Accessing in a rights locker system for digital content access control

• US 20040139207A1
• Filed: 10/15/2003
• Published: 07/15/2004
• Est. Priority Date: 09/13/2002
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard K.
• Granted Patent: US 7,398,557 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 65/1101 Session protocols
• CPC Class Codes: H04L 65/612 for unicast
• CPC Class Codes: H04L 65/80 Responding to QoS
• CPC Class Codes: H04L 9/3213 using tickets or tokens, e.g. Kerberos network architectures or network communication protocols for entities authentication using tickets in a packet data network H04L63/0807
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04L 9/50 using hash chains, e.g. blockchains or hash trees
• CPC Class Codes: H04W 12/033 of the user plane, e.g. user's traffic
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/08 Access security

Abstract

Access to digital content may be controlled by determining digital content to be made accessible via a rights locker describing a user'"'"'s access rights for digital content associated with the rights locker, determining enrollment authentication data, and sending a rights locker enrollment request to a rights locker provider, where the rights locker enrollment request comprises a digital content request and the enrollment authentication data. An authenticated rights locker access request is received in response to the sending, where the authenticated rights locker access request is for subsequent use in accessing digital content associated with the rights locker.

Claims

1. A method for digital content access control, comprising:

determining digital content to be made accessible via a rights locker describing a user'"'"'s access rights for digital content associated with said rights locker;

determining enrollment authentication data;

sending a rights locker enrollment request to a rights locker provider, said rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

receiving an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

2. The method of claim 1 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

3. The method of claim 1 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

4. The method of claim 3 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

5. The method of claim 3 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

6. The method of claim 1 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

7. The method of claim 1, further comprising storing at least part of said authenticated rights locker access request in a bookmark on said user device.

8. The method of claim 1 wherein said authenticated rights locker access request is embedded in a Web cookie.

9. The method of claim 1 wherein said authenticated rights locker access request is encapsulated in an HTTP Response message.

10. A method for digital content access control, comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

sending said authenticated digital content request; and

receiving said digital content in response to said sending said authenticated digital content request.

11. The method of claim 10 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

12. The method of claim 10, further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

13. The method of claim 10 wherein said new authenticated rights locker access request is embedded in a Web cookie.

14. The method of claim 10 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

15. A method for digital content access control, comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving a new authenticated rights locker access request in response to said sending; and

receiving said digital content in response to said sending.

16. The method of claim 15 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

17. The method of claim 15, further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

18. The method of claim 15 wherein said new authenticated rights locker access request is embedded in a Web cookie.

19. The method of claim 15 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

20. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining digital content to be made accessible via a rights locker describing a user'"'"'s access rights for digital content associated with said rights locker;

determining enrollment authentication data;

sending a rights locker enrollment request to a rights locker provider, said rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

receiving an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

21. The program storage device of claim 20 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

22. The program storage device of claim 20 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

23. The program storage device of claim 22 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

24. The program storage device of claim 22 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

25. The program storage device of claim 20 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

26. The program storage device of claim 20, said method further comprising storing at least part of said authenticated rights locker access request in a bookmark on said user device.

27. The program storage device of claim 20 wherein said authenticated rights locker access request is embedded in a Web cookie.

28. The program storage device of claim 20 wherein said authenticated rights locker access request is encapsulated in an HTTP Response message.

29. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

sending said authenticated digital content request; and

receiving said digital content in response to said sending said authenticated digital content request.

30. The program storage device of claim 29 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

31. The program storage device of claim 29, said method further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

32. The program storage device of claim 29 wherein said new authenticated rights locker access request is embedded in a Web cookie.

33. The program storage device of claim 29 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

34. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for digital content access control, the method comprising:

determining a digital content specification and associated authenticated rights locker access request;

sending said authenticated rights locker access request and said digital content specification;

receiving a new authenticated rights locker access request in response to said sending; and

receiving said digital content in response to said sending.

35. The program storage device of claim 34 wherein

said method further comprises determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

36. The program storage device of claim 34, said method further comprising storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

37. The program storage device of claim 34 wherein said new authenticated rights locker access request is embedded in a Web cookie.

38. The program storage device of claim 34 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

39. An apparatus for digital content access control, comprising:

means for determining digital content to be made accessible via a rights locker describing a user'"'"'s access rights for digital content associated with said rights locker;

means for determining enrollment authentication data;

means for sending a rights locker enrollment request to a rights locker provider, said rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

means for receiving an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

40. The apparatus of claim 39 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

41. The apparatus of claim 39 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

42. The apparatus of claim 41 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

43. The apparatus of claim 41 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

44. The apparatus of claim 39 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

45. The apparatus of claim 39, further comprising means for storing at least part of said authenticated rights locker access request in a bookmark on said user device.

46. The apparatus of claim 39 wherein said authenticated rights locker access request is embedded in a Web cookie.

47. The apparatus of claim 39 wherein said authenticated rights locker access request is encapsulated in an HTTP Response message.

48. An apparatus for digital content access control, comprising:

means for determining a digital content specification and associated authenticated rights locker access request;

means for sending said authenticated rights locker access request and said digital content specification;

means for receiving an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

means for sending said authenticated digital content request; and

means for receiving said digital content in response to said sending said authenticated digital content request.

49. The apparatus of claim 48 wherein

said apparatus further comprises means for determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said means for sending further comprises means for sending said one or more delivery parameters.

50. The apparatus of claim 48, further comprising means for storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

51. The apparatus of claim 48 wherein said new authenticated rights locker access request is embedded in a Web cookie.

52. The apparatus of claim 48 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

53. An apparatus for digital content access control, comprising:

means for determining a digital content specification and associated authenticated rights locker access request;

means for sending said authenticated rights locker access request and said digital content specification;

means for receiving a new authenticated rights locker access request in response to said sending; and

means for receiving said digital content in response to said sending.

