Digital rights management license identification

• US 10,453,003 B2
• Filed: 09/18/2008
• Issued: 10/22/2019
• Est. Priority Date: 09/18/2008
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Inventors: McKelvey, Alexander
• Primary Examiner(s): Casey, Alexis M
• Application Number:
  US12/233,456
• Publication Number:
  US 20100070416A1
• Time in Patent Office: 4,051 Days
• Field of Search: 705 59, 705 57
• CPC Class Codes: G06Q 10/06 Resources, workflows, human or project management; Enterprise or organisation planning; Enterprise or organisation modelling
• CPC Class Codes: G06Q 50/18 Legal services

Abstract

A digital rights management license provides access to a content key that can be used to decrypt an encrypted digital content item. The digital rights management license also includes a policy that defines circumstances in which the content key is allowed to decrypt the encrypted digital content item. Further, the digital rights management license includes a license identifier. The license identifier is a digital fingerprint of at least a portion of the policy of the license.

Claims

1. A computer-implemented method of building a digital license for digital rights management executed on an electronic device, the method comprising:

assigning a decryption content key to the digital license, the electronic device requiring the decryption content key to decrypt content data encrypted by a symmetric encryption cryptographic content key;

assigning a policy in the digital license, the policy including a first portion not affecting rights granted by the policy and a second portion defining circumstances in which the decryption content key is allowed to decrypt the content data, the second portion including indication of when the digital license expires;

applying a deterministic sequence of instructions to the second portion of the policy to return a digital fingerprint based on the second portion of the policy but ignoring the first portion of the policy; and

assigning the digital fingerprint to the digital license as an identifier for the digital license.

2. The method of claim 1, where the deterministic sequence of instructions includes a hash function.

3. The method of claim 1, where the deterministic sequence of instructions returns a fixed-length string.

4. The method of claim 1, where the policy includes an indication of the content data to which the digital license applies.

5. The method of claim 1, where the policy includes an indication of to whom the digital license is issued.

6. The method of claim 1, where the policy includes an indication of whether the digital license allows playback.

7. The method of claim 1, where the policy includes an indication of whether the digital license allows copying.

8. The method of claim 1, where the decryption content key is itself encrypted with a public key so that only an electronic device with a corresponding symmetric private key can decrypt the decryption content key and thereby decrypt the content data.

9. The method of claim 1, where the decryption content key is itself encrypted with a public key so that only an electronic device belonging to a domain having access to a corresponding symmetric private key can decrypt the decryption content key and thereby decrypt the content data.

10. The method of claim 1, further comprising assigning a content key identifier to the digital license, the content key identifier identifying which content key is assigned to the digital license.

11. A computer-implemented method of building a digital license for digital rights management executed on an electronic device, the method comprising:

assigning a decryption content key to the digital license, the electronic device requiring the decryption content key to decrypt content data encrypted by a symmetric encryption cryptographic content key;

assigning a policy in the digital license, the policy including a first portion not affecting rights grated by the policy and a second portion defining circumstances in which the decryption content key is allowed to decrypt the content data, the second portion including indication of when the digital license expires;

applying a hash function to the second portion of the policy to return a digital fingerprint based on the second portion of the policy but ignoring the first portion of the policy; and

assigning the digital fingerprint of the portion of the policy to the digital license as an identifier for the digital license.

12. The method of claim 11 wherein the first portion of the policy includes a date of issuance of the policy.

13. A computer-implemented method of building a digital license for digital rights management executed on an electronic device, the method comprising:

assigning a decryption content key to the digital license, the electronic device requiring the decryption content key to decrypt content data encrypted by a symmetric encryption cryptographic content key;

assigning a policy in the digital license, the policy including a first portion not affecting rights granted by the policy and a second portion defining circumstances in which the decryption content key is allowed to decrypt the content data, the second portion including indication of when the digital license expires;

applying a hash function to the second portion of the policy to return a digital fingerprint based on the second portion of the policy but ignoring the first portion of the policy;

assigning the digital fingerprint to the digital license as an identifier for the digital license; and

randomizing the identifier for the digital license responsive to the second portion of the policy granting consumable, cumulative rights.

14. The method of claim 13 wherein the consumable, cumulative rights include a play count for the content data.