CodeMeter License Central - wibu-systems ag

FALL 200918TITELSTORYMixing made simple – switching a snapFURTHER WEITERE TOPICS THEMENAxProtector for WibuKey, CodeMeter and CodeMeterActCodeMeter License Central Integration with Connector and GatewayTemporary Licenses with CodeMeter License Borrowing

I N T R OContentDear customers and partners,JUBILEE20 years of WIBU-SYSTEMS 3PRODUCTCodeMeter License Central – Connector 4PRODUCTCodeMeter License Central – Gateway 7PRODUCTAxProtector für WibuKey, CodeMeter &CodeMeterAct 10INTEGRATIONCodeMeterAct Binding Extension 12KNOW-HOWLicense Borrowing 13BILLBOARDShort News 14“20 years of WIBU-SYSTEMS” means 20 years of“Perfection in Software Protection.” I’m intentionallystarting this column with our company slogan again.We can only keep and strengthen our top positionby offering you signifi cant benefi ts when using oursolutions. Therefore we are now investing and increasingour development team - hoping for an improvedeconomy and growth for your business.Our goal is to increase our market-share worldwide to25% in the next years. The technological leadershipfor the protection and licensing of digital products isour main focus–we want to keep this special position.So we will diversify our niche market and switch tosolutions for mobile phones, embedded systems andindustrial PCs, netbooks, notebooks, desktop PCs,and servers, as well as SaaS and cloud computing. Forsome of these areas we offer solutions today; otherswill be developed or researched.“Mixing made simple - switching a snap” is the title ofthis issue of KEYnote magazine. You can learn how touse WibuKey and CodeMeter simultaneously, and howyou can migrate from other solutions to CodeMeter.The CodeMeterAct Binding Extension allows you tobind your licenses to any dongles.With the Connector, you can integratet CodeMeterLicense Central effi ciently and easily in your ERPsystem and with the Gateway you can collect licensesdirectly from your protected application. Read moreabout the perfect integration in your processes, andthe easy handling by your customers.CUSTOMER STORYCustomer story: LVD 15SURVEYSurvey & sweep16Interesting news and features, as well as a case studycomplete this issue. I’m looking forward to your questions.It would be great if you participate in our onlinesurvey: in doing so you have the chance to win eithera Sony PS3 Slim, or an iPod touch 32 GB with customlaser engraving.With best regards from Karlsruhe,Oliver Winzenried2

J U B I L E E20 years of WIBU-SYSTEMSEvery two years, employees fromKarlsruhe (Germany), Europe andChina, as well as our distributors,get together at WIPS, our WIBU-SYSTEMS International Partner Summit,to learn more about our latestproducts and technologies.Oliver Winzenried, Margret Mergen and Marcellus Buchheit at the anniversary celebration of WIBU-SYSTEMS at ZKMApart from learning, getting to know eachother personally, swapping experiences, andjust having a good time together helps improveteamwork. This year´s WIPS coincided with the20th anniversary of WIBU-SYSTEMS. One of thehighlights was the evening event in the ZKMmuseum, Karlsruhe’s center for art and mediatechnology.A guided tour of the exhibition YOU_ser 2.0opened the evening. An especially interestingexhibit was the “Love Letter,” on loan fromBletchley Park, the historical home of codecracking during WWII, where the Enigma machinewas cracked. This was a perfect fi t forWIBU-SYSTEMS, because our UK distributor’soffi ce is located in the historical buildings ofBletchley Park.Miss Schierl, responsible for ZKM public relations,welcomed our group, as did also somefriends and companies from iRegion Karlsruhe.Marcellus Buchheit and Oliver WinzenriedOliver Winzenried gave a review of the last 20years and outlined new goals. A very specialpleasure was the fact that Margret Mergen,fi rst mayor and economic major of the city ofKarlsruhe, welcomed the guests and discussedthe importance of innovative medium-sizedcompanies for our region. Prof. Dr. Jörn Müller-Quade, European Institute for System SecurityEISS from the Karlsruhe Institute of TechnologyKIT, closed the evening with his vivid presentationabout obfuscation and integral securityapproaches.The party lasted till late in the night. The eveningwas perfected with music by the Chilena Trioand food by gourmet chef Bernd Wernder ofSchloss Eberstein restaurant. Inspiring discussionsfrom this evening resulted in new solutionswith additional benefi ts for our customers andpartners.Some employees of WIBU-SYSTEMS and distributors at a trip to Burrweiler, Pfalz3

