Accessing for digital content access control

• US 20040064719A1
• Filed: 09/13/2002
• Published: 04/01/2004
• Est. Priority Date: 09/13/2002
• Status: Abandoned Application

• Current Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard, Bostrom, Jon, Cooley, Aaron
• Application Number:
  US10/243,355
• Publication Number:
  US 20040064719A1
• Time in Patent Office: Days
• US Class Current: 713/200
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

A method and apparatus for digital content access control comprises sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating the request, receiving an authenticated digital content request in response to the digital content request and sending the authenticated digital content request to a content repository that provides storage for the digital content.

Claims

1. A method for digital content access control, the method comprising:

sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request;

receiving an authenticated digital content request in response to said digital content request; and

sending said authenticated digital content request to a content repository that provides storage for said digital content.

2. The method of claim 1, further comprising receiving said digital content in response to said authenticated digital content request.

3. The method of claim 1 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

4. The method of claim 3 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

5. The method of claim 4 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

6. A method for digital content access control, the method comprising:

sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request, said content provisioner capable of creating an authenticated digital content request based at least in part on said digital content request if access to said digital content is authorized, said content provisioner capable of communicating said authenticated digital content request to a content repository capable of returning said digital content; and

receiving digital content corresponding to said digital content request.

7. The method of claim 6 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

8. The method of claim 7 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

9. The method of claim 8 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

10. A method for digital content access control, the method comprising:

receiving at least one deactivated token for accessing digital content;

activating said at least one deactivated token to create at least one activated token;

creating an authenticated digital content request based at least in part on said at least one activated token; and

sending said authenticated digital content request to a content repository that provides storage for said digital content.

11. The method of claim 10, further comprising receiving said digital content in response to said authenticated digital content request.

12. The method of claim 11 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

13. The method of claim 12 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

14. The method of claim 13 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

15. A method for digital content access control, the method comprising:

step for sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request;

step for receiving an authenticated digital content request in response to said digital content request; and

step for sending said authenticated digital content request to a content repository that provides storage for said digital content.

16. The method of claim 15, further comprising step for receiving said digital content in response to said authenticated digital content request.

17. The method of claim 16 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

18. The method of claim 17 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

19. The method of claim 18 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

20. A method for digital content access control, the method comprising:

step for sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request, said content provisioner capable of creating an authenticated digital content request based at least in part on said digital content request if access to said digital content is authorized, said content provisioner capable of communicating said authenticated digital content request to a content repository capable of returning said digital content; and

step for receiving digital content corresponding to said digital content request.

21. The method of claim 20 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

22. The method of claim 21 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

23. The method of claim 22 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

24. A method for digital content access control, the method comprising:

step for receiving at least one deactivated token for accessing digital content;

step for activating said at least one deactivated token to create at least one activated token;

step for creating an authenticated digital content request based at least in part on said at least one activated token; and

step for sending said authenticated digital content request to a content repository that provides storage for said digital content.

25. The method of claim 24, further comprising step for receiving said digital content in response to said authenticated digital content request.

26. The method of claim 25 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

27. The method of claim 26 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

28. The method of claim 27 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

29. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request;

receiving an authenticated digital content request in response to said digital content request; and

sending said authenticated digital content request to a content repository that provides storage for said digital content.

30. The program storage device of claim 29 wherein said method further comprises receiving said digital content in response to said authenticated digital content request.

31. The program storage device of claim 30 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

32. The program storage device of claim 31 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

33. The program storage device of claim 32 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

34. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request, said content provisioner capable of creating an authenticated digital content request based at least in part on said digital content request if access to said digital content is authorized, said content provisioner capable of communicating said authenticated digital content request to a content repository capable of returning said digital content; and

receiving digital content corresponding to said digital content request.

35. The program storage device of claim 34 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

36. The program storage device of claim 35 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

37. The program storage device of claim 36 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

38. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

receiving at least one deactivated token for accessing digital content;

activating said at least one deactivated token to create at least one activated token;

creating an authenticated digital content request based at least in part on said at least one activated token; and

sending said authenticated digital content request to a content repository that provides storage for said digital content.

39. The program storage device of claim 38 wherein said method further comprises receiving said digital content in response to said authenticated digital content request.

40. The program storage device of claim 39 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

41. The program storage device of claim 40 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

42. The program storage device of claim 41 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

43. An apparatus for digital content access control, the apparatus comprising:

means for sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request;

means for receiving an authenticated digital content request in response to said digital content request; and

means for sending said authenticated digital content request to a content repository that provides storage for said digital content.

44. The apparatus of claim 43, further comprising means for receiving said digital content in response to said authenticated digital content request.

