TRUSTED INFRASTRUCTURE SUPPORT SYSTEMS, METHODS AND TECHNIQUES FOR SECURE ELECTRONIC COMMERCE ELECTRONIC TRANSACTION AND RIGHTS MANAGEMENT

• US 20070276759A1
• Filed: 08/07/2007
• Published: 11/29/2007
• Est. Priority Date: 02/13/1995
• Status: Abandoned Application

• Current Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Weber, Robert, Van Wie, David, Ginter, Karl, Spahn, Francis, Shear, Victor
• Application Number:
  US11/834,784
• Publication Number:
  US 20070276759A1
• Time in Patent Office: Days
• US Class Current: 705/53
• CPC Class Codes: G06F 12/1408 by using cryptography for digital transmission H04L9/00
• CPC Class Codes: G06F 12/1483 using an access-table, e.g. matrix or list
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 21/16 Program or content traceability, e.g. by watermarking
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/86 Secure or tamper-resistant housings
• CPC Class Codes: G06F 2211/007 Encryption, En-/decode, En-/decipher, En-/decypher, Scramble, (De-)compress
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2151 Time stamp
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/023 the neutral party being a clearing house
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/123 Shopping for digital content
• CPC Class Codes: G06Q 20/1235 with control of digital rights management [DRM]
• CPC Class Codes: G06Q 20/14 specially adapted for billing systems
• CPC Class Codes: G06Q 20/24 Credit schemes, i.e. "pay after"
• CPC Class Codes: G06Q 30/06 : Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 : Electronic shopping [e-shopping]
• CPC Class Codes: G06T 1/0021 : Image watermarking
• CPC Class Codes: G07F 9/026 : for alarm, monitoring and auditing in vending machines or means for indication, e.g. when empty
• CPC Class Codes: G11B 20/00086 : Circuits for prevention of unauthorised reproduction or copying, e.g. piracy indicating unauthorised use of record carriers in general G11B23/28; scrambling for television signal recording H04N5/913; network architectures or network protocols for network security H04L63/00; cryptographic mechanisms or cryptographic arrangements for secret or secure communication H04L9/00
• CPC Class Codes: G11B 20/00159 : Parental control systems
• CPC Class Codes: G11B 20/00188 : involving measures which result in a restriction to authorised devices recording or reproducing contents to/from a record carrier
• CPC Class Codes: G11B 20/00557 : wherein further management data is encrypted, e.g. sector headers, TOC or the lead-in or lead-out areas
• CPC Class Codes: G11B 20/0071 : involving a purchase action
• CPC Class Codes: G11B 20/00768 : wherein copy control information is used, e.g. for indicating whether a content may be copied freely, no more, once, or never, by setting CGMS, SCMS, or CCI flags
• CPC Class Codes: G11B 2220/216 : Rewritable discs
• CPC Class Codes: G11B 2220/218 : Write-once discs
• CPC Class Codes: G11B 2220/2562 : DVDs [digital versatile discs]; Digital video discs; MMCDs; HDCDs
• CPC Class Codes: G11B 2220/2575 : DVD-RAMs
• CPC Class Codes: G11B 27/031 : Electronic editing of digitised analogue information signals, e.g. audio or video signals
• CPC Class Codes: G11B 27/329 : on a disc [VTOC]
• CPC Class Codes: H04L 12/40104 : Security; Encryption; Content protection cryptographic protocols H04L9/00; protocols for network security H04L63/00
• CPC Class Codes: H04L 12/40117 : Interconnection of audio or video/imaging devices home automation networks H04L12/2803; bitstream network arrangements specially adapted for distribution of digital video signals H04N7/24
• CPC Class Codes: H04L 2209/56 : Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 : Digital right managament [DRM]
• CPC Class Codes: H04L 2463/101 : applying security measures for digital rights management
• CPC Class Codes: H04L 2463/102 : applying security measure for e-commerce
• CPC Class Codes: H04L 2463/103 : applying security measure for protecting copyright
• CPC Class Codes: H04L 63/04 : for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 63/068 : using time-dependent keys, e.g. periodically changing keys cryptographic mechanisms or cryptographic arrangements for controlling usage of secret information H04L9/088
• CPC Class Codes: H04L 63/0823 : using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 : for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 : for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 9/321 : involving a third party or a trusted authority
• CPC Class Codes: H04N 21/2347 : involving video stream encryption
• CPC Class Codes: H04N 21/23476 : by partially encrypting, e.g. encrypting the ending portion of a movie
• CPC Class Codes: H04N 21/235 : Processing of additional data, e.g. scrambling of additional data or processing content descriptors
• CPC Class Codes: H04N 21/2362 : Generation or processing of Service Information [SI]
• CPC Class Codes: H04N 21/2541 : Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/2543 : Billing , e.g. for subscription services payment schemes, architectures or protocols G06Q20/00; e-commerce G06Q30/00; arrangements for billing for the use of broadcast information or broadcast-related information H04H60/21
• CPC Class Codes: H04N 21/2547 : Third Party Billing, e.g. billing of advertiser
• CPC Class Codes: H04N 21/25875 : involving end-user authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; arrangements for secret or secure communication including means for verifying the identity or authority of a user of the system H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4143 : embedded in a Personal Computer [PC]
• CPC Class Codes: H04N 21/4345 : Extraction or processing of SI, e.g. extracting service information from an MPEG stream
• CPC Class Codes: H04N 21/435 : Processing of additional data, e.g. decrypting of additional data, reconstructing software from modules extracted from the transport stream
• CPC Class Codes: H04N 21/4405 : involving video stream decryption
• CPC Class Codes: H04N 21/44204 : Monitoring of content usage, e.g. the number of times a movie has been viewed, copied or the amount which has been watched monitoring of user activities for profile generation for accessing a video database G06F16/739; protecting generic digital content where the protection is independent of the precise nature of the content G06F21/10; arrangements for monitoring the use made of the broadcast services in broadcast systems H04H60/31
• CPC Class Codes: H04N 21/443 : OS processes, e.g. booting an STB, implementing a Java virtual machine in an STB or power management in an STB
• CPC Class Codes: H04N 21/4627 : Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4753 : for user identification, e.g. by entering a PIN or password cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08
• CPC Class Codes: H04N 21/6581 : Reference data, e.g. a movie identifier for ordering a movie or a product identifier in a home shopping application
• CPC Class Codes: H04N 21/8166 : involving executable data, e.g. software arrangements for executing specific programs G06F9/44; broadcasting computer programmes in broadcast systems H04H20/91; involving the movement of software or configuration parameters H04L67/34
• CPC Class Codes: H04N 21/835 : Generation of protective data, e.g. certificates protecting software against unauthorised usage in a vending or licensing environment G06F21/10
• CPC Class Codes: H04N 21/8355 : involving usage data, e.g. number of copies or viewings allowed
• CPC Class Codes: H04N 21/83555 : using a structured language for describing usage rules of the content, e.g. REL
• CPC Class Codes: H04N 21/8358 : involving watermark protecting executable software by watermarking G06F21/16; image watermarking in general G06T1/0021; watermarks inserted in still images for transmission purposes H04N1/32144; inserting watermarks during video coding H04N19/467
• CPC Class Codes: H04N 7/162 : Authorising the user terminal, e.g. by paying; Registering the use of a subscription channel, e.g. billing
• CPC Class Codes: H04N 7/17309 : Transmission or handling of upstream communications
• CPC Class Codes: Y10S 707/99939 : Privileged access

