Method of rights management for streaming media

• US 20030131353A1
• Filed: 12/11/2002
• Published: 07/10/2003
• Est. Priority Date: 12/11/2001
• Status: Abandoned Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Lindholm, Fredrik, Blom, Rolf, Selander, Goran
• Application Number:
  US10/316,891
• Publication Number:
  US 20030131353A1
• Time in Patent Office: Days
• US Class Current: 725/25
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04N 21/2347 involving video stream encryption
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4405 involving video stream decryption
• CPC Class Codes: H04N 21/47202 for requesting content on demand, e.g. video on demand
• CPC Class Codes: H04N 21/6125 involving transmission via Internet transmission by internet of broadcast information H04H60/82
• CPC Class Codes: H04N 21/63345 by transmitting keys key distribution for secret or secure communication H04L9/08; network support of key management H04L63/06
• CPC Class Codes: H04N 21/6437 Real-time Transport Protocol [RTP]
• CPC Class Codes: H04N 21/835 Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/84 Generation or processing of descriptive data, e.g. content descriptors systems specially adapted for using meta-information in broadcast systems H04H60/73
• CPC Class Codes: H04N 7/17318 Direct or substantially direct transmission and handling of requests

Abstract

The present invention relates to an arrangement, system and method for managing rights to streaming media using a management mechanism based on a content object and a rights object. In accordance with the invention the content object comprises means for initiation of the streaming media and the rights object comprises usage rules defining the rights to use said streaming media. The invention also relates to a method of delivering and protecting digital streaming media. The initiation may comprise a session description of the streaming media, a SDP description, a URL to said streaming media or a SMIL file. Preview and super-distribution are provided. The content object is delivered like a downloadable object in a rights management system for download, thereby reusing the mechanisms for rights management of said latter system for rights management in a system for transmission of streaming media.

Claims

1. An arrangement for managing rights to streaming media using a management mechanism based on a content object and a rights object, where said content object comprises means for initiation of said streaming media and said rights object comprises usage rules defining the rights to use said content object and/or said streaming media.

2. An arrangement in accordance with claim 1 wherein said initiation means comprises a session description of the streaming media, an SDP description, a URL to said streaming media or a SMIL file.

3. An arrangement in accordance with claim 1 or 2 wherein said rights object contains first cryptographic data related to cryptographic protection of at least a portion of said content object.

4. An arrangement in accordance with claim 3 wherein said content object further comprises second cryptographic data for cryptographic protection of said streaming media.

5. An arrangement in accordance with claim 4, wherein said second cryptographic data comprises at least one cryptographic key.

6. An arrangement in accordance with claim 4, wherein said second cryptographic data comprises several cryptographic keys protecting the streaming media.

7. A method of managing rights to streaming media using a management mechanism based on a rights object and an associated content object, said rights object comprising usage rules defining the rights to use said content object and/or said streaming media, said method further comprising the step of providing said content object with an initiation description for said streaming media.

8. A method in accordance with claim 7 wherein said initiation description is provided in the form of a session description of the streaming media, an SDP description, a URL to said streaming media or a SMIL file

9. A method in accordance with claim 7 or 8 comprising the further steps of cryptographically protecting at least a portion of said content object and providing said rights object with first cryptographic data used for said protection

10. A method in accordance with claim 9 comprising the further step of cryptographically protecting said first cryptographic data.

11. A method in accordance with claim 9 comprising the further steps of cryptographically protecting said streaming media and providing said content object with second cryptographic data used for said streaming media protection.

12. A method in accordance with claim 11 comprising the step of further protecting said streaming media using a security protocol

13. A method in accordance with claim 12 wherein said security protocol is the secure real time transport protocol (SRTP).

14. The method in accordance with claim 7 comprising the further step of transmitting the content object as a downloadable object in a rights management system for download, thereby reusing the mechanisms for rights management of said latter system for rights management in a system for transmission of streaming media.

15. The method in accordance with claim 7,comprising the further steps of providing said content object with a portion of said digital media, and transmitting said content object so provisioned to a user who has no rights or limited rights to said digital media

16. The method in accordance with claim 7, wherein the content object and/or rights object is protected by encryption and/or integrity protection.

