System, method and computer program product for providing digital rights management of protected content

• US 20050273629A1
• Filed: 06/04/2004
• Published: 12/08/2005
• Est. Priority Date: 06/04/2004
• Status: Abandoned Application

• Current Assignee: Vital Source Technologies Incorporated (VitalSource Technologies LLC)
• Original Assignee: Vital Source Technologies Incorporated (VitalSource Technologies LLC)
• Inventors: Johnson, Ricky Lee, Abrams, William M.
• Application Number:
  US10/860,627
• Publication Number:
  US 20050273629A1
• Time in Patent Office: Days
• US Class Current: 713/189
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2209/24 Key scheduling, i.e. generating round keys or sub-keys for block encryption
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 9/0816 Key establishment, i.e. cryptographic processes or cryptographic protocols whereby a shared secret becomes available to two or more parties, for subsequent use

Abstract

A system for providing digial rights management of protected content includes a client and a DRM manager. The client is capable of receiving at least one piece of content, the piece(s) of content being encrypted with at least one encryption key regardless of client user(s) authorized to access the piece(s) of encrypted content. To facilitate the client accessing one or more of the piece(s) of content, the DRM manager is capable of transferring the encryption key(s) to the client, the encryption key(s) being encrypted with a private key of a public key/private key pair unique to a client user associated with the client. The client can thereafter decrypt the encryption key(s) using the public key of the public key/private key pair unique to the client user. Then, the client can decrypt the piece(s) of content using the decrypted encryption key(s), and access the decrypted piece(s) of content.

Claims

1. A system for providing digital rights management (DRM) of protected content, the system comprising:

a client capable of receiving at least one piece of content, wherein the client has a client user associated therewith, and wherein the at least one piece of content is encrypted with at least one encryption key regardless of any client user authorized to access the at least one piece of encrypted content;

a DRM manager capable of transferring the at least one encryption key to the client, the at least one encryption key being encrypted with a private key of a public key/private key pair unique to the client user associated with the client; and

wherein the client is capable of decrypting the at least one encryption key using the public key of the public key/private key pair unique to the client user, decrypting the at least one piece of content using the decrypted at least one encryption key, and accessing the decrypted at least one piece of content.

2. A system according to claim 1, wherein the DRM manager is capable of determining if the client user is authorized to access the at least one piece of content before transferring the at least one encryption key at the client, and if the client user is authorized, transferring the at least one encryption key to the client.

3. A system according to claim 1, wherein the client is capable of operating an access application, the access application being capable of determining if the client is authorized to decrypt the at least one piece of content, and if the client is authorized, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

4. A system according to claim 3, wherein the access application is capable of determining if the client is authorized to decrypt the at least one piece of content based upon a client identifier uniquely identifying the client.

5. A system according to claim 4, wherein each of a plurality of clients have a client identifier uniquely identifying the respective client;

wherein the client is capable of receiving a license file including the at least one encryption key and a client identifier uniquely identifying the same or a different client, the license file being encrypted with the private key;

wherein the access application is capable of decrypting the license file including the at least one encryption key and the client identifier; and

wherein the access application is capable of determining if the client is authorized to decrypt the at least one piece of content based upon the client identifier in the license file and the client identifier of the client receiving the license file.

6. A system according to claim 5, wherein the access application is capable of determining if the client identifier in the license file matches the client identifier of the client receiving the license file, and if a match is identified, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

7. A system according to claim 1, wherein the client is capable of receiving a plurality of pieces of content, the plurality of pieces of content being encrypted with a plurality of encryption keys;

wherein the DRM manager is capable of transferring the plurality of encryption keys to the client; and

wherein the client is capable of decrypting the plurality of encryption keys, and for each of the plurality of pieces of content, decrypting the respective piece of content using a respective decrypted encryption key.

8. A digital rights management (DRM) manager for providing digital rights management of at least one piece of protected content, wherein the at least one piece of content is provided to a client having a client user associated therewith, wherein the at least one piece of content is encrypted with at least one encryption key regardless of any client user authorized to access the at least one piece of encrypted content, and wherein the DRM manager comprises:

a processor capable of transferring the at least one encryption key to the client, the at least one encryption key being encrypted with a private key of a public key/private key pair unique to the client user associated with the client, wherein the processor is capable of transferring the at least one encryption key to the client such that the client is thereafter capable of decrypting the at least one encryption key using the public key of the public key/private key pair unique to the client user, decrypting the at least one piece of content using the decrypted at least one encryption key, and accessing the decrypted at least one piece of content.

