Abstract: Various embodiments include a resource control system. The resource control system can receive consumption demand requests to access one or more electronic resources. The resource control system can assign license entitlements, each with varying quantity, to consumption demand requests to enable access to the electronic resources. An ambiguity resolution engine can make license entitlement assignments to consumption demand requests when a set of license entitlements can cover a target electronic resource specified by the consumption demand requests. The ambiguity resolution engine can rank license entitlements based on ratios of their resource costs and the consumption demand requests based on their electronic resource usage efficiency. The ambiguity resolution engine can assign the license entitlements by comparing the rankings of the license entitlements and the rankings of the consumption demand requests.

Abstract: Various of the disclosed embodiments concern computer systems, methods, and programs for extracting information from an asset tag that can be used to monitor the corresponding asset. An operator, e.g. employee of an enterprise, logs into an application executed by a mobile device that includes a camera. A tag template can then be manually selected by the operator or automatically selected by the application. The tag template is used during scanning to locate and identify machine-readable elements, human-readable elements, structural elements, or some combination thereof. Once the application registers a successful scan of the asset tag, the operator can review and confirm the information was extracted correctly. Generally, the extracted information is transmitted to an asset management system, which creates a database entry that allows the asset to be continually monitored by the enterprise, e.g. each time the asset tag is subsequently scanned.

Abstract: Several embodiments include a policy-bound token distribution system. The system can include a back-office server that issues policy-bound tokens to local main distribution servers. A local main distribution server can distribute a policy-bound token to a digital environment to authorize an operator to take advantage of a protected resource. The system can rely on a backup server to distribute the policy-bound tokens whenever the distribution service of the local main distribution server is unavailable. To prevent run-time leakage from the backup server, the backup server can synchronize its distribution state with the local main distribution server and the back-office server. The distribution state can include distribution transaction records between the backup server and client devices. Throughout the system, each distribution transaction record can be assigned unique transaction ID to prevent multiple accounting of the same distribution transaction record from different servers.

Abstract: Some embodiments include a method of scheduling batch processing of a batch processing system based on subscriber usage patterns. The method includes steps of recording a last job commencement event for a subscriber when the batch processing system starts processing a batch process for the subscriber; recording a last usage event for the subscriber when the subscriber uses the batch processing system; in an event that a time period elapsed since the last usage event for the subscriber is less than a time period elapsed since the last job commencement event for the subscriber, placing a next batch process of the subscriber into a recently used queue; identifying the next batch process of the subscriber as the oldest batch process from the recently used queue; and start processing the identified batch process for the subscriber.

Abstract: A method and system for automated clock wind-back recovery are disclosed. According to one embodiment, a computer-implemented method comprises requesting a license to access an application and storing a time anchor, the time anchor comprising a recent system time observation. Clock modification is detected, wherein detecting clock modification comprises comparing a license expiration date to a current system time. The time anchor is compared to a trusted time authority value, the trusted time authority value comprising the current system time and a tolerance. The time anchor is updated, clock modification is corrected, and access to the application is retrieved.

Abstract: Various of the disclosed embodiments disclose systems and methods for assessing usage of a resource, such as hardware, software, or firmware, in a computer system. For example, some embodiments contemplate a model in which an enterprise application derives its license cost based upon the actual business value provided by the licensed resource to the enterprise. If an enterprise has purchased software that it uses very heavily, then the license cost may increase. Conversely, if the enterprise uses the software rarely, then the license cost may decrease. This usage granularity may allow an enterprise executive to purchase a software license without fear that the software will be inefficiently utilized. A licensor may similarly use the system to charge more accurate fees.

Abstract: Some embodiments include a method of generating an event-based device ID based on an operating environment of a computing device. The method includes binding an event-based identifier and an events profile ID to a policy-related record that is associated with an externally controlled policy. The binding ensures that the policy is applied to the operating environment identified by the event-based identifier. The method includes generating the device ID based on event logs of the computing device.

Abstract: Technology is disclosed for generating a virtual appliance (“vApp”) for an application using an existing installation manifest of the application. The installation manifest can be part of a traditional installation package that is used to install the application on a computer system. The installation manifest contains configuration information for installing the application using the installation package. A vApp builder analyzes the installation manifest to identify and/or determine various configuration information of the application that may be required to generate the vApp. The configuration information can include information regarding the application components of the application, packages/dependencies on which the execution of the application components depend, an operating system on which the application components and/or their packages execute. The vApp builder generates the vApp using the information obtained from the installation manifest.

Abstract: A method and system implementing software licensing management under machine virtualization are disclosed. According to one embodiment, a system comprises a virtual platform running on a physical machine; a binding agent running on a host operating system of the virtual platform; a license enforcement module running on a virtual machine instance of the virtual platform. The license enforcement module is in communication with the binding agent. The binding agent enforces a mutex lock to ensure that only a specified number of license enforcement modules are running on the physical machine.