P R O D U C TCodeMeter License Central –ConnectorCodeMeter License Central allows you to create, manage and deliver licenses. In this article, we discuss the creationof licenses, particularly using automatic creation by integration into an ERP/CRM system, or an online shop.Separation of sales and deliveryWhen using CodeMeter License Central, weseparate the sales process of a license fromits creation. On selling a license, CodeMeterLicense Central creates a ticket. In other systemsthis ticket might be known as serial number,voucher, coupon, or entitlement number. Thisticket is a code, valid only once, that allowsfor the collecting of the license at a later time.As with a voucher, once the ticket has beenaccepted it becomes invalid and cannot be usedfor a second time.In most cases when selling a license, it is notknown in which dongle, or to which PC thelicense will be transferred. Here the advantageConnectorof separating sales and collection is more apparent,since the ticket is not tied to a specifi cPC or dongle.Further advantages are:Easy integration of the ticket generatorinto existing ERP/CRM systems and onlineshopsShopFigure: Individual adaption of a ConnectorConnectorData BaseLicenseCentral4

Easy delivery of a ticket whether by invoice(printed or e-mailed). It is also possibleto resell a ticket. This option allows integrationof resellers and distribution partnersinto the licensing process.SOAP (web-based) interfaceFor creating a ticket we provide you two options.In the Desktop Edition you can generate ticketswith a web interface using your browser. Inthe Enterprise Edition you can also automaticallygenerate tickets using a SOAP interface.Use this interface when integrating into youronline shop.Most of the online shops; whether operatedby asknet, cleverbridge, Digital River Element5 or share-it!, provide interfaces to web-basedlicense generators. The SOAP interface providedin CodeMeter License Central and the webbasedlicense generator of the online shop formtwo plugs which almost match.However, depending on the shop, the interfaceof the license generator may vary. With anadapter (we call a “Connector”) we are ableto integrate those two interfaces.More than an adaptorA Connector is, however, not merely an adapterwhich maps data formats; it also intervenes inthe process as an active component. That is, itsaves additional information to separate tablesthat is delivered by the online shop but notrequired for the ticket generation in CodeMeterLicense Central. The Connector then is able toread data from those tables, and use it for thecreation of the ticket. Or, it can execute the ticketdelivery via e-mail.For the popular online shops above, basic Connectors(pure data mapping tools) are alreadyprovided in PHP.Digital River – e-CommerceSolution: element 5 | share-it!The license generator interface of the DigitalRiver e-Commerce solutions element 5 andshare-it! are identical. Go to your Control Paneland confi gure a new delivery type. Select “element5 delivers: License key” and as option “Keygenerator via a URL.” Specify the URL as theaddress of the Connector for your CodeMeterLicense Central location (e.g. http://lc.codemeter.com/10000/connectors/doElement5Order.php).Use “ISO 8859-1“as a key generator version.It is that easy to integrate CodeMeter LicenseCentral into your element 5 or share-it! onlineshop.After the successful order, i.e. payment has beenreceived, the online shop calls the CodeMeterLicense Central connector. The Connector mapselement5:PURCHASE_ID to CustomerID andelement5:EMAIL to Comment. You can customizethis mapping, or save additional data inseparate tables. CodeMeter License Centralgenerates a ticket, or, in a strict sense, a URLfor collecting the license that already holds thisticket, and returns it to the online shop.Consequently, the online shop delivers this ticketas a license key, and the customer collects thelicense by clicking on the delivered URL. TheStandard Connectors available for:asknet Inc.Russ Building235 Montgomery St, Suite 1025San Francisco, CA 94104, USATel.: +1 415-352-2610info@asknet.comwww.asknet.comcleverbridge Inc.53 West Jackson Blvd.Suite 1135Chicago, IL, 60604, USATel.: +1 312-922-8693sales@cleverbridge.comwww.cleverbridge.comConnector namedoCbOrder.phpMappingOnline ShopitemsquantitycustomerNoCustomerIDemailDigital RiverCorporate Headquarters, U.S.9625 West 76th StreetEden Prairie, MN 55344, USAwww.digitalriver.comConnector namedoElement5Order.phpMappingCodeMeter License CentralItem IDQuantityOrder IDCustomer IDCommentOnline ShopPRODUCT_IDQUANTITYPURCHASE_ID_RUNNING_NOPURCHASE_IDEMAILCodeMeter License CentralItem IDQuantityOrder IDCustomer IDCommentFigure: Digital River – element 5 | share-it!5

