Checking a license for the usage of at least one performance property in an internet-of-things (IoT) device
A method for checking a license for the usage of at least one performance property in an Internet of things device, is provided, having the steps of —ascertaining at least one license condition for the usage of the performance property of the IoT device by at least one attribute contained in a license identifier, —transmitting and storing the license identifier, —checking the license condition by a) generating a pseudo-access which is assigned to the performance property using a pseudo-holding unit and b) checking an authorization for the pseudo-access by checking the attribute of the license identifier using a verification unit, and —activating the at least one performance property if the pseudo-access is confirmed, wherein the license identifier, the pseudo-holding unit, and the verification unit are designed based on a specification for verifiable credentials.
1 . A method for checking a license for using at least one performance feature in an Internet-of-Things (IoT) device on the basis of a license identifier, comprising:
stipulating at least one license condition for using a performance feature of the IoT device by at least one attribute contained in the license identifier,
transmitting and storing the license identifier on the IoT device,
checking the license conditions by
a) generating pseudo-access assigned to the performance feature of the IoT device by a pseudo-holder unit formed on the IoT device, wherein the pseudo-holder unit combines Verifiable Credentials (VC) roles of verifier and holder and internally carries out pseudo-access for enabling performance features, and
b) checking an authorization for the pseudo-access by checking the attributes of the license identifier by a verification unit formed on the IoT device, and
activating the at least one performance feature if the pseudo-access is confirmed as permitted by a positive checking result for the license identifier,
wherein the performance feature includes at least one of: a support for at least one protocol, a higher or lower sampling rate, and an accuracy of sensor data,
wherein the license identifier, the pseudo-holder unit and the verification unit are configured on the basis of a specification for VC of a World Wide Web Consortium (W3C), and the license identifier is based on a structure of the VC, the verification unit corresponds to a modified verifier and the pseudo-holder unit corresponds to a modified holder which is configured as a local unit on the IoT device and provides the verification unit with the license identifier, and
wherein the pseudo-access is generated and checked when starting the IoT device or when starting the performance feature on the IoT device, and/or the pseudo-access is repeatedly generated and checked during operation wherein the pseudo-access operations are repeated during ongoing operation, and a performance feature is activated or enabled at a later time depending on a result or is deactivated or blocked in an event of a negative result during operation.
2 . The method as claimed in claim 1 , wherein the license identifier is stored on the IoT device before or during operation of the IoT device.
3 . The method as claimed in claim 1 , wherein the license identifier is transmitted again to the IoT device during operation of the IoT device and the stored license identifier is replaced or supplemented.
4 . The method as claimed in claim 1 , wherein the IoT device is in the form of a physically independent device or is in the form of a software-based virtual device distributed over one or more hardware platforms.
5 . The method as claimed in claim 1 , wherein the pseudo-holder unit of the IoT device is formed as part of a software application, as part of an execution environment of the software application, or by an operating system of the IoT device.
6 . The method as claimed in claim 1 , wherein the pseudo-holder unit and the verification unit are formed on a common platform or the pseudo-holder unit and the verification unit are formed on different platforms that are locally connected to one another.
7 . The method as claimed in claim 6 , wherein the verification unit checks a who attribute in the license identifier, which indicates an IoT device authorized to activate the performance feature, against a verification platform identifier of the verification platform.
8 . The method as claimed in claim 1 , wherein the verification unit checks a what attribute in the license identifier, which indicates further conditions for activating the performance feature or for activating options of the performance feature.
9 . The method as claimed in claim 1 , wherein the verification unit checks a security attribute in the license identifier, which comprises a cryptographic identifier of an issuer of the license identifier.
10 . The method as claimed in claim 7 , wherein a first license identifier is issued by a license creation unit outside the IoT device and/or a second license identifier is issued by a license creation unit inside the IoT device and is stored on the IoT device, and
the first license identifier specifies properties of the execution environment in which the verification unit is executed,
the second license identifier comprises the properties actually available in the IoT device, and
the first and second license identifiers are checked by the verification unit against the properties of the present execution environment of the verification unit.
