Digital rights management in a mobile communications environment

• US 20050004875A1
• Filed: 03/12/2002
• Published: 01/06/2005
• Est. Priority Date: 07/06/2001
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Sipponen, Juha-Pekka, Ylitalo, Tapio, Kontio, Markku
• Granted Patent: US 7,421,411 B2
• Time in Patent Office: Days
• US Class Current: 705/52
• CPC Class Codes: G06F 21/1063 Personalisation
• CPC Class Codes: G06F 21/1073 Conversion
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/3674 involving authentication
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 9/0838 Key agreement, i.e. key establishment technique in which a shared key is derived by parties as a function of information contributed by, or associated with, each of these network architectures or network communication protocols for key exchange in a packet data network H04L63/061
• CPC Class Codes: H04L 9/0894 Escrow, recovery or storing of secret information, e.g. secret key escrow or cryptographic key storage
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption

Abstract

A method, system, and computer program product for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset. The digital asset is downloaded to the wireless device from any one of a plurality of content servers or other wireless devices. The digital asset comprising a content ID, content encrypted with a content key, and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network. The method, system, and computer program product also creates the digital asset for downloading to a wireless device from one of a plurality of content servers in a network and generates a voucher at the voucher server.

Claims

1-136. -136. (Canceled)

137. A method for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset, the digital asset being downloaded to the wireless device from any one of a plurality of content servers, the digital asset comprising a content ID, content encrypted with a content key and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network, comprising:

sending a request for a voucher for the said content to a DRM agent, the DRM agent being able to communicate with the voucher server and with at least one of a plurality of payment servers designated by the terminal for payment transactions;

receiving an offer of consideration from the DRM agent including consideration information obtained by the DRM agent from the voucher server;

sending an acceptance of the consideration to the DRM agent, which after completed payment transactions obtains a voucher for the content from the voucher server;

receiving the voucher from the DRM agent, which it obtained from the voucher server, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

enabling the wireless device to decrypt said encrypted content with said content key.

138. The method of claim 137, wherein the wireless device includes a device ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

recovering said content key if said device ID matches the reference device ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

139. The method of claim 137, wherein the wireless device includes a user ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

recovering said content key if said user ID matches the reference user ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

140. A system for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset, the digital asset being downloaded to the wireless device from any one of a plurality of content servers, the digital asset comprising a content ID, content encrypted with a content key and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network, comprising:

a memory device; and

a processor disposed in communication with the memory device, the processor configured to;

send a request for a voucher for the said content to a DRM agent, the DRM agent being able to communicate with the voucher server and with at least one of a plurality of payment servers designated by the terminal for payment transactions;

receive an offer of consideration from the DRM agent including consideration information obtained by the DRM agent from the voucher server;

send an acceptance of the consideration to the DRM agent, which after completed payment transactions obtains a voucher for the content from the voucher server;

receive the voucher from the DRM agent, which it obtained from the voucher server, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

enable the wireless device to decrypt said encrypted content with said content key.

141. The system of claim 140, wherein the wireless device includes a device ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, the processor further configured to:

recover said content key if said device ID matches the reference device ID in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

142. The system of claim 140, wherein the wireless device includes a user ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, the processor is further configured to:

recover said content key if said user ID matches the reference user ID in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

143. A computer program product for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset, the digital asset being downloaded to the wireless device from any one of a plurality of content servers, the digital asset comprising a content ID, content encrypted with a content key and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network, comprising:

a computer readable medium;

program code in said computer readable medium for sending a request for a voucher for the said content to a DRM agent, the DRM agent being able to communicate with the voucher server and with at least one of a plurality of payment servers designated by the terminal for payment transactions;

program code in said computer readable medium for receiving an offer of consideration from the DRM agent including consideration information obtained by the DRM agent from the voucher server;

program code in said computer readable medium for sending an acceptance of the consideration to the DRM agent, which after completed payment transactions obtains a voucher for the content from the voucher server;

program code in said computer readable medium for receiving the voucher from the DRM agent, which it obtained from the voucher server, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with said content key.

144. The computer program product of claim 143, wherein the wireless device includes a device ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said device ID matches the reference device ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.

145. The computer program product of claim 143, wherein the wireless device includes a user ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said user ID matches the reference user ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.

146. A method for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset, the digital asset being downloaded to the wireless device from any one of a plurality of other wireless devices, the digital asset comprising a content ID, content encrypted with a content key and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network, comprising:

sending a request for a voucher for the said content to a DRM agent, the DRM agent being able to communicate with the voucher server and with at least one of a plurality of payment servers designated by the terminal for payment transactions;

receiving an offer of consideration from the DRM agent including consideration information obtained by the DRM agent from the voucher server;

sending an acceptance of the consideration to the DRM agent, which after completed payment transactions obtains a voucher for the content from the voucher server;

receiving the voucher from the DRM agent, which it obtained from the voucher server, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

enabling the wireless device to decrypt said encrypted content with said content key.