Abstract: Various of the disclosed embodiments provide systems and methods to compensate for certain event log errors. For example, when a system fails to record the occurrence of several events (a file closing, a file modification, a network socket opening, etc.) the disclosed embodiments may identify the discrepancy and provide a synthesized event sequence suitable to fulfill the purposes of the event log. In this manner, for example, a client may still be accurately billed for their use of a licensed software or system, even if their usage was punctuated with occasional failures to record their activity.

Abstract: Some embodiments include a method of using different keys from an embedded key generator for each update of a trusted storage to mitigate common user-based exploits (clone, restore, tamper) of the trusted storage. The method includes: retrieving a key generator certificate from the key generator; requesting the key generator to generate a key associated with a key authenticator and to return a key handle associated with the key; generating a request to the key generator, the request including the key handle, the key authenticator, and a record to be maintained in the trusted storage; and in response to receiving an encrypted record from the key generator, storing the encrypted record associated with the first key handle and an authenticator generation formula in the trusted storage in a computing device, wherein the encrypted record is encrypted via the above key.

Abstract: A method and system for capacity licensing are disclosed. According to one embodiment, a computer implemented method comprises receiving a capability request from a device, sending a capability response to the device, the capability response comprising a serving of license rights. A deduction record is stored, the deduction record deducting a license from a license pool. An information request is received from the device, and an information response is sent.

Abstract: A method and system for capacity licensing are disclosed. According to one embodiment, a computer implemented method comprises receiving a capability request from a device, sending a capability response to the device, the capability response comprising a serving of license rights. A deduction record is stored, the deduction record deducting a license from a license pool. An information request is received from the device, and an information response is sent.

Abstract: Techniques for distributed license management are provided. Three or more services or servers cooperate and negotiate with one another to establish primary, secondary, and tertiary licensing services. Initially, the primary is designated as a master licensing service and manages a license for a plurality of users over a network. If the primary fails to respond within a configurable period of time to both the secondary and tertiary licensing services, then the secondary dynamically assumes a master licensing service role for purposes of managing the license.

Abstract: Techniques for distributed license management are provided. Three or more services or servers cooperate and negotiate with one another to establish primary, secondary, and tertiary licensing services. Initially, the primary is designated as a master licensing service and manages a license for a plurality of users over a network. If the primary fails to respond within a configurable period of time to both the secondary and tertiary licensing services, then the secondary dynamically assumes a master licensing service role for purposes of managing the license.

Abstract: A computer-implemented system and method for protecting a software installation after certification are disclosed. The system includes components to determine if a cryptographic value of a digital content set matches with a stored cryptographic value of a validated digital content set, to determine if a cryptographic value of a validation rule set matches with a stored cryptographic value corresponding to a validation requirement, and to display a certification message if the cryptographic value of the digital content set matches with a stored cryptographic value of a validated digital content set and the cryptographic value of the validation rule set matches with a stored cryptographic value corresponding to a validation requirement.

Abstract: The present invention provides a system and method for generating a control identity for binding together a component and a computer system including hardware devices and software applications. The binding system comprises a processor, a validator module for controlling the processor to generate the control identity, and a store for storing the control identity. The validator module is arranged to define a binding configuration for the component, representing a weighted combination of at least one of a set of hardware elements and a set of software elements needed within the computer system for operation of the component, the validator module also being arranged to prompt the processor to establish whether instances of the elements within the at least one set of elements are present in the computer system.

Abstract: A method and system implementing software licensing management under machine virtualization are disclosed. According to one embodiment, a system comprises a virtual platform running on a physical machine; a binding agent running on a host operating system of the virtual platform; a license enforcement module running on a virtual machine instance of the virtual platform. The license enforcement module is in communication with the binding agent. The binding agent enforces a mutex lock to ensure that only a specified number of license enforcement modules are running on the physical machine.

Abstract: Techniques for distributed license management are provided. Three or more services or servers cooperate and negotiate with one another to establish primary, secondary, and tertiary licensing services. Initially, the primary is designated as a master licensing service and manages a license for a plurality of users over a network. If the primary fails to respond within a configurable period of time to both the secondary and tertiary licensing services, then the secondary dynamically assumes a master licensing service role for purposes of managing the license.

Abstract: A method and system for license server synchronization are disclosed. According to one embodiment, a computer-implemented method comprises receiving a first capability request from a licensing server, transmitting a first capability response to the licensing server. The licensing server provides a second capability response to a device, and the second capability response is in response to a second capability request sent by the device to the licensing server. The second capability response includes one or more capabilities included in the first capability response. A server synchronization message is received from the licensing server and a request for payment is transmitted to a service provider, wherein the request for payment is generated based on the server synchronization message.