Software application license management of camera device through mediation device

Patent metadata

Field	Value
Publication number	US-12301977-B2
Application number	US-202117498763-A
Country	US
Kind code	B2
Filing date	Oct 12, 2021
Priority date	Oct 16, 2020
Publication date	May 13, 2025
Grant date	May 13, 2025

Abstract

A program license management method disposed in the present disclosure includes an operation of receiving an authentication request from a mediation device, an operation of transmitting a request message for requesting installation of an application from a server to the authenticated mediation device after the mediation device is successfully authenticated, the request message including device identification information of a camera device, an operation of receiving signed information and application data from the mediation device, an operation of performing license validation including determination of whether the signed information includes the device identification information and determination of whether the signed information according to the server is valid, and an operation of installing the application data in the device when the license validation is successful.

First claim

What is claimed is:

1. A method for managing a license of a software application in a camera directly connectable to a server through a first network and connectable to the server through a mediator and a second network, the method comprising:
the camera managing the software application being configured to be installed and executed in the camera;
after the software application is pre-loaded in the camera, the camera receiving, from the mediator, a request by the server for the camera to generate a request message for the camera to install the pre-loaded software application;
the camera generating the request message on the basis of device identification information of the camera, a private key of the camera, and public key information of the camera;
the camera transmitting, to the mediator, a response to the request for generation of the request message;
the camera receiving, from the mediator, license data and application data of the pre-loaded software application;
the camera validating the pre-loaded software application by validating signed information included in the received license data of the pre-loaded software application; and
the camera installing the pre-loaded software application in the camera.

2. The method of claim 1 , wherein the generating the request message comprises:
encrypting the device identification information of the camera with the private key; and
generating the request message on the basis of the public key information in a cryptographic correlation with the private key and the encrypted device identification information.

3. The method of claim 1 , wherein the signed information includes a certificate of a publisher, signed data, and an electronic signature over the signed data, and
wherein whether the signed information is valid is determined by the camera validating the electronic signature using a public key included in the certificate of the publisher and determining whether the signed data is restored.

4. The method of claim 3 , wherein determination of whether the signed information is valid includes chain validation of whether the certificate of the publisher is valid on the basis of a certificate of a management agency of an ecosystem to which the publisher belongs.

5. The method of claim 3 , wherein determination of whether the device identification information is included includes determination of whether device identification information included in the signed information is the same as the device identification information included in the request message.

6. A method for managing a license of a software application, performed by a mediator, the method comprising:
the mediator managing the software application being configured to be installed and executed in the camera;
the mediator receiving, from the camera, an installation request message, of the software application, including device identification information, the camera being directly connectable to a server through a first network and connectable to the server through the mediator and a second network;
the mediator transmitting the installation request message of the software application to the server;
the mediator receiving, from the server, signed information including the device identification information and application information, and application data in response to the installation request message of the software application;
the mediator transmitting the signed information and the application data of the software application to the camera; and
the mediator transmitting a camera authentication request to the camera,
wherein the mediator receives the software application installation request message of the software application from the camera upon the camera's successful authentication in response to the mediator's camera authentication request.

7. The method of claim 6 , wherein a right to order application installation is obtained from the camera as a result of the camera authentication.

8. The method of claim 6 , wherein the installation request message of the software application is included in a request message for purchasing the application and transmitted to the server.

9. The method of claim 8 , further comprising determining an access address of the server on the basis of information on the camera.

10. The method of claim 9 , further comprising determining an address of the server on the basis of information on the camera.

11. A camera for managing a license of a software application, the camera being directly connectable to a server through a first network and connectable to the server through a mediator and a second network, the camera comprising:
a communicator configured to perform communication with the mediator; and
a controller functionally connected to the communicator and configured to execute a program for controlling the communicator,
wherein after the software application is pre-loaded in the camera, the controller is configured to execute the program including commands for performing;
an operation of receiving, from the mediator, a request by the server for the camera to generate a request message for the camera to install the pre-loaded software application,
an operation of generating the request message on the basis of device identification information of the camera, a private key of the camera, and public key information of the camera;
an operation of transmitting, to the mediator, a response to the request for generation of the request message;
an operation of receiving, from the mediator, license data and application data of the pre-loaded software application;
an operation of the camera validating signed information included in the received license data of the pre-loaded software application; and
an operation of installing the pre-loaded software application in the camera.

Assignees

• Hanwha Techwin Co Ltd
• Hanwha Vision Co Ltd

Inventors

• Kim Youngsam

Classifications

• G06F8/65

  Updates (security arrangements therefor G06F21/57) · CPC title

• H04L9/3247

  involving digital signatures · CPC title

• H04L9/14

  using a plurality of keys or algorithms · CPC title

• H04L9/3265 Primary

  using certificate chains, trees or paths; Hierarchical trust model · CPC title

• H04N7/18

  Closed-circuit television [CCTV] systems, i.e. systems in which the video signal is not broadcast · CPC title