Method for managing access and use of resources by verifying conditions and conditions for use therewith

• US 20030009424A1
• Filed: 06/07/2002
• Published: 01/09/2003
• Est. Priority Date: 05/31/2001
• Status: Abandoned Application

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Tran, Duc, Wang, Xin, Fung, Joseph Z., Ta, Thanh, Tadayon, Bijan, DeMartini, Thomas, Valenzuela, Edgardo, Nguyen, Mai, Lao, Guillermo, Tieu, Vincent
• Application Number:
  US10/163,634
• Publication Number:
  US 20030009424A1
• Time in Patent Office: Days
• US Class Current: 705/51
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G07F 17/0014 for vending, access and use of specific services not covered anywhere else in G07F17/00 meter-controlled dispensing of liquid, gas or electricity G07F15/00
• CPC Class Codes: G07F 17/16 for devices exhibiting advertisements, announcements, pictures or the like
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method and apparatus for managing access to resources that integrates both authorization and protection for a wide range of resources. The rights to access a protected resource are based on conditions. Conditions are associated with both resource the resource and the state of the resource to thereby protect the resource at various stages during its life cycle. Conditions that are associated with the entire life cycle of the protected resource can be expressed by use of a grammar including data structures, sets of rules or a language.

Claims

1. A method for managing use of protected resources within a system of resources, said method comprising:

granting access to a protected resource by a principal when pre-conditions associated with the protected resource and the principal are satisfied;

permitting the principal to continue to access the protected resource while during-access conditions associated with the protected resource and the principal are satisfied, said during-access conditions being distinct from said preconditions; and

terminating access to the protected resource by the principal when a termination event occurs, said termination event comprising either the satisfaction of post conditions distinct from said during-access conditions or a failure to continue satisfaction of said during-access conditions.

2. A method as recited in claim 1, wherein said pre-conditions are associated with a usage right and wherein said protected resource comprises a primary resource associated with the usage right and derived resources for exercising the usage right in connection with the primary resource.

3. A method as recited in claim 2, wherein said primary resource is digital content and said derived resources are resources for rendering said protected content.

4. A method as recited in claim 1, where said during-access conditions specify state variables indicating a state of the protected resource and wherein values of said state variables are evaluated against said during-access conditions to determine if said during-access conditions are satisfied.

5. A method as recited in claim 2 wherein said during-access conditions are applied to said primary resource and said derived resources.

6. A method as recited in claim 1, wherein said during-access conditions include conditions on the state of the system in which the protected resource is accessed.

7. A method as recited in claim 1, wherein said during-access conditions include conditions on the device in which the protected resource resides.

8. A method as recited in claim 1, wherein said protected resource is digital content.

17. A method as recited in claim 8, wherein said protected resource is digital content.

9. A method for managing use of protected resources within a system of resources, said method comprising;

preparing pre-conditions that must be satisfied to obtain access to a protected resource;

preparing during-access conditions that must be satisfied to continue access to said protected resource;

when said protected resource is inactive, enforcing said preconditions until said preconditions are satisfied; and

rendering said protected resource active and enforcing said during-access conditions when said pre-conditions have been satisfied.

10. A method as recited in claim 9, further comprising the step of terminating access to the protected resource by the principal when a termination event occurs, said termination event comprising either the satisfaction of post conditions distinct from said during-access conditions or a failure to continue satisfaction of said during-access conditions.

11. A method as recited in claim 10, wherein said pre-conditions are associated with a usage right and wherein said protected resource comprises a primary resource associated with the usage right and derived resources for exercising the usage right in connection with the primary resource.

12. A method as recited in claim 11, wherein said primary resource is digital content and said derived resources are resources for rendering said protected content.

13. A method as recited in claim 10, where said during-conditions specify state variables indicating a state of the protected resource and wherein values of said state variables are evaluated against said during-conditions to determine if said during-conditions are satisfied.

14. A method as recited in claim 11 wherein said during-access conditions are applied to said primary resource and said derived resources.

15. A method as recited in claim 10, wherein said during-access conditions include conditions on the state of the system in which the protected resource is accessed.

16. A method as recited in claim 10, wherein said during-access conditions include conditions on the device in which the protected resource resides.

19. A condition specification as recited in claim 18, wherein said method specification includes a location of a device on which the value of the state variable is stored.

20. A condition specification as recited in claim 18, wherein said method specification includes a communication protocol for obtaining the value of the state variable.

21. A condition specification as recited in claim 18, further comprising a usage right to be exercised when the condition is satisfied.

22. A condition specification as recited in claim 18, wherein the condition is a during-access condition that must be satisfied to continue use of a resource after access to the resource has been granted.

18. A condition specification adapted to associate a condition with a protected resource to control the protected resource within a system for managing protected resources, said specification comprising:

a resource designation indicating the protected resource that the condition is associated with;

a state variable indicating a status of the resource with respect to the condition; and

a method specification indicating a manner by which the value of the state variable can be obtained form a device.