System and method for federated rights management

• US 20050071280A1
• Filed: 09/25/2003
• Published: 03/31/2005
• Est. Priority Date: 09/25/2003
• Status: Active Grant

• Current Assignee: NetCracker Technology Corporation (NEC Corporation)
• Original Assignee: Convergys Information Management Group, Inc.
• Inventors: Birch, Robert Dennis, Irwin, Scott Andrew, Weagraff, Stephen DeWayne, Lupo, Joseph Paul
• Granted Patent: US 7,389,273 B2
• Time in Patent Office: Days
• US Class Current: 705/59
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0435 wherein the sending and receiving network entities apply symmetric encryption, i.e. same key used for encryption and decryption cryptographic mechanisms or cryptographic arrangements for symmetric key encryption H04L9/06
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/065 for group communications cryptographic mechanisms or cryptographic arrangements for key management involving conference or group key H04L9/0833
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates
• CPC Class Codes: H04L 9/083 involving central third party, e.g. key distribution center [KDC] or trusted third party [TTP]

Abstract

A system is disclosed for a digital rights management system which enforces license rights by establishing an account domain of registered consumer devices which may each receive a decryption key to be used to decode digital content bought by any of the devices within the account domain. Such system further enables the decentralization of content sharing by establishing a network of trusted intermediate devices to manage licenses on end devices for a central rights provider.

Claims

1. An electronic system for managing distribution of digital content comprising:

a. an electronic central rights provider;

b. an electronic intermediate rights provider;

c. at least one electronic consumer device;

wherein

said central rights provider is configured to grant and transmit an electronic master license to said intermediate rights provider wherein said master license includes a right to create a child license for a set of digital content associated with said master license for transmission to said at least one electronic consumer device.

2. An electronic system for managing distribution of digital content as claimed in claim 1 wherein:

said intermediate rights provider is configured to establish an account domain comprising at least said consumer device wherein said consumer device registers (registered consumer device) with said intermediate rights provider by transmitting an identifier and a set of security credentials to said intermediate rights provider;

said intermediate rights provider is configured to create and transmit a unique account key to each of said registered consumer devices in a given account domain;

said intermediate rights provider is configured to receive a request for a set of digital content from a first registered consumer device;

said intermediate rights provider is configured to create an electronic child license according to said request and within a set of parameters dictated by said master license;

said intermediate rights provider is configured to combine at least said child license, a set of account data associated with said first registered device requesting content (requesting device), and said digital content in a digital rights package;

said intermediate rights provider is configured to encrypt said digital rights package (encrypted package) by using said account key;

said intermediate rights provider is configured to transmit said encrypted package to said requesting device;

said intermediate rights provider is configured to process a charge associated with said request using said account data associated with said requesting device;

said intermediate rights provider is configured to transmit a set of settlement data associated with said charge to said central rights provider.

3. An electronic system for managing distribution of digital content, as claimed in claim 1, wherein said requesting device is equipped with a digital rights management system which is configured to use said account key to decrypt said encrypted package and utilize said digital content.

4. An electronic system for managing distribution of digital content, as claimed in claim 3, wherein said requesting device'"'"'s digital rights management system is further configured to transmit said encrypted package to a second consumer device.

5. An electronic system for managing distribution of digital content, as claimed in claim 4, wherein, if said second consumer device is a registered device in the same account domain as said requesting device, then a digital rights management system embedded into said second consumer device is configured to decrypt said encrypted package using said account key obtained at registration.

6. An electronic system for managing distribution of digital content, as claimed in claim 3, wherein, if said second consumer device is not a registered device in the same account domain as said requesting device, then said second consumer device is configured to either (a) communicate with said intermediate rights provider to join said account domain or (b) communicate with said intermediate rights provider to establish a new account domain and receive an account key associated with said new account domain.

7. An electronic system for managing distribution of digital content, as claimed in claim 6, wherein said intermediate rights provider is configured to update said encrypted package transferred to said second consumer device by deleting said account information associated with said requesting device and inserting account information associated with said second consumer device.

8. An electronic system for managing distribution of digital content, as claimed in claim 5, wherein, said consumer devices are configured to request a set of additional license rights from said intermediate rights provider.

9. An electronic system for managing distribution of digital content, as claimed in claim 8, wherein said intermediate rights provider is further configured to process a charge for said set of additional license rights using said account data associated with said consumer devices and according to a set of formulas included in said master license.

10. An electronic system for managing distribution of digital content, as claimed in claim 9, wherein said intermediate rights provider is further configured to transmit a set of settlement data associated with said charge to said central rights provider.