9. A DRM manager according to claim 8, wherein the processor is capable of determining if the client user is authorized to access the at least one piece of content before transferring the at least one encryption key at the client, and if the client user is authorized, transferring the at least one encryption key to the client.

10. A DRM manager according to claim 8, wherein the processor is capable of transferring the at least one encryption key to the client such that an access application capable of operating on the client is thereafter capable of determining if the client is authorized to decrypt the at least one piece of content, and if the client is authorized, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

11. A DRM manager according to claim 10, wherein the processor is capable of transferring the at least one encryption key to the client such that the access application is capable of determining if the client is authorized to decrypt the at least one piece of content based upon a client identifier uniquely identifying the client.

12. A DRM manager according to claim 11, wherein each of a plurality of clients have a client identifier uniquely identifying the respective client;

wherein the processor is capable of sending the client a license file including the at least one encryption key and a client identifier uniquely identifying the same or a different client, the license file being encrypted with the private key; and

wherein the processor is capable of sending the license file such that the access application is capable of decrypting the license file including the at least one encryption key and the client identifier, and thereafter determining if the client is authorized to decrypt the at least one piece of content based upon the client identifier in the license file and the client identifier of the client receiving the license file.

13. A DRM manager according to claim 12, wherein the processor is capable of sending the license file such that the access application is capable of determining if the client identifier in the license file matches the client identifier of the client receiving the license file, and if a match is identified, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

14. A DRM manager according to claim 8, wherein the client is capable of receiving a plurality of pieces of content, the plurality of pieces of content being encrypted with a plurality of encryption keys;

and

wherein the processor is capable of transferring the plurality of encryption keys to the client such that the client is capable of decrypting the plurality of encryption keys, and for each of the plurality of pieces of content, decrypting the respective piece of content using a respective decrypted encryption key.

15. A client having a client user associated therewith, the client comprising:

a processor capable of operating an access application, wherein the access application is capable of receiving at least one piece of content, the at least one piece of content being encrypted with at least one encryption key regardless of any client user authorized to access the at least one piece of encrypted content;

wherein the access application is capable of receiving the at least one encryption key, the at least one encryption key being encrypted with a private key of a public key/private key pair unique to the client user associated with the client; and

wherein the access application is also capable of decrypting the at least one encryption key using the public key of the public key/private key pair unique to the client user, decrypting the at least one piece of content using the decrypted at least one encryption key, and thereafter accessing the decrypted at least one piece of content.

16. A client according to claim 15;

wherein the access application is capable of receiving the at least one encryption key if the client user is authorized to access the at least one piece of content.

17. A client according to claim 15, wherein the access application is further capable of determining if the client is authorized to decrypt the at least one piece of content, and if the client is authorized, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

18. A client according to claim 17, wherein the access application is capable of determining if the client is authorized to decrypt the at least one piece of content based upon a client identifier uniquely identifying the client.

19. A client according to claim 18, wherein each of a plurality of clients have a client identifier uniquely identifying the respective client, wherein the client application is capable of receiving a license file including the at least one encryption key and a client identifier uniquely identifying the same or a different client, the license file being encrypted with the private key;

wherein the access application is capable of decrypting the license file including the at least one encryption key and the client identifier; and

wherein the access application is capable of determining if the client is authorized to decrypt the at least one piece of content based upon the client identifier in the license file and the client identifier of the client receiving the license file.

20. A client according to claim 19, wherein the access application is capable of determining if the client identifier in the license file matches the client identifier of the client receiving the license file, and if a match is identified, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

21. A client according to claim 15, wherein the access application is capable of receiving a plurality of pieces of content at a client, the plurality of pieces of content being encrypted with a plurality of encryption keys;

wherein the access application is capable of receiving the plurality of encryption keys, and decrypting the plurality of encryption keys; and

wherein the access application is capable of decrypting at least one of the plurality of pieces of content, and for each respective piece of content, decrypting the respective piece of content using a respective decrypted encryption key.

22. A method of providing digital rights management of protected content, the method comprising:

receiving at least one piece of content at a client, the client having a client user associated therewith, the at least one piece of content being encrypted with at least one encryption key regardless of any client user authorized to access the at least one piece of encrypted content;

receiving the at least one encryption key at the client, the at least one encryption key being encrypted with a private key of a public key/private key pair unique to the client user associated with the client;

decrypting the at least one encryption key using the public key of the public key/private key pair unique to the client user;

decrypting the at least one piece of content using the decrypted at least one encryption key; and

accessing the decrypted at least one piece of content.