license is transferred into the chosen CmStickor into the PC.Figure: cleverbridge Commerce Assistant: key generatorsistant. Select the menu item “Key Generators”and add a new Web Key Generator. You arefree to choose any name. Specify the addressof your CodeMeter License Central Connectoras a path (e.g. http://lc.codemeter. com/10000/connectors/doCbOrder.php). Set the interfacecleverbridgeA customizable Connector is also provided forthe cleverbridge shop. Go to the Commerce Asto“Type1“, the character conversion to “Unicode(UTF-8)“, and XML Scheme to “Version2.100“.Now you are able to use this key generatorfor your products. Open the desired productand choose “Delivery Details.” Confi gure theDelivery Type to “cleverbridge delivers key inline.”For the Web Key Generator, specify the keygenerator you just created. Set the Key ResultType to “Auto.”After a successful payment, the online shopcalls the Connector. It maps CB:CustomerIDto CustomerID and CB:email to Comment andreturns the ticket in the form of an URL forcollecting the license. The online shop displaysthis URL, and additionally sends it as part of ane-mail to the buyer.asknetIntegration into an asknet shop is provided byasknet on an individual basis. Contact WIBU-SYSTEMS for more information.ERP/CRM integrationWhile most online shops provide easy to configure web-based interfaces, integration into anERP/CRM system is much more customizable.However, the principle integration process isthe same. The ERP/CRM system calls a Connectorwhich in turn processes the data, servesthe SOAP interface from CodeMeter LicenseCentral, and returns the ticket to the ERP/CRMsystem.In addition to having the ERP/CRM systemstarting the Connector, you also have the optionof developing an individual Connectorthat periodically reads data from the ERP/CRMsystem, or imports exported data. This scenariois quite common. And it can be used if the ERP/CRM support team does not wish, or is not ableto customize processes. A disadvantage of thissolution is that the ticket data is not availablein the ERP/CRM system.In case of support incidents, you have to searchfor information from two different systems:the ERP/CRM system and CodeMeter LicenseCentral. The advantage of the solution, however,is an easy straight-forward implementation; aperiodical automatic export of the data fromthe ERP/CRM system has been possible in allprojects so far. We can support you in individualintegration with our consulting and professionalservices team from design to implementation.Figure: Confi guring the cleverbridge Commerce Assistant6

P R O D U C TCodeMeter License Central –GatewayIn the previous article, we showed you how to automatically create a ticket with CodeMeter License Centralfrom your online shop or ERP/CRM system. This article deals with automatic collection of the license from yoursoftware.Adaptation with the ConnectorFirst, we need to take a step backward. Ourstandard connectors deliver the tickets togetherwith a URL, so the customers can easilycall the URL and collect the license using anyInternet browser.When using automatic integration with yoursoftware, we do not need a complete URL. Allthat is needed is the blank ticket. CodeMeterLicense Central is actually delivering the exactticket, but the Connector converts it into acomplete URL. Simply comment the creationGatewayof the URL in the Connector, and it will deliverthe blank ticket.Why do you need a Gateway?When completing a sale, CodeMeter LicenseCentral Enterprise Edition lets you decide wheth-CustomerLicenseCentralFigure: Getting a license with a GatewayMarketingData BaseUpdateData Base7

er your customer should use our web interface orour SOAP Gateway to collect the ticket.In most cases, CodeMeter License Central willnot be available from the Internet directly. Butfor security reasons, it is available from an internalnetwork. That’s why a direct access fromoutside via SOAP (from the software installedon the customer’s side) is not possible.You need a special kind of software, which islocated in the DMZ (demilitarized zone) andreplies to inquiries from outside and forwardsthem to CodeMeter License Central. We call thiskind of software a Gateway.Personalized additionalinformationLike a Connector, the Gateway can do morethan just forward inquiries. The Gateway allowsyou to link advertising messages to licenseinformation, and then deliver it “piggy-back”to the customer for up-selling, cross-selling, orother marketing campaigns.You can also deliver software updates via theGateway, because the Gateway can access thelicense information of the corresponding customerand fi lter individual offers or updates.Collecting the license via anupdate fileWhether collecting the license via a browser orGateway, the basic principle is the same. A remotecontext fi le is created by using the desiredCodeMeterStick, or, when using CodeMeterAct,the bound license in a PC.Together with the ticket, the remote context fi leis sent to CodeMeter License Central, which inLicensorFigure: Activation exampleturn checks whether