147. The method of claim 146, wherein the wireless device includes a device ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

recovering said content key if said device ID matches the reference device ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

148. The method of claim 146, wherein the wireless device includes a user ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

recovering said content key if said user ID matches the reference user ID in the metadata; and

enabling the wireless device to decrypt said encrypted content with the said recovered content key.

149. A system for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset, the digital asset being downloaded to the wireless device from any one of a plurality of other wireless devices, the digital asset comprising a content ID, content encrypted with a content key and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network, comprising:

a memory device; and

a processor disposed in communication with the memory device, the processor configured to;

send a request for a voucher for the said content to a DRM agent, the DRM agent being able to communicate with the voucher server and with at least one of a plurality of payment servers designated by the terminal for payment transactions;

receive an offer of consideration from the DRM agent including consideration information obtained by the DRM agent from the voucher server;

send an acceptance of the consideration to the DRM agent, which after completed payment transactions obtains a voucher for the content from the voucher server;

receive the voucher from the DRM agent, which it obtained from the voucher server, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

enable the wireless device to decrypt said encrypted content with said content key.

150. The system of claim 149, wherein the wireless device includes a device ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, the processor further configured to:

recover said content key if said device ID matches the reference device ED in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

151. The system of claim 149, wherein the wireless device includes a user ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, the processor further configured to:

recover said content key if said user ID matches the reference user ID in the metadata; and

enable the wireless device to decrypt said encrypted content with the said recovered content key.

152. A computer program product for enabling a wireless device in a mobile communication environment to obtain rights to protected content of a digital asset, the digital asset being downloaded to the wireless device from any one of a plurality of other wireless devices, the digital asset comprising a content ID, content encrypted with a content key and information on obtaining rights to the content being expressed in a voucher generated by a voucher server in the network, comprising:

a computer readable medium;

program code in said computer readable medium for sending a request for a voucher for the said content to a DRM agent, the DRM agent being able to communicate with the voucher server and with at least one of a plurality of payment servers designated by the terminal for payment transactions;

program code in said computer readable medium for receiving an offer of consideration from the DRM agent including consideration information obtained by the DRM agent from the voucher server;

program code in said computer readable medium for sending an acceptance of the consideration to the DRM agent, which after completed payment transactions obtains a voucher for the content from the voucher server;

program code in said computer readable medium for receiving the voucher from the DRM agent, which it obtained from the voucher server, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with said content key.

153. The computer program product of claim 152, wherein the wireless device includes a device ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference device ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said device ID matches the reference device ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.

154. The computer program product of claim 152, wherein the wireless device includes a user ID and wherein the voucher includes metadata having transaction information including said content key joined with a reference user ID for the wireless device, further comprising:

program code in said computer readable medium for recovering said content key if said user ID matches the reference user ID in the metadata; and

program code in said computer readable medium for enabling the wireless device to decrypt said encrypted content with the said recovered content key.

155. A method for creating a digital asset for downloading to a wireless device from one of a plurality of content servers in a network, comprising:

storing a piece of digital content at one of the plurality of content servers;

sending the digital content to a voucher server in the network;

sending information associated with the content including;

information specifying the type of use intended for the content;

information specifying restrictions, which limit usage of the content;

information specifying payment and payment transactions associated to the use and restrictions to the use of the content;

receiving the digital content with the associated information at the voucher server;

creating at the voucher server a content ID for the content;

encapsulating the digital content into a protected format by encrypting it with a key;

creating at least one voucher template for the digital content, the voucher template having metadata including received information associated with the content, the voucher template being used for generating a voucher for the content;

storing at the voucher server the content ID and the created voucher template associated with the content;

sending the digital asset comprising content ID, encrypted content, and information on the voucher server to one of the plurality of content servers; and

registering the digital asset at the content server.

156. A system for creating a digital asset for downloading to a wireless device from one of a plurality of content servers in a network, comprising:

a memory device; and

a processor disposed in communication with the memory device, the processor configured to;

store a piece of digital content at one of the plurality of content servers;

send the digital content to a voucher server in the network;

send information associated with the content including;

information specifying the type of use intended for the content;

information specifying restrictions, which limit usage of the content;

information specifying payment and payment transactions associated to the use and restrictions to the use of the content;

receive the digital content with the associated information at the voucher server;

create at the voucher server a content ID for the content;

encapsulate the digital content into a protected format by encrypting it with a key;

create at least one voucher template for the digital content, the voucher template having metadata including received information associated with the content, the voucher template being used for generating a voucher for the content;

store at the voucher server the content ID and the created voucher template associated with the content;

send the digital asset comprising content ID, encrypted content, and information on the voucher server to one of the plurality of content servers; and

register the digital asset at the content server.

