Trusted License Removal in a Content Protection System or the Like

• US 20120036562A1
• Filed: 10/14/2011
• Published: 02/09/2012
• Est. Priority Date: 04/23/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Cutter, Benjamin Brooks, Evans, Brian P., Strom, Clifford P., Khandelwal, Vikas
• Granted Patent: US 8,438,114 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/105 Arrangements for software license management or administration, e.g. for managing licenses at corporate level
• CPC Class Codes: G06F 21/109 by using specially-adapted hardware at the client
• CPC Class Codes: G06F 2221/2103 Challenge-response
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/603 Digital right managament [DRM]
• CPC Class Codes: H04L 2209/605 Copy protection
• CPC Class Codes: H04L 9/3271 using challenge-response

Abstract

A digital license includes an identification of a removal service that can authorize removing such license. A client selects the license to be removed and the service, constructs a challenge including therein a challenge license identification block (LIB) identifying the license to be removed, and sends the challenge to the service. The service receives the challenge, stores at least a portion of the challenge in a database, constructs a response corresponding to the challenge and including therein a response LIB identifying the license to be removed and an identification of the service, and sends the response to the client. The client receives the response, employs the response LIB from the response to identify the license to be removed, and removes the identified license upon confirming that the identification of the service in the identified license matches the identification of the service in the response.

Claims

1. A computer-implemented method of removing a digital license from a client computing device, the method comprising:

identifying a public key of a server based on information contained in the digital license;

sending a challenge to the server, the challenge based on an identification of the digital license and a transaction ID, the transaction ID being independent of the client computing device, the digital license, or licensed content;

receiving a response from the server corresponding to the challenge, the response comprising the identification of the digital license, the transaction ID, and the public key; and

removing the identified digital license upon confirmation that the transaction ID in the response matches the transaction ID in the challenge and that the public key in the response matches the identified public key.

2. The method of claim 1, wherein at least a portion of the challenge is stored in a database.

3. The method of claim 2, wherein the database is accessible to at least one other server.

4. The method of claim 1 comprising constructing an acknowledgement comprising the transaction ID from the response and sending the acknowledgement to the server.

5. The method of claim 4 comprising instructing the server to confirm that the transaction ID in the acknowledgement matches the transaction ID in the response and to note in a database that the response was acknowledged.

6. The method of claim 1, wherein the challenge further comprises an identification of the client computing device.

7. The method of claim 1, wherein the transaction ID in the response is independent of the client computing device, the digital license, or licensed content.

8. The method of claim 1, wherein the response is in a form different than the form of the challenge.

9. The method of claim 1, wherein the response is in a form substantially identical to the form of the challenge.

10. The method of claim 1, wherein the server further comprises computing logic adapted to coordinate removal of digital licenses from the client.

11. A computer readable storage medium for removing a license from a client device, bearing computer-readable instructions that, when executed on a computing device at least cause the computing device to:

identify a public key of a service based on information contained in the license;

send a challenge to the service, the challenge based on an identification of the license and a transaction ID, the transaction ID being independent of the client device, the digital license, or licensed content;

receive a response from the service corresponding to the challenge, the response comprising the identification of the license, the transaction ID, and the public key; and

remove the identified license upon confirmation that the transaction ID in the response matches the transaction ID in the challenge and that the public key in the response matches the identified public key.

12. The computer readable storage medium of claim 11 comprising instructions when executed on the computing device cause the computing device to store at least a portion of the challenge in a database.

13. The computer readable storage medium of claim 11 comprising instructions when executed on the computing device cause the computing device to construct an acknowledgement comprising the transaction ID from the response and to send the acknowledgement to the service.

14. The computer readable storage medium of claim 13 comprising instructions when executed on the computing device cause the computing device to instruct the service to confirm that the transaction ID in the acknowledgement matches the transaction ID in the response and to note in a database that the response was acknowledged.

15. The computer readable storage medium of claim 11, wherein the challenge comprises an identification of the client device, and wherein the transaction ID in the response is independent of the client device, the license, or licensed content.

16. A system for removing a license from a client computing device, comprising:

a processor; and

a memory communicatively coupled to the processor when the system is operational, the memory bearing processor instructions that, when executed on the processor, cause the system to at least;

identify a public key of a remote computer based on information contained in the license;

send a request to the remote computer, the request based on an identification of the license and a transaction ID, the transaction ID being independent of the client computing device, the license, or licensed content;

receive an authorization from the remote computer corresponding to the request, the authorization comprising the identification of the license, the transaction ID, and the public key; and

remove the identified license upon confirmation that the transaction ID in the authorization matches the transaction ID in the request and that the public key in the authorization matches the identified public key.

17. The system of claim 16, wherein at least a portion of the request is stored in a database.

18. The system of claim 16 comprising constructing an acknowledgement comprising the transaction ID from the authorization and sending the acknowledgement to the remote computer.

19. The system of claim 18 comprising instructing the remote computer to confirm that the transaction ID in the acknowledgement matches the transaction ID in the authorization and to note in a database that the authorization was acknowledged.

20. The system of claim 16, wherein the request comprises an identification of the client computing device, and wherein the transaction ID in the authorization is independent of the client computing device, the license, or licensed content.