Embedded content requests in a rights locker system for digital content access control

• US 20040083391A1
• Filed: 10/15/2003
• Published: 04/29/2004
• Est. Priority Date: 09/13/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: De Jong, Eduard K.
• Granted Patent: US 7,913,312 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 12/065 Continuous authentication
• CPC Class Codes: H04W 12/069 using certificates or pre-shared keys
• CPC Class Codes: H04W 12/084 using delegated authorisation, e.g. open authorisation [OAuth] protocol

Abstract

Access to digital content may be controlled by determining a digital content specification and associated authenticated rights locker access request, sending the authenticated rights locker access request and the digital content specification, and receiving a new authenticated rights locker access request and a Web page with clickable links in response to the sending, where at least one of the clickable links is associated with an authenticated digital content request. When an indication of a user selection of one of the clickable links is received, an authenticated digital content request associated with the user-selected clickable link is sent to a digital content repository. The digital content is received in response to the sending of the authenticated digital content request.

Claims

1. A method for digital content access control, comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

receiving an indication of a user selection of one of said one or more clickable links;

sending an authenticated digital content request associated with said one of said one or more clickable links to a digital content repository; and

receiving said digital content in response to said sending said authenticated digital content request.

2. The method of claim 1 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

3. The method of claim 1, further comprising storing at least part of said new authenticated rights locker access request in a bookmark on a user device.

4. The method of claim 1 wherein said new authenticated rights locker access request is embedded in a Web cookie.

5. The method of claim 1 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

6. A method for digital content access control, comprising:

receiving an authenticated rights locker access request and a digital content specification;

validating said authenticated rights locker access request; and

if said validating indicates said authenticated rights locker access request is valid,

creating a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository; and

sending a new authenticated rights locker access request and said Web page.

7. The method of claim 6 wherein at least part of said new authenticated rights locker access request is for storage in a bookmark on a user device.

8. The method of claim 6, further comprising embedding said new authenticated rights locker access request in a Web cookie before said sending.

9. The method of claim 6, further comprising encapsulating said new authenticated rights locker access request in an HTTP Response message before said sending.

10. A method for digital content access control, comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

receiving an indication of a user selection of one of said one or more clickable links;

sending said new authenticated rights locker access request and an indication of the right associated with said one of said one or more clickable links to a rights locker provider; and

receiving said digital content in response to said sending said new authenticated rights locker access request.

11. The method of claim 10 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

12. The method of claim 10, further comprising storing at least part of said new authenticated rights locker access request in a bookmark on a user device.

13. The method of claim 10 wherein said new authenticated rights locker access request is embedded in a Web cookie.

14. The method of claim 10 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

15. A method for digital content access control, comprising:

receiving a first authenticated rights locker access request and a digital content specification;

validating said first authenticated rights locker access request; and

if said validating indicates said first authenticated rights locker access request is valid,

creating a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository;

sending a second authenticated rights locker access request and said Web page;

receiving and validating said second authenticated rights locker access request;

obtaining an authenticated digital content request if said second authenticated rights locker access request is valid; and

sending said authenticated digital content request to a digital content repository.

16. The method of claim 15 wherein at least part of said second authenticated rights locker access request is for storage in a bookmark on a user device.

17. The method of claim 15, further comprising embedding said second authenticated rights locker access request in a Web cookie before said sending.

18. The method of claim 15, further comprising encapsulating said second authenticated rights locker access request in an HTTP Response message before said sending.

19. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

receiving an indication of a user selection of one of said one or more clickable links;

sending an authenticated digital content request associated with said one of said one or more clickable links to a digital content repository; and

receiving said digital content in response to said sending said authenticated digital content request.

20. The program storage device of claim 19 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

21. The program storage device of claim 19, said method further comprising storing at least part of said new authenticated rights locker access request in a bookmark on a user device.

22. The program storage device of claim 19 wherein said new authenticated rights locker access request is embedded in a Web cookie.

23. The program storage device of claim 19 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

24. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

receiving an authenticated rights locker access request and a digital content specification;

validating said authenticated rights locker access request; and

if said validating indicates said authenticated rights locker access request is valid,

creating a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository; and

sending a new authenticated rights locker access request and said Web page.

25. The program storage device of claim 24 wherein at least part of said new authenticated rights locker access request is for storage in a bookmark on a user device.

26. The program storage device of claim 24, said method further comprising embedding said new authenticated rights locker access request in a Web cookie before said sending.

27. The program storage device of claim 24, said method further comprising encapsulating said new authenticated rights locker access request in an HTTP Response message before said sending.

28. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

receiving an indication of a user selection of one of said one or more clickable links;

sending said new authenticated rights locker access request and an indication of the right associated with said one of said one or more clickable links to a rights locker provider; and

receiving said digital content in response to said sending said new authenticated rights locker access request.

29. The program storage device of claim 28 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

30. The program storage device of claim 28, said method further comprising storing at least part of said new authenticated rights locker access request in a bookmark on a user device.

31. The program storage device of claim 28 wherein said new authenticated rights locker access request is embedded in a Web cookie.

32. The program storage device of claim 28 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

33. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

receiving a first authenticated rights locker access request and a digital content specification;

validating said first authenticated rights locker access request; and

if said validating indicates said first authenticated rights locker access request is valid,

creating a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository;

sending a second authenticated rights locker access request and said Web page;

receiving and validating said second authenticated rights locker access request;

obtaining an authenticated digital content request if said second authenticated rights locker access request is valid; and

sending said authenticated digital content request to a digital content repository.

34. The program storage device of claim 33 wherein at least part of said second authenticated rights locker access request is for storage in a bookmark on a user device.

35. The program storage device of claim 33, further comprising embedding said second authenticated rights locker access request in a Web cookie before said sending.

36. The program storage device of claim 33, further comprising encapsulating said second authenticated rights locker access request in an HTTP Response message before said sending.

37. An apparatus for digital content access control, comprising:

means for determining a digital content specification and associated authenticated rights locker access request;

means for sending said authenticated rights locker access request and said digital content specification;

means for receiving a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

means for receiving an indication of a user selection of one of said one or more clickable links;

means for sending an authenticated digital content request associated with said one of said one or more clickable links to a digital content repository; and

means for receiving said digital content in response to said sending said authenticated digital content request.

38. The apparatus of claim 37 wherein

said apparatus further comprises means for determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said means for sending further comprises means for sending said one or more delivery parameters.

39. The apparatus of claim 37, further comprising means for storing at least part of said new authenticated rights locker access request in a bookmark on a user device.

40. The apparatus of claim 37 wherein said new authenticated rights locker access request is embedded in a Web cookie.

41. The apparatus of claim 37 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

42. An apparatus for digital content access control, comprising:

means for receiving an authenticated rights locker access request and a digital content specification;

means for validating said authenticated rights locker access request; and

means for if said validating indicates said authenticated rights locker access request is valid,

creating a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository; and

sending a new authenticated rights locker access request and said Web page.

43. The apparatus of claim 42 wherein at least part of said new authenticated rights locker access request is for storage in a bookmark on a user device.

44. The apparatus of claim 42, further comprising means for embedding said new authenticated rights locker access request in a Web cookie before said sending.

45. The apparatus of claim 42, further comprising means for encapsulating said new authenticated rights locker access request in an HTTP Response message before said sending.

46. An apparatus for digital content access control, comprising:

means for determining a digital content specification and associated authenticated rights locker access request;

means for sending said authenticated rights locker access request and said digital content specification;

means for receiving a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

means for receiving an indication of a user selection of one of said one or more clickable links;

means for sending said new authenticated rights locker access request and an indication of the right associated with said one of said one or more clickable links to a rights locker provider; and

means for receiving said digital content in response to said sending said new authenticated rights locker access request.

47. The apparatus of claim 46 wherein

said apparatus further comprises means for determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said means for sending further comprises means for sending said one or more delivery parameters.

48. The apparatus of claim 46, further comprising means for storing at least part of said new authenticated rights locker access request in a bookmark on a user device.

49. The apparatus of claim 46 wherein said new authenticated rights locker access request is embedded in a Web cookie.

50. The apparatus of claim 46 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

51. An apparatus for digital content access control, comprising:

means for receiving a first authenticated rights locker access request and a digital content specification;

means for validating said first authenticated rights locker access request; and

means for if said validating indicates said first authenticated rights locker access request is valid,

creating a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository;

sending a second authenticated rights locker access request and said Web page;

receiving and validating said second authenticated rights locker access request;

obtaining an authenticated digital content request if said second authenticated rights locker access request is valid; and

sending said authenticated digital content request to a digital content repository.

52. The apparatus of claim 51 wherein at least part of said second authenticated rights locker access request is for storage in a bookmark on a user device.

53. The apparatus of claim 51, further comprising means for embedding said second authenticated rights locker access request in a Web cookie before said sending.

54. The apparatus of claim 51, further comprising means for encapsulating said second authenticated rights locker access request in an HTTP Response message before said sending.

