Digital rights management using geographic and temporal traits

• US 10,248,802 B2
• Filed: 11/03/2017
• Issued: 04/02/2019
• Est. Priority Date: 12/18/2015
• Status: Active Grant

• Current Assignee: Adobe Inc.
• Original Assignee: Adobe Inc.
• Inventors: Anantharaman, Arun
• Primary Examiner(s): Korsak, Oleg
• Application Number:
  US15/803,452
• Publication Number:
  US 20180060598A1
• Time in Patent Office: 515 Days
• CPC Class Codes: G06F 21/1013 to locations
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 30/0185 Product, service or business identity fraud

Abstract

Digital rights management using geographic and temporal traits is described. In one or more implementations, a digital medium environment is configured to control access to at least on item of content by digital rights management functionality embedded as part of the content. Data is collected describing geographical traits of a location or temporal traits associated with a request received from the user to access the content. A determination is made from the data using a digital rights management module embedded as part of the content as to whether the geographical or temporal traits meet specified traits of a geographical behavior of a digital rights management policy enforced by the digital rights management module for the at least one item of the content. Responsive to a determination that the specified traits are met, access is permitted to the least one item of the content by the embedded digital rights management module.

Claims

1. In a digital medium environment to control access to at least one item of content by digital rights management functionality embedded as part of the content, a method implemented by a computing device, the method comprising:

collecting geographic data describing geographical traits of a location associated with a request received from the user, by the computing device, to access the content;

collecting social network data from at least one social network service associated with the user that originated the request, the social network data describing a location associated with a social network post as part of the at least one social network service;

determining from the data using a digital rights management module embedded as part of the content whether the geographical traits meet specified traits of a geographical behavior of a digital rights management policy enforced by the digital rights management module for the at least one item of the content, the determining including calculating a likelihood that access to the at least one item of content will be compromised at the location associated with the user and verifying the collected geographic data describing the geographical traits of the location using the collected social network data from the at least one social network service describing the location associated with the social network post; and

responsive to a determination that the specified traits are met, permitting access to the least one item of the content, by the embedded digital rights management module, at the geographic location.

2. The method as described in claim 1, wherein the collecting of the social network data describing the geographical traits is performed at least in part by accessing an analytics service by the computing device over a network.

3. The method as described in claim 2, wherein the social network data is collected by the analytics service from one or more other service providers via the network, the data associated with the user that originated the request.

4. The method as described in claim 3, wherein the one or more other service providers include the at least one social network service.

5. The method as described in claim 3, wherein the determining by the digital rights management module includes verifying geographic data describing geographical traits that is generated using position determination functionality of the computing device using the social network data collected by the analytics service.

6. The method as described in claim 1, further comprising responsive to a determination that the specified traits are not met, restricting access to the least one item of the content and permitting access to another item of content in which the access to the other item of content is not permitted if the determination is made that the specified traits are met.

7. The method as described in claim 1, wherein the calculating includes comparing the location to a list of locations that have a pre-calculated likelihood of resulting in the at least one item of the content being compromised.

8. The method as described in claim 1, wherein the calculating includes parsing text that describes the location to calculate the likelihood, the data obtained by the computing device via a network.

9. The method as described in claim 1, further comprising responsive to a subsequent determination that the location associated with the user responsive to the request has changed to another location that does not meet the specified traits, blocking access to the at least one item of content through execution of the embedded digital rights management module by the at least one computing device.

10. The method as described in claim 1, wherein the at least one item of the content does not describe characteristics of the location and thus the determining and the permitting are performed by the digital rights management module regardless of whether the at least one item of content, itself, is otherwise associated with the location.

11. In a digital medium environment to control access to at least on item of content by digital rights management functionality embedded as part of the content, a method implemented by a computing device, the method comprising:

collecting data describing temporal traits associated with a request received from a user to access the content by the computing device and geographical traits of a location associated with the request received from the user to access the content;

determining from the data using a digital rights management module embedded as part of the content whether the temporal traits meet specified traits of a temporal behavior of a digital rights management policy enforced by the digital rights management module for the at least one item of the content, the determining including calculating a likelihood of access to the at least one item of content being compromised at the location associated with the user;

responsive to a determination that the specified traits are met, permitting access to the least one item of the content by the embedded digital rights management module; and

permitting access to another item of the content by the embedded digital rights management module regardless of a result of the determination.

12. The method as described in claim 11, wherein the temporal traits associated with the user is a time associated with the request to access the at least one item of the content.

13. The method as described in claim 11, wherein the temporal traits associated with the user specify operational hours of a business that is associated with the content.

20. The method as described in claim 11, wherein the calculating the likelihood includes employing logic to determine a threat level likely associated with the location at which the at least one item of content is to be accessed.

14. A computing device comprising:

a processing system;

position determining functionality to generate data describing geographical traits of a location of the computing device; and

memory configured to maintain content having an embedded digital rights management module that is executable by the processing system to control access to respective ones of a plurality of items of the content based at least in part on a determination as to whether a request to access at least one item of the plurality of items of the content meets specified geographic traits of a behavior of a digital rights management policy enforced by the digital rights management module, the determination based in part on a calculation of a likelihood of access to the at least one item of content being compromised at the location, the control including verifying the data describing geographical traits that is generated using position determination functionality of the computing device using data collected by an analytics service.

15. The computing device as described in claim 14, wherein the data describing the geographical traits is collected through execution by the embedded digital rights management module to access the analytics service over a network.

16. The computing device as described in claim 15, wherein the calculating the likelihood includes employing logic to determine a threat level likely associated with location.

17. The computing device as described in claim 15, wherein the data is collected by the analytics service from one or more other service providers via the network, the data describing the user that originated the request.

18. The computing device as described in claim 15, wherein the embedded digital rights management module is configured to verify data describing the geographical traits that is generated using position determining functionality of the computing device using the data collected by the analytics service.

19. The computing device as described in claim 15, wherein the embedded digital rights management module is configured to control access to respective ones of the plurality of items of the content based on the specified geographic traits regardless of what is described by the respective ones of the plurality of items of the content.