the ticket is valid (does theticket exist, and does it remain uncollected),creates the appropriate remote update fi le forthis CodeMeterStick or PC, and then transmitsthis fi le as a reply. The update fi le is then copiedinto the CodeMeterStick or onto the PC.If you use the web interface, an ActiveX Plug-inor Java Applet creates the remote update fi le,and copies it on the customer´s side. Optionallythe customer can create the remote update fi lemanually, and upload it to the web interface.This is especially appropriate, if the PC to whichthe license has been bound, or to which theCodeMeterStick is attached, does not haveany access to the Internet. In this case, neitherthe ActiveX nor the Java Applet is necessary.LicenseeIn fact, the CodeMeter Runtime does not evenneed to be installed.The Standard GatewayUsing a Gateway, you can create the remotecontext fi le by yourself, send it together with theticket to CodeMeter License Central, and copythe remote update fi le to your system.For convenience the Enterprise Edition providesyou with a Standard Gateway. It is available at:http://{0}/gateways/getAllLicenses.php (replacethe {0} with your IP address and with the nameof your CodeMeter License Central). This Gatewayis alternatively accessed by HTTP/POSTor by HTTP/GET and collects all open licensescoupled to the corresponding ticket.The same mechanism is used on the Internetwhen you send a form to a server. The only differenceis that the Gateway doesn´t reply as anHTML site, but with a remote update fi le.Calling the GatewayThere are class libraries available in many programminglanguages that are used to send ahttp request.In C#, VB.NET and other .NET languages usethe HttpWebRequest class, found in System.Net.In Delphi use the TIdHTTP Components fromthe Indy-clients. In a native implementationwithout class libraries, send the request withthe windows API function “send” and readoutthe response with “recv”.Figure: Getting a license via fi le exchange8

To use an HTTP/POST request, create a TStringlist,which contains the parameters you are sending.The string has the following format: “ticketidentification={0} &fi rmcode={1}&context={2}.”Replace {0} with the ticket, {1} with your FirmCode and {2} with the remote context fi le.If you use the TIdHTTP components with Delphi,do not separate the single parameters with anampersand (&), but write each of them into asingle row in the Stringlist. Send this string withthe method “POST” to the Gateway’s URL.If the Gateway was successful in creating aremote update fi le, it replies with the status“HTTP/1.1 200 OK” and the remote update fi leas an “application/octet-stream.” In the case ofan error, the Gateway responds with an errorstatus (depending on the error) and an errormessage in the format of “text/plain.”Even if your customer wants to activate a networklicense, the application for activation is the idealsolution. The customer only needs the CodeMeterRuntime and your application for activation onthe server.CodeMeterActIf you are using CodeMeterAct you can specifydifferent parameters in a license informationfi le, which results in a “fi ngerprint” of thecomputer on which the fi le resides. To createthe remote context fi le this license informationfi le is necessary; it has to be registered by theCodeMeter executable. Even in this scenario,using an application for activation alternative isthe ideal solution.First, make sure that an appropriate CodeMeter-Act license is located on the target PC. Then readout the Firm Code and the CodeMeterAct-ID forall existing licenses. With CodeMeterAct-ID youcan distinguish different schemes on how tocreate the fi ngerprint from among the availableparameters. If the appropriate license is alreadylocated on the computer, use it to create theremote context fi le. If no appropriate license isavailable, then provide for registration usingyour license information fi le.Remote context and update fileUse the function CmGetRemoteContextBufferand CmSetRemoteUpdateBuffer from theCodeMeter Core API to create and deliver theremote update fi le. These functions are availablewith version 4.0. The “…Buffer” function bothstores and references the remote update fi le inmemory. Thus it is no longer necessary to storethe fi les on your hard drive.Where to generate the request?As described above, collecting licenses via a Gatewayis pretty simple. But where is the ideal placeto generate a request? Within your protectedapplication? Within your error handling-DLL,which is called up from the protected application?Maybe you want to use an additional applicationto activate it? Depending on your scenario, one ofthese three solutions is the proper way.Experience has shown that providing an additionalapplication for activation has proven to bethe most fl