USING A FIRST DEVICE TO ENGAGE IN A DIGITAL RIGHTS MANAGEMENT TRANSACTION ON BEHALF OF A SECOND DEVICE

• US 20070124809A1
• Filed: 01/17/2007
• Published: 05/31/2007
• Est. Priority Date: 10/04/2002
• Status: Active Grant

• Current Assignee: Rovi Technologies Corporation (Adeia Inc.)
• Original Assignee: Microsoft Corporation
• Inventors: Narin, Attila, DeMello, Marco
• Granted Patent: US 7,865,964 B2
• Time in Patent Office: Days
• US Class Current: 726/6
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

A first device is used to initiate and direct a rights-management transaction, such as content licensing, acquisition, or activation, on behalf of a second device. The first device may, for example, be a desktop computer, laptop computer, or electronic kiosk at a bricks-and-mortar store. The second device may, for example, be a handheld computer that is cradled to establish communicative connectivity with the first device. A user interacts with the first device to initiate a transaction on behalf of the second device. The first device then obtains the information from the second device that is necessary to perform the transaction on behalf of the second device, communicates with a server, and provides the result of the server communication to the first device. Thus, the first device acts as a proxy for the second device.

Claims

1. A method of using a first device to enable the use of access-restricted content on a second device, the second device having associated therewith a first key pair comprising a first public key and a first private key, the method comprising:

establishing a communication connection between the first device and the second device;

engaging in a user interaction with the first device to initiate acquisition of the content;

at the first device, obtaining data that enables the use of the content in the presence of the first private key; and

transmitting the data to the second device.

2. The method of claim 1, further comprising:

at the first device, obtaining the content in an encrypted form that requires the first private key for decryption; and

transmitting the content to the second device.

3. The method of claim 2, wherein the content is encrypted by a symmetric key, and wherein the method further comprises:

at the first device, obtaining the symmetric key in a form encrypted by the first public key; and

transmitting, to the second device, the symmetric key in a form encrypted by the first public key.

4. The method of claim 1, wherein the second device is further associated with a second key pair comprising second public key and a second private key, and wherein the first private key is stored on the second device in a form that requires the second private key for decryption.

5. The method of claim 1, wherein said obtaining act comprises obtaining said data from a server device that is distinct from the first and second devices.

6. The method of claim 1, wherein the first device is communicatively connected to a cradle, and wherein said establishing act comprises placing said second device in said cradle.

7. A system for distributing content for consumption by a first device, the first device having a first public key and a first private key associated therewith, the system comprising:

a second device that is communicatively connectable to the first device, the first device comprising;

human-interactive controls that enable a user to request a content item to be obtained;

software that, in response to said user'"'"'s request, retrieves the first public key from the first device and uses said first public key to obtain the content in a form decryptable by the first private key,

wherein said first private key is not accessible to said second device.

8. The system of claim 7, wherein the second device detects connectivity with the first device, and determines whether to obtain content for the first device or the second device according to whether said connectivity is established.

9. The system of claim 7, wherein the first device comprises a component that permits consumption of the content only in conjunction with a license, and wherein the second device obtains the license and transmits the license to the first device.

10. The system of claim 9, wherein said the second device obtains the license from a server device that is distinct from both said first device and said second device.

11. The system of claim 9, wherein the license comprises:

one or more rights, indicating the conditions under which the content may be consumed; and

information that permits the content to be decrypted if the first private key is present.

12. The system of claim 7, wherein the first device transmits the content to the second device.

13. A computer-readable medium encoded with computer-executable instructions to perform a method of using a first device to engage in a rights management transaction on behalf of a second device that is communicatively connected to the first device, the method comprising:

using the first device to engage in a user interaction to initiate a transaction on behalf of the second device;

obtaining first information at the first device from the second device, the first information being associated with the second device;

requesting that a third device perform an operation in furtherance of the transaction, the third device being remote from the first and second devices, the request being based on the first information, whereby the operation generates second information;

receiving the second information from the third device; and

providing the second information to the second device.

14. The computer-readable medium of claim 13, wherein the rights management transaction comprises the licensing of a content item, wherein the first information comprises a certificate associated with the second device, wherein the obtaining act comprises obtaining the public key, and wherein the second information comprises a license that permits consumption of the content on one or more terms in the presence of the public key.

15. The computer-readable medium of claim 14, further comprising:

obtaining the content item.

16. The computer-readable medium of claim 13, wherein the first device and third device are on a network that communicatively connects the first device with the third device, wherein the second device is not on said network, and wherein the method further comprises:

using said network to engage in said transaction on behalf of said second device.

17. The computer-readable medium of claim 13, wherein the first information comprises one or more hardware features or identifiers of the second device, and wherein the obtaining act comprises obtaining the identifiers or information indicative of the hardware features.

18. The computer-readable medium of claim 13, wherein the third device is a server that is distinct from both said first device and said second device.

19. The computer-readable medium of claim 13, wherein a first key pair comprising a first public key and a first private key is associated with said second device, wherein the first private key is not accessible to the first device, and wherein the method further comprises:

at the first device, receiving the first public key from the second device, wherein the first information comprises a second key pair comprising a second public key and a second private key, the second private key being encrypted in a form that requires the first private key for decryption.

20. The computer-readable medium of claim 13, wherein first private key is built into hardware associated with said second device.