System for digital content access control

• US 20040054750A1
• Filed: 09/13/2002
• Published: 03/18/2004
• Est. Priority Date: 09/13/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard, Bostrom, Jon, Cooley, Aaron
• Granted Patent: US 7,363,651 B2
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 2463/103 applying security measure for protecting copy right protecting software against unauthorised usage in a vending or licensing environment, e.g. protection the software providers copyright G06F21/10; data processing systems or methods, specially adapted for payment schemes, architectures or protocols G06Q20/00; secrecy systems or subscription systems H04N7/16
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications
• CPC Class Codes: H04W 12/08 Access security

Abstract

A system for digital content access control comprises a first user device configured to send an authenticated digital content request received in response to sending a digital content request comprising a request for digital content. The system also comprises one or more content provisioners configured to send the authenticated digital content request to the first user device if a user associated with the digital content request is authorized to access the digital content. The system also comprises one or more content repositories configured to send the digital content to a second user device if the authenticated digital content request is associated with the digital content. The system also comprises a synchronizer configured to synchronize information used by the one or more content provisioners to create an authenticated digital content request with information used by the one or more content repositories to validate the authenticated digital content request.

Claims

1. A system for digital content access control, comprising:

a first user device configured to;

receive an authenticated digital content request in response to sending a digital content request comprising a request for digital content; and

send said authenticated digital content request;

a content provisioner configured to send said authenticated digital content request to said first user device if a user associated with said digital content request is authorized to access said digital content;

a content repository configured to send said digital content to a second user device if said authenticated digital content request is associated with said digital content; and

a synchronizer configured to;

determine a synchronization event for synchronization of information used by said content provisioner to create an authenticated digital content request with information used by said content repository to validate said authenticated digital content request; and

send said synchronized information to at least one of said content provisioner and said content repository in response to said synchronization event.

2. The system of claim 1 wherein said second user device comprises said first user device.

3. The system of claim 1 wherein

said digital content request comprises a Universal Resource Locator (URL);

and said authenticated digital content request comprises a tokenized URL.

4. The system of claim 1 wherein said digital content comprises at least one audio file.

5. The system of claim 1 wherein said digital content comprises at least one program code module.

6. The system of claim 1 wherein said digital content comprises at least one XML (Extensible Markup Language) document.

7. The system of claim 1 wherein said digital content comprises at least one Web page.

8. A system for digital content access control, comprising:

a first user device configured to;

receive an authenticated digital content request in response to sending a digital content request comprising a request for digital content; and

send said authenticated digital content request;

a portal configured to communicate with said first user device;

a content provisioner configured to send said authenticated digital content request to said first user device via said portal if said a user associated with said digital content request is authorized to access said digital content;

a content repository configured to send said digital content to a second user device if said authenticated digital content request is associated with said digital content; and

a synchronizer configured to;

determine a synchronization event for synchronization of information used by said content provisioner to create an authenticated digital content request with information used by said content repository to validate said authenticated digital content request; and

send said synchronized information to at least one of said content provisioner and said content repository in response to said synchronization event.

9. The system of claim 8 wherein said second user device comprises said first user device.

10. The system of claim 8 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

11. The system of claim 8 wherein said digital content comprises at least one audio file.

12. The system of claim 8 wherein said digital content comprises at least one program code module.

13. The system of claim 8 wherein said digital content comprises at least one XML (Extensible Markup Language) document.

14. The system of claim 8 wherein said digital content comprises at least one Web page.

15. A system for digital content access control, comprising:

one or more content repositories configured to send digital content associated with an authenticated digital content request to a first user device in response to a digital content request comprising a request for digital content issued by a second user device, said digital content request used to create said authenticated digital content request, said one or more content repositories comprising a token acceptor to validate said authenticated digital content request; and

a content provisioner, comprising;

a synchronizer configured to;

determine a synchronization event for synchronization of information used by said content provisioner to create an authenticated digital content request with information used by said plurality of content repositories to validate said authenticated digital content request; and

send said synchronized information to said one or more content repositories in response to said synchronization event; and

a token issuer configured to issue an authenticated digital content request if said a user associated with said digital content request is authorized to access said digital content.

