View previous topic :: View next topic |
Author |
Message |
markc
Joined: 22 Apr 2008 Posts: 10
|
Posted: Tue Apr 22, 2008 9:30 pm Post subject: just give away keys? |
|
|
Infralution creates a text file with a copy of the license key, and places it on the hard drive - it's not too hard to find. Can't someone just distribute this file to other users, and defeat the licensing? What am i missing? |
|
Back to top |
|
|
Infralution
Joined: 28 Feb 2005 Posts: 5027
|
Posted: Tue Apr 22, 2008 10:16 pm Post subject: |
|
|
Since you must have the license key in the first place to install it - you don't even need to go looking for it on the hard drive before distributing to others. You can only prevent this type of sharing of keys by locking license keys to the PC. However this tecnhique comes with its own share of problems (see Can I generate licenses which are locked to a specific PC?
)
If you are concerned about leaving the license key in its original form on the hard drive then you can override the ReadFromFile and WriteKeyToFile methods to encrypt the key or save it in an alternative location. _________________ Infralution Support |
|
Back to top |
|
|
markc
Joined: 22 Apr 2008 Posts: 10
|
Posted: Tue Apr 22, 2008 10:30 pm Post subject: |
|
|
WHat's the next step then in preventing this? Is it having the application query a license manager to see if the key has already been used? Do you offer this? |
|
Back to top |
|
|
Infralution
Joined: 28 Feb 2005 Posts: 5027
|
Posted: Tue Apr 22, 2008 11:03 pm Post subject: |
|
|
Quote: | What's the next step then in preventing this? Is it having the application query a license manager to see if the key has already been used? Do you offer this? |
This would require you to run a web service to authenticate license keys when they are installed. To prevent the customer simply copying the underlying authenticated license file to another machine you still need to lock the authenticated license to the machine in some way. Also because legitimate users may need to change the machine their software is installed on you cannot just limit the number of authentications to one (or your customers will not be very happy). But a scheme like this would allow you to track license key usage and prevent more blatant abuse.
We are working on something like the above in our next major release. This release is still probably a couple of months away. _________________ Infralution Support |
|
Back to top |
|
|
rocco76
Joined: 28 Mar 2007 Posts: 11
|
Posted: Tue Jun 03, 2008 9:34 am Post subject: |
|
|
I'm trying to implement a custom server based activation system to use with ILS right now, but after reading this post I'm thinking again and I'd like to know more about your implementation and the estimated release date to see if I can drop my project and upgrade to version 4. Thank you. |
|
Back to top |
|
|
Infralution
Joined: 28 Feb 2005 Posts: 5027
|
Posted: Tue Jun 03, 2008 10:32 am Post subject: |
|
|
The release date is not fixed in concrete yet but is likely to be about a month away now ie early July hopefully. The new version will include an Authentication Web Service that authenticates license keys and uses public key encryption to sign a license including both the key and the computer name. This will lock the license key to the computer name (by default) - but there is also the ability to modify this to lock the license to some other characteristic(s) of the computer it is running on.
You will be able to configure the Authentication server to set the maximum number of unique computers that a key can be authenticated on. You generally want to cut your legitimate customers some slack so that if they change their computer name (or whatever you are locking the key to) once or twice they can still install their key. This will prevent wholesale copying of keys within a company. License Tracker will be able to import data from the Authentication Server allowing you to identify customers who may be abusing their license conditions. You will also be able to change the Authentication limits for a given key on the server from License Tracker to either prevent the key being used or extend a given user some more grace. _________________ Infralution Support |
|
Back to top |
|
|
Orgbrat
Joined: 15 Sep 2007 Posts: 15
|
Posted: Sun Jun 15, 2008 6:54 pm Post subject: |
|
|
I am interested in the above functionality. Would you please notify me when you have the above authentication services ready for release. Thanks...
Orgbrat _________________ Steve Graddy MCP, MCPS, MCNPS, MCAD
Orgbrat Consulting ( Microsoft Certified Partner )
orgbrat@orgbrat.com |
|
Back to top |
|
|
Infralution
Joined: 28 Feb 2005 Posts: 5027
|
Posted: Sun Jun 15, 2008 10:47 pm Post subject: |
|
|
We will send out an email to all ILS customers about this when it is released. To esure that you receive emails about new releases see the following post: http://www.infralution.com/phpBB2/viewtopic.php?t=946 _________________ Infralution Support |
|
Back to top |
|
|
Infralution
Joined: 28 Feb 2005 Posts: 5027
|
Posted: Wed Jul 23, 2008 4:38 am Post subject: |
|
|
We are happy to announce the release of Version 4 of ILS. Version 4 includes the new authenticated licensing model. See the Release Notes for more details.
Note that this is a paid upgrade. For a limited time the upgrade price for existing Version 3 customers is just the difference between the full cost for Version 3 ($US90) and the new cost for Version 4 ($US140). Full pricing information is available from www.infralution.com/licensingpurchase.html. _________________ Infralution Support |
|
Back to top |
|
|
rickrat
Joined: 03 Oct 2007 Posts: 11
|
Posted: Sun Jul 27, 2008 12:55 pm Post subject: |
|
|
Infralution wrote: | We are happy to announce the release of Version 4 of ILS. Version 4 includes the new authenticated licensing model. See the Release Notes for more details.
Note that this is a paid upgrade. For a limited time the upgrade price for existing Version 3 customers is just the difference between the full cost for Version 3 ($US90) and the new cost for Version 4 ($US140). Full pricing information is available from www.infralution.com/licensingpurchase.html. |
I started writing an activation add-in for it too, but now that you've released this I've upgraded too.
the link www.infralution.com/licensingpurchase.html don't work. |
|
Back to top |
|
|
|