23. A method according to claim 22 further comprising:

determining if the client user is authorized to access the at least one piece of content before receiving the at least one encryption key at the client; and

if the client user is authorized, transferring the at least one encryption key to the client.

24. A method according to claim 22 further comprising:

determining if the client is authorized to decrypt the at least one piece of content, and if the client is authorized, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

25. A method according to claim 24, wherein determining if the client is authorized to decrypt the at least one piece of content comprises determining if the client is authorized to decrypt the at least one piece of content based upon a client identifier uniquely identifying the client.

26. A method according to claim 25, wherein each of a plurality of clients have a client identifier uniquely identifying the respective client;

wherein receiving the at least one encryption key at the client comprises receiving a license file including the at least one encryption key and a client identifier uniquely identifying the same or a different client, the license file being encrypted with the private key;

wherein decrypting the at least one encryption key comprises decrypting the license file including the at least one encryption key and the client identifier; and

wherein determining if the client is authorized to decrypt the at least one piece of content comprises determining if the client is authorized to decrypt the at least one piece of content based upon the client identifier in the license file and the client identifier of the client receiving the license file.

27. A method according to claim 26, wherein determining if the client is authorized to decrypt the at least one piece of content comprises determining if the client identifier in the license file matches the client identifier of the client receiving the license file, and if a match is identified, decrypting the at least one piece of content and accessing the decrypted at least one piece of content.

28. A method according to claim 22, wherein receiving at least one piece of content comprises receiving a plurality of pieces of content at a client, the plurality of pieces of content being encrypted with a plurality of encryption keys;

wherein receiving the at least one encryption key comprises receiving the plurality of encryption keys, and decrypting the at least one encryption key comprises decrypting the plurality of encryption keys; and

wherein decrypting the at least one piece of content comprises decrypting at least one of the plurality of pieces of content, and for each respective piece of content, decrypting the respective piece of content using a respective decrypted encryption key.

29. A computer program product for providing digital rights management of protected content, wherein the computer program product comprises at least one computer-readable storage medium having computer-readable program code portions stored therein, the computer-readable program code portions comprising:

a first executable portion for receiving at least one piece of content, the at least one piece of content being encrypted with at least one encryption key regardless of any client user authorized to access the at least one piece of encrypted content;

a second executable portion for receiving the at least one encryption key, the at least one encryption key being encrypted with a private key of a public key/private key pair unique to a client user associated with a client;

a third executable portion for decrypting the at least one encryption key using the public key of the public key/private key pair unique to the client user;

a fourth executable portion for decrypting the at least one piece of content using the decrypted at least one encryption key; and

a fifth executable portion for accessing the decrypted at least one piece of content.

30. A computer program product according to claim 29, wherein the second executable portion is adapted to receive the at least one encryption key if the client user is authorized to access the at least one piece of content.

31. A computer program product according to claim 29 further comprising:

a sixth executable portion for determining if the client is authorized to decrypt the at least one piece of content; and

wherein the fourth executable portion is adapted to decrypt the at least one piece of content, and the fifth executable portion is adapted to access the decrypted at least one piece of content, if the client is authorized.

32. A computer program product according to claim 31, wherein the sixth executable portion is adapted to determine if the client is authorized to decrypt the at least one piece of content based upon a client identifier uniquely identifying the client.

33. A computer program product according to claim 32, wherein each of a plurality of clients have a client identifier uniquely identifying the respective client, wherein the second executable portion is adapted to receive a license file including the at least one encryption key and a client identifier uniquely identifying the same or a different client, the license file being encrypted with the private key;

wherein the third executable portion is adapted to decrypt the license file including the at least one encryption key and the client identifier; and

wherein the sixth executable portion is adapted to determine if the client is authorized to decrypt the at least one piece of content based upon the client identifier in the license file and the client identifier of the client receiving the license file.

34. A computer program product according to claim 33, wherein the sixth executable portion is adapted to determine if the client identifier in the license file matches the client identifier of the client receiving the license file;

and

wherein the fourth executable portion is adapted to decrypt the at least one piece of content, and the fifth executable portion is adapted to access the decrypted at least one piece of content, if a match is identified.

35. A computer program product according to claim 29, wherein the first executable portion is adapted to receive a plurality of pieces of content at a client, the plurality of pieces of content being encrypted with a plurality of encryption keys;

wherein the second executable portion is adapted to receive the plurality of encryption keys, and the third executable portion is adapted to decrypt the plurality of encryption keys; and

wherein the fourth executable portion is adapted to decrypt at least one of the plurality of pieces of content, and for each respective piece of content, decrypting the respective piece of content using a respective decrypted encryption key.