Licensing
In this chapter:
Licensing Principles
The FindFace Server licensing is granted using the following criteria:
The overall number of feature extractions, with grouping by feature.
Face attribute recognition: gender/age/emotions/glasses/beard/face mask/etc.
Body attribute recognition: clothing color/type/etc.
Vehicle attribute recognition: make/model/color/body style/etc.
License plate recognition.
Dumpster, container, trash bin, pet face, streetlight, garbage, merch, etc. attribute recognition.
The total
extraction-api
capacity is constrained by theextapi
limit.The total number of objects stored in all currently running
tntapi
instances.tntapi
fast index.The number of cameras with a given detector.
Video recording.
Face liveness detection.
You can choose between the following licensing methods:
The online licensing is provided by interaction with the NtechLab Global License Manager
license.ntechlab.com
and requires a stable internet connection, DNS, and open port 443 TCP. Upon being disconnected from the internet, the system will continue working off-grid for 4 hours.
Note
It is possible to prolongate the off-grid period for up to 2 days. Inform your manager if you need that.
The offline licensing via a USB dongle requires a USB port on the physical server with the
ntls
service.The Sentinel offline software licensing via hardware fingerprint requires Sentinel drivers installed on the physical server with the
ntls
service.The Guardant offline software licensing via hardware fingerprint requires Guardant Control Center installed on the physical server with the
ntls
service.
Important
For the system to function, a single instance of ntls
should be enough. If your system requires more license servers, contact your NtechLab manager beforehand to prevent your system from being blocked.
View and Update License
After installing FindFace Server, upload the license file you obtained from the manager into the system. Use ntls
web interface http://<NTLS_IP_address>:3185
.
Use General, Licenses, Intervals, Services tabs to consult current licensing information and upgrade your license.
Offline Licensing via USB dongle
To implement the licensing via a USB dongle, do the following:
Inform your manager that you intend to apply this licensing method and request your USB dongle and a license file.
Create a new udev rule.
Download the
95-grdnt.rules
file (e.g., into the/home/username/tmp/
directory).Copy the
95-grdnt.rules
file into the/etc/udev/rules.d/
directory.sudo cp /home/username/tmp/95-grdnt.rules /etc/udev/rules.d/
Reload udev rules.
udevadm control --reload udevadm trigger
Make sure the system has a device named
grdhid0
./dev/grdhid0
Mount the
/dev/grdhid0
device into thentls
container by using volume option at runtime with thedocker run
command.-v /dev/grdhid0:/dev/grdhid0
Sentinel Offline Software Licensing via Hardware Fingerprint
Note
Sentinel is a type of offline licenses that do not require any physical media for its work.
Glossary:
Sentinel is a software protection and licensing system by Thales. It allows you to implement offline licensing without access to a global server.
The C2V file is a file, containing data about a hardware fingerprint of the client’s machine, for binding the license only to this machine. This file is generated by the sentinel library. The C2V file is generated on the client’s machine where the license key will be installed later.
To implement the Sentinel fingerprint licensing, do the following:
Inform your manager that you intend to apply this licensing method and request your unique license id. The manager will also supply you with the
sentinel-lib_*.deb
package necessary for the FindFace Server and Sentinel integration.Install the Sentinel drivers on the physical server with the
ntls
component.Do the following:
Download Sentinel drivers from the official website.
Unzip the downloaded archive and browse to it.
tar -xvzf Sentinel_LDK_Linux_Runtime_Installer_script.tar.gz cd Sentinel_LDK_Linux_Runtime_Installer_script/
There is another archive
aksusbd-9.15.tar.gz
inside the archive. Unzip it and browse to the resulting directory.tar -xvzf aksusbd-9.15.tar.gz cd aksusbd-9.15/
Run the installation command.
sudo ./dinst
Run and check the statuses of the Sentinel services.
sudo systemctl start aksusbd.service hasplmd.service sudo systemctl status aksusbd.service hasplmd.service
Mount the
/var/hasplm
and/etc/hasplm
directories into thentls
container. To do so, use-v
option at runtime with thedocker run
command.-v /var/hasplm:/var/hasplm -v /etc/hasplm:/etc/hasplm
ntls
must be running in the host’s network namespace.--net=host
Put the
sentinel-lib_*.deb
package received from your manager into some directory on the same host. Install the package.sudo dpkg -i /path/to/sentinel-lib_*.deb
Take a hardware fingerprint (C2V file) by sending the following API request to
ntls
.wget <NTLS_IP_address>:3185/c2v -o sentinel.c2v
Send the License ID and the C2V file to your manager and receive your license file in return.
Upload the license file on the web interface
http://<NTLS_IP_address>:3185
.
Guardant Offline Software Licensing via Hardware Fingerprint
Note
This type of license is similar to Sentinel offline software licenses, but requires the Guardant service to function instead of Sentinel services.
To implement the Guardant fingerprint licensing, follow these steps:
Inform your manager that you intend to use this licensing method and request your unique license id.
Install the Guardant Control Center on the physical server with the
ntls
component.Do the following:
Download Guardant Control Center from the official website. For Ubuntu/Debian, download the
grdcontrol*.deb
package. The most recent version that has been tested with is 3.27. Use later versions of Guardant Control Center, if any, at your own discretion.Install it. E.g., if you are running Ubuntu, execute:
sudo dpkg -i /path/to/grdcontrol*.deb
Make sure that the Guardant Control Center is up and running. On Ubuntu 22.04, you can do this as follows:
sudo systemctl enable grdcontrol --now sudo systemctl status grdcontrol
ntls
must be running in the host’s network namespace.--net=host
Take a hardware fingerprint (C2V file) by sending the following API request to
ntls
.wget <NTLS_IP_address>:3185/c2v/guardant -o guardant.c2v
Warning
Be aware that Sentinel c2v is not compatible with Guardant c2v and vice versa.
Note
You can also download c2v using the
ntls
web interface.Send the License ID and the C2V file to your manager and receive your license file in return.
Upload the license file on the web interface
http://<NTLS_IP_address>:3185
.