Check out signed XML as the way to store your license data.

Be warned though: a licensing dll which verifies your license file by
reading the signed XML can be altered easily. Even if you sign that dll,
this signature can be removed. (requires some knowledge of IL and
ilasm/ildasm). If that's a hurdle that's big enough, go ahead, if not,
check out other options you might have like on-line license checking AND
some code that is available online only.

        FB

> <thinking out loud>
> Lets say I want to create a XML License file, to product my 
> product, which is deployed at the customer. (I don't want any 
> complicated solution, and I don't want to deploy any 3rd 
> party dlls as my licensing solution). This license file just 
> contains data about the customer and the product. I don't 
> care if people can read it, I only want to protect it from 
> being tampered with. So what I'm thinking of, is some type of 
> hashing mechanism/algorithm.
> 
> Enter Strong names. Is it possible to take my private key, 
> that I used to sign my assemblies with, some how generate a 
> hash (or encrypt) a Xml file. Send that hash and the xml file 
> to the client. Then, my component, reads the xml file, 
> validates the hash (or decrypts the xml file), using the 
> public key embedded with the signed assembly, to verify the 
> license file is valid. </thinking out loud>
> 
> Is there some way this can be achieved? Basically, I would 
> like to capitalize on the key file/strong name technology to 
> protect my license file.
> 
> 
> Scott Cate
> myKB.com, Inc.
> 6533 N. 7th Ave #26
> Phoenix, AZ 85013
> Tel: 480.222.myKB (6952) Ext. 103
> Mob: 602.418.0770
> Fax: 602.532.7941
> 
> [EMAIL PROTECTED]
> www.myKB.com
> 
> This E-mail message is for the sole use of the intended 
> recipient(s) and may contain confidential and privileged 
> information. Any unauthorized review, use, disclosure or 
> distribution is prohibited. If you are not the intended 
> recipient, please contact the sender by reply E-mail, and 
> destroy all copies of the original message.
> 
> ===================================
> This list is hosted by DevelopMentor(r)  http://www.develop.com 
> Some .NET courses you may be interested in:
> 
> NEW! Guerrilla ASP.NET, 26 Jan 2004, in Los Angeles 
> http://www.develop.com/courses/gaspdotnetls
> 
> View archives 
> and manage your subscription(s) at http://discuss.develop.com
> 
> 

===================================
This list is hosted by DevelopMentor�  http://www.develop.com
Some .NET courses you may be interested in:

NEW! Guerrilla ASP.NET, 26 Jan 2004, in Los Angeles
http://www.develop.com/courses/gaspdotnetls

View archives and manage your subscription(s) at http://discuss.develop.com

Reply via email to