16. The system of claim 15 wherein said second user device comprises said first user device.

17. The system of claim 15 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

18. The system of claim 15 wherein said digital content comprises at least one audio file.

19. The system of claim 15 wherein said digital content comprises at least one program code module.

20. The system of claim 15 wherein said digital content comprises at least one XML (Extensible Markup Language) document.

21. The system of claim 15 wherein said digital content comprises at least one Web page.

22. A system for digital content access control, comprising:

one or more content provisioners configured to send an authenticated digital content request to a user device if a user associated with a digital content request comprising a request for digital content is authorized to access said digital content, said one or more content provisioners comprising a token issuer configured to issue an authenticated digital content request if said user is authorized to access said digital content; and

a content repository comprising;

a synchronizer configured to;

determine a synchronization event for synchronization of information used by said plurality of content provisioners to create an authenticated digital content request with information used by said content repository to validate said authenticated digital content request; and

send said synchronized information to said one or more content provisioners in response to said synchronization event; and

a token acceptor configured to validate said authenticated digital content request.

23. The system of claim 22 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

24. The system of claim 22 wherein said digital content comprises at least one audio file.

25. The system of claim 22 wherein said digital content comprises at least one program code module.

26. The system of claim 22 wherein said digital content comprises at least one XML (Extensible Markup Language) document.

27. The system of claim 22 wherein said digital content comprises at least one Web page.

28. A system for digital content access control, comprising:

one or more content provisioners configured to send an authenticated digital content request to a first user device if a user associated with a digital content request comprising a request for digital content is authorized to access said digital content, said one or more content provisioners comprising a token issuer configured to issue an authenticated digital content request if said user is authorized to access said digital content; and

one or more content repositories configured to send said digital content associated with said authenticated digital content request to a second user device, said one or more content repositories comprising a token acceptor to validate said authenticated digital content request; and

a synchronizer configured to;

determine a synchronization event for synchronization of information used by said plurality of content provisioners to create an authenticated digital content request with information used by said plurality of content repositories to validate said authenticated digital content request; and

send said synchronized information to at least one of said one or more content provisioners and said one or more content repositories in response to said synchronization event.

29. The system of claim 28 wherein said second user device comprises said first user device.

30. The system of claim 28 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

31. The system of claim 28 wherein said synchronizer is operated by a trusted third party.

32. The system of claim 31 wherein said trusted third party comprises a financial services provider.

33. The system of claim 28 wherein said digital content comprises at least one audio file.

34. The system of claim 28 wherein said digital content comprises at least one program code module.

35. The system of claim 28 wherein said digital content comprises at least one XML (Extensible Markup Language) document.

36. The system of claim 28 wherein said digital content comprises at least one Web page.

37. A system for digital content access control, comprising:

a secure user device comprising;

a secret; and

a co-token issuer configured to receive a deactivated token associated with said digital content and activate said deactivated token based at least in part on said secret, said device further configured to create an authenticated digital content request based at least in part on said activated token;

a content provisioner comprising a token issuer, said content provisioner configured to receive a request for one or more deactivated tokens, said token issuer configured to issue said one or more tokens if said user is authorized to access said digital content;

a content repository comprising a token acceptor configured to validate said authenticated digital content request; and

a synchronizer configured to;

determine a synchronization event for synchronization of information used by said content provisioner, said content repository and said secure user device to create and validate said authenticated digital content request; and

send said synchronized information to at least one of said content provisioner, said content repository and said secure user device in response to said synchronization event.

38. The system of claim 37 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

39. The system of claim 37 wherein said digital content comprises at least one audio file.

40. The system of claim 37 wherein said digital content comprises at least one program code module.

41. The system of claim 37 wherein said digital content comprises at least one XML (Extensible Markup Language) document.