11. An electronic system for managing distribution of digital content, as claimed in claim 4, wherein, if said child license generated by said intermediate rights provider is usage-based, said requesting device'"'"'s digital rights management system is further configured to transmit said encrypted package to second consumer device and to turn off said child license within said requesting device until such time as the child license is returned to the requesting device.

12. An electronic system for managing distribution of digital content, as claimed in claim 1, wherein said requesting device is equipped with a digital rights management system which is configured to transmit said encrypted package to a foreign consumer device and to substantially contemporaneously turn off said child license within said requesting device.

13. An electronic system for managing distribution of digital content, as claimed in claim 2, wherein, said central rights provider is further configured to record a bonus to be associated with said intermediate rights provider for processing said request.

15. An electronic system for managing distribution of digital content as claimed in claim 1 wherein:

said intermediate rights provider (first intermediate rights provider) is further configured to request at least one child license from a second intermediate rights provider.

16. An electronic system for managing distribution of digital content as claimed in claim 15 wherein:

said first intermediate rights provider is further configured to combine said at least one child license, a set of account data associated with at least one electronic consumer device that has registered with said first intermediate rights provider (registered electronic consumer device) and requested said child license, and a set of digital content associated with said child license in a digital rights package;

said first intermediate rights provider is configured to encrypt said digital rights package (encrypted package) by using an account key associated with said at least one registered electronic consumer device;

said first intermediate rights provider is configured to transmit said encrypted package to said registered electronic consumer device.

17. An electronic system for managing distribution of digital content as claimed in claim 1 wherein:

said intermediate rights provider (first intermediate rights provider) is further configured to export said child license to a second, trusted, foreign system if permitted by said master license.

18. An electronic system for managing distribution of digital content as claimed in claim 1 wherein:

said intermediate rights provider (first intermediate rights provider) is further configured to import a foreign child license from a foreign system and use said foreign child license to create a digital rights package for distribution to said electronic consumer device that has registered with said intermediate rights provider.

19. An electronic system for managing distribution of digital content as claimed in claim 2 comprising at least two registered consumer devices (a first registered consumer device and a second registered consumer device) wherein

said intermediate rights provider is configured to maintain a list of child licenses purchased by said registered consumer devices in said account domain;

said first registered consumer device may purchase and receive said digital rights package;

said second registered consumer device may attempt to utilize content associated with said digital rights package without said child license;

said second registered consumer device may query said intermediate rights provider to determine if said child license has been purchased by another registered consumer device in said account domain;

if said child license has been purchased by another registered consumer device in said account domain, then said intermediate rights provider may transmit said digital rights package to said second registered consumer device.

14. A method of delegating the distribution of content and licenses among a plurality of consumer devices comprising:

a. receiving, from said central rights provider, an electronic master package comprising a set of digital content and an electronic master license to govern a set of distribution rights via an intermediate rights provider from a central rights provider;

b. receiving and processing, at said intermediate rights provider, a registration from at least one consumer device in electronic communication with said intermediate rights provider;

c. electronically sending, from said intermediate rights provider, an account key to each of a set of consumer devices registering under a single account;

d. receiving and processing, at said intermediate rights provider, a request, from one of said consumer devices, for a child license to said set of digital content;

e. preparing, at said intermediate rights provider, a digital rights package comprising said digital content;

a child license, structured within said request and a set of parameters contained in said master license; and

account data associated with said consumer device wherein said package is encrypted using said account key;

f. electronically transmitting, from said intermediate rights provider, said digital rights package to said consumer device.

20. A multi-processor system comprising a plurality of processor means for managing distribution of digital content wherein a first electronic rights provider is configured to create and transmit an electronic master license to a second electronic rights provider wherein said master license grants to said second electronic rights provider a right to create at least one child license for a set of digital content associated with said master license within a set of parameters defined by said master license.

21. A multi-processor system as claimed in claim 20, wherein said second electronic rights provider is configured to

grant said child license to an electronic media device;

process a charge associated with said child license using a set of account data associated with said media device; and

transmit a set of settlement data associated with said charge to said first rights provider.

22. A computer-readable medium having computer-executable instructions for delegating the distribution of content and licenses among a plurality of consumer devices comprising:

electronically receiving an electronic master package comprising a set of digital content and an electronic master license wherein said master license is encoded with a set of distribution rights for said digital content;

creating at least one electronic child license in response to an electronic request from a consumer device for said digital content wherein said child license complies with said distribution rights;

encrypting said child license;

electronically sending said child license to said consumer device.