Patent Application

App. No. 13/373,463

Abstract

Claims (51)

1 . A computer-implemented method for activating an unauthorized software program in a virtualization environment, comprising:

installing a software program on a computer;

obtaining a valid license to activate the software program;

performing a cloning operation on the software program;

generating at least one other instance of the software program during the cloning operation; and

obtaining the valid license to activate the at least one other instance of the software program.

2 . The method of claim 1 , further comprising:

performing a validation operation on the at least one other instance; and

authorizing an activation of the at least one other instance with the copy of the valid license in response to performing the validation operation.

3 . The method of claim 1 , wherein the valid license includes a license token.

4 . The method of claim 1 , further comprising:

positioning the at least one other instance of the software program on a different physical machine than the computer.

5 . The method of claim 4 , wherein the computer and the different physical machine are connected to different local area networks.

6 . The method of claim 1 , wherein the computer includes a plurality of virtual machines and the at least one other instance is at the virtual machine.

7 . The method of claim 1 , further comprising:

providing a firewall to facilitate a communication between the computer and a licensing server;

controlling at the firewall a rate of license validation requests from the at least one instance to the licensing server; and

reducing the rate of license validation requests to less than a threshold value.

8 . The method of claim 7 , wherein the threshold value is determined according to an anticipated rate of license validation requests.

9 . The method of claim 1 , further comprising:

controlling at the firewall one or more channels to output communications received from the computer to a licensing server; and

opening a channel of the one or more channels for a period of time to output a communication expected to be received by the licensing server during the period of time and to reduce a rate of communications from the computer to the licensing server to less than a threshold value.

10 . The method of claim 1 , wherein the valid license includes a cryptographically unique license token comprising a palindrome or other character string.

11 . The method of claim 10 , wherein the license is validated by subjecting the license token to an internal consistency check.

12 . The method of claim 1 , further comprising:

outputting a license validation request from the activated software program;

creating the at least one other instance of the software program after outputting the license validation request;

receiving by the at least one other instance of the software program a new token;

configuring the at least one other instance of the software program to have a sync time of 0; and

modifying the at least one other instance of the software program having the new token with a specific configuration.

13 . A computer-implemented method for detecting software program cloning fraud, comprising:

outputting at least one license validation request from a cloned software program to a licensing server, the cloned software program having a license;

monitoring a rate of license validation requests;

comparing the rate of license validation requests with a threshold rate value; and

determining that the cloned software program is unauthorized in response to the comparison establishing that the rate of license validation requests exceeds the threshold rate value.

14 . The method of claim 13 , wherein outputting at least one license validation request comprises outputting a license token to the licensing server and wherein determining that the cloned software is unauthorized comprises determining that the license token is invalid.

15 . The method of claim 13 , further comprising:

implementing a sync expiry parameter for the license of the cloned software program, the sync expiry parameter including a predefined sync expiry period during which the licensing server expects to receive a communication from the cloned software program; and

preventing access to the licensing server from being blocked at a firewall.

16 . The method of claim 12 , further comprising:

receiving by the licensing server one or more first license validation requests from one or more cloned software programs;

generating a validation token in response to a received license validation request;

authorizing a first cloned program in response to receipt by the licensing server a second license validation request that includes data related to the validation token; and

identifying a second cloned program as an unauthorized cloned instance in response to receipt by the licensing server a third license validation request that is devoid of data related to the validation token.

17 . The method of claim 16 , wherein a validation token is provided by the licensing server in response to each first license validation request.

18 . The method of claim 16 , further comprising outputting by the second cloned program an older token with the third license validation request.

19 . A system for detecting software program cloning fraud, comprising:

a computer server having at least one instance of a licensed virtualized application; and

a cloning detection module that monitors a rate of license validation requests output from the computer server, the cloning detection module having a comparator that compares the rate of license validation requests with a threshold rate value, the cloning detection module determining that the cloned software program is unauthorized in response to the comparison establishing that the rate of license validation requests exceeds the threshold rate value.

20 . The system of claim 19 , further comprising a firewall that controls a rate of license validation requests from the at least one instance to the licensing server; and

reducing the rate of license validation requests to less than a threshold value.

Assignments (9)