157. A computer program product for creating a digital asset for downloading to a wireless device from one of a plurality of content servers in a network, comprising:

a computer readable medium;

program code in said computer readable medium for storing a piece of digital content at one of the plurality of content servers;

program code in said computer readable medium for sending the digital content to a voucher server in the network;

program code in said computer readable medium for sending information associated with the content including;

information specifying the type of use intended for the content;

information specifying restrictions, which limit usage of the content;

information specifying payment and payment transactions associated to the use and restrictions to the use of the content;

program code in said computer readable medium for receiving the digital content with the associated information at the voucher server;

program code in said computer readable medium for creating at the voucher server a content ID for the content;

program code in said computer readable medium for encapsulating the digital content into a protected format by encrypting it with a key;

program code in said computer readable medium for creating at least one voucher template for the digital content, the voucher template having metadata including received information associated with the content, the voucher template being used for generating a voucher for the content;

program code in said computer readable medium for storing at the voucher server the content ID and the created voucher template associated with the content;

program code in said computer readable medium for sending the digital asset comprising content ID, encrypted content, and information on the voucher server to one of the plurality of content servers; and

program code in said computer readable medium for registering the digital asset at the content server.

158. A method for generating a voucher at the voucher server comprising:

receiving a request for a voucher from a DRM agent, the request comprising content ID;

sending an offer of consideration to the DRM agent, the offer comprising information obtained from at least one of voucher templates associated with the requested content, the voucher templates being stored at the voucher server;

receiving from the DRM agent acceptance of the consideration;

generating a voucher corresponding to the acceptance of consideration, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

sending the voucher to the DRM agent.

159. The method of claim 158, further comprising:

receiving in the request for a voucher identification information comprising at least one of the following;

an ID of a voucher requesting wireless device;

an ID of a voucher requesting user; and

an ID of the voucher requesting DRM agent;

associating the generated voucher with received identification information comprising at least one of the following;

an ID of a voucher requesting wireless device;

an ID of a voucher requesting user;

an ID of the voucher requesting DRM agent; and

a voucher generating date and time; and

storing the generated voucher at the voucher server together with the associated identification information.

160. A system for generating a voucher at the voucher server comprising:

a memory device; and

a processor disposed in communication with the memory device, the processor configured to;

receive a request for a voucher from a DRM agent, the request comprising content ID;

send an offer of consideration to the DRM agent, the offer comprising information obtained from at least one of voucher templates associated with the requested content, the voucher templates being stored at the voucher server;

receive from the DRM agent acceptance of the consideration;

generate a voucher corresponding to the acceptance of consideration, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

send the voucher to the DRM agent.

161. The system of claim 160, the processor further configured to:

receive in the request for a voucher identification information comprising at least one of the following;

an ID of a voucher requesting wireless device;

an ID of a voucher requesting user; and

an ID of the voucher requesting DRM agent;

associate the generated voucher with received identification information comprising at least one of the following;

an ID of a voucher requesting wireless device;

an ID of a voucher requesting user;

an ID of the voucher requesting DRM agent; and

a voucher generating date and time; and

store the generated voucher at the voucher server together with the associated identification information.

162. A computer program product for generating a voucher at the voucher server comprising:

a computer readable medium;

program code in said computer readable medium for receiving a request for a voucher from a DRM agent, the request comprising content ID;

program code in said computer readable medium for sending an offer of consideration to the DRM agent, the offer comprising information obtained from at least one of voucher templates associated with the requested content, the voucher templates being stored at the voucher server;

program code in said computer readable medium for receiving from the DRM agent acceptance of the consideration;

program code in said computer readable medium for generating a voucher corresponding to the acceptance of consideration, the voucher having metadata including;

identification information of the content associated with the voucher;

use information specifying the type of use intended for the content;

restriction information limiting usage of the content; and

transaction information including said content key; and

program code in said computer readable medium for sending the voucher to the DRM agent.

163. The computer program product of claim 162, further comprising:

program code in said computer readable medium for receiving in the request for a voucher identification information comprising at least one of the following;

an ID of a voucher requesting wireless device;

an ID of a voucher requesting user; and

an ID of the voucher requesting DRM agent;

program code in said computer readable medium for associating the generated voucher with received identification information comprising at least one of the following;

an ID of a voucher requesting wireless device;

an ID of a voucher requesting user;

an ID of the voucher requesting DRM agent; and

a voucher generating date and time; and

program code in said computer readable medium for storing the generated voucher at the voucher server together with the associated identification information.