Identifying, managing, accessing, and tracking digital objects and associated rights and payments

• US 20040064692A1
• Filed: 10/02/2003
• Published: 04/01/2004
• Est. Priority Date: 10/22/1993
• Status: Abandoned Application

• Current Assignee: Corporation for National Research Initiatives
• Original Assignee: Corporation for National Research Initiatives
• Inventors: Kahn, Robert E., Ely, David K.
• Application Number:
  US10/678,356
• Publication Number:
  US 20040064692A1
• Time in Patent Office: Days
• US Class Current: 713/167
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 40/02 Banking, e.g. interest calculation or account maintenance credit or loans G06Q40/03
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 61/45 Network directories; Name-to-address mapping
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method of managing digital objects in a network is presented. The objects are stored at locations accessible in the network using a storage technique which renders the digital objects secure against unauthorized access. Pointer information which associates each digital object identifier with a pointer indicating the location of the stored digital object is also stored in the network. For each digital object validation information is stored, separately from the digital object, and is sufficient to permit a determination whether a purported instance of a digital object is identical to the original. Other aspects include storing validation information which is substantially smaller in size than the corresponding digital object; storing validation information separately from the digital object; providing multiple servers each of which accepts identifiers of a subset of the digital objects and returns corresponding pointers to the locations of the digital objects in the network; registering rights in digital objects by submitting an application including the validation information and the unique identifier of a digital object; enabling holders of rights in digital objects to control terms and conditions under which they are accessed by users in a network; enabling holders of rights in digital objects to control terms and conditions under which rights in the digital objects may be granted to others; maintaining a record of information concerning digital objects stored on a network; providing a repository service; tracking events in the system; cataloging digital objects, and handling payment for access to digital objects and for obtaining rights using a network-based payment mechanism or compensation.

Claims

1. A method of managing digital objects in a network, each of the digital objects comprising a set of sequences of digits and having an associated identifier which is unique across the network, the method comprising

storing the digital objects at locations accessible in the network using a storage technique which renders the digital objects secure against unauthorized access,

storing pointer information which associates each digital object identifier with a pointer indicating the location of the stored digital object in the network, and

for each of the digital objects, storing, separately from the digital object, validation information sufficient to permit a determination whether a purported instance of a digital object is identical to the original instance.

2. The method of claim 1 further comprising

permitting an authorized user to have access to the validation information, using the digital object identifier, to determine whether a purported instance of a digital object is identical to the original instance.

3. The method of claim 1 wherein the validation information comprises a digital signature over the digital object.

4. A method of managing reference information about digital objects in a network, each of the digital objects comprising a set of sequences of digits and having an associated identifier which is unique across the network, the method comprising

storing the digital objects,

storing reference information for each of the digital objects, and

storing validation information for each of the digital objects which is substantially smaller in size than the corresponding digital object and which enables a determination of whether a purported instance of a digital object is identical to the original instance.

5. The method of claim 4 further comprising

permitting authorized users to have access to the reference information using the unique identifier.

6. The method of claim 4 wherein the reference information comprises information concerning at least one of the following:

registration of rights in digital objects;

accesses to and uses of digital objects;

the terms and conditions for access and use of digital objects;

the ownership and licensing of rights to digital objects;

links between different digital objects.

7. A method of storing digital objects in a network, each of the digital objects comprising a set of sequences of digits, the method comprising

generating an identifier for each of the digital objects which is unique across the network,

storing the digital objects in the network,

storing pointer information that associates each identifier of a digital object with the location of the digital object in the network,

generating verification information for each of the digital objects, the verification information being sufficient to determine whether a purported instance of the digital object is identical to the original instance, and

storing the verification information separately from the digital object.

8. The method of claim 7 wherein the pointer versus identifier information is stored in multiple servers on the network, and the identifiers are generated in a manner to distribute the pointer versus unique identifier information relatively evenly among the servers.

9. The method of claim 8 wherein the distribution of pointer versus unique identifiers to the multiple servers is based on a hashing algorithm.

10. A method for enabling users of a network to access digital objects stored in the network, each of the digital objects comprising a set of sequences of digits and having an associated identifier which is unique across the network, the method comprising

providing multiple pointer servers each of which accepts identifiers of a subset of the digital objects and returns corresponding pointers to the locations of the digital objects in the network, and

providing a directory server which accepts identifiers of any of the digital objects and returns the locations of the pointer servers which accept those identifiers.