45. The apparatus of claim 43 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

46. The apparatus of claim 45 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

47. The apparatus of claim 46 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

48. An apparatus for digital content access control, the apparatus comprising:

means for sending a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request, said content provisioner capable of creating an authenticated digital content request based at least in part on said digital content request if access to said digital content is authorized, said content provisioner capable of communicating said authenticated digital content request to a content repository capable of returning said digital content; and

means for receiving digital content corresponding to said digital content request.

49. The apparatus of claim 48 wherein

means for said digital content request comprises a Universal Resource Locator (URL);

and

means for said authenticated digital content request comprises a tokenized URL.

50. The apparatus of claim 49 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

51. The apparatus of claim 50 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

52. An apparatus for digital content access control, the apparatus comprising:

means for receiving at least one deactivated token for accessing digital content;

means for activating said at least one deactivated token to create at least one activated token;

means for creating an authenticated digital content request based at least in part on said at least one activated token; and

means for sending said authenticated digital content request to a content repository that provides storage for said digital content.

53. The apparatus of claim 52, further comprising means for receiving said digital content in response to said authenticated digital content request.

54. The apparatus of claim 52 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

55. The apparatus of claim 54 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

56. The apparatus of claim 55 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

57. An apparatus for digital content access control, the apparatus comprising:

a memory for storing said digital content; and

a processor configured to;

send a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request;

receive an authenticated digital content request in response to said digital content request; and

send said authenticated digital content request to a content repository that provides storage for said digital content.

58. The apparatus of claim 57 wherein said processor is further configured to receive said digital content in response to said authenticated digital content request.

59. The apparatus of claim 57 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

60. The apparatus of claim 59 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

61. The apparatus of claim 60 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

62. The apparatus of claim 57 wherein said apparatus comprises a smart card.

63. The apparatus of claim 62 wherein said smart card comprises a Java Card™

technology-enabled smart card.

64. The apparatus of claim 62 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

65. The apparatus of claim 62 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

66. The apparatus of claim 62 wherein said smart card comprises a WIM (Wireless Interface Module).

67. The apparatus of claim 62 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

68. The apparatus of claim 62 wherein said smart card comprises a UIM (User Identity Module).

69. The apparatus of claim 62 wherein said smart card comprises a R-UIM (Removable User Identity Module).

70. An apparatus for digital content access control, the apparatus comprising:

a memory for storing said digital content; and

a processor configured to;

send a digital content request comprising a request for digital content to a content provisioner capable of authenticating said request, said content provisioner capable of creating an authenticated digital content request based at least in part on said digital content request if access to said digital content is authorized, said content provisioner capable of communicating said authenticated digital content request to a content repository capable of returning said digital content; and

receive digital content corresponding to said digital content request.

71. The apparatus of claim 70 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

72. The apparatus of claim 71 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

73. The apparatus of claim 72 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

74. The apparatus of claim 70 wherein said apparatus comprises a smart card.

75. The apparatus of claim 74 wherein said smart card comprises a Java Card™

technology-enabled smart card.

76. The apparatus of claim 74 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

77. The apparatus of claim 74 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

78. The apparatus of claim 74 wherein said smart card comprises a WIM (Wireless Interface Module).

79. The apparatus of claim 74 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

80. The apparatus of claim 74 wherein said smart card comprises a UIM (User Identity Module).

81. The apparatus of claim 74 wherein said smart card comprises a R-UIM (Removable User Identity Module).

82. An apparatus for digital content access control, the apparatus comprising:

a memory for storing said digital content and at least one deactivated token; and

a processor configured to;

receive said at least one deactivated token for accessing digital content;

activate said at least one deactivated token to create at least one activated token;

create an authenticated digital content request based at least in part on said at least one activated token; and

send said authenticated digital content request to a content repository that provides storage for said digital content.

83. The apparatus of claim 82 wherein said processor is further configured to receive said digital content in response to said authenticated digital content request.

84. The apparatus of claim 82 wherein

said digital content request comprises a Universal Resource Locator (URL);

and

said authenticated digital content request comprises a tokenized URL.

85. The apparatus of claim 84 wherein said tokenized URL further comprises a token comprising a cryptogram based at least in part on an identifier that describes the location of said digital content.

86. The apparatus of claim 85 wherein said token is from a token pool associated with the location of digital content for which access is authorized.

87. The apparatus of claim 82 wherein said apparatus comprises a smart card.

88. The apparatus of claim 87 wherein said smart card comprises a Java Card™

technology-enabled smart card.

89. The apparatus of claim 87 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

90. The apparatus of claim 87 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

91. The apparatus of claim 87 wherein said smart card comprises a WIM (Wireless Interface Module).

92. The apparatus of claim 87 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

93. The apparatus of claim 87 wherein said smart card comprises a UIM (User Identity Module).

94. The apparatus of claim 87 wherein said smart card comprises a R-UIM (Removable User Identity Module).