Method and apparatus for acquiring and removing information regarding digital rights objects

• US 20050216419A1
• Filed: 03/29/2005
• Published: 09/29/2005
• Est. Priority Date: 03/29/2004
• Status: Abandoned Application

• Current Assignee: Samsung Electronics Co. Ltd.
• Original Assignee: Samsung Electronics Co. Ltd.
• Inventors: Oh, Yun-sang, Kim, Shin-han, Jung, Kyung-im, Kim, Tae-sung, Lee, Byung-Rae
• Application Number:
  US11/091,825
• Publication Number:
  US 20050216419A1
• Time in Patent Office: Days
• US Class Current: 705/59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2143 Clearing memory, e.g. to prevent the data from being stolen
• CPC Class Codes: G06F 2221/2153 Using hardware token as a secondary aspect

Abstract

A method and apparatus for acquiring and removing information regarding a digital rights object are provided. The method for acquiring removing information regarding a digital rights object includes receiving a request for data on a rights object from a device, processing the data on the rights object in response to the request, and providing the processed data to the device. The method of removing a digital rights object includes selecting information regarding a rights object to be removed, encrypting the selected information regarding the rights object using a common encryption key, embedding the encrypted information regarding the rights object into a signal to be transmitted to a portable storage device, and transmitting the signal to the portable storage device. A device requests information regarding a rights object from a portable storage device, receives the information regarding the rights object from the portable storage device, and removes an unnecessary rights object.

Claims

1. A method of acquiring information regarding a digital rights object, the method comprising:

receiving a request for data on a rights object from a device;

processing the data on the rights object in response to the request to generate processed data; and

providing the processed data to the device.

2. The method of claim 1, further comprising, before the processing of the data, performing authentication with the device and generating an encryption key.

3. The method of claim 2, wherein the encryption key comprises a session key and a hashing key.

4. The method of claim 1, wherein the processing of the data comprises:

accessing a rights object corresponding to one of a content identifier and a rights object identifier, which is provided by the device;

processing the data on the rights object which is accessed.

5. The method of claim 1, wherein the processed data comprises information included in the rights object.

6. The method of claim 5, wherein the processed data comprises a content identifier, information indicating whether content is modified, permission information, and information indicating whether other information is modified.

7. The method of claim 6, wherein the information indicating whether the other information is modified comprises information indicating a transmission sequence of the request from the device.

8. The method of claim 6, wherein the permission information comprises at least two types of permission information.

9. The method of claim 1, wherein the processed data is converted into a format supported by the device.

10. A method of acquiring information regarding a digital rights object, the method comprising:

performing authentication with a portable storage device and generating an encryption key;

requesting data on a rights object from the portable storage device; and

receiving processed data on the rights object from the portable storage device.

11. The method of claim 10, wherein the encryption key comprises a session key and a hashing key.

12. The method of claim 10, further comprising converting the processed data.

13. The method of claim 12, wherein the converting of the processed data comprises verifying whether the processed data is modified.

14. The method of claim 12, wherein the converting of the processed data comprises converting the processed data into a format supported by the device.

15. The method of claim 10, wherein the processed data comprises information in the rights object.

16. The method of claim 15, wherein the processed data comprises a content identifier, information indicating whether content is modified, permission information, and information indicating whether other information is modified.

17. The method of claim 16, wherein the information indicating whether the other information is modified comprises information indicating a transmission sequence from the request from the device.

18. A method of acquiring information regarding a digital rights object, the method comprising:

receiving a request for data on all available rights objects from a device;

accessing all of the available rights objects in response to the request and processing the data on all of the available rights objects to generate processed data; and

providing the processed data to the device.

19. The method of claim 18, further comprising, before the processing of the data, performing authentication with the device and generating an encryption key.

20. The method of claim 19, wherein the encryption key comprises a session key and a hashing key.

21. The method of claim 18, wherein the processed data comprises information included in the rights object.

22. The method of claim 21, wherein the processed data comprises a rights object identifier, a content identifier, information indicating whether content is modified, permission information, and information indicating whether other information is modified.

23. The method of claim 22, wherein the information indicating whether the other information is modified comprises information indicating a transmission sequence of the request from the device.

24. The method of claim 18, wherein the processed data is converted into a format supported by the device.

25. The method of claim 21, wherein the permission information comprises at least two types of permission information.

26. A method of acquiring information regarding a digital rights object, the method comprising:

performing authentication with a portable storage device and generating an encryption key;

requesting data on all available rights objects from the portable storage device; and

receiving processed data on all of the available rights objects from the portable storage device.

27. The method of claim 26, wherein the encryption key comprises a session key and a hashing key.

28. The method of claim 26, further comprising converting the processed data.

29. The method of claim 28, wherein the converting of the processed data comprises verifying whether the processed data is modified.