exible solution. If a customer alreadyowns a basic version of the software and wantsto activate another module, you can start theapplication for activation from your protectedsoftware (CreateProcess or System.Diagnostics.Process.Start)If the customer doesn´t have a license yet, youcan start the application for activation from yourerror-handling DLL. Where you use the standardUserMessageDll provided by WIBU-SYSTEMS,insert the name of your application for activationin the UserMsgXx.ini as “BuyUrl”. By changingthe values for the “BuyNowbutton” and also the“BuyText” you can customize the name on thebutton and the tooltip.doesan suitablelicense fileexist?yescreate remotecontext fileyesenterserial numberyessend data via SOAPto CodeMeterLicense Centralyesapply remoteupdate fileendyesFigure: License fi le collection fl owchartNoimport licenseinformation fileCodeMeter LicenseCentral9

INTEGRATIONCodeMeter Binding ExtensionYou may already have a huge installed base of dongles (WibuBoxes or dongles from our competitors) and nowyou are thinking of switching to CodeMeter. But you are not sure about the financial commitment or logistic effortneeded to make the switch. We have the perfect solution: CodeMeterAct and the New binding extension.In most cases, the CodeMeterAct license fi le isbound to the characteristics of a particular PC.Beginning with CodeMeter version 4.10 you canreplace the default binding scheme with one ofyour own design. You simply write an extension tothe CodeMeter runtime (a CodeMeterAct BindingExtension) and deliver it along with your software.So you now have the option of integrating anydongle into CodeMeterAct. You can even defi newhat you want to use. You may only want tosimply read out a serial number, or maybe youwant to implement a cryptographic query. In anycase, your extension delivers a unique value. Thisvalue is used to bind your license instead of PCcharacteristics.Creation of the binding extensionA CodeMeter binding extension is a plug-in(a DLL in Windows), which implements a defined interface. Next to the four base functionsCmPluginIniT(), CmPluginGetFunctionality(),CmPluginDeInit() and CmPluginGetLastError-Code(), the plug-in also contains the functionCmPluginGetBindingValue ().In this function you return 64 hex charactersplus a terminating 0 as a string, which is usedas the fi ngerprint. So the calculation of this valueis all up to you. Depending on the functionalityof the dongle in use, we recommend that youuse encryption, a signature, or at least createa simple hash.Is a hacker able to replace this plug-in?Creating a plug-in is a very common task fora programmer. So, why can’t a hacker create adummy plug-in, which always sends this samevalue, in order to bypass the protection? Simple:it’s not possible because the plug-in is signedby your FSB. The CodeMeter Runtime loads only“successfully signed” plug-ins. The signaturecontains your Firm Code and a symbolic namefor the plug-in. The fact that only you have theprotected softwareFigure: Binding ExtensionCodeMeter.exeBindingExtension5.000.000FSB with your Firm Code makes you the onlyperson able to create unique signatures.When creating the license fi le, you enter yourFirm Code and the symbolic name of the plug-in.The symbolic name is specifi ed instead of thebinding scheme. The plug-in fi lename has tofollow the syntax [Firm Code]-[symbolic name].dll. If that is not the case, the “signatures” toolautomatically changes the name of the plugin.Only when the Firm Code and the symbolicname of the plug-in match the entries in thelicense fi le, will the license fi le get used alongwith the plug-in.When to call what?During the activation of a corresponding licenseand while checking the validity of such a license,your plug-in gets called by the CodeMeter.exe.When your plug-in is fi rst called, the functionsCmPluginInit and CmPluginGetFunctionality arealso called. You can initialize global variablesin the CmPluginInit. Note: the plug-in remainsloaded until you quit codemeter.exe, even if allcorresponding licenses have been removed. Whena corresponding license is activated, this meansa remote context fi le has been created fromthe license information fi le, the function Cm-GetBindingValue is called. If you cannot createthe fi ngerprint (e.g. no dongle is plugged in),the response should be either an error, or thecalculated value.The function CmGetBindingValue is also calledwhile loading the corresponding license. Whenthe corresponding licenses are available, yourplug-in is loaded when the CodeMeter runtimeis started. You can also initiate the check of yourfi ngerprint from within your application. Justcall the function CmRevalidateBox out of theCodeMeter-API. This call-up function triggersCmGetBindingValue for the licenses in use. Ifthe