EXTENSIBLE MEDIA RIGHTS

• US 20100280954A1
• Filed: 07/13/2010
• Published: 11/04/2010
• Est. Priority Date: 05/20/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: VanAntwerp, Mark D., Storm, Clifford Paul, Alkove, James M., Oliveira, Eduardo P., Khandelwal, Vikas, Van Dyke, Clifford P.
• Granted Patent: US 8,781,969 B2
• Time in Patent Office: Days
• US Class Current: 705/59
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 2221/2135 Metering
• CPC Class Codes: G06F 2221/2137 Time limited access, e.g. to a computer or data
• CPC Class Codes: G06F 2221/2149 Restricted operating environment
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/08 Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords network architectures or network communication protocols for supporting key management in a packet data network H04L63/06

Abstract

A DRM System. A DRM system comprising a service provider, a CE device coupled to the service provider, and an XMR license disposed upon the CE device.

Claims

1-20. -20. (canceled)

21. A method of accessing rights-protected data on a client receiver:

receiving an extensible media rights (XMR) license, the XMR license having;

a minimum environment restriction object that indicates a minimum version of a revocation list that a device must adhere to before accessing content; and

a device key object comprising encrypted key data, encrypted key length, and a Key Encryption Cipher type, wherein the encrypted key data comprises;

a content key;

an integrity key; and

wherein the combination of the content key and the integrity key associates the device key object with a public key of the device the XMR license is bound to;

parsing the XMR license to extract the minimum environment restriction object;

retrieving the minimum version of the revocation list indicated by the minimum environment restriction object;

comparing the retrieved minimum version of the revocation list with a minimum version of a revocation list stored in a device certificate;

parsing the XMR license to extract the device key object and retrieve the content key and integrity key; and

verifying that the public key of the device is associated with the device key object using the content key and integrity key from the parsed XMR license;

accessing content if the minimum version of the revocation list stored in the device certificate is greater than the retrieved minimum version of the revocation list from the parsed XMR license and the public key of the device is associated with the device key object.

22. The method of claim 21, wherein the minimum environment restriction object also indicates a lowest security level that the device must adhere to before it can access the content.

23. The method of claim 22, wherein the lowest security level is determined by comparing a security value from the XMR license with a security value from a digital certificate that uniquely identifies the device.

24. The method of claim 23, wherein the XMR license is only used to access the content if the security value from the digital certificate is greater than or equal to the security value from the XMR license.

25. The method of claim 21, wherein the minimum environment restriction object indicates a minimum application revocation list version.

26. The method of claim 21, wherein the combination of the content key and the integrity key in the device key object eliminates the need for a public key based signature for the XMR license.

27. The method of claim 21, wherein the device key object indicates a symmetric cipher type that defines how to interpret decrypted key data.

28. The method of claim 21, wherein the minimum environment restriction object is a child object of a Global Policy Container XMR object.

29. The method of claim 28, wherein the device key object is a child object of a Key Material Container XMR object.

30. The method of claim 29, wherein the Global Policy Container XMR object and the Key Material Container XMR object are nested in an outer container object of the XMR license.

31. A digital rights management (DRM) system comprising:

a service provider;

a consumer electronics device coupled to the service provider;

an extensible media rights (XMR) license disposed upon the consumer electronics device, the XMR license comprising multiple XMR objects, including;

a minimum environment restriction object that indicates a minimum version of a revocation list that the consumer electronics device must adhere to before accessing content; and

a device key object comprising encrypted key data, encrypted key length, and a Key Encryption Cipher type, wherein the encrypted key data comprises a combination of a content key and an integrity key, and wherein the combination of the content key and the integrity key associates the device key object with a public key of the consumer electronics device the XMR license is bound to.

32. The data entity of claim 31, wherein the minimum environment restriction object also indicates a lowest security level that the device must adhere to before it can access the content.

33. The data entity of claim 32, wherein the lowest security level is determined by comparing a security value from the XMR license with a security value from a digital certificate that uniquely identifies the consumer electronics device.

34. The data entity of claim 33, wherein the XMR license is only used to access the content if the security value from the digital certificate is greater than or equal to the security value from the XMR license.

35. The data entity of claim 31, wherein the minimum environment restriction object indicates a minimum application revocation list version.

36. The data entity of claim 31, wherein the combination of the content key and the integrity key in the device key object eliminates the need for a public key based signature for the XMR license.

37. The data entity of claim 31, wherein the device key object indicates a symmetric cipher type that defines how to interpret decrypted key data.

38. The data entity of claim 31, wherein the minimum environment restriction object is a child object of a Global Policy Container XMR object.

39. The data entity of claim 31, wherein the device key object is a child object of a Key Material Container XMR object.

40. The data entity of claim 39, wherein the Global Policy Container XMR object and the Key Material Container XMR object are nested in an outer container object of the XMR license.