摘要:
Methods and a program of instruction provide a packet schema framework for communication between elements of a pay-as-you-go business model including a provisioning server, an adapted electronic device, and a service provider. The packet schema defines provisioning instructions and content types to support service provisioning, including electronic device configuration and state, time-metering, and other types of functional and administrative tasks as well as to provide a foundation for any future messages needed for product evolution. The schema also defines security at multiple levels to guard against malicious users who may try to hook into the system to fraudulently use and/or configure the electronic devices for their own use and gain.
摘要:
Methods and a program of instruction provide a packet schema framework for communication between elements of a pay-as-you-go business model including a provisioning server, an adapted electronic device, and a service provider. The packet schema defines provisioning instructions and content types to support service provisioning, including electronic device configuration and state, time-metering, and other types of functional and administrative tasks as well as to provide a foundation for any future messages needed for product evolution. The schema also defines security at multiple levels to guard against malicious users who may try to hook into the system to fraudulently use and/or configure the electronic devices for their own use and gain.
摘要:
An XML provisioning schema for provisioning and configuring a prepaid and/or a subscription based usage of a provisioned resource is used to communicate between a provisioning server and a client computer. The XML schema disclosed in here includes a content node containing content data identifying the service to be provisioned on the client computer and a signature node containing a signature of the content data. The XML provisioning server may generate an XML provisioning document using the XML provisioning schema, sign such an XML provisioning document using a key derived from a trusted root and communicate the XML provisioning document to the client computer using the provisioned resource.
摘要:
A client data distribution service may receive messages from a client device requesting data sets from the data distribution service. The data sets may include a client certificate used to protect in verified subsequent communications between the client device in the data distribution service as well as provisioning packets used by the client device to enable operation by the user. Specific messages between the client device in the data distribution service include hardware identifiers, initialization keys, last used sequence numbers, and Underwriter product identifiers. Corresponding acknowledgment messages may be used by the data distribution service to remove completed transactions.
摘要:
A dynamic software provisioning system allows provisioning software on a number of different computing devices based upon a desired business process. The dynamic software provisioning system allows a user to request usage of the operating system for a specific period of time, for a specific amount of usage, or in any other desired manner from an operating system provisioning service or from a third party. The provisioning service processes the request from the user or from the third party to provision the use of the operating system and in response to the request provisions use of the operating system for a specific device specified by the request. The dynamic software activation system also includes a local provisioning module located on the device using the operating system, wherein the local provisioning module activates and deactivates the operating system based on instructions received from the provisioning service.
摘要:
A software provisioning method and apparatus use a provisioning packet delivery mechanism having a database, a distribution service, and a confirmation service to receive, queue, and confirm delivery of provisioning packet to a computer. When the number of unconfirmed delivery requests exceeds a limit the distribution service may remove the provisioning packet from the database, for example, to limit denial of service attacks.
摘要:
A dynamic software provisioning system allows provisioning software on a number of different computing devices based upon a desired business process. The dynamic software provisioning system allows a user to request usage of the operating system for a specific period of time, for a specific amount of usage, or in any other desired manner from an operating system provisioning service or from a third party. The provisioning service processes the request from the user or from the third party to provision the use of the operating system and in response to the request provisions use of the operating system for a specific device specified by the request. The dynamic software activation system also includes a local provisioning module located on the device using the operating system, wherein the local provisioning module activates and deactivates the operating system based on instructions received from the provisioning service.
摘要:
A pay-per-use business model relies on an accurate, or at least, un-tampered, time reference for the administration of prepaid usage time, e.g. hours, or subscription expiration dates. A protocol for provisioning usage requires that any electronic device request for provisioning includes current time at the device. A server responding to the request may evaluate the time at the device and send an updated time when the current time at the device is outside a variance limit. If the electronic device repeatedly sends requests with inaccurate time, the server may cease sending time updates and block the electronic device from further updates for suspected tampering.
摘要:
A client data distribution service may receive messages from a client device requesting data sets from the data distribution service. The data sets may include a client certificate used to protect in verified subsequent communications between the client device in the data distribution service as well as provisioning packets used by the client device to enable operation by the user. Specific messages between the client device in the data distribution service include hardware identifiers, initialization keys, last used sequence numbers, and Underwriter product identifiers. Corresponding acknowledgment messages may be used by the data distribution service to remove completed transactions.
摘要:
A computer participates in a system for licensing use in a metered fashion using individual licenses cryptographically linked to the computer and a particular service provider or underwriter. The computer may have a cryptographic unit, secure memory, sanction and metering functions as part of a secure execution environment for enabling metered operation and conformance to a security policy. Payment for licenses may be made through a payment system with licenses generated at a server with access to cryptographic functions for verification of requests, certificate/key pair generation, and signing licenses.