42. The system of claim 37 wherein said digital content comprises at least one Web page.

43. A system for digital content access control, comprising:

a token issuer configured to;

receive a digital content request comprising a request for digital content; and

issue a token from a token pool associated with said digital content if a user associated with said digital content request is authorized to access said digital content;

a token acceptor configured to validate a token based at least in part on whether said token is associated with said digital content; and

a synchronizer configured to;

determine a synchronization event for synchronization of token pool information used by said token issuer and said token acceptor; and

send said synchronized information to at least one of said token issuer and said token acceptor in response to said synchronization event.

44. The system of claim 43 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

45. The system of claim 43 wherein said digital content comprises at least one audio file.

46. The system of claim 43 wherein said digital content comprises at least one program code module.

47. The system of claim 43 wherein said digital content comprises at least one XML (Extensible Markup Language) document.

48. The system of claim 43 wherein said digital content comprises at least one Web page.

49. A memory for storing data for access by an application program being executed on a data processing system, comprising:

a data structure stored in said memory, said data structure including information used by said program to control access to digital content, said data structure comprising a token chain comprising one or more tokens, said token chain formed by applying a cryptographic process to one or more bits expressing an identifier in a series together with a token chain key.

50. A memory for storing data for access by an application program being executed on a data processing system, comprising:

a data structure stored in said memory, said data structure including information used by said program to control access to digital content, said data structure comprising a token chain comprising one or more tokens, said token chain formed from successive applications of a cryptographic one-way function.

51. A memory for storing data for access by an application program being executed on a data processing system, comprising:

a data structure stored in said memory, said data structure including information used by said program to control access to digital content, said data structure comprising a token comprising a cryptogram, said token based at least in part on digital content associated with said token.

52. The memory of claim 51 wherein said cryptogram authenticates said digital content.

53. The memory of claim 51 wherein said cryptogram authenticates a reference to said digital content.

54. The memory of claim 51 wherein said data structure further comprises a chain ID that associates said token with a token chain, said token chain comprising at least one token, each of said tokens associated with the same digital content.

55. The memory of claim 54 wherein said data structure further comprises a maximum length indicator that specifies the number of tokens comprising said token chain.

56. The memory of claim 54 wherein said data structure further comprises an identifier in a series that specifies a position within said token chain where said cryptogram is located.

57. The memory of claim 54 wherein said data structure further comprises an offset representing an identifier in a series.

58. The memory of claim 51 wherein said data structure further comprises a token type indicator that specifies the format of said token.

59. A memory for storing data for access by an application program being executed on a data processing system, comprising:

a data structure stored in said memory, said data structure including information used by said program to control access to digital content, said data structure comprising one or more token chains comprising one or more tokens and formed from successive applications of a cryptographic one-way function.

60. A memory for storing data for access by an application program being executed on a data processing system, comprising:

a data structure stored in said memory, said data structure including information used by said program to control access to digital content, said data structure comprising a token indicator that specifies a token that may be validated to gain access to said digital content at a content repository associated with said digital content.

61. The memory of claim 60 wherein said data structure further comprises one or more delivery parameter indicator that specify a method for delivering said digital content to an entity using said data structure to request said digital content.

62. The memory of claim 61 wherein said one or more delivery parameter indicators specify a cryptographic protection protocol.

63. The memory of claim 61 wherein said one or more delivery parameter indicators specify a destination address.

64. The memory of claim 61 wherein said one or more delivery parameter indicators specify a process to perform on said digital content before delivering said digital content to said entity.

65. The memory of claim 60 wherein said data structure further comprises a servlet indicator that specifies the pathname of a servlet at said access domain, said servlet capable of validating said tokenized URL for access to said digital content.

66. The memory of claim 60 wherein

said data structure further comprises a content item indicator that specifies a pathname for digital content located at said access domain;

and

said token indicator specifies a token that may be validated to gain access to digital content within a context associated with said token.

67. The memory of claim 66 wherein said data structure further comprises a servlet indicator that specifies the pathname of a servlet at said access domain, said servlet capable of validating said tokenized URL for access to said digital content.