license is still valid, allocated licenses stayallocated after the call up. If the license is invalid,all allocated licenses in this license fi le areautomatically released. On the next access, yoursoftware shows the error: 106 (invalid handle).If an active license becomes invalid (becausethe corresponding dongle was not plugged inor available during the last check), the licensein the CodeMeter Control Center is displayedwith a broken symbol and a “repair” buttoncomes up. By clicking this button the customercan initiate the repair process (CmGetBinding-Value). Of course you can do this from within theapplication by using our API (CmRevalidateBox).When closing codemeter.exe , CmPluginDeInitis called up.Only dongles?While this routine provides for a smooth migrationfrom a competitor´s dongle to CodeMeter, itcan also be used to bind a license to any specifiedhardware component. For example: your ownserial number chip, a TPM chip, a DSP chip on asoundcard or any special hardware device.12

KNOW-HOWLicense BorrowingPreviously, an end-user (licensee) needing a temporary license was forced to go begging on bended knee to the softwaredeveloper (licensor) for special consideration. This resulted in both an unhappy customer and extra help desk costs.Today, with the license borrowing features built into CodeMeter, the end-user can reallocate existingCodeMeter licenses and CodeMeterAct licenses at any time.At times, an employee of a company holding avalid software license will urgently need to usethe software at a location without Internet access(a construction site, for example). But thesoftware license is located back in the office. Now,how to get a valid license without bothering thesoftware provider’s help desk, or compromisingthe software protection?The improved license borrowing features, availablein CodeMeter version 4.10, allow the licensorto determine if, when and how many validlicenses can be allocated or lent to the licenseewith a single mouse-click. For example, the licensormight confi gure a license in this manner: Tenlicenses total; three of them must stay on theserver and seven are lendable. To realize this, thelicensor must create the lending parameters andprepare the appropriate entries on the server sidewith corresponding entries on the client for thedifferent copy protection systems. In our example,Figure: CodeMeter Control Centerseven CmSticks could be prepared for lending. Atthe start, each of these CmSticks would containa valid license entry that can only be activatedvia the enabling process.License lending and expiration timesNow suppose that one license is required atanother location for a set period of time. Becausethe licensor had previously enabled license lendingwith this customer, he/she is able to createa temporary license with one click on a buttonin CodeMeter Control Center. Depending onthe time period, the former inactive entry in thestandby CmStick is now activated and the servernotes that one license has been lent out for aset period of time. At the end of this set period,the license will be returned automatically to theserver, and added to the pool of available licenses.The borrowed license is now useless. If the borrowedlicense is returned before the set time periodexpires, the license is added back to the poolimmediately. This means that a license borrowedby an employee for the weekend will be returnedto the pool on Monday morning automatically,even if the employee is late for work.CodeMeter and CodeMeterActCodeMeter and CodeMeterAct play nicely witheach other. License borrowing can take placewithin both systems, or across both systems,on either the server side or the client side. Forexample, the main licenses may reside on aserver inside a CodeMeterAct license fi le; butlending takes place on CmSticks. Such CmStickscould be used on any computer without anyadditional preparation. Of course the oppositescenario is also possible; main licenses protectedwith a CmStick and borrowed licenses going toa CmAct license fi le.Different license optionsThe licenses and the licenses options needn’tagree with these of the borrow server entry. It iseven possible to lend another Firm Code or ProductCode; this is a must for implementing overallcopy protection compatibility. The borrow serverlicense as CodeMeterAct license has for examplethe Firm Code 5010000 with the Product Code16, while the lending borrow client license ina CmStick contains the Firm Code 111000 withProduct Code 4821. All Firm Codes in use needthe corresponding FSB entry when programming.If you are borrowing a license, you activate theentry without access to the FSB of the so farinactive entry. A reprogramming of the contentdidn´t happen.Binding to a Server IDThe licenses of a Borrow Client entry can bebound to a ID of a Borrow Server entry. As resultthis lending is only possible from this BorrowServer entry: Even with different license optionsfor different customers the licensor has the securitythat licenses can be used only as intended.13

