Managing Digital Rights in a Member-Based Domain Architecture

• US 20080256646A1
• Filed: 04/12/2007
• Published: 10/16/2008
• Est. Priority Date: 04/12/2007
• Status: Abandoned Application

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Oney, Adrian J., Strom, Clifford P., Lau, Kevin, Dubhashi, Kedarnath A., Schnell, Patrik, Burns, Quintin S., Gada, Milan M., Brooks Cutter, Benjamin
• Application Number:
  US11/734,704
• Publication Number:
  US 20080256646A1
• Time in Patent Office: Days
• US Class Current: 726/29
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 9/0825 using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates

Abstract

Techniques enable seamless movement and consumption of licensed digital content amongst multiple devices. In some embodiments, these techniques allow establishment of a domain capable of having multiple member devices. Each member device of the domain typically comprises a content-consuming device such as a personal computer, a portable media player, or the like. These techniques enable a license associated with digital content to bind to a domain rather than an individual device. As such, each member device of the domain may contain a domain identity and, with the identity, may consume the content with use of the license and in accordance with policy described in the license. These tools may also enable a member device to join multiple domains and to contain an identification of each of these multiple domains.

Claims

1. A method comprising:

establishing a domain having multiple member devices;

receiving, at a first member device of the domain, digital content and a license that is bound to the domain and that defines rights or restrictions by which member devices of the domain are allowed to consume the digital content; and

providing the digital content and the license to a second member device of the domain for consumption, such that the second member device is allowed to consume the digital content with use of the license bound to the domain and according to the rights or restrictions defined by the license.

2. A method as recited in claim 1, wherein the domain comprises at least two content-consuming devices owned by an individual, and wherein the first member device is a personal computer and the second member device is a portable media player.

3. A method as recited in claim 1, wherein the domain comprises substantially all of a service provider'"'"'s registered clients, and wherein the first member device is a registered content-consuming device of a first user and the second member device is a registered content-consuming device of a second user.

4. A method as recited in claim 1, wherein the domain comprises substantially all portable media players of a certain make and model, and wherein the first member device is a portable media player of the certain make and model owned by a first user and the second member device is a portable media player of the certain make and model owned by a second user.

5. A method as recited in claim 1, further comprising sending a request to join the domain, from the first member device to a domain controller responsible for granting membership of the domain.

6. A method as recited in claim 1, further comprising sending a request, from the second member device, to join the domain to a domain controller responsible for granting membership of the domain, the request from the second member device being sent from the second member device directly to the domain controller or from the second member device to the domain controller via the first member device.

7. A method as recited in claim 1, farther comprising receiving, at the first member device, an identifier to enable the first member device to demonstrate membership to the domain to a license server that issues licenses, such that the first member device may receive the license that is bound to the domain.

8. A method as recited in claim 1, wherein the first member device has a domain private key that is specific to the domain, the digital content is encrypted with a content key, and the license contains the content key encrypted by a domain public key that is specific to the domain, and further comprising:

accessing, at the first member device, the content key contained in the license by decrypting the content key with the domain private key; and

accessing, at the first member device, the digital content by decrypting the digital content with the content key, such that the first member device is allowed to consume the digital content according to the rights or restrictions defined by the license.

9. A method as recited in claim 1, further comprising:

receiving, at the first member device, a key identifier to associate the digital content with the license that is bound to the domain;

receiving a license-server location that identifies a license server that issues the license;

determining, based on the key identifier, whether the first member device has the license; and

sending a request for the license to the license server identified by the license-server location if the first member device does not have the license.

10. One or more computer-readable media storing computer-executable instructions that, when executed on one or more processors, performs acts comprising:

receiving, at a member device of a domain capable of having multiple member devices, a license that is bound to the domain and that contains policy controlling how digital content can be consumed by member devices of the domain; and

consuming, at the member device, the digital content according to the policy of the license.

11. One or more computer-readable media as recited in claim 10, wherein the license that is bound to the domain allows the member devices of the domain to consume the digital content according to the policy of the license while disallowing non-member devices of the domain to consume the digital content.

12. One or more computer-readable media as recited in claim 10, wherein the member device is a first member device, and further storing computer-executable instructions that, when executed on the one or more processors, perform an act comprising distributing the license received by the first member device and bound to the domain to a second member device of the domain, such that the second member device is allowed to consume the digital content without acquiring an additional license.

13. One or more computer-readable media as recited in claim 10, further storing computer-executable instructions that, when executed on the one or more processors, perform acts comprising:

requesting to join the domain; and

responsive to the requesting, receiving a membership to the domain.

14. One or more computer-readable media as recited in claim 10, further storing computer-executable instructions that, when executed on the one or more processors, perform acts comprising:

sending, to a domain controller responsible for managing membership of the domain, a command to remove the member device from a database of the domain controller listing members of the domain; and

removing, from the member device, information that identifies the member device as a member of the domain.

15. One or more computer-readable media storing computer-executable instructions that, when executed on one or more processors, performs acts comprising:

creating a license for digital content that specifies rights or restrictions by which the digital content may be consumed;

binding the license to a domain capable of having multiple member devices, such that each member device of the domain is allowed to consume the digital content according to the specified rights or restrictions with use of the license; and

issuing the license to a member device of the domain.

16. One or more computer-readable media as recited in claim 15, wherein the specified rights or restrictions include one or more of the following:

a right to consume the digital content, a right to copy the digital content, a play count that defines how many times the digital content may be consumed, an expiration date that defines when the license expires, and output protections that define restrictions on any right to copy the digital content.

17. One or more computer-readable media as recited in claim 15, further storing computer-executable instructions that, when executed on the one or more processors, perform an act comprising embedding the license within a package that contains the digital content, and wherein the issuing of the license to the member device comprises issuing the package that contains the digital content and the embedded license to the member device.

18. One or more computer-readable media as recited in claim 17, wherein the embedded license is a preview license that specifies one or more portions of the digital content that member devices of the domain are allowed to consume, the one or more portions defining less than all of the digital content.

19. One or more computer-readable media as recited in claim 15, wherein the member device is a first member device and the issuing of the license comprises verifying that the first member device has a domain certificate with a first revision that identifies the first member device as a member device of the domain, and further storing computer-executable instructions that, when executed on the one or more processors, perform acts comprising:

after the issuing of the license to the first member device, discovering that a security breach has occurred such that a first key identified by the first revision and associated with the domain is no longer secure; and

responsive to the discovering, requiring a second member device of the domain to have the domain certificate with a second revision that identifies a second key associated with the domain before issuing the license to the second member device of the domain, the second key being created later in time than the first key.

20. One or more computer-readable media as recited in claim 19, wherein the first and second revisions are timestamps that represent that the second key was created later in time than the first key.