Abstract

An integrated, modular array of administrative and support services are provided for electronic commerce and electronic rights and transaction management. These administrative and support services supply a secure foundation for conducting transaction-related capabilities over electronic networks, and can also be adapted to the specific needs of electronic commerce value chains. In one embodiment a Distributed Commerce Utility having a secure, programmable, distributed architecture provides these administrative and support services. The Distributed Commerce Utility may comprise a number of Commerce Utility Systems. These Commerce Utility Systems provide a web of infrastructure support available to, and reusable by, the entire electronic community and/or many of its participants. Different support functions can be collected together in hierarchical and/or networked relationships to suit various business models or other objectives. Modular support functions can be combined in different arrays to form different Commerce Utility Systems for different design implementations and purposes.

Claims

1. A clearinghouse comprising:

means for registering digital objects and associated permissions, the means for registering including means for assigning at least one identifying number and/or name to the digital objects;

means for providing one or more permissions to one or more users determined to be authorized to use a digital object associated with such one or more permissions, the means for providing being operable to provide at least some of the one or more permissions independently of the digital object associated therewith; and

means for receiving permission information from a remote location and automatically associating the permission information with one or more registered digital objects.

2. The clearinghouse of claim 1, in which the means for providing comprises means for providing different permissions relating to use of a given digital object to different classes of users.

3. The clearinghouse of claim 1, further comprising:

means for updating previously issued permissions.

4. The clearinghouse of claim 1, further comprising:

means for assisting rightsholders in specifying permission information using one or more templates.

5. The clearinghouse of claim 1, further comprising:

means for automatically providing one or more permissions to a user based upon at least one aspect of the user'"'"'s previous usage of a piece of content.