11 . The method as claimed in claim 1 , wherein the license identifier is in the form of an anonymous Verifiable Credential (VC), and the verification unit checks only the presence of at least one specific attribute, but not the content of the attribute.
12 . The method as claimed in claim 1 , wherein the performance feature is a software container, and the license identifier is used to manage and control a software container infrastructure, or the performance feature is a software application or a hardware component of the IoT device.
13 . A computer program product comprising a computer readable hardware storage device having computer readable program code stored therein, said program code executable by a processor of a computer system to implement the method as claimed in claim 1 .
14 . An arrangement for checking a license for using at least one performance feature in an Internet-of-Things (IoT) device on the basis of a license identifier, comprising:
a license issuing unit which is configured
to stipulate at least one license condition for using a performance feature of the IoT device by at least one attribute contained in the license identifier,
to transmit the license identifier to the IoT device,
wherein the IoT device is configured
to store the license identifier,
to check the license conditions by
a) generating pseudo-access assigned to the performance feature of the IoT device by a pseudo-holder unit formed on the IoT device, wherein the pseudo-holder unit combines Verifiable Credentials (VC) roles of verifier and holder and internally carries out pseudo-access for enabling performance feature, and
b) checking an authorization for the pseudo-access by checking the attributes of the license identifier by a verification unit formed on the IoT device, and
to activate the at least one performance feature if the pseudo-access is confirmed as permitted by a positive checking result for the license identifier,
wherein the performance feature includes at least one of: a support for at least one protocol, a higher or lower sampling rate, and an accuracy of sensor data, and
wherein the license identifier, the pseudo-holder unit, and the verification unit are configured on the basis of a specification for VC of a World Wide Web Consortium (W3C), and the license identifier is based on a structure of the VC, the verification unit corresponds to a modified verifier and the pseudo-holder unit corresponds to modified holder which is formed as a local unit on the IoT device and provides the verification unit with the license identifier, and
wherein the pseudo-access is generated and checked when starting the IoT device or when starting the performance feature on the IoT device, and/or the pseudo-access is repeatedly generated and checked during operation wherein the pseudo-access operations are repeated during ongoing operation, and a performance feature is activated or enabled at a later time depending on a result or is deactivated or blocked in an event of a negative result during operation.
15 . A computer system for checking a license for using at least one performance feature in an Internet-of-Things (IoT) device on the basis of a license identifier, the system comprising:
a processor; and
a memory storing computer executable instructions that, when executed by the processor, cause the processor to perform the steps of:
stipulating at least one license condition for using the performance feature of the IoT device by at least one attribute contained in the license identifier,
transmitting and storing the license identifier on the IoT device,
checking the license conditions by
a) generating pseudo-access assigned to the performance feature of the IoT device by a pseudo-holder unit formed on the IoT device, wherein the pseudo-holder unit combines Verifiable Credentials (VC) roles of verifier and holder and internally carries out pseudo-access for enabling performance feature, and
b) checking an authorization for the pseudo-access by checking the attributes of the license identifier by a verification unit formed on the IoT device, and
activating the at least one performance feature if the pseudo-access is confirmed as permitted by a positive checking result for the license identifier,
wherein the performance feature includes at least one of: a support for at least one protocol, a higher or lower sampling rate, and an accuracy of sensor data,
wherein the license identifier, the pseudo-holder unit and the verification unit are configured on the basis of a specification for VC (VC) of a World Wide Web Consortium (W3C), and the license identifier is based on a structure of the VC (VC), the verification unit corresponds to a modified verifier and the pseudo-holder unit corresponds to a modified holder which is configured as a local unit on the IoT device and provides the verification unit with the license identifier, and
wherein the pseudo-access is generated and checked when starting the IoT device or when starting the performance feature on the IoT device, and/or the pseudo-access is repeatedly generated and checked during operation wherein the pseudo-access operations are repeated during ongoing operation, and a performance feature is activated or enabled at a later time depending on a result or is deactivated or blocked in an event of a negative result during operation.