REVOCATION STATUS CHECKING FOR DIGITAL RIGHTS MANAGMENT

• US 20090164776A1
• Filed: 12/21/2007
• Published: 06/25/2009
• Est. Priority Date: 12/21/2007
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Tuoriniemi, Samuli
• Application Number:
  US11/963,344
• Publication Number:
  US 20090164776A1
• Time in Patent Office: Days
• US Class Current: 713/158
• CPC Class Codes: G06F 21/1076 Revocation
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management data processing systems or methods, specially adapted for commerce, e.g. marketing, shopping, billing, auctions or e-commerce G06Q30/00
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

In accordance with an embodiment, a method, apparatus or tangible computer medium (which stores computer executable code or program code) performs or facilitates: maintaining information identifying a plurality of devices with which interaction has occurred; transmitting the information identifying the plurality of devices to a remote trusted party; receiving from the trusted party status information pertaining to a trustworthiness of the identified devices based on the transmitted information; and controlling subsequent interaction relating to transfer or exchange of access rights for electronic content with one or more devices based on the received status information corresponding to the one or more devices.

Claims

1. A method implemented by a device, comprising:

maintaining information identifying a plurality of devices with which interaction has occurred;

transmitting the information identifying the plurality of devices to a remote trusted party;

receiving from the trusted party status information pertaining to a trustworthiness of the identified devices based on the transmitted information; and

controlling subsequent interaction relating to transfer or exchange of access rights for electronic content with one or more devices based on the received status information corresponding to the one or more devices.

2. The method according to claim 1, wherein the access rights comprises usage rules or permissions associated with the electronic content.

3. The method according to claim 2, wherein the access rights further comprises a content key.

4. The method according to claim 1, wherein the maintaining comprises storing information identifying devices to which a connection was established.

5. The method according to claim 4, wherein the stored information comprises identifiers (ID) of the devices.

6. The method according to claim 4, wherein the stored information identifies devices with which access rights to electronic content has been exchanged.

7. The method according to claim 1, wherein the access rights comprises a Rights Object.

8. The method according to claim 1, wherein the controlling controls interaction with one or more devices to establish a trusted or non-trusted network according to the status information.

9. The method according to claim 1, wherein the status information includes revocation status of the one or more identified device.

10. The method according to claim 1, wherein the controlling comprises:

checking a status of a device from the status information; and

controlling access to the access rights by the device according to the checked status.

11. The method according to claim 10, wherein access to the access rights is prohibited if the status information corresponding to the device reflects untrustworthiness.

12. The method according to claim 10, wherein access to the access rights is allowed if the status information corresponding to the device reflects trustworthiness.

13. The method according to claim 1, wherein the trusted party is an issuer of access rights to electronic content.

14. The method according to claim 13, wherein the issuer of access rights is a Rights Issuer.

15. The method according to claim 1, further comprising exchanging status information with the device.

16. The method according to claim 1, further comprising establishing trusted or non-trusted networks with other devices based on exchange of status information with the other devices.

17. The method according to claim 1, wherein the status information comprises a customized list(s) of trustworthy and/or untrustworthy devices from those identified in the transmitted information.

18. The method according to claim 1, wherein the status information is generated by the trusted party from information gathered through Online Certificate Status Protocol (OCSP).

19. The method according to claim 1, wherein the maintained information is transmitted to the trusted party when requesting therefrom access rights to a protected electronic content.

20. The method according to claim 1, wherein the status information includes a digital signature of the trusted entity.

21. The method according to claim 1, wherein the device implementing the method of claim 1 comprises a communications device.

22. The method according to claim 1, wherein the device implementing the method of claim 1, comprises a secure removable media.

23. An apparatus, comprising:

communications interface(s) for receiving and transmitting information; and

one or more processors executing computer executable code to facilitate control of the following operations;

maintaining information identifying a plurality of devices with which interaction has occurred;

transmitting the information identifying the plurality of devices to a remote trusted party;

receiving from the trusted party status information pertaining to a trustworthiness of the identified devices based on the transmitted information; and

controlling subsequent interaction relating to transfer or exchange of access rights for electronic content with one or more devices based on the received status information corresponding to the one or more devices.

24. A tangible computer medium having computer executable code which when executed by a computer performs the following method comprising:

maintaining information identifying a plurality of devices with which interaction has occurred;

transmitting the information identifying the plurality of devices to a remote trusted party;

receiving from the trusted party status information pertaining to a trustworthiness of the identified devices based on the transmitted information; and

controlling subsequent interaction relating to transfer or exchange of access rights for electronic content with one or more devices based on the received status information corresponding to the one or more devices.

25. A method comprising:

receiving from a device information identifying devices with which interaction has occurred with the communications device;

generating status information as to the trustworthiness of the identified devices based on the received information; and

transmitting the status information to the device.

26. The method according to claim 25, wherein the generating operation comprises:

requesting and receiving information on a trustworthiness of the identified devices from one or more trusted third parties; and

creating status information from the information received from the one or more trusted third parties.

27. The method according to claim 26, wherein the requesting employs Online Certificate Status Protocol (OCSP).

28. The method according to claim 26, wherein the status information comprises a customized list(s) of trustworthy or untrustworthy devices from those identified in the information from the communications device.

29. The method according to claim 25, further comprising:

receiving a request for access rights to protected electronic content from the communications device; and

providing access rights to the device.

30. The method according to claim 29, wherein the access rights is a Rights Object associated with the protected electronic content.

31. The method according to claim 29, wherein the information identifying devices is received from the device as part of a transaction for access rights.

32. The method according to claim 25, wherein the status information includes a digital signature of a trusted entity transmitting the status information to the device.

33. The method according to claim 25, wherein the status information comprises revocation status for the identified devices.

34. An apparatus, comprising:

communications interface(s) for receiving and transmitting information; and

one or more processors executing computer executable code to facilitate control of the following operations;

receiving from a device information identifying devices with which interaction has occurred with the communications device;

generating status information as to the trustworthiness of the identified devices based on the received information; and

transmitting the status information to the device.

35. A tangible computer medium having computer executable code which when executed by a computer performs the following method comprising:

receiving from a device information identifying devices with which interaction has occurred with the communications device;

generating status information as to the trustworthiness of the identified devices based on the received information; and

transmitting the status information to the device.