Digital rights management system on a virtual private network

• US 20030225854A1
• Filed: 05/28/2002
• Published: 12/04/2003
• Est. Priority Date: 05/28/2002
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Dahl, Patric, Zhang, Peng, Yan, Zheng
• Application Number:
  US10/154,854
• Publication Number:
  US 20030225854A1
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

The invention is a method and a network providing efficient and controlled DRM of digital rights within one or more VPNs (12). A network (10) in accordance with the invention includes at least one digital rights user (18 and 20), each digital rights user being a user of digital rights, a DRR (30) of the digital rights, a VPN (12), a DRDS (32), coupled to the at least one DRU, and to the storage, which distributes the digital rights to the at least one DRU, and a DRPM (34), coupled to the DRDS which controls providing of the digital rights stored in the DRR to the at least one DRU.

Claims

1. A network comprising:

at least one digital rights user with each digital rights user being a user of digital rights; and

at least one virtual private network, each virtual private network including a storage of the digital rights, a server, coupled to the at least one digital rights user and to the storage, which distributes the digital rights to the at least one digital rights user, and a digital rights manager, coupled to the server and to the storage, which controls providing of the digital rights stored in the storage to the at least one digital rights user.

2. A network in accordance with claim 1 wherein:

the at least one digital rights user is external to the at least one virtual private network.

3. A network in accordance with claim 1 wherein:

the at least one digital rights user is internal to the at least one virtual private network.

4. A network in accordance with claim 1 wherein:

the at least one digital rights user are plural digital rights users with at least one digital rights user being internal to the at least one virtual private network and at least one digital rights user being external to the at least one virtual private network.

5. A network in accordance with claim 1 wherein:

each manager manages digital contents internal to the network including the digital rights.

6. A network in accordance with claim 2 wherein:

each manager manages digital contents internal to the network including the digital rights.

7. A network in accordance with claim 3 wherein:

each manager manages digital contents internal to the network including the digital rights.

8. A network in accordance with claim 4 wherein:

each manager manages digital contents internal to the network including the digital rights.

9. A network in accordance with claim 1 wherein:

the digital contents comprise at least one of video, audio, documents or files.

10. A network in accordance with claim 5 wherein:

the manager creates the digital rights from the digital contents and at least one policy controlling the digital rights and storage of the created digital rights in the storage.

11. A network in accordance with claim 6 wherein:

the manager creates the digital rights from the digital contents and at least one policy controlling issuing of digital rights and controls storage of the created digital rights in the storage.

12. A network in accordance with claim 7 wherein:

the manager creates the digital rights from the digital contents and at least one policy controlling the digital rights and storage of the created digital rights in the storage.

13. A network in accordance with claim 8 wherein:

the manager creates the digital rights from the digital contents and at least one policy controlling the digital rights and storage of the created digital rights in the storage.

14. A network in accordance with claim 10 wherein:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

15. A network in accordance with claim 11 wherein:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

16. A network in accordance with claim 12 wherein:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

17. A network in accordance with claim 13 wherein:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

18. A network in accordance with claim 10 wherein:

a policy is a set of rules which governs at least one of when, how to create, recreate, distribute, use, manage the digital rights and what usage conditions should be included in the digital rights.

19. A network in accordance with claim 14 wherein:

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

20. A network in accordance with claim 15 wherein;

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

21. A network in accordance with claim 16 wherein;

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

22. A network in accordance with claim 17 wherein;

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

23. A network in accordance with claim 1 wherein:

each user is authenticated to be a legitimate user of the digital rights by the server prior to distributing of the digital rights to the user.

24. A network in accordance with claims 1 comprising:

a certificate authority which provides a certificate for each of the at least one user; and

wherein

the certificate of each of the at least one user is presented to the server which distributes the digital rights to each user presenting the user'"'"'s certificate under the control of the manager when the certificate presented by the user authenticates that the user is a legitimate user of the digital rights being requested.

25. A network in accordance with claim 24 wherein:

the certificate authority is within the at least one virtual private network.

26. A network in accordance with claim 24 wherein:

the certificate authority is outside the at least one virtual private network.

27. A network in accordance with claim 2 wherein:

the at least one digital rights user external to the at least one virtual private network is in another virtual private network and the virtual private networks are connected together by at least one secure link.

28. A network in accordance with claim 4 wherein:

the at least one digital rights user external to the at least one virtual private network is in another virtual private network and the virtual private networks are connected together by at least one secure link.

29. A network in accordance with claim 1 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

30. A network in accordance with claim 2 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

31. A network in accordance with claim 3 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

32. A network in accordance with claim 4 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

33. A network in accordance with claim 5 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

34. A network in accordance with claim 10 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

35. A network in accordance with claim 14 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

36. A network in accordance with claim 19 comprising:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

37. A network in accordance with claim 29 wherein:

the source of external digital rights is operated independently of the operation of at least one digital network.

38. In a network comprising at least one digital rights user with each digital rights user being a user of digital rights and at least one virtual private network including a storage of the digital rights, a server, coupled to the at least one digital rights user and to the storage, which distributes the digital rights to the at least one digital rights user and a digital rights manager, coupled to the server and to the storage, a method of distribution of the digital rights comprising:

at least one of the at least one user requests digital rights from the server; and

in response to the request from the at least one user, the manager controls providing of the digital rights from the storage to the server which distributes the digital rights to the at least one user requesting the digital rights.

