• 中国计算机学会会刊
  • 中国科技核心期刊
  • 中文核心期刊

J4 ›› 2013, Vol. 35 ›› Issue (4): 59-64.

• 论文 • 上一篇    下一篇

一种面向软件生命周期的授权保护系统设计与实现

欧阳雪,周寰,邓锦洲,任江春   

  1. (国防科学技术大学计算机学院, 湖南 长沙 410073)
  • 收稿日期:2012-05-07 修回日期:2012-07-25 出版日期:2013-04-25 发布日期:2013-04-25

Design and implementation of a software life
cycle oriented authorization and protection system   

OUYANG Xue,ZHOU Huan,DENG Jinzhou,REN Jiangchun   

  1. (School of Computer Science,National University of Defense Technology,Changsha 410073,China)
  • Received:2012-05-07 Revised:2012-07-25 Online:2013-04-25 Published:2013-04-25

摘要:

当今软件行业开发模式由独立开发转向协同开发,销售形式由软件整体销售转向权限控制销售,原有的加密狗、注册码等单项软件保护技术已很难适应当前软件在开发、销售及使用等过程中各环节对产权保护所提出的新需求,软件侵权问题日益严重。针对以上情况,设计了一种面向软件生命周期的新型软件授权保护系统,该系统综合使用UKey技术、身份认证及数字签名技术、证书链和硬件加密技术,并采用了可由开发商自填写的组件功能模板和以组件为基本授权实体的许可证文件技术加以实现。实现表明,系统结构合理,各项功能正确,可以满足软件在开发、销售和使用环节上对安全性的需求。

关键词: 软件生命周期保护, 授权模板, UKey技术, 证书信任链, 租赁销售

Abstract:

Nowadays, the software development model has transformed from independent development to collaborative development, while the selling pattern of software industry has turned into module based way from traditional whole software selling. The existing software protection techniques such as softdog and registration code can no longer meet these new requirements, and the problem of infringement has become more and more severe. Based on this, a software life cycle oriented authorization and protection system was designed. This system synthetically applied the UKey technology, authentication technology, digital signature technology, certificate chain technology and hardwarebased encryption technology. And especially, an authorization model which is customizable to software developers and the license file which takes modules as the basic authorization unit were adopted. The prototype system shows our design is functionally well and reasonable, the security requirements of software in all stages, from developing stage to sale and using, are provided.

Key words: software life cycle protection;authorization model;UKey technology;certificate chain;lease sale model