Win a copy of JDBC Workbook this week in the JDBC and Relational Databases forum
or A Day in Code in the A Day in Code forum!
  • Post Reply Bookmark Topic Watch Topic
  • New Topic
programming forums Java Mobile Certification Databases Caching Books Engineering Micro Controllers OS Languages Paradigms IDEs Build Tools Frameworks Application Servers Open Source This Site Careers Other all forums
this forum made possible by our volunteer staff, including ...
Marshals:
  • Campbell Ritchie
  • Paul Clapham
  • Jeanne Boyarsky
  • Junilu Lacar
  • Henry Wong
Sheriffs:
  • Ron McLeod
  • Devaka Cooray
  • Tim Cooke
Saloon Keepers:
  • Tim Moores
  • Stephan van Hulst
  • Frits Walraven
  • Tim Holloway
  • Carey Brown
Bartenders:
  • Piet Souris
  • salvin francis
  • fred rosenberger

Software registration ideas

 
Ranch Hand
Posts: 45
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Hello all -

I need to create a registration class (or framework, or whatever) that is implemented into the software we create and sell to clients. I am looking for some ideas on how it will work.

My initial idea was to have the client-side piece in the software itself and have it communicate with a MySQL server on our website that contains the registration info, but I thought that might be a little too insecure, with only a password that could be reverse engineered out of the software.

Any one know of any Java APIs that already do something like this, or have any ideas of how to build a framework like this?
 
Ranch Hand
Posts: 83
Spring Tomcat Server Java
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
we did something similar for our software....
Here is what we created

Have a code piece which can generate a key based on user information.
Embed it inside your distribution.

Use same code at server side to generate the key and while communicating validate the two are same, based on the user information and key....

You may want to look at the java keytool... this should help you store your licensing information in a keystore....
 
Wesley Baker
Ranch Hand
Posts: 45
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Thanks for the info, Sachin.

Did you do much research into JMX? I'm curious if it could be useful for something like this.
 
Sachin Joshi
Ranch Hand
Posts: 83
Spring Tomcat Server Java
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
I have never used JMX .....

Here is text from JMX docs

JMX is a standardized means for providing a remotely accessible management interface and is an easy way to add a flexible and powerful management interface to an application.



What I understand from this is, its a application management API, so it should help you manage you application .....

What is your requirement? Do you want to manage application remotely ? or you want to keep track of licensing and make sure no piracy happens?
 
Rancher
Posts: 43016
76
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
You're right that a client app should not contact your DB directly; that's a major security no-no. You could go through an HTTP proxy on your site, but the communication -which can be observed in traffic- should give away nothing that can be used to guess information used by other clients.
Also, with everything you do, keep in mind that Java apps can be decompiled and the security features patched out. It's not trivial to do, but won't put up unsurmountable obstacles to a determined attacker. So, whatever measures you put in place, may be circumvented by some people.

JMX isn't meant for managing remote client applications on machines; it would anyway have to make TCP/IP connections from afar, which generally isn't going to work.

keytool is meant for managing encryption keys and certificates, not for application keys; I'd go with a database for storing user and license information.

TrueLicense is an open source solution to some (or maybe all?) of the associated problems (not to deompilation, though).
 
Wesley Baker
Ranch Hand
Posts: 45
  • Mark post as helpful
  • send pies
  • Quote
  • Report post to moderator
Ulf -

TrueLicense looks like exactly what I am looking for. Thanks for all the good info!
 
It runs on an internal combustion engine. This ad does not:
Devious Experiments for a Truly Passive Greenhouse!
https://www.kickstarter.com/projects/paulwheaton/greenhouse-1
    Bookmark Topic Watch Topic
  • New Topic