Systems and Methods for Managing and Protecting Electronic Content and Applications

• US 20100223672A1
• Filed: 03/19/2010
• Published: 09/02/2010
• Est. Priority Date: 06/09/2000
• Status: Active Grant

• Current Assignee: PLS IV, LLC (Pretium Partners, LLC)
• Original Assignee: Intertrust Technologies Corporation (Fidelio Acquisition Co LLC)
• Inventors: Landsman, Richard A., Rudd, James M., Swenson, Eric J., Maher, David P.
• Granted Patent: US 8,931,106 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/121 Restricting unauthorised execution of programs
• CPC Class Codes: G06F 21/6209 to a single file or object, e.g. in a secure envelope, encrypted and accessed using a key, or with access control rules appended to the object itself
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G16H 20/10 relating to drugs or medications, e.g. for ensuring correct administration to patients

Abstract

Systems and methods are disclosed for managing and protecting electronic content and applications. Applications, content, and/or users can be given credentials by one or more credentialing authorities upon satisfaction of a set of requirements. Rights management software/hardware is used to attach and detect these credentials, and to enforce rules that indicate how content and applications may be used if certain credentials are present or absent. In one embodiment an application may condition access to a piece of electronic content upon the content'"'"'s possession of a credential from a first entity, while the content may condition access upon the application'"'"'s possession of a credential from a second entity and/or the user'"'"'s possession of a credential from a third entity. Use of credentials in this manner enables a wide variety of relatively complex and flexible control arrangements to be put in place and enforced with relatively simple rights management technology.

Claims

1. A method for managing the use of electronic content at a computing device, the method including:

executing a rendering application on the computing device, the rendering application being associated with at least a first digital certificate;

requesting, through a rights management engine executing on the computing device, permission for the rendering application to render a piece of electronic content, the piece of electronic content being encrypted and associated with at least a second digital certificate and at least a first electronic rule, wherein the first electronic rule includes;

data specifying one or more conditions associated with rendering the piece of electronic content, the one or more conditions including a condition that the piece of electronic content be rendered by a rendering application associated with the first digital certificate;

determining, using the rights management engine, whether the one or more conditions specified in at least the first electronic rule have been satisfied;

decrypting the piece of electronic content; and

rendering the decrypted piece of electronic content using the rendering application.

2. A method as in claim 1, wherein the first digital certificate is generated by a first entity, and the second digital certificate is generated by a second entity different from the first entity.

3. A method as in claim 2, wherein the first entity comprises an association of one or more content providers, and the first digital certificate is associated with the rendering application if the rendering application meets certain predefined criteria set by the association.

4. A method as in claim 3, wherein the second entity comprises an entity concerned with controlling the nature of the electronic content rendered by the rendering application, and the second digital certificate is associated with the piece of electronic content if the piece of electronic content meets certain predefined standards.

5. A method as in claim 4, wherein the second entity comprises an entity that determines whether content is appropriate for particular individuals, and the second digital certificate indicates that the piece of electronic content is deemed to be appropriate for particular individuals.

6. A method as in claim 1, wherein the rendering program is associated with at least a third digital certificate and the rights management engine is associated with at least a second electronic rule, the second electronic rule including data specifying one or more conditions associated with rendering the piece of electronic content, the one or more conditions including a condition that the piece of electronic content may be rendered by a rendering application associated with the third digital certificate.

7. The method of claim 1, further comprising:

logging in to the rights management engine using a login.

8. The method of claim 7, wherein the login comprises a password, a smartcard, or biometric identification.

9. The method of claim 1, wherein the piece of electronic content has one or more associated credentials providing information regarding the origin of the piece of electronic content.

10. The method of claim 9, wherein at least one of the rendering application or the rights management engine is configured to determine if the one or more credentials are associated with the piece of electronic content.

11. The method of claim 1, wherein the piece of electronic content, the first electronic rule, and the second digital certificate are packaged together in a secure container.

12. The method of claim 1, wherein the first electronic rule and the second digital certificate are sent to the computing device separately from the piece of electronic content.

13. A computer readable storage medium storing instructions that, when executed by a computing device, cause the computing device to perform a method comprising:

executing a rendering application on the computing device, the rendering application being associated with at least a first digital certificate and at least a first electronic rule;

requesting, through a rights management engine executing on the computing device, permission for the rendering application to render a piece of electronic content, the piece of electronic content being encrypted and associated with at least a second digital certificate and at least a first electronic rule, wherein the first electronic rule includes;

data specifying one or more conditions associated with rendering the piece of electronic content, the one or more conditions including a condition that the piece of electronic content be rendered by a rendering application associated with the first digital certificate;

determining whether the one or more conditions specified in the at least first electronic rule have been satisfied;

decrypting the piece of electronic content; and

rendering the decrypted piece of electronic content using the rendering application.