Binding a digital license to a portable device or the like in a digital rights management (DRM) system and checking out/checking in the digital license to/from the portable device or the like

• US 20060259770A1
• Filed: 05/10/2006
• Published: 11/16/2006
• Est. Priority Date: 03/27/1999
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Peinado, Marcus
• Granted Patent: US 7,386,891 B2
• Time in Patent Office: Days
• US Class Current: 713/171
• CPC Class Codes: G06F 21/1088 by using transactions with atomicity, consistency, or isolation and durability [ACID] properties
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/71 to assure secure computing or processing of information
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2211/008 Public Key, Asymmetric Key, Asymmetric Encryption
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2145 Inheriting rights or properties, e.g., propagation of permissions or restrictions within a hierarchy
• CPC Class Codes: G07F 9/002 Vending machines being part of a centrally controlled network of vending machines
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0442 wherein the sending and receiving network entities apply asymmetric encryption, i.e. different keys for encryption and decryption cryptographic mechanisms or cryptographic arrangements for public-key encryption H04L9/30
• CPC Class Codes: H04L 63/068 using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

To render digital content encrypted according to a content key (KD) on a first device having a public key (PU1) and a corresponding private key (PR1), a digital license corresponding to the content is obtained, where the digital license includes the content key (KD) therein in an encrypted form. The encrypted content key (KD) from the digital license is decrypted to produce the content key (KD), and the public key (PU1) of the first device is obtained therefrom. The content key (KD) is then encrypted according to the public key (PU1) of the first device (PU1 (KD)), and a sub-license corresponding to and based on the obtained license is composed, where the sub-license includes (PU1 (KD)). The composed sub-license is then transferred to the first device.

Claims

1-22. -22. (canceled)

23. A method of checking out a sub-license to a first device from a second device comprising:

receiving a request from the second device for a nonce, and providing such nonce;

receiving from the second device the checked-out sub-license and the provided nonce;

concluding that the nonce received is the same nonce provided;

therefore concluding that the received sub-license is legitimate; and

storing the sent sub-license.

24. The method of claim 23 in combination with a method of checking in the checked-out sub-license comprising deleting the checked-out sub-license and then providing a trusted indication to the second device that the checked-out sub-license has in fact been deleted.

25. The method of claim 24 wherein the second device adds the checked-out sub-license to a catalog by adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to the catalog, and wherein checking in the checked-out sub-license comprises:

requesting a nonce from the second device, and receiving such nonce; and

sending to the second device the received nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device, wherein the deleted checked-out sub-license is not in the sent list, and wherein the second device concludes that the nonce sent by the first device is the same nonce received by the first device, therefore concludes that the sent identifier and list that accompanied the sent nonce is legitimate, compares the sent list with the catalog and notes that the deleted checked-out sub-license is in the catalog but not on the sent list, and deletes the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

26. A method of checking out a sub-license from a second device to a first device comprising:

requesting a nonce from the first device, and receiving such nonce; and

sending the checked-out sub-license and the received nonce to the first device, wherein the first device concludes that the nonce sent by the second device is the same nonce received by the second device, therefore concludes that the sent sub-license that accompanies the sent nonce is legitimate, and stores the sent sub-license.

27. The method of claim 26 further comprising adding the checked-out sub-license to a catalog.

28. The method of claim 27 wherein adding the checked-out sub-license to the catalog comprises adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to the catalog.

29. The method of claim 27 in combination with a method of checking in the checked-out sub-license comprising receiving a trusted indication from the first device that the checked-out sub-license has been deleted.

30. The method of claim 29 wherein checking in the checked-out sub-license comprises:

receiving a request from the first device for a nonce, and providing such nonce;

receiving from the first device the provided nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device, wherein the deleted checked-out sub-license is not in the sent list;

concluding that the received nonce is the same nonce provided;

therefore concluding that the received identifier and list is legitimate;

comparing the received list with the catalog, and noting that the deleted checked-out sub-license is in the catalog but not on the sent list; and

deleting the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.

31. A method of checking out a sub-license from a second device to a first device comprising:

requesting, by the second device, a nonce from the first device, and receiving such nonce;

sending, by the second device, the checked-out sub-license and the received nonce to the first device;

concluding, by the first device, that the nonce sent by the second device is the same nonce received by the second device;

therefore concluding, by the first device, that the sent sub-license that accompanies the sent nonce is legitimate; and

storing, by the first device, the sent sub-license.

32. The method of claim 31 further comprising adding, by the second device, the checked-out sub-license to a catalog.

33. The method of claim 32 wherein adding the checked-out sub-license to the catalog comprises adding an entry including an identifier identifying the checked-out sub-license and an identifier identifying the first device to the catalog.

34. The method of claim 32 in combination with a method of checking in the checked-out sub-license comprising deleting the checked-out sub-license from the first device and then providing a trusted indication to the second device that the checked-out sub-license has in fact been deleted.

35. The method of claim 34 wherein checking in the checked-out sub-license comprises:

deleting, by the first device, the checked-out sub-license therefrom;

requesting, by the first device, a nonce from the second device, and receiving such nonce;

sending, by the first device to the second device, the received nonce, an identifier identifying the first device, and a list of all sub-licenses currently resident on the first device, wherein the deleted checked-out sub-license is not in the sent list;

concluding, by the second device, that the nonce sent by the first device is the same nonce received by the first device;

therefore concluding, by the second device, that the sent identifier and list that accompanied the sent nonce is legitimate;

comparing, by the second device, the sent list with the catalog, and noting that the deleted checked-out sub-license is in the catalog but not on the sent list; and

deleting, by the second device, the entry having the identifier identifying the deleted checked-out sub-license and the identifier identifying the first device from the catalog.