6. The clearinghouse of claim 1, in which the means for registering comprises database management means for storing permissions in one or more databases.

7. The clearinghouse of claim 1, further comprising:

means for issuing reports pertaining to permissions the clearinghouse has distributed.

8. The clearinghouse of claim 1, in which the means for providing comprises means for determining if a user is qualified to receive one or more permissions, the means for determining comprising means for evaluating one or more certificates associated with the user.

9. The clearinghouse of claim 1, in which the means for providing comprises means for determining if a user is qualified to receive one or more permissions, the means for determining comprising means for verifying the user'"'"'s knowledge of a shared secret.

10. The clearinghouse of claim 1, further comprising:

means for negotiating permissions with users.

11. A system comprising:

a secure communications handler operable to facilitating communication with one or more electronic appliances over a telecommunications network;

a database and transaction processor operable to store digital objects and associated permissions in a database, to facilitate the specification of new permissions, to provide permissions to one or more users over the telecommunications network, and to create and distribute reporting information;

an authorization checker; and

a registration processor for registering digital objects and associated permissions.

12. A method comprising:

receiving two or more control sets associated with an electronic work;

receiving one or more distribution controls specifying circumstances under which individual ones of the two or more control sets may be used;

receiving a request from a user of the electronic work for one or more of the control sets;

determining, based at least in part on the one or more distribution controls, whether the user is authorized to receive the requested one or more of the control sets; and

selectively providing the requested one or more of the control sets based on a result of the determining step.

13. The method of claim 12, in which the determining step includes qualifying one or more credentials.

14. The method of claim 12, in which the determining step includes checking a frequency of reissue.

15. The method of claim 12, in which the determining step includes evaluating a measure of a number of controls for the user.

16. The method of claim 12, further comprising:

receiving a modified control set, the modified control set providing a different set of rights than a previously distributed control set; and

automatically distributing the modified control set to one or more users who had received the previously distributed control set.

17. The method of claim 16, in which the one or more users have one or more electronic appliances comprising one or more protected processing environments for securely replacing the previously distributed control set with the modified control set.

18. A method comprising:

receiving a control set associated with an electronic work, the control set specifying one or more permissions relating to usage of the electronic work;

receiving a request from a user of the electronic work for the control set; and

providing the control set to the user.

19. The method of claim 18, further comprising:

determining whether the user is authorized to receive the control set.

20. The method of claim 19, in which the determining step includes evaluating one or more credentials associated with the user.

21. The method of claim 18, in which the one or more permissions include at least one permission selected from the group consisting of:

copying at least part of the electronic work;

modifying at least part of the electronic work;

viewing at least part of the electronic work; and

printing at least part of the electronic work.

22. The method of claim 18, further comprising:

receiving a modified control set; and

automatically distributing the modified control set to the user.

23. The method of claim 22, in which the user has an electronic appliance comprising a protected processing environment operable to securely replace the control set with the modified control set.

24. A method comprising:

receiving a digital object containing protected content;

registering a first control set with a clearinghouse, the first control set comprising one or more controls pertaining to the digital object; and

automatically receiving a second control set from the clearinghouse, the second control set comprising a modified one or more controls pertaining to the digital object.

25. The method of claim 24, further comprising securely replacing the first control set with the second control set.

26. The method of claim 24, in which the protected content comprises a file or software program.

27. The method of claim 24, in which at least one of the modified one or more controls includes at least one permission selected from the group consisting of:

copying at least part of the protected content;

modifying at least part of the protected content;

viewing at least part of the protected content; and

printing at least part of the protected content.

28. The method of claim 27, further comprising:

using tamper-resistant software and/or hardware to make at least one use of the protected content in accordance with the modified one or more controls.

29. The method of claim 28, in which at least one of the modified one or more controls requires possession of a certificate before allowing the at least one use of the protected content, the method further comprising:

requesting the certificate from a certification authority; and

receiving the certificate.

30. The method of claim 29, in which the certificate is configured to expire.

31. The method of claim 29, further comprising:

securely providing identification information to the certification authority.

32. A method comprising:

receiving a digital object containing protected content;

receiving a first control set, the first control set specifying a first one or more permissions with respect to usage of the protected content;

using the protected content in accordance with the first control set;

receiving a second control set, the second control set specifying a second one or more permissions with respect to usage of the protected content, the second control set being an updated version of the first control set; and

using the protected content in accordance with the second control set.

33. The method of claim 32, in which the first control set and the second control set are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.

