System, Device and Method for Interoperability Between Different Digital Rights Management Systems

• US 20080250508A1
• Filed: 04/06/2007
• Published: 10/09/2008
• Est. Priority Date: 04/06/2007
• Status: Active Grant

• Current Assignee: Google Technology Holdings LLC (Alphabet Inc.)
• Original Assignee: General Instrument Corporation (CommScope Holding Company, Inc.)
• Inventors: Montague, Paul, Cooper, Brenton
• Granted Patent: US 8,037,541 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04N 21/2541 Rights Management protecting software against unauthorised usage in a vending or licensing environment G06F21/10; security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

A system, device and method for allowing protected content to be transferred to end user communication devices that support different digital rights management (DRM) formats or schemes than the DRM format of the content provider. The method includes providing a Limited Rights Issuer (LRI) that issues content and associated digital rights to one or more of the end user devices within a domain defined by a Domain Authority with which the LRI has registered. The Limited Rights Issuer also translates content and associated digital rights information from the DRM format of an upstream DRM system to the DRM format of a downstream DRM system, which includes the end user devices within the defined domain. The system allows select end user devices to enjoy interoperability of content protected under different DRM schemes, while allowing content providers to still maintain a suitable level of DRM protection for their content.

Claims

1. A method for processing content protected according to a first digital rights management format for access by at least one end user communication device configured to support a second digital rights management format, comprising the steps of:

providing a Domain Authority configured for defining and managing a domain of end user communication devices allowed to share at least a portion of the protected content;

providing a Limited Rights Issuer configured for receiving content and digital rights management information in the first digital rights management format and for issuing content and digital rights management information in the second digital rights management format to at least one end user communication device within the domain of end user communication devices defined by the Domain Authority;

registering the Limited Rights Issuer with the Domain Authority in such a way that the Limited Rights Issuer is associated with the defined domain and issued a domain key, wherein the domain key allows the Limited Rights Issuer to generate at least a portion of the digital rights management information that allows end user communication devices within the domain to access protected content;

translating content and digital rights management information in the first digital rights management format received by the Limited Rights Issuer to content and digital rights management information in the second digital rights management format;

installing translated content and digital rights management information in the second digital rights management format from the Limited Rights Issuer to at least one end user communication device within the defined domain; and

accessing the translated content in the second digital rights management format using the digital rights management information in the second digital rights management format by at least one end user communication device on which the translated content and associated digital rights management information was installed.

2. The method as recited in claim 1, wherein the translating step includes the Limited Rights Issuer generating translated digital rights management information in the second digital rights management format that is equivalent to the received digital rights management information in the first digital rights management format, and the Limited Rights Issuer transferring the translated content and the translated digital rights management information in the second digital rights management format to the end user communication device.

3. The method as recited in claim 1, further comprising the step of, prior to installing the translated content, validating the authenticity of the digital rights management information in the second digital rights management format received from the Limited Rights Issuer using an authenticity certificate generated by the Limited Rights Issuer.

4. The method as recited in claim 1, wherein the Limited Rights Issuer generates an authenticity certificate identifying the defined domain associated with the Limited Rights Issuer, and wherein the method further comprises the step of, prior to installing the translated content, verifying against the authenticity certificate generated by the Limited Rights Issuer that the digital rights management information in the second digital rights management format received from the Limited Rights Issuer has been issued for the defined domain associated with the Limited Rights Issuer.

5. The method as recited in claim 1, wherein the registering step includes the Limited Rights Issuer initiating a registration protocol with the Domain Authority, the Limited Rights Issuer initiating a request to join the domain defined by the Domain Authority if the Limited Rights Issuer is allowed to register with the Domain Authority, and the Domain Authority issuing a domain key to the Limited Rights Issuer if the Limited Rights Issuer is allowed to join the domain.

6. The method as recited in claim 1, further comprising the step of at least one end user communication device requesting the Domain Authority that the end user communication device be allowed to join the domain of end user communication devices allowed to share at least a portion of the protected content.

7. The method as recited in claim 1, further comprising the step of provisioning the Limited Rights Issuer with provisioning information, wherein the provisioning information includes digital rights management information that allows an end user communication device to access content protected by the digital rights management information.

8. The method as recited in claim 6, wherein the provisioning step is performed by a Remote Authority coupled to the Limited Rights Issuer.