55. An apparatus for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine a digital content specification and associated authenticated rights locker access request;

send said authenticated rights locker access request and said digital content specification;

receive a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

receive an indication of a user selection of one of said one or more clickable links;

send an authenticated digital content request associated with said one of said one or more clickable links to a digital content repository; and

receive said digital content in response to said sending said authenticated digital content request.

56. The apparatus of claim 55 wherein said processor is further configured to:

determine one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both; and

send said one or more delivery parameters.

57. The apparatus of claim 55 wherein said apparatus comprises a smart card.

58. The apparatus of claim 57 wherein said smart card comprises a Java Card™

technology-enabled smart card.

59. The apparatus of claim 57 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

60. The apparatus of claim 57 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

61. The apparatus of claim 57 wherein said smart card comprises a WIM (Wireless Interface Module).

62. The apparatus of claim 57 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

63. The apparatus of claim 57 wherein said smart card comprises a UIM (User Identity Module).

64. The apparatus of claim 57 wherein said smart card comprises a R-UIM (Removable User Identity Module).

65. The apparatus of claim 55 wherein said processor is further configured to store at least part of said new authenticated rights locker access request in a bookmark on a user device.

66. The apparatus of claim 55 wherein said new authenticated rights locker access request is embedded in a Web cookie.

67. The apparatus of claim 55 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

68. An apparatus for digital content access control, comprising:

a memory for storing one or more rights lockers that describe digital content access rights; and

a processor configured to;

receive an authenticated rights locker access request and a digital content specification;

validate said authenticated rights locker access request; and

if said validation indicates said authenticated rights locker access request is valid,

create a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository; and

send a new authenticated rights locker access request and said Web page.

69. The apparatus of claim 68 wherein at least part of said new authenticated rights locker access request is for storage in a bookmark on a user device.

70. The apparatus of claim 68 wherein said processor is further configured to embed said new authenticated rights locker access request in a Web cookie before said sending.

71. The apparatus of claim 68 wherein said processor is further configured to encapsulate said new authenticated rights locker access request in an HTTP Response message before said sending.

72. An apparatus for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine a digital content specification and associated authenticated rights locker access request;

send said authenticated rights locker access request and said digital content specification;

receive a new authenticated rights locker access request and a Web page with one or more clickable links in response to said sending, at least one of said one or more clickable links associated with an authenticated digital content request;

receive an indication of a user selection of one of said one or more clickable links;

send said new authenticated rights locker access request and an indication of the right associated with said one of said one or more clickable links to a rights locker provider; and

receive said digital content in response to said sending said new authenticated rights locker access request.

73. The apparatus of claim 72 wherein said processor is further configured to:

determine one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both; and

send said one or more delivery parameters.

74. The apparatus of claim 72 wherein said apparatus comprises a smart card.

75. The apparatus of claim 74 wherein said smart card comprises a Java Card™

technology-enabled smart card.

76. The apparatus of claim 74 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

77. The apparatus of claim 74 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

78. The apparatus of claim 74 wherein said smart card comprises a WIM (Wireless Interface Module).

79. The apparatus of claim 74 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

80. The apparatus of claim 74 wherein said smart card comprises a UIM (User Identity Module).

81. The apparatus of claim 74 wherein said smart card comprises a R-UIM (Removable User Identity Module).

82. The apparatus of claim 72 wherein said processor is further configured to store at least part of said new authenticated rights locker access request in a bookmark on a user device.

83. The apparatus of claim 72 wherein said new authenticated rights locker access request is embedded in a Web cookie.

84. The apparatus of claim 72 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

85. An apparatus for digital content access control, comprising:

a memory for storing one or more rights lockers that describe digital content access rights; and

a processor configured to;

receive a first authenticated rights locker access request and a digital content specification;

validate said first authenticated rights locker access request; and

if said validation indicates said first authenticated rights locker access request is valid,

create a Web page with one or more clickable links that comprise an authenticated digital content request for use in accessing digital content stored by a digital content repository;

send a second authenticated rights locker access request and said Web page;

receive and validating said second authenticated rights locker access request;

obtain an authenticated digital content request if said second authenticated rights locker access request is valid; and

send said authenticated digital content request to a digital content repository.

86. The apparatus of claim 85 wherein at least part of said second authenticated rights locker access request is for storage in a bookmark on a user device.

87. The apparatus of claim 85 wherein said processor is further configured to embed said second authenticated rights locker access request in a Web cookie before said sending.

88. The apparatus of claim 85 wherein said processor is further configured to encapsulate said second authenticated rights locker access request in an HTTP Response message before said sending.