20130115 Ruediger embedded webinar - Wibu …...2013/01/15 · Wibu-Systems 2013 Page 20...

Page 1Wibu-Systems 2013

CodeMeter

Product Overview

Rüdiger KüglerVP Sales | Security Expert

[email protected]


Involved Parties:

Vendor

• Protects Software• Issues Licenses

User

• Uses protected andlicensed software


LICENSE ACTIVATIONView of the User


UserVendor

Dongle based licensing

Dongle with license


UserVendor

Software based licensing

Individual License File

Fingerprint


UserVendor

Features on Demand

Update File

orSame Process for CmDongle

and CmActLicense

Update File fits only to oneCmDongle or one CmActLicense

License Request


User gets his ticketwith order confirmationor delivery note

User starts activationclient software

Activation takes placein background

Customer Portal Integration File exchange between Embedded Device and

Vendor’s Development Tools

Process Automation


1) User gets Order Confirmation


2) User starts Activation Client


2) User starts Activation Client II


2) User starts Activation Client III


2) User starts Activation Client IV


3) Software is activated


OVERVIEWView of the Vendor


CodeMeter for the Vendor

Technology(CmDongle /

CmActLicenses)

Software Integration

Backoffice Integration

AxProtectorCodeMeter API

CodeMeterLicense Central

Dongles:CmDongle (USB, SD,

CF, µSD, …)

Softlicenses:CodeMeter SmartBind®

License Models:Single User, Trial,

Network, ….

Development Tools

EmbeddedDevice


CODEMETER TECHNOLOGYView of the Vendor


Realizing license models

Single User License

Floating Network Licenses

Software Renting

Pay-Per-Use

Modular Licensing

Trial Licenses

Downgrade License

Software Assurance

High Availability Licenses

…

Text

License Quantity

Expiration Time

Usage Period

Unit Counter

Feature Map

Product Code

Maintainance Period

Customer Own License Information

…

Licen

se M

odels

Prod

uct It

em O

ption

s


Secure license storage

CmActLicense CodeMeter SmartBind®

Dynamic fingerprint Tolerance level Trial license mode

Binding Extension Individual binding to

embedded device

CmDongle Hardware with secure Smartcard chip Secure license storage (no unauthorized copying)

CmDongle

Software

CmActLicense

CodeMeter License Server


SOFTWARE INTEGRATIONView of the Vendor


Integration into the Software

Wrapper (Automatic Protection) AxProtector Standard Systems: Windows 32-bit / 64-bit, Mac OS

X, Linux, .NET Assemblies, Java J2SE, J2EE Embedded Systems: VxWorks, Windows CE,

Windows Embedded, Embedded Linux CodeMeter Core API Getting license information Encrypting data via Secret Key in CmDongle or

CmActLicense Signature API (sign, verify)


Application with simple API calls (.NET)

.Net (and Java) code can be disassembled very easily


Hacker removes license check


Cracked application

License checkis removed


AxProtector/IxProtector .Net

Compiled application Release version

Header

Code

Header

Stub Code(without Intellectual

Properties)

AxEngine(Security Engine)

Encrypted Code(original Code with

Intellectual Properties)

Ax/IxProtector

Definitionof licenses

and modules


Perfect protected Code with AxProtector

Code is no longer readable


CODEMETER FOR EMBEDDEDView of the Embedded Vendor


CodeMeter for Embedded

Similar requirements (to PC software) Intellectual Property Protection Software Licensing Features On Demand

New Challenges Integrity Protection of whole device Access Control to Embedded Device

Different Environments OS is under control of vendor Devices with low performance / low resources


Wibu-Systems Offerings:

Wrapper for Embedded Devices AxProtector VxWorks, Windows CE, Windows

Embedded, Linux Embedded, … CodeMeter Compact Driver Modular (CmDongle, CmActLicense, CmLan, …) Works in low resource environments Library or Source Driver

Secure Storage of keys Private Keys (Authentication) Secret Keys (Encryption of data / software)


Wibu-Systems Offerings 2:

Signing API Used for integrity check of software on embedded

device Integration into Boot Process Pre-Boot Loader checks Boot Loader Boot Loader checks Operating System

Professional Services Individual concepts and implementation


Integrity Check on Embedded Device


Integrity Check (Protection Process)

EncryptedSoftware

CredentialsSignature of

hash of original software

Public key andpublic certificate

OriginalSoftware

AxProtector

Private key andpublic certificate

License parameters(FSB)

EncryptedEncryption Key


RAM

Integrity Check (Runtime)

EncryptedSoftware

Credentials

OriginalSoftware

Root Public Key License with Keyfor decryption

VxWorks Loader(with AxEngine and

current revokation list)Credentials

Watch Dog


AxProtector for VxWorks

Encrypts application DKM / RTP / VIP (VxWorks Image)

Checks integrity of application Loader is integrated into VxWorks image Certificate Chain for updates of whole image /

single applications Integration into Bootloader / Bios Similar technology for Embedded Linux /

Windows Embedded / QNX


BACK OFFICE INTEGRATIONView of the Vendor


Ticket /Fingerprint

4

Use

r

Online Activation ServerVe

ndor

Ticket3

License5

Ticket2

SKU1

Online ActivationServer


Many Backoffice Integration options

BusinessLogic

User Interface

License CentralERP

CRM

Webdepot

Gateway

Connector eCommerce(Digital River)

CRM(Sales Force)

ActivationWizard

Browser

Connector

Webserverin DMZ

C

C

Database

InhouseApplication

G

C

Page 37Wibu-Systems 2013 Page 37

Activation Wizard


License Portal


License Portal II


License Portal Customization


FOR YOUR ATTENTIONThank you

Date post:	12-Jun-2020
Category:	Documents
Upload:	others
View:	1 times
Download:	0 times

20130115 Ruediger embedded webinar - Wibu …...2013/01/15 · Wibu-Systems 2013 Page 20...

Documents