BILLBOARDShort NewsCE/UL/REACH/RoHS/Dual UseThere is a series of regulations for export andfor labeling the WibuBoxes and CmSticks. Wesummarized it on a leafl et.WIBU-SYSTEMS: committed toeducationWell trained employees are the most vitalasset in a company. WIBU-SYSTEMS showsits commitment to education by:Providing internships for students in both schools anduniversities.Offering professional education in different occupational areas.Supporting a foundation for gifted computer science studentsat the Karlsruhe Institute for Technology, KIT.Actively supporting several local associations: AmericanGerman Business Club Karlsruhe, Verein Karlsruher SoftwareIngenieure, Cyberforum, Förderverein FZI and Mobile RegionKarlsruhe.Supporting worthy community outreach groups, like thechurch sponsored “Liebe Frau” in Karlsruhe.And fi nally, we are a bronze sponsor of the new exhibitionIMAGINING MEDIA@ZKM, starting on October 9th, 2009.Engagement for adding valueand retaining value as a companyPhilosophyMedium-sized companies like WIBU-SYSTEMSAG and the ZKM | Center for Art and MediaTechnology have one thing in common: theyhave a worldwide vision. Medium-sized, localcompanies carry the economy and support regionalculture. That is why ZKM feels a kinshipto the innovative creativity of this company Barbara Schierl, ZKMand the IT sector in general. With two companies like WIBU-SYSTEMSand ZKM acting as beacons, the city of Karlsruhe and the wholeregion has a forward-thinking mentality, which will help provideprosperity for decades to come. Our responsibility at ZKM is to buildup relationships between the business community and the fi ne artsand to support the kind of development that produces social valueon a super scale. As one of the most innovative institutions in its fi eld,which is always eager to experiment, the ZKM – already possessingvery good reputation, even beyond Baden-Württemberg – is aninteresting partner for such cooperation.VitaBITVitaBIT is a European initiative providing securemobile information technology for medium-sizedbusinesses. WIBU-SYSTEMS, as the coordinator,contributes CodeMeter technology for security.Particularly, the CmCard/SD and μSD-Card versionscan be implemented in mobile phones. Thegoal of VitaBIT is to increase the mobility of nursingemployees by combining mobile and crossplatform services in outpatient care. This shouldmake practitioners more fl exible and should raisenursing quality considerably by promptly andsecurely supplying contextsensitive knowledgeright in the home.Mac OS X – Snow LeopardThe latest versions of CodeMeter (4.10) andWibuKey (6.0) support both Windows 7 and MacOS X 10.6. For example, AxProtector version 6.50contains many new features. Get latest versionat www.wibu.comCODiE Award 2009 WinnerCodeMeter was awarded a CODiE for its outstandingtechnology in the field of software protectionand license management. This prestigious awardwas presented to WIBU-SYSTEMS during the25th annual SIIA presentation ceremony thattook place in San Francisco on May 5th, 2009.The Software & Information Industry Association(SIIA) is the principal trade association for thesoftware and digital content industry providingintellectual property protection information toleading companies that are setting the pace forthe digital age.CodeMeter: Token and dongleBy incorporating an OEM version of charismathics’CSSI-Middleware, CodeMeter becomes thefi rst worldwide product combining the securityfunctions of both a token and a dongle in onesingle hardware package. You can store up to16 X.509 certifi cates in a CodeMeter Stick alongwith the typical Firm/Product Code entries. Acomplete implementation of Microsoft´s CryptoAPI, PKCS#11 and Apple’s TokenD allows theuse of popular PKI-applications, like Outlook,The charismathics Smart Security InterfaceMiddleware, CSSI, will be available beginningNovember 2009.&Propellerhead chooses CodeMeterPropellerhead Software a leader in providingsoftware applications for the music industry,selected WIBU-SYSTEMS’ CodeMeter technologyas the best solution available for protecting theirnew software application Record from reverseengineering, tampering and piracy. Record isa complete recording studio for Mac and PC.Propellerhead designed a classy red anodizedaluminium case to surround the CodeMeter electronicscreating the fi rst ever OEM version of aCodeMeter stick. Propellerhead calls this newOEM version an “Ignition Key”.14