17. A system for delivering digital streaming media and for managing rights to said digital media, wherein management of the rights uses a mechanism based on rights object and an associated content object, comprising:

server means for providing said streaming media,

means for generating a content object

means for generating a rights object,

means for generating content key means for use in cryptographic protection of at least part of said content object and for generating media key means for use in cryptographic protection of said media when streamed, said system further comprising;

means for generating an initiation description for said streaming media, and

means for storing said media key means and for allowing retrieval of said stored media key means for use in said cryptographic protection of said streaming media.

18. A system in accordance with claim 17, wherein said initiation description means generates a session description of the streaming media, an SDP description, a URL to said streaming media or SMIL file.

19. A method of delivering and protecting digital media using a management mechanism based on content object and a rights object, said digital media being streamed from a streaming server to a client, the method also allowing rights management of the streamed digital media and/or management of said content object, said method comprising the steps of:

the client requesting delivery of the digital media at a distribution server that contains information on the digital media,

said distribution server in response to said request delivering to the client a content object comprising a first portion containing meta data and a second portion containing a initiation description for the streaming media and cryptographic media key means for use in protection of the streaming media, said content object being protected with cryptographic content key means,

said distribution server in response to said request also delivering to the client a rights object containing usage rules defining the rights to use said content object and/or said streaming media, said rights object further comprising said content key means,

the client upon receipt of the rights object and the content object enforcing the rights to the content object and/or streaming media based on the information contained in said rights object and accessing said content object by using said content key means so as to read said initiation description,

the client, in response to reading of said description, initiating streaming media by setting up a connection between the client and said streaming server,

said streaming server, following the set up of said connection, protecting the streaming media using said media key means and delivering the so protected streaming media to the client,

the client upon receipt of the protected streaming media accessing the digital media using said media key means and rendering the accessed streaming media according to said usage rules.

20. The method in accordance with claim 19 comprising the further step of including in said initiation description:

URL of the streaming media; and

/or

metadata pertaining to the set up of a connection between said server and the client; and

/or

a reference to a streaming media protocol for transport of the streaming media from the said server to the client; and

/or

codec information on the streaming media.

21. The method in accordance with claim 19 comprising the further step of protecting said streaming media using a security protocol.

22. The method in accordance with claim 19, wherein said initiation description is provided in the form of an SDP description (Session Description Protocol) describing the streaming session of said streaming media.

23. The method in accordance with claim 22, wherein said cryptographic media key means is contained in the SDP description.

24. The method in accordance with claim 22, wherein said cryptographic media key means is provided separately from the SDP description.

25. The method in accordance with claim 19, wherein said initiation description is provided in the form of a SMIL file.

26. The method in accordance with claim 25, wherein said cryptographic media key means is contained in said SMIL file.

27. The method in accordance with claim 25, wherein said cryptographic media key means is provided separately from said SMIL file.

28. The method in accordance with claim 19, wherein the initiation description is provided in the form of a URL to said streaming media.

29. The method in accordance with claim 19, wherein several cryptographic media keys means are used for protection of the streaming media.

30. The method in accordance with claim 19 comprising the further step of including in the initiation description information on management of said cryptographic media key means, said information allowing for cryptographic protection of the streaming media and/or verification of data integrity of the streaming media with a new key derived from said first key.

31. The method in accordance with claim 19 comprising the further step of including in the meta data portion of the content object the URL (Uniform Resource Locator) of a distribution server.

32. The method in accordance with claim 19, wherein a user of said client transmits the content object to a second user

33. The method in accordance with claim 19 comprising the further step of using a secure real time transport protocol (SRTP) as streaming transport protocol.

34. The method in accordance with claim 19, wherein said cryptographic media key means is used to derive cryptographic information in order to integrity protect and/or verify reception of the streaming digital media.

35. The method in accordance with claim 19, wherein the content object and rights object are delivered to the client using HTTP (Hypertext Transfer Protocol) and/or WAP (Wireless Application Protocol) and/or SMS (Short Message Service)

36. The method in accordance with claim 19, wherein the content object and/or streaming digital media is protected by encryption and/or integrity protection.

37. The method in accordance with claim 19, wherein the rights object and/or content object is delivered to the client unprotected.