54. The apparatus of claim 53 wherein

said apparatus further comprises means for determining one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said means for sending further comprises means for sending said one or more delivery parameters.

55. The apparatus of claim 53, further comprising means for storing at least part of said new authenticated rights locker access request in a bookmark on said user device.

56. The apparatus of claim 53 wherein said new authenticated rights locker access request is embedded in a Web cookie.

57. The apparatus of claim 53 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

58. An apparatus for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine digital content to be made accessible via a rights locker describing a user'"'"'s access rights for digital content associated with said rights locker;

determine enrollment authentication data;

send a rights locker enrollment request to a rights locker provider, said rights locker enrollment request comprising a digital content request and said enrollment authentication data; and

receive an authenticated rights locker access request in response to said sending, said authenticated rights locker access request for subsequent use in accessing digital content associated with said rights locker.

59. The apparatus of claim 58 wherein said digital content request comprises a request for initializing said rights locker with rights to specified digital content.

60. The apparatus of claim 58 wherein said enrollment authentication data comprises:

rights locker access authentication data for determining what rights, if any, said user has to access said rights locker; and

rights content access authentication data for determining what rights, if any, said user has to digital content associated with said rights locker.

61. The apparatus of claim 60 wherein said rights locker access authentication data comprises payment for use of a rights locker service.

62. The apparatus of claim 60 wherein said rights content access authentication data comprises payment for rights deposited in said rights locker.

63. The apparatus of claim 58 wherein said enrollment authentication data comprises a reenrollment key determined in a previous enrollment request for said rights locker, said reenrollment key for supplementing or replacing enrollment authentication data of said previous enrollment request.

64. The apparatus of claim 58 wherein said apparatus comprises a smart card.

65. The apparatus of claim 64 wherein said smart card comprises a Java Card™

technology-enabled smart card.

66. The apparatus of claim 64 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

67. The apparatus of claim 64 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

68. The apparatus of claim 64 wherein said smart card comprises a WIM (Wireless Interface Module).

69. The apparatus of claim 64 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

70. The apparatus of claim 64 wherein said smart card comprises a UIM (User Identity Module).

71. The apparatus of claim 64 wherein said smart card comprises a R-UIM (Removable User Identity Module).

72. The apparatus of claim 58 wherein said processor is further configured to store at least part of said authenticated rights locker access request in a bookmark on said user device.

73. The apparatus of claim 58 wherein said authenticated rights locker access request is embedded in a Web cookie.

74. The apparatus of claim 58 wherein said authenticated rights locker access request is encapsulated in an HTTP Response message.

75. An apparatus for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine a digital content specification and associated authenticated rights locker access request;

send said authenticated rights locker access request and said digital content specification;

receive an authenticated digital content request and a new authenticated rights locker access request in response to said sending;

send said authenticated digital content request; and

receive said digital content in response to said sending said authenticated digital content request.

76. The apparatus of claim 75 wherein

said processor is further configured to determine one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

77. The apparatus of claim 75 wherein said apparatus comprises a smart card.

78. The apparatus of claim 77 wherein said smart card comprises a Java Card™

technology-enabled smart card.

79. The apparatus of claim 77 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

80. The apparatus of claim 77 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

81. The apparatus of claim 77 wherein said smart card comprises a WIM (Wireless Interface Module).

82. The apparatus of claim 77 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

83. The apparatus of claim 77 wherein said smart card comprises a UIM (User Identity Module).

84. The apparatus of claim 77 wherein said smart card comprises a R-UIM (Removable User Identity Module).

85. The apparatus of claim 75 wherein said processor is further configured to store at least part of said new authenticated rights locker access request in a bookmark on said user device.

86. The apparatus of claim 75 wherein said new authenticated rights locker access request is embedded in a Web cookie.

87. The apparatus of claim 75 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.

88. An apparatus for digital content access control, comprising:

a memory for storing said digital content; and

a processor configured to;

determine a digital content specification and associated authenticated rights locker access request;

send said authenticated rights locker access request and said digital content specification;

receive a new authenticated rights locker access request in response to said sending; and

receive said digital content in response to said sending.

89. The apparatus of claim 88 wherein

said processor is further configured to determine one or more delivery parameters, said one or more delivery parameters indicating where said digital content should be sent, a delivery mechanism, or both;

and

said sending further comprises sending said one or more delivery parameters.

90. The apparatus of claim 88 wherein said apparatus comprises a smart card.

91. The apparatus of claim 90 wherein said smart card comprises a Java Card™

technology-enabled smart card.

92. The apparatus of claim 90 wherein said smart card comprises a CDMA (Code Division Multiple Access) technology-enabled smart card.

93. The apparatus of claim 90 wherein said smart card comprises a SIM (Subscriber Identity Module) card.

94. The apparatus of claim 90 wherein said smart card comprises a WIM (Wireless Interface Module).

95. The apparatus of claim 90 wherein said smart card comprises a USIM (Universal Subscriber Identity Module).

96. The apparatus of claim 90 wherein said smart card comprises a UIM (User Identity Module).

97. The apparatus of claim 90 wherein said smart card comprises a R-UIM (Removable User Identity Module).

98. The apparatus of claim 88 wherein said processor is further configured to store at least part of said new authenticated rights locker access request in a bookmark on said user device.

99. The apparatus of claim 88 wherein said new authenticated rights locker access request is embedded in a Web cookie.

100. The apparatus of claim 88 wherein said new authenticated rights locker access request is encapsulated in an HTTP Response message.