Solved

VB.net Security Key

Posted on 2014-01-18
5
404 Views
Last Modified: 2014-01-18
Hi

A few months ago I looked at the following security key generator provided by Eric Moreau

http://www.emoreau.com/Entries/Articles/2007/12/Licensing-a-VBNet-application.aspx

I still don't understand the fundamentals. Could anyone please explain briefly how
this works and what stops multiple people using the same key to install the app on multiple machines?

I don't understand how the following process works "This method is using the registry (the CurrentUser section) to store encrypted information to keep track of everything. Symmetric encryption is used (a single key used to encrypt and decrypt). This demo is using a textbox (titled Pass Phrase) for you to try different combination. "
0
Comment
Question by:murbro
  • 2
  • 2
5 Comments
 
LVL 18

Expert Comment

by:Steven Harris
ID: 39791337
I still don't understand the fundamentals. Could anyone please explain briefly how
this works and what stops multiple people using the same key to install the app on multiple machines?
The key that is generated is specific to the machine.  As a quick and dirty example (not specific to the code, but as an example only):

I have a computer that is named "TOS4567890"     <-- string value specific to my PC
You are using a passphrase of "HelloWorld!"     <-- string value only known to you
The generated key is "HTeOlSl4o5W6o7r8l9d0!"     <-- the above two interact to make this (can you see how I combined the two?)

Think of this as the Username/Password combination.  You have to know both in order to gain access.
0
 

Author Comment

by:murbro
ID: 39791363
Thanks. The part that confuses me is that I generate the key on my machine using the middle two boxes. Then I send them the username and password. Am I doing it incorrectly?
0
 
LVL 18

Accepted Solution

by:
Steven Harris earned 250 total points
ID: 39791396
Remember, the example I gave was not indicative of the code as written, but was in relation to the hashing method. to generate said key.

Other than that, you are assigning the key correctly.  You are both running the same algorithm (you encrypt in your program, they decrypt in their program), so the program can validate that they key is correct.

For the part I missed in your original post:

...what stops multiple people using the same key to install the app on multiple machines?

I have not tested the method myself, but from what I can see:  Nothing.  You would need some type of check in place (like a server) that validates the use of the key and to see if it is already in use.
0
 
LVL 27

Assisted Solution

by:Ark
Ark earned 250 total points
ID: 39791725
Please see this tutorial
0
 

Author Closing Comment

by:murbro
ID: 39791763
Thanks very much for the advice
0

Featured Post

Back Up Your Microsoft Windows Server®

Back up all your Microsoft Windows Server – on-premises, in remote locations, in private and hybrid clouds. Your entire Windows Server will be backed up in one easy step with patented, block-level disk imaging. We achieve RTOs (recovery time objectives) as low as 15 seconds.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
VB.Net How to Exit Sub - Exit Form??? 5 57
Help with Syntax 9 37
Get Client IP on RDS - VB.NET 15 47
No Data for DropDown List 2 25
If you're writing a .NET application to connect to an Access .mdb database and use pre-existing queries that require parameters, you've come to the right place! Let's say the pre-existing query(qryCust) in Access takes a Date as a parameter and l…
If you need to start windows update installation remotely or as a scheduled task you will find this very helpful.
Email security requires an ever evolving service that stays up to date with counter-evolving threats. The Email Laundry perform Research and Development to ensure their email security service evolves faster than cyber criminals. We apply our Threat…
A short tutorial showing how to set up an email signature in Outlook on the Web (previously known as OWA). For free email signatures designs, visit https://www.mail-signatures.com/articles/signature-templates/?sts=6651 If you want to manage em…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question