Radium can be deployed as a separate hardware module or as a standalone
Here is the process (simplified) in which Radium is used to protect
Radium is written in C for speed and platform portability and adds about
80K (unix, 120K windows) to your binary. You can lock applications and issue licenses for any of
the supported platforms from the one computer, as the radium locking tool
and issuer are also cross platform.
PKI (Public Key Infrastructure) licenses
The license management system is built using PKI primitives. 512 bit RSA
keys are used to validate licenses and validate executables. SHA-1 hashing is
used to verify fingerprints and 192 bit triple-des is added to safeguard the
binary and keys. These techniques make it very difficult to defeat the
license mechanism even with reverse compilation techniques.
Only the license issuer is able to issue keys for their application, and
license issuers are certified by us only. The issuing of licenses can only
be done by supplying a pass-phrase, and for extra security we license
the license issuer to only run on a designated machine.
Flexible license types
A Radium customer can issue several types of license:
- Host locked licenses allow your application to be run only on a host
the customer designates when they apply for a license.
- Time limited licenses will operate for a number of days from
license application. The length of the time trial is set by the license
issuer when they issue the license.
- Floating licenses which are not restricted in terms of time or host
can also be issued.
The license system is also extendable via the use of a third party vendor
code. This is useful for customers who ship hardware with their software.
The vendor code is locked into the license, and must match the hardware
serial code in order to execute.
Other uses of the vendor code include turning on/off different modules
within your application (eg. optional plugins) or licensing your software
based on number of CPUs in the customers' machines.
A vendor version identifer may also be tied to a license where you only
want to issue a license for a certain version (or hardware platform) of your software. The version
identifier in the license must match the version identifier in the binary in
order to function.
Cross platform support
Radium is portable across Windows and Unix variants. Applications from any
supported platform may be locked from any other platform, and the license
issuer itself is also cross platform. You have the freedom to use the
software on any platform we support.
When an executable is locked, a binary fingerprint is taken and stored in
the binary itself, along with the license issuer's credentials in encrypted
form. When the application runs, it checks that its own fingerprint is valid
before continuing, thus if someone attempts to modify the binary in any way,
the application is locked up and unusable.
Time trial licenses also include a clock tamper mechanism, where if
someone turns back the clock on their system to attempt extend a time
limited license, then the binary is again deactivated and rendered useless.
License issue audit trail
All licenses issued via the radium issuer are logged into an audit database,
in the event of customers losing their license details, or if someone tries
to reissue a license.
Web friendly management
The issuing of licenses may be done interactively via the supplied browser
issuer daemon. Alternatively, licenses may be issued via a command line
interface which is useful for wrapping up automated license issuing from
your own cgi based web services.
These features enable you to issue licenses straight away with an 'out of
the box' turnkey solution, while providing the flexibility to customise if
We are always looking to establish reference sites and construct
relationships with suitable sales partners. If your organisation is
interested in participating in running a Radium pilot site, we would be happy
to talk to you and provide a custom installation to you at a significantly
reduced cost. In return we would benefit from beng able to refer potential
customers to live reference sites.
Supplied in an industrial strength 1RU rack mountable computer, pre-installed
with Radium, this option would suit organisations who wish to seggregate
their architecture into 'black boxes' and who want a 'plug and play'
Suited to customers running their own hardware platforms who are
comfortable in installing and maintaining their own platforms. The software
only version is installed on the customer's own hardware.