34. The method of claim 32, in which the first one or more permissions includes at least one permission selected from the group consisting of:

copying at least part of the protected content;

modifying at least part of the protected content;

viewing at least part of the protected content; and

printing at least part of the protected content.

35. The method of claim 32, in which the second control set is received automatically from a clearinghouse.

36. The method of claim 32, in which the second control set is received from a clearinghouse in response to a request.

37. The method of claim 36, in which the request includes one or more certificates.

38. The method of claim 37, in which the step of receiving a second control set is selectively performed based on validity of the one or more certificates.

39. The method of claim 36, in which the request includes one or more shared secret values.

40. The method of claim 32, in which the first control set is configured to expire, and in which the second control set replaces the first control set.

41. The method of claim 32, in which audit information is generated as a result of using the protected content in accordance with the first control set.

42. The method of claim 32, in which audit information is generated as a result of using the protected content in accordance with the second control set.

43. The method of claim 32, in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the method further comprising:

requesting the digital certificate from a certification authority; and

receiving the digital certificate.

44. The method of claim 43, in which the digital certificate is configured to expire.

45. The method of claim 43, further comprising:

securely providing identification information to the certification authority.

46. A method comprising:

receiving a digital property;

receiving a first control set, the first control set specifying a first one or more permissions with respect to usage of the digital property;

determining that an additional one or more permissions are needed to make a desired use of the digital property;

receiving a second control set, the second control set specifying at least the additional one or more permissions; and

making the desired use of the digital property in accordance with the second control set.

47. The method of claim 46, in which the digital property and the first control set are received from a first entity, and in which the second control set is received from a second entity.

48. The method of claim 47, in which the first entity comprises a content publisher, and in which the second entity comprises a clearinghouse.

49. The method of claim 46, in which the first control set and the second control set are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the digital property, the protected processing environment being resistant to tampering by the user.

50. The method of claim 46, in which the first one or more permissions includes at least one permission selected from the group consisting of:

copying at least part of the digital property;

modifying at least part of the digital property;

viewing at least part of the digital property; and

printing at least part of the digital property.

51. The method of claim 46, in which the second control set is received automatically from a clearinghouse.

52. The method of claim 46, in which the second control set is received from a clearinghouse in response to a request.

53. The method of claim 52, in which the request includes one or more certificates.

54. The method of claim 53, in which the step of receiving a second control set is selectively performed based on validity of the one or more certificates.

55. The method of claim 52, in which the request includes one or more shared secret values.

56. The method of claim 46, in which the first control set is configured to expire, and in which the second control set replaces the first control set.

57. The method of claim 46, in which audit information is generated as a result of using the digital property in accordance with at least one of the first control set and the second control set.

58. The method of claim 46, in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the method further comprising:

requesting the digital certificate from a remote entity; and

receiving the digital certificate.

59. The method of claim 58, in which the digital certificate is configured to expire.

60. The method of claim 58, further comprising:

securely providing identification information to the remote entity.

61. A method comprising:

receiving a digital object containing protected content;

receiving a control set, the control set specifying a first one or more permissions with respect to usage of the protected content;

contacting a clearinghouse to obtain an additional one or more permissions pertaining to usage of the protected content;

receiving the additional one or more permissions; and

using the protected content in accordance with the additional one or more permissions.

62. The method of claim 61, in which the first one or more permissions and the additional one or more permissions are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.

63. The method of claim 61, in which the first one or more permissions include a permission to view a limited portion of the protected content.

64. The method of claim 63, in which the additional one or more permissions include a permission to view a larger portion of the protected content than is permitted by the first one or more permissions.

65. The method of claim 63, in which the control set comprises information identifying the clearinghouse.

66. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

obtaining two or more control sets associated with an electronic work;

obtaining one or more distribution controls specifying circumstances under which individual ones of the two or more control sets may be used;

receiving a request from a user of the electronic work for one or more of the control sets;

determining, based at least in part on the one or more distribution controls, whether the user is authorized to receive the requested one or more of the control sets; and

selectively providing the requested one or more of the control sets.

67. The computer-readable medium of claim 66, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of qualifying one or more credentials.

68. The computer-readable medium of claim 66, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:

obtaining a modified control set, the modified control set providing a different set of rights than a previously distributed control set; and

automatically distributing the modified control set to one or more users who had received the previously distributed control set.

69. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

obtaining a control set associated with an electronic work, the control set specifying one or more permissions relating to usage of the electronic work;

receiving a request from a user of the electronic work for the control set; and

providing the control set to the user.

70. The computer-readable medium of claim 69, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:

determining whether the user is authorized to receive the control set.

71. The computer-readable medium of claim 70, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of evaluating one or more credentials associated with the user.

