplemental license response in response to an initial license request with the registration identifier.

13. A non-transitory computer readable medium having stored thereon instructions for securing one or more entitlement grants comprising machine executable code which when executed by one or more processors, causes the one or more processors to:

transmit a registration license request encrypted with a first public key to a license server, the registration license request comprising a registration identifier and a second public key;

receive a registration license response from the license server, the registration license response comprising one or more license entitlement grants, the second public key, and a first secure signature encrypted with a first private key, the first secure signature is based on at least the one or more license entitlement grants;

generate a first check signature based on at least the one or more license entitlement grants and the second public key;

decrypt the first encrypted secure signature with the first public key to obtain the first decrypted secure signature; and

authenticate and provide integrity of the one or more license entitlement grants when the first decrypted secure signature matches the first check signature.

14. The medium of claim 13 wherein the first secure signature and the first check signature are each further based on the second public key and are each a hash sum of at least the one or more license entitlement grants and the second public key.

15. The medium of claim 13 wherein the executable code when executed by the one or more processors further causes the one or more processors to:

add a dossier of one or more authorized client devices to a supplemented license response.

16. The medium of claim 15 wherein the executable code when executed by the one or more processors further causes the one or more processors to:

generate a second signature based on at least the one or more license entitlement grants and the dossier;

encrypt the second signature with a second private key; and

add the second signature to the supplemental license response.

17. The medium of claim 16 wherein the generating the second signature is further based on the second public key and the first check signature.

18. The medium of claim 16 wherein the executable code when executed by the one or more processors further causes the one or more processors to:

transmit the supplemental license response in response to an initial license request with the registration identifier.

19. An application management system, comprising one or more application management apparatuses, client devices, or server devices, the application management system comprising memory comprising programmed instructions stored thereon and one or more processors configured to be capable of executing the stored programmed instructions to:

transmit a registration license request encrypted with a first public key to a license server, the registration license request comprising a registration identifier and a second public key;

receive a registration license response from the license server, the registration license response comprising one or more license entitlement grants, the second public key, and a first secure signature encrypted with a first private key, the first secure signature is based on at least the one or more license entitlement grants;

generate a first check signature based on at least the one or more license entitlement grants and the second public key;

decrypt the first encrypted secure signature with the first public key to obtain the first decrypted secure signature; and

authenticate and proving integrity, by the application management computing device, of the one or more license entitlement grants when the first decrypted secure signature matches the first check signature.

20. The system of claim 19 wherein the first secure signature and the first check signature are each further based on the second public key and are each a hash sum of at least the one or more license entitlement grants and the second public key.

21. The system of claim 19 wherein the one or more processors are further configured to be capable of executing the stored programmed instructions to add a dossier of one or more authorized client devices to a supplemented license response.

22. The system of claim 21 wherein the one or more processors are further configured to be capable of executing the stored programmed instructions to

generate a second signature based on at least the one or more license entitlement grants and the dossier;

encrypt the second signature with a second private key; and

add the second signature to the supplemental license response.

23. The system of claim 22 wherein the generating the second signature is further based on the second public key and the first check signature.

24. The system of claim 22 wherein the one or more processors are further configured to be capable of executing the stored programmed instructions to transmit the supplemental license response in response to an initial license request with the registration identifier.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Dec 16, 2015
From: FERGUSON, JC; DONOHUE, BRUCE L.
To: F5 NETWORKS, INC.
Reel/Frame 037305/0152 →
Continuity (1)
Provisional Application 62008406 · Jun 5, 2014
Cited By (1)
US 12,250,326