Domain-based digital-rights management system with easy and secure device enrollment

• US 20040103312A1
• Filed: 11/27/2002
• Published: 05/27/2004
• Est. Priority Date: 11/27/2002
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: Motorola Mobility, Inc. (Lenovo Group Ltd.)
• Inventors: Puhl, Larry, Dabbish, Ezzat A., Vogler, Dean, Messerges, Thomas
• Granted Patent: US 7,899,187 B2
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/1012 to domains
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833

Abstract

New devices (101) are added to an existing domain by obtaining domain information (e.g., domain name and private domain password) from devices (101) already in the domain that preferably are in close proximity. Once the domain information has been transferred from the device already in the domain to the device being added to the domain, the device being added to the domain contacts a key issuer (105) to complete its registration into the domain. The key issuer returns a DRM domain private key (206) as well as a DRM certificate (202). Both are utilized by the device to obtain and render digital content (204).

Claims

1. A method for registering a device as part of a domain of devices within a digital-rights management system, the method comprising the steps of:

receiving domain information from a device existing within the domain of devices;

providing the domain information to a key issuer causing the key issuer to issue a private key to the device, wherein the private key is based on the domain information and is utilized by all devices within the domain of devices; and

receiving the private key from the key issuer.

2. The method of claim 1 wherein the step of receiving the domain information for the device existing within the domain of devices comprises the step of receiving a domain name and a domain password from the device.

3. The method of claim 1 wherein the step of receiving the domain information for the device existing within the domain of devices comprises the step of receiving domain information for the device existing within a domain of devices, all devices within the domain sharing account information.

4. The method of claim 1 wherein the step of receiving the domain information for the device existing within the domain of devices comprises the step of receiving the domain information over a short range link.

5. The method of claim 1 further comprising the steps of:

determining if the domain information was received over a short-range link; and

not accepting the domain information if the domain information was not received over the short-range link.

6. The method of claim 1 further comprising the step of:

utilizing the private key to decrypt a second encryption key, the second encryption key utilized to decrypt digital content.

7. A method for registering a device as part of a domain of devices within a digital-rights management system, the method comprising the steps of:

receiving domain information from a device existing within the domain of devices;

determining if the information was received over a short-range communication link;

accepting the domain information only if the information was received over the short-range communication link from another device within the domain of devices;

providing the domain info to a key issuer causing the key issuer to issue a private key and a certificate to the device, wherein the private key and the certificate are based on the domain information; and

receiving the private key and the certificate from the key issuer.

8. The method of claim 7 further comprising the steps of:

providing the certificate to a rights issuer;

receiving an encrypted encryption key from the rights issuer; and

utilizing the private key to decrypt the encrypted encryption key.

9. The method of claim 8 further comprising the step of:

utilizing the encryption key to decrypt digital content.

10. An apparatus comprising:

communication circuitry receiving domain information from a device existing within a domain of devices;

storage for storing the domain information; and

logic circuitry for providing the domain information to a key issuer causing the key issuer to issue a private key to the device, wherein the private key is based on the domain information.

11. The apparatus of claim 10 wherein the domain information comprises a domain name and a domain password.

12. The apparatus of claim 10 wherein the domain of devices share account information.

13. The apparatus of claim 10 wherein the logic circuitry determines if the domain information was received via short-range communication, and accepts the domain information only if the domain information was received via short-range communication from a device within the domain of devices.

14. The apparatus of claim 10 wherein the private key is utilize to decrypt a second encryption key, and the second encryption key is utilized to decrypt digital content.