Authorization System and Method

• US 20090013385A1
• Filed: 03/07/2006
• Published: 01/08/2009
• Est. Priority Date: 03/08/2005
• Status: Abandoned Application

• Current Assignee: Inator Kb
• Original Assignee: Inator Kb
• Inventors: Olczak, Dominika
• Application Number:
  US11/886,040
• Publication Number:
  US 20090013385A1
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/32 including means for verifying the identity or authority of a user of the system or for message authentication, e.g. authorization, entity authentication, data integrity or data verification, non-repudiation, key authentication or verification of credentials

Abstract

An authorization system and a method for the protection of digital content and subscriber integrity in a digital content distribution system. At least one subscriber management system is arranged to maintain subscriber identification data. A subscriber authorization system arranged to maintain subscriber entitlement data separately from the subscriber identification data. The subscriber management system is arranged to identify a subscriber upon receipt of a request by the subscriber to extract digital content, and to generate an order to the subscriber authorization system to entitle the subscriber to access to the requested digital content. The subscriber authorization system is arranged to, upon receipt of such an order, verify the subscribers entitlement to access to the requested digital content and if verified transmit to a system client associated with the subscriber an entitlement to access the requested digital content.

Claims

1. An authorization system for the protection of digital content and subscriber integrity in a digital content distribution system, the authorization system comprising:

at least one subscriber management system arranged to maintain subscriber identification data; and

a subscriber authorization system arranged to maintain subscriber entitlement data separately from the subscriber identification data,

the subscriber management system being arranged to identify a subscriber upon receipt of a request by said subscriber to extract digital content, and to generate an order to the subscriber authorization system to entitle the subscriber to access to the requested digital content; and

the subscriber authorization system being arranged to, upon receipt of such an order, verify the subscribers entitlement to access to the requested digital content and if verified transmit to a system client associated with the subscriber an entitlement to access the requested digital content.

2. The authorization system according to claim 1, wherein the subscriber entitlement data is maintained by the subscriber authorization system in fragmented form.

3. The authorization system according to claim 2, wherein keys to the fragmented subscriber entitlement data are maintained by the subscriber management system.

4. The authorization system according to claim 3, wherein the order to the subscriber authorization system to entitle the subscriber to access to the requested digital content contains the keys to the fragmented subscriber entitlement data.

5. The authorization system according to claim 4, wherein the subscriber authorization system is arranged to verify the subscribers entitlement to access to the requested digital content using the keys.

6. The authorization system according to claim 1, wherein metadata associated with the subscriber identification data are maintained by the subscriber management system.

7. The authorization system according to claim 6, further comprising:

a matching module arranged to match the entitlement information to the corresponding metadata and subscriber identification data for enabling presentation to a system client associated with the subscriber of personal subscription information.

8. The authorization system according to claim 7, wherein the subscriber entitlement data is arranged to comprise medical prescription data whereby the personal subscription information comprises personal medical prescription information.

9. The authorization system according to claim 1, further comprising:

an entitlement history functionality arranged to keep track of expired entitlements for a predetermined amount of time.

10. A method for the protection of digital content and subscriber integrity in a digital content distribution system, the method comprising:

arranging at least one subscriber management system to maintain subscriber identification data; and

arranging a subscriber authorization system to maintain subscriber entitlement data separately from the subscriber identification data,

arranging the subscriber management system to identify a subscriber upon receipt of a request by said subscriber to extract digital content, and generate an order to the subscriber authorization system to entitle the subscriber to access to the requested digital content; and

arranging the subscriber authorization system to, upon receipt of such an order, verify the subscribers entitlement to access to the requested digital content and if verified transmit to a system client associated with the subscriber an entitlement to access the requested digital content.