72. The computer-readable medium of claim 69, in which the one or more permissions include at least one permission selected from the group consisting of:

copying at least part of the electronic work;

modifying at least part of the electronic work;

viewing at least part of the electronic work; and

printing at least part of the electronic work.

73. The computer-readable medium of claim 69, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the steps of:

obtaining a modified control set; and

automatically distributing the modified control set to the user.

74. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

obtaining a digital object containing protected content;

registering a first control set with a clearinghouse, the first control set comprising one or more controls pertaining to the digital object; and

automatically obtaining a second control set from the clearinghouse, the second control set comprising a modified one or more controls pertaining to the digital object.

75. The computer-readable medium of claim 74, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of securely replacing the first control set with the second control set.

76. The computer-readable medium of claim 74, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:

using protected content in accordance with the modified one or more controls.

77. The computer-readable medium of claim 74, in which at least one of the modified one or more controls requires possession of a certificate before allowing at least one use of the protected content, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform the steps of:

requesting the certificate from a remote entity; and

obtaining the certificate.

78. The computer-readable medium of claim 77, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:

securely providing identification information to the remote entity.

79. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

obtaining a digital object containing protected content;

obtaining a first control set, the first control set specifying a first one or more permissions with respect to usage of the protected content;

using the protected content in accordance with the first control set;

obtaining a second control set, the second control set specifying a second one or more permissions with respect to usage of the protected content; and

using the protected content in accordance with the second control set.

80. The computer-readable medium of claim 79, in which the first control set and the second control set are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.

81. The computer-readable medium of claim 79, in which the first one or more permissions includes at least one permission selected from the group consisting of:

copying at least part of the protected content;

modifying at least part of the protected content;

viewing at least part of the protected content; and

printing at least part of the protected content.

82. The computer-readable medium of claim 79, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of generating audit information as a result of using the protected content.

83. The computer-readable medium of claim 79, in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform the steps of:

requesting the digital certificate from a certification authority; and

obtaining the digital certificate.

84. The computer-readable medium of claim 83, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:

securely providing identification information to the certification authority.

85. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

receiving a digital property;

receiving a first control set, the first control set specifying a first one or more permissions with respect to usage of the digital property;

determining that an additional one or more permissions are needed to make a desired use of the digital property;

receiving a second control set, the second control set specifying at least the additional one or more permissions; and

making the desired use of the digital property in accordance with the second control set.

86. The computer-readable medium of claim 85, in which the first control set and the second control set are configured to be enforced by a protected processing environment associated with a user of the digital property, the protected processing environment being resistant to tampering by the user.

87. The computer-readable medium of claim 85, in which the first one or more permissions includes at least one permission selected from the group consisting of:

copying at least part of the digital property;

modifying at least part of the digital property;

viewing at least part of the digital property; and

printing at least part of the digital property.

88. The computer-readable medium of claim 85, in which the first control set is configured to expire, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of replacing the first control set with the second control set.

89. The computer-readable medium of claim 85, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of generating audit information as a result of using the digital property in accordance with at least one of the first control set and the second control set.

90. The computer-readable medium of claim 85, in which at least one of the first control set and the second control set requires possession of a digital certificate before allowing a user to exercise at least one permission, the computer-readable medium further including program code that is operable, when executed by the computer system, to cause the computer system to perform steps comprising:

requesting the digital certificate from a remote entity; and

receiving the digital certificate.

91. The computer-readable medium of claim 90, further including program code that is operable, when executed by the computer system, to cause the computer system to perform the step of:

securely providing identification information to the remote entity.

92. A computer-readable medium comprising program code, the program code being operable, when executed by a computer system, to cause the computer system to perform steps comprising:

receiving a digital object containing protected content;

receiving a control set, the control set specifying a first one or more permissions with respect to usage of the protected content;

contacting a clearinghouse to obtain an additional one or more permissions pertaining to usage of the protected content;

receiving the additional one or more permissions; and

using the protected content in accordance with the additional one or more permissions.

93. The computer-readable medium of claim 92, in which the first one or more permissions and the additional one or more permissions are configured to be enforced by a protected processing environment running on an electronic appliance operated by a user of the protected content, the protected processing environment being resistant to tampering by the user.

94. The computer-readable medium of claim 92, in which the first one or more permissions include a permission to view a limited portion of the protected content.

95. The computer-readable medium of claim 94, in which the additional one or more permissions include a permission to view a larger portion of the protected content than is permitted by the first one or more permissions.

96. The computer-readable medium of claim 94, in which the control set comprises information identifying the clearinghouse.