Method and Apparatus for Electronic Ticket Processing

• US 20100268649A1
• Filed: 04/17/2009
• Published: 10/21/2010
• Est. Priority Date: 04/17/2009
• Status: Active Application

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Roos, Johan, Catrein, Daniel, Bjorkengren, Ulf
• Application Number:
  US12/425,490
• Publication Number:
  US 20100268649A1
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: G06F 2221/2109 Game systems
• CPC Class Codes: H04L 2463/101 applying security measures for digital rights management
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

This document discloses an advantageous approach to using a digital rights management (DRM) system that is already available to an electronic device, for security and rights management in electronic ticketing transactions. Exploiting the digital rights management system, which may be a pre-existing “standardized” DRM solution, decreases the processing and memory resources needed in an electronic device for implementation of an electronic ticketing application, while advantageously gaining the proven security of established DRM systems.

Claims

1. A method of electronic ticket processing in an electronic device having a digital rights management agent installed therein, said digital rights management agent operating as part of a networked digital rights management system, said method comprising:

receiving a ticket object that includes a ticket key encrypted with a content encryption key according to the digital rights management system;

receiving a rights object compatible with said digital rights management system, and including one or more usage restrictions corresponding to the ticket object and including the content encryption key encrypted with a digital rights management key associated with the digital rights management agent; and

redeeming said ticket object, using at least one ticket agent installed in said electronic device, by;

retrieving said ticket key from the digital rights management agent, subject to the one or more usage restrictions;

communicating with an external agent according to a predefined verification protocol, to verify possession of the ticket key, without exposing the ticket key to the external agent.

2. The method of claim 1, wherein communicating with the external agent to verify possession of the ticket key comprises using a shared secret or an asymmetric key pair to verify possession of the ticket key to the external agent.

3. The method of claim 1, wherein receiving the ticket object comprises receiving a composite ticket object that includes an embedded ticket agent and the ticket key, both protected by the content encryption key, and wherein redeeming said ticket object includes retrieving the embedded ticket agent and the ticket key from the digital rights management agent, and using the embedded ticket agent to communicate with the external agent according to the predefined verification protocol.

4. The method of claim 3, further comprising using a master ticket agent installed at the electronic device to retrieve the embedded ticket agent and the ticket key from the digital rights management agent, install or otherwise initiate the embedded ticket agent, and provide the embedded ticket agent with a reference to the ticket key, for use in redeeming the ticket key by the embedded ticket agent, while retaining the ticket key securely under control of the master ticket agent.

5. The method of claim 1, wherein receiving the ticket object comprises receiving a content file that is tagged or otherwise packaged according to a predefined digital rights management format, for handling as a rights-managed object by the digital rights management agent.

6. The method of claim 1, wherein the external agent comprises an electronic verification system, and wherein redeeming the ticket object comprises generating verification information for the electronic verification system and verifying counter-verification information from the electronic verifier system, based on using the ticket key as a shared secret between the ticket agent and the electronic verification system.

7. The method of claim 6, further comprising sending the verification information to the electronic verification system and receiving the counter-verification information from the electronic verification system, via a local communication interface between the electronic device and the electronic verification system.

8. The method of claim 6, wherein redeeming the ticket object includes the ticket agent receiving a ticket identifier from the electronic verification, the ticket identifier corresponding to the ticket object, the ticket agent passing the ticket identifier to the digital rights management agent and receiving the ticket key and an encryption algorithm in return, and the ticket agent using the ticket key and the encryption algorithm to generate the verification information for the electronic verification system.

9. The method of claim 1, wherein the external agent comprises a human operator, and wherein redeeming the ticket object comprises the ticket agent receiving a ticket identifier via a user interface of the electronic device, the ticket agent passing the ticket identifier to the digital rights management agent and receiving the ticket key and ticket rendering information in return, and the ticket agent rendering ticket information in a human-verifiable format via the user interface of the electronic device, in accordance with the rendering information.

10. An electronic device having a digital rights management agent installed therein, said digital rights management agent operating as part of a networked digital rights management system, said electronic device comprising:

one or more communication interfaces for receiving a ticket object that includes a ticket key encrypted with a content encryption key according to the digital rights management system, and for receiving a rights object compatible with said digital rights management system, and including one or more usage restrictions corresponding to the ticket object and including the content encryption key encrypted with a digital rights management key associated with the digital rights management agent;

memory for storing the ticket object and the rights object; and

one or more processing circuits operatively associated with the one or more communication interfaces and the memory, and configured to implement the digital rights management agent, and to implement at least one ticket agent that is configured to redeem the ticket object based on;

retrieving the ticket key from the digital rights management agent, subject to the one or more usage restrictions; and

communicating with an external agent according to a predefined verification protocol, to verify possession of the ticket key, without exposing the ticket key to the external agent.

11. The electronic device of claim 10, wherein the ticket agent is configured to use a shared secret or an asymmetric key pair to verify possession of the ticket key to the external agent.

12. The electronic device of claim 10, wherein the ticket object comprises a composite ticket object that includes an embedded ticket agent and the ticket key, both protected by the content encryption key, and wherein the one or more processing circuits are configured to redeem said ticket object by retrieving the embedded ticket agent and the ticket key from the digital rights management agent, and using the embedded ticket agent to communicate with the external agent according to the predefined verification protocol.

13. The electronic device of claim 12, wherein the one or more processing circuits are configured to implement a master ticket agent, and wherein the master ticket agent is configured to retrieve the embedded ticket agent and the ticket key from the digital rights management agent, install or otherwise initiate the embedded ticket agent, and provide the embedded ticket agent with a reference to the ticket key, for use in redeeming the ticket key by the embedded ticket agent, while retaining the ticket key securely under control of the master ticket agent.

14. The electronic device of claim 10, wherein the ticket object comprises a content file that is tagged or otherwise packaged according to a predefined digital rights management format, for handling as a rights-managed object by the digital rights management agent.

15. The electronic device of claim 10, wherein the external agent comprises an electronic verification system, and wherein the ticket agent is configured to redeem the ticket object by generating verification information for the electronic verification system and verifying counter-verification information from the electronic verifier system, based on using the ticket key as a shared secret between the ticket agent and the electronic verification system.

16. The electronic device of claim 15, wherein the ticket agent is configured to use a local communication interface, as one of the one or more communication interfaces, for sending the verification information to the electronic verification system and receiving the counter-verification information from the electronic verification system.

17. The electronic device of claim 15, wherein the ticket agent is configured to redeem the ticket object responsive to receiving a ticket identifier from the electronic verification, the ticket identifier corresponding to the ticket object, and wherein the ticket agent is configured to pass the ticket identifier to the digital rights management agent and receive the ticket key and an encryption algorithm in return, and to use the ticket key and the encryption algorithm to generate the verification information for the electronic verification system.

18. The electronic device of claim 10, wherein the external agent comprises a human operator, and wherein the ticket agent is configured to redeem the ticket object responsive to receiving a ticket identifier via a user interface of the electronic device, the ticket identifier corresponding to the ticket object, and wherein the ticket agent is configured to pass the ticket identifier to the digital rights management agent and receive the ticket key and ticket rendering information in return, and to render ticket information in a human-verifiable format via the user interface of the electronic device, in accordance with the rendering information.