1

My newest task is going to be to implement automatic update of a licence:

The program detects that the licence is expired or about to expire and offers the user to automatically upate this. So far so good. Now what is needed:

  • The program sends the user's credentials to a win 2008 server over the internet.
  • The server checks the credentials and if they are OK generates a licence file that is sent back.

How to implement these steps? I consider using WCF, with which I have some experience.

Dabblernl
  • 15,831
  • 18
  • 96
  • 148

1 Answers1

2

The transfer mechanism isn't the issue. WCF should work fine. You could use SSL and/or WCF Security.

The inherent security of the credentials and license is the concern. Remember, anyone can call the service and former clients have access to expired license files. People may try to cheat the system. Ask yourself questions such as:

  • Can person A figure out what person B's credentials are and request a license as person B?
  • Can a person reverse-engineer a license file and extend its life?

See for instance Need advice to design 'crack-proof' software (and numerous other SO posts on licensing).

Community
  • 1
  • 1
TrueWill
  • 25,132
  • 10
  • 101
  • 150
  • Thanks, I will of course implement security on the WCF channel. As for the possibility for identity theft I will discuss that with my employer once the service is functional. – Dabblernl Jan 30 '11 at 19:24