Sunday February 05 , 2012

Zarqon Flex Demo

Here's how easy it is to secure your Flex application with Zarqon so that it will only run from the licensed site, and expose enabled features.

Step 1 - Create a Product

Using the Zarqon License Control Center, we can quickly create a Product to be licensed.

In this demo we will have three Features called 'This', 'That', and 'The Other'.

Learn more about creating Products.

Zarqon Flex Demo - Product Details

 

Step 2 - Issue a Site License for this Product.

By associating a website with the License, Zarqon will realize that it is securing a web application and not a desktop application. When your application uses the Zarqon API to validate a license, it will determine the website it is being served from and use that in the algorithm that decrypts the License.

Also, note that for this Flex demo we didn't define any Feature Sets, so we must individually enable each Feature we want the License to contain.

See the AIR demo for an example of grouping Features into Sets to make issuing a license even faster. The benefit to 'Ala carte' feature-enablement as we are doing here, is that we can set separate expirys and maximums for each Feature when we issue the License. Though it might take a few more clicks, it makes it easy for us to add a Feature to an existing License at a later time.

Learn more about issuing Licenses.

Zarqon Flex Demo - License Details

 

Step 3 - Write a Flex Application that uses the License.

The following is the salient portion of the code that validates the license and further enables or disables Features based on the License.

You can see the demo operating live on a valid site and an invalid site using the same license and code.

View the Source Code for the Flex demo.

Zarqon Flex Demo - Code

 

Step 4 - Test from the Licensed Site

Test the application on the licensed site and see that it works.

This means you need to compile the application (with the license key YOU issued and YOUR issuer key ), and deploy it to the site YOU licensed it to.

Zarqon Flex Demo - Valid Site

 

Step 5 - Test from an Unlicensed Site

Test the application on an unlicensed site and see that it does not work.

Take the same code that you deployed and tested with success in the previous step and deploy it to a different website. This could be another sub-domain of your website or a completely different domain. The features should not be enabled and the license should report as invalid.

Zarqon Flex Demo - Invalid Site

 

Step 6 - Test Disabling the License

Disable the license from the Zarqon Desktop Control Center.

When you select a License from the License Holder's list of Licenses, you'll see a red 'Revoke License' icon to the top right beside the pencil icon for editing the License. If you revoke the License this way, it doesn't open the Edit License Details dialog, it just disables it. You can also edit the License and uncheck the 'enabled' checkbox in the License details. Either way, once you revoke the License, save the License Holder.

Zarqon Flex Demo License Disabled

 

Step 7 - View Disabled Site

Test the application on the licensed site and see that it is now disabled.

Zarqon Flex Demo - Disabled Site

Step 8 - Test Expiring the License

Re-enable the license, but set the license expiry date to the current date.

For this test, you will have to wait at least one day after you issue the license, since the interface will allow you to set the expiry to any date after license issue date but not the issue date itself.

Zarqon Flex Demo - License Expiry

 

Step 9 - View Expired Site

View the licensed site and see that all the features are disabled and the license is reported as expired.

Zarqon Flex Demo - Expired Site

Zarqon AIR Demo

Zarqon AIR Demo

Zarqon Flex Demo

Zarqon Flex Demo

Did You Know...

AES Encryption is Strong Enough for Government Work

In June 2003, the US Government announced that AES encryption (the cipher used by Zarqon to encrypt license data) may be used to protect classified information:

"The design and strength of all key lengths of the AES algorithm (i.e., 128, 192 and 256) are sufficient to protect classified information up to the SECRET level."

Believe It or Not...

Amazon S3 is Reliable Enough for Wall Street

"Nasdaq stores many terabytes of  NYSE, Nasdaq and Amex data in Amazon’s storage cloud," according to Claude Courbois, associate VP, product development.

"Nasdaq adds 30 to 80 gigabytes of data every day to the cloud, about 300,000 flat files, each representing 10 minutes’ worth of trading activity on a stock.”