30. The method of claim 28, wherein the converting of the processed data comprises converting the processed data into a format supported by the device.

31. The method of claim 26, wherein the processed data comprises information included in the rights object.

32. The method of claim 31, wherein the processed data comprises a rights object identifier, a content identifier, information indicating whether content is modified, permission information, and information indicating whether other information is modified.

33. The method of claim 32, wherein the information indicating whether the other information is modified comprises information indicating a transmission sequence of the request from the device.

34. A method of removing a digital rights object, the method comprising:

selecting information regarding a rights object to be removed;

encrypting the information regarding the rights object which is selected using a common encryption key to generate encrypted information;

embedding the encrypted information regarding the rights object into a signal to be transmitted to a portable storage device; and

transmitting the signal to the portable storage device.

35. The method of claim 34, further comprising, before the selecting of the information, receiving information regarding the rights object to be removed from the portable storage device.

36. The method of claim 34, further comprising, before the selecting of the information, performing authentication with the portable storage device using a public-key scheme and generating the common encryption key.

37. The method of claim 34, wherein the selected information regarding the rights object is a rights object identifier.

38. The method of claim 34, wherein the selected information regarding the rights object is information on whether a rights object is usable.

39. A method of removing a digital rights object, the method comprising:

receiving encrypted rights object removal information from a device;

decrypting the encrypted rights object removal information using a common encryption key to generate decrypted rights object removed information;

accessing a rights object corresponding to the decrypted rights object removal information; and

removing the rights object which is accessed.

40. The method of claim 39, further comprising, before the receiving of the encrypted rights object removal information, providing information regarding the rights object to the device.

41. The method of claim 39, further comprising, before the receiving of the encrypted rights object removal information, performing authentication with the device and generating an encryption key.

42. The method of claim 39, wherein the decrypted rights object removal information comprises a rights object identifier.

43. The method of claim 39, wherein the decrypted rights object removal information comprises information on whether a rights object is usable.

44. The method of claim 39, wherein the removing of the rights object comprises completely eliminating the rights object.

45. The method of claim 39, wherein the removing of the rights object comprises changing predetermined information of the rights object to mark the rights object as unnecessary.

46. The method of claim 45, wherein the rights object marked as unnecessary is completely eliminated if storage space is insufficient.

47. The method of claim 45, wherein the rights object marked as unnecessary is completely eliminated in response to an external request.

48. A portable storage device comprising:

a storage module which stores a rights object for content;

an interface module which receives a request for the rights object from a device; and

a digital rights management (DRM) agent which accesses the rights object in response to the request, processes data on the rights object, and provides the data which is processed to the device through the interface module.

49. A device comprising:

an interface module communicably linked with a portable storage device;

a public-key encryption module which performs authentication with the portable storage device connected via the interface module;

an encryption key generation module which generates a session key and a hashing key which are shared with the portable storage device; and

a digital rights management (DRM) agent which requests data on a rights object from the portable storage device and receives processed data on the rights object from the portable storage device.

50. A device comprising:

a digital rights management (DRM) agent which selects information regarding a rights object to be removed and embeds the selected information regarding the rights object into a signal to be transmitted to a portable storage device;

an encryption module which encrypts the information regarding the rights object which is selected using a common encryption key to generate encrypted information regarding the rights object; and

an interface module which transmits the signal having the encrypted information regarding the rights object to the portable storage device.

51. The device of claim 50, wherein the selected information regarding the rights object comprises a rights object identifier.

52. The device of claim 50, wherein the selected information regarding the rights object comprises information on whether a rights object is usable.

53. A portable storage device comprising:

an interface module which receives encrypted rights object removal information from a device;

an encryption module which decrypts the rights object removal information using a common encryption key; and

a digital rights management (DRM) agent which accesses a rights object corresponding to the decrypted rights object removal information and removes the rights object.

54. The portable storage device of claim 53, wherein decrypted rights object removal information comprises a rights object identifier.

55. The portable storage device of claim 53, wherein the decrypted rights object removal information is information on whether a rights object is usable.

56. The portable storage device of claim 53, wherein the DRM agent removes the rights object by completely eliminating the rights object.

57. The portable storage device of claim 53, wherein the DRM agent removes the rights object by changing predetermined information of the rights object to mark the rights object as unnecessary.

58. The portable storage device of claim 57, wherein the rights object marked as unnecessary is completely eliminated if storage space is insufficient.

59. The portable storage device of claim 57, wherein the rights object marked as unnecessary is completely eliminated in response to an external request.

60. A recording medium having a computer readable program recorded therein, the program for executing a method of acquiring information regarding a digital rights object, the method comprising:

receiving a request for data on a rights object from a device;

processing the data on the rights object in response to the request to generate processed data; and

providing the processed data to the device.