11. A method of applying for registration of rights in digital objects comprising

storing the digital objects in a network,

generating validation information for each of the digital objects sufficient to determine whether a purported instance of a digital object is identical to the original,

generating a unique identifier for each of the digital objects,

associating with each of the unique identifiers a pointer to the location of the digital object in the network, and

submitting to a registering authority, an application for registration of rights including the validation information and the unique identifier.

12. A method of enabling holders of rights in digital objects to control terms and conditions under which they are accessed by users in a network, comprising

storing the digital objects in the network in a manner that permits only authorized access,

storing, in the network, information about terms and conditions for access to each digital object,

making the information about terms and conditions available to a user in connection with a request for access to a digital object,

enabling the user to indicate assent to the terms and conditions, and

permitting access to the user only upon the user indicating assent to the terms and conditions.

13. A method of enabling holders of rights in digital objects to control terms under which rights in the digital objects may be granted to others, comprising

storing, in the network, terms and conditions for licensing rights,

providing information on terms and conditions pertaining to works or other information or material that the digital object may be based on or incorporate,

making the terms and conditions available to potential rights holders and users, as appropriate, upon request via the network,

enabling the potential rights holder and the current rights holder to interact via the network to reach agreement on terms and conditions for grant of rights,

storing, in a recordation server on the network, information identifying grants of rights for digital objects on the network.

14. A method to permit a user to comply with terms and conditions of access to digital objects stored in a network, each of the digital objects comprising a set of sequences of digits and having an associated identifier which is unique across the network, the method comprising

storing in the network information which associates with each of the unique identifiers, a pointer to a rights management system including a terms and conditions server containing terms and conditions,

providing to the user in response to presentation of a unique identifier the pointer to the terms and conditions server,

providing to the user in response to presentation of the pointer, terms and conditions information,

enabling the user to indicate assent to the terms and conditions,

in response to the assent, permitting the user to access the digital object including performance of the object.

15. A method for maintaining a record of information concerning digital objects stored on a network, each of the digital objects comprising a set of digits and having an associated identifier which is unique across the network, the method comprising

storing the digital objects on the network in a manner that restricts unauthorized access to and transactions associated with the digital objects,

providing a reference service on the network, separate from the storage of the digital objects, for recording information about accesses to and transactions associated with the digital objects,

recording in the reference service information about accesses to and transactions associated with the digital objects, and

permitting access to the records of the reference service to authorized users.

16. A method for managing registration of claims to rights in digital objects and any works or other information or material that the object may be based on or incorporate, comprising

storing, in a repository which is accessible on a wide area network, copies of the digital objects, in a manner that enables only authorized accesses to the digital objects and permits verification that the stored digital objects have not been subjected to unauthorized alteration,

at an information and reference server which is accessible on the network at a different network address from the repository, providing registration services including receipt via the network of registration requests and delivery via the network of registration certifications, and

accessing, from the repository via the network, the objects for use in providing the registration services.

17. The method of claim 16 further comprising

enabling owners of rights in digital objects to deposit copies of the digital objects in the repository, via the network.

18. The method of claim 17 further comprising

providing a service, accessible on the network, for generating a unique handle for each digital object.

19. The method of claim 18 wherein

the handle for a digital object is unique both across the network and over time.

20. The method of claim 18 further comprising

providing a service, accessible on the network, for generating the handle and locating the pointer associated with the handle for a digital object.

21. The method of claim 18 wherein the handle is used to obtain a pointer to the network location of an accessible copy of the digital object.

22. The method of claim 18 wherein the handle comprises a pointer to the network location of information concerning obtaining authorization to use the digital object.

23. The method of claim 18 wherein the service is provided at multiple different locations on the network.

24. The method of claim 20 wherein the service is provided at multiple different locations on the network.

25. The method of claim 18 wherein the handles comprise character strings associated with the servers which generated them.

26. The method of claim 21 further comprising

providing a service, accessible on the network, for providing the pointer in response to a handle.

27. The method of claim 26 wherein there are multiple servers providing the service, each serving a portion of the handle space.