CUSTOMER STORYCustomer story: LVD“LVD offers a full range of integrated products for sheet metal working worldwide. Our people and productsprovide customers with an intelligent solution for higher productivity and faster growth. With our commitmentto keep this promise we started our cooperation with WIBU-SYSTEMS in 1996. Back then, we introduced thefirst Windows-based press brake control software Cadman CNC to the market.”Why did you choose WIBU-SYSTEMS?“We benchmarked products of other providersagainst the solutions of WIBU-SYSTEMS. Wemade the decision to select WIBU-SYSTEMSsolutions because we cooperate with varioustechnology partners. WibuKey allows us tointegrate all security mechanisms in a singlesolution. This ensures that all of our partnersprofi t from the increase in security.Another very important aspect was that Wibu-Key represents the only security solution nothacked so far. All other software protectionsolutions available we found had been hackedwith “workarounds” that could be found onthe Internet.”What about implementation?“During implementation we learned how easyit is to integrate this complex technology. In thecase of smaller applications, AxProtector enabledstraightforward and integrated protection. Thissaves a lot of development time – time we areable to devote to our products! More complexprojects were accomplished using the API, andall of our requirements were easily met.We also protected these bigger projects withAxProtector. Now we have an optimal situation:a secure and protected software bundle exactlymatching our license model.”What were our experiences?“After more than 10 years of experience withWIBU-SYSTEMS, we still are enthused by theextreme reliability and the easy handling ofthis technology.For one, we had to replace less than 0.1%of the WibuBoxes resulting in high levels ofIntegrated Solutions for Sheet Metalworkingacceptance and satisfaction on the part of ourcustomers. Moreover, we have considerably lessmanagement efforts.The option byto remotely updated WibuB boxestransferring new licenses to customers wasalready an important decision criterion backthen. Our customers really appreciate this. Ultimately,this guarantees that we are able toreact to customer requests within the shortesttime possible. The ability to create “fl oating”licenses in a client-server installation was alsokey and the fact that each box may remotelyconfi gured as a server dongle at the same timeall infl uenced our decision in favor of WIBU-SYSTEMS. As far as we know, this feature is notprovided by any other company.In a nutshell, with WIBU-SYSTEMS we found areliable partner, and the product WibuKey hassupported us admirably in coping with the ongoingtechnological evolution. Congratulation toWIBU-SYSTEMS on your 20th anniversary!”Matthew FowlesGroup Marketing Manager, LVD15

20 YearsMEDIAACCESSPERFECTION IN SOFTWARE PROTECTIONDOCUMENTS U R V E YTell us what you thinkand win in any case!Please help us improve our KEYnote magazine. Take ouronline survey-it should only require 5 to 10 minutes ofyour time.We‘d like to learn from you which articles you fi nd mostinteresting, what additional information you‘re looking for,and any other thoughts you have about KEYnote. Leave usyour personal information to be entered in a drawing fora Playstation PS3 Slim or an iPod touch 32 GB. You canfi nd the online survey at:www.wibu.com/KEYnoteGood luck and thank you in advance.Visit us at the following fairs:SoftSummit 09October 21-22, 2009San Francisco, USAprio.conferenceOctober 28-29, 2009Munich, GermanyEuropean Software ConferenceNovember 07-08, 2009Berlin, Germanyw-jax09November 9-13, 2009Munich, GermanyImprintKEYnote18th edition, fall 2009Publisher:WIBU-SYSTEMS AGRueppurrer Strasse 52-5476137 KarlsruheTel. +49 72193172-0Fax +49 72193172-22info@wibu.comwww.wibu.comResponsible for thecontents:Oliver WinzenriedEditors:Rüdiger KüglerJohn PoulsonWolfgang VölkerOliver WinzenriedDesign and productionManuel KünstlerIris MelcherVanessa SchreinerLetters are welcome at anytime. They are protected bythe press secret. Articles identified by name do not necessarilyrefl ect the opinion ofthe editors.5060-002-02/20091015SecureCodeSeminarBackOfficeIntegrationSecure Code Seminar:November 03, 2009Zurich, SwitzerlandNovember 04, 2009Bletchley Park, United KingdomNovember 04, 2009Genf, SwitzerlandNovember 11, 2009Philips High-Tech Campus, The NetherlandsNovember 24, 2009Hengelo, The NetherlandsFebruary 9, 2010Breukelen, The NetherlandsFebruary 19, 2010Bletchley Park, United KingdomInternational PHP2009 ConferenceNovember 15-18, 2009Karlsruhe, GermanyThree fairs – 1 priceThe NAMM Show 2010January 14-17, 2010Anaheim, USAMacworld 2010February 09-13, 2010San Francisco, USAWIBU, CodeMeter and Smart-Shelter are international trademarksof WIBU-SYSTEMS. Allother trademarks belong totheir respective holders.(C) 2009 WIBU-SYSTEMS.All rights reserved.