Digital-rights management system

• US 20040088541A1
• Filed: 11/01/2002
• Published: 05/06/2004
• Est. Priority Date: 11/01/2002
• Status: Abandoned Application

• Current Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Original Assignee: Motorola, Inc. (Motorola Solutions, Inc.)
• Inventors: Puhl, Larry, Dabbish, Ezzat A., Vogler, Dean, Messerges, Thomas
• Application Number:
  US10/286,675
• Publication Number:
  US 20040088541A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/045 wherein the sending and receiving network entities apply hybrid encryption, i.e. combination of symmetric and asymmetric encryption cryptographic mechanisms or cryptographic arrangements using a plurality of keys or algorithms H04L9/14
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263

Abstract

Devices (101) are assigned a unique, unalterable, identification or serial number (313) that acts as the devices “electronic” biometric. Any certificate (302) created by a key issuer will contain the device'"'"'s assigned DRM public key and the device'"'"'s electronic biometric data. When a consumer wishes to purchase new content (304) from a content provider (103), the consumer will send the DRM certificate containing its DRM public key and the biometric. The rights issuer will then create a license (306) that assigns the content in such a way that only a device with the particular biometric and DRM private key is allowed to render the content.

Claims

1. A method for equipment to execute digital content, the method comprising the steps of:

determining if an identification attribute existing within the equipment matches an identification attribute existing within a Digital Rights Management (DRM) certificate;

decrypting an encrypted encryption key to obtain a decrypted encryption key;

decrypting the digital content with the encryption key; and

executing the digital content.

2. The method of claim 1 wherein the step of determining if an identification attribute matches an identification attribute existing within the DRM certificate comprises the step of determining if a unique, unalterable serial number existing within the equipment matches a serial number existing within the DRM certificate.

3. The method of claim 1 wherein the step of decrypting the encrypted encryption key comprises the step of decrypting the encrypted encryption key only if the identification attribute existing within the equipment matches the identification attribute existing within the Digital Rights Management (DRM) certificate.

4. A method for issuing digital content, the method comprising the steps of:

receiving a request to provide digital content to user equipment;

receiving a DRM certificate along with the request, the DRM certificate comprising an identification attribute that identifies equipment that is to receive the digital content;

determining capabilities of the equipment based on the identification attribute;

encrypting the digital content with a content encryption key;

encrypting the content encryption key;

transferring the encrypted digital content and the encrypted content encryption key to the user equipment.

5. The method of claim 4 wherein the step of receiving the DRM certificate comprises the step of receiving a DRM certificate comprising a DRM public key, and the step of encrypting the content encryption key comprises the step of utilizing the DRM public key to encrypt the content encryption key.

6. A method for provisioning a digital-rights management (DRM) certificate and DRM private key to user equipment, the method comprising the steps of:

receiving a unit certificate from the user equipment, the unit certificate comprising an identification attribute existing within the user equipment and a unit public key;

creating the DRM certificate, the DRM certificate comprising the identification attribute and a DRM public key;

creating a DRM private key; and

transmitting the DRM certificate and the DRM private key to the user equipment.

7. The method of claim 6 wherein the step of receiving the unit certificate comprises the step of receiving the unit certificate comprising a unique, unalterable serial number that exists within the user equipment.

8. An apparatus comprising:

a unique, unalterable identification attribute (313);

encrypted digital content (304);

an encrypted content encryption key (306);

a DRM private key (306);

a DRM certificate (302); and

logic circuitry (309), wherein the logic circuitry analyzes the identification attribute to determine if the identification attribute matches the identification attribute contained within the DRM certificate (302) and if so, utilizes the DRM private key (306) to decrypt the encrypted content encryption key, and utilizing the content encryption key to decrypt the digital content.

9. The apparatus of claim 8 further comprising:

an application (303) to execute the decrypted digital content.

10. The apparatus of claim 9 wherein the unique, unalterable identification attributes comprises a unique, unalterable serial number.

11. The apparatus of claim 9 wherein the unique, unalterable identification attribute comprises a unique, unalterable serial number and model number.

12. A digital-rights management (DRM) system, the DRM system comprising:

first user equipment belonging to a group of users, the first user equipment comprising;

a unique, unalterable identification attribute (313);

encrypted digital content (304) that is shared among the group of users;

an encrypted content encryption key (306) that is shared among the group of users;

a DRM private key (306) that is shared among the group of users;

a DRM certificate (302); and

logic circuitry (309), wherein the logic circuitry analyzes the identification attribute to determine if the identification attribute matches the identification attribute contained within the DRM certificate (302) and if so, utilizes the DRM private key (306) to decrypt the encrypted content encryption key, and utilizing the content encryption key to decrypt the digital content.

13. The DRM system of claim 12 further comprising:

second user equipment belonging to the group of users, the second user equipment comprising;

a unique, unalterable identification attribute (313);

the encrypted digital content (304) that is shared among the group of users;

the encrypted content encryption key (306) that is shared among the group of users;

the DRM private key (306) that is shared among the group of users;

a second DRM certificate (302); and

logic circuitry (309), wherein the logic circuitry analyzes the identification attribute to determine if the identification attribute matches the identification attribute contained within the DRM certificate (302) and if so, utilizes the DRM private key (306) to decrypt the encrypted content encryption key, and utilizing the content encryption key to decrypt the digital content.