28. The method of claim 18 wherein there are multiple handle generation servers that may generate handles independently.

29. The method of claim 16 further comprising storing information concerning terms and conditions for access to and use of the digital objects.

30. The method of claim 29 wherein information concerning simple terms and conditions is stored in the repository.

31. The method of claim 16 wherein additional information concerning non-simple terms is held in a rights management system.

32. The method of claim 18 wherein each of the handles may be used to obtain one or more pointers to a location or locations on the network where a copy of the digital object-to which the handle is assigned is accessible.

33. The method of claim 32 wherein each of the handles may be used to obtain one or more pointers to one or more rights management system in which information concerning non-simple terms is held and where rights negotiation may be carried out.

34. The method of claim 18 wherein hash values are computed on the handles and the hash values are distributed among multiple handle servers, each handle server having a table which associates handles with pointers.

35. The method of claim 16 further comprising responding to requests, received via the network, for copies of the stored digital objects.

36. The method of claim 35 further comprising determining whether the requests for copies are authorized.

37. The method of claim 16 further comprising providing multiple repositories.

38. A method for providing a repository for use in network based regulation of claims in rights in digital objects comprising

storing copies of the digital objects in a repository accessible on the network, the copies being stored in a secure manner that precludes other than authorized access and that permits subsequent verification that there have been no unauthorized changes to the objects,

providing handles for the digital objects, each handle being unique across the network and over time, each handle including information sufficient to locate a copy of the digital object on the network, and

in connection with actions pertaining to regulation of claims in rights in the digital objects, using the handles to obtain authorized access to the digital objects.

39. The method of claim 38 wherein the actions include registration of claims in the rights.

40. The method of claim 39 wherein the actions include obtaining copies of the digital objects in exchange for compensation.

41. A network-based method for managing compensation for licensing of rights and other operations in digital objects, comprising

storing, in a recordation system available to authorized access on the network, information identifying the ownership of rights in digital objects,

receiving, at a rights management system available on the network, requests for rights in digital objects were the terms and conditions have not been stipulated in the properties record, and

in response to the requests for rights, issuing, from the rights management system to the recordation system via the network, requests to record information or transfers of rights in and other information pertaining to the digital objects and in works or other information or material on which the object may be based or incorporate.

42. The method of claim 41 wherein the rights comprise exclusive rights.

43. The method of claim 41 further comprising recording the transfer of rights in the recordation system in a manner which is secure against alteration.

44. The method of claim 41 wherein the request for transfer of rights is associated with a commitment to compensate the owner of the rights.

45. A method for compensating owners of rights in digital objects stored in a network for access to the digital objects by users via the network, comprising

storing on the network information associated with the digital objects and identifying the terms and conditions on which a user may have access to the digital objects via the network,

in connection with a request by a user for access to a digital object, fetching and providing to the user the terms and conditions, and

construing an action taken by the user in connection with requesting access to the digital object as agreement with the terms, and charging the user accordingly.

46. A method for managing handles for digital objects in a computer network comprising

including in the handle an indication of a local naming authority having control over generation of a subset of all global generated handles, and

including in the handle a string which is locally unique with respect to digital objects for which generation of handles are controlled by the local naming authority.

47. A method for managing generation of handles for digital objects in a computer network comprising

maintaining local naming authorities that control generation of handles for digital objects, the handles being a subset of all of the handles generated globally, and

maintaining a global naming mechanism that assures unique naming of the local naming authorities.

48. A method for managing handles for digital objects in a computer network comprising

managing some of the handles to be globally publicly accessible, and

managing some of the handles to be only locally and privately accessible.

49. A method of managing access to digital objects in repositories comprising

managing deposit of a digital object by accepting and storing the digital object and arranging for the generation and storage of an associated handle for the object, and

managing access to the digital object by a accepting and receiving a service request which-includes a handle.

50. A system of managing digital objects in a network comprising

a system of repositories which accept, store, and make disseminations of digital objects and portions of digital objects in response to requests received from any arbitrary location in the network,

a system of handle servers which provide services in connection with handles for digital objects stored in the repositories, and

a system of naming authorities which controls generation of handles on a global and local basis to assure locally unique and globally unique handles for digital objects.