9. The method as recited in claim 1, further comprising the step of provisioning the Domain Authority with domain membership information, wherein the domain membership information includes which end user communication devices are allowed to share at least a portion of the protected content.

10. The method as recited in claim 8, wherein the provisioning step is performed by a Remote Authority coupled to the Domain Authority.

11. A method for accessing protected content issued from an upstream digital rights management system in a first digital rights management format by at least one end user communication device in a downstream digital rights management system and configured to support a second digital rights management format, comprising the steps of:

receiving, by the end user communication device, content and digital rights management information that has been translated by a Limited Rights Issuer from the first digital rights management format to the second digital rights management format;

receiving, by the end user communication device, an authenticity certificate from the Limited Rights Issuer, wherein the authenticity certificate is signed by the Limited Rights Issuer;

validating the authenticity of the received translated digital rights management information in the second digital rights format using the received authenticity certificate;

if the authenticity of the received translated digital rights management information in the second digital rights format is validated, installing the received translated digital rights management information in the second digital rights format; and

accessing the received content in the second digital rights format using the installed translated digital rights management information in the second digital rights format.

12. The method as recited in claim 11, further comprising the step of the end user communication device requesting a Domain Authority to allow the end user communication device to join a domain defined by the Domain Authority, wherein the Limited Rights Issuer is registered with the domain in such a way that the Limited Rights Issuer is allowed to transfer content and associated digital rights management information to end user communication devices within the domain.

13. The method as recited in claim 11, wherein the digital rights management information received by the end user communication device includes a domain license, and wherein the validating step includes validating the domain license using the authenticity certificate received from the Limited Rights Issuer.

14. The method as recited in claim 11, wherein the authenticity certificate identifying a defined domain of end user communication devices associated with the Limited Rights Issuer, and wherein the validating step includes verifying against the authenticity certificate that the received digital rights management information in the second digital rights management format has been issued for the defined domain associated with the Limited Rights Issuer.

15. The method as recited in claim 11, further comprising the step of the end user communication device sharing the translated content and digital rights management information with at least one other end user communication device in the domain defined by the Domain Authority.

16. A Limited Rights Issuance device for providing content protected according to a first digital rights management (DRM) format to at least one end user communication device configured to support a second digital rights management format, comprising:

a processor configured to register the device with a Domain Authority in such a way that the device is associated with a domain defined by the Domain Authority of at least one end user communication device in a downstream digital rights management system;

a DRM agent coupled to the processor for receiving content and digital rights management information in the first digital rights management format from an upstream digital rights management system and transferring such information to the controller; and

a translator coupled to the controller for translating, in response to the processor registering the device with the Domain Authority, at least a portion of the content and digital rights management information in the first digital rights management format to content and digital rights management information in the second digital rights management format to produce translated content and digital rights management information,

wherein the translated content and digital rights management information is formatted in such a way that it accessible by at least one end user communication device within the domain of end user communication devices defined by the Domain Authority,

wherein the device is configured to install the translated content and digital rights management information to at least one end user communication device within the domain defined by the Domain Authority in response to a request by the end user communication device for access to the translated content and digital rights management information.

17. The device as recited in claim 16, wherein the device is configured to provide validation information for at least a portion of the digital rights management information transferred from the device to a first end user communication device, in response to a validation request by the first end user communication device.

18. The device as recited in claim 16, wherein the device is configured to register the device with the Domain Authority by initiating a registration protocol with the Domain Authority, and wherein the device is configured to receive a domain key from the Domain Authority if the device is allowed to join the domain defined by the Domain Authority.

19. The device as recited in claim 16, wherein the device is configured to be provisioned with provisioning information by a Remote Authority coupled to the device, wherein the provisioning information includes digital rights management information that allows an end user communication device to access content protected by the digital rights management information.

20. The device as recited in claim 16, wherein the end user communication device is selected from the group consisting of a signal converter box, a signal decoder box, a digital video recorder, a digital video disk recorder, a personal video recorder device, a home media server, a digital video server, a residential gateway, a video receiver, a computer, a cellular telephone, a smart telephone, a personal digital assistant (PDA), a digital music player, a portable video player, a wireless handheld device, a digital camera, a mobile communication device, a laptop personal computer (PC), a notebook PC and a mobile computing device.