Questions tagged [license-enforcement]
License enforcement the application of an access control policy on code, restricting the environments in which it may be executed.
47 questions
0
votes
1
answer
1k
views
How to license an offline software that automatically expired in the given amount of time? [duplicate]
Suppose I have a software which I sell to customer to use. I want to include a license that will be expired in let's say 1 year, so that customer need to renew their package.
I want to prevent the ...
0
votes
0
answers
119
views
Usage of HMACs to verify the licensing during production
We have a production that uses our software (put on a chip) and a requirement that we need to limit the amount of chips produced for each customer (so they need to buy a license) - so they can't ...
0
votes
0
answers
28
views
Is using free product key or license key safe [duplicate]
I have installed VMWare Workstation Pro from the official website. Now after the trial version has ended, I have searched for free products key on the internet. If I use these product keys, will it be ...
2
votes
1
answer
2k
views
Manufacturer-assigned hard-disk serial number as licensing ID
I'm deploying software that is licensed based on uniquely identifiable computer characteristics. I am wondering about the Manufacturer-assigned serial number of an internal fixed hard-disk.
To be ...
0
votes
2
answers
1k
views
Protect a software in offline envirement
These days I intensively read maybe all posts and topics based on software security, but I couldn't find any solution that would be acceptable for me (if there are any of them matching my requirements)...
0
votes
1
answer
227
views
How to prevent Source code excessive usage and redistribution?
We sell our code to a company that they can run our code 100 times a month. We need to do a few things before giving the code to the company.
Hide our logic (we can hide our logic by code obfuscation)...
2
votes
0
answers
562
views
DRM implementation for offline licensing
I am improving one of the DRMs that I'm using for my software, and I have a few questions about how to best implement transferable licenses for offline computers. But first, a disclaimer - I am very ...
1
vote
4
answers
239
views
Untouchable local server
We have a software that needs a connection to our servers for license management purposes. Now we have a new customer who wants to use our software on systems that don't have access to internet. So I ...
0
votes
1
answer
532
views
Server encryption, client decryption, without the client having the ability to encrypt?
Is it possible to encrypt data server side and then decrypt it client side; without the client having the ability to encrypt the data themselves after decrypting?
I'm working on a license manager ...
0
votes
1
answer
257
views
Securing Delphi application SSL traffic from decryption
I wrote a VCL app using Delphi10.2. It has a simple activation setup, encrypted key is stored in Kinvey backend. The key to decrypt the encrypted key is hidden in the source code.
Now in order to ...
39
votes
5
answers
15k
views
Is it really Security Misconfiguration to show a version number?
Our web application uses a HTML file with jQuery embedded inside.
According to the jQuery license (https://jquery.org/license/), we have to leave the license header intact, including the version ...
2
votes
1
answer
1k
views
Is anything missing in the offline software licensing plan?
I'm working on a piece of software written in VB.NET for Windows machines (mainly Windows Server). I have some understanding of cryptography and security, but I want some good old fashioned peer ...
0
votes
0
answers
173
views
What prevents the client from changing the signature in files?
From what I can tell, some software licenses work client side.
For example, when looking in to the purchased software for the first time, the server will return a software license. In order to ...
1
vote
2
answers
298
views
How secure is this schema for Online Licensing System?
I'm trying to make a good licensing system without affecting user's experience and at the same to make it as secure as possible. I know it's impossible to make it 100% secure, but I would like to make ...
0
votes
1
answer
1k
views
Key Encryption / Obfuscation
I got a GUI Program, which loads the Logic from a webserver if the entered License Key is valid.
The actual connection string I hexed and xor'd with a secret key. (which is unfortunately static)
The ...