Organization-based content rights management and systems, structures, and methods therefor

• US 20050005166A1
• Filed: 08/01/2003
• Published: 01/06/2005
• Est. Priority Date: 06/27/2003
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Brown, Kevin, Gerhard, Lutz, Antonoff, Lauren, Cahill, Jason, Walker, Mark, Kouznetsov, Pavel, Lutz, Moshe Randall
• Granted Patent: US 7,469,050 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]

Abstract

A document store delivers a document requested therefrom from a folder having rights information associated therewith. In response to a request for a copy of the document, rights data for the copy of the document is defined based on the rights information of the folder, and the copy of the document and the defined rights data thereof are published to result in a package with the rights data and the copy of the document encrypted according to a content key (KD) to result in (KD(copy)). The formed package is then delivered to the requester. The rights data can be discovered upon the requester attempting to render the package and such discovery triggers a request for a corresponding license based on such rights data. The license includes (KD) therein in a form available to the requester to decrypt (KD(copy)) if the requester satisfies the rights data.

Claims

1. A method for a document store to deliver a copy of a document requested therefrom, the document being stored in a folder of the document store, the folder having rights information associated therewith, the method comprising:

receiving the document into the folder;

receiving a request for the copy of the document;

defining rights data for the copy of the document based on the rights information of the folder;

publishing the copy of the document and the defined rights data thereof to result in a package with the rights data and the copy of the document encrypted according to a content key (KD) to result in (KD(copy)); and

delivering the formed package to the requester, whereby the rights data can be discovered upon the requester attempting to render the package and such discovery triggers a request for a corresponding license based on such rights data, the license including (KD) therein in a form available to the requester to decrypt (KD(copy)) if the requester satisfies the rights data.

2. The method of claim 1 further comprising obtaining the license on behalf of the requester and delivering the obtained license to the requester with the package.

3. The method of claim 1 wherein publishing comprises

generating the content key (KD);

encrypting the copy of the document with (KD) to form (KD(copy));

protecting (KD(copy)) to a rights management (RM) server by encrypting (KD) with a public key of the RM server (PU-RM) to result in (PU-RM(KD)), whereby only the RM server with a corresponding private key (PR-RM) can apply same to (PU-RM(KD)) to reveal (KD); and

attaching the rights data with (PU-RM(KD)) therein to (KD(copy)) to form the package.

4. The method of claim 3 further comprising having the defined rights data signed by one of the RM server or the document store.

5. The method of claim 3 comprising concatenating the rights data with (PU-RM(KD)) therein to (KD(copy)) to form the package.

6. The method of claim 1 wherein the folder has rights information comprising access controls associated therewith, the access controls being defined for each individual and/or for each group of individuals that may access the folder, and wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the copy of the document.

7. The method of claim 6 wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the requester and also for all other individuals or groups of individuals specified in the access controls, whereby the copy of the document with the rights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

8. The method of claim 1 wherein the folder has rights information comprising a rights template associated therewith, the rights template defining rights for a number of individuals and/or groups of individuals, and wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the copy of the document.

9. The method of claim 8 wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the requester and also for all other individuals or groups of individuals specified in the rights template, whereby the copy of the document with the rights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

10. The method of claim 8 comprising copying substantially all of the rights template into the rights data for the copy of the document.

11. The method of claim 8 comprising copying a portion of the rights template relevant to the document into the rights data for the copy of the document.

12. The method of claim 1 comprising receiving the document into the folder in a non-RM-protected form, whereby RM-protection is applied to the copy of the document when the copy of the document is delivered to the requester.

13. A computer-readable medium having stored thereon computer-executable instructions for performing a method for a document store to deliver a copy of a document requested therefrom, the document being stored in a folder of the document store, the folder having rights information associated therewith, the method comprising:

receiving the document into the folder;

receiving a request for the copy of the document;

defining rights data for the copy of the document based on the rights information of the folder;

publishing the copy of the document and the defined rights data thereof to result in a package with the rights data and the copy of the document encrypted according to a content key (KD) to result in (KD(copy)); and

delivering the formed package to the requester, whereby the rights data can be discovered upon the requester attempting to render the package and such discovery triggers a request for a corresponding license based on such rights data, the license including (KD) therein in a form available to the requester to decrypt (KD(copy)) if the requester satisfies the rights data.

14. The medium of claim 13 wherein the method further comprises obtaining the license on behalf of the requester and delivering the obtained license to the requester with the package.

15. The medium of claim 13 wherein publishing comprises

generating the content key (KD);

encrypting the copy of the document with (KD) to form (KD(copy));

protecting (KD(copy)) to a rights management (RM) server by encrypting (KD) with a public key of the RM server (PU-RM) to result in (PU-RM(KD)), whereby only the RM server with a corresponding private key (PR-RM) can apply same to (PU-RM(KD)) to reveal (KD); and

attaching the rights data with (PU-RM(KD)) therein to (KD(copy)) to form the package.

16. The medium of claim 15 wherein the method further comprises having the defined rights data signed by one of the RM server or the document store.

17. The medium of claim 15 wherein the method comprises concatenating the rights data with (PU-RM(KD)) therein to (KD(copy)) to form the package.

18. The medium of claim 13 wherein the folder has rights information comprising access controls associated therewith, the access controls being defined for each individual and/or for each group of individuals that may access the folder, and wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the copy of the document.

19. The medium of claim 18 wherein defining the rights data comprises mapping the access controls for the folder into the rights data for the requester and also for all other individuals or groups of individuals specified in the access controls, whereby the copy of the document with the rights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

20. The medium of claim 13 wherein the folder has rights information comprising a rights template associated therewith, the rights template defining rights for a number of individuals and/or groups of individuals, and wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the copy of the document.

21. The medium of claim 20 wherein defining the rights data comprises copying at least a portion of the rights template into the rights data for the requester and also for all other individuals or groups of individuals specified in the rights template, whereby the copy of the document with the rights data attached thereto can be distributed and redistributed to such other individuals and each such other individual can employ the rights data to obtain a license to render the document.

22. The medium of claim 20 wherein the method comprises copying substantially all of the rights template into the rights data for the copy of the document.

23. The medium of claim 20 wherein the method comprises copying a portion of the rights template relevant to the document into the rights data for the copy of the document.

24. The medium of claim 13 comprising receiving the document into the folder in a non-RM-protected form, whereby RM-protection is applied to the copy of the document when the copy of the document is delivered to the requester.