DEVICE AND METHOD FOR DIGITAL RIGHT MANAGEMENT

• US 20100268950A1
• Filed: 12/17/2008
• Published: 10/21/2010
• Est. Priority Date: 12/20/2007
• Status: Active Grant

• Current Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Original Assignee: Koninklijke Philips Electronics N.V. (Koninklijke Philips N.V.)
• Inventors: Qu, Jin, Ma, Fulong
• Granted Patent: US 8,516,251 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/1011 to devices
• CPC Class Codes: H04N 21/25816 involving client authentication restricting access to computer systems by authenticating users using a predetermined code G06F21/33; cryptographic authentication protocols H04L9/32; networks authentication protocols H04L63/08; authentication in wireless network security H04W12/06
• CPC Class Codes: H04N 21/4627 Rights management associated to the content security in data switching network management H04L41/28; security management or policies for network security H04L63/20; access security in wireless networks H04W12/08
• CPC Class Codes: H04N 21/8193 dedicated tools, e.g. video decoder software or IPMP tool
• CPC Class Codes: H04N 21/8355 involving usage data, e.g. number of copies or viewings allowed

Abstract

The present invention provides a method for authenticating the copy right of a device by an offline way, a digital right protection system, and a method for providing digital contents, which mainly includes embedding an authentication agent into the digital content, said authentication agent, instead of the copyright issuer at the server side, authenticates the rendering qualification of the device before rendering the digital content. If the device is a non-compliant device, the authentication agent will not permit the device to render the digital content. The technique of the invention realizes offline digital right management, so it is not restricted by the network condition and can be applied widely in various environments.

Claims

1. A method for providing a digital program (304) authorization, which comprises the steps of:

encoding the digital program (304) to associate said digital program (304) with an authentication agent (301), wherein said authentication agent (301) includes a program code (3012) executable by a device (202) that can render said digital program (304) for authenticating the validity of the device (202); and

providing a digital content (300) including said digital program (304) and said authentication agent (301) to said device (202).

2. The method of claim 1, wherein the digital program (304) is encrypted by a first encryption algorithm, and the decryption key of the first encryption algorithm is encrypted by a second encryption algorithm and stored in the authentication agent (301).

3. The method of claim 2, wherein the program code (3012) is also operable to decrypt the encrypted key (3013) after the validity of the device (202) has passed the authentication so as to obtain the key and send it to a DRM module (2022) in the device (202), and said DRM module then decrypts the encrypted digital program (304) in the digital content (300);

wherein the DRM module (2022) is a Digital Right Management Module pre-installed on the device.

4. The method of claim 3, wherein

the authentication agent (301) further includes a Key Decryption Key for decrypting the encrypted key (3013);

the program code (3012) in the authentication agent (301) is operable to extract the Key Decryption Key from the authentication agent (301) and to decrypt the encrypted key CK (3013) according to a pre-set decryption algorithm corresponding to the second encryption algorithm.

5. The method of claim 3, wherein after obtaining the decoded digital program, the DRM module (2022) controls the rendering of the digital program according to the pre-obtained license (400).

6. The method of claim 5, wherein the license (400) stipulates the right and rules for the device to render the digital content.

7. A method for rendering a digital content on a device (202), which comprises the steps of:

(a) obtaining the digital content (300) from a Service Provider (201), said digital content (300) including a digital program (304) and an authentication agent (301);

(b) running said authentication agent (301) to authenticate the validity of the device;

(c) decrypting the digital program (304) after a successful authentication; and

(d) rendering the decrypted digital program (304).

8. The method of claim 7, wherein the digital program (304) is encrypted by a first encryption algorithm, and the decryption key thereof is embedded into the authentication agent (301) after being encrypted by a second encryption algorithm.

9. The method of claim 7, wherein in step (b) the authentication agent (301) authenticates the validity of the device by comparing the ID pre-set in the device and a whitelist or a blacklist embedded into the authentication agent (301).

10. The method of claim 8, wherein step (b) includes a step of calling a Key Decryption Key embedded into the authentication agent (301) to decrypt the encrypted key (3013).

11. The method of claim 8, wherein step (b) includes a step of calling from the device a Key Decryption Key that is pre-stored therein to decrypt the encrypted key (3013).

12. A method for authenticating the validity of the device that renders the digital content, which method comprises:

embedding an authentication agent (301) into the digital content (300) so that when said digital content is led into a device (202), the authentication agent (301) runs and authenticates whether the device (202) has a qualification to render the digital content (300).

13. The method of claim 12, wherein

the digital content (300) includes the digital program (304), and

the authentication agent (301) includes the program code (3012) which is operable to compare and authenticate the identification code of the DRM module (2022) running on device (202).

14. The method of claim 12, wherein

the authentication agent (301) includes a list for comparing with the identification code pre-set in the storage module of the device and/or the identification code pre-set in the DRM module (2022), and

the program code (3012) in the authentication agent (301) is run to compare the identification code of the device to the list so as to determine whether the device and/or the DRM module (2022) thereon are valid.

15. A device for rendering a digital content, which comprises:

an obtaining module for obtaining the digital content (300) from a Service Provider (201), said digital content (300) including a digital program (304) and an authentication agent (301);

a DRM module (2022) for running the authentication agent (301) to authenticate the validity of the device (202) and for decrypting the digital program (304) after a successful authentication; and

a rendering means for rendering the decrypted digital program (304).

16. The device of claim 15, wherein the digital content (300) further includes a content ID (302) and a content digital signature (303) which indicates information like the identity of the digital content issuer (201) and the time and protects the integrity of the data.