39. A method in accordance with claim 38 wherein:

the at least one digital rights user is external to the at least one virtual private network.

40. A method in accordance with claim 38 wherein:

the at least one digital rights user is internal to the at least one virtual private network.

41. A method in accordance with claim 38 wherein:

the at least one digital rights user are plural digital rights users with at least one digital rights user being internal to the at least one virtual private network and at least one digital rights user being external to the at least one virtual private network.

42. A method in accordance with claim 38 comprising:

the manager manages digital contents internal to the network including the digital rights.

43. A method in accordance with claim 39 comprising:

the manager manages digital contents internal to the network including the digital rights.

44. A method in accordance with claim 40 comprising:

the manager manages digital contents internal to the network including the digital rights.

45. A method in accordance with claim 41 comprising:

the manager manages digital contents internal to the network including the digital rights.

46. A method in accordance with claim 42 wherein:

the digital contents comprise at least one of video, audio, documents or files.

47. A method in accordance with claim 42 comprising:

the manager creates the digital rights from the digital contents and at least one policy controlling the digital rights and storage of the created digital rights in the storage.

48. A method in accordance with claim 43 comprising:

the manager creates the digital rights from the digital contents and at least one policy controlling the digital rights and storage of the created digital rights in the storage.

49. A method in accordance with claim 44 comprising:

the manager creates the digital rights from the digital contents and at least one policy controlling the digital rights and storage of the created digital rights in the storage.

50. A method in accordance with claim 45 comprising:

the manager creates the digital rights from the digital contents and at least one policy controlling the digital rights and storage of the created digital rights in the storage.

51. A method in accordance with claim 47 comprising:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

52. A method in accordance with claim 48 comprising:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

53. A method in accordance with claim 49 comprising:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

54. A method in accordance with claim 50 comprising:

the at least one policy also comprises conditions pertaining to managing, creating, recreating, use or distributing of the digital rights stored in the storage by the server to the at least one user.

55. A method in accordance with claim 51 wherein:

a policy is a set of rules which governs at least one of when, how to create, recreate, distribute, use, manage the digital rights and what usage conditions should be included in the digital rights.

56. A method in accordance with claim 51 comprising:

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

57. A method in accordance with claim 52 comprising:

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

58. A method in accordance with claim 53 comprising:

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

59. A method in accordance with claim 54 comprising:

the conditions on managing, creating, recreating, use or distributing of the digital rights are dependent upon a time at which the digital rights are requested by the at least one user.

60. A method in accordance with claim 38 comprising:

each user is authenticated to be a legitimate user of the digital rights by the server prior to distributing of the digital rights to the user.

61. A method in accordance with claim 38 comprising:

a certificate authority which provides a certificate for each of the at least one user; and

wherein

the certificate of each of the at least one user is presented to the server which distributes the digital rights to each user presenting the user'"'"'s certificate under the control of the manager when the certificate presented by the user authenticates that the user is a legitimate user of the digital rights being requested.

62. A method in accordance with claim 38 wherein:

a source of external digital rights external to the at least one virtual private network which provides digital rights thereto; and

wherein

the at least one manager of the at least virtual private network to which the external source of digital rights is coupled controls storage of the digital rights received from the external source of digital rights and providing of the external digital rights to the at least one user.

63. A method in accordance with claim 62 comprising:

the certificate authority is within the virtual private network.

64. A method in accordance with claim 62 comprising:

the certificate authority is external the virtual private network.

65. A method in accordance with claim 64 comprising:

the source of external digital rights is operated independently of the operation of at least one digital network.

66. In a network comprising at least one digital rights user with each digital rights user being a user of digital rights and a digital rights issuer virtual private network which issues the digital rights and a digital rights user virtual private network containing the at least one digital rights user, each virtual private network including a storage of the digital rights, a server, coupled to the at least one digital rights user and to the storage, which distributes the digital rights to the at least one digital rights user and a digital rights manager, coupled to the server and to the storage, a method of distribution of the digital rights comprising:

at least one of the at least one user requests digital rights from the server of the digital rights user virtual private network;

the digital rights manager of the digital rights user virtual private network requests the digital rights from the digital rights issuer virtual private network;

the digital rights issuer virtual private network transmits the digital rights to the digital rights user virtual private network; and

the digital rights user virtual private network transmits the digital rights to the at least one user of digital rights.

67. A method in accordance with claim 66 wherein:

the digital rights user virtual private network in response to receipt of the digital rights from the digital rights issuer virtual private network transmits the digital rights from the digital rights manager to the storage, from the storage to the server and from the server to the at least one user of digital rights.

68. A method in accordance with claim 66 wherein:

the digital rights issuer virtual private network, in response to the request for digital rights, transmits the request from the server to the manager which creates the digital rights;

the digital rights created by the manager are transmitted from the manager to the storage;

the digital rights are transmitted from the storage to the server; and

the digital rights are transmitted from the server to the manager of the digital rights user virtual private network.

69. A method in accordance with claim 67 wherein:

the digital rights issuer virtual private network, in response to the request for digital rights, transmits the request from the server to the manager which creates the digital rights;

the digital rights created by the manager are transmitted from the manager to the storage;

the digital rights are transmitted from the storage to the server; and

the digital rights are transmitted from the server to the manager of the digital rights user virtual private network.